Senior Security Technologist: GRC & Automation Leader

Uber; Seattle (WA); Sur place; USD 180 000 - 240 000; Plein temps

Résumé du poste

Uber's Tech Risk and Assurance team is seeking a Senior Security Technologist, GRC, to drive risk intake, assessments, treatment decisions, and governance reporting. You will partner with engineering, security, audit, privacy, and compliance teams to translate gaps and requirements into scalable risk plans and automation.

You will design and deliver components of Uber's risk tooling, and automate risk workflows using Python, SQL, APIs, ServiceNow eGRC, and Jira.

Qualifications

• 5+ years in security, cyber risk, GRC, assurance, or related roles.
• Experience running end-to-end security risk programs.
• Strong knowledge of controls and risk treatment with engineering fluency.
• Automation experience with Python, SQL, and APIs.
• Familiarity with NIST CSF, NIST 800-53, ISO 27001, SOC 2, CIS.
• Excellent communication with directors and technical audiences.

Responsabilités

• Lead cyber risk intake and prioritization for the program area.
• Lead risk assessments for systems, apps, and new business areas.
• Run risk exception and acceptance workflow.
• Define risk treatment plans with engineering teams.
• Contribute to control design reviews and risk decisions.
• Own roadmap and delivery of risk/compliance tooling.
• Configure workflows on GRC platforms (ServiceNow eGRC, Jira).
• Build automation using Python/SQL and platform APIs.
• Load and reconcile data between GRC platforms.
• Design dashboards and risk reports for leaders.
• Prepare materials for risk governance forums.
• Improve workflows with runbooks/templates.
• Mentor analysts and onboard staff.

Connaissances

Cyber risk

GRC

Security operations

Automation

Python

SQL

APIs

Formation

CS/Engineering/InfoSec degree

Outils

ServiceNow eGRC

Jira

AuditBoard

OpenPages

Archer

SAP GRC

Description du poste

Uber's Tech Risk and Assurance team is seeking a Senior Security Technologist, GRC, to drive risk intake, assessments, treatment decisions, and governance reporting. You will partner with engineering, security, audit, privacy, and compliance teams to translate gaps and requirements into scalable risk plans and automation.

You will design and deliver components of Uber's risk tooling, and automate risk workflows using Python, SQL, APIs, ServiceNow eGRC, and Jira.