Manager, Governance, Risk & Compliance

Plains All American • Houston, TX

1d

About The Position

The Manager, GRC is responsible for overseeing the Governance, Risk, and Compliance (GRC) functions within the organization. This role involves developing and implementing strategies, policies, and standards to ensure that the organization adheres to regulatory requirements and internal audit policies.

Requirements

• Minimum of +6 years of experience in a similar GRC functional leader role.
• Experience managing GRC functions, working across teams, and implementing compliance programs.
• Bachelor's degree in a related field or equivalent experience.
• Strong people, analytical and problem-solving skills.
• Excellent communicator and interpersonal skills.
• Ability to work effectively with cross-functional teams.
• Open to evolving skillset as industry regulations change.
• Working knowledge of GRC Platforms (Workiva, Archer, etc.).
• Working knowledge of program/project management/audit Methodologies/Platforms.
• Working knowledge of MTSA/TSA/CER regulatory tracking and pipeline common carrier cyber and risk management regulations.
• Proficiency in GRC and tracking in Microsoft Excel, project management, and GRC software.
• Familiarity with the organization's core energy software applications.
• Expert Understanding of the following IT/OT cybersecurity regulations and/or risk management frameworks: IEC 62443, NIST CSF 2.0, NIST 800-53, NIST 800-82, NIST 800-37, NIST AI 100-1, MTSA, CER, TSA, VADR, and Coast Guard (preferred).
• Cleared criminal history (background) and satisfactory reference checks.
• Government intelligence clearance or previous experience working in a secure, classified environment(s).

Nice To Haves

• Relevant certifications such as CISA, CRISC, CGEIT, AAIA, and CISSP are highly desirable.

Responsibilities

• Lead, develop, and implement GRC strategies, policies, and standards managing risks to an acceptable level of organization for IT/OT environments.
• Create frameworks and guidelines that align with the organization's objectives, regulatory standards, and internal audit requirements.
• Manage Third Party Risks.
• Lead a team ensuring compliance with regulatory requirements and internal audit policies.
• Conduct risk assessments, regular audits, and apply appropriate risk treatment to ensure that the organization remains compliant.

Benefits

• Competitive compensation
• Top-tier benefits program designed to keep our employees safe, healthy and happy
• Personal and family time

What This Job Offers

• Job Type: Full-time
• Career Level: Manager