> Markdown version of [/jobs/ext/3557461-grc-manager](https://www.wearedevelopers.com/jobs/ext/3557461-grc-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# GRC Manager

- **Company:** Insight Global
- **Location:** Houston, TX, United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Software Engineering, RSA Archer Platform
- **Published:** October 2, 2026
- **Apply:** https://dejobs.org/x/x/985440D7E5484864A6F78BE848CE2FA1/job/

## About the Role

* 5+ years of leadership experience managing cybersecurity, risk, compliance, or governance teams
 * Experience within Oil & Gas, Pipeline, Energy, Utilities, Manufacturing, or other industrial/OT environments
 * Strong understanding of both IT and OT cybersecurity environments
 * Hands-on experience with IEC 62443 and NIST 800-82 frameworks
 * Strong knowledge of NIST Cybersecurity Framework (CSF) 2.0
 * Experience supporting compliance with TSA and Canadian Energy Regulator (CER) cybersecurity requirements
 * Demonstrated experience managing Third-Party Risk Management (TPRM) programs
 * Proven experience developing cybersecurity policies, standards, and governance processes
 * Ability to influence and gain buy-in from stakeholders across multiple business units without direct authority
 * Strong communication skills with experience presenting metrics and risk reporting to executive leadership and board-level audiences
 * CISA and CISSP certification required
 * Certified Internal Auditor (CIA) designation
 * Experience with GRC platforms such as Workiva, Archer, or similar solutions
 * Exposure to cybersecurity governance across both cloud and on-premises environments
 * Knowledge of CIS security benchmarks and hardening standards
 * Previous audit experience within cybersecurity, risk, or compliance functions

## Description

Insight Global is seeking an experienced GRC Manager to lead and continue maturing an established Governance, Risk, and Compliance (GRC) program within a complex energy and operational technology (OT) environment. This is a permanent leadership opportunity based in Houston, TX, with an onsite requirement of four days per week and remote work on Fridays. Reporting to senior cybersecurity leadership, this role will oversee a team of five direct reports and multiple contractor resources while partnering closely with infrastructure, networking, application development, operational technology, and vendor teams across the organization. The successful candidate will advance cybersecurity governance practices, drive policy and standards development, oversee regulatory compliance initiatives, manage third-party risk programs, and provide cybersecurity reporting to executive leadership and the board. This role is ideal for a collaborative leader who can bridge both technical and business
stakeholders while influencing outcomes across the organization.


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [The Avengers Initiative (Practical Ethics for Software Engineers)](https://www.wearedevelopers.com/videos/2070-the-avengers-initiative-practical-ethics-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter)
- [Official Opening of WeAreDevelopers World Congress 2026](https://www.wearedevelopers.com/videos/100000-official-opening-of-wearedevelopers-world-congress-2026)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [The Geometry of Incidents: Connecting User Impact to Architecture](https://www.wearedevelopers.com/magazine/764-the-geometry-of-incidents-connecting-user-impact-to-architecture)
- [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)