Governance Risk And Compliance Jobs in New York
Governance Risk And Compliance jobs in New York represent one of the most active markets in the country, concentrated in financial services, healthcare, and technology across New York City, Albany, and Buffalo. Major employers including JPMorgan Chase, Citigroup, and NewYork-Presbyterian consistently maintain governance, risk, and compliance teams at scale. The most in-demand specialties are regulatory compliance, enterprise risk management, and internal audit, with openings at every level from analyst to chief compliance officer. Find a role that fits below and apply directly.
Find JobsOverview
Showing 5 of 6+ Governance Risk And Compliance jobs
- Rich medical & pharmacy benefits, including vision benefits
- Dental benefits
- Health Savings Accounts
- Health Care and Dependent Care Flexible Spending Accounts
- 401(k) with robust matching
- Employer paid Pension Plan
- Employee Stock Purchase Plan with a generous matching contribution
- State of the art Employee Assistance Program
- Paid Parental Leave
- Generous paid time off plus paid holidays
- Family support: emergency backup child, & elder care assistance
- Social responsibility and volunteer opportunities
- Employee discount program
- Commuter Benefits
- Culture of growth and learning: career development; tuition reimbursement; recognition program Life and Long-Term Disability Benefits
The System Manager, Information Security (InfoSec) Governance, Risk & Compliance (GRC), is a leadership role responsible for overseeing information security governance, risk management, compliance, and related strategic programs across the enterprise. Responsibilities include establishing and maintaining frameworks, processes, and capabilities used to identify, assess, manage, communicate, and monitor cybersecurity risk while ensuring alignment with regulatory requirements, industry standards, and business objectives. The successful candidate must be self-motivated, able to work with minimal guidance, possess extensive organizational skills and attention to detail, and drive results.
- Oversee the development and maintenance of information security policies and governance frameworks aligned with national energy security priorities in compliance with regulatory requirements and industry standards.
- Oversee enterprise information security risk management programs and related governance processes to support informed risk-based decision making.
- Lead and oversee information security programs focused on internal stakeholder engagement, awareness, and external third-party risk considerations.
- Manage team of GRC professionals to achieve business objectives.
- Be accountable for building team capabilities and operational excellence through workforce planning, training, performance management, and enforcing standards to ensure readiness during incidents.
- Collaborate with internal stakeholders (IT, OT, Legal, Risk, Operations) and external partners (regulators, government agencies, industry groups).
- Facilitate incident response planning, exercises, and post-incident reviews to strengthen organizational readiness.
- Provide executive-level reporting, supports incident response planning, and champions a culture of cyber accountability and resilience across the organization.
- Maintain the Companys information security policies, standards, and control frameworks, supporting internal and external audits, and driving continuous improvement of governance and risk management maturity.
- Provide executive-level reporting on cybersecurity posture, compliance status, and resilience metrics.
- Serve as a key liaison between InfoSec, IT, Audit, Legal, peers in InfoSec Compliance, and business stakeholders to ensure security risks are clearly communicated and appropriately governed.
- Aid internal and regulatory compliance efforts, including NERC CIP, TSA, Coast Guard, and other applicable federal and state mandates.
- Facilitate and maintain cyber resilience strategies to ensure continuity of operations during and after cyber incidents.
- Follow change management and production acceptance controls and guidelines, maintain diagrams and documentation as appropriate and support reviews, auditing and maintenance activities
- Promote a customer service-oriented team by emphasizing professionalism, honesty, concern, courtesy, excellence and teamwork in a group. Ensure that communications between staff members and business organizations are handed in a professional, efficient manner
- Support operating organizations during corporate emergencies. Participate in the Company's emergency management processes for cybersecurity.
- Master's Degree and 6 years of work experience in IT or Utility environments with at least four (4) years in GRC or similar or
- Bachelor's Degree and 8 years of work experience in IT or Utility environments with at least four (4) years in GRC or similar.
- Master's Degree preferably in Information Technology, Computer Science, Information Security, Math, Engineering or business-related discipline preferred.
- Bachelor's Degree preferably in Information Technology, Computer Science, Information Security, Math, Engineering or business-related discipline preferred.
- Must demonstrate knowledge of project management concepts and ability to support project monitoring, tracking, and facilitation to ensure project deliverance/completion, required.
- Proven experience of process and policy creation and documentation, required.
- Must demonstrate strong analytical skills, required.
- Must have managerial/supervisory experience, required.
- Must demonstrate strong oral and written communication, presentation and interpersonal skills, required.
- Must have used, and have working knowledge of MS Excel, Word and PowerPoint, required.
- Experience and working knowledge of information security governance, risk management, compliance, and related cybersecurity program functions, required.
- Experience developing and delivering well organized analytical presentations, preferred.
- Experience with contract administration a plus, preferred.
