Cybersecurity GRC Manager: Policy, Risk & Compliance

Texas Education Agency; Austin (TX); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Retirement through ERS and employer‑p​

Health insurance

Dental coverage

Vision coverage

Paid holidays and leave

Wellness programs

Job summary

Texas Education Agency seeks a seasoned GRC Manager to lead cybersecurity governance, risk, and compliance efforts across the agency. You will collaborate with risk management, security operations, and agency leaders to advance a comprehensive control framework and enterprise risk program.

The role focuses on policy creation, third-party risk, regulatory alignment with TAC 202 and NIST, and executive reporting.

Qualifications

• Education: Graduation from an accredited four-year college or university.
• Degree fields: Cybersecurity, Risk Management, Computer Science, Audit, Information Technology Security, Computer Engineering, Computer Information Systems.
• Required Licenses: CISSP, CISM, CGRC, CRISC, CISA.
• Experience: At least six (6) years of experience in Cybersecurity, Risk Management, or Audit, including experience leading teams in handling both legacy and emerging technologies to manage business risk and enforce security controls.
• Substitutions: An advanced degree may substitute for two years of required experience.

Responsibilities

• Create, approve, and enforce security policies, standards, and procedures aligned with business goals and risk appetite.
• Oversee formal risk assessments and evaluate effectiveness of controls with mitigation guidance.
• Ensure regulatory and policy compliance with TAC 202 and NIST; maintain continuous monitoring for non-compliance.
• Provide executive-level reporting and communication on emerging risks and mitigation strategies.
• Lead and supervise team efforts to align security, audit, and risk management activities with laws and regulations.

Skills

Cybersecurity

Risk management

Leadership

Regulatory compliance

Communication

Education

Bachelor's degree

Cybersecurity/IT-related fields

Tools

GRC tools

Job description

Texas Education Agency seeks a seasoned GRC Manager to lead cybersecurity governance, risk, and compliance efforts across the agency. You will collaborate with risk management, security operations, and agency leaders to advance a comprehensive control framework and enterprise risk program.

The role focuses on policy creation, third-party risk, regulatory alignment with TAC 202 and NIST, and executive reporting.