Senior Security GRC Analyst

About the role

As a Senior Security Governance, Risk, and Compliance (GRC) Analyst at Roblox, you will be an integral part of the Information Security team, contributing to the enhancement of security governance practices. Your role will involve collaborating with various teams to implement a risk-centric governance framework tailored to Roblox's unique environment. This position offers an opportunity to influence the security landscape of a platform that connects millions of users globally, ensuring that security risks are managed effectively and efficiently.

Key facts

What you'll do

• Serve as a vital member of the Governance, Risk, and Compliance team within the broader Information Security department, contributing to the overall security strategy.
• Collaborate with colleagues in GRC, Information Security, and Engineering to design and implement a governance function that prioritizes risk management tailored to Roblox's needs.
• Identify and pursue opportunities for enhancing operational efficiency and effectiveness, creating tools and automation to embed security and compliance into the development process.
• Draft, update, and oversee the management of information security policies, standards, and procedures to ensure they remain relevant and effective.
• Conduct thorough assessments of information security risks, working closely with Information Security and Engineering teams to implement controls that mitigate identified risks.
• Validate the design and effectiveness of security controls and support ongoing monitoring and reporting of risks.
• Act as a subject matter expert in GRC, providing training and guidance to various teams within the Roblox organization to foster a culture of security awareness.
• Engage with the Roblox community, embodying the company's values while contributing to the security of the metaverse.

Requirements

• A minimum of 4 years of professional experience in Security Governance, Risk, and Compliance, demonstrating a strong understanding of the field.
• Proven experience in collaborating with software engineers to identify risks, align commitments with controls, and formulate relevant policies.
• Familiarity with assessing compliance with policies and developing plans for mitigation and remediation when gaps are identified.
• In-depth knowledge of risk assessment methodologies, compliance frameworks, and policy creation, along with the ability to educate others on these topics.
• A solid understanding of security concepts, encompassing a wide range of security risks and controls.
• Experience in a technology-driven environment is essential, although active coding is not a requirement; the ability to effectively communicate with engineers is crucial.

Nice to have

• Familiarity with Factor Analysis of Information Risk (FAIR) and other risk assessment methodologies.
• Experience in automating risk management processes and policy lifecycle management.
• Knowledge of supply chain risk management and AI risk considerations.
• Previous involvement in reporting security risks to executive leadership or board members.
• Certifications related to security governance or compliance (e.g., CISM, CISSP, ISO 27001).

Skills & tools

• Proficient in risk management tools and frameworks, as well as security compliance standards.
• Strong analytical and problem-solving skills, with the ability to assess complex security scenarios.
• Excellent communication skills, both written and verbal, to convey security concepts to non-technical stakeholders.
• Familiarity with project management methodologies to oversee GRC initiatives effectively.

Practical notes

• The starting base salary for this position ranges from $209,250 to $271,710 annually, depending on various job-related factors such as experience, location, and market demand.
• This role requires onsite presence in San Mateo, CA, three days a week, with optional attendance on Mondays and Fridays.
• Roblox is committed to fostering an inclusive workplace and provides equal employment opportunities regardless of race, color, religion, gender, age, or any other characteristic protected by law.
• Candidates should note that the company may not be able to sponsor certain U.S. visa categories for this role.

Joining Roblox means becoming part of a team that is dedicated to shaping the future of digital interactions and creating a safer online environment for its community. If you are passionate about security and compliance and want to make a meaningful impact, we encourage you to apply for this exciting opportunity.

About the company

An online space lets people build and play games. Founded long ago by two creators, it grew into a shared world opened to everyone in the mid 2000s. Now reaching millions each day, it hosts games made by its users. A large share of young American children under sixteen are monthly players here. High daily activity shows a lasting community where creativity and shared play remain central.