Enterprise Risk & GRC Architect — Security Programs

Remote Jobs; United States; Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Flexible PTO

401(k) + Company Match

Life Insurance

Job summary

OpenLoop is seeking a Sr. Staff Risk Management Analyst to mature the enterprise risk program and govern the security portfolio. You will own the ERM, drive risk assessments, and align security initiatives with business objectives.

Reporting to the VP, you will coordinate audits, insurance responsibilities, and collaborate with third-party risk. A strong background in information security and governance is required.

Qualifications

• 10+ years in information security, risk management, or GRC.
• Ownership of a governance, risk, and compliance program.
• Experience maintaining a multi-year risk-reduction roadmap.
• Hands-on RCSA work or enterprise risk assessment methodology.
• Experience presenting risk reports to executives or a board.

Responsibilities

• Own and deepen the enterprise risk register across the company.
• Sharpen the enterprise risk appetite and apply it to business decisions.
• Operate the ERM policy and assessment methodology; run assessments.
• Report enterprise risk posture to executives and ERC.
• Produce governance evidence for SOC 2, HITRUST, HIPAA, NIST CSF.
• Set reporting cadence for security portfolio and track dependencies.
• Maintain multi-year security program risk-reduction roadmap and progress.
• Own the security organization's OKRs end-to-end.
• Track dependencies and drive priority initiatives to completion.
• Own the security awareness program.
• Manage property and casualty renewals, insurance certificates.
• Extend second-line risk coverage to other business areas with domain owners.
• Collaborate with third-party risk to integrate into ERM.
• Automate recurring work in register maintenance, evidence gathering, reporting.

Skills

Information security

Risk management

GRC program governance

Executive reporting

Stakeholder management

Education

CRISC, CISA, CISSP or equivalent certification

Job description

OpenLoop is seeking a Sr. Staff Risk Management Analyst to mature the enterprise risk program and govern the security portfolio. You will own the ERM, drive risk assessments, and align security initiatives with business objectives.

Reporting to the VP, you will coordinate audits, insurance responsibilities, and collaborate with third-party risk. A strong background in information security and governance is required.