Principal Security Engineer, GoDaddy

• 10+ years of experience in Information Security or related fields such as Information Technology, IT Audit, etc
• 6+ years of progressive experience managing programs related to information security and information security audits
• Experience building unified security controls frameworks
• Experience managing audits utilizing compliance frameworks such as PCI DSS, NIST CSF, NIST 800-53, ISO, SOC-2 etc
• Executive reporting on the status of security programs and campaigns
• Experience in Security Engineering concepts such as Threat modeling, architecture reviews, etc
• Experience with auditing cloud infrastructure such as AWS

Desirable

• We help solve large-scale and cross-company issues while ensuring that partnership with the development and operational communities remain front of mind
• GoDaddy is looking for a Principal Risk Engineer with security risk management experience, technical depth, strong leadership abilities, and experience building and performing information security audits and gap assessments
• You must be comfortable communicating with internal teams and external auditors, designing and leading security campaigns, and prioritizing the resolution of audit findings while applying a risk-based approach
• As a team, we will help identify any gaps in security control implementation, design solutions to manage security risks at scale, and provide the information needed to make risk-based decisions and planning
• Build and manage a Security Controls framework that encompasses the regulatory and industry compliance frameworks we comply with
• Perform targeted gap assessments to identify any deviations from the control framework
• Propose and manage enterprise-wide security campaigns for managing deviations to reduce risk
• Partner with other InfoSec teams and Engineering teams to define and prioritize security initiatives and investments using a risk-based approach
• Align risk management initiatives with applicable compliance regulations

• Please review these directions prior to submitting your application:
• To ensure we address you correctly throughout the process, please enter your Preferred Name if different than your Legal Name. We may ask you to confirm your Legal Name at a later stage when necessary
• If you do not have a legal first name, please input FNU where you are asked to input your first name
• If you do not have a legal last name/surname, please input LNU where you are asked to input your last name/surname
• Submit your resume and/or cover letter in PDF or Docx format
• For phone number, please enter your mobile number