
(USA) Principal, Risk Expert
Walmart
- 🇺🇸 United States
- Remote
- Staff / Principal
- 1 day ago
- Risk Management
- NIST
- ISO 27001
- CIS Controls
- CISSP
- CISM
- CISA
- GSEC
- CCSP
- WCAG
- Pension
1 day ago
Position Summary...
What you'll do...
Role summary:Leads enterprise security assessments, governance, standards enforcement, and control automation initiatives within the Security Controls & Assessments (SCA) organization. Drives the Governance and Enforcement Automation Roadmap (GEAR), advancing continuous compliance capabilities through automated control testing, monitoring, evidence collection, and remediation workflows. Partners with engineering, infrastructure, cloud, privacy, audit, and business teams to identify and mitigate risk, evaluate security control effectiveness, and support regulatory and audit readiness. Provides technical leadership for large-scale security assessment programs, develops executive reporting and metrics, and influences enterprise-wide improvements to Walmart’s cybersecurity posture and compliance maturity.
About the team:
The Security Controls & Assessments (SCA) team helps Walmart maintain a strong cybersecurity posture through security assessments, standards enforcement, risk management, and control automation. The team partners with technology, engineering, privacy, legal, and audit stakeholders to evaluate security control effectiveness, drive remediation of identified risks, and support regulatory and audit readiness activities. SCA is leading the transformation from periodic assessments to continuous compliance through the Governance and Enforcement Automation Roadmap (GEAR), leveraging automation, continuous monitoring, and data-driven insights to improve visibility, scalability, and security outcomes across Walmart's global technology environment.
What you'll do:
- Lead enterprise security assessments, standards enforcement, and risk management programs.
- Drive the Automation Roadmap, advancing control automation, continuous compliance, and scalable security oversight.
- Partner with engineering, infrastructure, cloud, privacy, legal, and audit teams to evaluate security control effectiveness and drive risk remediation.
- Design and implement automated approaches for control testing, evidence collection, compliance monitoring, and policy enforcement.
- Support regulatory, audit, and assessment activities by translating security requirements into measurable and scalable controls.
- Develop executive-level risk reporting, metrics, and insights to inform cybersecurity strategy and investment decisions.
- Mentor team members and serve as a trusted advisor on cybersecurity governance, compliance, risk management, and security control automation.
What you'll bring:
- Deep expertise in cybersecurity, risk management, governance, compliance, or security engineering within large-scale enterprise environments.
- Strong knowledge of security frameworks and standards, including NIST, ISO 27001, CIS Controls, and regulatory requirements.
- Experience leading enterprise security assessments, audit readiness activities, and risk management.
- Proven ability to partner with engineering teams to design and implement scalable security controls and monitoring capabilities.
- Experience driving security control automation, continuous compliance, continuous monitoring, or policy enforcement.
- Strong analytical and problem-solving skills with the ability to assess complex cybersecurity risks.
- Excellent communication and stakeholder management skills, including influencing senior leaders and cross-functional teams.
- Industry certifications such as CISSP, CISM, CISA, or equivalent preferred.
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to a specific plan or program terms.
For information about benefits and eligibility, seeOne.Walmart.
Bentonville, Arkansas US-09050: The annual salary range for this position is $110,000.00 - $220,000.00
Herndon, Virginia US-10710: The annual salary range for this position is $132,000.00 - $264,000.00 Additional compensation includes annual or quarterly performance bonuses. Additional compensation for certain positions may also include :
- Stock
ㅤ
ㅤ
ㅤ
ㅤ
Minimum Qualifications...
Outlined below are the required minimum qualifications for this position. If none are listed, there are no minimum qualifications.
Option 1: Bachelor's degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 5years’ experience in cybersecurity risk or related area at a technology, retail, or data-driven company.Option 2: 7 years’ experience in cybersecurity risk or related area at a technology, retail, or data-driven company.
Preferred Qualifications...
Outlined below are the optional preferred qualifications for this position. If none are listed, there are no preferred qualifications.
Certification in Security+, GISF, GSEC, CISA, CISSP, CCSP, or CISM, Master’s degree in computer science, information technology, engineering, information systems, cybersecurity or related area and 3 years’ experience leading information security or cybersecurity projects, We value candidates with a background in creating inclusive digital experiences, demonstrating knowledge in implementing Web Content Accessibility Guidelines (WCAG) 2.2 AA standards, assistive technologies, and integrating digital accessibility seamlessly. The ideal candidate would have knowledge of accessibility best practices and join us as we continue to create accessible products and services following Walmart’s accessibility standards and guidelines for supporting an inclusive culture.CISA - Certified Information Systems Auditor - Certification, CISSP - Certified Information Systems Security Professional - CertificationPrimary Location...
805 Se Moberly Ln., Bentonville, AR 72712, United States of AmericaWalmart and its subsidiaries are committed to maintaining a drug-free workplace and has a no tolerance policy regarding the use of illegal drugs and alcohol on the job. This policy applies to all employees and aims to create a safe and productive work environment.(USA) Principal, Risk Expert · Walmart