147 grc jobs at 116 companies in Greenburgh, NY

4w
Save
Mark Applied
Hide
GRC Analyst
New York City, New York, United States
$108k-$125k/yr HybridFull Time
Squarespace
Squarespace: Private website-building and hosting platform helping entrepreneurs and businesses build brands, sell online, and manage digital presence.
3+ YOE3+ years GRC, IT audit, security compliance, or privacy compliance experience; proven experience with SOX, SOC, PCI, NIST, or ISO frameworks; experience evaluating IT controls and supporting vendor risk programs; working knowledge of SaaS and cloud environments.
GRC platforms, workflow platforms
3mo
Save
Mark Applied
Hide
GRC Lead
New York City, New York, United States
OnsiteFull Time
Legora
Legora: Agentic AI operating system for legal professionals and teams.
6+ YOE6+ years in GRC, security compliance, or IT audit in B2B SaaS; ownership of SOC 2/ISO 27001; AI governance and regulatory knowledge; risk and policy experience; ability to read code and verify controls.
Job Posting
1w
Save
Mark Applied
Hide
Senior GRC Engineer
New York City, New York, United States
$181k-$244k/yr HybridFull Time
Anaplan
Anaplan: Cloud-based enterprise platform for business planning and decision-making.
6+ YOE6+ years in security engineering, GRC, or DevSecOps; scripting in Python or Bash; working knowledge of at least two compliance frameworks; GRC platform proficiency; ability to build diagrams and translate requirements.
Python, Bash, Drata, Vanta, Hyperproof, Archer, OneTrust, ServiceNow GRC
3mo
Save
Mark Applied
Hide
GRC Manager
Toronto or New York City
RemoteFull Time
Valence
Valence: Enterprise AI coaching platform helping companies provide personalized guidance to managers and employees.
Experienced in running GRC and security compliance programs (SOC 2, ISO 27001, ISO 42001), audit coordination, risk management, cloud security (AWS/Azure), and cross-functional stakeholder collaboration.
SOC 2, ISO 27001, ISO 42001, NIST CSF, GDPR, EU AI Act, AWS, Azure, Vanta, Drata, Secureframe, OneTrust, Archer
2w
Save
Mark Applied
Hide
GRC Engineer
New York City or San Francisco
OnsiteFull Time
Reflection AI
Reflection AI: Private AI research lab building open foundation models and agentic software for enterprise, government, and regulated-industry users.
3+ YOE3-6 years software/security/DevOps experience; hands-on support of SOC 2, ISO 27001, or NIST; production-quality code in Python or similar; API/integration experience; familiarity with cloud infrastructure and IAM; GRC tooling experience; relevant frameworks like CMMC, NIST, GDPR/CCPA.
Python, Vanta, SOC 2, ISO 27001, NIST 800-53, NIST 800-171, CMMC, GDPR, CCPA
Job Posting
3mo
Save
Mark Applied
Hide
Head of Security GRC
New York City or Chicago or Austin or Dallas or Denver or Miami or San Francisco or Seattle
$270k-$290k/yr HybridFull Time
DriveWealth
DriveWealth: Private B2B financial technology platform providing brokerage infrastructure to banks, brokers, asset managers, wallets, and brands.
15+ YOE15+ years in information security/GRC in regulated financial services; deep SEC/FINRA and global privacy knowledge; hands-on GRC, audit, TPRM, incident response, and executive/board reporting; relevant certifications preferred.
MITRE ATT&CK, FS-ISAC
2mo
Save
Mark Applied
Hide
Staff Security Engineer, GRC
New York City, New York, United States
$246k-$287k/yr HybridFull Time
Oscar Health
Oscar HealthNYSE: OSCR: Technology-driven health insurance and managed care provider.
7+ YOERequires 7+ years in GRC, cloud security, security engineering, audit, or regulated technology; expertise in CMS EDE, NIST SP 800-53, AWS control implementation, compliance automation, audits, and risk management.
