Manager, Governance, Risk & Compliance

Plains Midstream Canada (PMC); Houston (TX); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Competitive compensation

Top-tier benefits program

Equal Opportunity Employer

Job summary

Plains is seeking a GRC Manager to lead governance, risk, and compliance initiatives across IT/OT environments. You will develop frameworks, conduct risk assessments, and drive audit programs while managing third party risk. A Bachelor’s degree and 6+ years in GRC leadership are expected, with certifications like CISA/CRISC preferred.

Strong communication and cross-functional collaboration are essential. Plains offers competitive compensation and a top-tier benefits program, with a commitment to

Qualifications

• 6+ years in a GRC leadership role with cross-functional collaboration.
• Bachelor's degree in a related field or equivalent experience.
• Certifications such as CISA, CRISC, CGEIT, CISSP are highly desirable.
• Experience with GRC platforms and regulatory tracking systems.

Responsibilities

• Lead, develop, and implement GRC strategies, policies, and standards.
• Oversee risk assessments, audits, and compliance activities.
• Manage third party risks and ensure regulatory adherence across IT/OT.
• Collaborate with cross-functional teams and communicate risks clearly.

Skills

GRC leadership

Regulatory compliance

Risk assessment

Audit management

Stakeholder management

Education

Bachelor's degree in related field

Tools

Workiva

Archer

Job description

Job Type: Regular

Plains is an industry-leading transportation and midstream provider specializing in transportation, storage, processing and marketing solutions for crude oil. We own an extensive network of pipeline transportation, terminalling, storage and gathering assets in key oil producing basins and transportation corridors and at major market hubs in the United States and Canada. The company is headquartered in Houston, Texas. We’re on the lookout for passionate self‑starters who thrive in fast‑moving, collaborative, and innovative environments.

The Manager, GRC is responsible for overseeing the Governance, Risk, and Compliance (GRC) functions within the organization. This role involves developing and implementing strategies, policies, and standards to ensure that the organization adheres to regulatory requirements and internal audit policies.

Job Responsibilities Function/Capability:

The primary function of the GRC Manager is to lead, develop, and implement GRC strategies, policies, and standards managing risks to an acceptable level of organization for IT/OT environments. This includes creating frameworks and guidelines that align with the organization's objectives, regulatory standards, and internal audit requirements. In addition to managing Third Party Risks.

Accountability/Tasks:

The GRC Manager is accountable for leading a team ensuring compliance with regulatory requirements and internal audit policies. This involves conducting risk assessments, regular audits, and applying appropriate risk treatment to ensure that the organization remains compliant.

Knowledge, Skills, and Experience Required

Years of direct experience: The GRC Manager should have a minimum of +6 years of experience in a similar GRC functional leader role. This experience should include managing GRC functions, working across teams, and implementing compliance programs.

Education, combination of experience, thereof: A Bachelor's degree in a related field or equivalent experience is required.

Credentials and designations:

Relevant certifications such as CISA, CRISC, CGEIT, AAIA, and CISSP are highly desirable. These credentials demonstrate a deep understanding of the aggregate GRC practices and a commitment to ongoing professional development.

Core competencies and skills required:

The GRC Manager should possess strong people, analytical and problem-solving skills. Excellent communicator and interpersonal skills, and the ability to work effectively with cross-functional teams. These competencies are essential for identifying risks, developing risk treatment strategies, and ensuring compliance. In addition, the GRC manager should be open to evolving their skillset as industry regulations change.

Working knowledge of GRC Platforms (Workiva, Archer, etc.);

Working knowledge of GRC Platforms (Workiva, Archer, etc.); working knowledge of program/project management/audit Methodologies/Platforms, working knowledge of MTSA/TSA/CER regulatory tracking and pipeline common carrier cyber and risk management regulations: Proficiency in GRC and tracking in Microsoft Excel, project management, and GRC software is required. Familiarity with the organization's core energy software applications is also important for effectively managing GRC functions.

Expert Understanding of the following IT/OT cybersecurity regulations and/or risk management frameworks:

• IEC 62443
• NIST CSF 2.0
• NIST 800-53
• NIST 800-82
• NIST 800-37
• NIST AI 100-1
• MTSA
• CER
• TSA
• VADR
• Coast Guard (preferred)

Cleared criminal history (background) and satisfactory reference checks:

Government intelligence clearance or previous experience working in a secure, classified environment(s).

#Plains At Plains, our employees are our most valuable asset.

Hard work is rewarded with competitive compensation and a top-tier benefits program designed to keep our employees safe, healthy and happy. We work hard to deliver the best results to our stakeholders, and we also respect our employees' need for personal and family time, which is reflected in our benefits program.

We are proud to be an Equal Opportunity Employer.

We are committed to providing employment opportunities to all qualified individuals, without regard to age, race, color, national or ethnic origin, religion, sex, sexual orientation, gender identity or expression, veteran status, genetic information, disability, or any other characteristic protected by federal, state, or local law.

Applicants with disabilities can request accessible formats, communication supports, or other accessibility assistance by contacting [e-mail].

At Plains, our vision is to become the premier crude oil and marketing company in the United States and Canada by providing the utmost in value-added services to our customers, and in doing so, delivering superior returns to our stakeholders. Our people are analytical, connected, creative, entrepreneurial and passionate about everything they do. We rely on our Core Values and beliefs to inspire and guide our team.

These values include:

• Safety and Environmental Stewardship: We conduct our business in a manner that is safe for our employees, business partners, communities and the environment.
• Ownership and Accountability: We take ownership of our actions and are accountable to each other and our stakeholders, including the communities where we live and work.
• Respect, Fairness, and Inclusion: We treat each other with respect and fairness, and are committed to an inclusive workplace.
• Ethics and Integrity: We do the right thing, obey the law and act with the highest levels of honesty, ethics and integrity.
• Teamwork: We foster a collaborative environment and work together to achieve our goals.
• Entrepreneurship and Innovation: We are a nimble team that develops and implements creative solutions that deliver value for our stakeholders and drive continuous improvement.