Jobs › Baltimore
Baltimore GRC Jobs
Governance, risk, and compliance jobs in Baltimore: federal and defense cybersecurity, asset management and banking, health care, and state government.
Open GRC jobs in Baltimore (12)
IT Cybersecurity Specialist
AI Governance Lead
Sr. Analyst (AI Global Compliance)
Artificial Intelligence (AI) Ops Specialist
IT CYBERSECURITY SPECIALIST (PLCYPLN/INFOSEC)
IT Cybersecurity Specialist (INFOSEC)
SUPV IT CYBERSECURITY SPECIALIST (INFOSEC)
IT CYBERSECURITY SPECIALIST (SYSANALYSIS/INFOSEC)
CYBER ASSESSMENT SPECIALIST
LEAD AUDITOR
RECORDS AND INFORMATION MANAGEMENT (RIM) SPECIALIST
IT Cybersecurity Specialist (PLCYPLN) - CES Recent Graduate
The Baltimore GRC market
Baltimore's governance, risk and compliance market runs on federal cybersecurity, asset management, health care and state government, and the four hire for different skills. The cleared defense work sits around Fort Meade. Downtown and out in Owings Mills, AI oversight at investment and wealth management firms has become a job title of its own. Federal health program audit centers on the CMS headquarters on Security Boulevard. The State writes its AI and cybersecurity rules at the Department of Information Technology.
Updated November 8, 2026
Federal and defense: Fort Meade, Linthicum and Columbia
This is the cleared end of the market. On November 8, 2026 the board carried cybersecurity jobs at Fort Meade with the Defense Information Systems Agency and a records job with the DoD Cyber Crime Center in Linthicum, all posted on USAJOBS. Contractors hire around the same agencies. Parsons lists its AI Governance Lead, who supports the Chief AI Officer at U.S. Cyber Command, at a Columbia field location, and the job requires an active Top Secret/SCI clearance with polygraph.
Asset management and banking: downtown and Owings Mills
T. Rowe Price has been based in Baltimore since its founding in 1937. Its global headquarters is at Harbor Point on the waterfront, and it also lists a location in Owings Mills (T. Rowe Price locations). The firm's AI compliance analyst job is in Owings Mills and is hybrid, with up to one day a week at home. Morgan Stanley is hiring a VP, AI Compliance Officer for Wealth Management Compliance, open in Baltimore or Dallas, to review AI and generative AI models against the rules on consumer protection and communications with the public.
Health care and federal health programs
The Centers for Medicare & Medicaid Services has its headquarters at 7500 Security Boulevard (CMS headquarters), and its audit openings post to USAJOBS with a Woodlawn location. Johns Hopkins and the University of Maryland Medical System, which has its headquarters at 250 W. Pratt Street, are both based in the city. For hospital compliance and privacy roles in any city, see healthcare GRC jobs.
State government and AI policy
Maryland's Department of Information Technology sets the State's AI rules and has offices at 100 Community Place in Crownsville and 300-301 West Preston Street in Baltimore. Its Responsible AI Policy, issued May 23, 2025, is covered in the questions below. The Office of the Attorney General is at 200 St. Paul Place downtown. Its Artificial Intelligence Strategy & Governance Manager opening closed on January 11, 2026, so if you saw it listed somewhere as open, it is not.
Aerospace manufacturing
ST Engineering MRAS builds aircraft and rocket components and engine nacelle systems in Baltimore. Its AI Ops Specialist is an early-career job that turns corporate AI policy into approval and attestation steps inside Microsoft tools, then runs the company's AI training program.
For nonprofit leadership roles in the city, our sister site ExecSearches keeps a guide to nonprofit executive jobs in Baltimore.
Key sectors: federal and defense cybersecurity, asset management and banking, health care, and state government. On the board now: 12 local and 0 remote-eligible jobs.
BLS put the 2024 median at $78,420. In 2026, market trackers show averages from roughly $99,000 to $120,000, with the top quartile above $160,000. Financial centers and senior governance roles sit at the top of that range.
Sources: BLS, 2024 median
Baltimore GRC jobs: what the market looks like right now
A snapshot built from the 12 Baltimore GRC roles currently on this page.
