Security Governance & Compliance Specialist
Core
Perform technical security risk assessments, write risk reports, and monitor mitigation plans to support informed risk decisions for Splunk's security team.
Role type
Security Risk Analyst (GRC)
Builds
Risk registers, risk reports, and mitigation tracking for product and business risks
Domain
Cybersecurity / Risk Management / Cloud Security
Required skills
Technical risk assessment, Risk management frameworks (NIST CSF/RMF, ISO 27001/27002, ISO 42001), Cloud architecture analysis (AWS, Azure, GCP), Risk reporting and communication, Risk exception assessment, Audit support, Jira/Confluence proficiency, AI tool usage
Preferred skills
Splunk SPL proficiency, Dashboard building, Python scripting, SQL, Data analysis
Technologies
Jira, Confluence, Microsoft 365, AWS, Azure, GCP, Claude, Codex, Python, SQL
Responsibilities
Build and facilitate technical risk assessment exercises using AI tools; Prepare and present risk findings and trend reports; Monitor risks and track remediation plans against SLAs; Review risk exception requests and assess residual risk; Maintain data quality of the risk register; Support internal and external audits; Collaborate with engineering teams and business units.
Seniority
Mid-level, hands-on IC
