Security GRC Analyst

Working at Atlassian
Atlassians can choose where they work - whether in an office, from home, or a combination of the two. That way, Atlassians have more control over supporting their family, personal goals, and other priorities. We can hire people in any country where we have a legal entity. Interviews and onboarding are conducted virtually, a part of being a distributed-first company.
The Security GRC Engineer at Atlassian will be instrumental in implementing and managing the company's security risk and governance operations. This role requires a sound understanding of Cybersecurity and risk management, as well as the ability to collaborate with various stakeholders within Atlassian including but not limited to Security, Engineering, Risk and Compliance teams. Additionally, the role involves providing technical guidance and promoting automation to enhance security processes, aligning with a focus on equipping teams with the latest tools and methodologies.
The Security GRC Engineer plays a key role in maintaining Atlassian's strong security posture, managing security risks, and supporting leadership in making risk-informed decisions. The Engineer should have strong engineering skills, understand the technology deeply, and collaborate with different teams to ensure that security is integrated into all aspects of the organization.
Responsibilities

• Develop and implement security risk and governance capabilities, policies, and operations, ensuring alignment with Atlassian's business objectives and compliance with relevant laws and regulations.
• Provide technical guidance, promote automation, review designs, and support security teams to equip engineering partner teams with the latest tools, techniques, and methodologies to build secure products by default.
• Security GRC data management, analysis and reporting.
• Identify potential security risks and threats, and develop strategies to mitigate them.
• Understand Atlassian's security controls and how they mitigate our risks.
• Support other teams in implementing and maintaining security controls and best practices.
• Periodically evaluate and report on the effectiveness of Atlassian's security posture.
• Stay informed on the latest developments in cybersecurity and risk management to ensure that Atlassian's security controls are always at the cutting edge.

Qualifications

• 2+ years experience in a similar role, preferably in a large-scale SaaS/Product environment.
• Expertise and experience working in security-focused roles
• Experience with application security, especially web applications
• Experience in cloud security architecture and infrastructure
• Experience providing SME knowledge and guidance to stakeholders and engineering functions
• Experience working with internal/external audit and leadership teams.
• Solid knowledge of cybersecurity principles, risk management strategies, and IT governance frameworks.
• Strong communication and interpersonal skills, with the ability to interact with stakeholders at all levels and explain complex security concepts in an understandable way.
• Relevant certifications such as CISSP, CISM, or CRISC would be beneficial.
• Scripting experience to automate recurring tasks (JQL, SQL, Python, Go)

If some of the above doesn't exactly match your experience, we still encourage you to apply! At Atlassian, we value thoughtful workers who are lifelong learners and kind, playful team members. If this sounds like you, then Atlassian is the perfect place for you.
Our perks & benefits
Atlassian offers a variety of perks and benefits to support you, your family and to help you engage with your local community. Our offerings include health coverage, paid volunteer days, wellness resources, and so much more. Visit go.atlassian.com/perksandbenefits to learn more.
About Atlassian
At Atlassian, we're motivated by a common goal: to unleash the potential of every team. Our software products help teams all over the planet and our solutions are designed for all types of work. Team collaboration through our tools makes what may be impossible alone, possible together.
We believe that the unique contributions of all Atlassians create our success. To ensure that our products and culture continue to incorporate everyone's perspectives and experience, we never discriminate based on race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status. All your information will be kept confidential according to EEO guidelines.
To provide you the best experience, we can support with accommodations or adjustments at any stage of the recruitment process. Simply inform our Recruitment team during your conversation with them.
To learn more about our culture and hiring process, visit go.atlassian.com/crh .