GRC Manager

Job Description

Insight Global is seeking an experienced GRC Manager to lead and continue maturing an established Governance, Risk, and Compliance (GRC) program within a complex energy and operational technology (OT) environment. This is a permanent leadership opportunity based in Houston, TX, with an onsite requirement of four days per week and remote work on Fridays. Reporting to senior cybersecurity leadership, this role will oversee a team of five direct reports and multiple contractor resources while partnering closely with infrastructure, networking, application development, operational technology, and vendor teams across the organization. The successful candidate will advance cybersecurity governance practices, drive policy and standards development, oversee regulatory compliance initiatives, manage third-party risk programs, and provide cybersecurity reporting to executive leadership and the board. This role is ideal for a collaborative leader who can bridge both technical and business stakeholders while influencing outcomes across the organization.

Skills and Requirements

• 5+ years of leadership experience managing cybersecurity, risk, compliance, or governance teams
• Experience within Oil & Gas, Pipeline, Energy, Utilities, Manufacturing, or other industrial/OT environments
• Strong understanding of both IT and OT cybersecurity environments
• Hands-on experience with IEC 62443 and NIST 800-82 frameworks
• Strong knowledge of NIST Cybersecurity Framework (CSF) 2.0
• Experience supporting compliance with TSA and Canadian Energy Regulator (CER) cybersecurity requirements
• Demonstrated experience managing Third-Party Risk Management (TPRM) programs
• Proven experience developing cybersecurity policies, standards, and governance processes
• Ability to influence and gain buy-in from stakeholders across multiple business units without direct authority
• Strong communication skills with experience presenting metrics and risk reporting to executive leadership and board-level audiences
• CISA and CISSP certification required
• Certified Internal Auditor (CIA) designation
• Experience with GRC platforms such as Workiva, Archer, or similar solutions
• Exposure to cybersecurity governance across both cloud and on-premises environments
• Knowledge of CIS security benchmarks and hardening standards
• Previous audit experience within cybersecurity, risk, or compliance functions

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].