SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: CAD 114,000 - 157,300 / annual
Okta is seeking a Staff Security Risk Analyst to lead the company's security risk management program. This is a strategic, hands-on role that combines deep technical expertise with program leadership.
You will own the full lifecycle of risk management at Okta: identifying, assessing, monitoring, and reporting on operational, security, and compliance risks. A key part of this role is driving technical automation—you'll engineer custom AI agents, workflows, and capabilities to scale risk data processing and optimize operations.
Key responsibilities include:
- Evaluating security control effectiveness, tracking deficiencies, and driving engineering remediation to closure
- Conducting root cause analysis on control gaps and post-incident reviews
- Partnering with risk owners to develop mitigation plans aligned with risk strategy
- Governing the formal risk acceptance and exception process
- Managing the risk register and issue lifecycle to provide dynamic visibility to leadership
- Applying industry best practices and regulatory frameworks (ISO, PCI, NIST CSF, COSO) to Okta's security posture
- Building cross-functional partnerships to foster a cohesive view of security, compliance, and operational risks
- Serving as a security and technology subject matter expert; advising on security control design and adoption
- Developing data analytics workflows and establishing KRIs and KPIs for team metrics and executive reporting
- Developing and refining standardized risk assessment methodologies, playbooks, and procedures
- Driving program maturity and risk-aware culture across business units
- Supporting ad hoc GRC initiatives and program enhancements
This role requires someone who can influence technical and business stakeholders, manage multiple priorities under tight timelines, and thrive in ambiguous, fast-changing environments.
Requirements:
- Bachelor's degree (BA/BS) in a relevant field
- 7+ years of hands-on security risk management and technical experience
- Hands-on experience building automated workflows, scripts (Python/APIs), and AI agentic solutions
- Industry security certification (CRISC, CISA, CISM, CISSP) or equivalent
- Experience across regulations and common industry frameworks including ISO, PCI, NIST CSF, COSO, and others
- Preferred: Third-Party Risk Management experience, including vendor security assessments and program operations
- Track record of effectively influencing technical and business stakeholders to drive risk remediation and process adoption
- Strong knowledge of agile tools and GRC solutions
- Excellent verbal, written, and interpersonal skills
- Ability to manage multiple priorities and deliver results under tight timelines
- Comfortable with ambiguity and adaptable to fast-changing environments