- Experience with developing training and awareness programs, preferred.
- Experience working as a project or program manager role a plus, preferred.
- Experience in Information Technology/Cybersecurity a plus, preferred.
- Effectively coaches and delivers constructive feedback
- Demonstrates a high commitment to quality
- Assumes personal responsibility for actions
- Strong verbal communication and listening skills
- Ability to lead/manage others
- Possesses flexibility to work in a fast paced, dynamic environment
- Effective interpersonal skills
- Demonstrated analytical skills
- Ability to simultaneously handle multiple priorities
- Effective interpersonal skills
- Driver's License Required
- Ability to push, pull, and lift up to 25 pounds
- Sit or stand to use a keyboard, mouse, and computer for the duration of the workday
- The selected candidate will be assigned a System Emergency Assignment (i.e., an emergency response role) and will be expected to work non-business hours during emergencies, which may include nights, weekends, and holidays.
- Rich medical & pharmacy benefits, including vision benefits
- Dental benefits
- Health Savings Accounts
- Health Care and Dependent Care Flexible Spending Accounts
- 401(k) with robust matching
- Employer paid Pension Plan
- Employee Stock Purchase Plan with a generous matching contribution
- State of the art Employee Assistance Program
- Paid Parental Leave
- Generous paid time off plus paid holidays
- Family support: emergency backup child, & elder care assistance
- Social responsibility and volunteer opportunities
- Employee discount program
- Commuter Benefits
- Culture of growth and learning: career development; tuition reimbursement; recognition program Life and Long-Term Disability Benefits
The System Manager, Information Security (InfoSec) Governance, Risk & Compliance (GRC), is a leadership role responsible for overseeing information security governance, risk management, compliance, and related strategic programs across the enterprise. Responsibilities include establishing and maintaining frameworks, processes, and capabilities used to identify, assess, manage, communicate, and monitor cybersecurity risk while ensuring alignment with regulatory requirements, industry standards, and business objectives. The successful candidate must be self-motivated, able to work with minimal guidance, possess extensive organizational skills and attention to detail, and drive results.
- Oversee the development and maintenance of information security policies and governance frameworks aligned with national energy security priorities in compliance with regulatory requirements and industry standards.
- Oversee enterprise information security risk management programs and related governance processes to support informed risk-based decision making.
- Lead and oversee information security programs focused on internal stakeholder engagement, awareness, and external third-party risk considerations.
- Manage team of GRC professionals to achieve business objectives.
- Be accountable for building team capabilities and operational excellence through workforce planning, training, performance management, and enforcing standards to ensure readiness during incidents.
- Collaborate with internal stakeholders (IT, OT, Legal, Risk, Operations) and external partners (regulators, government agencies, industry groups).
- Facilitate incident response planning, exercises, and post-incident reviews to strengthen organizational readiness.
- Provide executive-level reporting, supports incident response planning, and champions a culture of cyber accountability and resilience across the organization.
- Maintain the Companys information security policies, standards, and control frameworks, supporting internal and external audits, and driving continuous improvement of governance and risk management maturity.
- Provide executive-level reporting on cybersecurity posture, compliance status, and resilience metrics.
- Serve as a key liaison between InfoSec, IT, Audit, Legal, peers in InfoSec Compliance, and business stakeholders to ensure security risks are clearly communicated and appropriately governed.
- Aid internal and regulatory compliance efforts, including NERC CIP, TSA, Coast Guard, and other applicable federal and state mandates.
- Facilitate and maintain cyber resilience strategies to ensure continuity of operations during and after cyber incidents.
- Follow change management and production acceptance controls and guidelines, maintain diagrams and documentation as appropriate and support reviews, auditing and maintenance activities
- Promote a customer service-oriented team by emphasizing professionalism, honesty, concern, courtesy, excellence and teamwork in a group. Ensure that communications between staff members and business organizations are handed in a professional, efficient manner
- Support operating organizations during corporate emergencies. Participate in the Company's emergency management processes for cybersecurity.
- Master's Degree and 6 years of work experience in IT or Utility environments with at least four (4) years in GRC or similar or
- Bachelor's Degree and 8 years of work experience in IT or Utility environments with at least four (4) years in GRC or similar.
- Master's Degree preferably in Information Technology, Computer Science, Information Security, Math, Engineering or business-related discipline preferred.
- Bachelor's Degree preferably in Information Technology, Computer Science, Information Security, Math, Engineering or business-related discipline preferred.
- Must demonstrate knowledge of project management concepts and ability to support project monitoring, tracking, and facilitation to ensure project deliverance/completion, required.
- Proven experience of process and policy creation and documentation, required.
- Must demonstrate strong analytical skills, required.
- Must have managerial/supervisory experience, required.
- Must demonstrate strong oral and written communication, presentation and interpersonal skills, required.
- Must have used, and have working knowledge of MS Excel, Word and PowerPoint, required.
- Experience and working knowledge of information security governance, risk management, compliance, and related cybersecurity program functions, required.
- Experience developing and delivering well organized analytical presentations, preferred.
- Experience with contract administration a plus, preferred.
- Experience with developing training and awareness programs, preferred.
- Experience working as a project or program manager role a plus, preferred.
- Experience in Information Technology/Cybersecurity a plus, preferred.
- Effectively coaches and delivers constructive feedback
- Demonstrates a high commitment to quality
- Assumes personal responsibility for actions
- Strong verbal communication and listening skills
- Ability to lead/manage others
- Possesses flexibility to work in a fast paced, dynamic environment
- Effective interpersonal skills
- Demonstrated analytical skills
- Ability to simultaneously handle multiple priorities
- Effective interpersonal skills
- Driver's License Required
- Ability to push, pull, and lift up to 25 pounds
- Sit or stand to use a keyboard, mouse, and computer for the duration of the workday
- The selected candidate will be assigned a System Emergency Assignment (i.e., an emergency response role) and will be expected to work non-business hours during emergencies, which may include nights, weekends, and holidays.
See All 6 Governance Risk And Compliance Jobs in New York
Find roles in New York that match your experience and apply in just a few clicks.
Find JobsGovernance Risk And Compliance Jobs by City in New York
Where New York roles are concentrated, by current openings.
Governance Risk And Compliance Job Market in New York
A snapshot from current New York openings, updated as new roles post.
Who's Hiring
Top Industries Hiring
- Law & Legal Services
- Accounting & Auditing
- Technology & Software
- Consulting & Professional Services
What New York Employers Look For
The qualifications that appear most often in governance risk and compliance jobs across New York.
- Bachelor's degree in business, finance, law, or a related field required
- Certified Compliance and Ethics Professional or Certified Risk Manager designation preferred
- Three or more years of experience in a regulated industry such as financial services or healthcare
- Demonstrated knowledge of New York State Department of Financial Services regulations and requirements
- Proficiency with GRC platforms such as MetricStream, ServiceNow, or Archer
- Strong written communication skills for policy drafting, audit reporting, and regulatory correspondence
Governance Risk And Compliance Jobs in New York: Frequently Asked Questions
How do you become a governance risk and compliance professional in New York?
Most governance risk and compliance roles in New York require a bachelor's degree in business, finance, accounting, or law, followed by experience in a regulated sector. New York does not issue a state license specific to this field, but employers heavily favor credentials such as the Certified Compliance and Ethics Professional, Certified Risk Manager, or Certified Internal Auditor. Many candidates enter through roles in legal, internal audit, or financial analysis at firms regulated by the New York State Department of Financial Services.
Which companies hire governance risk and compliances in New York?
Employers hiring governance risk and compliances in New York right now include Ivalua, Weaver, and Con Edison, based on current listings on Migrate Mate as of November 2026. New York's density of global banks, insurance carriers, and hospital systems means demand for compliance and risk talent remains consistent across both large institutions and mid-size regulated firms.
Which New York cities have the most governance risk and compliance jobs?
New York and Rochester account for the most governance risk and compliance openings in New York. New York City dominates because of its concentration of global financial institutions, insurance companies, and healthcare networks, while Albany draws demand from state government agencies and regulated utilities, and Buffalo's growing financial services and healthcare presence supports steady regional hiring.
Are there remote governance risk and compliance jobs in New York?
Yes, and more than most fields. Governance risk and compliance work is largely desk-based and documentation-driven, making it well suited to remote and hybrid arrangements. About 75% of governance risk and compliance openings tied to New York are remote or hybrid as of November 2026, reflecting how widely the field has adopted flexible work. Policy development, regulatory reporting, and risk assessment functions are the areas most commonly offered on a remote basis.
How can I get hired as a governance risk and compliance professional in New York with little or no experience?
The most realistic entry path is through a junior compliance analyst or risk operations associate role at a New York-regulated financial institution or hospital system. Large employers such as major New York City banks and hospital networks regularly hire candidates from legal assistant, paralegal, internal audit associate, and financial analyst backgrounds. Earning a Certified Compliance and Ethics Professional exam eligibility or completing a university certificate program in risk management strengthens early applications, as does internship experience within any New York State Department of Financial Services-regulated entity.
Where can I find and apply to governance risk and compliance jobs in New York?
You can find and apply to governance risk and compliance jobs in New York on Migrate Mate, which lists current New York openings across financial services, healthcare, technology, and the public sector. Find roles that fit your background and apply directly to the employers posting them.
See All 6 Governance Risk And Compliance Jobs in New York
Find roles in New York that match your experience and apply in just a few clicks.
Find Jobs