GRC Analyst salary
What GRC analysts and compliance specialists are offered right now, taken from the salary ranges employers print in their own open postings rather than from self-reported surveys. The headline band is for every level together; the tables below separate first jobs from senior seats, remote from on-site, and one employer from another.
Typical means the span from the 25th percentile of range midpoints to the 90th percentile of range tops, every figure taken as a full-time year (an hourly rate times 2,080 hours). A group below needs enough distinct ranges for a figure of its own; where it has fewer, the table says so instead of guessing. The methodology explains how postings are read.
By seniority
Pay at each rung, from intern to manager
Titles are grouped by the level they name. A title with no level word is usually a mid-level seat.
| Level | With a salary | Typical | Middle |
|---|---|---|---|
| No level in the title | 49 | $146k–$345k/yr | $162k/yr |
| Senior, staff or principal | 63 | $164k–$288k/yr | $183k/yr |
| Lead or manager | 14 | $175k–$340k/yr | $198k/yr |
Workplace
Remote against on-site and hybrid
| Workplace | With a salary | Typical | Middle |
|---|---|---|---|
| Remote | 43 | $148k–$285k/yr | $164k/yr |
| On-site or hybrid | 83 | $163k–$345k/yr | $189k/yr |
Kind of employer
Who pays more: vendors, banks, cloud companies or labs
| Employer kind | With a salary | Typical | Middle |
|---|---|---|---|
| AI labs | 16 | $260k–$405k/yr | $275k/yr |
| Cloud, data and infrastructure | 22 | $165k–$277k/yr | $183k/yr |
| Finance, payments and crypto | 8 | $157k–$294k/yr | $181k/yr |
| Software and internet companies | 35 | $155k–$310k/yr | $175k/yr |
| Security software companies | 27 | $131k–$264k/yr | $165k/yr |
| Defense, aerospace and hardware | 16 | $144k–$214k/yr | $164k/yr |
| Security consultancies and managed services | 2 | too few ranges |
Employers
Best-paying employers for GRC analysts and compliance specialists
Only employers with enough stated ranges in this specialty for a figure of their own, highest middle first.
| Employer | With a salary | Typical | Middle |
|---|---|---|---|
| Anthropic | 12 | $263k–$405k/yr | $304k/yr |
| Zscaler | 7 | $175k–$257k/yr | $203k/yr |
| Roblox | 3 | $195k–$313k/yr | $202k/yr |
| Okta | 4 | $178k–$274k/yr | $201k/yr |
| Cloudflare | 3 | $171k–$248k/yr | $194k/yr |
| Plaid | 4 | $156k–$246k/yr | $172k/yr |
| Coupang | 3 | $158k–$164k/yr | $164k/yr |
| SpaceX | 4 | $163k–$200k/yr | $164k/yr |
| Anduril Industries | 4 | $144k–$196k/yr | $158k/yr |
| xAI | 3 | $149k–$222k/yr | $149k/yr |
| Chainguard | 4 | $97k–$164k/yr | $109k/yr |
Open now
The highest salaries stated in open postings
- Staff Security Engineer- Security and Compliance · San Jose, CA, USA$289,320-$537,360 per year
- Lead - Security Controls Assurance - SOX · San Francisco, CA | Seattle, WA | New York City, NY | Washington, DC$410,000-$510,000 per year
- Cyber Evaluations Engineer · Remote-Friendly, United States; San Francisco, CA | Washington, DC$300,000-$405,000 per year
- Staff Security Engineer, Risk Engineering · San Francisco, CA | New York City, NY | Seattle, WA$320,000-$405,000 per year
- Security Engineer, Privacy · New York, NY (HQ)$184,800-$374,900 per year
- Governance, Risk and Compliance Lead · San Francisco$225,000 - $350,000 per year
- Security Engineer, Product and Device Security · San Jose, CA$150,000 to $350,000 per year
- Controls Specialist, Security GRC · San Francisco, CA | New York City, NY | Seattle, WA$270,000-$345,000 per year
- Security Risk & Compliance, Agent Security · San Francisco, CA | New York City, NY$255,000-$345,000 per year
- Security Risk & Compliance, Data Centers & Compute · San Francisco, CA | Seattle, WA | New York City, NY | Washington, DC$270,000-$345,000 per year
Every GRC and compliance role with a salary, highest first.
Questions
GRC Analyst pay, answered from the postings
What salary do GRC analysts and compliance specialists earn in 2026?
Open postings for GRC analysts and compliance specialists state a typical $154k–$322k/yr, with the middle at $176k/yr. That rests on 122 distinct salary ranges from 68 employers, read 11 Nov 2026. All figures are full-time yearly salaries in US dollars: an hourly, weekly or monthly rate in a posting is multiplied by 2,080, 52 or 12 (40 hours a week, 52 weeks a year).
Do remote GRC and compliance roles pay less?
On today's postings remote roles state a middle of $164k/yr and on-site or hybrid roles $189k/yr, so on-site and hybrid seats pay more in the middle of the range. Both figures come from 126 open roles that state a salary.
Where do GRC analysts and compliance specialists get the highest offers?
Of the employers with enough stated ranges to compare, Anthropic has the highest middle, $304k/yr, followed by Zscaler ($203k/yr). The table on this page ranks every employer with a figure of its own.
Next steps
Governance, Risk & Compliance (GRC) alerts
Hear first about new Governance, Risk & Compliance (GRC) roles
One weekly email with the newest Governance, Risk & Compliance (GRC) roles at every employer we follow and the salary each states, so you can stop checking by hand. Free; leave whenever you like.
Only job openings, never promotions. Unsubscribing takes one click.