Manager, Governance, Risk & Compliance

About the role

Plains is an industry-leading transportation and midstream provider specializing in transportation, storage, processing and marketing solutions for crude oil. We own an extensive network of pipeline transportation, terminalling, storage and gathering assets in key oil producing basins and transportation corridors and at major market hubs in the United States and Canada. The company is headquartered in Houston, Texas. We’re on the lookout for passionate self‑starters who thrive in fast‑moving, collaborative, and innovative environments. The Manager, GRC is responsible for overseeing the Governance, Risk, and Compliance (GRC) functions within the organization. This role involves developing and implementing strategies, policies, and standards to ensure that the organization adheres to regulatory requirements and internal audit policies.

Responsibilities

• Lead, develop, and implement GRC strategies, policies, and standards to manage risks to an acceptable level for IT/OT environments.
• Create frameworks and guidelines that align with organizational objectives, regulatory standards, and internal audit requirements.
• Manage third‑party risks.
• Lead a team to ensure compliance with regulatory requirements and internal audit policies.
• Conduct risk assessments, regular audits, and apply appropriate risk treatment to maintain compliance.

Requirements

• Minimum of 6+ years of experience in a similar GRC functional leader role, including managing GRC functions, working across teams, and implementing compliance programs.
• Bachelor’s degree in a related field or equivalent experience.

Qualifications

• Relevant certifications such as CISA, CRISC, CGEIT, AAIA, and CISSP are highly desirable.
• Cleared criminal history (background) and satisfactory reference checks; government intelligence clearance or prior experience in a secure, classified environment is preferred.

Skills

• Strong people, analytical, and problem‑solving skills.
• Excellent communicator and interpersonal skills; ability to work effectively with cross‑functional teams.
• Open to evolving skillset as industry regulations change.
• Working knowledge of GRC platforms (Workiva, Archer, etc.) and program/project management/audit methodologies/platforms.
• Working knowledge of MTSA/TSA/CER regulatory tracking and pipeline common carrier cyber and risk management regulations.
• Proficiency in GRC tracking in Microsoft Excel, project management, and GRC software.
• Familiarity with the organization's core energy software applications.
• Expert understanding of IT/OT cybersecurity regulations and risk management frameworks: IEC 62443, NIST CSF 2.0, NIST 800-53, NIST 800-82, NIST 800-37, NIST AI 100-1, MTSA, CER, TSA, VADR, and Coast Guard (preferred).

Benefits

Hard work is rewarded with competitive compensation and a top‑tier benefits program designed to keep employees safe, healthy, and happy. The company respects employees’ need for personal and family time, which is reflected in its benefits program.