Portfolio Manager, GRC Risk Operations

This is a fully remote position, open to applicants in North Carolina.

📋 Description

• Oversee daily operational execution and overall performance of a designated Risk Operations portfolio.

• Conduct third-party risk evaluations for standard, complex, Critical/High, expedited, fast-track, and escalated reviews.

• Analyze supplier documentation and evidence, pinpoint risks, document findings, formulate remediation requirements, assist with exceptions, and convey conclusions.

• Execute first-line quality assurance of assessments completed by analysts and offer feedback and coaching.

• Supervise, mentor, and develop risk analysts, including work assignments, capacity planning, performance support, and skill enhancement.

• Review incoming requests, gauge urgency and complexity, match work to analyst capacity, and address or escalate intake challenges.

• Act as the main operational liaison for business leaders, internal stakeholders, and external suppliers.

• Create and share portfolio metrics, dashboards, and status reports.

• Lead or assist in projects and workstreams, maintaining project plans and coordinating cross-functional execution.

• Oversee AI agents that support portfolio operations, including work monitoring, output quality evaluation, and establishing human-review and escalation criteria.

• Propel continuous improvement initiatives across assessment workflows, intake, reporting, communications, quality, and automation.

⛳️ Requirements

• 8+ years of experience in third-party risk management, information security, compliance, operational risk, audit, vendor risk, or a related risk field.

• 3+ years of experience in portfolio management, program/project management, business engagement, or operational leadership.

• 2+ years of experience in people leadership or direct management roles.

• Practical experience in conducting third-party risk assessments and assessing supplier evidence, control environments, findings, remediation strategies, exceptions, and ongoing due diligence.

• Background in reviewing or quality assuring risk assessment work and providing clear, consistent feedback.

• Strong stakeholder management and communication abilities.

• Proficient project management skills; familiarity with Asana, Jira, Smartsheet, or similar tools is preferred.

• Experience utilizing metrics, dashboards, reporting platforms, workflow automation, or AI-enabled tools.

• Working knowledge of NIST, ISO 27001, PCI, SOX, and GDPR.

• Capability to exercise sound judgment in a fast-paced global environment.

• Competence in managing sensitive or confidential information with discretion.

• Relevant certifications such as CTPRP/CTPRA, CRISC, CISA, CISM, PMP, CAPM, Certified ScrumMaster, or equivalent credentials are preferred.

• Applicants for employment in the U.S. must have work authorization that does not necessitate employer visa sponsorship.

🏝️ Benefits

• Equal employment opportunity and support for reasonable accommodations.

• Opportunities for professional and personal development.

• New experiences and learning from talented colleagues.

• Employee referral opportunities.

• Live Nation will never request payment or equipment purchases as part of the hiring process.