Cybersecurity Control Analyst

SailPoint

2d•$71,500 - $120,478•Remote

About The Position

This US-based remote role requires an in-person interview. As a Cybersecurity Control Analyst, you will drive Cybersecurity’s control assessments and compliance program in accordance with applicable standards, requirements, and policies. You will work with internal and external stakeholders and help continuously improve SailPoint’s GRC program. The role is part of the Chief Information Security Officer (CISO) team, which works across engineering, IT, compliance, and product teams to translate complex control requirements into clear, actionable business insights. The position’s development path includes learning SailPoint’s control-testing processes and tools, helping plan and execute control testing, advising technical and business partners, improving continuous testing, and becoming a subject matter expert in cyber control advisory.

Requirements

Bachelor’s degree in a related field, or equivalent professional experience.
At least 3 years of related professional experience in security, risk, and compliance.
Strong understanding of industry security frameworks and standards such as NIST, ISO, FAIR, OWASP, and CIS.
Working knowledge of compliance frameworks including ISO 27001, SOC 2, SOX, GDPR, and FedRAMP.
Proven experience conducting control tests, developing control recommendations, and producing executive-level reporting.
Strong analytical, problem-solving, and methodical follow-up skills.
Excellent verbal and written communication skills, including the ability to explain complex technical concepts in business-friendly language and influence without authority.
Ability to manage multiple projects concurrently, prioritize in a fast-paced environment, and collaborate across distributed teams.

Nice To Haves

Relevant industry certifications such as CISSP, CISA, CISM, CRISC, or equivalent.
Familiarity with enterprise governance, risk, and compliance (GRC) tools and platforms.

Responsibilities

Drive cybersecurity control assessments and the compliance program in line with applicable standards, requirements, and policies.
Prepare for and conduct control testing, including gathering evidence and coordinating with stakeholders.
Develop control recommendations and produce executive-level reporting.
Collaborate on GRC tool evidence-gathering integrations.
Provide control advisory support to technical and business partners.
Enhance the control-testing process and contribute to strategic planning for the cybersecurity organization.
Help align SailPoint’s risk posture and control effectiveness with emerging threats and industry frameworks.
Collaborate across engineering, IT, compliance, product, and other distributed teams.

Benefits

Competitive compensation.
Flexible time off and paid company holidays.
Medical, dental, and vision insurance.
Short-term and long-term disability coverage.
Life insurance and Accidental Death & Dismemberment (AD&D) coverage.
Supplemental life insurance options for employees, spouses, and children.
Health care and dependent care flexible spending accounts, including a limited-purpose FSA.
401(k) plan with company matching.
Eight paid holidays annually.
Sick leave.
Paid parental leave.
Employee Assistance Program (EAP) and Care Counselors.
Voluntary legal assistance, critical illness, accident, hospital indemnity, and pet insurance options.
Health Savings Account (HSA) with employer contribution.
Career growth opportunities.
Potential eligibility for a corporate bonus plan or role-specific commission and equity participation.