1

It Governance Risk Compliance Manager Jobs (NOW HIRING)

SME IT Governance Manager

Chantilly, VA · On-site +1

$97K - $119K/yr

... risk, and ensuring regulatory compliance. Additionally, this individual will oversee the ... IT governance, including board charter development, strategic roadmap management, and oversight of ...

... managing risk and maintaining compliance standards. Roles and Responsibilities include, but are not limited to : * Support the execution and documentation of IT governance processes, including ...

... Risk & Compliance (GRC) organization is seeking a Senior Governance Lead to drive enterprise IT ... Strong stakeholder management and executive communication skills * Experience with governance ...

... risk minimization. It's responsible for ensuring compliance. The Analyst will review processes ... Knowledge an Agile Project Management environment preferred. * Knowledge of general IT Audit and ...

The ideal candidate will have a mixture of security, risk management, AI governance, and IT compliance skills with a history of managing and delivering complex compliance projects on time and within ...

next page

Showing results 1-20

It Governance Risk Compliance Manager information

What is the difference between It Governance Risk Compliance Manager vs IT Security Analyst?

AspectIT Governance Risk Compliance ManagerIT Security Analyst
CertificationsISO 27001 Lead Implementer, CISA, CISSPCISSP, CompTIA Security+, CEH
Work EnvironmentPolicy development, compliance audits, risk assessmentsSecurity monitoring, incident response, vulnerability testing
Employer & Industry UsageFinancial, healthcare, government sectorsIT firms, cybersecurity companies, corporate IT departments

The IT Governance Risk Compliance Manager focuses on establishing and maintaining compliance frameworks, managing risks, and ensuring organizational policies align with regulations. In contrast, the IT Security Analyst primarily monitors security systems, investigates threats, and implements security measures. Both roles require certifications like CISSP but differ in their core responsibilities and daily tasks within the IT industry.

What is the salary of governance risk compliance?

The salary for an IT Governance, Risk, and Compliance (GRC) Manager typically ranges from $80,000 to $150,000 annually, depending on experience, certifications, and location. Professionals with certifications like CISSP or CISA and strong knowledge of regulatory frameworks may earn higher salaries. The role often requires familiarity with GRC tools and risk assessment methodologies.

What are the key skills and qualifications needed to thrive as an IT Governance Risk Compliance (GRC) Manager, and why are they important?

To thrive as an IT Governance Risk Compliance Manager, you need a strong understanding of IT risk management, regulatory frameworks (such as SOX, GDPR, or ISO 27001), and a relevant degree, often backed by certifications like CISA, CISSP, or CRISC. Familiarity with GRC platforms (e.g., RSA Archer, ServiceNow GRC), audit management tools, and compliance tracking systems is typically required. Exceptional analytical thinking, communication, and stakeholder management skills enable you to translate technical risks into actionable business strategies. These competencies are critical to ensuring organizational compliance, minimizing risk exposure, and aligning IT practices with business objectives.

Is GRC certification worth IT?

For an IT Governance Risk Compliance Manager, GRC (Governance, Risk, and Compliance) certifications such as CISA, CISSP, or CRISC are valuable for demonstrating expertise in managing IT risks and compliance frameworks. These certifications can enhance credibility, support career advancement, and improve understanding of regulatory requirements and security controls within IT environments.

What does an IT Governance Risk Compliance (GRC) Manager do?

An IT Governance Risk Compliance (GRC) Manager is responsible for ensuring that an organization's information technology systems comply with regulatory requirements and internal policies. They develop and oversee frameworks for managing IT risks, monitor compliance with standards such as ISO 27001 or SOC 2, and coordinate audits and assessments. Their role also involves advising leadership on risk mitigation strategies, training staff on compliance issues, and continuously improving IT governance practices. By doing so, they help protect the organization from legal, financial, and reputational risks associated with non-compliance and cyber threats.

How does an IT Governance Risk Compliance (GRC) Manager typically collaborate with other departments to ensure organizational compliance?

An IT GRC Manager works closely with various departments such as IT, legal, HR, and internal audit to implement and monitor compliance policies and risk mitigation strategies. They often facilitate cross-functional meetings to align security practices with business objectives, provide guidance on regulatory requirements, and coordinate training initiatives. Effective communication and collaboration are key, as the GRC Manager must ensure that all departments understand their compliance responsibilities and are prepared for audits. This collaborative approach helps create a culture of accountability and continuous improvement across the organization.

Is governance risk and compliance a good career?

A career in governance, risk, and compliance (GRC) as an IT GRC Manager offers opportunities in managing organizational policies, regulatory requirements, and cybersecurity risks. It requires strong analytical skills, knowledge of industry standards like ISO or NIST, and often involves certifications such as CISA or CISSP. The role is in demand across various industries due to increasing regulatory complexity and cybersecurity concerns.

What does a governance risk and compliance manager do?

A governance, risk, and compliance (GRC) manager oversees an organization’s policies and procedures to ensure adherence to legal and regulatory requirements. They identify potential risks, develop mitigation strategies, and implement controls using tools like risk assessments and compliance frameworks, often requiring certifications such as CISA or ISO standards. Their role helps maintain organizational integrity and reduces exposure to legal or financial penalties.
More about It Governance Risk Compliance Manager jobs
What cities are hiring for It Governance Risk Compliance Manager jobs? Cities with the most It Governance Risk Compliance Manager job openings:
What are the most commonly searched types of It Governance Risk Compliance jobs? The most popular types of It Governance Risk Compliance jobs are:
What states have the most It Governance Risk Compliance Manager jobs? States with the most job openings for It Governance Risk Compliance Manager jobs include:
What job categories do people searching It Governance Risk Compliance Manager jobs look for? The top searched job categories for It Governance Risk Compliance Manager jobs are:
Infographic showing various It Governance Risk Compliance Manager job openings in the United States as of June 2026, with employment types broken down into 87% Full Time, 7% Part Time, and 6% Contract. Highlights an 92% Physical, 2% Hybrid, and 6% Remote job distribution.
Governance, Risk, & Compliance (GRC) Analyst (Senior or Lead)

