Security GRC Strategist — Policy & Risk Lead

Roblox; San Mateo (CA); On-site; USD 288,000 - 336,000; Full time

Benefits offered by this job

Equity compensation

Benefits package

Job summary

Roblox is seeking a senior member of the Security Governance, Risk, and Compliance (GRC) team to lead program areas and partner across InfoSec, Engineering, and Legal. The role focuses on risk-informed decision making, policy lifecycle management, and scalable governance across Roblox.

You will shape how GRC operates at scale, drive automation for risk management, and contribute to a collaborative, high-performing security organization.

Qualifications

• 10+ years of professional experience in Security Governance, Risk and Compliance.
• Experience interfacing with software engineers to identify risks and map commitments to controls.
• Experience assessing adherence to policies and developing mitigation/remediation plans.
• Deep understanding of risk assessment, compliance frameworks, policy creation, and educating organizations on these concepts.
• Understanding of security concepts and a broad range of security risks and controls.

Responsibilities

• Lead one or more program areas in Governance, Risk, and Compliance.
• Be a key contributor to the larger Information Security Organization.
• Partner with GRC, Infosec and Engineering colleagues to design a risk-first governance function for Roblox.
• Identify opportunities to improve efficiency, designing tools and automation to drive security and compliance by design.
• Write, revise, and manage information security policies, standards, and procedures.
• Identify and assess information security risks and implement controls to mitigate them.

Skills

Security governance

Risk management

Policy development

Policy education

Security concepts

Interface with engineers

Tools

None

Job description

Roblox is seeking a senior member of the Security Governance, Risk, and Compliance (GRC) team to lead program areas and partner across InfoSec, Engineering, and Legal. The role focuses on risk-informed decision making, policy lifecycle management, and scalable governance across Roblox.

You will shape how GRC operates at scale, drive automation for risk management, and contribute to a collaborative, high-performing security organization.