Cybersecurity Control Analyst

SailPoint Technologies Holdings, Inc.; United States; Remote; USD 72,000 - 120,000; Full time

Benefits offered by this job

Healthcare coverage

401(k) with company match

Paid holidays

Parental leave

Job summary

SailPoint Technologies Holdings, Inc. seeks a Cybersecurity Control Analyst for a US-based remote role with in-person interview requirements.

You will drive control assessments and the compliance program across SailPoint’s security program, collaborating with internal and external stakeholders to enhance risk posture. Responsibilities include leading control testing, developing recommendations, and delivering executive-level reports.

Qualifications

• Bachelors degree in related field, or equivalent professional experience.
• 3+ years of related professional experience in Security, Risk, and Compliance.
• Strong understanding of industry security frameworks and standards such as NIST, ISO, FAIR, OWASP, and CIS.
• Working knowledge of compliance frameworks including ISO 27001, SOC 2, SOX, GDPR, and FedRAMP.
• Proven experience conducting control tests, developing control recommendations, and producing executive-level reporting.
• Strong analytical, problem-solving, and methodical follow-up skills.
• Excellent verbal and written communication skills with the ability to distill complex technical concepts into business-friendly language and influence without authority.
• Demonstrated ability to manage multiple projects concurrently, prioritize effectively in a fast-paced environment, and collaborate seamlessly across distributed teams.

Responsibilities

• Drive cybersecurity control assessments and compliance program enhancements.
• Develop control recommendations and produce executive-level reporting.
• Collaborate with internal and external stakeholders to mature the GRC program.
• Lead control advisory sessions with technical and business partners.
• Advance the control testing process and align risk posture with industry frameworks.

Skills

GRC frameworks

NIST

ISO

FAIR

OWASP

CIS

CISSP

CISA

CISM

CRISC

Cross-functional collaboration

Education

Bachelor's degree or equivalent

Tools

GRC tools

Job description

Cybersecurity Control Analyst

This is a US-based remote role. You will be required to interview in person.

About SailPoint

SailPoint is defining the next era of identity security. Our unified, AI-powered platform seamlessly secures both the Human Fabric of your workforce and the Agentic Fabric of AI and non-human identities, completely eliminating organizational blind spots. Built on core principles like zero-standing privilege and contextualized risk, our platform transforms identity from a vulnerability into a strategic business advantage. Today, we are trusted by some of the largest, most complex organizations in the world to deliver intelligent, autonomous identity security at scale.

About the Role

As a Cybersecurity Control Analyst, you will play a key role driving Cybersecurity’s control assessments and compliance program with applicable standards, requirements, and policies. This is a challenging and impactful role where you will have the opportunity to work with both internal and external stakeholders while driving the continuous improvements for our GRC program.

About the Team

You will join the Chief Information Security Officer (CISO) team, a collaborative group dedicated to maintaining best-in-class security across SailPoint’s SaaS and enterprise software solutions. The team works closely with partner functions across engineering, IT, compliance, and product teams to translate complex control requirements into clear, actionable business insights.

Roadmap for Success

1. 30 Days: Complete onboarding, familiarize yourself with SailPoint's Control Testing processes, policies, and security tooling, and establish working relationships with the CISO team and key stakeholders.
2. 60 Days: Shadow and begin creating plans for the upcoming round of control testing. Start collaborating on GRC tool evidence gathering integrations.
3. 90 Days: Independently lead prep work for the upcoming round of control testing following current processes. Consult on control advisory requests with technical and business partners.
4. 6 Months: Drive enhancements to the control testing process, collaborate on continuous strategic planning for the cybersecurity organization, and lead control advisory sessions with technical and business partners.
5. 1 Year: Serve as a subject matter expert and thought leader in cyber control advisory, mature the continuous testing process, and collaborate to align SailPoint’s risk posture, control effectiveness and emerging threats to industry frameworks.

Requirements

• Bachelors degree in related field, or equivalent professional experience
• 3+ years of related professional experience in Security, Risk, and Compliance
• Strong understanding of industry security frameworks and standards such as NIST, ISO, FAIR, OWASP, and CIS
• Working knowledge of compliance frameworks including ISO 27001, SOC 2, SOX, GDPR, and FedRAMP
• Proven experience conducting control tests, developing control recommendations, and producing executive-level reporting
• Strong analytical, problem-solving, and methodical follow-up skills
• Excellent verbal and written communication skills with the ability to distill complex technical concepts into business-friendly language and influence without authority
• Demonstrated ability to manage multiple projects concurrently, prioritize effectively in a fast-paced environment, and collaborate seamlessly across distributed teams

Preferred Skills

• Relevant industry certifications such as CISSP, CISA, CISM, CRISC, or equivalent
• Familiarity with enterprise governance, risk, and compliance (GRC) tools and platforms

