Security GRC Lead for AI & Enterprise Risk

Emburse; Dallas (TX); On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Competitive pay

Flexible work

Inclusive culture

Career growth opportunities

Job summary

Emburse is seeking a Manager, Security Governance & Risk to lead the GRC function, mentor a team of professionals, and own platform strategy, controls architecture, data quality, and reporting.

You will own enterprise information security risk management end to end, oversee third‑party risk, and build AI governance and policy programs, partnering with Engineering and Product to mature risk across the business.

Qualifications

• Bachelor’s degree required; 7+ years in information security, risk, or compliance.
• 2+ years directly managing people or demonstrated equivalent leadership.
• Proven experience leading a security GRC function with audits and reporting.
• Ownership of an enterprise information security risk program and risk register.
• Experience building security metrics and reporting for executives and Board.
• Knowledge of audit frameworks (PCI DSS, ISO 27001, SOC 2, NIST) and privacy regs.
• Experience with AI governance or governance of emerging technologies preferred.

Responsibilities

• Lead, coach, and develop a team of GRC professionals, setting objectives and career paths.
• Own Emburse's GRC platform, including strategy, controls, integrations, data quality, and automation.
• Oversee audits, evidence coordination, and remediation planning with management oversight.
• Own the enterprise information security risk management program end to end.
• Mature risk reporting and risk communication beyond static heat maps.
• Lead Third-Party Risk Management including vendor risk tiering and due diligence standards.
• Build and own the security metrics and reporting framework with automated data collection.
• Establish and lead AI governance covering product AI and internal employee/vendor use.
• Track AI regulatory landscapes and translate obligations into controls and processes.
• Maintain security policy lifecycle aligned with NIST, ISO, PCI DSS, SOC 2; ensure accessibility.
• Oversee privacy program operations for GDPR, CPRA/CCPA, PIPEDA, and related regimes.
• Partner with Engineering and Product on remediation of security risks surfaced by assessments.
• Sponsor continuous controls monitoring to reduce manual effort and shorten audit cycles.

Skills

GRC leadership

Security metrics

Risk management

Audit coordination

AI governance

Third-Party Risk

Regulatory frameworks

Stakeholder communication

Education

Bachelor’s Degree

Tools

Drata

Vanta

Job description

Emburse is seeking a Manager, Security Governance & Risk to lead the GRC function, mentor a team of professionals, and own platform strategy, controls architecture, data quality, and reporting.

You will own enterprise information security risk management end to end, oversee third‑party risk, and build AI governance and policy programs, partnering with Engineering and Product to mature risk across the business.