WHAT WE DO Our Security, Risk and Compliance consultants work with clients at all levels of the organization, from the C-suite to the shop floor, helping them to deliver on their most strategic ...
WHAT WE DO Our Security, Risk and Compliance consultants work with clients at all levels of the organization, from the C-suite to the shop floor, helping them to deliver on their most strategic ...
WHAT WE DO Our Security, Risk and Compliance consultants work with clients at all levels of the organization, from the C-suite to the shop floor, helping them to deliver on their most strategic ...
WHAT WE DO Our Security, Risk and Compliance consultants work with clients at all levels of the organization, from the C-suite to the shop floor, helping them to deliver on their most strategic ...
As part of the Risk and Compliance Remediation (RCR) team within AWS Compliance Security Assurance, you'll serve as a strategic compliance risk advisor, providing opinionated risk evaluations and ...
As part of the Risk and Compliance Remediation (RCR) team within AWS Compliance Security Assurance, you'll serve as a strategic compliance risk advisor, providing opinionated risk evaluations and ...
As part of the Risk and Compliance Remediation (RCR) team within AWS Compliance Security Assurance, you'll serve as a strategic compliance risk advisor, providing opinionated risk evaluations and ...
As part of the Risk and Compliance Remediation (RCR) team within AWS Compliance Security Assurance, you'll serve as a strategic compliance risk advisor, providing opinionated risk evaluations and ...
As part of the Risk and Compliance Remediation (RCR) team within AWS Compliance Security Assurance, you'll serve as a strategic compliance risk advisor, providing opinionated risk evaluations and ...
As part of the Risk and Compliance Remediation (RCR) team within AWS Compliance Security Assurance, you'll serve as a strategic compliance risk advisor, providing opinionated risk evaluations and ...
Shares responsibility for planning, directing, and coordinating compliance activities pertaining to ... Experience executing third-party/vendor risk assessments within a defined framework * Experience ...
Shares responsibility for planning, directing, and coordinating compliance activities pertaining to ... Experience executing third-party/vendor risk assessments within a defined framework * Experience ...
Shares responsibility for planning, directing, and coordinating compliance activities pertaining to ... Experience executing third-party/vendor risk assessments within a defined framework * Experience ...
Shares responsibility for planning, directing, and coordinating compliance activities pertaining to ... Experience executing third-party/vendor risk assessments within a defined framework * Experience ...
Shares responsibility for planning, directing, and coordinating compliance activities pertaining to ... Experience executing third-party/vendor risk assessments within a defined framework * Experience ...
Shares responsibility for planning, directing, and coordinating compliance activities pertaining to ... Experience executing third-party/vendor risk assessments within a defined framework * Experience ...
Program Manager I, AWS Security & Risk Compliance, AWS Compliance & Security Assurance
Herndon, VA · On-site
About the team Security Risk Analytics (SRA) sits within AWS Security Risk and Compliance (SRC) and operates under the Compliance Operations and Regulatory Response (CORR) organization. SRA is ...
Program Manager I, AWS Security & Risk Compliance, AWS Compliance & Security Assurance
Herndon, VA · On-site
About the team Security Risk Analytics (SRA) sits within AWS Security Risk and Compliance (SRC) and operates under the Compliance Operations and Regulatory Response (CORR) organization. SRA is ...
About the team Security Risk Analytics (SRA) sits within AWS Security Risk and Compliance (SRC) and operates under the Compliance Operations and Regulatory Response (CORR) organization. SRA is ...
About the team Security Risk Analytics (SRA) sits within AWS Security Risk and Compliance (SRC) and operates under the Compliance Operations and Regulatory Response (CORR) organization. SRA is ...
About the team Security Risk Analytics (SRA) sits within AWS Security Risk and Compliance (SRC) and operates under the Compliance Operations and Regulatory Response (CORR) organization. SRA is ...
About the team Security Risk Analytics (SRA) sits within AWS Security Risk and Compliance (SRC) and operates under the Compliance Operations and Regulatory Response (CORR) organization. SRA is ...
Mobility Global is developing and building its third-party governance framework to support regulatory compliance, information security, and enterprise risk management. Reporting to the Global Head of ...
Mobility Global is developing and building its third-party governance framework to support regulatory compliance, information security, and enterprise risk management. Reporting to the Global Head of ...
Execute security compliance implementation and audits (e.g., ISO 27001/42001, SOC2, FedRAMP HIGH, DoD Cloud Computing SRG IL5/IL6, NIST 800-53 rev 5, NIST 800-171/CMMC, Risk Management Framework)
Quick apply
Execute security compliance implementation and audits (e.g., ISO 27001/42001, SOC2, FedRAMP HIGH, DoD Cloud Computing SRG IL5/IL6, NIST 800-53 rev 5, NIST 800-171/CMMC, Risk Management Framework)
Procurement Risk & Compliance Lead
Centreville, VA · On-site
$155K/yr
Mobility Global is developing and building its third-party governance framework to support regulatory compliance, information security, and enterprise risk management. Reporting to the Global Head of ...
Procurement Risk & Compliance Lead
Centreville, VA · On-site
$155K/yr
Mobility Global is developing and building its third-party governance framework to support regulatory compliance, information security, and enterprise risk management. Reporting to the Global Head of ...
... and compliance issues. The role of the Legal Department is to support the firm in pursing the ... and information security risk so as to preserve and maximize the value of the firm over the ...
... and compliance issues. The role of the Legal Department is to support the firm in pursing the ... and information security risk so as to preserve and maximize the value of the firm over the ...
The role partners closely with the VP of IT and Sr. Security Engineer to ensure the enterprise risk ... Lead SOC 2 compliance: own the audit relationship, framework, and track remediation; work with the ...
The role partners closely with the VP of IT and Sr. Security Engineer to ensure the enterprise risk ... Lead SOC 2 compliance: own the audit relationship, framework, and track remediation; work with the ...
IT Security Risk and Compliance Analyst II
Silver Spring, MD · Hybrid
$91K - $125K/yr
Support the organization's Information Security, Risk and Compliance programs (e.g., Vulnerability Management Program) to effectively address information technology risks in alignment with the ...
IT Security Risk and Compliance Analyst II
Silver Spring, MD · Hybrid
$91K - $125K/yr
Support the organization's Information Security, Risk and Compliance programs (e.g., Vulnerability Management Program) to effectively address information technology risks in alignment with the ...
IT Security Risk and Compliance Analyst II
Silver Spring, MD · On-site
$91K - $125K/yr
Support the organization's Information Security, Risk and Compliance programs (e.g., Vulnerability Management Program) to effectively address information technology risks in alignment with the ...
IT Security Risk and Compliance Analyst II
Silver Spring, MD · On-site
$91K - $125K/yr
Support the organization's Information Security, Risk and Compliance programs (e.g., Vulnerability Management Program) to effectively address information technology risks in alignment with the ...
The Lead Security, Risk and Compliance Specialist leads cross functional security initiatives and assists with representing the cybersecurity function with internal and external stakeholders.
The Lead Security, Risk and Compliance Specialist leads cross functional security initiatives and assists with representing the cybersecurity function with internal and external stakeholders.
One Federal Solution provides senior-level cybersecurity risk management expertise supporting A&A, FISMA compliance, IC security standards, continuous monitoring, CDS, and secure cloud/hybrid ...
Quick apply
One Federal Solution provides senior-level cybersecurity risk management expertise supporting A&A, FISMA compliance, IC security standards, continuous monitoring, CDS, and secure cloud/hybrid ...
Security Risk Compliance information
See Washington salary details
$36.8K - $46.2K
6% of jobs
$46.2K - $55.5K
0% of jobs
$55.5K - $64.9K
6% of jobs
$71.7K is the 25th percentile. Wages below this are outliers.
$64.9K - $74.3K
17% of jobs
The median wage is $83.2K / yr.
$74.3K - $83.7K
21% of jobs
$83.7K - $93K
7% of jobs
$93K - $102.4K
9% of jobs
$102.4K - $111.8K
7% of jobs
$112.2K is the 75th percentile. Wages above this are outliers.
$111.8K - $121.1K
12% of jobs
$121.1K - $130.5K
6% of jobs
$130.5K - $139.9K
7% of jobs
$36.8K
$91.9K
$139.9K
How much do security risk compliance jobs pay per year?
What is the difference between Security Risk Compliance vs Security Analyst?
| Aspect | Security Risk Compliance | Security Analyst |
|---|---|---|
| Certifications | ISO 27001 Lead Implementer, CISSP, CISA | CISSP, CompTIA Security+, GIAC Security Certifications |
| Work Environment | Policy development, compliance audits, risk assessments | Monitoring security systems, incident response, vulnerability analysis |
| Employer & Industry Usage | Financial, healthcare, government sectors focusing on regulatory adherence | IT departments across various industries focusing on security operations |
Security Risk Compliance professionals focus on ensuring organizations meet regulatory standards and manage security risks through policies and audits. Security Analysts primarily monitor security systems, analyze threats, and respond to incidents. While both roles require security certifications and work within similar environments, their core responsibilities differ: compliance versus active security monitoring.
What are some common challenges faced by Security Risk Compliance professionals when balancing regulatory requirements with business objectives?
What are the key skills and qualifications needed to thrive as a Security Risk Compliance professional, and why are they important?
What is Security Risk Compliance?
Job description
WHAT WE DO
Our Security, Risk and Compliance consultants work with clients at all levels of the organization, from the C-suite to the shop floor, helping them to deliver on their most strategic initiatives. We're known for making realistic, data-driven decisions that deliver value in tangible ways to our clients. Our clients ask for us on projects that require a superior combination of technical and business capabilities, people and management skills, and a collaborative mindset. We excel in understanding complex programs and strategic initiatives and breaking them into actionable pieces.
We are actively looking for professionals in the following areas:
- Compliance
- Information Security
- Risk Management
- Data Privacy
The ideal candidate's experience may include but is not limited to the following:
- Management or participation in Cybersecurity, Information Security, Risk, Compliance and/or Data Privacy Programs or Projects
- Sample projects/programs could include but are not limited to:
- Compliance framework mapping and implementation,
- Regulatory mapping and implementation
- Audit, risk or regulatory remediation management,
- Readiness for new laws and regulations,
- Risk, Compliance or Information Security risk reporting and monitoring
- Creation of roadmaps to mature or advance Risk, Compliance or Information Security Strategies/Programs/Controls
- Design and enablement of cyber controls functions and processes
- Change management related to regulatory adoption or compliance changes
- Audit or certification readiness
- Familiarity or direct experience with GRC/Cybersecurity solutions, tools and technologies
- Control design or maturation for high-demand technical areas such as ERP, Identity and Access Management, Business Continuity and Resiliency, Cloud
- Knowledge of and/or application of industry specific regulations, laws, and standards such as the EU-GDPR, CCPA/CPRA, HIPAA, PCI
- Knowledge of and/or application of compliance and security frameworks and standards such as COSO, NIST, ISO
- Management of regulatory, internal or external audits, or experience as an auditor
- Projects or roles requiring coordination across lines of defense working with technical, business, compliance, risk and audit teams to deliver solutions
- Work or projects with military or federal government agencies in Risk, Compliance or Information Security/Cyber Security sectors
- Certifications: CIPP, CRCM, CRM, ARM, CISSP, CISM
- Sample projects/programs could include but are not limited to:
QUALIFICATIONS
Required-
- Alignment to our core values: Excellence, Participation, Integrity, and Collaboration
- Hungry, Humble, Smart
- Demonstrated business and technology acumen
- Strong written and verbal communication skills
- Understanding and experience solving real business problems
- Proven track record of delivering results
- Experience working with and/or leading a team
- Ability to work across industries, roles, functions & technologies
- Authorization for permanent employment in the United States (this position is not eligible for immigration sponsorship)
Preferred-
- Bachelor's degree
- 8+ years professional experience
- Experience across our service offerings