Jobs › Maryland
Maryland GRC Jobs
Governance, risk, and compliance jobs in Maryland: federal cybersecurity, defense, intelligence, and biotech.
Open GRC jobs in Maryland (39)
Director, Cyber Security Operations
Associate Director, Privacy, Transparency and Records Operations
IT Cybersecurity Specialist (ENTARCH)
Records and Information Management Specialist
Supervisory Information Technology (IT) Specialist/Audit Manager
IT CYBERSECURITY SPECIALIST (APPSW/INFOSEC)
Ethics and Privacy Program Manager
Managing Director, Environmental & Social Risk Assessment
LEAD AUDITOR
RECORDS AND INFORMATION MANAGEMENT (RIM) SPECIALIST
Chief Security Risk & Compliance Officer
Quality Assurance Specialist
Government Information Specialist (Privacy/Freedom of Information Act Officer)
IT CYBERSECURITY SPECIALIST (INFOSEC)
AI Policy and Strategy Advisor
Deputy Inspector General for Audit Services
Senior Auditor (Information Systems)
Supervisory Auditor (Deputy Assistant Director - Division of Compliance and Oversight)
Systems Risk Analyst
Supervisory IT Cybersecurity Specialist-Direct Hire
Senior Technical Advisor for Risk Assessment and Analysis
Auditor (Performance)
Supervisory IT Cybersecurity Specialist (INFOSEC)
IT Cybersecurity Specialist (ENTARCH/AI)
Supervisory Information Technology Cybersecurity Specialist
IT Cyber Specialist (INFOSEC/NETWORK)
Cyber Exercise Planner
General Attorney (Information and Privacy Law)
Assistant United States Attorney (AUSA) OC - Fraud and Asset Recovery
Data Governance & Catalog Specialist
Data Governance Specialist
Fraud Operations Associate
Senior Privacy Counsel
IT Cybersecurity Specialist (PLCYPLN) - CES Recent Graduate
Director of Governance, Risk & Compliance (GRC)
Cybersecurity Risk Management Manager
Lead, Governance, Risk & Compliance (Remote)
Continuity Plans and Policy Specialist
DHS Continuity Evaluation Program Lead
The Maryland GRC market
Maryland is the other half of the federal cybersecurity corridor that Virginia anchors. Home to the NSA, U.S. Cyber Command, and a dense ecosystem of defense and intelligence contractors, it is a primary hub for federal IT GRC, with work mapping to FedRAMP, NIST, and the standards that govern government systems. Security clearances are common, and demand runs heavy for security controls, assessment, and authorization talent.
Key sectors: federal cybersecurity, defense, intelligence, and biotech. On the board now: 39 local and 0 remote-eligible jobs.
BLS put the 2024 median at $78,420. In 2026, market trackers show averages from roughly $99,000 to $120,000, with the top quartile above $160,000. Financial centers and senior governance roles sit at the top of that range.
Sources: BLS, 2024 median
Maryland GRC jobs: what the market looks like right now
A snapshot built from the 39 Maryland GRC roles currently on this page.
What these roles pay by level
| Level | Median midpoint | Postings |
|---|---|---|
| Mid-level | $146k | 21 |
| Senior / lead / manager | $166k | 6 |
How these figures were calculated, and sources
Primary source: our own board. Every figure above is the median midpoint of the salary ranges published in the live postings on this page. Nothing is estimated, modeled, or carried over from a previous month. It is recalculated each time the board refreshes.
What is included. Only postings that publish a salary range. Hourly, weekly and monthly rates are annualised (2,080 hours, 52 weeks, 12 months). Ranges below $20,000 a year are excluded as data-entry placeholders. A seniority band is shown only when at least five postings support it; director and executive / c-suite are present on this page but below that threshold, so no median is published for those bands.
What this is not. These are advertised ranges, not accepted offers. Advertised ranges tend to run wider than what is actually paid, and roles that do not publish a range are missing from the calculation entirely, which can bias the result upward.
For an independent benchmark, compare against the U.S. Bureau of Labor Statistics Occupational Employment and Wage Statistics for SOC 15-1212 — Information Security Analysts, published annually at bls.gov/oes. BLS reports actual wages across all employers rather than advertised ranges, so its medians normally sit below job-board figures.
Where the work is
- Work mode: 1 remote, 0 hybrid, 38 on-site or unstated.
- Seniority mix: mid (24), senior (9), director (5), executive (1)
- Employers hiring more than one: Accenture Federal Services (3), U.S. Coast Guard (2), Office of Inspector General (2), Defense Information Systems Agency (2), Offices, Boards and Divisions (2), Joint Activities (2)
Skills these postings ask for
- security control mapping (SOC 2, ISO 27001, NIST CSF)
- evidence automation and continuous monitoring
- vendor security review
- vulnerability and patch governance
- incident response coordination
How to get a cybersecurity GRC job — the full career guide for this field: entry routes, transferable backgrounds, certifications and salary by level.
Certifications that come up most
None of these are universally required, but they appear often enough in Maryland GRC postings to be worth knowing: CISSP, CISM, CISA, CRISC, Security+. The certification academy covers what each one actually tests and who it is for.
Hiring for Maryland GRC?
We have 39 open Maryland GRC roles on the board right now. Reach candidates who are already searching for this role, not a general audience. Your posting appears on this page, in the job alerts, and across the GRC Careers network.
Post a job Pricing from $99 · About GRC Careers · Hiring toolkit
All GRC jobs · Job alerts · GRC certifications