Senior Information Security Risk Specialist (GRC)

About the role

SentinelOne is looking for a Senior Information Security Risk Specialist to understand and support the design of its organizational, procedural and technological security controls within the applicable security frameworks. The role identifies and tests controls so they are designed, implemented and operating effectively to mitigate risk, and helps implement, automate, document and maintain them while answering questions from internal and external stakeholders.

Key responsibilities

• Support planning and performance of IT risk-based security audits and projects, risk assessments, fieldwork and stakeholder communication
• Evaluate global standards, compliance frameworks and regulations to analyse existing controls and design improvements
• Collaborate with process and control owners on documentation, testing, remediation and control enhancements
• Track audit findings and remediation progress, and support internal and external audits and evidence collection via a GRC tool
• Help redesign controls to improve the control environment, and document policies, procedures, standards and resources
• Participate in the security awareness program and support customer security reviews, RFPs and external inquiries
• Define, collect and track security metrics

Required profile

• 5+ years of experience in information security, risk or compliance
• Ability to perform internal audits with minimal supervision and experience with SOC 2, ISO 27001 and NIST audits
• Strong risk management and project management skills, working with technical and non-technical teams
• Advanced degree in computer science, IT or information security preferred; certifications such as ISO 27001 LA/LI, CISA, CISM, CISSP or CRISC preferred

Required skills

• Security controls in access management, encryption, risk management, network security, configuration management, patch management, change management, awareness and training, and BC/DRP
• Compliance frameworks such as COSO, SOC 2, SOX ITGC, ISO 27001/27002, GDPR, PCI and NIST

What we offer

• Restricted stock units and employee stock purchase plan
• Medical, dental and vision insurance, private and gender-neutral parental leave
• Home office and internet/mobile allowances, hybrid work model
• Wellness programs, in-office lunch program and growth opportunities