ZipRecruiter

Log In

1

It Risk Compliance Jobs (NOW HIRING)

Munich Re

Senior IT Risk Officer

Amelia, OH · Hybrid

This role will work closely with IT teams, business stakeholders, internal and external auditors, regulators, and global IT Risk and Compliance colleagues to support efficient audit execution ...

New

Munich Re

Senior IT Risk Officer

Hartford, CT · Hybrid

This role will work closely with IT teams, business stakeholders, internal and external auditors, regulators, and global IT Risk and Compliance colleagues to support efficient audit execution ...

Munich Re

Senior IT Risk Officer

Princeton, NJ · Hybrid

This role will work closely with IT teams, business stakeholders, internal and external auditors, regulators, and global IT Risk and Compliance colleagues to support efficient audit execution ...

JPS Health Network

IT Security Risk Mgr

Fort Worth, TX · On-site

The IT Security Risk Manager will lead the identification, assessment, monitoring, and mitigation of information technology and security risks across the health system, ensuring compliance with ...

Northpointe Bank

IT Compliance Analyst

Grand Rapids, MI · On-site

$78K/yr

We're hiring an IT Compliance Analyst to support our Information Security and IT Risk Management team through audit coordination, risk tracking, control remediation, and compliance initiatives. This ...

next page

Showing results 1-20

All JobsIt Risk Compliance Jobs

It Risk Compliance information

See salary details

$31K

$116.1K

$201.5K

How much do it risk compliance jobs pay per year?

As of Jul 21, 2026, the average yearly pay for it risk compliance in the United States is $116,090.00, according to ZipRecruiter salary data. Most workers in this role earn between $88,000.00 and $143,500.00 per year, depending on experience, location, and employer.

What is the difference between It Risk Compliance vs It Security Analyst?

AspectIt Risk ComplianceIt Security Analyst
CertificationsISO 27001, CISSP, CISACISSP, Security+
Work EnvironmentPolicy development, audits, compliance assessmentsMonitoring security systems, incident response
Employer & Industry UsageFinancial, healthcare, government sectorsTech companies, cybersecurity firms, enterprises

It Risk Compliance focuses on ensuring organizations adhere to regulatory standards and manage risks through policies and audits. In contrast, It Security Analysts primarily monitor and respond to security threats, implementing technical safeguards. Both roles are vital in protecting organizational assets but differ in their core responsibilities and focus areas.

What are the key skills and qualifications needed to thrive as an IT Risk Compliance professional, and why are they important?

To thrive as an IT Risk Compliance professional, you need a solid understanding of risk assessment, regulatory frameworks (like SOX, GDPR), and information security principles, often supported by a degree in IT, cybersecurity, or a related field. Familiarity with compliance management tools, risk analysis software, and certifications such as CISA, CRISC, or CISSP is highly valuable. Strong analytical thinking, attention to detail, and effective communication skills help you identify risks and articulate compliance needs to stakeholders. These competencies are crucial for safeguarding organizational data, ensuring regulatory adherence, and minimizing operational risks.

What is IT Risk Compliance?

IT Risk Compliance refers to the process of identifying, assessing, and managing risks related to information technology systems to ensure that an organization complies with internal policies, industry standards, and regulatory requirements. Professionals in this field help organizations protect sensitive data, prevent security breaches, and maintain the integrity of their IT operations. They often work closely with other departments to implement controls, conduct audits, and ensure that IT practices align with laws such as GDPR, HIPAA, or SOX. The role is critical for minimizing risks and avoiding costly penalties stemming from non-compliance.

What are some common challenges faced by professionals in IT Risk Compliance roles, and how can they be addressed?

Professionals in IT Risk Compliance often encounter challenges such as staying updated with rapidly changing regulations, managing competing priorities, and ensuring organization-wide adherence to compliance standards. Navigating these obstacles requires effective communication skills, continuous professional development, and strong collaboration with IT, legal, and business units. Proactively fostering a culture of compliance and leveraging automation tools can also help streamline processes and reduce manual workload.
More about It Risk Compliance jobs
What cities are hiring for It Risk Compliance jobs? Cities with the most It Risk Compliance job openings:
What states have the most It Risk Compliance jobs? States with the most job openings for It Risk Compliance jobs include:
What job categories do people searching It Risk Compliance jobs look for? The top searched job categories for It Risk Compliance jobs are:
It Risk Compliance jobs near you
Infographic showing various It Risk Compliance job openings in the United States as of July 2026, with employment types broken down into 1% As Needed, 82% Full Time, 12% Part Time, 1% Temporary, and 4% Contract. Highlights an 93% Physical, 2% Hybrid, and 5% Remote job distribution, with an average salary of $116,090 per year, or $55.8 per hour.
Director, IT and Governance, Risk & Compliance

Director, IT and Governance, Risk & Compliance

Q4, Inc.

