Principal, GRC Automation and Cyber Risk (Cybersecurity)

Location: Seattle, United States

Annual base pay: $167,200–$250,800, with potential incentive compensation, bonuses, restricted stock units, and benefits.

Company

F5 develops cybersecurity and application delivery solutions that help organizations create, secure, and run applications.

What you will do

• Design, build, and scale GRC automation across risk, compliance, policy, and issue management using Python-based scripts, services, and tools.
• Architect integrations between GRC platforms and cloud, vulnerability management, IAM, SDLC, HR, asset management, and third-party systems using REST APIs, GraphQL, webhooks, message queues, and ETL pipelines.
• Engineer data pipelines for threat, vulnerability, asset, and business context data to support quantitative and scenario-based cyber risk analysis.
• Implement automated controls, continuous monitoring, evidence collection, and audit-ready workflows for ISO, SOX, SOC, and regulatory requirements.
• Build agentic AI and LLM-powered GRC capabilities for control mapping, risk prioritization, issue triage, remediation recommendations, and evidence collection.
• Advise security, IT, engineering, and business leaders while presenting architecture, automation, and risk insights to executive and board audiences.

Requirements

• Bachelor’s degree in cybersecurity, information systems, computer science, engineering, risk management, or a related field.
• 10+ years of experience in cybersecurity, risk management, GRC, or security architecture, including 3–5 years in hands-on engineering or software development.
• Production-level Python programming experience for automation, data processing, tooling, security use cases, or agentic workflows.
• Proven experience designing, building, consuming, and governing APIs and integrating heterogeneous enterprise systems at scale.
• Experience automating or scaling GRC, risk, or compliance programs with ServiceNow IRM or comparable enterprise platforms.
• Strong cross-functional communication, systems thinking, and the ability to operate at both strategic and hands-on engineering levels.

Nice to have

• Master’s degree, FAIR or quantitative risk experience, and certifications such as CISSP, CISM, CRISC, or Open FAIR.
• Experience building autonomous agents and using LangChain, LangGraph, AutoGen, CrewAI, or comparable LLM orchestration frameworks.
• Experience with pandas, NumPy, FastAPI, Celery, Airflow, API gateways, MuleSoft, Boomi, Workato, Kafka, or RabbitMQ.
• Experience applying AI, data analytics, or workflow automation to GRC use cases.

Culture & Benefits

• Work with cybersecurity, engineering, IT, legal, privacy, internal audit, and digital teams in a highly matrixed environment.
• Contribute to modernizing GRC through code-driven, continuous, and risk-informed execution.
• Potential incentive compensation, bonus, restricted stock units, and employee benefits are available.
• Equal employment opportunities and reasonable accommodations are provided.