Mid Level Governance Risk And Compliance Jobs
Mid level governance risk and compliance jobs go to professionals ready to own risk assessments, lead control testing cycles, and shape compliance frameworks with minimal oversight. Openings run across Technology & Software, Healthcare & Medical Services, and Law & Legal Services, with AltaMed Health Services, xAI, and Weaver among the employers competing for governance risk and compliance talent at this level now.
Find JobsOverview
Showing 5 of 8+ Mid Level Governance Risk And Compliance jobs
Job Title/Req: Information Security Governance, Risk and Compliance Analyst - 619502
Location: Boston - Pier 4; hybrid in-office 2-3 days per week
Duration: 12 months
Expected Work Scheduled/Hours: 40
Expected Work Scheduled/Hours: Mon thru Fri 8 am-5 pm EST
Primary Responsibilities
- Perform information security risk assessments across applications, infrastructure, business processes, projects, and third parties
- Support maintenance of the US information security risk register, risk treatment plans, remediation status, and supporting evidence
- Execute third-party security reviews and vendor risk assessments in partnership with Procurement, Legal, Privacy, and business stakeholders
- Support lifecycle management of information security policies, standards, procedures, guidelines, attestations, and exceptions
- Collect, validate, and organize compliance and control evidence for internal audits, external audits, regulatory inspections, and assurance activities
- Track remediation plans and coordinate follow-up activities with risk owners, control owners, and cross-functional stakeholders
- Support control assessments and control effectiveness reviews against information security policies, standards, and regulatory requirements
- Maintain governance, risk, and compliance documentation, repositories, metrics, dashboards, and reporting artifacts to support management visibility
- Assist with preparation of executive reporting materials, governance committee content, and risk review documentation
- Identify opportunities to improve GRC processes through standardization, automation, documentation quality, and repeatable workflows
Requirements
- Minimum of 3 years of experience in information security, cybersecurity governance, IT risk management, compliance, audit, or related disciplines
- Bachelor’s degree preferred in Cybersecurity, Information Technology, Information Systems, Business, Risk Management, or a related field
- Working knowledge of cybersecurity and risk frameworks such as NIST CSF 2.0, ISO 27001, CIS Controls, PCI, SOX, FAIR, or similar standards
- Experience supporting risk assessments, compliance reviews, audits, control assurance, third-party reviews, or remediation tracking
- Strong written communication skills with the ability to develop clear documentation, reports, procedures, and stakeholder-ready materials
- Strong analytical and organizational skills with attention to detail and the ability to manage multiple priorities
- Relevant certifications such as Security+, GSEC, SSCP, CISA, CRISC, or similar certifications preferred
Travel and Location
- Estimated travel required: 0-5%
- On-site in Boston preferred 1-2 days hybrid or 100% remote with occasional travel to Boston
Job Title/Req: Information Security Governance, Risk and Compliance Analyst - 619502
Location: Boston - Pier 4; hybrid in-office 2-3 days per week
Duration: 12 months
Expected Work Scheduled/Hours: 40
Expected Work Scheduled/Hours: Mon thru Fri 8 am-5 pm EST
Primary Responsibilities
- Perform information security risk assessments across applications, infrastructure, business processes, projects, and third parties
- Support maintenance of the US information security risk register, risk treatment plans, remediation status, and supporting evidence
- Execute third-party security reviews and vendor risk assessments in partnership with Procurement, Legal, Privacy, and business stakeholders
- Support lifecycle management of information security policies, standards, procedures, guidelines, attestations, and exceptions
- Collect, validate, and organize compliance and control evidence for internal audits, external audits, regulatory inspections, and assurance activities
- Track remediation plans and coordinate follow-up activities with risk owners, control owners, and cross-functional stakeholders
- Support control assessments and control effectiveness reviews against information security policies, standards, and regulatory requirements
- Maintain governance, risk, and compliance documentation, repositories, metrics, dashboards, and reporting artifacts to support management visibility
- Assist with preparation of executive reporting materials, governance committee content, and risk review documentation
- Identify opportunities to improve GRC processes through standardization, automation, documentation quality, and repeatable workflows
Requirements
- Minimum of 3 years of experience in information security, cybersecurity governance, IT risk management, compliance, audit, or related disciplines
- Bachelor’s degree preferred in Cybersecurity, Information Technology, Information Systems, Business, Risk Management, or a related field
- Working knowledge of cybersecurity and risk frameworks such as NIST CSF 2.0, ISO 27001, CIS Controls, PCI, SOX, FAIR, or similar standards
- Experience supporting risk assessments, compliance reviews, audits, control assurance, third-party reviews, or remediation tracking
- Strong written communication skills with the ability to develop clear documentation, reports, procedures, and stakeholder-ready materials
- Strong analytical and organizational skills with attention to detail and the ability to manage multiple priorities
- Relevant certifications such as Security+, GSEC, SSCP, CISA, CRISC, or similar certifications preferred
Travel and Location
- Estimated travel required: 0-5%
- On-site in Boston preferred 1-2 days hybrid or 100% remote with occasional travel to Boston
See All 8 Mid Level Governance Risk And Compliance Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsMid Level Governance Risk And Compliance Job Market
Who's Hiring
Top Industries Hiring
- Technology & Software
- Healthcare & Medical Services
- Law & Legal Services
- Accounting & Auditing
- Staffing & Recruiting
Mid Level Governance Risk And Compliance Jobs: Frequently Asked Questions
How do I get a mid level governance risk and compliance job?
Position your experience around ownership, not just participation. Highlight assessments you led, control gaps you identified, or compliance programs you helped build from the ground up. Employers at this level want candidates who can operate with limited direction, so your resume and interviews should emphasize decisions you made independently, stakeholders you managed, and measurable outcomes you delivered.
Which companies hire mid level governance risk and compliances?
Companies hiring mid level governance risk and compliances right now include AltaMed Health Services, xAI, and Weaver, based on current listings on Migrate Mate as of November 2026. Hiring at this level covers large regulated enterprises and mid-size firms building out dedicated compliance and risk functions for the first time.
Are there remote mid level governance risk and compliance jobs?
Yes, though availability varies by employer and specialization. About 43% of mid level governance risk and compliance openings are remote or hybrid as of November 2026, reflecting how much of this work, such as policy review, control documentation, and audit prep, translates well outside a traditional office setting.
How do I move up to a mid level governance risk and compliance role?
Growth into mid level comes from building depth in a specific domain, whether that is IT risk, regulatory compliance, or internal audit, and then demonstrating ownership of real projects. Focus on taking end-to-end responsibility for assessments, earning relevant certifications like CISA or CRISC, and compiling a record of findings you surfaced and remediated. Consistent impact in a junior role is what makes the case.
Which industries hire the most mid level governance risk and compliances?
Mid Level governance risk and compliance roles concentrate in Technology & Software, Healthcare & Medical Services, and Law & Legal Services, based on current listings on Migrate Mate as of November 2026. These sectors face the heaviest regulatory scrutiny and internal audit requirements, creating sustained demand for professionals who can manage frameworks independently at the mid level.