Principal Security GRC Analyst

Roblox as a Principal Security GRC Analyst, where you will play a key role in supporting the Security team's mission. As a member of the Security Governance, Risk, and Compliance (GRC) team, you will help establish governing policies and standards, assess and quantify risk, and oversee GRC capabilities across Roblox. You will lead one or more program areas in the GRC team, partner with colleagues in Information Security and Engineering, and contribute to the larger Information Security Organization. This is an exciting opportunity to shape how GRC operates at scale and contribute to a collaborative, high-performing team culture.

Responsibilities

• Lead one or more program areas in the Governance, Risk, and Compliance team, contributing to the larger Information Security Organization.
• Identify opportunities to improve efficiency and effectiveness in GRC processes, designing tools and automations to drive security and compliance by design.
• Write, revise, and manage information security policies, standards, and procedures, and assess information security risks.
• Deep understanding of risk assessment, compliance frameworks, creation of policy, and how to educate organizations on these concepts

Requirements

• Experience assessing adherence to policies and developing mitigation and remediation plans when gaps exist
• Experience in tech; however the need to actively code is not required for the role, just the ability to interface with Engineers and quickly establish credibility
• Understanding of security concepts and a broad range of security risks and controls
• 10+ years of relevant professional experience in Security Governance, Risk and Compliance

• Experience interfacing with software engineers to identify risks, map commitments to controls and develop relevant policies
• USD 288,020 - 335,580