Sr Manager, Governance, Risk, Compliance & Privacy

Data Analysis Inc.•Plano, TX

1d•Onsite

About The Position

The Senior Manager, Governance, Risk, Compliance & Privacy (GRCP) is responsible for leading and managing the organization’s governance, risk, compliance, and privacy initiatives to ensure alignment with applicable laws, regulations, contractual obligations, security standards, and internal policies. This role partners closely with Information Security, IT, Legal, Human Resources, Compliance, business stakeholders, and external partners to strengthen governance practices, mature risk management processes, support audit and regulatory readiness, and promote privacy and security accountability across DAI companies.

Requirements

Bachelor’s degree in Information Security, Cybersecurity, Information Technology, Business, Risk Management, or related field.
Minimum 7-10 years of experience in Governance, Risk, Compliance (GRC), Privacy, Information Security, Audit, or related disciplines.
Experience leading or managing governance, compliance, privacy, audit, or risk management programs within complex organizations.
Experience supporting internal and external audits, assessments, and compliance initiatives involving security and privacy controls.
Experience collaborating across technical and business teams to drive governance and compliance initiatives.
Strong knowledge of governance, risk management, compliance, privacy, and information security principles.
Working knowledge of ISO 27001/27002, ISO 42001, SOC 2 Type II, NIST Cybersecurity Framework (CSF), NIST 800-53, HITRUST, PCI-DSS, and privacy/data protection frameworks.
Strong analytical, problem-solving, and risk assessment capabilities.
Ability to translate complex compliance, security, and privacy requirements into practical business guidance.
Excellent written, verbal, presentation, and stakeholder management skills.
Strong organizational skills with the ability to manage multiple priorities and initiatives simultaneously.
Experience with governance, risk, and compliance platforms and supporting technologies.
Familiarity with cloud security concepts, vulnerability management tools (e.g., Qualys), CNAPP platforms (e.g., Wiz, Qualys), and Identity & Access Management solutions (e.g., Ping, Auth0, Entra ID).

Nice To Haves

Master’s degree in a related field.
CISM (Certified Information Security Manager)
CRISC (Certified in Risk and Information Systems Control)
CISA (Certified Information Systems Auditor)
CISSP (Certified Information Systems Security Professional)
ISO 27001 Lead Implementer or Lead Auditor
CDPSE, CIPM, CIPT, or other privacy-related certifications
Experience supporting international privacy and regulatory compliance requirements.

Responsibilities

Lead the implementation and continuous improvement of governance frameworks, policies, standards, procedures, and controls related to information security, privacy, and technology compliance.
Manage cybersecurity, operational risk, and third-party risk management activities including risk identification, assessment, remediation tracking, and executive reporting.
Lead compliance initiatives supporting regulatory, contractual, and industry requirements, including audit coordination, evidence collection, remediation tracking, and certification readiness efforts.
Direct privacy and data protection activities including privacy impact assessments (PIAs/DPIAs), privacy risk assessments, privacy incident coordination, and data subject request support.
Facilitate governance reviews, compliance meetings, and cross-functional initiatives to ensure accountability and timely remediation of identified risks and compliance gaps.
Develop, maintain, and report metrics related to governance, risk, compliance, privacy, audits, control effectiveness, remediation activities, and program maturity.
Partner with business and technical teams to integrate security, privacy, and compliance requirements into operational and technology processes using privacy-by-design and security-by-design principles.
Lead enterprise-wide security and privacy awareness initiatives, training programs, communications, and guidance to promote a culture of compliance, accountability, and secure business operations.
Support governance activities associated with incident response, business continuity, disaster recovery, crisis management, and operational resilience programs.
Monitor evolving regulatory, privacy, and security requirements and evaluate impacts to organizational policies, controls, and business operations.