Security Risk Lead
About the role
Security Risk Lead
As the Security Risk Lead, you will be at the center of all things security risk-related. Your goal is to take complex security data and turn it into clear, actionable risk stories for Senior Leadership. You will help Fastly understand not just that risks exist, but influence leaders to understand why it matters and what needs to be prioritized versus dropped. You’ll diagnose problems at the source, working with stakeholders from Security, Engineering, Compliance, and the rest of the organization to redesign our internal systems and make our environment more secure. Fastly believes that security is everyone’s responsibility and you will empower all of Fastly to live up to that responsibility. You will right-size Fastly’s existing security policies and standards so they are as lean and high-performing as our technology.
You will be supported by a friendly security team, where you can learn and develop. We check our egos at the door. You’ll make sure our customers benefit from a service built to the highest security standards in the industry. We pride ourselves in our involvement in the larger security community and encourage our team to present at network and security conferences and participate in the open source community. We are a distributed security team with the commitment and tools in place to make it work.
What You’ll Do
- Lead targeted security risk assessments across the organization, proactively identifying gaps and risks which pose a threat to the safety and security
- Analyze risk data to identify patterns of deficiencies and collaborate with Security Architects, Product Owners, Engineering, and Senior Leaders to propose new, or challenge existing, mitigation plans
- Own and evolve the systems that track our risk decisions and mitigations; ensuring we have visibility into the greatest areas of concern, where we need to buy down more risk, and to keep our mitigation plans on track with the committed timelines
- Oversee relevant Risk Committees to identify and discuss systemic and cross-functional security risks, influencing Senior Leaders across Fastly to commit to mitigation plans
- Design metrics and reporting to give Senior Leadership a pulse check on our security posture, highlighting exactly where we need to invest