(USA) Senior Risk Expert

About the role

The Senior Risk Expert designs and operates scalable, engineering-driven risk management by translating security policy and control intent into automated, testable controls. This role leads continuous risk and compliance assessments across cloud, hybrid, and SaaS environments, balancing policy-as-code, AI-assisted evidence automation, and expert judgment. Leveraging strong GRC and audit foundations, the expert partners with engineers to embed compliance into platforms, pipelines, and architectures, evaluates emerging threats, and drives measurable risk reduction while meeting regulatory and assurance expectations across the enterprise.

What you'll do

• Engineer policy-as-code and automated controls aligned to risk, compliance, and audit requirements
• Perform continuous cyber risk assessments across cloud, SaaS, hybrid, and network environments
• Build automation using Python, APIs, and AI tooling for control testing, evidence, and remediation
• Analyze threats, penetration-testing results, and telemetry to harden architectures and defenses
• Lead audit, assurance, and remediation efforts with high-quality, defensible evidence
• Partner with engineering and business teams to embed risk controls into delivery pipelines

What you'll bring

• Deep experience in cyber risk, GRC, and compliance within large engineering organizations
• Hands-on automation skills (Python, APIs, scripting) for continuous control evaluation
• Strong background in audit or assurance (Big 4 or equivalent) and evidence quality
• Expertise across cloud platforms, containers, CI/CD, APIs, and enterprise data systems
• Ability to translate control intent into scalable technical implementations
• Comfort applying AI/LLM tooling to risk, evidence, and findings automation
• Certifications such as CISA, CISSP, or similar are a plus

At Walmart

• Competitive pay as well as performance-based bonus awards and other great benefits
• Health benefits including medical, vision, and dental coverage
• Financial benefits like 401(k), stock purchase, and company-paid life insurance
• Paid time off benefits including PTO (including sick leave), parental leave, family care leave, bereavement, jury duty, and voting
• Other benefits such as short-term and long-term disability, company discounts, military leave pay, adoption and surrogacy expense reimbursement, and more

Minimum Qualifications

• Option 1: Bachelor's degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 3 years' experience in cybersecurity risk or related area at a technology, retail, or data-driven company.
• Option 2: 5 years' experience in cybersecurity risk or related area at a technology, retail, or data-driven company.

Preferred Qualifications

• Certification in Security+, GISF, GSEC, CISA, CISSP, or CCSP
• Master’s degree in computer science, information technology, engineering, information systems, cybersecurity or related area and 1 year’s experience leading information security or cybersecurity projects
• We value candidates with a background in creating inclusive digital experiences, demonstrating knowledge in implementing Web Content Accessibility Guidelines (WCAG) 2.2 AA standards, assistive technologies, and integrating digital accessibility seamlessly