(USA) Principal, Risk Expert - Military veterans preferred

Position Summary...

What you'll do...

As an Individual Contributor of the Information Security Controls Assurance team, you will play a key role in leading the execution of our methodology and approach in ensuring applications built or implemented in the environment meet appropriate levels of compliance for industry, legal, governmental, risk and safety standards.  Examples of regulatory compliance focus areas include but not limited to Health & Wellness, Food Safety, Alcohol Tobacco and Firearms, Trade/Sanctions, Anti-Corruption, etc. You will collaborate with various business subject matter resources, Governance teams, and Technology teams to achieve our objectives.  You will also lead in executing our strategy in how we create and implement automated preventative/detective controls and processes that help us achieve policy compliance. 

About Our Team

In an environment where IT-related risks are on the rise and constantly changing, the ability to provide confidence that our regulatory application controls in high-risk compliance areas are operating effectively is paramount.   The Controls Assurance team collaborates with business partners, Governance, and Global Tech teams to ensure applications are properly deployed, monitored, and controlled to meet appropriate levels of compliance for industry, legal, governmental, risk and safety standards.  We also work to create automated preventative and detective controls and processes and implement systematic testing for continuous compliance to provide confidence key application controls are functioning as intended.    

What you'll do...

As a Principal Risk Expert, you’ll have the following responsibilities:

• Assist in ensuring our goals and objectives align with those of Global Governance stakeholders and are executed accordingly.
• Collaborate in efforts to identify manually intensive regulatory controls for transformation to systematic controls
• Provide assurance the transformed regulatory controls meet established criteria for monitoring.
• Support key stakeholders in identifying new or changed scope of regulatory systems that necessitate the monitoring of systematic controls or critical system behavior.
• Lead the execution of methodology for the in-scope regulatory systems enabling the team to understand the systematic controls and associated business/IT processes, assess the current state of their environment, and identify potential opportunities for enhancing IT processes and controls to meet our objectives.
• Lead the process of collecting data from diverse sources, organizing and analyzing it to detect patterns, trends, and insights for in-scope regulatory systems.
• Analyze findings and insights, to prioritize requirements for addressing risks related to the regulatory systems.
• Take the lead in the collaboration with our Controls Assurance Engineering team to integrate regulatory systems to our continuous monitoring tooling.
• Ensure the team consistently implements the methodology for effective collaboration with Technical Teams in resolving control health anomalies detected in systematic controls or critical system behavior as identified through our monitoring tools.
• Ability to pinpoint high-risk manual business process controls that require automation within the in-scope regulatory systems, in collaboration with respective business owners.
• Participate in building the team to enable them to be high performing process and controls assurance Associates.
• Guide and mentor team members to follow established practices for the delivery of technology assurance services, meeting quality, speed, innovation and create impact.

What you’ll bring…

• Experience in working with Business Process Owners to understand specific business process risks that are mitigated through application controls or functionality that influences system behavior
• Strong experience in evaluating, designing, and implementing IT processes and controls for IT systems, platforms, and supporting tools
• Familiarity with retail and regulatory compliance systems would be a plus (i.e. Health & Wellness, Financial, Food Safety, etc.)
• Knowledge of data analysis and risk management
• Certified in a relevant risk field is a plus (CISA, CGEIT, CRISC, etc.)
• Good understanding of IT regulatory standards and frameworks (COBIT, ISO 27001, ITIL, etc.)
• Methodical and systematic problem-solving approach, combined with a solid awareness of ownership, initiative, and drive
• Ability to work collaboratively across different teams
• Influence Technical Teams to achieve desired objectives
• Ability to motivate and help develop a team
• Excellent communication skills, both verbal and written

At Walmart, we offer competitive pay as well as performance-based bonus awards and other great benefits for a happier mind, body, and wallet. Health benefits include medical, vision and dental coverage. Financial benefits include 401(k), stock purchase and company-paid life insurance. Paid time off benefits include PTO (including sick leave), parental leave, family care leave, bereavement, jury duty, and voting. Other benefits include short-term and long-term disability, company discounts, Military Leave Pay, adoption and surrogacy expense reimbursement, and more.

? 

? 

? 

You will also receive PTO and/or PPTO that can be used for vacation, sick leave, holidays, or other purposes. The amount you receive depends on your job classification and length of employment. It will meet or exceed the requirements of paid sick leave laws, where applicable.

? 

For information about PTO, see .

? 

? 

Live Better U is a Walmart-paid education benefit program for full-time and part-time associates in Walmart and Sam's Club facilities. Programs range from high school completion to bachelor's degrees, including English Language Learning and short-form certificates. Tuition, books, and fees are completely paid for by Walmart.

? 

Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to a specific plan or program terms.

? 

For information about benefits and eligibility, see .

? 

The annual salary range for this position is $110,000.00-$220,000.00

? 

Additional compensation includes annual or quarterly performance bonuses.

? 

Additional compensation for certain positions may also include:

? 

? 

- Stock

? 

? 

Minimum Qualifications...

Outlined below are the required minimum qualifications for this position. If none are listed, there are no minimum qualifications.

Option 1: Bachelor's degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 5years’ experience in cybersecurity risk or related area at a technology, retail, or data-driven company.
Option 2: 7 years’ experience in cybersecurity risk or related area at a technology, retail, or data-driven company.

Preferred Qualifications...

Outlined below are the optional preferred qualifications for this position. If none are listed, there are no preferred qualifications.

Certification in Security+, GISF, GSEC, CISA, CISSP, CCSP, or CISM, Master’s degree in computer science, information technology, engineering, information systems, cybersecurity or related area and 3 years’ experience leading information security or cybersecurity projects, We value candidates with a background in creating inclusive digital experiences, demonstrating knowledge in implementing Web Content Accessibility Guidelines (WCAG) 2.2 AA standards, assistive technologies, and integrating digital accessibility seamlessly. The ideal candidate would have knowledge of accessibility best practices and join us as we continue to create accessible products and services following Walmart’s accessibility standards and guidelines for supporting an inclusive culture.

CISA - Certified Information Systems Auditor - Certification, CISSP - Certified Information Systems Security Professional - Certification

Primary Location...

805 Se Moberly Ln, Bentonville, AR 72712, United States of America