AWS, Azure, NIST SP 800-53, infrastructure as code, policy as code, GRC platforms, SIEM
2mo
Save
Mark Applied
Hide
Senior Analyst, GRC
White Plains, New York, United States
$140k-$180k/yr OnsiteFull Time
Veterinary Emergency Group
Veterinary Emergency Group: Helping people and their pets when they need it most.
3+ YOE3+ years in GRC, IT audit, or compliance; working knowledge of security frameworks (PCI DSS, NIST, SOC 2, ISO 27001); experience with GRC platforms (Hyperproof, Archer, OneTrust); strong documentation and communication skills.
Hyperproof, Archer, OneTrust
1mo
Save
Mark Applied
Hide
Senior Manager, GRC
New York City or San Francisco or Seattle or Boston or Washington or Chicago
$170k-$201k/yr HybridFull Time
Maven Clinic
Maven Clinic: Private virtual clinic providing women’s and family healthcare to employers and consumers.
6+ YOERequires 6+ years in GRC, information security compliance, or IT audit; ownership of a SOC 2 or similar audit; SOC 2, HITRUST, and ISO 27001 knowledge; strong project management and communication skills.
Vanta, Drata, Secureframe, Hyperproof
3w
Save
Mark Applied
Hide
Sr. GRC Analyst
United States or New York City
$155k-$185k/yr RemoteFull Time
Garner Health
Garner Health: Private healthtech helping employers and members find high-quality in-network doctors and reduce healthcare costs.
5+ YOE5+ years GRC, IT audit, or information security compliance; experience with HITRUST, SOC 2, ISO 27001 audits; cloud-native control design; scripting and LLM automation; industry certifications preferred; U.S. work authorization without sponsorship.
AWS, Okta, Datadog, Retool, Gitlab, Vanta, Claude
1mo
Save
Mark Applied
Hide
Security GRC Lead
San Francisco or New York City or London
$350k-$425k/yr HybridFull Time
Mercor
Mercor: AI-powered talent marketplace connecting contractors with global organizations.
7+ YOE7+ years in security GRC, compliance engineering, or audit; 2+ years owning SOC 2 Type 2; ISO 27001 certification experience; enterprise audits; Vanta administration; cloud-security, controls-as-code, SQL, Python, or shell skills.
Vanta, Drata, Secureframe, Sprinto, Wiz, Panther, SQL, Python, KMS, SharePoint, MCP, NIST AI RMF, EU AI Act, ISO 42001, FedRAMP Moderate, HIPAA, PCI DSS, HITRUST, SOC 2, ISO 27001
1mo
Save
Mark Applied
Hide
Lead GRC Analyst
Warren, New Jersey, United States
HybridFull Time
MSIG USA
MSIG USA: Private US commercial property-and-casualty insurer serving businesses with customized coverage and risk-engineering services.
5+ YOE5-8+ years in GRC, IT risk, audit, or security; hands-on regulatory compliance and risk assessment; knowledge of NYDFS 23 NYCRR 500 and NIST CSF or ISO 27001; strong documentation and communication skills.
ServiceNow GRC, Archer, OneTrust, Azure, AWS
2w
Save
Mark Applied
Hide
10079845-WD Cybersecurity GRC - AVP (Open)
Tampa or Jersey City
$90k-$153k/yr HybridFull Time
Mitsubishi UFJ Financial Group
Mitsubishi UFJ Financial GroupTokyo Stock Exchange: MUFG: Japanese publicly traded bank holding providing banking, securities, trust, asset-management, leasing, card, and consumer-finance services globally.
4+ YOE4-7 years cyber risk, IT risk, GRC, or information security experience; working knowledge of cybersecurity domains; cloud security concepts; process documentation; regulatory frameworks (NIST CSF 2.0, CRI Profile, NIST SP 800-53, FFIEC, NYDFS Part 500, OCC/FRB); bachelor's degree in information security or related field.
GRC platforms, workflow tools
Job Posting
1w
Save
Mark Applied
Hide
GRC Analyst
Los Angeles or New York City or Chicago or Austin
$115k-$155k/yr HybridFull Time
FloQast
FloQast: Private accounting software helping finance teams automate close, compliance, and audit workflows with AI.
3+ YOE3-5+ years relevant experience; knowledge of security/privacy frameworks (SOC 1, SOC 2, ISO 27001, etc.); understanding of information security and privacy fundamentals; certification preferred (CompTIA, CISSP, CISA, CISM); AI governance knowledge.
AWS, Azure, GCP
1mo
Save
Mark Applied
Hide
Information Security GRC Analyst III, Controls Assurance
Jacksonville or New York City
$120k-$160k/yr OnsiteFull Time
Fanatics
Fanatics: Global digital sports platform for merchandise, collectibles, and betting.
4+ YOE4+ years in IT audit, IT control testing, or GRC; experience with user access reviews and at least one of PCI DSS, SOX ITGC, SOC, or internal control baseline; bachelor's degree or equivalent; CISA preferred.
GRC platform
1mo
Save
Mark Applied
Hide
Post Sales GRC Specialist
United States or New York City or San Francisco or Chicago or Seattle +2 more
$89k-$175k/yr RemoteFull Time
Rippling
Rippling: Unified workforce management platform for HR, IT, and Finance.
2+ YOE2+ years hands-on GRC or security compliance experience with frameworks like SOC 2, ISO 27001, HIPAA, GDPR; 2+ years customer-facing SaaS experience; ability to guide audits and manage multiple implementations.
Slack, Microsoft 365
1mo
Save
Mark Applied
Hide
Security Assurance & GRC Lead
San Francisco or New York City
$150k-$190k/yr HybridFull Time
Wispr Flow
Wispr Flow: Voice-to-text AI software turns speech into polished writing across desktop and phone applications.
Depth in GRC, security compliance, customer assurance, IT audit, or risk management; experience leading customer security reviews; working knowledge of SOC 2, ISO 27001; strong communication and project management; ability to work across teams.
Drata, SafeBase, Linear, SSO, SCIM
1mo
Save
Mark Applied
Hide
Senior Manager, GRC Strategy & AI
Chicago or Reston or Crum Lynne or White Plains
$143k-$238k/yr HybridFull Time
TransUnion
TransUnionNYSE: TRU: Global information and insights providing credit reporting and risk management.
10+ YOE10+ years in cybersecurity, risk, compliance, or related field; experience supporting senior executives and leading GRC programs; knowledge of NIST, ISO 27001, COBIT, CIS, FFIEC, PCI DSS, SOX; Bachelor's degree; advanced Microsoft 365 and Power BI skills.
Microsoft 365, Power BI
2w
Save
Mark Applied
Hide
GRC Specialist (Hybrid)
Short Hills or Hartford or Charlotte
$116k-$157k/yr HybridFull Time
Selective Insurance Company of America
Selective Insurance Company of AmericaNASDAQ: SIGI: U.S. property-and-casualty insurer serving businesses, public entities, and individuals through independent agents.
Working understanding of cybersecurity, risk management, compliance, vulnerability management, audit, or third-party risk; ability to evaluate security evidence; strong attention to detail; clear communication; proficiency with Microsoft Office.
Microsoft Office
4w
Save
Mark Applied
Hide
Security GRC Analyst/Program Manager, Bridge
New York City, New York, United States
OnsiteFull Time
Bridge
Bridge: Stablecoin infrastructure providing APIs for businesses and developers to move, store, issue, and spend digital dollars globally.
8+ YOE8+ years in Security GRC, startup experience, proficiency with NIST CSF, OCC Cybersecurity Supervision Work Program or FFIEC IT Examination Handbook, regulatory audit experience, broad technical depth in cloud, identity, appsec, data protection, incident response.