InfoSec Risk Specialist
Posted 17 Sep 2026
Advertised as “Senior Staff InfoSec Risk Specialist (GRC)”
BranchFactor Summary
The original posting with the fluff stripped out
- Expected experience
- 5+ yrs
- Management level
- People management
- Employment
- Hybrid
No salary listed for this role.
CertificationsCISSP, CRISC, CISA, CISM, ISO 27001 Lead Auditor
Our Purpose
At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them becomes more critical than ever. When you join SentinelOne, your work helps protect global enterprises, critical infrastructure, and the technologies shaping tomorrow. If you are motivated by meaningful challenges and want your impact to be real, measurable, and global, you will find purpose here.
About Us
SentinelOne is a company at the intersection of AI and security, pioneering a new operating model for cybersecurity. Our AI-native platform unifies protection across endpoint, cloud, identity, data, and AI systems to deliver autonomous detection and response with clarity and speed. By combining real-time analytics, intelligent automation, and a unified data foundation, we reduce noise, simplify complexity, and empower security teams to focus on what truly matters.
Our teams are builders, problem-solvers, and innovators committed to shaping the future of security. If you are excited to solve hard problems alongside talented, mission-driven people, we invite you to help us build a safer future for humanity.
What Are We Looking For?
We’re looking for people who are relentlessly curious and committed to continuous learning. AI is reshaping every function across our business, and we enable every team member, regardless of role or level, to build fluency in AI tools and concepts. Those who thrive here actively seek out new solutions, experiment thoughtfully, and apply what they learn to drive better, faster, smarter outcomes.
As a Senior Staff, Information Security Risk, you will be tasked with owning SentinelOne's Security Risk Program outright, running the day-to-day cadence that identifies, scores, prioritizes, and drives down technical risk across the company. You will build the governance, automation, and review that turn a functioning risk register into a genuinely predictive risk management capability, and you will be trusted to run the program without supervision and to stand in for GRC leadership when the situation calls for it. Success in this role depends on credibility: knowing the technology, scoring risk fairly, and never bringing a problem to review without having already done the work.
What Will You Do?
Primary responsibilities include:
- Serve as the accountable owner for the Security Risk program, covering cadence, scoring methodology, reporting, escalation, and the standard operating procedure that governs it, and keep the program audit-ready with decisions documented, approvals logged, procedure current, and evidence retrievable.
- Contribute to the broader GRC functional strategy and multi-year roadmap, and advise leadership on how risk register data should inform security investment and resourcing decisions.