Technical Risk Manager - Sr. Security Engineer I

📋 Description

• Own and mature Smartsheet's Security Risk Management program: risk identification, analysis
• Maintain the enterprise risk register—ratings, ownership, mitigation status, and residual risk—and
• Lead risk analysis and reviews for new initiatives, architecture changes, and significant findings
• Develop and drive risk mitigation strategy: work with risk owners across engineering, IT, and
• Oversee Smartsheet's Third-Party Risk Management (TPRM) program: vendor risk tiering, security
• Build and present risk reporting and KPIs/KRIs to security and business leadership, giving them a

🎯 Requirements

• 4+ years of experience in security risk management, enterprise risk, or GRC, including direct
• Working familiarity with risk quantification approaches (FAIR, OCTAVE, or similar) and the judgment
• Enough technical fluency to understand cloud architecture, application security concepts, and
• Experience running or closely supporting a Third-Party Risk Management program: vendor tiering
• Excellent written and verbal communication skills; you can brief a risk finding to an engineering
• Strong organizational skills and comfort managing many concurrent risk items and vendor

🎁 Benefits

• Employer subsidized medical/vision and dental coverage for full-time employees
• 401k Match to help you save for your future (50% of your contribution up to the first 6% of your
• Monthly stipend to support your work and productivity
• Flexible Time Away Program, plus Sick Time Off
• US employees are automatically covered under Smartsheet-sponsored life insurance, short-term, and
• US employees receive 12 paid holidays per year