Sr. Cybersecurity Governance, Risk, and Compliance (GRC) Associate

Corient; Austin (TX); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

401(k) Plan with Employer Matching

Paid Medical, Dental, Vision Insurance

Paid Maternity & Parental Leave

Training Reimbursement

Volunteer days

Job summary

Corient is seeking a Sr. Cybersecurity Governance, Risk, and Compliance Associate in Austin, Texas. This role plays a critical part in enhancing security frameworks and managing organizational risks. The ideal candidate will have 3-6+ years in cybersecurity GRC, strong analytical abilities, and excellent communication skills.

Responsibilities include maintaining security policies, conducting control assessments, and fostering a security-first culture. The position requires on-site work and flexibility to travel.

Corient is dedicated to creating a diverse and inclusive workplace.

Qualifications

• 3-6+ years’ experience in cybersecurity GRC and/or BC/DR roles.
• Ability to operate and innovate in a fast-paced environment.
• Demonstrated flexibility to adapt to changing assignments.

Responsibilities

• Maintain and enhance the Information Security Policy Framework.
• Conduct control testing and identify deficiencies.
• Promote a security-first mindset across the organization.

Skills

Analytical skills

Critical thinking

Effective communication

Self-motivation

Prioritization

Education

Bachelor’s degree or equivalent experience

Tools

Security frameworks (NIST, ISO, CIS)

GRC platforms

Job description

Job Description

The Sr. Cybersecurity Governance, Risk, and Compliance (GRC) Associate plays a critical role in supporting the organization's GRC program, with a specialized focus on security framework compliance and information security risk management.

Reporting to the Vice President of Information Security Governance, Risk, and Compliance, the Sr. Cybersecurity GRC Associate contributes to the maturity of the security program by applying principles such as secure-by-design, defense-in-depth, and least privilege, while aligning with industry standards, regulatory requirements, and internal policies.

The ideal candidate will have a proven track record of career growth, passion to deliver results, excellent problem-solving skills, strong oral and written communication skills, and the desire to be challenged and grow.

Responsibilities

Information Security Governance

• Maintain and enhance the Information Security Policy Framework, ensuring alignment with regulatory requirements and industry standards (e.g., NIST, ISO, CIS).
• Collaborate with stakeholders to ensure policies are understood, adopted, and enforced across the organization.
• Implement and operationalize GRC platform; create and maintain automated workflows, associated processes, and related documentation.
• Maintain the enterprise Information Security Risk Register and perform periodic and ad hoc risk assessments.
• Monitor and report on meaningful metrics and reporting, including Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs).
• Support risk treatment planning and execution, ensuring alignment with the organization’s risk appetite.
• Perform third party risk assessments and ongoing oversight activities.

Compliance & Controls

• Facilitate security compliance framework assessments, control narrative creation, and evidence collection.
• Conduct control testing, identify deficiencies, and drive remediation efforts.
• Support the development and ongoing maintenance of an integrated control framework to assess and monitor compliance.

Security Awareness & Culture

• Promote a security‑first mindset across the organization.
• Contribute to the development and delivery of security awareness programs.

Qualifications & Requirements

• Bachelor’s degree or equivalent experience; relevant certifications preferred (e.g., CBCP, MBCP, MBCI, FBCI).
• 3‑6+ years’ experience in cybersecurity GRC and/or BC/DR roles, ideally within financial services.
• Strong analytical and critical thinking skills and the ability to organize work in a logical, thorough, and succinct manner.
• Highly self‑motivated, results‑orientated, and self‑directed to handle multiple ongoing tasks.
• Flexibility to adapt to changing assignments and ability to effectively prioritize.
• Effective written and verbal English communication at all levels.
• Demonstrated ability to operate and innovate in a small team with a fast‑paced environment, balancing both strategic and tactical needs.

Physical Requirements

• This position requires the physical capabilities to work in an office environment, which may include prolonged periods of sitting at a desk and working on a computer. Corient seeks to make reasonable accommodations that enable individuals with disabilities to perform essential duties when possible.
• This position is required to work on site 5 days per week.
• This position requires up to 25+% travel, domestically and internationally.

U.S. Eligibility Requirements

• Must be 18 years of age or older.
• Must be willing to submit a background investigation; any offer of employment is conditioned upon the successful completion of a background investigation.
• Must have unrestricted work authorization to work in the United States. For U.S. employment opportunities, Corient hires U.S. citizens or permanent residents. Exceptions to these requirements will be determined based on shortage of qualified candidates with a particular skill. Corient will require proof of work authorization.
• Corient participates in E‑Verify and will provide the federal government with your Form I‑9 information to confirm that you are authorized to work in the U.S. If E‑Verify cannot confirm that you are authorized to work, this employer is required to give you written instructions and an opportunity to contact Department of Homeland Security (DHS) or Social Security Administration (SSA) so you can begin to resolve the issue before the employer can take any action against you, including terminating your employment. Employers can only use E‑Verify once you have accepted a job offer and completed the Form I‑9.
• Must be willing to execute Corient’s Employee Agreement or Confidentiality and Non‑Disclosure Agreement, which require, among other things, post‑employment obligations relating to non‑solicitation, confidentiality, and non‑disclosure.

What You can Expect from Us

• 401(k) Plan with Employer Matching
• Four Medical Plan options that is generously subsidized by Corient
• Employer paid Dental, Vision & Life and AD&D Insurance
• Employer paid Short‑term & Long‑term Disability
• Paid Maternity & Parental Leave
• Flexible Spending Accounts & Health Savings Accounts
• Dependent Care FSA
• Commuter & Transit FSA
• Training Reimbursement
• Paid Professional Designations
• Giving back to the community - Volunteer days

Corient is one of the fastest‑growing wealth management platforms in the United States. We serve more than 10,000 clients and manage over $100 billion of assets through offices located across the country. We combine a boutique's personal service, creativity and objective advice with the extensive resources and vast intellectual capital of an innovative industry leader to create a profoundly different wealth management experience for our clients.

Full participation of all employees in a safe, healthy, and respectful environment is key to individual and company success. We are committed to fully utilizing the abilities of all our employees and expect each of our employees to honor this commitment in their daily responsibilities.

We are an equal opportunity employer. All candidates will be recruited and, if applicable, selected and employed without regard to sex, race, religion, marital status, veteran status, age, national origin, sexual orientation, gender identity, color, creed, ancestry, disability, genetic information or any other basis prohibited by law.