Integrity Marketing Group: Independent distributor of life, health, and wealth insurance products.
3+ YOEBachelor's degree and 3–6 years in GRC, risk, compliance, or IT audit; 2+ years administering an enterprise GRC platform; experience with reporting, integrations, migration, and control mapping.
Workiva, Onspring, Archer, ServiceNow, Microsoft Excel, SQL
Base Power Company: Building distributed battery storage networks for resilient home energy.
3+ YOE3+ years in security compliance, IT audit, or GRC; at least one SOC 2 cycle owned end-to-end; technical depth to evaluate controls; experience with GRC platforms like Secureframe, Vanta, or Drata; strong organizational and interpersonal skills.
ConcentraNYSE: CON: The nation’s leading occupational health care.
8+ YOEBachelor's degree in Computer Science or Information Security; 8–10 years risk management experience; 3–4 years project management; GRC, audits, TPRM, privacy frameworks, and stakeholder leadership experience.
GRC, SOX, SOC2 Type 2, PCI, NIST, HIPAA, SaaS, TPRM
New York City or Chicago or Austin or Dallas or Denver or Miami or San Francisco or Seattle
$270k-$290k/yrHybridFull Time
DriveWealth: Private B2B financial technology platform providing brokerage infrastructure to banks, brokers, asset managers, wallets, and brands.
15+ YOE15+ years in information security/GRC in regulated financial services; deep SEC/FINRA and global privacy knowledge; hands-on GRC, audit, TPRM, incident response, and executive/board reporting; relevant certifications preferred.
ProcoreNYSE: PCOR: Public construction management software serving owners, contractors, and other construction professionals worldwide.
7+ YOE7+ years in IT audit, GRC, security compliance or consulting; end-to-end Cyber Essentials/Plus ownership; hands-on endpoint/cloud security controls; familiarity with ISO 27001, SOC 2, NIST CSF; GRC platform proficiency; degree or equivalent experience.
United States or Alabama or North Dakota or South Dakota or Arkansas or New Hampshire or District of Columbia or Vermont or Utah or Maryland or Nebraska or Maine or Virginia or Nevada or New Mexico or Indiana or Wyoming or West Virginia or Wisconsin or Washington or Texas or Tennessee or South Carolina or Rhode Island or Pennsylvania or Oregon or Oklahoma or Ohio or North Carolina or New York or New Jersey or Missouri or Mississippi or Minnesota or Michigan or Massachusetts or Louisiana or Kentucky or Kansas or Iowa or Illinois or Idaho or Hawaii or Georgia or Florida or Delaware or Connecticut or Colorado or California or Arizona or Birmingham
3+ YOEBachelor's degree or equivalent; 3+ years audit, risk, or compliance experience; 3+ years with HIPAA, SSAE, SOC1, SOC2; strong communication and analytical skills.
FloQast: Private accounting software helping finance teams automate close, compliance, and audit workflows with AI.
3+ YOE3-5+ years relevant experience; knowledge of security/privacy frameworks (SOC 1, SOC 2, ISO 27001, etc.); understanding of information security and privacy fundamentals; certification preferred (CompTIA, CISSP, CISA, CISM); AI governance knowledge.
OceaneeringNYSE: OII: Global provider of engineered products and services.
5+ YOEBachelor's degree in Cybersecurity, IT, Computer Science or related field; 5+ years cybersecurity/risk/compliance experience; 5+ years with NIST SP 800-53/171, CMMC, RMF; 3+ years cloud security; US Citizen or permanent resident (ITAR).
NIST SP 800-53, NIST SP 800-171, CMMC, Risk Management Framework (RMF), Microsoft 365, Microsoft Purview, Microsoft Defender, Entra ID, ISO 27001, CIS Controls
Lexipol: Private public-safety software, consulting, training, wellness, and grant-services provider serving first responders and government agencies.
5+ YOE5+ years in security compliance, IT audit, or GRC; experience with NIST 800-53 Rev. 5 and GovRAMP; working knowledge of at least two frameworks (CJIS, GovRAMP/FedRAMP, SOC 2, NIST); US citizenship for CJIS certificate; remote in US.
PepsiCoNASDAQ: PEP: Multinational food and beverage.
5+ YOE5-8 years experience in cybersecurity governance, GRC, or contract governance; bachelor's degree in related field required; advanced degree, cybersecurity certifications, ServiceNow, Icertis, Microsoft 365 preferred.
ServiceNow, Icertis, Microsoft 365, Microsoft Copilot
Information Security GRC Analyst - Sugar Land or Lubbock
Lubbock or Sugar Land
OnsiteFull Time
Prosperity BankNew York Stock Exchange (NYSE): PB: Regional financial institution providing personal and business banking services.
2+ YOEBachelor's degree in cybersecurity, IT, computer science or related field; 2+ years experience in information security, GRC, compliance, or IT auditing; knowledge of NIST, FFIEC, CIS, CRI frameworks; strong analytical and communication skills.
Atlanta or Hoover or Chicago or Columbus or Houston or Detroit or Charlotte or Dallas or Tupelo +1 more
$57k-$113k/yrOnsiteFull Time
Huntington BankNASDAQ: HBAN: A regional bank offering consumer, commercial, and financial services.
3+ YOEBachelor's degree or 4+ years equivalent experience; 3+ years software development experience; GRC systems experience preferred; cloud and on-prem platforms; .NET/C# or other OOP languages; agile environment; Microsoft Office; authorized to work in US without sponsorship.
Archer, OpenPages, ProcessUnity, ServiceNow IRM, AWS, Apigee, Linux OS, Openshift, .NET, C#, Python, Java, Microsoft Office
H-E-B: Texas-based retail grocery and food supply chain.
7+ YOE7+ years in cybersecurity, information security, GRC, security architecture, or security consulting; experience with cloud platforms (AWS, Azure, GCP), IAM, application security, and security assessments; knowledge of frameworks like PCI DSS, HIPAA, SOX, NIST; professional security certification (CISSP, CISA, CISM, CRISC).
New York or Atlanta or Boston or Chicago or Cleveland or Dallas or Detroit or Pittsburgh or Hoboken or Houston or Los Angeles or McLean or Miami or Minneapolis or Charlotte or Philadelphia or Portland or San Francisco or Seattle or North America
$123k-$213k/yrHybridFull Time
EY: Global professional services firm providing assurance, tax, and consulting.
3+ YOERequires 3–5+ years of SAP Security/GRC experience, bachelor's degree preferred, SAP implementation expertise, GRC Access Control and IAM experience, U.S. driver's license, passport, and willingness to travel up to 80%.
SAP Application Security, SAP GRC Access Control, S/4HANA, SAP ECC, FIORI, ARIBA, HCM, SuccessFactors, Saviynt, SailPoint, SAP IAG, ServiceNow, HP ALM, BTP, SAC, AI, RPA
Chicago or Atlanta or Austin or Boston or Charlotte or Cleveland or Columbus or Dallas or Fort Wayne or Grand Rapids or Houston or Indianapolis or Knoxville or Lexington or Los Angeles or Louisville or Miami or Nashville or New York City or Oakbrook Terrace or Sacramento or San Francisco or South Bend or Tampa or Washington +1 more
$78k-$154k/yrOnsiteFull Time
Crowe Advisory LLC: U.S. advisory and consulting firm providing tax, advisory, consulting, and other nonattest services to business clients.
2+ YOEBachelor's degree preferred; 3–5 years professional experience and 2+ years in software implementation or technology consulting. Requires Workiva expertise, requirements analysis, solution design, communication, and project management.
Workiva, RSA Archer, ServiceNow GRC, Onspring, Lockpath, MetricStream, OpenPages, Microsoft Office, Microsoft Excel, Microsoft Word, Microsoft PowerPoint
Omaha or Florida or Iowa or Kansas or Minnesota or Missouri or Nebraska or North Dakota or Texas
HybridFull Time
Blue Cross and Blue Shield of Nebraska: Nonprofit Nebraska health insurer providing health, vision, dental, and travel coverage to groups, individuals, and families.
3+ YOEBachelor's degree in cybersecurity, IT, computer science, risk management or related field; 3-5 years cybersecurity assurance, security operations, engineering, penetration testing, IT audit, GRC or risk management experience; experience with control testing, technical assessments, configuration reviews, vulnerability validation; knowledge of NIST,...
NIST, CIS Controls, HITRUST, HIPAA, ISO 27001, MITRE ATT&CK
Caterpillar Inc.NYSE: CAT: Global manufacturer of construction and mining equipment and engines.
Bachelor's degree in relevant field or equivalent experience; deep understanding of SAP security, role-based access control, compliance frameworks, SOX, and risk management; 5 days onsite; travel up to 10%; no sponsorship.
Globe Life Inc.NYSE: GL: Provider of life and supplemental health insurance products.
8+ YOEBachelor's degree in IT, Information Systems, Information Assurance, Business or related field; 8+ years in software development, information security, privacy or GRC; 4+ years configuring a GRC platform; advanced SQL, scripting, reporting, data modeling; strong communication and program management.
SHI International: Global provider of IT solutions and services.
7+ YOEBachelor's degree in cybersecurity, information systems, risk management, business or related field; 7+ years GRC experience; expertise in governance models, security frameworks, GRC platforms; working knowledge of NIST, ISO 27001, CIS, SOC 2, PCI DSS, HIPAA; travel up to 10%.
ServiceNow GRC, Archer, AuditBoard, LogicGate, OneTrust, Microsoft Word, Microsoft Excel, Microsoft PowerPoint, Microsoft Outlook
United States or New Mexico or Decorah or West Jordan or Texas or Carrollton or Salem or Ohio or Illinois or Alabama
RemoteFull Time
Neumo: Government software and payments serving local, state, and federal agencies with cloud-based modernization tools.
6+ YOE6+ years in GRC, information security compliance, or IT audit; end-to-end SOC 1, SOC 2, and PCI DSS ownership; GRC platform and risk management experience; Jira proficiency; automation and team mentoring experience.