Security Risk Specialist - Remote

Overview

Avalara is looking for a security risk specialist to join our team reporting to the Senior Manager, Governance Risk & Compliance. This role requires the ability to conduct risk analysis at a systemic level, working closely with engineers and architects as they design and build Avalara’s next-generation applications and services.

In Short

• Perform comprehensive risk assessments aligned with Avalara’s risk management framework.
• Analyze and identify risks across technical environments.
• Drive the identification, management, and mitigation of risks.
• Collaborate with cross-functional teams to integrate risk management practices.
• Ensure risk and compliance controls are executed consistently across teams.
• Coordinate the documentation and migration of control information.
• Maintain high standards of execution and quality control.
• Engage on multiple simultaneous projects with stakeholders.
• Assist with ad hoc risk and compliance assessments.

Requirements

• Bachelor’s degree in Information Technology, Computer Science, or equivalent experience.
• 3+ years of experience in IT Audit, IT Security, or IT Risk Management.
• Proven experience conducting systemic risk analysis.
• Familiarity with standards and frameworks such as ISO 27001, SOC 1, SOC 2, SOX, NIST.
• Strong understanding of application security principles.
• Deep knowledge of technical controls.
• Experience with business continuity and vendor risk management.
• Skilled in identifying business risks and evaluating trade-offs.
• Experience with risk management platforms is a plus.
• Strong organizational and communication skills.

Benefits

• Great compensation package.
• Paid time off and parental leave.
• Health benefits including private medical insurance.
• Support for diversity, equity, and inclusion.
• Employee-run resource groups with leadership support.