What these roles pay
Of the 12 open Baltimore GRC roles on this page, 12 publish a salary range. Across those:
- Median advertised midpoint: $166k
- Middle half of the market: $132k to $166k
- Full advertised range: $58k to $267k
Computed from the live postings on this page, not from survey data, and recalculated every time the board refreshes. Roles without a published range are excluded.
Where the work is
- Work mode: 0 remote, 1 hybrid, 11 on-site or unstated.
- Seniority mix: mid (9), senior (3)
- Employers hiring more than one: Defense Information Systems Agency (5)
Skills these postings ask for
- security control mapping (SOC 2, ISO 27001, NIST CSF)
- evidence automation and continuous monitoring
- vendor security review
- vulnerability and patch governance
- incident response coordination
How to get a cybersecurity GRC job: the full career guide for this field, covering entry routes, transferable backgrounds, certifications and salary by level.
Certifications that come up most
None of these are universally required, but they appear often enough in Baltimore GRC postings to be worth knowing: CISSP, CISM, CISA, CRISC, Security+. The certification academy covers what each one actually tests and who it is for.
Baltimore GRC jobs: questions and answers
Where are the GRC and AI governance jobs in the Baltimore area?
In four clusters. Fort Meade and the towns around it, Linthicum and Columbia among them, hold the federal and defense cybersecurity work, much of it cleared. Downtown Baltimore and Owings Mills hold asset management and banking compliance. Woodlawn holds federal health program audit at the Centers for Medicare & Medicaid Services. State government AI and cybersecurity work sits with the Department of Information Technology in Crownsville and on West Preston Street. This page covers Baltimore City and Baltimore County, Towson, Owings Mills, Columbia, Annapolis and Fort Meade; for the rest of the state, see Maryland GRC jobs.
Do Baltimore GRC jobs require a security clearance?
The federal and defense jobs we checked near Fort Meade do. On November 8, 2026 a Joint Activities cyber assessment job and a Defense Information Systems Agency cybersecurity job on USAJOBS both listed a Top Secret clearance, and Parsons' AI Governance Lead requires an active Top Secret/SCI with polygraph. None of the finance or manufacturing AI jobs we checked that day asks for one, although ST Engineering MRAS requires U.S. Person status because its work involves export-controlled technology. Cleared roles across the country are on security clearance GRC jobs.
What AI governance jobs are open in Baltimore right now?
The job list at the top of this page is the current answer. When we checked the employers' own career sites on November 8, 2026, four AI governance and AI compliance roles were open: Parsons' AI Governance Lead in Columbia ($148,300 to $266,900), T. Rowe Price's Sr. Analyst (AI Global Compliance) in Owings Mills ($87,000 to $148,000 in Maryland), Morgan Stanley's VP, AI Compliance Officer in Baltimore ($95,000 to $165,000 in Maryland) and ST Engineering MRAS's AI Ops Specialist in Baltimore ($65,000 to $93,000). Each job page links to the employer's own application.
Which certifications help with AI governance jobs in Baltimore?
None of those four postings requires a certification; they ask for years of experience and, at Parsons, a clearance. A credential still helps a resume get past the first screen. The IAPP's Artificial Intelligence Governance Professional (AIGP) certification is written for this work, and the NIST AI Risk Management Framework is the framework Maryland's own AI policy cites when it defines AI harm. You can practice for the AIGP for free in our AIGP academy module.
What does Maryland's Responsible AI Policy mean for state AI governance jobs?
It is the rulebook those jobs enforce. The Department of Information Technology issued the policy on May 23, 2025. It covers every AI system that State executive branch agencies use or are considering, plus the staff, consultants and contractors who buy, build or run those systems. Agencies send new AI use cases through an intake process, place each project in a risk tier, and add live use cases to a State AI Inventory that DoIT publishes every year; the top tier, uses that violate fundamental rights, is banned outright. Agencies must also require their contractors to follow it. Read the State of Maryland's Responsible AI Policy at DoIT.
Hiring for Baltimore GRC?
We have 12 open Baltimore GRC roles on the board right now. Reach candidates who are already searching for this role, not a general audience. Your posting appears on this page, in the job alerts, and across the GRC Careers network.
Post a job Pricing from $99 · About GRC Careers · Hiring toolkit