Senior Staff InfoSec Risk Specialist (GRC)

Serve as the accountable owner for the Security Risk program, covering cadence, scoring methodology, reporting, escalation, and the standard operating procedure that governs it. Own the intake pipeline for risks submitted from various sources, validate and baseline likelihood and impact scoring, and enforce triage service levels. Prepare and facilitate the recurring risk review with security leadership, drive mitigation plans to approval, and build repeatable, queryable automation and AI-assisted workflows.

At least 12 years of related experience with a Bachelor's degree; or 8 years with a Master's degree; or a PhD with 5 years of experience. Expert-level knowledge across multiple cybersecurity domains and deep, hands-on experience with cybersecurity risk management. Proven ability to communicate risk to executive audiences and experience running a risk register at scale.