Remote

Full-time

Re-posted 3 days ago

Job description

At Q4, we make an impact together, obsess over our customers, operate with integrity, and bring big ideas to life.
Q4 is charting a bold new path for investor relations as the first AI-driven IR Ops Platform, providing everything an IR team needs to succeed on a single, powerful platform. The Q4 Platform enables public companies to attract, manage, and understand investors - all in one place. Over 2,600 customers, including many of the most respected brands in the world, trust Q4 to help drive premium valuations for their companies. Only Q4 offers a tech stack holistically designed to equip IR teams with data, insights, and smart workflows that power remarkable outcomes. Learn more at q4inc.com.
We hire smart, curious, and talented people to push boundaries, reimagine what's possible, and turn challenges into opportunities. All while keeping the needs of our clients at the heart of everything we do.
Come grow with us!
About the role
The Director, IT and Governance, Risk & Compliance (GRC) leads Q4's IT operations, security operations, and technology governance programs to ensure a reliable, secure, and compliant internal environment for a high-growth SaaS business. The role translates strategy into execution by running the programs, teams, and processes that keep Q4's corporate environment available, secure, and audit-ready, and acts as a senior security and risk subject-matter expert for internal and customer-facing stakeholders.
What you'll do
Strategy & Stakeholder Partnership
  • Translate enterprise technology, security, and GRC strategy into a clear roadmap with priorities, milestones, and success metrics.
  • Act as a senior security and risk SME, advising internal teams and customers on best practices, emerging threats, and pragmatic risk-based decisions.
  • Run the portfolio of IT, security, and GRC initiatives as a formal program, coordinating cross-functional delivery, timelines, and status reporting.

IT Operations & Service Delivery
  • Lead IT operations to ensure infrastructure, end-user computing, and collaboration platforms are reliable, secure, and cost-effective.
  • Oversee incident, request, and change management; drive improvements in SLAs, MTTR, and employee experience.
  • Own standards for asset management and access lifecycle for employees and independent contractors.

Security Operations & Risk Management
  • Manage day-to-day security operations: threat monitoring, alert triage, and coordination of incident response with Security and Engineering.
  • Maintain and test security incident response playbooks; coordinate periodic security testing and ensure remediation of findings.
  • Operate and improve vulnerability management; support DR/BCP planning; help manage security budgets and key security vendors.

Governance, Risk & Compliance (GRC)
  • Lead technology GRC processes (policies, controls, risk registers, exceptions) and coordinate SOC 2 and customer security assessments.
  • Operationalize GDPR, CCPA, PIPEDA and other requirements into controls in partnership with Legal/Privacy, maintaining RoPA, DPIAs, and vendor/sub-processor assessments.
  • Define and track KPIs/KRIs (e.g., incident SLAs, vuln closure rates, audit findings) and provide clear dashboards and reports to leadership.

Business Systems & Enterprise Enablement
  • Partner with Business Systems, Product, and Data teams to ensure enterprise platforms and integrations meet security and governance expectations.
  • Contribute to architecture standards, access models, and data protection patterns across core systems.
  • Identify automation and tooling opportunities to reduce manual work and improve control coverage and data quality.

People Leadership & Collaboration
  • Lead and develop a high-performing IT and GRC team with clear goals and feedback.
  • Foster a culture of accountability, continuous improvement, and strong cross-functional partnership.
  • Champion security, privacy, and technology best practices through training, communication, and engagement.

Qualifications
  • 7+ years in IT operations, information security, technology risk, or GRC, including people management.
  • Strong knowledge of security and control frameworks (e.g., SOC 2, ISO 27001, NIST CSF, CIS) and privacy regulations (e.g., GDPR, CCPA, PIPEDA).
  • Hands-on experience with IT and security tooling (IdP/IAM, MDM/EDR, logging/monitoring, GRC platforms).
  • Proven ability to manage multiple security/IT/GRC projects or programs with ownership of timelines, budgets, and stakeholder communication.
  • Track record supporting external audits and customer security assessments and communicating complex risk/technical topics in clear business language.

Apply