Governance, Risk, & Compliance (GRC) Analyst (Senior or Lead)

Boeing

Charleston, SC • On-site

Full-time

Medical, Life, Retirement

Posted 5 days ago


Boeing rating

8.5

Company rating: 8.5 out of 10

Based on 591 frontline employees who took The Breakroom Quiz

32nd of 518 rated manufacturers


Job description

Governance, Risk, & Compliance (GRC) Analyst (Senior or Lead)

Company:

The Boeing Company

Boeing currently has an opening for a Governance, Risk, & Compliance (GRC) Analyst (Senior or Lead) that will play a key role in developing and maintaining enterprise policies, standards, control frameworks, implementation procedures and control applicability mappings across applications, infrastructure, cloud environments, databases, shared resources, and information systems. The hybrid position is located in Seattle, WA but will consider candidates in Arlington, VA; Berkeley, MO; Charleston, SC; Chicago, IL; El Segundo, CA; Englewood, CO; Everett, WA; Kent, WA; Mesa, AZ; Plano, TX; Ridley Park, PA; San Francisco, CA, or Seal Beach, CA.

The ideal candidate possesses a strong blend of cybersecurity governance expertise, broad technical understanding, regulatory interpretation capabilities, and enterprise control framework experience.

Position Responsibilities:

  • Lead the development, maintenance, and continuous improvement of enterprise policies, standards, controls, and implementation procedures

  • Translate regulatory, contractual, and cybersecurity requirements into actionable governance and control requirements

  • Design, maintain, and optimize the enterprise control framework, including control rationalization, consolidation, and framework alignment activities

  • Partner with cybersecurity, infrastructure, engineering, cloud, application, data governance, privacy, and compliance teams to ensure governance requirements are practical, feasible, and align with business and operational needs

  • Provide subject matter expertise related to control intent, implementation expectations, regulatory interpretation, and governance best practices

  • Support governance modernization initiatives, ServiceNow IRM policy management, and control automation efforts to improve scalability, consistency, and efficiency

  • Develop and support control policies and strategies, prepare governance reporting, and communicate program status, priorities, and progress to stakeholders and leadership

Basic Qualifications(Required Skills/Experience):

  • 5+ years of experience in in Governance, Risk and Compliance (GRC), Information Technology (IT) Audit, Information Security, Vulnerability Management, and Compliance

  • 5+ years experience supporting enterprise technology environments including applications, infrastructure, cloud services, databases, networks, or identity and access management platforms

  • 3+ years experience writing enterprise policies, standards, controls and implementation procedures

  • 3+ years of experience leading governance transformation or enterprise control framework initiatives

  • Strong understanding of how enterprise technologies are deployed, operated, administered, and secured across different environments

  • Experience collaborating directly with engineering, infrastructure, cloud, application, or operations teams to develop practical and technically feasible implementation procedures

  • 3+ years of experience in cybersecurity and regulatory frameworks including NIST 800-53, NIST 800-171, CMMC, ISO, GDPR, ITAR or similar frameworks

  • Experience mapping controls to enterprise technology assets and environments

Preferred qualifications(Desired Skills/Experience):

  • 10 or more years of higher education and/or related work experience (Higher education includes college, university, technical school, licensing/certification programs, etc.)

  • Bachelor's degree in Cybersecurity, information Technology, Risk Management, Computer Science, or related field

  • Experience partnering with Legal, Privacy, Compliance, Internal Audit, or Regulatory Affairs teams to interpret and implement compliance obligations

  • Ability to lead cross-functional governance discussions with both technical and non-technical stakeholders

  • Experience with ServiceNow IRM or enterprise GRC platforms

  • Familiarity with CMDB, enterprise asset inventoried, and configuration concepts

  • Experience supporting control rationalization initiatives

  • Experience supporting highly regulated industries

  • Professional certifications such as CISSP, CGRC, CISA, CRISC

Conflict of Interest:

Successful candidates for this job must satisfy the Company's Conflict of Interest (COI) assessment process.

Drug Free Workplace:

Boeingis a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies.

Pay & Benefits:

At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities.

The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work.

The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements.

Pay is based upon candidate experience and qualifications, as well as market and business considerations.

Summary pay range:

Senior - $130,900 - $189,750

Lead - $161,500 - $233,450

Language Requirements:

Not Applicable

Education:

Not Applicable

Relocation:

Relocation assistance is not a negotiable benefit for this position.

Export Control Requirement:

This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a "U.S. Person" as defined by 22 C.F.R. 120.62 is required. "U.S. Person" includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee.

Safety Sensitive:

This is not a Safety Sensitive Position.

Security Clearance:

This position does not require a Security Clearance.

Visa Sponsorship:

Employer will not sponsor applicants for employment visa status.

Contingent Upon Award Program

This position is not contingent upon program award

Shift:

Shift 1 (United States of America)

Stay safe from recruitment fraud! The only way to apply for a position at Boeing is via our Careers website. Learn how to protect yourself from recruitment fraud - Recruitment Fraud Warning

Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law.

EEO is the law

Boeing EEO Policy

Request an Accommodation

Applicant Privacy


Boeing Participates in E - Verify

  • E-Verify (English)
  • E-Verify (Spanish)

Right to Work Statement

  • Right to Work(English)
  • Right to Work(Spanish)

What Boeing employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom