Public Sector GRC Jobs (2026): 104 Open Risk & Compliance Jobs

In the public sector you are not just following the rules, you are part of the machine that makes them. Government agencies, transit and infrastructure authorities, and the civic-tech firms that serve them hire steadily for compliance, risk, privacy, audit, and information security built around FISMA, FedRAMP, NIST, and public-records and accountability rules. The work is stable and mission-bound, and as agencies pick up AI and modern data systems, the need for oversight talent keeps climbing. If you want your work to serve the public directly, the civic GRC market is wide open.

Compliance Officer paystats as of Q2 2026

BLS put the 2024 median at $78,420. In 2026, market trackers show averages from roughly $99,000 to $120,000, with the top quartile above $160,000. Financial centers and senior governance roles sit at the top of that range.

Sources: BLS, 2024 median

Public Sector GRC jobs: what the market looks like right now

A snapshot built from the 104 Public Sector GRC roles currently on this page.

What these roles pay by level

Median advertised midpoint, by seniority band. Bars are to scale.

Median advertised salary midpoint by seniority level
Level	Median midpoint	Postings
Mid-level	$111k	56
Senior / lead / manager	$158k	10
Executive / C-suite	$190k	5

How these figures were calculated, and sources

Primary source: our own board. Every figure above is the median midpoint of the salary ranges published in the live postings on this page. Nothing is estimated, modelled, or carried over from a previous month. It is recalculated each time the board refreshes.

What is included. Only postings that publish a salary range. Hourly, weekly and monthly rates are annualised (2,080 hours, 52 weeks, 12 months). Ranges below $20,000 a year are excluded as data-entry placeholders. A seniority band is shown only when at least five postings support it; director is present on this page but below that threshold, so no median is published for that band.

What this is not. These are advertised ranges, not accepted offers. Advertised ranges tend to run wider than what is actually paid, and roles that do not publish a range are missing from the calculation entirely, which can bias the result upward.

For an independent benchmark, compare against the U.S. Bureau of Labor Statistics Occupational Employment and Wage Statistics for SOC 13-2011 — Accountants and Auditors, published annually at bls.gov/oes. BLS reports actual wages across all employers rather than advertised ranges, so its medians normally sit below job-board figures.

Where the work is

Work mode: 7 remote, 0 hybrid, 97 on-site or unstated.
Seniority mix: mid (71), senior (19), director (8), executive (6)
Employers hiring more than one: Veterans Health Administration (5), Army National Guard Units (5), Mistral AI (5), Office of the Inspector General (4), Office of Inspector General (3), Defense Finance and Accounting Service (3)

Skills these postings ask for

audit planning and scoping
walkthroughs and control testing
workpaper documentation
issue writing and management response
data analytics in audit

Certifications that come up most

None of these are universally required, but they appear often enough in Public Sector GRC postings to be worth knowing: CIA, CISA, CPA, CFE, CRMA. The certification academy covers what each one actually tests and who it is for.

Hiring for Public Sector GRC?

We have 104 open Public Sector GRC roles on the board right now. Reach candidates who are already searching for this role, not a general audience. Your posting appears on this page, in the job alerts, and across the GRC Careers network.

Post a job Pricing from $99 · About GRC Careers · Hiring toolkit

More industries: AI · Healthcare · Public Health · Nonprofit · Higher Education · Consulting · Financial Services · International · Legal · Data Governance · Government · Transportation & Infrastructure
All GRC jobs · Job alerts