Senior Information Security Risk Specialist (GRC)

Our Purpose

At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them becomes more critical than ever. When you join SentinelOne, your work helps protect global enterprises, critical infrastructure, and the technologies shaping tomorrow. If you are motivated by meaningful challenges and want your impact to be real, measurable, and global, you will find purpose here.

About Us

SentinelOne is a company at the intersection of AI and security, pioneering a new operating model for cybersecurity. Our AI-native platform unifies protection across endpoint, cloud, identity, data, and AI systems to deliver autonomous detection and response with clarity and speed. By combining real-time analytics, intelligent automation, and a unified data foundation, we reduce noise, simplify complexity, and empower security teams to focus on what truly matters.

Our teams are builders, problem-solvers, and innovators committed to shaping the future of security. If you are excited to solve hard problems alongside talented, mission-driven people, we invite you to help us build a safer future for humanity.

What Are We Looking For?

We’re looking for people who are relentlessly curious and committed to continuous learning. AI is reshaping every function across our business, and we enable every team member, regardless of role or level, to build fluency in AI tools and concepts. Those who thrive here actively seek out new solutions, experiment thoughtfully, and apply what they learn to drive better, faster, smarter outcomes.

As a Senior Information Security Risk Specialist, you will be tasked with understanding and supporting the design of SentinelOne's organizational, procedural, and technological security controls within the context of the security frameworks applicable to SentinelOne, bringing a security-focused mindset that balances risk, business drivers, and timelines. You will identify and test appropriate controls to ensure they are designed, implemented, and operating effectively to mitigate risk, and help implement, automate, document, and maintain those controls while supporting and responding to inquiries from internal and external stakeholders. This role calls for someone who is self-directed and able to work independently and collaboratively.

What Will You Do?

Primary responsibilities include:

• Support the planning and performance of IT risk-based security audits and projects, risk assessments, execution of fieldwork, and communication to stakeholders.
• Help evaluate relevant global standards, compliance frameworks, and regulations to analyze existing controls, identify areas for improvement, and design control growth.
• Collaborate with process and control owners through the audit lifecycle for process documentation updates, testing coordination, remediation of identified deficiencies, and advising on internal control enhancements or process changes, as appropriate.
• Proactively manage audit findings, tracking and documentation of status updates obtained via action owners, and timely execution of remediation activities.
• Participate in internal security and compliance programs and track recurring controls, such as SSAE 18 SOC 2 and ISO 27001/27002, and help support internal and external audits and evidence collection via a GRC tool.
• Provide control consultative support to the business to assist in redesign efforts that improve the control environment, with the objective of mitigating risk and improving compliance and operational performance.
• Document new and update existing policies, procedures, standards, and resources.
• Participate in the security awareness program, training personnel on data security and privacy-related processes and responsibilities.
• Help support customer security reviews, RFPs, and external security and privacy inquiries.
• Participate in defining, collecting, and tracking various security metrics.

What Skills and Knowledge Will You Bring?