2

Remote Grc Analyst Jobs (NOW HIRING)

Senior Analyst, Cyber GRC

Westminster, CO · On-site +1

$110K - $157K/yr

The Senior Analyst, Cybersecurity Governance, Risk, and Compliance (GRC) is responsible for ... The preferred location for this role is our Westminster, CO campus; but we will consider a remote ...

Strong analytical skills * General knowledge of SAP Security and GRC - preferred 1-2 years minimum ... REMOTE Background Check :Yes Drug Screen :Yes

Senior Security Compliance Analyst

OR · Remote

$110K - $140K/yr

We are seeking a Senior Security Compliance Analyst with expertise in Governance, Risk, and ... Ability to work independently and collaboratively in a remote environment. * Familiarity with GRC ...

SAP Security Analyst Chicago, Illinois, United States About the Job SAP Security Analyst Applicants ... 100% Remote Job Summary * SAP security troubleshooting and end user support * Experience in GRC ...

Senior GRC Engineer

$115K - $213K/yr

Life360 is a Remote-First company, which means a remote work environment will be the primary ... You use AI tools for real, substantive work - analysis, drafting, automation, code, investigations ...

next page

Showing results 1-20

Remote Grc Analyst information

See salary details

$36.5K

$97.7K

$228.5K

How much do remote grc analyst jobs pay per year?

As of Jul 2, 2026, the average yearly pay for remote grc analyst in the United States is $97,659.00, according to ZipRecruiter salary data. Most workers in this role earn between $55,000.00 and $111,000.00 per year, depending on experience, location, and employer.

What are some typical challenges faced by a Remote GRC Analyst, and how are they addressed?

A common challenge for Remote GRC Analysts is maintaining efficient communication and collaboration with cross-functional teams while working offsite. To address this, organizations generally provide access to collaboration tools like Slack, Microsoft Teams, and secure document management systems, enabling seamless coordination. Additionally, you may need to proactively manage your workflow and stay updated on changes in regulations and company policies, often requiring strong time management and self-motivation. Success in this role often comes from building solid virtual relationships and actively participating in remote meetings, ensuring you remain an integral part of the compliance and risk management processes.

What are the key skills and qualifications needed to thrive in the Remote Grc Analyst position, and why are they important?

To thrive as a Remote GRC Analyst, you need strong analytical abilities, a solid understanding of risk management and compliance frameworks (such as ISO 27001, NIST, or SOX), and a relevant degree in information security, business, or a related field. Familiarity with GRC platforms (like RSA Archer or ServiceNow), along with certifications such as CISA, CISM, or CRISC, is highly valued. Excellent communication, organization, and problem-solving skills are essential for effectively managing compliance documentation and collaborating remotely across teams. These attributes ensure you can proactively identify risks, implement controls, and support ongoing governance requirements in a dynamic, decentralized work environment.

What is a Remote GRC Analyst job?

A Remote GRC (Governance, Risk, and Compliance) Analyst is responsible for assessing and managing an organization's compliance with industry regulations, internal policies, and risk management frameworks—all while working remotely. They conduct risk assessments, monitor security controls, prepare audit documentation, and ensure regulatory compliance across various business functions. This role often involves collaborating with teams across different locations to implement best practices for security and compliance. Strong analytical skills, knowledge of industry standards (such as ISO 27001, NIST, or SOX), and familiarity with compliance tools are essential for success in this position.

More about Remote Grc Analyst jobs
What cities are hiring for Remote Grc Analyst jobs? Cities with the most Remote Grc Analyst job openings:
What are the most commonly searched types of Grc Analyst jobs? The most popular types of Grc Analyst jobs are:
What states have the most Remote Grc Analyst jobs? States with the most job openings for Remote Grc Analyst jobs include:
What job categories do people searching Remote Grc Analyst jobs look for? The top searched job categories for Remote Grc Analyst jobs are:
Infographic showing various Remote Grc Analyst job openings in the United States as of June 2026, with employment types broken down into 80% Full Time, 6% Part Time, and 14% Contract. Highlights an 76% Physical, 7% Hybrid, and 17% Remote job distribution, with an average salary of $97,659 per year, or $47 per hour.
Federal GRC Compliance Specialist

Federal GRC Compliance Specialist

Tyto Athene, LLC

Reston, VA • Remote

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Posted 6 days ago


Job description

Description

Tyto Athene has an opening for a Federal GRC Compliance Specialist. The Federal GRC Compliance Specialist will be responsible for the continued development, implementation, and maintenance of the organization's business systems and compliance programs associated with FAR (Federal Acquisition Regulation), DFARS (Defense Federal Acquisition Regulation Supplement), and other agency-specific requirements. The Compliance Associate will have the knowledge, experience, and skills to support the implementation of new compliance initiatives from development of process documentation, to training personnel, to analyzing internal audit activities in order to ensure compliance with external regulatory audits and assessments.

