Note: The job is a remote job and is open to candidates in USA. SailPoint is hiring a Cybersecurity Control Analyst to drive cybersecurity control assessments and its compliance program against applicable standards, requirements, and policies. The role works with internal and external stakeholders to improve the GRC program and advise on control testing.
Responsibilities
- As a Cybersecurity Control Analyst, you will play a key role driving Cybersecurity’s control assessments and compliance program with applicable standards, requirements, and policies
- This is a challenging and impactful role where you will have the opportunity to work with both internal and external stakeholders while driving the continuous improvements for our GRC program
- Complete onboarding, familiarize yourself with SailPoint's Control Testing processes, policies, and security tooling, and establish working relationships with the CISO team and key stakeholders
- Shadow and begin creating plans for the upcoming round of control testing. Start collaborating on GRC tool evidence gathering integrations
- Independently lead prep work for the upcoming round of control testing following current processes. Consult on control advisory requests with technical and business partners
- Drive enhancements to the control testing process, collaborate on continuous strategic planning for the cybersecurity organization, and lead control advisory sessions with technical and business partners
- Serve as a subject matter expert and thought leader in cyber control advisory, mature the continuous testing process, and collaborate to align SailPoint’s risk posture, control effectiveness and emerging threats to industry frameworks
Skills
- Bachelors degree in related field, or equivalent professional experience
- 3+ years of related professional experience in Security, Risk, and Compliance
- Strong understanding of industry security frameworks and standards such as NIST, ISO, FAIR, OWASP, and CIS
- Working knowledge of compliance frameworks including ISO 27001, SOC 2, SOX, GDPR, and FedRAMP
- Proven experience conducting control tests, developing control recommendations, and producing executive-level reporting
- Strong analytical, problem-solving, and methodical follow-up skills
- Excellent verbal and written communication skills with the ability to distill complex technical concepts into business-friendly language and influence without authority
- Demonstrated ability to manage multiple projects concurrently, prioritize effectively in a fast-paced environment, and collaborate seamlessly across distributed teams
- Relevant industry certifications such as CISSP, CISA, CISM, CRISC, or equivalent
- Familiarity with enterprise governance, risk, and compliance (GRC) tools and platforms
Benefits
- Flexible Time Off: Trust-based vacation policies alongside paid company holidays to help you recharge.
- Comprehensive Healthcare: Premium medical, dental, and vision insurance options
- Career Growth Opportunities
- Flexible, remote-first work culture
- A highly collaborative and inclusive environment
- Freedom to drive real impact in security
- Eligible for the SailPoint Corporate Bonus Plan or a role-specific commission
- Potential eligibility for equity participation
- Short-term and long-term disability coverage
- Life insurance and Accidental Death & Dismemberment (AD&D)
- Supplemental life insurance for employees, spouses, and children
- Flexible spending accounts for health care and dependent care; limited purpose flexible spending account
- 401(k) Savings and Investment Plan with company matching
- 8 paid holidays annually
- Sick leave
- Paid parental leave
- Employee Assistance Program (EAP) and Care Counselors
- Voluntary benefits: Legal Assistance, Critical Illness, Accident, Hospital Indemnity and Pet Insurance options
- Health Savings Account (HSA) with employer contribution
Company Overview
Company H1B Sponsorship