Назад
14 дней назад

Senior GRC Analyst

180 570 - 224 310$
Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior GRC Analyst (Information Security): Building and scaling Roblox’s security governance, risk, and compliance programs with an accent on risk assessment, policy lifecycle management, control validation, and security automation. Focus on identifying and quantifying information security risks, partnering with Engineering on mitigation plans, and improving governance through scalable tools and reporting.

Location: San Mateo, California, United States. Office-based roles require onsite presence Tuesday, Wednesday, and Thursday, with optional presence on Monday and Friday. United States work authorization is required, and future H-1B sponsorship may not be available.

Salary: $180,570–$224,310 USD annual base pay, plus potential equity and benefits.

Company

Roblox builds a platform and tools for creating shared 3D digital experiences used by a global community of developers and creators.

What you will do

  • Support the design and implementation of a risk-first security governance function.
  • Identify and assess information security risks and help implement controls to mitigate them.
  • Validate control design and effectiveness, and support ongoing risk monitoring and reporting.
  • Write, revise, and manage information security policies, standards, and procedures.
  • Design tools and automations that improve security and compliance efficiency.
  • Partner with GRC, Information Security, Engineering, Legal, Finance, and leadership stakeholders.

Requirements

  • 4+ years of professional experience in Security Governance, Risk, and Compliance.
  • Experience working with software engineers to identify risks, map commitments to controls, and develop policies.
  • Experience assessing policy adherence and creating mitigation and remediation plans.
  • Deep understanding of risk assessment, compliance frameworks, policy creation, and organizational education.
  • Understanding of security concepts and a broad range of security risks and controls.
  • Technology industry experience and the ability to establish credibility with engineering teams; active coding is not required.

Culture & Benefits

  • Work within the Information Security organization and report to the GRC Manager.
  • Collaborate with Engineering, Legal, Finance, and leadership, including reporting to the Board of Directors and Audit & Compliance Committee.
  • Contribute to a growing team focused on automation across risk management, policy lifecycle management, supply chain risk, AI risk, and controls programs.
  • Full-time employees are eligible for equity compensation and employee benefits.
  • Roblox is committed to equal employment opportunity, inclusion, and reasonable accommodations.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →