Principal Security Engineer

Summary

Join GoDaddy's team as a Principal Risk Engineer and become an Information Security Leader. You will build and manage a security controls framework, perform gap assessments, and lead security campaigns. This remote position requires 10+ years of experience in information security, including managing programs and audits. You'll partner with internal and external teams, prioritize risk resolution, and report to executives. GoDaddy offers a competitive benefits package, including paid time off, retirement savings, bonuses, and health benefits. The position is not eligible in certain states and is not currently considering candidates in California, Seattle, or NYC.

Requirements

• 10+ years of experience in Information Security or related fields such as Information Technology, IT Audit, etc
• 6+ years of progressive experience managing programs related to information security and information security audits
• Experience building unified security controls frameworks
• Experience managing audits utilizing compliance frameworks such as PCI DSS, NIST CSF, NIST 800-53, ISO, SOC-2 etc
• Executive reporting on the status of security programs and campaigns
• Experience in Security Engineering concepts such as Threat modeling, architecture reviews, etc
• Experience with auditing cloud infrastructure such as AWS

Responsibilities

• Build and manage a Security Controls framework that encompasses the regulatory and industry compliance frameworks we comply with
• Perform targeted gap assessments to identify any deviations from the control framework
• Propose and manage enterprise-wide security campaigns for managing deviations to reduce risk
• Partner with other InfoSec teams and Engineering teams to define and prioritize security initiatives and investments using a risk-based approach
• Align risk management initiatives with applicable compliance regulations

Preferred Qualifications

• Bachelor’s degree in computer science or related field
• Certifications such as PCI ISA, CISA, CRISC, ISO Lead Assessor, CISSP, etc
• Experience working at a Big 4 Audit firm(s)

Benefits

• Paid time off
• Retirement savings (e.g., 401k, pension schemes)
• Bonus/incentive eligibility
• Equity grants
• Participation in our employee stock purchase plan
• Competitive health benefits
• Parental leave