GRC / Security Risk Management Practitioner

This role requires a practitioner who can independently manage operational risk processes, coordinate with internal stakeholders and third parties, track remediation activities, and ensure security risks and exceptions are properly documented, assessed, escalated, and resolved. The ideal candidate will have strong hands-on experience managing GRC operations, Third-Party Risk Management (TPRM), risk issues, and exception management within an enterprise environment.

Job Title: GRC / Security Risk Management Practitioner
Location: Houston, TX 100% Onsite
Contract: Contract

Job Summary

We are seeking an experienced GRC / Security Risk Management Practitioner to support security governance, risk management, and compliance operations. The ideal candidate will have strong hands-on experience managing GRC operations, Third-Party Risk Management (TPRM), risk issues, and exception management within an enterprise environment.

This role requires a practitioner who can independently manage operational risk processes, coordinate with internal stakeholders and third parties, track remediation activities, and ensure security risks and exceptions are properly documented, assessed, escalated, and resolved.

Key Responsibilities

Manage day-to-day Governance, Risk, and Compliance (GRC) operations and security risk processes.
Identify, assess, document, and monitor information security and technology risks.
Manage Third-Party Risk Management (TPRM) activities, including vendor risk assessments, due diligence, remediation, and ongoing monitoring.
Track and manage risk issues, findings, exceptions, and remediation plans.
Coordinate with security, technology, business, compliance, and vendor teams to address identified risks.
Monitor risk issues and exceptions through their lifecycle, ensuring appropriate ownership, escalation, and closure.
Support risk assessments and evaluate the effectiveness of security controls.
Prepare risk reports, dashboards, metrics, and management updates for senior stakeholders.
Maintain accurate risk and compliance documentation and evidence.
Ensure risk processes align with organizational security policies, standards, and regulatory requirements.
Collaborate with cross-functional teams to improve GRC processes and operational effectiveness.
Work with eGRC platforms to manage risk, compliance, issues, exceptions, and third-party risk activities.
Must-Have Qualifications

7 10 years of experience in Risk Management, Information Security Risk, Cyber Risk, or related areas.
7 10 years of hands-on GRC operations experience.
Strong experience with Third-Party Risk Management (TPRM) / Vendor Risk Management.
Strong experience with Risk Issue Management and Exception Management.
Experience managing risks and exceptions through identification, assessment, remediation, escalation, and closure.
Strong understanding of information security governance, risk, and compliance processes.
Ability to work with multiple stakeholders across security, technology, business, compliance, and third-party organizations.
Strong analytical, documentation, communication, and problem-solving skills.
Must be comfortable working 100% onsite in Houston, TX.
Nice-to-Have Qualifications

Security Architecture experience.
Network Security experience.
Experience with multiple eGRC platforms, such as:
ServiceNow GRC
RSA Archer
MetricStream
OneTrust
LogicGate
AuditBoard
Experience working in large enterprise security environments.
Knowledge of security frameworks and standards such as NIST, ISO 27001, SOC 2, or COBIT.
Ideal Candidate

The ideal candidate is a Senior GRC / IT Risk / Cyber Risk / Third-Party Risk professional with 7 10 years of hands-on operational experience.

They should have strong expertise in:

Risk Management GRC Operations Third-Party Risk Management Risk Issues & Exception Management

This is an operational/practitioner role, so candidates whose background is primarily GRC consulting without hands-on GRC operations experience may not be suitable.