Jobs › Washington, DC
Washington, DC GRC Jobs
Governance, risk, and compliance jobs in Washington, DC: federal agencies, government contractors, defense, and nonprofits.
Open GRC jobs in Washington, DC (47)
PROGRAM ANALYST (CYBER INFRASTRUCTURE)
Policy Development, Technical AI Governance
Systems Risk Analyst
Supervisory IT Cybersecurity Specialist-Direct Hire
Service Information Security Officer (SISO)
Supervisory Privacy Specialist
IT Cybersecurity Specialist (DEV/DTA)
Supervisory Cyber Threat Analyst
Auditor (Performance)
Auditor (Performance)
Supervisory IT Cybersecurity Specialist (INFOSEC)
IT Cybersecurity Specialist (ENTARCH/AI)
Computer Engineer (Cybersecurity)
IT Cyber Specialist (INFOSEC/NETWORK)
IT Specialist (Information Security and Systems Analysis (INFOSEC/SYSANALYSIS))
Cybersecurity Specialist (Cyber Operations & Incident Responder)
Director of Audit Operations (Supervisory Performance Auditor)
Security Compliance Operations Specialist
Cyber Risk Operations Lead
Senior Transportation Data Analyst (Audit Liaison) - DIRECT HIRE
Supervisory IT Cybersecurity Specialist
General Attorney (Information and Privacy Law)
GRC Engineer
Assistant United States Attorney (AUSA) OC - Fraud and Asset Recovery
SCRM Compliance SME
Supplier Security & Assurance, Security GRC
Data Governance Analyst
SAP MDG (Master Data Governance) Business Partner Analyst
Security Risk & Compliance, Data Centers & Compute
SAP CAR Data Transfer and Audit Consultant
Senior Privacy Counsel (Remote)
Third-Party & Supply Chain Risk Analyst
Director of Regulatory Affairs - Sibley Memorial Hospital
Staff Identity Governance and Access Engineer
Governance, Risk & Compliance (GRC) Lead, Federal
Data Catalog and Governance Associate Manager
Corporate Counsel, U.S. Federal, Defense and National Security Compliance
Lead, Security Controls Assurance - SOX
Sanctions Compliance Lead
Sr. Counsel, Privacy Compliance
Auditor
Senior Manager, Cyber Threat Intelligence
Director of Technology, Customer Engagement Platforms
Director, Privacy Operations
Senior Officer, AI Technology Policy
Continuity Plans and Policy Specialist
DHS Continuity Evaluation Program Lead
The Washington, DC GRC market
Washington is the regulatory capital, and GRC hiring reflects it. Federal agencies, government contractors, defense and national-security firms, think tanks, and the associations and nonprofits clustered around the Beltway all hire heavily for compliance, risk, privacy, and audit. This is the strongest market in the country for FedRAMP, CMMC, NIST, FISMA, and public-sector AI governance work. If your background is federal compliance or government risk, Washington is the deepest pool there is.
Key sectors: federal agencies, government contractors, defense, and nonprofits. On the board now: 47 local and 0 remote-eligible jobs.
BLS put the 2024 median at $78,420. In 2026, market trackers show averages from roughly $99,000 to $120,000, with the top quartile above $160,000. Financial centers and senior governance roles sit at the top of that range.
Sources: BLS, 2024 median
Washington, DC GRC jobs: what the market looks like right now
A snapshot built from the 47 Washington, DC GRC roles currently on this page.
What these roles pay by level
| Level | Median midpoint | Postings |
|---|---|---|
| Mid-level | $166k | 24 |
| Senior / lead / manager | $220k | 5 |
How these figures were calculated, and sources
Primary source: our own board. Every figure above is the median midpoint of the salary ranges published in the live postings on this page. Nothing is estimated, modeled, or carried over from a previous month. It is recalculated each time the board refreshes.
What is included. Only postings that publish a salary range. Hourly, weekly and monthly rates are annualised (2,080 hours, 52 weeks, 12 months). Ranges below $20,000 a year are excluded as data-entry placeholders. A seniority band is shown only when at least five postings support it; director is present on this page but below that threshold, so no median is published for that band.
What this is not. These are advertised ranges, not accepted offers. Advertised ranges tend to run wider than what is actually paid, and roles that do not publish a range are missing from the calculation entirely, which can bias the result upward.
For an independent benchmark, compare against the U.S. Bureau of Labor Statistics Occupational Employment and Wage Statistics for SOC 15-1212 — Information Security Analysts, published annually at bls.gov/oes. BLS reports actual wages across all employers rather than advertised ranges, so its medians normally sit below job-board figures.
Where the work is
- Work mode: 0 remote, 2 hybrid, 45 on-site or unstated.
- Seniority mix: mid (32), senior (11), director (4)
- Employers hiring more than one: Accenture Federal Services (7), Anthropic (5), Consumer Product Safety Commission (2), Office of Inspector General (2), Offices, Boards and Divisions (2), Immigration and Customs Enforcement (2)
Skills these postings ask for
- security control mapping (SOC 2, ISO 27001, NIST CSF)
- evidence automation and continuous monitoring
- vendor security review
- vulnerability and patch governance
- incident response coordination
How to get a cybersecurity GRC job — the full career guide for this field: entry routes, transferable backgrounds, certifications and salary by level.
Certifications that come up most
None of these are universally required, but they appear often enough in Washington, DC GRC postings to be worth knowing: CISSP, CISM, CISA, CRISC, Security+. The certification academy covers what each one actually tests and who it is for.
Hiring for Washington, DC GRC?
We have 47 open Washington, DC GRC roles on the board right now. Reach candidates who are already searching for this role, not a general audience. Your posting appears on this page, in the job alerts, and across the GRC Careers network.
Post a job Pricing from $99 · About GRC Careers · Hiring toolkit