Senior Manager, Security Risk

Halliburton; Houston (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

Halliburton is seeking a Senior Manager for Security Risk to lead enterprise risk strategies across cybersecurity and operational technology. The ideal candidate will bring extensive experience in risk management and compliance, with a proven track record in driving governance outcomes and aligning risks with business performance. This position offers competitive compensation in a dynamic work environment and the opportunity to significantly impact global risk strategies across the energy sector.

Qualifications

• 10–15 years of progressive experience in enterprise risk management and cybersecurity.
• Experience in security audits and compliance in regulated industries is essential.
• Strong executive communication skills with ability to present complex risk scenarios.

Responsibilities

• Lead design and implementation of enterprise risk strategies across cybersecurity and AI governance.
• Oversee risk assessments and develop risk methodologies aligned with industry standards.
• Create executive summaries and deliver risk dashboards to senior management.

Skills

Risk Management

Regulatory Compliance

Cybersecurity

Governance Risk and Compliance (GRC)

Education

Bachelor’s degree in Cybersecurity, Business Administration, Risk Management, or related field

Master’s preferred

Tools

ISO 31000

NIST CSF

CISSP

CISA

GRC technologies

IBM OpenPages

RSA Archer

Job description

Join to apply for the Senior Manager, Security Risk role at Halliburton

6 days ago Be among the first 25 applicants

Join to apply for the Senior Manager, Security Risk role at Halliburton

We are looking for the right people — people who want to innovate, achieve, grow and lead. We attract and retain the best talent by investing in our employees and empowering them to develop themselves and their careers. Experience the challenges, rewards and opportunity of working for one of the world’s largest providers of products and services to the global energy industry.

Job Duties

We are seeking a seasoned Senior Risk Manager – eGRC to lead the design, implementation, and operationalization of enterprise risk strategies across cybersecurity, operational technology (OT), and AI governance domains. This role demands a strong command of enterprise risk management (ERM) principles, deep technical and regulatory fluency, and the ability to align risk decisions with business strategy and revenue protection across global markets. The ideal candidate brings 10–15 years of progressive experience across security risk, regulatory compliance, and GRC technologies, including CISSP and audit certifications, and will drive executive-level insights into actionable governance outcomes..

Enterprise and IT Risk Strategy & Governance; Security and Technical Risk Management; eGRC System Strategy

• Develop and maintain risk taxonomies, risk methodologies, and risk registers aligned with ISO 31000, NIST AI RMF, ISO 42001, NIST CSF, and COBIT frameworks.
• Lead the annual risk assessment cycle including identification, classification, and risk ranking of emerging threats across IT, OT, and AI ecosystems.
• Track regulatory developments (e.g., SOX, GDPR, NIST 800-53, ISO 42001) and ensure alignment with eGRC reporting and control requirements.
• Risk Reporting, KPIs, and Stakeholder Engagement
• Create and maintain Key Risk Indicators (KRIs), Key Control Indicators (KCIs), and Key Performance Indicators (KPIs) that measure program efficacy and executive risk tolerance.
• Deliver concise, data-driven executive summaries and board presentations that align security posture with business performance, investment risk, and global operational integrity.
• Oversee configuration and integration of eGRC platforms (e.g., Archer, OpenPages) with risk workflows, control libraries, AI governance modules, and regulatory tracking tools.
• Drive automation and harmonization of control testing, evidence collection, and risk exception handling processes across business units.
• Provide quarterly Executive Risk Review Board (ERRB) presentations and deliver enterprise risk dashboards, heat maps, and trends to the CISO, Director of GRC, and executive leadership.
• Oversee vulnerability risk assessments, risk remediation plans, and technical debt evaluation across infrastructure, applications, and OT systems.
• Collaborate with Security Engineering, OT Security, and SOC teams to translate vulnerabilities into business-impact-based risk posture and recommend mitigation strategies.
• Partner with IT architecture and engineering teams to proactively assess and mitigate security engineering risks in cloud, on-prem, and hybrid environments.
• Incident, Audit, and Compliance Risk Management - Lead internal and external cybersecurity audits and serve as liaison with Internal Audit, regulators, and third-party auditors. Must possess certification such as CISA, CIA, or equivalent.
• Support the Incident Response Team (IRT) by contributing to root cause analysis, post-mortem reviews, and incident-driven risk scoring.
  
  

AI Governance & Model Risk Oversight

• Embed AI risk management practices across AI/ML pipelines, ensuring model risk controls, drift monitoring, explainability, and governance by design.
• Work with Legal, Ethics, and Product teams to operationalize model transparency, bias mitigation, and assurance processes for responsible AI deployment.
  

Qualifications

Education: Bachelor’s degree in Cybersecurity, Business Administration, Risk Management, or related field. Masters preferred

• Certifications: CISSP (required); CISA, CIA, CGEIT, or CRISC (preferred); Familiarity with ISO 42001, NIST AI RMF, and EU AI Act frameworks.
  

Experience

• 10–15 years of progressive experience in enterprise risk management, GRC, cybersecurity, or operational risk.
• 10+ years of experience in Big 4 (risk management, internal/external audit, cybersecurity, and information management)
• Demonstrated success in leading cross-functional risk teams, implementing enterprise-wide GRC strategies, and driving risk-based decision making at executive levels.
• Proven experience in OT risk assessments, AI governance, vulnerability management, and data loss prevention within regulated industries.
  
  

Preferred Skills And Attributes

• Deep experience working in heavily regulated industries such as energy, manufacturing, healthcare, or financial services.
• Operational familiarity with security and risk platforms such as IBM OpenPages, RSA Archer, and Auditboard.
• Strong executive communication skills with the ability to articulate complex risk scenarios in business terms.
• Demonstrated ability to balance technical depth with strategic oversight in enterprise settings.
  

Halliburton is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, disability, genetic information, pregnancy, citizenship, marital status, sex/gender, sexual preference/ orientation, gender identity, age, veteran status, national origin, or any other status protected by law or regulation.

Location

3000 N. Sam Houston Parkway E., Houston, Texas, 77032, United States

Job Details

Requisition Number: 199599

Experience Level: Experienced Hire

Job Family: Support Services

Product Service Line: Global Information Security

Full Time / Part Time: Full Time

Additional Locations for this position:

Compensation Information

Compensation is competitive and commensurate with experience.

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

• Industries

  Oil and Gas

Referrals increase your chances of interviewing at Halliburton by 2x

Sign in to set job alerts for “Security Risk Manager” roles.

Associate Director - Corporate Security and Risk Management

Security Governance, Risk, and Compliance / BCP Manager

Security Intelligence Operations Center (SIOC) Manager

Houston, TX $100,000.00-$120,000.00 2 weeks ago

IT Security Manager, Governance Risk and Compliance

Senior Manager - CFIUS Security Compliance Advisor

Houston, TX $120,000.00-$200,000.00 1 week ago

AVP I, Technology Risk and Controls Manager

Manager - Cyber Compliance (FedRamp/CMMC)

Houston, TX $107,000.00-$214,500.00 1 week ago

Houston, TX $106,600.00-$142,600.00 2 weeks ago

Houston, TX $110,000.00-$125,000.00 2 weeks ago

Risk Technology Consulting -Risk Tech - SAP Security & GRC Manager - Multiple Locations

Houston, TX $60,000.00-$65,000.00 1 month ago

Strategic Sourcing Manager - OT Cybersecurity

Sr. Consultant - Microsoft Purview and Data Goverance

Houston, TX $118,700.00-$218,600.00 1 day ago

Microsoft 365 Security Senior Consultant

Houston, TX $118,700.00-$218,600.00 1 day ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.