Remote Risk Compliance Analyst Jobs
Remote Risk Compliance Analyst jobs are open across the US at companies hiring remotely, from entry-level roles at remote-first startups to senior roles on large distributed teams, with employers like Angi, Aprio, and Airbnb hiring right now. Scan the live roles below and apply to whichever ones fit.
Find JobsOverview
Showing 5 of 15+ Remote Risk Compliance Analyst jobs
INTRODUCTION
The Director, Cybersecurity Governance, Risk and Compliance (GRC) is responsible for leading DIRECTV's enterprise cybersecurity governance, risk management, compliance, policy, and security assurance programs. This role provides strategic leadership and operational oversight across cybersecurity governance functions, ensuring cybersecurity risks are effectively managed, regulatory and contractual obligations are met, and cybersecurity initiatives align with business objectives. The Director serves as the primary leader for cybersecurity governance activities, executive cybersecurity reporting, risk management, compliance programs, security awareness initiatives, supplier security oversight, and security assurance testing programs. This position manages a team of cybersecurity professionals and contractors and serves as a key partner to technology, business, audit, legal, procurement, privacy, and executive leadership teams.
ROLE AND RESPONSIBILITIES
Here’s what you’ll do:
Cybersecurity Governance:
- Lead the enterprise Cybersecurity Governance Program.
- Develop and maintain cybersecurity KPIs, KRIs, scorecards, and executive reporting.
- Prepare and facilitate monthly Cybersecurity Governance Reviews and executive presentations.
- Track cybersecurity initiatives, remediation activities, and strategic priorities.
- Drive accountability for cybersecurity performance across the organization.
Cyber Risk Management:
- Lead enterprise cyber risk identification, assessment, reporting, and remediation programs.
- Maintain cybersecurity risk registers and risk treatment plans.
- Facilitate risk reviews with business and technology stakeholders.
- Present cybersecurity risk posture to senior leadership.
Policy, Standards and Governance:
- Own cybersecurity policies, standards, procedures, and governance frameworks.
- Ensure alignment with industry standards and regulatory requirements.
- Maintain governance processes supporting cybersecurity decision-making.
Compliance and Audit:
- Lead cybersecurity compliance activities supporting PCI DSS, SOX, regulatory, and contractual requirements.
- Coordinate internal and external audits.
- Manage remediation efforts resulting from audit findings and assessments.
- Maintain cybersecurity control documentation and evidence repositories.
Third-Party and Supplier Security:
- Lead Supplier Information Security Requirement (SISR) governance and oversight.
- Manage third-party cybersecurity risk assessments and monitoring.
- Partner with Procurement, Legal, and Vendor Management organizations to ensure supplier security compliance.
Security Awareness and Training:
- Lead enterprise cybersecurity awareness, training, and phishing simulation programs.
- Establish metrics to measure effectiveness and maturity.
- Drive continuous improvement of employee cybersecurity culture.
Security Assurance and Testing Programs:
- Provide governance oversight of:
- Static Application Security Testing (SAST)
- Dynamic Application Security Testing (DAST)
- Application Penetration Testing
- Infrastructure Penetration Testing
- Vulnerability Assessment Programs
- Ensure testing results are tracked, reported, and remediated appropriately.
Leadership and People Management:
- Lead and develop cybersecurity governance personnel and contractors.
- Manage vendor and consulting relationships supporting GRC activities.
- Establish goals, objectives, and performance measures for the organization.
- Build a scalable governance function supporting DIRECTV's cybersecurity strategy.
BASIC QUALIFICATIONS
What you’ll need to be successful:
Required:
- Bachelor's degree in Cybersecurity, Information Technology, Business, Engineering, or related field.
- 5 – 7 years required, 10+ years desired progressive cybersecurity experience.
- 5+ years of leadership experience managing cybersecurity programs and teams.
- Deep knowledge of cybersecurity governance, risk management, compliance, and security frameworks.
- Experience with PCI DSS, NIST Cybersecurity Framework, ISO 27001, CIS Controls, and risk management methodologies.
