Senior GRC Lead: Policy, Risk & Compliance

Game Companies; San Mateo (CA); On-site; USD 181,000 - 224,000; Full time

Job summary

Roblox is seeking a seasoned security governance, risk and compliance professional to join the GRC team at our San Mateo headquarters. You will drive risk-informed governance, collaborate with engineering and legal, and shape policy lifecycle management across the organization.

The role emphasizes risk assessment, control design, and ongoing risk monitoring, with the opportunity to influence security risk visibility and drive remediation at scale.

Qualifications

• 4+ years of experience in Security Governance, Risk and Compliance.
• Experience interfacing with software engineers to identify risks and map commitments to controls.
• Experience developing mitigation and remediation plans when gaps exist.
• Understanding of risk assessment, compliance frameworks, policy creation, and educating organizations.
• Understanding of security concepts and a broad range of risks and controls.
• Experience interfacing with engineers; coding not required.

Responsibilities

• Be a key contributor to the Governance, Risk, and Compliance team within the Information Security Organization.
• Partner with GRC, Infosec and Engineering colleagues to design a risk-first governance function for Roblox.
• Identify opportunities to improve efficiency by designing tools and automations for security and compliance by design.
• Write, revise, and manage information security policies, standards, and procedures.
• Identify and assess information security risks; implement controls and monitor risk.
• Serve as a subject matter expert in GRC and educate the organization on concepts.
• Be part of Roblox community and uphold company values in security practices.

Skills

Governance

Risk management

Policy development

Engineering interfacing

Job description

Roblox is seeking a seasoned security governance, risk and compliance professional to join the GRC team at our San Mateo headquarters. You will drive risk-informed governance, collaborate with engineering and legal, and shape policy lifecycle management across the organization.

The role emphasizes risk assessment, control design, and ongoing risk monitoring, with the opportunity to influence security risk visibility and drive remediation at scale.