Job Summary:
THE ROLEThe Portfolio Manager, GRC Risk Operations is a hands-on player-coach responsible for the end-to-end operational health and delivery of an assigned Risk Operations portfolio. This role combines direct risk assessment execution, first-line quality assurance, intake and workload management, business engagement, reporting, project delivery, and people leadership.
The Portfolio Manager will directly manage risk analysts and oversee AI agents that support portfolio execution, creating a blended human-and-AI delivery model. The Portfolio Manager remains actively involved in the work, including completing assessments, QAing analyst deliverables, managing stakeholder communications and escalations, and driving projects and operational improvements. The role is accountable for ensuring work is prioritized, completed with quality, communicated clearly, and continuously improved in alignment with program requirements and broader security, privacy, compliance, and business priorities.
WHAT THIS ROLE WILL DO- Own day-to-day operational delivery and overall health of an assigned portfolio, including intake, prioritization, workload allocation, backlog, cycle time, service levels, remediation, escalations, and stakeholder responsiveness.
- Personally perform third-party risk assessments across the full assessment lifecycle, including standard, complex, Critical/High, expedited, fast-track, and escalated reviews as needed; review supplier documentation and evidence, identify risk, document findings, develop remediation requirements, support exceptions, and communicate assessment conclusions.
- Perform first-line QA of analyst-completed assessments for completeness, accuracy, evidence quality, consistency, risk judgment, and adherence to standards; provide actionable feedback and coaching, identify recurring quality trends, and escalate work requiring independent final approval in accordance with program governance.
- Manage, coach, and develop team of risk analysts, including work assignment, capacity planning, performance support, skill development, and guidance on complex assessments, remediation, exceptions, and stakeholder issues.
- Lead portfolio intake support by reviewing incoming requests, confirming completeness, assessing urgency and complexity, aligning work to analyst capacity and expertise, and resolving or escalating intake issues that create delays or duplicate effort.
- Serve as a primary operational point of contact for business leaders, internal stakeholders, and external suppliers; provide portfolio-level updates, manage escalations, clarify next steps and timelines, and translate requirements into clear business-facing communications.
- Develop, gather, validate, and communicate portfolio metrics, dashboards, and status reporting, using data to monitor SLA achievement, backlog health, cycle time, workload, remediation, quality trends, stakeholder experience, and emerging portfolio risks; provide clear portfolio-health updates and recommended actions to leadership and business stakeholders.
- Lead or support projects and workstreams by defining scope, timelines, deliverables, owners, dependencies, risks, action items, and status; maintain project plans and schedules, coordinate cross-functional execution, translate operational needs into actionable requirements, and drive adoption of new processes, tools, controls, and program initiatives.
- Manage AI agents used to support portfolio operations by identifying appropriate use cases, directing and monitoring AI-enabled work, reviewing output quality, defining human-review and escalation requirements, and measuring operational value. Partner with the Technical Administrator and governance resources on agent configuration, integrations, controls, and technical enhancements while retaining accountability for how agents are used within the portfolio.
- Drive continuous improvement across assessment workflows, intake, reporting, communications, quality, and automation by identifying recurring friction, rework, capacity constraints, stakeholder pain points, and control gaps and translating those findings into practical operational improvements that improve portfolio health and scalability.
WHAT THIS PERSON WILL BRING - 8+ years of experience in third-party risk management, information security, compliance, operational risk, audit, vendor risk, or a related risk discipline.
- 3+ years of experience in portfolio management, program/project management, business engagement, or operational leadership, with demonstrated ability to manage multiple workstreams and competing priorities.
- 2+ years of people leadership or direct management experience, including coaching, workload management, performance support, and development of analysts or comparable risk professionals.
- Hands-on experience conducting third-party risk assessments and evaluating supplier evidence, control environments, findings, remediation plans, exceptions, and ongoing due diligence.
- Experience reviewing or QAing risk assessment work and providing clear, consistent feedback that improves quality and analyst capability.
- Strong stakeholder management and communication skills, including the ability to translate risk concepts for technical and non-technical audiences and provide clear portfolio-level reporting and escalation updates.
- Strong project management skills, including experience managing scope, schedules, dependencies, risks, action items, and cross-functional delivery; experience with tools such as Asana, Jira, Smartsheet, or similar is preferred.
- Experience using metrics, dashboards, reporting platforms, workflow automation, or AI-enabled tools to improve operational visibility, efficiency, and scalability; experience overseeing AI-supported workflows or agent-based automation is preferred.
- Working knowledge of common security, privacy, and compliance frameworks and requirements such as NIST, ISO 27001, PCI, SOX, and GDPR.
- Ability to exercise sound judgment in a fast-paced global environment, balance hands-on execution with leadership responsibilities, and manage sensitive or confidential information with discretion.
- Relevant certifications such as CTPRP/CTPRA, CRISC, CISA, CISM and PMP, CAPM, Certified ScrumMaster, or comparable risk/project management credentials are preferred.
If the above description sounds like you and fits your background, apply online at http://www.livenation.com/careers/index.html to join the Live Nation Entertainment team today!
Applicants for employment in the U.S. must possess work authorization which does not require sponsorship by the employer for a visa.
#LI-CM1
#LI-REMOTENORTHCAROLINA
#LI-REMOTEUNITEDSTATES
Live Nation Entertainment will never request payment or equipment purchases as part of the hiring process. Recruiters will only contact candidates from official Live Nation or affiliated brand email domains.
