Senior Security Engineer – Technical Risk Manager

🔥 8 horas atrás

☕ Washington – Remoto

infoinfo

💵 $145.000 - $193.750 / ano

⏰ Tempo Integral

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🗣️🇺🇸🇬🇧 Inglês obrigatório

De onde vem esta vaga

Publicada na página de carreiras da Smartsheet, não em um site de vagas

Vista pela primeira vez pelo Remote Rocketship 8 horas atrás

Ainda aberta no site da Smartsheet. Verificada 1 minuto atrás.

Logo of Smartsheet

Smartsheet

1001 - 5000 funcionários

Fundada em 2005

💼 Consultoria

🏥 Saúde

📣 Marketing

Consulting • Healthcare • Marketing

Smartsheet é uma plataforma projetada para gerenciar projetos, automatizar fluxos de trabalho e construir soluções em larga escala. Ela oferece uma ampla gama de recursos, incluindo automação, colaboração em equipe, painéis e relatórios, e integrações, permitindo que as empresas otimizem suas operações. A plataforma atende a diversos casos de uso, como gestão de projetos, gestão de portfólio de TI, gestão de marketing e mais, servindo a várias indústrias, incluindo governo, finanças e saúde. Smartsheet também enfatiza a segurança e proteção de dados, garantindo a privacidade dos dados dos usuários. Além disso, oferece serviços profissionais como consultoria, treinamento e suporte à implementação para maximizar as capacidades da plataforma.

Descrição

• Own and mature Smartsheet's Security Risk Management program, including risk identification, analysis, scoring, and quantification across internal systems, third parties, and emerging initiatives • Maintain the enterprise risk register, including ratings, ownership, mitigation status, and residual risk • Lead risk analysis and reviews for new initiatives, architecture changes, and significant findings • Translate technical exposure into business-relevant risk statements for leadership • Develop and drive risk mitigation strategies with risk owners across engineering, IT, and business teams • Define remediation plans, track them to closure, and escalate stalled items • Oversee Smartsheet's Third-Party Risk Management program, including vendor risk tiering, security assessment/questionnaire review, ongoing monitoring, and issue tracking • Build and present risk reporting and KPIs/KRIs to security and business leadership • Partner with GRC, Field Security Engineering, and engineering leads to integrate audit, penetration test, and questionnaire findings into the risk register and prioritization process • Report to the Senior Director, GRC Engineering

🎯 Requisitos

• 4+ years of experience in security risk management, enterprise risk, or GRC, including direct ownership of a risk register and risk assessment process • Working familiarity with risk quantification approaches (FAIR, OCTAVE, or similar) • Technical fluency to understand cloud architecture, application security concepts, and common vulnerability/risk findings • Experience running or closely supporting a Third-Party Risk Management program, including vendor tiering, questionnaire review, and ongoing monitoring • Excellent written and verbal communication skills • Strong organizational skills and comfort managing concurrent risk items and vendor relationships • Professional certifications: CRISC, CISSP, CISM, or equivalent • Experience with GRC or TPRM tooling such as Vanta, Drata, OneTrust, Archer, or ServiceNow GRC • Background supporting SOC 2, ISO 27001, or FedRAMP programs • Experience presenting risk posture to senior leadership or board-level audiences • Legally eligible to work in the U.S. on an ongoing basis

🏖️ Benefícios

• Employer subsidized medical/vision and dental coverage for full-time employees • 401k Match to help you save for your future (50% of your contribution up to the first 6% of your eligible pay) • Monthly stipend to support your work and productivity • Flexible Time Away Program, plus Sick Time Off • US employees are automatically covered under Smartsheet-sponsored life insurance, short-term, and long-term disability plans • US employees receive 12 paid holidays per year • Up to 24 weeks of Parental Leave • Personal paid Volunteer Day to support our community • Opportunities for professional growth and development including access to Udemy online courses • Company Funded Perks, including a counseling membership, local retail discounts, and your own personal Smartsheet account • Teleworking options from any registered location in the U.S. (role specific) • Market competitive incentive opportunity

Candidatar-se

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Vagas Similares

🔥 8 horas atrás

Figma

201 - 500

☁️ SaaS

Security Engineer protecting Figma’s collaborative design platform, cloud infrastructure, and AI systems. Driving security assessments, tooling, incident response, and anti-abuse initiatives.

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $153.000 - $376.000 / ano

💰 Venture Round em 2022-01

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🦅 Patrocina Visto H1B

infoinfo

🗣️🇺🇸🇬🇧 Inglês obrigatório

🔥 8 horas atrás

AbbVie

10.000+ funcionários

🏥 Saúde

💼 Consultoria

🏭 Manufatura

Cybersecurity Architect securing AbbVie’s innovative pharmaceutical environment through endpoint, mobile, and enterprise security architecture. Designing controls, reviewing risks, and applying AI-assisted cybersecurity workflows.

🗣️🇺🇸🇬🇧 Inglês obrigatório

🔥 10 horas atrás

Trilogy Innovations, Inc.

51 - 200

🏢 Corporativo

🔒 Cibersegurança

🤖 Inteligência Artificial

Mid Backend Software Developer modernizing mission-critical federal IT systems with Java, Spring Boot, AWS GovCloud, and OpenShift microservices. Supporting secure, cloud-native modernization for a federal customer.

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $111.000 - $114.000 / ano

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🗣️🇺🇸🇬🇧 Inglês obrigatório

🔥 10 horas atrás

Trilogy Innovations, Inc.

51 - 200

🏢 Corporativo

🔒 Cibersegurança

🤖 Inteligência Artificial

Senior backend developer modernizing federal government systems into AWS GovCloud microservices. Leading Java, Kubernetes, event-driven architecture, and mission-critical production support.

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $140.000 - $144.000 / ano

⏰ Tempo Integral

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🗣️🇺🇸🇬🇧 Inglês obrigatório

🔥 11 horas atrás

PCI Pharma Services

1001 - 5000

🏥 Saúde

🏭 Manufatura

🧬 Biotecnologia

Senior JD Edwards security and CNC administrator managing EnterpriseOne access, controls, and infrastructure. Supporting PCI Pharma Services’ global biopharma manufacturing and compliance operations.

🗣️🇺🇸🇬🇧 Inglês obrigatório

Desenvolvido por Lior Neu-ner. Adoraria receber seu feedback — entre em contato por DM ou pelo e-mail support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok