Principal, Risk Expert

. Lead enterprise security assessments, standards enforcement, and risk management programs .

Posted 10/7/2026full-timeBentonville • Virginia • United StatesLead💰 $110,000 - $264,000 per yearWebsite

Tools & technologies

CloudCyber Security

Key responsibilities & impact

Lead enterprise security assessments, standards enforcement, and risk management programs
Drive the Governance and Enforcement Automation Roadmap, advancing control automation, continuous compliance, and scalable security oversight
Partner with engineering, infrastructure, cloud, privacy, legal, and audit teams to evaluate security control effectiveness and drive risk remediation
Design and implement automated approaches for control testing, evidence collection, compliance monitoring, and policy enforcement
Support regulatory, audit, and assessment activities by translating security requirements into measurable and scalable controls
Develop executive-level risk reporting, metrics, and insights to inform cybersecurity strategy and investment decisions
Mentor team members and serve as a trusted advisor on cybersecurity governance, compliance, risk management, and security control automation
Advance Walmart's cybersecurity posture and compliance maturity across its global technology environment

What you’ll need

Bachelor's degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 5 years’ experience in cybersecurity risk or related area at a technology, retail, or data-driven company; OR 7 years’ experience in cybersecurity risk or related area at a technology, retail, or data-driven company
Deep expertise in cybersecurity, risk management, governance, compliance, or security engineering within large-scale enterprise environments
Strong knowledge of NIST, ISO 27001, CIS Controls, and regulatory requirements
Experience leading enterprise security assessments, audit readiness activities, and risk management
Ability to partner with engineering teams to design and implement scalable security controls and monitoring capabilities
Experience driving security control automation, continuous compliance, continuous monitoring, or policy enforcement
Strong analytical and problem-solving skills for assessing complex cybersecurity risks
Excellent communication and stakeholder management skills, including influencing senior leaders and cross-functional teams
Industry certifications such as CISSP, CISM, CISA, or equivalent preferred
Preferred: Security+, GISF, GSEC, CISA, CISSP, CCSP, or CISM certification
Preferred: Master's degree and 3 years’ experience leading information security or cybersecurity projects
Primary location: Bentonville, Arkansas, United States of America

Comp & perks