jobapplier

Staff Security Risk Analyst

Okta

Skills

Required

  • agile tools
  • GRC

Preferred

  • ISO
  • PCI
  • CSF
  • COSO
  • CRISC
  • CISA
  • CISM
  • Python / APIs

Okta, a leading identity and access management company, as a Staff Security Risk Analyst.

Responsibilities

  • In this role, you will identify, assess, monitor, and report on operational, security, and compliance risks.
  • You will drive technical automation across the risk management lifecycle, evaluate security control effectiveness, and partner with risk owners to develop mitigation plans.
  • You will also manage the risk register, apply industry best practices for risk management, and build strong partnerships with cross-functional teams.
  • This position offers work-from-home opportunities, health and wellness benefits, financial benefits, and more.
  • Identificar, evaluar, monitorear e informar sobre los riesgos operativos, de seguridad y de cumplimiento.
  • Impulsar la automatización técnica en todo el ciclo de vida de la gestión de riesgos mediante la ingeniería de agentes de IA personalizados.
  • Evaluar la efectividad de los controles de seguridad, rastrear deficiencias y dirigir las actividades de remediación de ingeniería hasta su cierre.
  • Hands-on experience building automated workflows, scripts (Python/APIs), and AI agentic solutions

Requirements

  • Relevant BA/BS degree
  • 7+ years of hands-on security risk management and technical experience
  • Excellent verbal, written, and interpersonal skills

Strong knowledge of agile tools and GRC solutions

  • Ability to manage multiple priority initiatives and deliver results under tight timelines
  • Track record of effectively influencing technical and business stakeholders to drive risk remediation and process adoption
  • Comfortable with ambiguity and adaptable to fast changing environments

Preferred

  • Experience across regulations and common industry frameworks including but not limited to ISO, PCI, NIST CSF, COSO, and others
  • Industry certification in security (CRISC, CISA, CISM, CISSP) or equivalent certification
  • Preferred experience in Third-Party Risk Management, including hands-on execution of vendor security assessments and overall program operations