Director of Security & GRC

Concentra, Inc.; Addison, Northern (TX, KY); Hybrid; USD 180,000 - 260,000; Full time

Benefits offered by this job

401(k) Retirement Plan with Employer

Life & Disability Insurance

Paid Time Off

Colleague Referral Bonus Program

Tuition Reimbursement

Dependent Care Spending Account

Employee Discounts

Job summary

Concentra, Inc. in Addison, TX, seeks a Director of Security - GRC to lead governance, risk management, and compliance across the enterprise. The role requires deep knowledge of regulatory frameworks, cloud and SaaS environments, and third-party risk management.

You will shape security policy, drive audits, coordinate with internal teams and external auditors, and push measurable improvements in risk posture. 8–10 years of risk mgmt experience and strong project leadership are preferred.

Qualifications

• 8–10 years of experience in risk management.
• Experience developing GRC programs in cloud/SaaS.
• Strong collaboration across technical and non-technical teams.
• Proven ability to lead large, complex security projects.

Responsibilities

• Create and maintain Security Compliance policies.
• Perform security risk assessments and close gaps.
• Lead Third Party Risk Management (TPRM) program.
• Set up internal audit processes for security needs.
• Oversee platform security compliance audits for new regions.
• Drive cross-functional security projects with stakeholders.
• Develop metrics to track security program effectiveness.
• Create governance programs for Infrastructure, Application, SOC, and others.
• Identify critical audit areas and complete audits.
• Roll out security awareness trainings for the company and GRC team.

Skills

Security leadership

Risk assessment

Vendor risk management

Project management

Security governance

Communication skills

Data-driven mindset

Regulatory compliance

Education

Bachelor’s Degree in Computer Science or Information Security

Job description

Concentra, Inc. in Addison, TX, seeks a Director of Security - GRC to lead governance, risk management, and compliance across the enterprise. The role requires deep knowledge of regulatory frameworks, cloud and SaaS environments, and third-party risk management.

You will shape security policy, drive audits, coordinate with internal teams and external auditors, and push measurable improvements in risk posture. 8–10 years of risk mgmt experience and strong project leadership are preferred.