Integrity Marketing Group: Independent distributor of life, health, and wealth insurance products.
3+ YOEBachelor's degree and 3–6 years in GRC, risk, compliance, or IT audit; 2+ years administering an enterprise GRC platform; experience with reporting, integrations, migration, and control mapping.
Workiva, Onspring, Archer, ServiceNow, Microsoft Excel, SQL
ConcentraNYSE: CON: The nation’s leading occupational health care.
8+ YOEBachelor's degree in Computer Science or Information Security; 8–10 years risk management experience; 3–4 years project management; GRC, audits, TPRM, privacy frameworks, and stakeholder leadership experience.
GRC, SOX, SOC2 Type 2, PCI, NIST, HIPAA, SaaS, TPRM
New York City or Chicago or Austin or Dallas or Denver or Miami or San Francisco or Seattle
$270k-$290k/yrHybridFull Time
DriveWealth: Private B2B financial technology platform providing brokerage infrastructure to banks, brokers, asset managers, wallets, and brands.
15+ YOE15+ years in information security/GRC in regulated financial services; deep SEC/FINRA and global privacy knowledge; hands-on GRC, audit, TPRM, incident response, and executive/board reporting; relevant certifications preferred.
PepsiCoNASDAQ: PEP: Multinational food and beverage.
5+ YOE5-8 years experience in cybersecurity governance, GRC, or contract governance; bachelor's degree in related field required; advanced degree, cybersecurity certifications, ServiceNow, Icertis, Microsoft 365 preferred.
ServiceNow, Icertis, Microsoft 365, Microsoft Copilot
Atlanta or Hoover or Chicago or Columbus or Houston or Detroit or Charlotte or Dallas or Tupelo +1 more
$57k-$113k/yrOnsiteFull Time
Huntington BankNASDAQ: HBAN: A regional bank offering consumer, commercial, and financial services.
3+ YOEBachelor's degree or 4+ years equivalent experience; 3+ years software development experience; GRC systems experience preferred; cloud and on-prem platforms; .NET/C# or other OOP languages; agile environment; Microsoft Office; authorized to work in US without sponsorship.
Archer, OpenPages, ProcessUnity, ServiceNow IRM, AWS, Apigee, Linux OS, Openshift, .NET, C#, Python, Java, Microsoft Office
New York or Atlanta or Boston or Chicago or Cleveland or Dallas or Detroit or Pittsburgh or Hoboken or Houston or Los Angeles or McLean or Miami or Minneapolis or Charlotte or Philadelphia or Portland or San Francisco or Seattle or North America
$123k-$213k/yrHybridFull Time
EY: Global professional services firm providing assurance, tax, and consulting.
3+ YOERequires 3–5+ years of SAP Security/GRC experience, bachelor's degree preferred, SAP implementation expertise, GRC Access Control and IAM experience, U.S. driver's license, passport, and willingness to travel up to 80%.
SAP Application Security, SAP GRC Access Control, S/4HANA, SAP ECC, FIORI, ARIBA, HCM, SuccessFactors, Saviynt, SailPoint, SAP IAG, ServiceNow, HP ALM, BTP, SAC, AI, RPA
Chicago or Atlanta or Austin or Boston or Charlotte or Cleveland or Columbus or Dallas or Fort Wayne or Grand Rapids or Houston or Indianapolis or Knoxville or Lexington or Los Angeles or Louisville or Miami or Nashville or New York City or Oakbrook Terrace or Sacramento or San Francisco or South Bend or Tampa or Washington +1 more
$78k-$154k/yrOnsiteFull Time
Crowe Advisory LLC: U.S. advisory and consulting firm providing tax, advisory, consulting, and other nonattest services to business clients.
2+ YOEBachelor's degree preferred; 3–5 years professional experience and 2+ years in software implementation or technology consulting. Requires Workiva expertise, requirements analysis, solution design, communication, and project management.
Workiva, RSA Archer, ServiceNow GRC, Onspring, Lockpath, MetricStream, OpenPages, Microsoft Office, Microsoft Excel, Microsoft Word, Microsoft PowerPoint
Caterpillar Inc.NYSE: CAT: Global manufacturer of construction and mining equipment and engines.
Bachelor's degree in relevant field or equivalent experience; deep understanding of SAP security, role-based access control, compliance frameworks, SOX, and risk management; 5 days onsite; travel up to 10%; no sponsorship.
Globe Life Inc.NYSE: GL: Provider of life and supplemental health insurance products.
8+ YOEBachelor's degree in IT, Information Systems, Information Assurance, Business or related field; 8+ years in software development, information security, privacy or GRC; 4+ years configuring a GRC platform; advanced SQL, scripting, reporting, data modeling; strong communication and program management.
Trace3: Private IT consulting provider serving enterprise and commercial organizations with AI, cloud, data, and cybersecurity services.
10+ YOEBachelor’s degree and 10–15 years of security consulting and enterprise security experience required. Expertise in GRC frameworks, risk and control assessments, client advisory, presentations, and security program roadmaps required.
NIST CSF, NIST RMF, NIST 800-53, ISO 27001, ISO 27005, SOC 2, PCI DSS, HIPAA, FFIEC, GLBA, SOX, GDPR, CMMC, EU AI Act, Microsoft PowerPoint
Chicago or Dallas or Los Angeles or New York City or San Francisco or Seattle +1 more
$122k-$165k/yrHybridFull Time
West Monroe: Business and technology consulting firm.
4+ YOE4+ years ServiceNow development experience, deep implementation in at least two IRM/GRC areas, strong JavaScript and ServiceNow skills, ability to travel 25-50%, and permanent U.S. work authorization without sponsorship.
ECI: Private managed-services provider delivering IT, cybersecurity, GRC, and AI solutions to regulated financial-services firms.
7+ YOE7-10+ years in information security, GRC, or IT risk; 3+ years client-facing advisory; hands-on multi-framework compliance (CMMC, NIST, SOC 2, ISO 27001); M&A due diligence; Bachelor's in Computer Science or related; two preferred certifications (CISSP, CISM, CMMC RP/CCP, ISO 27001 Lead, CRISC, CISA).
Early Careers - Governance, Risk & Compliance (GRC) Intern
Chicago or Richardson
$19-$34/hrHybridFull Time, Internship
Health Care Service Corporation: Customer-owned mutual health insurer serving employers, individuals, and government-program members through Blue Cross and Blue Shield plans.
Pursuing master's degree or higher in business administration or healthcare; graduation between Dec 2027 and June 2028; minimum GPA 3.0; available for full 10-week program; unrestricted U.S. work authorization without sponsorship.
Groq: Private U.S. AI infrastructure operating a global cloud platform for fast, affordable real-time inference.
5+ YOE5+ years in operational risk, IT risk, or GRC; experience producing monthly risk reporting for executives; control testing and third-party risk assessment; GRC tooling preferred; must be a U.S. Person for export control.
JPMorgan ChaseNYSE: JPM: Global financial services and investment banking firm.
5+ YOE5+ years in third-party risk, cybersecurity, or technology risk and/or a relevant bachelor's degree; requires risk framework, GRC, analytics, stakeholder leadership, and regulatory experience.
Archer, ServiceNow, Alteryx, Tableau, QlikView, GRC, AI
Vanguard: Global investment management firm owned by its client funds.
5+ YOEFive years of information security or fraud experience, undergraduate degree or equivalent, expertise in NIST, CIS Controls, ISO 27002, GRC platforms, automation, and financial services cyber regulations.
Peraton Labs: Private applied research organization developing cybersecurity, communications, electronic-warfare, mobility, and analytics technologies for government and commercial customers.
12+ YOEBachelor's degree or equivalent, 12+ years of cybersecurity experience, active CISSP or CISM, NIST SP 800-53 experience, GRC and risk management expertise, leadership skills, and US citizenship.
Toyota Financial Services Corporation: Japanese financial holding managing Toyota’s worldwide vehicle-finance companies and their automobile loans and leasing services.
5+ YOEBachelor's degree in BA or BS; 5+ years IT risk management, audit, or cybersecurity; experience with COBIT, NIST, ISO 27001, GRC systems, SOX, FFIEC; legal right to work in US without sponsorship.
Simmons Bank: Provides banking and financial services.
8+ YOE5+ MgmtAdvanced degree in related field required; 8+ years banking/financial services with significant leadership; 5+ years direct enterprise risk management; risk management certification (CRMP, FRM, CRM); Microsoft Office and GRC platform proficiency.
Tucson or Columbus or San Jose or Dallas or New York City
$155k-$289k/yrHybridFull Time
IBMNYSE: IBM: Global technology and consulting focusing on cloud and AI.
12+ YOE12+ years in SAP security/cybersecurity; 6+ years leading SAP security/GRC/IAM workstreams; hands-on SAP security, GRC, BTP, threat detection; executive communication; US work authorization without sponsorship; travel as needed.
SAP, SAP BTP, SAP GRC, SAP Enterprise Threat Detection, Onapsis, SecurityBridge, Pathlock, Splunk