Security specialty
Governance, Risk & Compliance (GRC)
Computed from 121 different pay ranges employers posted, by 68 employers, each counted as a year's pay (an hourly rate times 2,080 hours). 88 of the 213 open roles in this set give no salary.
Live GRC roles
Read 11 Nov 2026, 17:07 UTCA few links on CyberJobs.cc are referral links: when one leads to a hire or a sign-up, the company behind it may pay CyberJobs.cc a fee. You pay nothing, and it never changes the salary an employer offers you.
$148,788–$185,984.75/yr- $158,707–$198,383.50/yr
$132,000–$228,000/yr
$123,000/yr
$1–$100/hr
Security Risk & Compliance, SOX IT (opens the job details)
Anthropic · San Francisco, CA | Seattle +3 more· 1d agoDetails
$270,000–$345,000/yr
Turn security into policies, evidence and assurance that customers, auditors and regulators accept: SOC 2, ISO 27001, FedRAMP, PCI DSS and CMMC programs, risk assessments, third-party and vendor reviews, security questionnaires and audit preparation. A route into security that rewards organization and writing as much as technical depth.
GRC alerts
Hear first about new GRC roles
One weekly email with the newest GRC roles at every employer we follow and the salary each states, so you can stop checking by hand. Free; leave whenever you like.
Only job openings, never promotions. Unsubscribing takes one click.
In short
Governance, Risk & Compliance (GRC). Turn security into policies, evidence and assurance that customers, auditors and regulators accept: SOC 2, ISO 27001, FedRAMP, PCI DSS and CMMC programs, risk assessments, third-party and vendor reviews, security questionnaires and audit preparation. Its postings usually state $153k–$322k/yr, and the middle salary today is $175k/yr. 97 employers have posted it, for example Anthropic, Thinking Machines Lab, Roblox.
Who recruits for GRC
Listed by the expected value of applying, with a small lift for employers that pay us a referral fee; that lift never touches a salary figure.
The salary explorer sets GRC against every other specialty and estimates a figure for your seniority.
Want companies to ask for you?
Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.
From the forum
Nobody has posted about GRC yet. Open the thread you wish existed.