GRC Cybersecurity Specialist: Governance & Risk (Austin)

We Place People Executive Search Firm; Austin (TX); On-site; USD 110,000 - 140,000; Full time

Job summary

We Place People Executive Search Firm is seeking an experienced Cybersecurity Governance, Risk & Compliance Specialist II in Austin to lead governance, risk, and security program improvements. The role emphasizes governance decisions, ownership, and risk treatment across the organization, not just compliance.

The candidate will engage with technology and business leaders to translate requirements into actionable controls, support risk assessments, and manage third-party security reviews.

Qualifications

• Bachelor's degree or equivalent combination of education and experience.
• Approximately 5+ years of IT Security experience, including governance, risk, or GRC.
• At least 4 years of Information Security experience with exposure to technical security environments.
• Hands-on cybersecurity experience is strongly preferred.

Responsibilities

• Operate and mature the organization's cybersecurity governance program.
• Develop and maintain information security policies, standards, procedures, and governance docs.
• Work with teams to establish ownership and accountability for cybersecurity requirements.
• Translate policies into practical controls and operating processes.
• Provide guidance on security requirements and governance processes.
• Identify gaps and drive remediation.

Skills

Governance & Risk

Policy development

Security writing

Communication

Education

Bachelor's degree or equivalent

Tools

GRC platforms

Risk assessment tools

Job description

We Place People Executive Search Firm is seeking an experienced Cybersecurity Governance, Risk & Compliance Specialist II in Austin to lead governance, risk, and security program improvements. The role emphasizes governance decisions, ownership, and risk treatment across the organization, not just compliance.

The candidate will engage with technology and business leaders to translate requirements into actionable controls, support risk assessments, and manage third-party security reviews.