Senior GRC Analyst

About This Role

Working as a key contributor to the Security Governance, Risk, and Compliance (GRC) team, this role supports the Security team's mission by establishing governing policies and standards, assessing and quantifying risk, and overseeing GRC capabilities across Roblox. The position suits a GRC professional who can help shape how GRC operates at scale and contribute to a collaborative, high-performing team culture.

Responsibilities

• Be a key contributor to the Governance, Risk, and Compliance team within the larger Information Security Organization
• Partner with GRC, Infosec and Engineering colleagues and support the design and implementation of a “risk first” governance function that is “right-sized” for Roblox
• Identify opportunities to improve efficiency and effectiveness, designing tools and automations along the way to drive security and compliance by design
• Write, revise, and manage information security policies, standards, and procedures
• Identify and assess information security risks
• Work with Information Security and Engineering colleagues to implement appropriate controls to mitigate identified risks
• Validate control design and effectiveness
• Support ongoing risk monitoring and reporting
• Be a subject matter expert in the GRC space, providing education and guidance to others across the Roblox organization
• Be a part of the Roblox community, living its values and securing the metaverse

Important Details

• Team: This position is part of the Information Security team and will report to the GRC Manager

About the Company

Roblox is building tools and a platform that empower its global community of developers and creators to bring any experience they can imagine to life. Its vision is to reimagine the way people come together, from anywhere in the world, and on any device, with a mission to connect a billion people with optimism and civility.