GRC Director: Information Security Governance & Risk

Information Security; Richardson (TX); On-site; USD 133,000 - 248,000; Full time

Job summary

HCSC in Richardson, TX seeks a senior Information Security leader to drive governance, risk, and compliance initiatives across the organization, shaping a robust security culture.

You will develop and maintain the compliance framework, oversee policy management and third‑party risk, lead risk identification, reporting, remediation, and attestation activities, and influence stakeholders to improve controls and budget planning.

Qualifications

• Bachelors Degree and 10 years in IT/InfoSec or 14 years in IT/InfoSec/Compliance disciplines.
• 4-5 years in Management or Leadership experience.
• Knowledge of project management.
• Information Technology and security risk management.
• Knowledge of regulatory and compliance standards and practices.
• Understanding of information security principles and control frameworks.
• Strong oral and written communication skills.
• Analytical and problem‑solving skills.
• Experience with security standards, regulatory compliance tools, and platforms.
• Leadership—effectively leads teams and collaborates across functions.

Responsibilities

• Lead the execution of Information Security governance, risk, and compliance programs.
• Develop and maintain the compliance framework and support attestation activities.
• Oversee security policy management, exceptions, subsidiary risk, and third-party risk management.
• Facilitate identification, reporting, management, and remediation of security risks.
• Maintain effective risk tracking and reporting processes.
• Identify and recommend improvements to security risk management controls.

Skills

Leadership

Risk management

Regulatory knowledge

Project management

Communication skills

Analytical skills

Stakeholder influence

Change management

Budget planning

Business alignment

Education

Bachelor's Degree

Job description

HCSC in Richardson, TX seeks a senior Information Security leader to drive governance, risk, and compliance initiatives across the organization, shaping a robust security culture.

You will develop and maintain the compliance framework, oversee policy management and third‑party risk, lead risk identification, reporting, remediation, and attestation activities, and influence stakeholders to improve controls and budget planning.