Benefits

At SailPoint, our identity security innovations are powered by a global crew. We are proudly headquartered in Austin, Texas, with a beautiful campus that overlooks the scenic 4 Points Preserve. We embrace a flexible, remote-first work culture that prioritizes personal autonomy, trust, and work-life balance. Working here is defined by "The SailPoint Way"; a highly collaborative and inclusive environment where leadership is transparent, "smart jerks" are not tolerated, and crew members have the freedom to drive real impact in security. We provide: Competitive Compensation Flexible Time Off: Trust-based vacation policies alongside paid company holidays to help you recharge. Comprehensive Healthcare: Premium medical, dental, and vision insurance options Career Growth Opportunities Plus so much more! Benefits and Compensation listed vary based on the location of your employment and the nature of your employment with SailPoint. As a part of the total compensation package, this role may be eligible for the SailPoint Corporate Bonus Plan or a role-specific commission, along with potential eligibility for equity participation. SailPoint maintains broad salary ranges for its roles to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect SailPoint’s differing products, industries, and lines of business. Candidates are typically placed into the range based on the preceding factors as well as internal peer equity. We estimate the base salary, for US-based employees, will be in this range from (min-max, USD): $71,500 - $120,478.00 Base salaries for employees based in other locations are competitive for the employee’s home location. Benefits Overview 1. Health and wellness coverage: Medical, dental, and vision insurance 2. Disability coverage: Short-term and long-term disability 3. Life protection: Life insurance and Accidental Death & Dismemberment (AD&D) 4. Additional life coverage options: Supplemental life insurance for employees, spouses, and children 5. Flexible spending accounts for health care, and dependent care; limited purpose flexible spending account 6. Financial security: 401(k) Savings and Investment Plan with company matching 7. Time off benefits: Flexible vacation policy 8. Holidays: 8 paid holidays annually 9. Sick leave 10. Parental support: Paid parental leave 11. Employee Assistance Program (EAP) and Care Counselors 12. Voluntary benefits: Legal Assistance, Critical Illness, Accident, Hospital Indemnity and Pet Insurance options 13. Health Savings Account (HSA) with employer contribution

SailPoint is an equal opportunity employer and we welcome all qualified candidates to apply to join our team. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other category protected by applicable law. Alternative methods of applying for employment are available to individuals unable to submit an application through this site because of a disability. Contact [e-mail] or mail to 11120 Four Points Dr, Suite 100, Austin, TX 78726, to discuss reasonable accommodations. NOTE: Any unsolicited resumes sent by candidates or agencies to this email will not be considered for current openings at SailPoint.

SailPoint (Nasdaq: SAIL) is defining the new era of adaptive identity security. In a world where non-human identities now significantly outnumber humans, our AI-powered platform unifies identity, security, and data intelligence to protect today’s enterprise from advanced identity-based threats. We deliver the identity solution that spans both the breadth of identities and the depth of context needed to drive real-time access with confidence. Built on principles like zero-standing privilege and contextualized risk, our SailPoint platform transforms identity from a point of vulnerability into a powerful security advantage. Trusted by many of the world's leading organizations, SailPoint secures the enterprise with intelligent, autonomous identity security. The employment policy of SailPoint is to provide equal opportunity to all persons, and it is SailPoint’s policy to take affirmative action to employ and advance in employment protected veterans and individuals with disabilities. It is SailPoint’s policy to recruit, hire, train and promote qualified individuals in all job titles, and ensure that all other personnel actions are administered without regard to race, color, religion, national origin, sex, military and/or veteran status, disability, or other legally protected status, and we will ensure that all employment decisions are based only on valid job requirements. SailPoint does not discriminate on the basis of national origin or citizenship status as provided under the Immigration Reform and Control Act of 1986. Employees and applicants shall not be subjected to harassment, intimidation, threats, coercion, or discrimination because they have engaged in or may engage in any of the following activities: Filing a complaint; Assisting or participating in an investigation, compliance evaluation, hearing, or any other activity related to the administration of the affirmative action provisions of Section 503, VEVRAA, or any other Federal, State or local law requiring equal opportunity for individuals with disabilities or protected veterans; Opposing any act or practice made unlawful by Section503,VEVRAA, or their implementing regulations in this part, or any other Federal, State or local law requiring equal opportunity for individuals with disabilities or protected veterans; or Exercising any other right protected by section503,VEVRAA or their implementing regulations.SailPoint will also provide reasonable accommodation to known physical or mental limitations of an otherwise qualified employee or applicant for employment, unless the accommodation would impose undue hardship on the operation of our business. SailPoint’s affirmative action program contains an audit and reporting system which enables us to measure the effectiveness of our program, indicate any need for remedial action, determine the degree to which our objectives have been attained, determine whether protected veterans and individuals with disabilities had had the opportunity to participate in company-sponsored activities, measure our compliance with the program’s specific obligations, and document actions taken to comply with these obligations.