Security compliance (GRC) job description: template and real figures
A template for hiring a security compliance (GRC), with what employers in today’s 220 open postings for this work ask for and offer. Copy it, fill in the brackets, then post the job free.
- Open postings today
- 220
- Experience asked, median
- 5 years
- Postings that state pay
- 54%
- Median advertised pay
- $178K
- Open to remote work
- 30%
GRC Analyst [Company] · [City, or Remote and the countries it is open to] · [Full-time] About us [Two sentences: what the company does, for whom, and one number that shows where it is now.] About the role Our GRC Analyst proves to customers and auditors that a company handles data safely, and gets it through checks such as SOC 2. You will report to [manager’s title] and work with [team]. What you will do - [The most important result of the first year, with a number] - SOC 2 and ISO 27001: [what this means in your team] - Risk assessment: [what this means in your team] - Policy writing: [what this means in your team] - Audit evidence: [what this means in your team] - [One more duty that is specific to this job] What we are looking for - [5]+ years of experience as a security compliance (GRC) - Experience with SQL - Experience with Agile - Experience with Tableau - [One or two must-haves that are specific to this job] Pay and benefits - Pay range: $[lowest] – $[highest] a year, [plus equity or bonus if any] - Parental leave - Equity - Learning budget - [Paid time off, health cover and the rest of your benefits] How to apply [What to send, the interview steps and how long they take. Name the date you will reply by.]
What today’s security compliance (GRC) postings say
| Experience asked | Median 5 years; the middle half ask 5–7 years (123 postings name a number) |
|---|---|
| Pay advertised | $153K – $218K for the middle half; median $178K (99 postings with a yearly US-dollar range) |
| Skills named most | SQL (24%), Agile (8%), Tableau (6%) |
| Benefits named most | Parental leave (33%), Equity (20%), Learning budget (9%) |
| Most common level | Senior (35% of postings) |
| Titles employers use | Senior GRC Engineer, Senior GRC Analyst, GRC Engineer, Senior Security GRC Engineer, GRC Manager, Credit Risk Manager |
Counted from the 220 open postings for this work on Nov 14, 2026, read from employers’ own careers pages. Recounted on every update.
Questions about hiring a security compliance (GRC)
- What should a security compliance (GRC) job description include?
- What the person will achieve in the first year, the duties, the must-have experience, the pay range and how the hiring steps work. For this work, today’s postings name SQL, Agile, Tableau most often.
- Should a security compliance (GRC) job posting show the salary?
- Yes, if you can: 54% of today’s 220 open security compliance (GRC) postings here do. A range filters out people who would turn the offer down, and several US states and EU countries now require it.
- How many years of experience should I ask for?
- The median in today’s security compliance (GRC) postings is 5 years. Ask for what the work needs: every extra year you require shrinks the pool of applicants.
Everything about security compliance (GRC) work
See also: 220 open security compliance (GRC) jobs · security compliance (GRC) pay · how to hire a security compliance (GRC) · all job description templates