Security Governance & Compliance Specialist

About the role

Splunk Global Security is looking for a Security Governance & Compliance Specialist to act as a risk analyst across engineering teams. The role provides risk owners with the information they need to make informed decisions, performing technical security risk assessments, writing reports, monitoring mitigation plans, and assessing residual risk throughout the risk management lifecycle.

Key responsibilities

• Build and facilitate technical risk assessment exercises, using AI‑assisted tools where applicable.
• Prepare and present risk findings, metrics, and trend reports to both technical and business audiences.
• Monitor and report risks continuously, track remediation plans against SLA targets, and escalate overdue risks.
• Review risk exception requests, assess residual risk, and define compensating controls.
• Maintain data quality in the risk register, including ownership, treatment plans, due dates, and closure criteria.
• Support internal and external audits by providing evidence, documentation, and walkthroughs of risk management processes.

Required profile

• Bachelor's degree or equivalent work experience.
• Professional security certifications (e.g., GIAC, CISSP, CRISC, CISM, CISA, ISO 27001 Lead Implementer/Auditor, CCSK, CCSP).
• 3‑5+ years of hands‑on technical risk assessment experience in a security risk management role.
• Demonstrated ability to read cloud architectures (AWS, Azure, GCP) and identify control gaps.

Required skills

• Hands‑on experience with risk frameworks such as NIST CSF/RMF, ISO 27001/27002, ISO 42001.
• Proficiency with Jira, Confluence, Microsoft 365 Suite, and AI tools (Claude, Codex).
• Knowledge of Splunk SPL and building Splunk dashboards/reports (preferred but relevant).
• Scripting or data‑analysis skills in Python and SQL.
• Understanding of cloud platforms: AWS, Azure, GCP.