Principal Security Engineer - InfoSec GRC

The Governance, Risk, and Compliance team helps GoDaddy identify, assess, and address security risk across the business. This role is a strong fit for someone who wants to build a durable audit and controls program from the ground up, influence security strategy, and work directly with senior leaders on risk-based decision-making.

Requirements

• 10+ years of professional experience in information security, information technology, information technology audit, or related fields
• 6+ years of professional experience managing information security programs, audits, or formal assessment activities
• Experience building unified security controls frameworks across multiple compliance and regulatory standards
• Experience managing or performing audits using frameworks such as PCI DSS, NIST Cybersecurity Framework, NIST SP 800-53, ISO 27001, and SOC 2
• Experience assessing cloud environments such as AWS and applying core security engineering concepts such as threat modeling, architecture reviews, access management, and encryption
• Experience presenting audit results, risk posture, and remediation priorities to executive stakeholders

Benefits

• Competitive pay
• Generous time off
• Parental and wellness leave
• Healthcare
• Retirement savings program