Senior GRC & Privacy Leader: Risk, Compliance & Security

O'Neil Digital Solutions, LLC

Plano (TX)

On-site

USD 150,000 - 190,000

Full time

14 days+

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

Data Analysis Inc in Plano, Texas is seeking a Senior Manager, Governance, Risk, Compliance & Privacy to lead enterprise GRCP initiatives, align with laws, regulations, and contracts, and partner with Information Security, IT, Legal, HR and external partners to mature governance practices.

The role focuses on risk management, audits, privacy impact assessments, data protection, and program maturation, with a strong emphasis on accountability, measurement, and security-by-design in daily

Qualifications

Bachelor's degree in Information Security, Cybersecurity, Information Technology, Business, Risk Management, or related field.
7–10 years of experience in Governance, Risk, Compliance (GRC), Privacy, Information Security, Audit, or related disciplines.
Experience leading or managing governance, compliance, privacy, audit, or risk management programs within complex organizations.
Experience supporting internal and external audits, assessments, and compliance initiatives involving security and privacy controls.
Experience collaborating across technical and business teams to drive governance and compliance initiatives.

Responsibilities

Lead governance framework development, policies, standards, and controls for information security, privacy, and technology compliance.
Manage cybersecurity, operational risk, and third-party risk activities including risk identification, assessment, remediation tracking, and executive reporting.
Lead compliance initiatives including audit coordination, evidence collection, remediation tracking, and certification readiness.
Direct privacy activities including privacy impact assessments (PIAs/DPIAs), privacy risk assessments, incident coordination, and data subject request support.
Facilitate governance reviews, compliance meetings, and cross-functional initiatives to ensure accountability and timely remediation of identified risks and compliance gaps.
Develop and report metrics on governance, risk, compliance, privacy, audits, control effectiveness, remediation activities, and program maturity.
Partner with business and technical teams to integrate security, privacy, and compliance requirements using privacy-by-design and security-by-design.
Lead security and privacy awareness programs, training, and guidance to promote a culture of compliance.
Support governance activities related to incident response, business continuity, disaster recovery, crisis management, and resilience.
Monitor regulatory, privacy, and security changes and evaluate impacts on policies and operations.