Security Technologist II - Technical Risk & Assurance

What you'll do

• Assess security controls and configurations across enterprise IT, cloud, SaaS, and third-party environments; document findings and recommend remediation.
• Build scripts, queries, and continuous monitoring to collect evidence and test controls at scale; support audits, certifications, and corrective-action tracking.
• Support system, application, and vendor risk assessments; maintain risk and issue records and review security exceptions.

What they ask for

• Bachelor's degree in a related field or equivalent practical experience.
• 3+ years of experience in IT audit, security assurance, risk assessment, security issue management, or a related technical role.
• Experience assessing control design and operating effectiveness across enterprise IT and cloud environments.
• Hands-on automation experience with Python or a similar language and SQL; experience with audit remediation tracking, risk registers, or corrective action management.

Nice to have

• Certifications such as CISA, CISSP, CRISC, Security+, or a cloud security certification.
• Experience with automated control tests, continuous control monitoring, AI applications, or GRC/workflow tools.

Pay

USD $153,000 per year - USD $170,000 per year (base salary; San Francisco, CA-based roles)

Tools

Python, SQL, AWS, GCP, OCI, ServiceNow eGRC, AuditBoard, Archer

AI focus

Explore and implement AI- and LLM-based solutions to classify security findings, summarize audit trails, review third-party security reports, and support control testing and evidence analysis.