below marketmost similar roles pay hereabove market
This listing doesn't post a salary. Most similar roles pay
$154,450–$216,000.
Based on 240 similar postings.
Employer
About Uber
Uber Technologies, Inc. is the world’s largest, San Francisco-based mobile technology platform facilitating on-demand ride-hailing, food delivery (Uber Eats), and freight transportation across approximately 70 countries.
JOB TITLE: Sr Security Technologist - Governance, Risk, and Compliance
The Sr Security Technologist - Governance, Risk, and Compliance joins the Technical Security team within the Risk Strategy subteam. In this role, you will manage cyber risk intake, triage, and prioritization while leading risk assessments for systems and new business areas. You will partner with engineering, audit, and privacy teams to transform control gaps and regulatory requirements into actionable treatment plans. Day-to-day responsibilities include building automation on GRC platforms, querying data, and designing risk reporting dashboards. You will utilize Python, SQL, and platform APIs to automate workflows and remove manual steps. Key technical competencies include experience with ServiceNow eGRC, Jira, and frameworks like NIST CSF, ISO 27001, and SOC 2 to solve complex cybersecurity risk management and compliance problems.
Lead security incident response teams as the primary incident commander for high-criticality cybersecurity events.
Design and implement automated assurance controls to replace manual testing across cloud and network environments.
Build and deploy automated systems to detect and report risks across the organization.
Integrate automated control validation into CI/CD pipelines and software development lifecycles.
Perform detailed root cause analysis and forensic investigations to prevent the recurrence of security issues.
Develop and maintain risk reporting, dashboards, and Key Risk Indicators (KRIs) for leadership.
Configure and improve workflows on GRC platforms like ServiceNow eGRC and Jira using Python and SQL.
Mentor junior analysts on advanced investigative methodologies, risk analysis, and technical automation.
What we're looking for
Bachelor's degree in Computer Science, Engineering, Information Security, or a related field, or equivalent practical experience.
Minimum 5 years of experience in blue team functions (SOC, IR, detection) or GRC automation at a global company.
Proficiency in backend programming (Python, Java, or Go) to build custom security tooling and automate manual testing environments.
Experience running security risk programs including risk assessments, treatment decisions, and cross-functional follow-through.
Strong understanding of security controls and risk treatment with technical fluency in identity, cloud infrastructure, logging, and vulnerability management.
Knowledge of control frameworks and standards such as NIST CSF, NIST 800-53, ISO 27001, SOC 2, and CIS.
Experience leading high-criticality security incident response, including technical investigation, root cause analysis, and executive-level communication.
Security or audit certifications such as CISA, CISSP, CISM, CRISC, or ISO 27001 Lead Auditor (preferred).
Go
Java
Python
C++
Spark
Flink
Kafka
AWS
GCP
Azure
Open Policy Agent
Rego
Distributed Systems
Data Engineering
SOC 2
ISO 27001
NIST CSF
PCI-DSS
Data Modeling