SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 180,570 - 224,310 / annual
Roblox is seeking a Senior GRC Analyst to join its Security Governance, Risk, and Compliance (GRC) team within the Information Security Organization. This role is central to Roblox's security mission, empowering the organization to make risk-informed decisions through governing policies, standards, repeatable risk assessment methods, and formal oversight processes.
The GRC team employs a balanced, "right-sized" approach to security governance, combining qualitative and quantitative risk management methodologies including Factor Analysis of Information Risk (FAIR) to assess and prioritize security risks. The team partners closely with Engineering, Legal, Finance, and leadership, providing regular reporting to the Board of Directors and the Audit & Compliance Committee to ensure security risk is visible, understood, and actioned appropriately.
The team is in an exciting growth phase, leveraging engineering to drive automation across risk management, policy lifecycle management, supply chain risk, AI risk, and controls programs. You will shape how GRC operates at scale and contribute to a collaborative, high-performing team culture.
Key Responsibilities:
- Serve as a key contributor to the GRC team within the Information Security Organization
- Partner with GRC, Infosec, and Engineering colleagues to design and implement a "risk first" governance function tailored to Roblox
- Identify opportunities to improve efficiency and effectiveness, designing tools and automations to drive security and compliance by design
- Write, revise, and manage information security policies, standards, and procedures
- Identify and assess information security risks; work with colleagues to implement appropriate controls; validate control design and effectiveness; support ongoing risk monitoring and reporting
- Serve as a subject matter expert in GRC, providing education and guidance across the organization
- Embody Roblox values and contribute to securing the metaverse
Requirements:
- 4+ years of relevant professional experience in Security Governance, Risk and Compliance
- Experience interfacing with software engineers to identify risks, map commitments to controls, and develop relevant policies
- Experience assessing adherence to policies and developing mitigation and remediation plans when gaps exist
- Deep understanding of risk assessment, compliance frameworks, policy creation, and how to educate organizations on these concepts
- Understanding of security concepts and a broad range of security risks and controls
- Experience in tech; active coding is not required, but ability to interface with engineers and quickly establish credibility is essential
