Security Risk Analyst

Security and Risk Management San José, San José Canton


Splunk is the leader in big data and machine learning analytics, with a significant presence in the cybersecurity market. Join us as we pursue our disruptive vision to make machine data accessible, usable, and valuable to everyone. We are a company filled with people who are passionate about our product and seek to deliver the best experience for our customers. Learn more about Splunk careers and how you can become a part of our journey!

About the role:

Splunk Global Security (SGS) is growing our Security Trust Office and Risk Management program, and we are looking for a Security Risk Analyst. In this role you will support the Risk Management team by participating in performance of risk assessments and analysis of Splunk information systems, networks, and related processes. You will record, track and monitor risks and work directly with technical and managerial staff to communicate the results of assessments. The primary goal of the Security Risk Analyst is to inform and support our internal partners and empower them to make informed decisions in order to manage the risk in alignment with their business objectives and risk appetite.

Responsibilities include:

  • Participate in ongoing security assessments to ensure appropriate risks are adequately mitigated
  • Identifying, tracking and communicating progress, milestones, deliverables for the Risk Management team
  • Assist with development and maintenance of risk management procedures
  • Maintain strong cross company working relationships with individuals and business units

Qualifications:

  • Bachelor's degree or equivalent work experience required
  • Security or Risk-related certifications such as CISSP, CRISC, CISM, CISSP, CISA, etc.
  • 2+ years of professional experience with technical risk management, audit and/or compliance
  • Experience with Splunk products is a plus!
  • Excellent written and verbal communication skills
  • Experience working with collaboration and ticketing systems such as Jira, Confluence, ServiceNow
  • Experience with regulatory compliance, including risk management frameworks (e.g., NIST CSF/RMF, ISO2700x/31000) preferred

We value diversity at our company. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or any other applicable legally protected characteristics in the location in which the candidate is applying.

This is a test line.