Senior Information Security Risk Specialist (GRC)
Sentinellabs · United States - Remote
About this role
**Senior Information Security Risk Specialist (GRC)** **Our Purpose** At SentinelOne, our purpose is to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, protecting them becomes more critical than ever. **About Us** SentinelOne is at the intersection of AI and security, pioneering an AI-native cybersecurity operating model. Our platform unifies protection across endpoint, cloud, identity, data, and AI systems to deliver autonomous detection and response with clarity and speed. **What Are We Looking For?** We’re looking for people who are relentlessly curious and committed to continuous learning—experimenting thoughtfully, applying what they learn, and driving better outcomes. --- ## What You’ll Do As a Senior Information Security Risk Specialist, you’ll support the design and effectiveness of SentinelOne’s organizational, procedural, and technological security controls within applicable security frameworks. You’ll identify, test, implement, automate, document, and maintain controls—while partnering with internal and external stakeholders. **Primary responsibilities include:** - Support planning and performance of IT risk-based security audits, risk assessments, fieldwork, and stakeholder communication - Evaluate global standards, compliance frameworks, and regulations to improve and grow controls - Collaborate with process and control owners across the audit lifecycle (documentation updates, testing coordination, remediation, and control/process enhancements) - Proactively manage audit findings, track remediation status, and ensure timely execution - Participate in security and compliance programs and track recurring controls (e.g., SSAE 18 SOC 2, ISO 27001/27002), including evidence collection via a GRC tool - Provide control consultative support to improve the control environment and mitigate risk - Document and update policies, procedures, standards, and resources - Support security awareness training for data security and privacy responsibilities - Assist with customer security reviews, RFPs, and external security/privacy inquiries - Define, collect, and track security metrics --- ## What Skills and Knowledge You’ll Bring Ideal candidates have: - 5+ years of experience in information security, risk, or compliance - Experience with security controls across domains such as access management, encryption, risk management, network security, configuration/patch/change management, awareness & training, and BC/DRP - Ability to perform internal audits with minimal supervision and strong audit judgment (e.g., SSAE 16/18 SOC 2, ISO 27001/2, NIST) - Strong risk management experience: assessments, audits, control design, enterprise control frameworks, and risk prioritization - Strong project management skills to manage multiple initiatives and deliver on timelines - Excellent collaboration and communication skills (written and verbal) for technical and non-technical audiences - Ability to understand requirement intent and provide effective recommendations - Advanced degree preferred; relevant certifications such as ISO 27001 LA/LI, CISA, CISM, CISSP, or CRISC are a plus - Familiarity with compliance frameworks and controls (e.g., COSO, SOC 2, SOX ITGC, ISO 27001/27002, GDPR, PCI, NIST) --- ## Why SentinelOne? SentinelOne is built for this moment—an AI-native platform designed to operate at machine speed. **Benefits include:** - **Equity & Rewards:** RSUs, ESPP - **Time Of
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.