136 grc jobs at 108 companies in New York
GRC Analyst
New York City, New York, United States
$108k-$125k/yr HybridFull Time
3+ YOE3+ years GRC, IT audit, security compliance, or privacy compliance experience; proven experience with SOX, SOC, PCI, NIST, or ISO frameworks; experience evaluating IT controls and supporting vendor risk programs; working knowledge of SaaS and cloud environments.
GRC platforms, workflow platforms
GRC Lead
New York City, New York, United States
OnsiteFull Time
6+ YOE6+ years in GRC, security compliance, or IT audit in B2B SaaS; ownership of SOC 2/ISO 27001; AI governance and regulatory knowledge; risk and policy experience; ability to read code and verify controls.
Senior GRC Engineer
New York City, New York, United States
$181k-$244k/yr HybridFull Time
6+ YOE6+ years in security engineering, GRC, or DevSecOps; scripting in Python or Bash; working knowledge of at least two compliance frameworks; GRC platform proficiency; ability to build diagrams and translate requirements.
Python, Bash, Drata, Vanta, Hyperproof, Archer, OneTrust, ServiceNow GRC
GRC Manager
Toronto or New York City
RemoteFull Time
Experienced in running GRC and security compliance programs (SOC 2, ISO 27001, ISO 42001), audit coordination, risk management, cloud security (AWS/Azure), and cross-functional stakeholder collaboration.
SOC 2, ISO 27001, ISO 42001, NIST CSF, GDPR, EU AI Act, AWS, Azure, Vanta, Drata, Secureframe, OneTrust, Archer
GRC Engineer
New York City or San Francisco
OnsiteFull Time
3+ YOE3-6 years software/security/DevOps experience; hands-on support of SOC 2, ISO 27001, or NIST; production-quality code in Python or similar; API/integration experience; familiarity with cloud infrastructure and IAM; GRC tooling experience; relevant frameworks like CMMC, NIST, GDPR/CCPA.
Python, Vanta, SOC 2, ISO 27001, NIST 800-53, NIST 800-171, CMMC, GDPR, CCPA
Head of Security GRC
New York City or Chicago or Austin or Dallas or Denver or Miami or San Francisco or Seattle
$270k-$290k/yr HybridFull Time
15+ YOE15+ years in information security/GRC in regulated financial services; deep SEC/FINRA and global privacy knowledge; hands-on GRC, audit, TPRM, incident response, and executive/board reporting; relevant certifications preferred.
MITRE ATT&CK, FS-ISAC
Staff Security Engineer, GRC
New York City, New York, United States
$246k-$287k/yr HybridFull Time
7+ YOERequires 7+ years in GRC, cloud security, security engineering, audit, or regulated technology; expertise in CMS EDE, NIST SP 800-53, AWS control implementation, compliance automation, audits, and risk management.
AWS, Azure, NIST SP 800-53, infrastructure as code, policy as code, GRC platforms, SIEM
Senior Analyst, GRC
White Plains, New York, United States
$140k-$180k/yr OnsiteFull Time
3+ YOE3+ years in GRC, IT audit, or compliance; working knowledge of security frameworks (PCI DSS, NIST, SOC 2, ISO 27001); experience with GRC platforms (Hyperproof, Archer, OneTrust); strong documentation and communication skills.
Hyperproof, Archer, OneTrust
Senior Manager, GRC
New York City or San Francisco or Seattle or Boston or Washington or Chicago
$170k-$201k/yr HybridFull Time
6+ YOERequires 6+ years in GRC, information security compliance, or IT audit; ownership of a SOC 2 or similar audit; SOC 2, HITRUST, and ISO 27001 knowledge; strong project management and communication skills.
Vanta, Drata, Secureframe, Hyperproof
Sr. GRC Analyst
United States or New York City
$155k-$185k/yr RemoteFull Time
5+ YOE5+ years GRC, IT audit, or information security compliance; experience with HITRUST, SOC 2, ISO 27001 audits; cloud-native control design; scripting and LLM automation; industry certifications preferred; U.S. work authorization without sponsorship.
AWS, Okta, Datadog, Retool, Gitlab, Vanta, Claude
Security GRC Lead
San Francisco or New York City or London
$350k-$425k/yr HybridFull Time
7+ YOE7+ years in security GRC, compliance engineering, or audit; 2+ years owning SOC 2 Type 2; ISO 27001 certification experience; enterprise audits; Vanta administration; cloud-security, controls-as-code, SQL, Python, or shell skills.
Vanta, Drata, Secureframe, Sprinto, Wiz, Panther, SQL, Python, KMS, SharePoint, MCP, NIST AI RMF, EU AI Act, ISO 42001, FedRAMP Moderate, HIPAA, PCI DSS, HITRUST, SOC 2, ISO 27001
GRC Analyst
United States or Alabama or North Dakota or South Dakota or Arkansas or New Hampshire or District of Columbia or Vermont or Utah or Maryland or Nebraska or Maine or Virginia or Nevada or New Mexico or Indiana or Wyoming or West Virginia or Wisconsin or Washington or Texas or Tennessee or South Carolina or Rhode Island or Pennsylvania or Oregon or Oklahoma or Ohio or North Carolina or New York or New Jersey or Missouri or Mississippi or Minnesota or Michigan or Massachusetts or Louisiana or Kentucky or Kansas or Iowa or Illinois or Idaho or Hawaii or Georgia or Florida or Delaware or Connecticut or Colorado or California or Arizona or Birmingham
$81k-$101k/yr RemoteFull Time
3+ YOEBachelor's degree or equivalent; 3+ years audit, risk, or compliance experience; 3+ years with HIPAA, SSAE, SOC1, SOC2; strong communication and analytical skills.
GRC Analyst
Los Angeles or New York City or Chicago or Austin
$115k-$155k/yr HybridFull Time
3+ YOE3-5+ years relevant experience; knowledge of security/privacy frameworks (SOC 1, SOC 2, ISO 27001, etc.); understanding of information security and privacy fundamentals; certification preferred (CompTIA, CISSP, CISA, CISM); AI governance knowledge.
AWS, Azure, GCP
Information Security GRC Analyst III, Controls Assurance
Jacksonville or New York City
$120k-$160k/yr OnsiteFull Time
4+ YOE4+ years in IT audit, IT control testing, or GRC; experience with user access reviews and at least one of PCI DSS, SOX ITGC, SOC, or internal control baseline; bachelor's degree or equivalent; CISA preferred.
GRC platform
Post Sales GRC Specialist
United States or New York City or San Francisco or Chicago or Seattle +2 more
$89k-$175k/yr RemoteFull Time
2+ YOE2+ years hands-on GRC or security compliance experience with frameworks like SOC 2, ISO 27001, HIPAA, GDPR; 2+ years customer-facing SaaS experience; ability to guide audits and manage multiple implementations.
Slack, Microsoft 365
Security Assurance & GRC Lead
San Francisco or New York City
$150k-$190k/yr HybridFull Time
Depth in GRC, security compliance, customer assurance, IT audit, or risk management; experience leading customer security reviews; working knowledge of SOC 2, ISO 27001; strong communication and project management; ability to work across teams.
Drata, SafeBase, Linear, SSO, SCIM
Senior Manager, GRC Strategy & AI
Chicago or Reston or Crum Lynne or White Plains
$143k-$238k/yr HybridFull Time
10+ YOE10+ years in cybersecurity, risk, compliance, or related field; experience supporting senior executives and leading GRC programs; knowledge of NIST, ISO 27001, COBIT, CIS, FFIEC, PCI DSS, SOX; Bachelor's degree; advanced Microsoft 365 and Power BI skills.
Microsoft 365, Power BI
Security GRC Analyst/Program Manager, Bridge
New York City, New York, United States
OnsiteFull Time
8+ YOE8+ years in Security GRC, startup experience, proficiency with NIST CSF, OCC Cybersecurity Supervision Work Program or FFIEC IT Examination Handbook, regulatory audit experience, broad technical depth in cloud, identity, appsec, data protection, incident response.
Lead IT GRC Analyst (Policy Management)
Colorado or New York City
$110k-$140k/yr RemoteFull Time
5+ YOE5+ years in governance, risk, compliance, cybersecurity, or related; bachelor's degree or equivalent; experience with governance frameworks, executive reporting, and stakeholder coordination; knowledge of NIST, ISO 27001, PCI DSS, CIS; GRC platforms like ServiceNow IRM, LogicGate, Archer, Jira.
ServiceNow IRM, LogicGate RiskCloud, Archer, Jira
GRC Cybersecurity Controls Analyst - MTL
New York City, New York, United States
$99k-$196k/yr OnsiteFull Time
3+ YOEBachelor's degree in Information Security, Cybersecurity, IT, Risk Management, Compliance, Engineering, Data Analytics or related; 3+ years GRC, IT risk, security controls, audit readiness, control testing, compliance, or security assurance experience; experience in financial services or regulated environment; knowledge of ISO 27001, PCI-DSS, SOC 2...
SQL, API
Explore Jobs
Expand Your Job Search
Top Cities in New York for Grc
- Grc jobs in New York, NY
- Grc jobs in Brooklyn, NY
- Grc jobs in Queens, NY
- Grc jobs in Manhattan, NY
- Grc jobs in The Bronx, NY
- Grc jobs in Staten Island, NY
- Grc jobs in Buffalo, NY
- Grc jobs in Rochester, NY
- Grc jobs in Yonkers, NY
- Grc jobs in Syracuse, NY
- Grc jobs in Amherst, NY
- Grc jobs in Albany, NY
- Grc jobs in Greenburgh, NY
- Grc jobs in New Rochelle, NY
- Grc jobs in Cheektowaga, NY
- Grc jobs in Mount Vernon, NY
- Grc jobs in Schenectady, NY
- Grc jobs in Utica, NY
- Grc jobs in White Plains, NY
- Grc jobs in Clay, NY