This is a full-time, remote work position.

 

Responsibilities:

  • Develop, maintain, and implement GRC-related plans, policies, processes, procedures, templates, control documentation, and compliance artifacts in the following subject areas:
    • Cybersecurity Maturity Model Certification (CMMC)
    • Supply Chain Risk Management (SCRM)
    • Cyber Supply Chain Risk Management (C-SCRM)
    • Accounting System (AS)
    • Estimating System (ES)
    • Purchasing System (CPSR)
    • ISO 27001
    • ISO 20000-1
  • Monitor and support compliance with federal regulations, contract terms, and internal policies, and applicable governance frameworks and control requirements.
  • Conduct periodic internal reviews and audits to ensure ongoing adherence to applicable laws and standards, contractual obligations, and internal control requirements.
  • Assist with preparing for external audits, reviews, or investigations conducted by government agencies or third-party auditors.
  • Track and report on compliance metrics and issues, risks, deficiencies, corrective actions, and improvement activities.
  • Provide training and awareness materials to staff on compliance-related topics associated with the programs listed above and promote consistent understanding of GRC requirements across business functions.
  • Collaborate with internal departments (e.g., IT, Supply Chain, HR, Pricing, Finance, Program Management) to ensure cross-functional compliance and effective control implementation.
  • Stay current with changes in relevant federal regulations, including FAR, DFARS, and agency-specific guidance.
  • Support the development and implementation of corrective action plans when compliance deficiencies are identified, including tracking remediation status and assessing corrective action effectiveness.
  • Collaborate with senior leadership to align process improvement efforts with organizational goals and objectives, ensuring strategic alignment and driving compliance a compliance and risk-aware culture throughout the company.
Qualifications

Required:

  • Bachelor's degree in Business, Law, Public Administration, Information Systems, Cybersecurity or a related field.
  • 5+ years of relevant experience in a GRC, compliance, regulatory, legal, internal audit, cybersecurity compliance, or government contracting compliance function.
  • Working knowledge of federal government contracting regulations, including FAR, DFARS, and related agency-specific requirements.
  • Experience working for a federal government contractor.
  • Excellent attention to detail and organizational skills.
  • Strong analytical and problem-solving skills.
  • Demonstrated excellence in written and verbal communication skills.
  • Ability to manage multiple tasks and meet deadlines.
  • Demonstrated experience leading GRC or compliance-related initiatives with minimal supervision.
  • Experience supporting internal/external compliance audits to include responding to deficiencies, implementing corrective action plans, and assessing their effectiveness.
  • Demonstrated ability to design and implement cross-functional processes, controls, and documentation to meet regulatory, contractual, audit, and governance requirements.
  • Advanced proficiency in MS Office products and Adobe Acrobat.

Additional Requirements:

  • Extensive knowledge of NIST SP 800-171, NIST SP 800-53 and/or NIST SP 800-161 highly desired but not required.
  • Previous participation and/or experience with Certified Third-Party Assessment Organization (C3PAO) CMMC assessments highly desired but not required.
  • Previous participation and/or experience with Defense Contract Management Agency (DCMA) Contractor Purchasing System Reviews (CPSR) highly desired but not required.
  • Previous participation and/or experience with Defense Contract Audit Agency (DCAA) Accounting system audits highly desired but not required.
  • Previous participation and/or experience with Defense Contract Management Agency (DCMA) Estimating system audits highly desired but not required.
  • ISO Internal Auditor (Any Standard), desired but not required.
  • Experience supporting the development, implementation and management of ISO 27001 and ISO 20000-1 programs a plus.
  • Experience with Export Control requirements such as International Traffic in Arms Regulations (ITAR) Export Administration Regulations (EAR) and Office of Foreign Assets Control (OFAC) a plus.
  • Experience with Earned Value Management System (EVMS) requirements and implementation a plus.
  • Experience drafting and supporting compliance related proposal responses a plus.

 

About Tyto Athene

Compensation:

  • Compensation is unique to each candidate and relative to the skills and experience they bring to the position. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.

Benefits:

  • Highlights of our benefits include Health/Dental/Vision, 401(k) match, Paid Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and parental leave.
Tyto Athene is a trusted leader in IT services and solutions, delivering mission-focused digital transformation that drives measurable success. Our expertise spans four core technology domains-Network Modernization, Hybrid Cloud, Cybersecurity, and Enterprise IT-empowering our clients with cutting-edge solutions tailored to their evolving needs. With over 50 years of experience, Tyto Athene proudly support Defense, Intelligence, Space, National Security, Civilian, Health, and Public Safety clients across the United States and worldwide.  At Tyto Athene, we believe that success starts with our people. We foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role in shaping the future of technology. Are you ready to join #TeamTyto?  Tyto Athene, LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.Employment Type: FULL_TIME