Cybersecurity Control Analyst

SailPoint•Austin, TX

12h•Remote

About The Position

The Cybersecurity Control Analyst will help drive SailPoint’s cybersecurity control assessments and compliance program in accordance with applicable standards, requirements, and policies. The role works with internal and external stakeholders to continuously improve the Governance, Risk, and Compliance (GRC) program. The analyst joins the Chief Information Security Officer (CISO) team, which works across engineering, IT, compliance, and product to translate control requirements into actionable business insights. The role progresses from learning existing testing processes and supporting evidence gathering to independently preparing for control testing, advising technical and business partners, and improving the testing program. Over time, the analyst is expected to become a subject matter expert in cyber control advisory, mature continuous testing, and help align risk posture and control effectiveness with industry frameworks and emerging threats. This is a US-based remote role. Candidates will be required to interview in person.

Requirements

Bachelor’s degree in a related field, or equivalent professional experience.
At least 3 years of related professional experience in Security, Risk, and Compliance.
Strong understanding of security frameworks and standards such as NIST, ISO, FAIR, OWASP, and CIS.
Working knowledge of compliance frameworks including ISO 27001, SOC 2, SOX, GDPR, and FedRAMP.
Proven experience conducting control tests, developing control recommendations, and producing executive-level reporting.
Strong analytical, problem-solving, and methodical follow-up skills.
Excellent verbal and written communication skills, including the ability to explain complex technical concepts in business-friendly language and influence without authority.
Ability to manage multiple projects concurrently, prioritize in a fast-paced environment, and collaborate across distributed teams.

Nice To Haves

Relevant industry certification such as CISSP, CISA, CISM, CRISC, or equivalent.
Familiarity with enterprise governance, risk, and compliance (GRC) tools and platforms.

Responsibilities

Conduct and support cybersecurity control assessments and control testing.
Develop plans and prepare for upcoming rounds of control testing.
Collaborate on GRC tool evidence-gathering integrations.
Develop control recommendations and produce executive-level reporting.
Consult with and advise technical and business partners on control requests.
Drive enhancements to the control testing process and mature continuous testing.
Collaborate on strategic planning for the cybersecurity organization.
Help align SailPoint’s risk posture and control effectiveness with industry frameworks and emerging threats.

Benefits

Competitive compensation.
Flexible time off and paid company holidays.
Medical, dental, and vision insurance.
Career growth opportunities.
Short-term and long-term disability coverage.
Life insurance and Accidental Death & Dismemberment (AD&D) coverage.
Supplemental life insurance options for employees, spouses, and children.
Flexible spending accounts for health care and dependent care, including limited-purpose FSA.
401(k) plan with company matching.
Eight paid holidays annually.
Sick leave.
Paid parental leave.
Employee Assistance Program (EAP) and Care Counselors.
Voluntary legal assistance, critical illness, accident, hospital indemnity, and pet insurance options.
Health Savings Account (HSA) with employer contribution.
The role may be eligible for a corporate bonus plan or role-specific commission and potential equity participation.