Staff Risk Expert

Jobtailor; Bentonville (AR); On-site; USD 120,000 - 160,000; Full time

Job summary

Jobtailor is seeking an experienced governance and cybersecurity risk professional in the United States to develop and govern technology policies, translate requirements into actionable guidance, and strengthen risk management across Global Tech. You will collaborate with Legal, Audit, Security, and Technology teams to improve governance processes and policy adoption.

Ideal candidates bring a strong background in policy development, risk assessment, and stakeholder management, with

Qualifications

• Bachelor’s degree in computer science, information technology, engineering, information systems, cybersecurity, or related area with 4 years’ experience in cybersecurity risk or 6 years in cybersecurity risk in tech/retail/data-driven companies.
• Knowledge of technology controls, compliance standards, emerging risks, and policy development.
• Experience identifying policy risks, performing assessments, maintaining risk registers, tracking remediation, and improving governance processes.
• Ability to translate complex requirements into clear, practical guidance.
• Strong analytical, communication, stakeholder management, and problem-solving skills.
• Experience with AI, automation, workflow, or governance tools.
• Ability to work independently, influence decisions, and collaborate across legal, audit, business, security, and technology teams.
• Preferred: Security+, GISF, GSEC, CISA, CISSP, CCSP, or CISM
• Preferred: Master’s degree and 2 years leading information security projects
• Preferred: Knowledge of WCAG 2.2 AA standards and Walmart accessibility guidelines

Responsibilities

• Develop and review technology, AI, and information security policies and standards.
• Identify, assess, document, and monitor policy and governance risks.
• Develop and maintain risk registers, track remediation, and escalated issues.
• Strengthen policy ownership, lifecycle governance, exception workflows, and accountability.
• Translate legal, regulatory, audit, security, and business expectations into practical requirements.
• Use AI, automation, and workflow tools to improve quality, consistency, efficiency, and adoption.
• Partner across Legal, Regulatory, Audit, security, technology, and business teams.
• Support stakeholder communication, policy enablement, and continuous improvement of governance services and tools.
• Strengthen accountability, policy adoption, audit readiness, and risk-based decision-making across Global Tech

Skills

Policy Development

Cybersecurity Risk Management

Stakeholder Management

Analytical Skills

Communication Skills

Problem-Solving

AI & Automation Tools

Education

Bachelor's degree in CS/IT/Engineering

Master’s degree preferred

InfoSec/Cybersecurity certifications (CISA, CISSP, CCSP, CISM)

Tools

Governance Tools

Workflow Tools

Automation Tools

Job description

• Develop and review technology, AI, and information security policies and standards


• Identify, assess, document, and monitor policy and governance risks


• Develop and maintain risk registers, track remediation, and escalated issues


• Strengthen policy ownership, lifecycle governance, exception workflows, and accountability


• Translate legal, regulatory, audit, security, and business expectations into practical requirements


• Use AI, automation, and workflow tools to improve quality, consistency, efficiency, and adoption


• Partner across Legal, Regulatory, Audit, security, technology, and business teams


• Support stakeholder communication, policy enablement, and continuous improvement of governance services and tools


• Strengthen accountability, policy adoption, audit readiness, and risk-based decision-making across Global Tech

Requirements

• Bachelor's degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 4 years’ experience in cybersecurity risk or related area at a technology, retail, or data-driven company; OR 6 years’ experience in cybersecurity risk or related area at a technology, retail, or data-driven company


• Knowledge of technology controls, compliance standards, emerging risks, and policy development


• Experience identifying policy risks, performing assessments, maintaining risk registers, tracking remediation, and improving governance processes


• Ability to translate complex requirements into clear, practical, and enforceable guidance


• Strong analytical, communication, stakeholder management, and problem-solving skills


• Experience with AI, automation, workflow, or governance tools


• Ability to work independently, influence decisions, and collaborate across legal, audit, business, security, and technology teams


• Preferred: Certification in Security+, GISF, GSEC, CISA, CISSP, CCSP, or CISM


• Preferred: Master’s degree in Computer Science, Information Technology, Engineering, Information Systems, Cybersecurity, or related area and 2 years’ experience leading information security or cybersecurity projects


• Preferred: Knowledge of WCAG 2.2 AA standards, assistive technologies, digital accessibility best practices, and Walmart accessibility standards and guidelines

Core Competencies

Demonstrates expertise in developing and reviewing technology, AI, and information security policies while effectively managing cybersecurity risks and compliance standards. Proficient in stakeholder communication and collaboration across legal, audit, business, security, and technology teams to enhance governance processes.

Highest-signal resume keywords

• Cybersecurity Risk Management


• Policy Development


• Risk Assessment


• AI And Automation Tools


• Stakeholder Communication

Hard Skills

• Technology Controls


• Compliance Standards


• Risk Registers


• Governance Processes


• Policy Adoption

Soft Skills

• Analytical Skills


• Communication Skills


• Problem-Solving Skills


• Stakeholder Management

Certifications & Qualifications

• Security+


• GISF


• GSEC


• CISA


• CISSP


• CCSP


• CISM

Industry Keywords

• Information Security


• Cybersecurity


• Digital Accessibility


• WCAG 2.2 AA Standards

Tools & Technologies

• Governance Tools


• Workflow Tools


• Automation Tools