Senior Security Risk Engineer

🕒 il y a 17 jours

🌐 États-Unis, Canada – Distant

🇺🇸 États-Unis – Télétravail 🇨🇦 Canada – Télétravail

💵 $139 200 - $189 000 / an

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 0%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

GitLab

Site WebLinkedInTous les Emplois

1001 - 5000 employés

Fondée en 2014

💼 Conseil

📣 Marketing

🤖 Intelligence artificielle

💰 Secondary Market en 2020-11

Consulting • Marketing • Artificial Intelligence

GitLab est une plateforme DevOps complète, proposée sous la forme d’une application unique, qui change en profondeur la manière dont les équipes Développement, Sécurité et Ops collaborent et construisent des logiciels. De l’idée à la production, GitLab aide les équipes à réduire le temps de cycle de plusieurs semaines à quelques minutes, à diminuer les coûts de développement et le time to market, tout en augmentant la productivité des développeurs.

Description

• Own risk identification, analysis, and prioritization across third-party risk, security risk assessments, and security findings using an established risk framework • Translate technical vulnerabilities, control gaps, and risk findings into clear, quantified risk statements for stakeholders and leadership • Drive remediation of findings and risk exceptions to closure with Engineering, IT, Product, and Legal; escalate stalled or high-severity items • Mature and maintain a risk register and quarterly reporting cadence covering open risk, remediation progress, and trends • Own and mature AI risk management, including AI impact assessments, AI risk assessments, and risk treatments supporting ISO 42001 certification • Design, develop, and implement key risk indicators and supporting metrics for top risks • Build automation, scripting, or AI-enabled tooling to eliminate manual risk and TPRM workflow steps • Contribute to the risk program roadmap, incorporating frameworks, regulatory changes, and assessment lessons learned • Monitor internal and external risk landscapes and identify and escalate emerging risks • Partner with Security, Legal, IT, Product, and Engineering to translate technical findings and vendor risk into business-relevant risk statements and treatments • Report top risks to leadership

🎯 Exigences

• 5+ years of experience in security risk management • Experience working with security-centric risk management or compliance frameworks such as NIST RMF, NIST 800-39, or ISO 31000 • Familiarity with AI governance frameworks such as ISO 42001 or NIST AI RMF is a plus • Experience designing and executing qualitative and quantitative risk analyses that translate technical risks into measurable business impact • Track record of driving risk assessments, risk registers, and remediation efforts to closure across IT, Procurement, Internal Audit, Legal, Product, and Engineering in a heavily regulated or multi-entity environment • Experience interpreting technical control requirements and translating them for technical and non-technical stakeholders • Demonstrated experience personally building scripts, workflows, or AI-enabled tooling to reduce manual risk or GRC work • Comfort operating with ambiguity, managing multiple concurrent assessments, and reprioritizing under tight deadlines • Exceptional written and verbal communication skills with demonstrated ability to translate security risks into business risks • Strong understanding of cloud security, SaaS security models, and DevSecOps practices • Relevant certifications such as CISSP, CISM, CISA, or CRISC are preferred but not required

🏖️ Avantages

• Benefits to support your health, finances, and well-being • Flexible Paid Time Off • Team Member Resource Groups • Equity Compensation & Employee Stock Purchase Plan • Growth and Development Fund • Parental Leave