- Experience presenting cybersecurity metrics and risk information to executive leadership.
- Strong written and verbal communication skills.
PREFERRED QUALIFICATIONS
- CISSP, CISM, CRISC, CGEIT, PCI ISA, or equivalent certifications.
- Experience leading enterprise cybersecurity governance programs.
- Experience in telecommunications, media, technology, or highly regulated industries.
- Experience building cybersecurity governance organizations during periods of transformation or separation activities.
REPORTING RELATIONSHIP
Reports to: Senior Director, IT & Corporate Cybersecurity
ORGANIZATION SCOPE
- Direct leadership responsibility for Cybersecurity Governance, Risk and Compliance functions.
- Oversight of approximately six contractor resources and future employee growth within the GRC organization.
- Enterprise-wide responsibility for cybersecurity governance, risk management, compliance, policy, awareness, supplier security, and security assurance oversight.
May require a background check due to job duties requiring routine access to DIRECTV and DIRECTV customer’s proprietary data. Qualified applicants with arrest and conviction will be considered for employment in accordance with local ordinances and state law.
LOCATION
This is a remote position that can be located anywhere in the contiguous United States.
COMPENSATION
DIRECTV's compensation structure is designed to be market-competitive and fully supports efforts to attract and retain employees. It is the company's policy to offer pay that is competitive with other employers in the local market. Our salary ranges are determined by role, level, and location. The Base Salary range displayed below reflects the minimum and maximum target salary for each of DIRECTV's 4 (four) US Labor Market Zones. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training.
- DIRECTV WAGE ZONES: $147,830 - $268,307
- Low (N1): $147,830 - $221,645
- Mid (N2): $155,610 - $233,310
- High (N3): $171,171 - $256,641
- Top (N4): $178,952 - $268,307
Click HERE to review information on some of the largest Designated Market Areas (DMAs). Your recruiter can share more about the specific salary range for your preferred location during the hiring process. Please note that the salary ranges reflect base salary only and do not include bonus or benefits - when you consider all of these together, it represents a pretty impressive total compensation package.
EEO STATEMENT
Fair Chance Ordinance Notice for Los Angeles County applying for jobs at DIRECTV
Compliance Notice Regarding Use of Automated Decision-Making Tools in Hiring Process
Apply today!
INTRODUCTION
The Director, Cybersecurity Governance, Risk and Compliance (GRC) is responsible for leading DIRECTV's enterprise cybersecurity governance, risk management, compliance, policy, and security assurance programs. This role provides strategic leadership and operational oversight across cybersecurity governance functions, ensuring cybersecurity risks are effectively managed, regulatory and contractual obligations are met, and cybersecurity initiatives align with business objectives. The Director serves as the primary leader for cybersecurity governance activities, executive cybersecurity reporting, risk management, compliance programs, security awareness initiatives, supplier security oversight, and security assurance testing programs. This position manages a team of cybersecurity professionals and contractors and serves as a key partner to technology, business, audit, legal, procurement, privacy, and executive leadership teams.
ROLE AND RESPONSIBILITIES
Here’s what you’ll do:
Cybersecurity Governance:
- Lead the enterprise Cybersecurity Governance Program.
- Develop and maintain cybersecurity KPIs, KRIs, scorecards, and executive reporting.
- Prepare and facilitate monthly Cybersecurity Governance Reviews and executive presentations.
- Track cybersecurity initiatives, remediation activities, and strategic priorities.
- Drive accountability for cybersecurity performance across the organization.
Cyber Risk Management:
- Lead enterprise cyber risk identification, assessment, reporting, and remediation programs.
- Maintain cybersecurity risk registers and risk treatment plans.
- Facilitate risk reviews with business and technology stakeholders.
- Present cybersecurity risk posture to senior leadership.
Policy, Standards and Governance:
- Own cybersecurity policies, standards, procedures, and governance frameworks.
- Ensure alignment with industry standards and regulatory requirements.
- Maintain governance processes supporting cybersecurity decision-making.
Compliance and Audit:
- Lead cybersecurity compliance activities supporting PCI DSS, SOX, regulatory, and contractual requirements.
- Coordinate internal and external audits.
- Manage remediation efforts resulting from audit findings and assessments.
- Maintain cybersecurity control documentation and evidence repositories.
Third-Party and Supplier Security:
- Lead Supplier Information Security Requirement (SISR) governance and oversight.
- Manage third-party cybersecurity risk assessments and monitoring.
- Partner with Procurement, Legal, and Vendor Management organizations to ensure supplier security compliance.
Security Awareness and Training:
- Lead enterprise cybersecurity awareness, training, and phishing simulation programs.
- Establish metrics to measure effectiveness and maturity.
- Drive continuous improvement of employee cybersecurity culture.
Security Assurance and Testing Programs:
- Provide governance oversight of:
- Static Application Security Testing (SAST)
- Dynamic Application Security Testing (DAST)
- Application Penetration Testing
- Infrastructure Penetration Testing
- Vulnerability Assessment Programs
- Ensure testing results are tracked, reported, and remediated appropriately.
Leadership and People Management:
- Lead and develop cybersecurity governance personnel and contractors.
- Manage vendor and consulting relationships supporting GRC activities.
- Establish goals, objectives, and performance measures for the organization.
- Build a scalable governance function supporting DIRECTV's cybersecurity strategy.
BASIC QUALIFICATIONS
What you’ll need to be successful:
Required:
- Bachelor's degree in Cybersecurity, Information Technology, Business, Engineering, or related field.
- 5 – 7 years required, 10+ years desired progressive cybersecurity experience.
- 5+ years of leadership experience managing cybersecurity programs and teams.
- Deep knowledge of cybersecurity governance, risk management, compliance, and security frameworks.
- Experience with PCI DSS, NIST Cybersecurity Framework, ISO 27001, CIS Controls, and risk management methodologies.
- Experience presenting cybersecurity metrics and risk information to executive leadership.
- Strong written and verbal communication skills.
PREFERRED QUALIFICATIONS
- CISSP, CISM, CRISC, CGEIT, PCI ISA, or equivalent certifications.
- Experience leading enterprise cybersecurity governance programs.
- Experience in telecommunications, media, technology, or highly regulated industries.
- Experience building cybersecurity governance organizations during periods of transformation or separation activities.
REPORTING RELATIONSHIP
Reports to: Senior Director, IT & Corporate Cybersecurity
ORGANIZATION SCOPE
- Direct leadership responsibility for Cybersecurity Governance, Risk and Compliance functions.
- Oversight of approximately six contractor resources and future employee growth within the GRC organization.
- Enterprise-wide responsibility for cybersecurity governance, risk management, compliance, policy, awareness, supplier security, and security assurance oversight.
May require a background check due to job duties requiring routine access to DIRECTV and DIRECTV customer’s proprietary data. Qualified applicants with arrest and conviction will be considered for employment in accordance with local ordinances and state law.
LOCATION
This is a remote position that can be located anywhere in the contiguous United States.
COMPENSATION
DIRECTV's compensation structure is designed to be market-competitive and fully supports efforts to attract and retain employees. It is the company's policy to offer pay that is competitive with other employers in the local market. Our salary ranges are determined by role, level, and location. The Base Salary range displayed below reflects the minimum and maximum target salary for each of DIRECTV's 4 (four) US Labor Market Zones. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training.
- DIRECTV WAGE ZONES: $147,830 - $268,307
- Low (N1): $147,830 - $221,645
- Mid (N2): $155,610 - $233,310
- High (N3): $171,171 - $256,641
- Top (N4): $178,952 - $268,307
Click HERE to review information on some of the largest Designated Market Areas (DMAs). Your recruiter can share more about the specific salary range for your preferred location during the hiring process. Please note that the salary ranges reflect base salary only and do not include bonus or benefits - when you consider all of these together, it represents a pretty impressive total compensation package.
EEO STATEMENT
Fair Chance Ordinance Notice for Los Angeles County applying for jobs at DIRECTV
Compliance Notice Regarding Use of Automated Decision-Making Tools in Hiring Process
Apply today!
See All 15 Remote Risk Compliance Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsRemote Risk Compliance Analyst Job Market
Who's Hiring
- Angi1
- Aprio1
- Airbnb1
- DIRECTV1
- LeafLink1
Top Industries Hiring
- Insurance2
- Technology & Software2
- Telecommunications1
- Accounting & Auditing1
- Hospitality & Tourism1
What Employers Look For
The qualifications that appear most often in remote risk compliance analyst jobs.
- Bachelor's degree in finance, accounting, business, or a related field
- Experience with risk frameworks such as COSO, SOX, or ISO 31000
- Proficiency in compliance management or GRC software platforms
- Knowledge of applicable regulations including BSA, AML, HIPAA, or FINRA rules
- Strong written communication skills for policy documentation and regulatory reporting
- Professional certification such as CRCM, CFE, CAMS, or CRISC preferred
Tips for Your Remote Risk Compliance Analyst Job Search
Tailor your resume to regulatory frameworks
Hiring managers scan for the specific frameworks you know, whether that's SOX, BSA, HIPAA, or COSO. Name each one explicitly in your experience bullets rather than grouping them under vague phrases like 'regulatory knowledge.'
Earn a targeted compliance certification
Credentials like the CRCM, CFE, or CAMS signal specialization that a degree alone doesn't. Choose the one that aligns with the sector you're targeting, since financial services firms weigh these differently than healthcare or tech employers.
Apply early to roles that fit
Migrate Mate lists risk compliance analyst openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Filter job listings by compliance function
Titles like 'risk analyst,' 'compliance analyst,' and 'regulatory affairs analyst' overlap heavily. Search all three variants and read the responsibilities carefully, because the actual work, whether it's controls testing or policy writing, varies more than the title suggests.
Prepare for a technical scenario round
Many risk compliance interviews include a written or verbal scenario where you're asked to identify a control gap or respond to a regulatory finding. Practice walking through your reasoning methodically, citing the framework or regulation that applies.
Negotiate using scope, not just title
When evaluating an offer, ask specifically what regulatory bodies the team reports to and how large the controls inventory is. These details reveal whether the role has real growth potential and give you concrete leverage in negotiations beyond base compensation.
Remote Risk Compliance Analyst Jobs: Frequently Asked Questions
How do I get a remote risk compliance analyst job?
Target companies that already run distributed teams, since they hire remotely by default and know how to onboard someone they never meet in person. Remote risk compliance analyst employers screen hard for self-direction and clear written communication on top of the core skills, so show evidence you can own work without someone over your shoulder. Apply to the openings above that match your experience.
Which companies hire remote risk compliance analysts?
Companies hiring remote risk compliance analysts include Angi, Aprio, and Airbnb, based on current remote listings on Migrate Mate as of June 2026. Remote-first firms and large companies running distributed teams post the most remote risk compliance analyst roles.
Can you get a remote risk compliance analyst job with no experience?
Yes, but it is harder than an on-site role, because remote work expects you to operate independently from the start. Entry-level remote risk compliance analyst openings do exist, especially at remote-first companies, and a portfolio of real work helps more than a long resume. Applying broadly to the roles that fit improves your odds.
Do you need a degree for remote risk compliance analyst jobs?
Not always. Many employers hire remote risk compliance analysts on demonstrated skills and prior work rather than a specific degree, though some larger companies still prefer one. Showing relevant results matters more than a credential for most remote risk compliance analyst roles.
Which industries hire the most remote risk compliance analysts?
Most remote risk compliance analyst openings sit in Insurance, Technology & Software, and Telecommunications, per current remote listings on Migrate Mate as of June 2026. These sectors run distributed teams and hire risk compliance analysts remotely most consistently.
See All 15 Remote Risk Compliance Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs