Senior Information Security Risk Specialist – GRC

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

SentinelOne

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2013

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

SentinelOne is a leader in autonomous cybersecurity, known for its innovative use of AI across endpoint, cloud, and identity protection solutions. It is recognized by Gartner as a leader in the Magic Quadrant for Endpoint Protection Platforms for four consecutive years. SentinelOne's Singularity platform integrates enterprise security, offering features like AI-powered threat detection, endpoint and cloud security, vulnerability management, and threat intelligence. The company supports various industries by delivering real-time protection and operational efficiency while leveraging AI for advanced threat hunting and log analytics. With a strong focus on reducing risk and enhancing security performance, SentinelOne caters to enterprises worldwide with secure, scalable solutions.

📋 Description

• Support planning and performance of IT risk-based security audits, projects, risk assessments, fieldwork, and stakeholder communications • Evaluate global standards, compliance frameworks, and regulations; analyze controls and identify improvement opportunities • Collaborate with process and control owners on documentation updates, testing coordination, remediation, and control enhancements • Manage audit findings, status tracking, documentation, and remediation activities • Participate in security and compliance programs, including SSAE 18 SOC 2 and ISO 27001/27002 recurring controls • Support internal and external audits and evidence collection through a GRC tool • Provide control consulting for business redesign efforts to mitigate risk and improve compliance and operational performance • Document and update policies, procedures, standards, and resources • Participate in security awareness programs and train personnel on data security and privacy responsibilities • Support customer security reviews, RFPs, and external security and privacy inquiries • Define, collect, and track security metrics

🎯 Requirements

• 5 or more years of experience working in information security, risk, or compliance • Experience working with security controls across access management, encryption, risk management, network security, configuration management, patch management, change management, awareness and training, and BC/DRP • Ability to perform internal audits with minimal direct supervision and experience with SSAE 16/18 SOC 2, ISO 27001/2, and NIST audit projects • Strong risk management experience, including assessments and audits, control design, enterprise control frameworks, and risk prioritization • Strong project management skills and ability to manage multiple projects to completion within agreed timelines • Excellent written and verbal communication and interpersonal skills • Experience working with technical and non-technical teams • Ability and desire to understand requirements and provide effective recommendations • Advanced degree in computer science, information technology, information security, or a related field is preferred • Relevant certifications such as ISO 27001 LA/LI, CISA, CISM, CISSP, or CRISC are preferred • Strong understanding of security compliance frameworks, controls, and best practices including COSO, SOC 2, SOX ITGC, ISO 27001/27002, GDPR, PCI, and NIST is preferred • Ability to assess and pragmatically define scope and relevant controls • Desire to continuously develop and deepen technical skills

🏖️ Benefits

• Restricted Stock Units (RSUs) • Employee Stock Purchase Plan (ESPP) • Competitive leave benefits • Gender-neutral parental leave • Private medical, dental, and vision insurance • Global home office allowance • Internet or mobile phone allowance • Hybrid work model with flexible hours • Wellness programs • In-office lunch program

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume