Senior Cyber Risk Architect: GRC & Risk Register (Remote)

Socket.dev; Austin (TX); On-site; USD 170,000 - 210,000; Full time

Job summary

ASSYST is seeking a Senior Information Security Manager – GRC & Risk Register to design, build, and operationalize an end-to-end Enterprise Cybersecurity Risk Register for our client in Austin, Texas. This fully remote role requires hands-on leadership to architect risk governance and ensure audit readiness.

The ideal candidate will own governance workflows, risk scoring, ownership definitions, and stakeholder engagement across business, technology, and security functions to sustain risk posture

Qualifications

• 8+ years of experience with Risk Register Design and Framework development.
• 8+ years designing Risk Scoring Models and Prioritization logic.
• 8+ years establishing Governance Processes, Workflows, and Escalation structures.
• 8+ years leading Stakeholder Engagement, Workshops, and Business Alignment.
• 8+ years creating Audit-Ready Documentation and executing structured Knowledge Transfers.

Responsibilities

• Governance & Workflow Design: Define end-to-end governance workflows across risk stages and escalation pathways.
• Enterprise Risk Register Framework: Design a standardized risk register template, data taxonomy, structure, and definitions.
• Risk Scoring & Prioritization Model: Build a scoring model with likelihood/impact scales and prioritization logic.
• Risk Governance Model & Decision Authorities: Establish roles and responsibilities with a formal governance model and RACI matrix.
• Stakeholder Facilitation & Alignment: Lead workshops with business, technology, and security leaders to validate requirements.
• Initial Risk Register Population: Onboard risks to deliver a baseline risk posture.
• Final Documentation & Knowledge Transfer: Deliver SOPs and transfer knowledge for post-contract sustainability.

Skills

Risk Register Design

GRC Frameworks

Governance Processes

Stakeholder Engagement

Audit-Ready Documentation

Knowledge Transfer

Job description

ASSYST is seeking a Senior Information Security Manager – GRC & Risk Register to design, build, and operationalize an end-to-end Enterprise Cybersecurity Risk Register for our client in Austin, Texas. This fully remote role requires hands-on leadership to architect risk governance and ensure audit readiness.

The ideal candidate will own governance workflows, risk scoring, ownership definitions, and stakeholder engagement across business, technology, and security functions to sustain risk posture