Staff Security Risk Analyst
Okta · Bellevue, Washington; Chicago, Illinois; New York, New York; San Francisco, California; Seattle, Washington; Washington, DC
About this role
**Staff Security Risk Analyst** **Secure Every Identity, from AI to Human** Identity is the key to unlocking the potential of AI. Okta secures AI by building trusted, neutral infrastructure that helps organizations safely embrace this new era. --- ## Responsibilities - Identify, assess, monitor, and report on operational, security, and compliance risks. - Drive technical automation across the risk management lifecycle by engineering custom AI agents, capabilities, and workflows to optimize risk data processing and scale operations. - Evaluate security control effectiveness, track deficiencies, and drive engineering remediation activities to closure. - Conduct root cause analysis on control deficiencies and post-incident reviews to identify underlying gaps and prevent recurrence. - Partner with risk owners to develop mitigation plans aligned with the risk management strategy. - Govern the formal risk acceptance and exception process. - Manage the risk register and issue lifecycle to deliver dynamic risk visibility to leadership. - Apply industry best practices for risk management across Okta, including insight into applying regulatory and industry frameworks to Okta’s security posture. - Build strong partnerships with cross-functional teams to maintain a cohesive view of security, compliance, and operational risks and drive remediation to closure. - Serve as a security and technology subject matter expert; provide advisory on the design and adoption of security controls, especially those intended to meet regulatory requirements. - Develop data analytics workflows and establish KRIs and KPIs to elevate team metrics and executive reporting. - Develop, maintain, and continuously refine standardized risk assessment methodologies, playbooks, and procedures. - Drive security risk management program maturity and execution, aligning risk governance with company goals and security strategy. - Drive risk-awareness initiatives and champion a security-minded risk culture across business units. - Support ad hoc projects, including program enhancements, security initiatives, and other GRC functions. --- ## Requirements - Relevant BA/BS degree. - 7+ years of hands-on security risk management and technical experience. - Hands-on experience building automated workflows, scripts (Python/APIs), and AI agentic solutions. - Industry certification in security (CRISC, CISA, CISM, CISSP) or equivalent certification. - Experience across regulations and common industry frameworks, including (but not limited to) ISO, PCI, NIST CSF, COSO, and others. - Preferred: Third-Party Risk Management experience, including hands-on execution of vendor security assessments and program operations. - Track record of influencing technical and business stakeholders to drive risk remediation and process adoption. - Strong knowledge of agile tools and GRC solutions. - Excellent verbal, written, and interpersonal skills. - Ability to manage multiple priority initiatives and deliver results under tight timelines. - Comfortable with ambiguity and adaptable to fast-changing environments. --- ## Additional Requirements - No citizenship requirement. The Okta employee must be on US soil (50 states, District of Columbia, or outlying areas of the United States as defined in FAR 2.101). --- **Work Style:** #LI-HYBRID **Pay (Base Salary Range):** - San Francisco Bay area: **$180,000 – $247,500 USD** - California (excluding SF Bay area), Colorado, Illinois, New York, Washington: **$16
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.