GRC Security Lead: AI & Vendor Risk (Onsite Austin)

Request Technology, LLC; Austin (TX); On-site; USD 120,000 - 160,000; Full time

Job summary

Request Technology, LLC seeks an experienced GRC professional to govern enterprise security, assess client and third-party risk, and lead policy and standards management. You will partner with technical teams, business stakeholders, clients, and vendors to ensure controls meet requirements and are clearly communicated.

The role emphasizes hands-on execution combined with strategic oversight, with on-site Austin work three days a week and strong focus on AI risk, auditing, and SME support.

Qualifications

• Bachelor's degree or equivalent with five years IT Security experience.
• CISSP, CISA, CISM, AAIA, AAIR, AAISM or equivalents preferred.
• Four or more years of Information Security experience, hands-on preferred.
• Knowledge of ISO 27001, NIST, SOC, SIG frameworks required.
• Experience with AI governance, security, and risk management required.
• Strong technical writing and communication skills.
• Experience leading risk assessments and vendor security reviews.
• Familiarity with GRC tools and security technologies.

Responsibilities

• Lead responses to client security assessments, questionnaires, and audits with evidence documentation and risk assessments.
• Create and maintain security policies, standards, guidelines, and documentation with strong technical writing.
• Manage IT systems to meet cybersecurity, risk, and compliance requirements.
• Advise stakeholders as an Information Security SME across the organization.
• Oversee third-party Security Vendor Risk Management program including assessments and remediation.
• Oversee security exception requests and risk treatment guidance.
• Manage Security Awareness program lifecycle, roadmap, training, and metrics.
• Support and optimize GRC platforms and workflows.
• Evaluate IT programs for alignment with published security standards and frameworks.

Skills

GRC knowledge

Technical writing

Vendor management

AI risk

Communication

Analytical skills

Project management

Collaboration

Education

Bachelor's degree or equivalent in IT Security

CISSP

CISA

CISM

AAIA

AAIR

AAISM

Tools

GRC platforms

RBAC

Job description

Request Technology, LLC seeks an experienced GRC professional to govern enterprise security, assess client and third-party risk, and lead policy and standards management. You will partner with technical teams, business stakeholders, clients, and vendors to ensure controls meet requirements and are clearly communicated.

The role emphasizes hands-on execution combined with strategic oversight, with on-site Austin work three days a week and strong focus on AI risk, auditing, and SME support.