Strategic GRC Lead: Build Compliance & Risk Programs

Acuren; Houston, Northern (TX, KY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

TIC Solutions seeks an experienced, strategic GRC Lead to own the organization’s governance, risk, and compliance program. This role will mature controls, policies, audits, and third-party risk management while partnering with senior leadership across business units.

The ideal candidate combines deep knowledge of security and privacy frameworks with program management, stakeholder communication, and leadership skills to drive evidence collection, remediation, and audit readiness across the

Qualifications

• Bachelor’s degree in a related field; equivalent experience considered.
• Three years of governance, risk, compliance, information security, audit, or third-party risk management.
• Certifications such as CISA, CRISC, CISSP, CISM, ISO 27001 Lead Implementer/Auditor, CDPSE, CIPM, CIPP/US, or similar.
• Experience with CMMC, NIST SP 800-171, and privacy/GDPR programs.
• Strong written, verbal, and stakeholder-management skills.
• Ability to communicate risk to technical and non-technical audiences.
• Experience in regulated industries, government contracting, or SaaS security environments.
• Experience leading or mentoring GRC analysts or cross-functional teams.
• Working knowledge of CMMC, GDPR, NIST CSF, NIST SP 800-53, ISO 27001, SOC 2, PCI DSS, HIPAA.

Responsibilities

• Lead and mature the organization’s GRC program, including CMMC, GDPR, and other applicable requirements.
• Translate requirements into controls, policies, procedures, compliance roadmaps, and evidence-collection processes.
• Coordinate internal and external audits, assessments, certifications, customer questionnaires, remediation plans, and compliance reporting.
• Build and manage a third-party vendor-risk program with due diligence, risk assessments, reviews, and ongoing remediation.
• Own the lifecycle of security, privacy, and compliance policies, including review, approval, publication, training, and exception management.
• Develop executive dashboards and reports covering compliance posture, audit readiness, control effectiveness, vendor risk, and remediation progress.
• Partner with Legal, Privacy, Procurement, IT, Information Security, and business stakeholders to integrate GRC requirements.
• Support related programs such as security awareness, business continuity, incident-response governance, data protection, and customer security reviews.
• Lead or mentor GRC personnel and serve as the primary contact for auditors, assessors, vendors, customers, and internal stakeholders.

Skills

GRC leadership

Regulatory compliance

Risk management

Policy governance

Audits & assessments

Vendor risk management

Stakeholder communication

Project management

Security & privacy frameworks

Leadership

Education

Bachelor’s degree in cybersecurity, information systems, business, risk management, law, or related field

Job description

TIC Solutions seeks an experienced, strategic GRC Lead to own the organization’s governance, risk, and compliance program. This role will mature controls, policies, audits, and third-party risk management while partnering with senior leadership across business units.

The ideal candidate combines deep knowledge of security and privacy frameworks with program management, stakeholder communication, and leadership skills to drive evidence collection, remediation, and audit readiness across the