Maryland is the other half of the federal cybersecurity corridor that Virginia anchors. Home to the NSA, U.S. Cyber Command, and a dense ecosystem of defense and intelligence contractors, it is a primary hub for federal IT GRC, with work mapping to FedRAMP, NIST, and the standards that govern government systems. Security clearances are common, and demand runs heavy for security controls, assessment, and authorization talent.
From our sister site ExecSearches: for the broader nonprofit and public-sector leadership market in Maryland, see the Maryland Nonprofit Executive Jobs Guide, with salary benchmarks, top employers, and the local hiring picture.
Maryland GRC at a glance
Key sectors: federal cybersecurity, defense, intelligence, and biotech. On the board now: 40 local and 0 remote-eligible jobs.
Compliance Officer paystats as of Q2 2026
BLS put the 2024 median at $78,420. In 2026, market trackers show averages from roughly $99,000 to $120,000, with the top quartile above $160,000. Financial centers and senior governance roles sit at the top of that range.
Maryland GRC jobs: what the market looks like right now
A snapshot built from the 40 Maryland GRC roles currently on this page.
What these roles pay by level
Median advertised midpoint, by seniority band. Bars are to scale.
Median advertised salary midpoint by seniority level
Level
Median midpoint
Postings
Mid-level
$140k
25
Senior / lead / manager
$150k
7
How these figures were calculated, and sources
Primary source: our own board. Every figure above is the median midpoint of the salary ranges published in the live postings on this page. Nothing is estimated, modelled, or carried over from a previous month. It is recalculated each time the board refreshes.
What is included. Only postings that publish a salary range. Hourly, weekly and monthly rates are annualised (2,080 hours, 52 weeks, 12 months). Ranges below $20,000 a year are excluded as data-entry placeholders. A seniority band is shown only when at least five postings support it; director and executive / c-suite are present on this page but below that threshold, so no median is published for those bands.
What this is not. These are advertised ranges, not accepted offers. Advertised ranges tend to run wider than what is actually paid, and roles that do not publish a range are missing from the calculation entirely, which can bias the result upward.
For an independent benchmark, compare against the U.S. Bureau of Labor Statistics Occupational Employment and Wage Statistics for SOC 13-2011 — Accountants and Auditors, published annually at bls.gov/oes. BLS reports actual wages across all employers rather than advertised ranges, so its medians normally sit below job-board figures.
Where the work is
Work mode: 1 remote, 0 hybrid, 39 on-site or unstated.
Seniority mix: mid (25), senior (9), director (4), executive (2)
Employers hiring more than one: Development Finance Corporation (4), Defense Information Systems Agency (4), Central Intelligence Agency (3), House of Representatives (2), Pension Benefit Guaranty Corporation (2), Immigration and Customs Enforcement (2)
Skills these postings ask for
audit planning and scoping
walkthroughs and control testing
workpaper documentation
issue writing and management response
data analytics in audit
Certifications that come up most
None of these are universally required, but they appear often enough in Maryland GRC postings to be worth knowing: CIA, CISA, CPA, CFE, CRMA. The certification academy covers what each one actually tests and who it is for.
Hiring for Maryland GRC?
We have 40 open Maryland GRC roles on the board right now. Reach candidates who are already searching for this role, not a general audience. Your posting appears on this page, in the job alerts, and across the GRC Careers network.
We use only essential cookies to run this site. Analytics cookies stay off unless you turn them on. See our Cookie Notice.
Cookie preferences
We default to the minimum. Non-essential cookies stay off until you turn them on here, and we drop nothing before you do.
Essential cookies
Required for security and to operate the site, and they record no personal information. The only cookie we set is grc_sess, which keeps an employer signed in after login (expires in 30 days). Your choice here is saved in your browser's local storage, not a cookie. No tracking identifiers, and these are always active.
Analytics and usage cookies
Help us understand how the site is used. Off by default. Nothing analytics related loads unless you switch this on.
Your download is on the way
Want a new one every week? Join the AI governance brief: fresh jobs, guides, and reference sheets, straight to your inbox.
Your email stays confidential. Unsubscribing is one click. At most one email a week. Your download won't be interrupted.