Senior Security Engineer – Technical Risk Manager

🔥 3 minutes ago

☕ Washington – Remote

☕ Washington – Remote

💵 $145k - $193.8k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Smartsheet

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2005

💼 Consulting

🏥 Healthcare

📣 Marketing

Consulting • Healthcare • Marketing

Smartsheet is a platform designed to manage projects, automate workflows, and build solutions at scale. It offers a wide range of features including automation, team collaboration, dashboards and reporting, and integrations, allowing businesses to streamline their operations. The platform caters to diverse use cases such as project management, IT portfolio management, marketing management, and more, serving various industries including government, finance, and healthcare. Smartsheet also emphasizes security and data protection, ensuring users' data privacy. Additionally, it offers professional services like consulting, training, and implementation support to maximize the platform's capabilities.

📋 Description

• Own and mature Smartsheet's Security Risk Management program, including risk identification, analysis, scoring, and quantification across internal systems, third parties, and emerging initiatives • Maintain the enterprise risk register, including ratings, ownership, mitigation status, and residual risk • Lead risk analysis and reviews for new initiatives, architecture changes, and significant findings • Translate technical exposure into business-relevant risk statements for leadership • Develop and drive risk mitigation strategies with risk owners across engineering, IT, and business teams • Define remediation plans, track them to closure, and escalate stalled items • Oversee Smartsheet's Third-Party Risk Management program, including vendor risk tiering, security assessment/questionnaire review, ongoing monitoring, and issue tracking • Build and present risk reporting and KPIs/KRIs to security and business leadership • Partner with GRC, Field Security Engineering, and engineering leads to integrate audit, penetration test, and questionnaire findings into the risk register and prioritization process • Report to the Senior Director, GRC Engineering

🎯 Requirements

• 4+ years of experience in security risk management, enterprise risk, or GRC, including direct ownership of a risk register and risk assessment process • Working familiarity with risk quantification approaches (FAIR, OCTAVE, or similar) • Technical fluency to understand cloud architecture, application security concepts, and common vulnerability/risk findings • Experience running or closely supporting a Third-Party Risk Management program, including vendor tiering, questionnaire review, and ongoing monitoring • Excellent written and verbal communication skills • Strong organizational skills and comfort managing concurrent risk items and vendor relationships • Professional certifications: CRISC, CISSP, CISM, or equivalent • Experience with GRC or TPRM tooling such as Vanta, Drata, OneTrust, Archer, or ServiceNow GRC • Background supporting SOC 2, ISO 27001, or FedRAMP programs • Experience presenting risk posture to senior leadership or board-level audiences • Legally eligible to work in the U.S. on an ongoing basis

🏖️ Benefits

• Employer subsidized medical/vision and dental coverage for full-time employees • 401k Match to help you save for your future (50% of your contribution up to the first 6% of your eligible pay) • Monthly stipend to support your work and productivity • Flexible Time Away Program, plus Sick Time Off • US employees are automatically covered under Smartsheet-sponsored life insurance, short-term, and long-term disability plans • US employees receive 12 paid holidays per year • Up to 24 weeks of Parental Leave • Personal paid Volunteer Day to support our community • Opportunities for professional growth and development including access to Udemy online courses • Company Funded Perks, including a counseling membership, local retail discounts, and your own personal Smartsheet account • Teleworking options from any registered location in the U.S. (role specific) • Market competitive incentive opportunity

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume