Security Governance & Compliance Specialist
Core
Perform technical security risk assessments, write risk reports, monitor mitigation plans, and assess residual risk to support informed risk decisions.
Role type
Security Risk Analyst (GRC)
Builds
Risk registers, risk reports, and mitigation tracking for Splunk's security platform
Domain
Cybersecurity / Risk Management / Cloud Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
technical security risk assessment, risk management frameworks (NIST CSF/RMF, ISO 27001/27002, ISO 42001), cloud architecture analysis (AWS, Azure, GCP), risk exception assessment, remediation plan tracking, audit support, AI-assisted assessment tools
Preferred skills
Splunk SPL proficiency, dashboard building, Python scripting, SQL, automation of risk metrics
Technologies
Jira, Confluence, Microsoft 365 Suite, AI tools (Claude, Codex), AWS, Azure, GCP
Responsibilities
Build and facilitate technical risk assessment exercises using AI tools; Prepare and present risk findings and trend reports; Monitor risks and track remediation plans against SLAs; Review risk exception requests and assess residual risk; Maintain data quality of the risk register; Support internal and external audits; Collaborate with engineering teams and business units; Lead difficult conversations to prioritize efforts
Seniority
Mid-level, hands-on IC
