GRC Security Lead: Policy, Risk & Automation

Roblox; California (MO); On-site; USD 209,000 - 272,000; Full time

Benefits offered by this job

Equity compensation

Comprehensive benefits

Job summary

Roblox seeks a Security Governance, Risk and Compliance professional to lead risk-informed governance and policy programs within the Information Security organization.

You will partner with GRC, Infosec and Engineering colleagues to design a scalable governance function, identify improvements, and drive controls to mitigate risks while educating the wider Roblox community on security concepts.

Qualifications

• 4+ years of professional experience in Security Governance, Risk and Compliance.
• Experience interfacing with software engineers to map commitments to controls and develop policies.
• Experience assessing adherence to policies and developing mitigation/remediation plans.
• Deep understanding of risk assessment, compliance frameworks, policy creation, and educating organizations.
• Ability to interface with engineers; coding is not required for the role.

Responsibilities

• Be a key contributor to Roblox's Governance, Risk, and Compliance team within Information Security.
• Support the design and implementation of a Risk-first governance function that is scalable for Roblox.
• Identify opportunities to improve efficiency, designing tools and automations to enhance security by design.
• Write, revise, and manage information security policies, standards, and procedures.
• Collaborate with Information Security and Engineering to monitor risk and implement appropriate controls.

Skills

Security governance

Risk management

Policy development

Cross-functional collaboration

Job description

Roblox seeks a Security Governance, Risk and Compliance professional to lead risk-informed governance and policy programs within the Information Security organization.

You will partner with GRC, Infosec and Engineering colleagues to design a scalable governance function, identify improvements, and drive controls to mitigate risks while educating the wider Roblox community on security concepts.