Director of GRC and Operational Risk Management

This is a Full Time Job

Work From Home - California
Work From Home - Texas
Work From Home - New York
Work From Home - Missouri

We are seeking a Director of GRC Operational Risk Management. This role is responsible for leading and maturing a comprehensive third-party risk management (TPRM) program within a broader GRC and operational risk framework, ensuring that risks across vendors, partners, and digital assets are effectively identified, assessed, and managed in a practical, risk-based manner.

The role manages a team of risk analysts responsible for evaluating vendor and partner risk, conducting assessments of external websites and mobile applications, and supporting enterprise risk initiatives. In close partnership with cross-functional teams, including security, privacy, legal, and technology, this role ensures robust control environments while reinforcing resilience and regulatory compliance.

WHAT THIS ROLE WILL DO

Lead end-to-end third-party risk management (TPRM) lifecycle:
• Due diligence and onboarding
• Risk tiering and assessments
• Contractual risk controls
• Ongoing monitoring and offboarding

Manage a team of risk analysts who:
• Evaluate risks associated with vendors, partners, and outsourced services, including financial, operational, compliance, and reputational risks
• Conduct risk management for external websites and mobile applications
• Support additional risk assessments as required

Partner with other corporate teams to:
• Review security controls, vulnerabilities, and penetration testing results
• Ensure data protection, privacy, and resilience standards are met
• Drive a strong risk culture, ensuring accountability across first, second, and third lines of defense

Mature and improve the program:
• Integrate third-party risk into broader enterprise risk and operational risk frameworks
• Distribute assessment assignments and monitor progress to ensure SLAs are met across all risk levels
• Support quality assurance by reviewing assessment documentation and identifying areas for process improvement
• Track team metrics, backlog status, and stakeholder engagement levels for reporting
• Lead team standups and serve as the primary point of contact for operational blockers or intake escalations
• Identify opportunities for efficiency improvements, automation, and stakeholder engagement enhancements

WHAT THIS PERSON WILL BRING
• Bachelor's degree in Business, Risk Management, Operations, or a related field, or comparable experience.
• Relevant certifications preferred (e.g., CRISC, CTPRP, CISA, CISM, CPA, CIA)
• 6+ years of experience in third-party risk management and/or operational risk, compliance roles, including experience managing teams, projects, and driving process improvements and efficiency
• Strong leadership, communication, and organizational skills
• Experience with GRC tools and risk platforms (e.g., ProcessUnity, Optro, Workiva, GRC, OneTrust)
• Strong analytical skills with the ability to translate risk data into actionable insights
• Ability to balance strategic thinking with operational execution
• Experience coordinating operational workflows and managing queue-based assignments.
• Familiarity with risk assessment platforms (e.g., ProcessUnity, Prevalent, or similar).
• Ability to manage multiple priorities and ensure quality and consistency
• Comfortable collaborating cross-functionally and presenting updates to senior stakeholders

BENEFITS & PERKS

Our motto is 'Taking Care of Our Own' through 6 pillars of benefits:
• HEALTH: Medical, vision, dental and mental health benefits for you and your family, with access to a health care concierge, and Flexible or Health Savings Accounts (FSA or HSA)
• YOURSELF: Free concert tickets, generous paid time off including paid holidays, sick time, and personal days
• WEALTH: 401(k) program with company match, stock reimbursement program
• FAMILY: New parent programs including caregiver leave, plus fertility, adoption, foster, or surrogacy support
• CAREER: Career and skill development programs with School of Live, tuition reimbursement, and student loan repayment
• OTHERS: Volunteer time off, crowdfunding match

HIRING PRACTICES
The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to this job.

Live Nation recruitment policies are designed to place the most highly qualified persons available in a timely and efficient manner. Live Nation may pursue all avenues available, including promotion f