Senior Information Security Risk Specialist – GRC

SentinelOne

. Support planning and performance of IT risk-based security audits, projects, risk assessments, fieldwork, and stakeholder communications .

Posted 11/3/2026full-timeRemote • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT risk management, security audits, and compliance frameworks, with a strong focus on SSAE 18 SOC 2 and ISO 27001/27002 standards. Capable of collaborating with diverse teams to enhance security controls and improve operational performance.

Highest-signal resume keywords

Information Security ExperienceRisk Management ExpertiseProject Management SkillsSecurity Compliance FrameworksInternal Audit Proficiency

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security ControlsRisk AssessmentsAudit ManagementControl DesignCompliance DocumentationSecurity Metrics TrackingData Security TrainingBC/DRPChange ManagementConfiguration Management

Soft Skills

Excellent Communication SkillsInterpersonal SkillsCollaboration with Technical TeamsEffective Recommendations

Tools & Technologies

GRC Tool

Certifications & Qualifications

ISO 27001 LA/LICISACISMCISSPCRISC

Industry Keywords

Compliance FrameworksCOSOSOX ITGCGDPRPCINIST

About the role

Key responsibilities & impact

Support planning and performance of IT risk-based security audits, projects, risk assessments, fieldwork, and stakeholder communications
Evaluate global standards, compliance frameworks, and regulations; analyze controls and identify improvement opportunities
Collaborate with process and control owners on documentation updates, testing coordination, remediation, and control enhancements
Manage audit findings, status tracking, documentation, and remediation activities
Participate in security and compliance programs, including SSAE 18 SOC 2 and ISO 27001/27002 recurring controls
Support internal and external audits and evidence collection through a GRC tool
Provide control consulting for business redesign efforts to mitigate risk and improve compliance and operational performance
Document and update policies, procedures, standards, and resources
Participate in security awareness programs and train personnel on data security and privacy responsibilities
Support customer security reviews, RFPs, and external security and privacy inquiries
Define, collect, and track security metrics

Requirements

What you’ll need

5 or more years of experience working in information security, risk, or compliance
Experience working with security controls across access management, encryption, risk management, network security, configuration management, patch management, change management, awareness and training, and BC/DRP
Ability to perform internal audits with minimal direct supervision and experience with SSAE 16/18 SOC 2, ISO 27001/2, and NIST audit projects
Strong risk management experience, including assessments and audits, control design, enterprise control frameworks, and risk prioritization
Strong project management skills and ability to manage multiple projects to completion within agreed timelines
Excellent written and verbal communication and interpersonal skills
Experience working with technical and non-technical teams
Ability and desire to understand requirements and provide effective recommendations
Advanced degree in computer science, information technology, information security, or a related field is preferred
Relevant certifications such as ISO 27001 LA/LI, CISA, CISM, CISSP, or CRISC are preferred
Strong understanding of security compliance frameworks, controls, and best practices including COSO, SOC 2, SOX ITGC, ISO 27001/27002, GDPR, PCI, and NIST is preferred
Ability to assess and pragmatically define scope and relevant controls
Desire to continuously develop and deepen technical skills

Benefits

Comp & perks

Restricted Stock Units (RSUs)
Employee Stock Purchase Plan (ESPP)
Competitive leave benefits
Gender-neutral parental leave
Private medical, dental, and vision insurance
Global home office allowance
Internet or mobile phone allowance
Hybrid work model with flexible hours
Wellness programs
In-office lunch program