Senior GRC Analyst: Risk, Policy & Automation

Roblox; San Mateo (CA); Presencial; USD 181 000 - 224 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Equity compensation

Benefits

Resumo da oferta

Roblox is seeking a Security Governance, Risk and Compliance professional to join the Information Security team at our San Mateo headquarters. You will shape a risk-first governance function, write and maintain policies, and partner with engineering to implement controls that mitigate identified risks.

The role requires deep knowledge of risk assessment and compliance frameworks, with the ability to educate teams across Roblox and drive security by design in a fast-moving environment.

Qualificações

• 4+ years of relevant professional experience in Security Governance, Risk and Compliance.
• Experience interfacing with software engineers to identify risks, map commitments to controls and develop relevant policies.
• Experience assessing adherence to policies and developing mitigation and remediation plans when gaps exist.
• Deep understanding of risk assessment, compliance frameworks, creation of policy, and how to educate organizations on these concepts.
• Understanding of security concepts and a broad range of security risks and controls.
• Experience in tech; however the need to actively code is not required for the role, just the ability to interface with Engineers and quickly establish credibility.

Responsabilidades

• You will be a key contributor to the Governance, Risk, and Compliance team within the larger Information Security Organization.
• You will partner with your GRC, Infosec and Engineering colleagues and support the design and implementation of a “risk first” governance function that is “right-sized” for Roblox.
• You will identify opportunities to improve efficiency and effectiveness, designing tools and automations along the way to drive security and compliance by design.
• You will write, revise, and manage our information security policies, standards, and procedures.
• You will identify and assess information security risks. You will work with Information Security and Engineering colleagues to implement appropriate controls to mitigate identified risks. You will validate control design and effectiveness. You will support ongoing risk monitoring and reporting.
• You will be a subject matter expert in the GRC space, providing education and guidance to others across the Roblox organization.
• You will be a part of the Roblox community, living our values and securing the metaverse.

Conhecimentos

Security governance

Risk assessment

Policy development

Interfacing with engineers

Compliance frameworks

Descrição da oferta de emprego

Roblox is seeking a Security Governance, Risk and Compliance professional to join the Information Security team at our San Mateo headquarters. You will shape a risk-first governance function, write and maintain policies, and partner with engineering to implement controls that mitigate identified risks.

The role requires deep knowledge of risk assessment and compliance frameworks, with the ability to educate teams across Roblox and drive security by design in a fast-moving environment.