Strategic GRC Lead - Risk & Compliance Expert

Request Technology, LLC; Austin (TX); On-site; USD 120,000 - 160,000; Full time

Job summary

Request Technology, LLC is seeking an Information Security professional to lead risk assessments, vendor security reviews, and client-facing security discussions, applying ISO 27001, NIST, SOC, and SIG frameworks.

You will create and evolve security policies, manage IT and third‑party risk programs, mentor teams, and champion GRC platforms while guiding governance, risk, and compliance workflows across the organization.

Qualifications

• Bachelor's degree in information security or a related field.
• 4+ years of Information Security experience with risk assessments and vendor reviews.
• Experience documenting evidence and leading client-facing security discussions.

Responsibilities

• Lead responses to client security assessments, questionnaires, and audits.
• Create, maintain, and evolve security policies, standards, and guidelines.
• Manage IT security programs to meet cybersecurity, risk, and compliance requirements.
• Advise technical and non-technical stakeholders on information security.
• Oversee third-party Security Vendor Risk Management program and lifecycle.
• Guide security exception processes and risk treatment decisions.
• Oversee Security Awareness program lifecycle and effectiveness.
• Support Governance, Risk, and Compliance (GRC) technology workflows.

Skills

Information Security

Risk assessment

Vendor security

GRC familiarity

Client-facing security

Access control

Security policies

Education

Bachelor's degree

Tools

GRC platforms

SIEM

Vulnerability management tools

Job description

Request Technology, LLC is seeking an Information Security professional to lead risk assessments, vendor security reviews, and client-facing security discussions, applying ISO 27001, NIST, SOC, and SIG frameworks.

You will create and evolve security policies, manage IT and third‑party risk programs, mentor teams, and champion GRC platforms while guiding governance, risk, and compliance workflows across the organization.