Security Engineer (Level 4, GRC)
Posted 2025-03-14
Remote, USA
Full-time
Immediate Start
Requirements
- You are enthusiastic about bridging the gap between GRC and Engineering ,
- You have demonstrated knowledge of large data handling and systems integration ,
- You have knowledge of various regulations and controls (SOX, PCI, CCPA, GDPR, etc) ,
- You are excited about developing and growing our GRC Engineering capabilities ,
- You can share impact through visualization and BI tools (Tableau, etc.) ,
- You have a passion for risk management, information security, metrics, efficient security operations, and effective control designs ,
- Visualizing GRC data for people to consume and use effectively is something you are good at doing ,
- Can develop scripts in various scripting languages (Python, Go, etc.) and peer review code / implementation / automation scripts ,
- Familiarity with RESTful API ,
- Have familiarity with AWS infrastructure ,
- Can connect the dots around the business value of control automation, testing, and effectiveness ,
- Operate within an environment of ambiguity and create clarity ,
- Participate in risk management, decision-making, and collaborative discussions ,
- Can communicate with clarity (written and verbal) ,
- Understand relevant data collection, data cleaning, and data analysis techniques ,
- Utilize your experiences to help drive changes within our programs ,
- Develop templates and instructional materials to help your fellow team members ,
- Monitor and identify opportunities to improve the effectiveness and quality of our program ,
- Manage and execute against key deliverables ,
- Attention to detail ,
- Inclusivity ,
- Broad knowledge of how to operationalize the management of risk as a part of regular workflow ,
- Autonomously drives work delivery (bias to action) ,
- Strong communication (technical, status/blockers, cross-functional) ,
- Cross-functional collaboration
What the job involves
- This role will impact key stakeholders such as Legal, HR, Security Engineering, and Finance to name a few ,
- In this role, you will help establish and execute a broad strategic vision for the risk program at Netflix ,
- You will not only work within the team but also cross-functionally with various teams across the organization ,
- Design and implement automation for key regulatory and compliance activities ,
- Challenge and expand our thinking surrounding engineering and GRC ,
- Improve our reporting, metrics and assurance within GRC and with our stakeholders ,
- Promote and demonstrate the relevance and importance of security controls and how they provide business value ,
- Expand the utilization of our GRC Platform within the business ,
- Integrate GRC systems with cross-functional stakeholders to ensure accuracy and consistency ,
- Contribute to improving our continuous improvement activities including integrating best practices for GRC systems