Senior GRC Strategist: Policy, Risk & Automation

Showcify, Inc.; San Mateo (CA); On-site; USD 181,000 - 224,000; Full time

Benefits offered by this job

Equity compensation

Benefits for full-time staff

Job summary

Roblox is seeking a Security Governance, Risk, and Compliance professional in San Mateo, CA. You will lead the governance framework, partner with GRC, Infosec, and Engineering to implement risk-first policies and controls, and drive risk-informed decision-making across the organization.

The role emphasizes policy creation, risk assessment, and educating teams on compliance concepts, with equity and benefits for full-time staff.

Qualifications

• 4+ years of professional experience in Security Governance, Risk and Compliance.
• Experience interfacing with software engineers to map commitments to controls and develop policies.
• Experience assessing adherence to policies and developing remediation plans.
• Deep understanding of risk assessment, compliance frameworks, policy creation, and education of organizations on these concepts.
• Understanding of security concepts and a broad range of risks and controls.

Responsibilities

• Be a key contributor to the Governance, Risk, and Compliance team within Information Security.
• Partner with GRC, Infosec and Engineering teams to design a risk-first governance function at Roblox.
• Identify opportunities to improve efficiency and drive security by design through tools and automation.
• Write, revise, and manage information security policies, standards, and procedures.
• Identify and assess information security risks and help implement appropriate controls to mitigate them.

Skills

Governance & risk

Policy development

Interfacing with engineers

Risk assessment frameworks

Security concepts & controls

Job description

Roblox is seeking a Security Governance, Risk, and Compliance professional in San Mateo, CA. You will lead the governance framework, partner with GRC, Infosec, and Engineering to implement risk-first policies and controls, and drive risk-informed decision-making across the organization.

The role emphasizes policy creation, risk assessment, and educating teams on compliance concepts, with equity and benefits for full-time staff.