Senior Governance, Risk and Compliance Specialist, CrowdStrike

• 5 to 8 years of working experience on different compliance frameworks, including but not limited to FedRAMP, NIST CSF, DoD Cloud Computing Security Requirements Guide (SRG), CMMC, ISO 27001 and other existing and emerging standards
• Prior strategic-level experience with FedRAMP or DoD authorization processes, systems, and methodologies
• Experience in program or project management, auditing, and/or control framework development and implementation
• Fundamental technical understanding of key technologies such as Windows, Linux, and Apple operating systems, networks, application development, databases, virtualization, and cloud infrastructure; and
• A BA or BS / MA or MS degree in Computer Science/Engineering, Math, Information Security, Information Systems, Information Assurance, Information Security Management, Intelligence Studies, Data Science, Cybersecurity, or equivalent experience

Desirable

• The Senior Compliance Specialist is charged with assisting in the identification, assessment, measurement, monitoring, and reporting of risk through CrowdStrike’s Governance, Risk, and Compliance (GRC) program
• This Senior Compliance Specialist’s primary function will involve strategically supporting product and service assessments in CrowdStrike’s United States federally authorized environments
• In addition, this role may be called on to support or lead corporate operations and IT compliance audits and assessments, vendor and partner risk assessments, or support customer assurance efforts to address questions from CrowdStrike customers as needs and interests require
• The Senior Compliance Specialist will also perform compliance advisory functions
• The ideal candidate will deeply understand current assessment frameworks, technologies, and processes while being continuously on the lookout for innovative and flexible ways to automate or improve processes that support a fast-paced, secure, and empowered environment
• This role covers audit and compliance, in the context of security within enterprise-wide operational areas such as:
• Leading and managing GRC Compliance projects and programs as a Senior Specialist on the team
• Assisting with internal and external audits and assessments including control assessment, monitoring, and reporting including collection and organization of evidence
• Conducting third party controls evaluations to determine risk
• Working with various internal teams or external parties to define and prioritize remediation efforts, tracking remediation activities, and inspecting/validating solutions that have been implemented
• Responding to CrowdStrike and customer questions regarding our information security practices and CrowdStrike technologies
• Advise various teams on the controls language, expectations and requirements
• Performing other duties within the scope of governance, risk, and compliance as needed

• Expected Close Date of Job Posting is: 05-14-2025