🛠 Tech Stack

💼 About This Role

You'll execute risk assessments as the operational engine of MongoDB's internal risk program, transforming the Risk Register into a dynamic governance tool. You'll ensure leadership has a clear, quantified view of top enterprise risks. This role puts you in the trenches with engineering and product teams.

🎯 What You'll Do

• Execute risk assessments including scoping, scoring, and control evaluation.
• Manage risk intake from Jira Service Desk and Issue Intake Tracker.
• Draft Risk Assessment Memos from risk statement to recommendation.
• Maintain Risk Register with obsessive data integrity.

📋 Requirements

• 3–5 years of experience in Information Security, GRC, or Enterprise Risk Management.
• Experience performing risk assessments including scoring and documentation.
• Experience identifying and evaluating controls (design and effectiveness).
• Advanced proficiency in Excel/Google Sheets (pivot tables, VLOOKUP).

✨ Nice to Have

• Jira proficiency with workflows, dashboards, and JQL.
• Working knowledge of NIST CSF, SP 800-30/39/53, and ISO 27005.
• Experience with cloud-native architectures and SaaS security.

🎁 Benefits & Perks

• 🏖️ Flexible PTO
• 🏥 Health insurance
• 📈 Equity
• 💻 Remote work
• 📚 Professional development

📨 Hiring Process

Estimated timeline: 2-4 weeks · AI estimate

1. 1Recruiter Screen· 30 min
2. 2Technical Interview· 60 min
3. 3Hiring Manager· 45 min