Senior Staff InfoSec Risk Specialist (GRC)

About the role

SentinelOne seeks a senior professional to own and operate its Security Risk program. The role involves building predictive risk management capabilities, governing the risk register, and acting as a trusted leader for GRC initiatives.

Key responsibilities

• Accountable for the Security Risk program, including cadence, scoring methodology, reporting, escalation, SOPs, and audit readiness.
• Drive the intake pipeline from diverse sources (audit findings, pen‑tests, vulnerability scans, compliance frameworks) and validate risk scoring using ISO‑27005‑aligned methods.
• Lead escalation processes, coordinate cross‑team risk prioritization, and oversee technical leadership for risk analysts.
• Prepare and facilitate recurring risk reviews, adjudicate treatment decisions, and ensure residual risk is documented and re‑scored.
• Build automation and AI‑assisted workflows for review preparation, metrics generation, and risk register enhancements.

Required profile

• 12+ years of experience (or equivalent with advanced degree) in cybersecurity risk management.
• Deep expertise across multiple security domains (application, cloud, IAM, network, data protection, endpoint, third‑party).
• Proven track record building or maturing GRC programs and leading multi‑team projects with minimal supervision.
• Experience mentoring analysts and communicating risk to executive audiences.
• Familiarity with major compliance frameworks (SOC 2, FedRAMP, ISO 27001, NIST CSF, etc.).

Required skills

• Python
• SQL
• Jira (including JQL, custom fields, workflow design)
• Google Apps Script
• Risk management methodologies (ISO 27005, ISO 27001, NIST RMF, FAIR)