Governance, risk and compliance (GRC) analyst: certifications, study paths and pay
Every question and every answer is checked twice before you see it.
You help an organisation follow the rules and manage risk: policies, controls, assessments and evidence for audits, including newer rules about AI.
See practice tests for this roleWhat does it pay?
What you do
- Map controls to standards and regulations
- Run risk assessments and track remediation
- Prepare evidence and reports for audits
Skills that matter
- Risk and control frameworks
- Policy writing
- Attention to detail
- Plain-language reporting
What does this role pay?
United States, May 2025, annual wages for the closest official occupation: Compliance officers, U.S. Bureau of Labor Statistics. Entry-level jobs usually start nearer the lower figure. Pay in Australia, the United Kingdom, Canada and other countries is different, so check local job boards and salary guides. These figures are a guide, not an offer or a promise of pay.
Practice tests that fit this role
Certifications that appear most often alongside this role. Start with the first one if you are new to it.
Study paths that lead here
AI governance, risk and security
View roadmap →
STUDY PATHCybersecurity career path
View roadmap →
Job titles this page covers
- Assurance associate
- Compliance analyst
- Compliance analyst for cloud platforms
- Compliance assistant
- Ethics and policy adviser
- GRC analyst
- Governance specialist
- Governance, risk and compliance (GRC) analyst
- IT risk analyst
- Internal controls specialist
- Junior GRC analyst
- Legal or regulatory counsel on technology
- Policy and regulatory analyst
- Risk and compliance analyst
- Risk and compliance assistant
- Security awareness or compliance assistant
- Technology risk consultant
- Third-party risk analyst
Employers use many names for similar work. Requirements vary by employer and country, and a certificate supports your application but does not guarantee a job.
Related roles
- Security analyst
- Security engineer
- Privacy and responsible AI specialist
- IT auditor
- DevOps and platform engineer
- Site reliability engineer (SRE)
Not sure which step to take first?
Tell us your background and the job you want and we will point you to the right first exam.
Send us a messageAll job rolesNot affiliated with, endorsed by or sponsored by any certification vendor or exam body. Certification names, exam codes and product names are trademarks of their respective owners and are used only to identify the exam a practice product prepares for. Our questions are original and are not actual exam questions.