The demand for GRC analyst remote jobs continues to grow across the USA as companies strengthen governance, risk, and compliance programs. With 500+ open positions currently available, organizations are seeking skilled professionals who can work remotely while supporting teams nationwide. This surge reflects a broader shift toward flexible, technology-driven compliance operations.
Successful candidates typically bring strong analytical skills, familiarity with regulatory frameworks such as SOX, ISO 27001, and NIST, and the ability to assess risk across complex systems. Employers look for professionals who can communicate findings clearly, manage audits, and collaborate with cross-functional teams. Proficiency with GRC platforms, attention to detail, and a proactive approach to identifying compliance gaps help candidates stand out when companies look to hire the right analyst.
Remote work for a GRC analyst often involves virtual collaboration with security, legal, and IT departments, supported by cloud-based compliance tools and regular video check-ins. The USA market shows steady demand for GRC analyst positions as businesses prioritize cybersecurity and regulatory readiness. This trend is expected to continue, with many companies offering fully remote arrangements to attract top talent nationwide.
If you are ready to advance your career in governance, risk, and compliance, now is the time to explore GRC analyst vacancies tailored to your expertise. Global Work AI connects skilled professionals with employers seeking remote talent across the USA. Take the next step and discover how your skills can make an impact in this growing field.
Worldwide Clinical Trials
Build and maintain the Enterprise IT AI Governance framework, including standards and procedures. Establish a company-wide intake and approval process for AI use cases and maintain a centralized inventory of AI systems.
remote, United States$101k – $201k/yrFull TimeLead / Manager
Pathward, N.A.
Develop and execute strategic IT governance, risk, and compliance (GRC) plans. Oversee technology risk assessments, issue remediation, and exception governance. Provide executive reporting on technology risk and compliance status.
remote, United States$119k – $221k/yrFull TimeDirector
Unit21, INC
Manage day-to-day governance, risk, and compliance tasks including audit readiness for SOC 2 Type II and PCI DSS. Coordinate SOC 2 audit cycles, prepare evidence, and track compliance activities. Respond to security questionnaires and maintain the security answer library.
remote, AZ, United States$101k/yrPart TimeJunior (<2 years)
Sensiba
Manage end-to-end delivery of audit engagements, including planning, testing, and issue resolution. Ensure accurate documentation and high-quality standards are met. Coach and support junior team members, review their work, and contribute to team development and continuous improvement efforts.
remote, United States$66k – $101k/yrFull TimeSenior (5+ years)
NBCUniversal
Lead the implementation and continuous improvement of SAP GRC Access Control and Identity and Access Governance modules. Collaborate with architecture and engineering teams to evaluate secure access models and provide technical guidance.
remote, United States$130k – $170k/yrFull TimeSenior (5+ years)
Lifeway Christian Resources
Guide IT security governance, risk management, and compliance. Support third-party risk assessments and PCI compliance efforts. Conduct internal risk reviews and maintain security policies, standards, and procedures.
remote, TN, United StatesFull TimeMiddle (2-4 years)
ECI
Serve as a senior advisor to client executives, leading compliance programs and risk management strategies. Conduct assessments, develop policies, and manage audit lifecycles across multiple frameworks. Translate regulatory requirements into actionable guidance and maintain risk registers.
remote, United States$140k – $150k/yrFull TimeLead / ManagerThe Adecco Group
Support enterprise risk assessments and continuous risk monitoring. Leverage compliance technology and data analytics tools for proactive compliance. Prepare compliance reports and performance dashboards for leadership.
remote, United StatesFull TimeMiddle (2-4 years)
Accenture Federal Services
Design, implement, and maintain SAP application security solutions. Lead user management activities including role design, provisioning, access reviews, and Segregation of Duties assessments.
remote, United States$106k – $206k/yrFull TimeLead / Manager
CONMED Corporation
Lead the development and maintenance of cybersecurity policies and governance frameworks. Conduct enterprise-wide risk assessments and manage compliance with regulatory requirements.
remote, Largo, FL, United States$104k – $164k/yrFull TimeLead / Manager
Workstreet
Execute client compliance initiatives, implement and maintain security compliance programs aligned with SOC 2, ISO 27001, and regulatory standards. Author and update corporate security policies and control evidence for audits.
remote, United StatesFull TimeJunior (<2 years)Workstreet
Execute client compliance initiatives, implement and maintain security compliance programs aligned with SOC 2, ISO 27001, and regulatory standards. Author and update security policies and control evidence for audits. Identify and mitigate technical risks by collaborating with technical teams.
remote, United StatesFull TimeJunior (<2 years)
Echelon Risk + Cyber
Lead and execute cybersecurity risk and maturity assessments against frameworks like NIST CSF and ISO 27001. Develop and maintain cybersecurity policies, incident response plans, and client reports. Collaborate with IT management to enhance client maturity and assist in business development efforts.
remote, United StatesFull TimeSenior (5+ years)Accenture Federal Services
Lead the governance, risk, and compliance program for a federal cybersecurity contract. Manage the enterprise risk register and the full Plan of Action and Milestones (POA&M) lifecycle. Administer the GRC platform, conduct supply chain risk assessments, and build executive risk dashboards.
remote, United States$110k – $224k/yrFull TimeLead / Manager
MongoDB
Lead external audits and certifications, coordinating audit plans and findings. Own internal audit cadences and remediation tracking, ensuring accountability for findings. Serve as the primary contact for auditors and customers during security reviews.
remote, United States$95k – $187k/yrFull TimeSenior (5+ years)
Design, implement, and maintain integrations, data pipelines, and automated checks across various systems. Lead automation efforts for evidence collection related to compliance requirements.
remote, United States$191k – $267k/yrFull TimeSenior (5+ years)ECI
Develop and implement cybersecurity risk management strategies for financial services and government clients. Conduct security assessments and gap analyses, advising on compliance with regulatory frameworks like NIST and ISO 27001.
remote, United States$120k/yrFull TimeSenior (5+ years)
TEKsystems
Manage multiple sales opportunities and account teams, ensuring solution assurance for clients. Develop and mature solution designs by collaborating with customers and stakeholders. Facilitate internal communication for new engagements and manage solution change control processes.
remote, MD, United States$125k – $190k/yrFull TimeLead / Manager
Workiva Inc.
Lead a team of engineers, managing delivery schedules and communicating risks. Own the issue management lifecycle and develop core capabilities such as action plan management and evidence capture.
remote, United States$129k – $210k/yrFull TimeLead / Manager
SmartSuite
Drive new business with enterprise organizations by owning the full sales cycle, including prospecting, discovery, demos, proposal, negotiation, and closing.
remote, Irvine, CA, United StatesFull TimeMiddle (2-4 years)
Reltio
Prepare responses to customer security, privacy, compliance, and AI governance inquiries. Coordinate with subject matter experts for validation and documentation. Execute third-party risk assessments and maintain vendor inventory.
remote, United StatesFull TimeJunior (<2 years)
State of Michigan
Serve as an IT Compliance Analyst supporting the Michigan Department of Education. Complete and maintain System Security Plans for IT applications, ensuring compliance with NIST 800-53, FERPA, PCI, and PHI regulations.
remote, MI, United States$51k – $93k/yrFull TimeJunior (<2 years)
Cyera
Design and document the enterprise risk management methodology, including risk taxonomy and scoring models. Own the risk register lifecycle from identification to closure, conducting assessments and tracking treatment plans.
remote, Creve Coeur, MO, United States$100k – $120k/yrFull TimeSenior (5+ years)
CSCI Consulting
Lead the implementation and configuration of SAP GRC Process Control and Risk Management. Facilitate workshops with stakeholders to gather requirements and translate them into effective SAP GRC solutions. Collaborate with audit teams to strengthen compliance and optimize risk-management processes.
remote, United StatesFull TimeLead / Manager
Ping Identity
Own and support key components of the GRC programme, ensuring alignment with ISO 27001 and SOC 2. Conduct enterprise and product-level risk assessments, support external audits, and develop security policies.
remote, United States$115k – $159k/yrFull TimeSenior (5+ years)Workiva Inc.
Lead product strategy and execution for GRC portfolio, translating user feedback into software solutions. Collaborate with engineering, design, and business leaders to align on product vision and go-to-market strategies.
remote, IA, United States$140k – $180k/yrFull TimeSenior (5+ years)
Accela
Lead the implementation and certification of ISO/IEC 27001:2022 program. Conduct gap assessments, manage compliance activities, and coordinate certification audits. Develop information security policies and maintain ISMS documentation.
remote, United States$120k – $140k/yrFull TimeSenior (5+ years)
Radicle Health
Conduct ongoing risk reviews and maintain a risk register. Support risk assessments and develop risk mitigation plans. Monitor adherence to regulatory frameworks and internal controls. Assist in audit readiness and coordinate evidence collection.
remote, United States$95k – $105k/yrFull TimeMiddle (2-4 years)
RxBenefits, Inc.
Coordinate and execute corporate compliance initiatives, working with security and compliance teams. Conduct security risk assessments, maintain the GRC platform, and produce reports on security risks.
remote, United States$81k – $101k/yrFull TimeMiddle (2-4 years)
Supabase
Conduct risk assessments, maintain the risk register, and report status to leadership. Monitor compliance controls, triage failures, and support internal audits. Manage day-to-day operations for compliance programs, including evidence collection and control owner follow-up.
remote (anywhere)Full TimeMiddle (2-4 years)
Coterie
Build and maintain testing and monitoring processes for security and application controls. Perform control testing, document procedures, and identify control failures. Retrieve evidence from systems for audits and validate technical evidence.
remote, United States$115k – $140k/yrFull TimeMiddle (2-4 years)
Ceresti Health
Collect and document evidence for SOC 2 and HITRUST compliance, track control evidence status, and coordinate with control owners across departments. Update security and privacy policies, manage versions, and ensure compliance.
remote, United StatesFull TimeJunior (<2 years)
Infotech
Manage day-to-day operations of SOC 2 Type II and GovRAMP programs, including evidence collection and documentation of controls. Coordinate with engineering, IT, and business teams to ensure compliance and close gaps.
remote, United StatesFull TimeSenior (5+ years)
Hightouch
Own customer security reviews, including questionnaires and due diligence. Drive compliance strategy and audits for SOC 2 and ISO 27001 programs. Ensure effective controls and automate evidence collection.
remote (anywhere)Full TimeJunior (<2 years)
AP MAX INC
Support the SOC 2 program by coordinating evidence collection, validation, and remediation across control owners. Maintain audit readiness year-round, identify control gaps, and support SOC 2 Type 2 audit fieldwork. Operate Drata for compliance automation and maintain the SaaS/technology inventory.
remote, United StatesFull TimeJunior (<2 years)
GitHub, Inc.
Lead security capability risk assessments, including scoping against NIST CSF subcategories and publishing assessment reports. Analyze data to identify and prioritize technical risks, develop FAIR-style cyber risk scenarios, and evaluate capabilities against frameworks.
remote, United States$124k – $329k/yrFull TimeSenior (5+ years)
Innovaccer Analytics
Manage Governance, Risk & Compliance activities, including responding to RFPs and security questionnaires. Conduct risk assessments, business impact analyses, and support audits for frameworks like SOC 2 Type II and HIPAA.
remote, United StatesFull TimeMiddle (2-4 years)
SHI International Corp.
Lead client-facing consulting engagements in governance, risk, and compliance (GRC). Conduct security assessments, facilitate risk assessments, and develop governance models and security frameworks. Collaborate with sales and technical teams to identify client needs and support successful delivery.
remote, United States$165k – $205k/yrFull TimeSenior (5+ years)
Scotts Miracle-Gro
Oversee SAP security and governance, managing user provisioning, role administration, and access risk evaluations. Collaborate with technical specialists to build security configurations across various SAP modules.
remote, Alaska, United States$116k – $136k/yrFull TimeSenior (5+ years)
Live Nation Entertainment
Manage the operational delivery of a Risk Operations portfolio, including risk assessments, quality assurance, and stakeholder communications. Oversee a team of risk analysts and AI agents, ensuring work is prioritized and completed with quality.
remote, United StatesFull TimeLead / Manager10,000,000+ more jobs available!
