Senior InfoSec Risk Specialist — Hybrid + Equity

SentinelOne, Inc.; United States; Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

RSUs

ESPP

Private medical insurance

Dental insurance

Vision insurance

Hybrid work model

Home office allowance

Internet stipend

In-office lunch program

Wellness programs

Job summary

SentinelOne, Inc. is seeking a Senior Information Security Risk Specialist to lead the design, testing, and maintenance of organizational, procedural, and technical security controls in line with SOC 2, ISO 27001/27002, and other frameworks.

The role requires strong risk management and audit experience, ability to work independently and with cross-functional teams, and a proactive mindset to identify and mitigate security risks across the enterprise.

Qualifications

• 5+ years in information security, risk, or compliance.
• Experience with SSAE 16/18 SOC 2, ISO 27001/27002, and NIST.
• Ability to perform internal audits with minimal supervision.
• Strong risk assessment and control design experience.
• Excellent written and verbal communication.

Responsibilities

• Support IT risk-based security audits and projects.
• Evaluate global standards and regulations for controls.
• Collaborate with control owners across the audit lifecycle.
• Manage audit findings and remediation actions.
• Support SSAE 18 SOC 2, ISO 27001/27002 programs and audits.
• Provide control consultative support to redesign controls.
• Document and update policies, procedures, and resources.
• Participate in security awareness training.
• Support customer security reviews and RFPs.
• Track security metrics.

Skills

Information security

Risk management

Audit experience

Project management

Communication skills

Education

Advanced degree in CS/IT or related field

Certifications: ISO 27001 LA/LI, CISA, CISM, CISSP, CRISC

Tools

SSAE 18 SOC 2

ISO 27001/27002

NIST

Job description

SentinelOne, Inc. is seeking a Senior Information Security Risk Specialist to lead the design, testing, and maintenance of organizational, procedural, and technical security controls in line with SOC 2, ISO 27001/27002, and other frameworks.

The role requires strong risk management and audit experience, ability to work independently and with cross-functional teams, and a proactive mindset to identify and mitigate security risks across the enterprise.