Senior Information Security Risk Specialist (GRC)

The role

You will support the design, implementation, and testing of organizational, procedural, and technological security controls. You will manage risk assessments, security audits, and compliance frameworks to mitigate risk and improve the control environment.

What you will do

• Support planning and performance of IT risk-based security audits and projects
• Evaluate global standards, compliance frameworks, and regulations
• Collaborate with process and control owners through the audit lifecycle
• Manage audit findings and track remediation activities
• Participate in internal security and compliance programs like SOC 2 and ISO 27001/27002
• Provide control consultative support to the business
• Document new and update existing policies, procedures, standards, and resources
• Participate in the security awareness program
• Support customer security reviews, RFPs, and external inquiries
• Participate in defining, collecting, and tracking security metrics

Required qualifications

• 5 or more years of experience working in information security, risk, or compliance
• Experience working with security controls across domains such as access management, encryption, risk management, network security, configuration management, patch management, change management, awaren
• Ability to perform internal audits with minimal direct supervision
• Experience in a broad range of audit projects such as SSAE 16/18 SOC 2, ISO 27001/2, and NIST
• Strong risk management experience
• Strong project management skills
• Excellent collaboration and interpersonal skills
• Experience working with both technical and non-technical teams
• Ability and desire to understand the intent of requirements and provide effective recommendations

Nice to have

• An advanced degree in computer science, information technology, information security, or a related field
• Relevant certifications such as ISO 27001 LA/LI, CISA, CISM, CISSP, or CRISC
• Experience with and a strong understanding of common security compliance frameworks, controls, and best practices such as COSO, SOC 2, SOX ITGC, ISO 27001/27002, GDPR, PCI, and NIST
• Ability to assess and pragmatically define scope and relevant controls

Benefits

• Restricted Stock Units (RSUs)
• Employee Stock Purchase Plan (ESPP)
• Competitive leave benefits
• Gender-neutral parental leave
• Private medical, dental, and vision insurance
• Global home office allowance
• Internet or mobile phone allowance
• Hybrid work model with flexible hours
• Wellness programs
• In-office lunch program

About the company

SentinelOne is a company at the intersection of AI and security, pioneering a new operating model for cybersecurity with an AI-native platform.