(USA) Principal, Risk Expert

Walmart • Herndon, VA

7d • Onsite

About The Position

Leads enterprise security assessments, governance, standards enforcement, and control automation initiatives within the Security Controls & Assessments (SCA) organization. Drives the Governance and Enforcement Automation Roadmap (GEAR), advancing continuous compliance capabilities through automated control testing, monitoring, evidence collection, and remediation workflows. Partners with engineering, infrastructure, cloud, privacy, audit, and business teams to identify and mitigate risk, evaluate security control effectiveness, and support regulatory and audit readiness. Provides technical leadership for large-scale security assessment programs, develops executive reporting and metrics, and influences enterprise-wide improvements to Walmart’s cybersecurity posture and compliance maturity. The Security Controls & Assessments (SCA) team helps Walmart maintain a strong cybersecurity posture through security assessments, standards enforcement, risk management, and control automation. The team partners with technology, engineering, privacy, legal, and audit stakeholders to evaluate security control effectiveness, drive remediation of identified risks, and support regulatory and audit readiness activities. SCA is leading the transformation from periodic assessments to continuous compliance through the Governance and Enforcement Automation Roadmap (GEAR), leveraging automation, continuous monitoring, and data-driven insights to improve visibility, scalability, and security outcomes across Walmart's global technology environment.

Requirements

• Deep expertise in cybersecurity, risk management, governance, compliance, or security engineering within large-scale enterprise environments.
• Strong knowledge of security frameworks and standards, including NIST, ISO 27001, CIS Controls, and regulatory requirements.
• Experience leading enterprise security assessments, audit readiness activities, and risk management.
• Proven ability to partner with engineering teams to design and implement scalable security controls and monitoring capabilities.
• Experience driving security control automation, continuous compliance, continuous monitoring, or policy enforcement.
• Strong analytical and problem-solving skills with the ability to assess complex cybersecurity risks.
• Excellent communication and stakeholder management skills, including influencing senior leaders and cross-functional teams.
• Bachelor's degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 5 years’ experience in cybersecurity risk or related area at a technology, retail, or data-driven company.
• 7 years’ experience in cybersecurity risk or related area at a technology, retail, or data-driven company.

Nice To Haves

• Industry certifications such as CISSP, CISM, CISA, or equivalent preferred.
• Certification in Security+, GISF, GSEC, CISA, CISSP, CCSP, or CISM
• Master’s degree in computer science, information technology, engineering, information systems, cybersecurity or related area and 3 years’ experience leading information security or cybersecurity projects
• We value candidates with a background in creating inclusive digital experiences, demonstrating knowledge in implementing Web Content Accessibility Guidelines (WCAG) 2.2 AA standards, assistive technologies, and integrating digital accessibility seamlessly.
• The ideal candidate would have knowledge of accessibility best practices and join us as we continue to create accessible products and services following Walmart’s accessibility standards and guidelines for supporting an inclusive culture.
• CISA - Certified Information Systems Auditor - Certification
• CISSP - Certified Information Systems Security Professional - Certification

Responsibilities

• Lead enterprise security assessments, standards enforcement, and risk management programs.
• Drive the Automation Roadmap, advancing control automation, continuous compliance, and scalable security oversight.
• Partner with engineering, infrastructure, cloud, privacy, legal, and audit teams to evaluate security control effectiveness and drive risk remediation.
• Design and implement automated approaches for control testing, evidence collection, compliance monitoring, and policy enforcement.
• Support regulatory, audit, and assessment activities by translating security requirements into measurable and scalable controls.
• Develop executive-level risk reporting, metrics, and insights to inform cybersecurity strategy and investment decisions.
• Mentor team members and serve as a trusted advisor on cybersecurity governance, compliance, risk management, and security control automation.

Benefits

• competitive pay
• performance-based bonus awards
• medical coverage
• vision coverage
• dental coverage
• 401(k)
• stock purchase
• company-paid life insurance
• PTO (including sick leave)
• parental leave
• family care leave
• bereavement
• jury duty
• voting
• short-term disability
• long-term disability
• company discounts
• Military Leave Pay
• adoption and surrogacy expense reimbursement
• PTO and/or PPTO that can be used for vacation, sick leave, holidays, or other purposes
• Walmart-paid education benefit program for full-time and part-time associates in Walmart and Sam's Club facilities (Live Better U)
• Tuition, books, and fees are completely paid for by Walmart for Live Better U programs

What This Job Offers

• Job Type: Full-time
• Career Level: Principal