Senior GRC Analyst

The role

You will support the Security Governance, Risk, and Compliance team by designing a risk-first governance function. You will write security policies, assess information security risks, and work with Engineering to implement controls.

What you will do

• Support the design and implementation of a risk first governance function
• Identify opportunities to improve efficiency and effectiveness through tools and automations
• Write, revise, and manage information security policies, standards, and procedures
• Identify and assess information security risks
• Work with Information Security and Engineering to implement controls to mitigate risks
• Validate control design and effectiveness
• Support ongoing risk monitoring and reporting
• Provide education and guidance to others across the organization as a subject matter expert

Required qualifications

• 4+ years of relevant professional experience in Security Governance, Risk and Compliance
• Experience interfacing with software engineers to identify risks, map commitments to controls and develop relevant policies
• Experience assessing adherence to policies and developing mitigation and remediation plans
• Deep understanding of risk assessment, compliance frameworks, creation of policy, and how to educate organizations on these concepts
• Understanding of security concepts and a broad range of security risks and controls

Nice to have

• Experience in tech

Benefits

• Equity compensation
• Benefits as described on this page

Before you apply

• The company may not be able to employ candidates who have United States work authorization related to certain U.S. visa categories, or support future H-1B sponsorship at this time

About the company

Roblox is building tools and a platform that empower a global community of developers and creators to bring immersive digital experiences to life. The company aims to connect a billion people with optimism and civility.