Principal, Risk Expert

Position Summary... What you'll do...
Role summary:
Leads enterprise security assessments, governance, standards enforcement, and control automation initiatives within the Security Controls & Assessments (SCA) organization. Drives the Governance and Enforcement Automation Roadmap (GEAR), advancing continuous compliance capabilities through automated control testing, monitoring, evidence collection, and remediation workflows. Partners with engineering, infrastructure, cloud, privacy, audit, and business teams to identify and mitigate risk, evaluate security control effectiveness, and support regulatory and audit readiness.

Provides technical leadership for large-scale security assessment programs, develops executive reporting and metrics, and influences enterprise-wide improvements to Walmart’s cybersecurity posture and compliance maturity.
About the team:
The Security Controls & Assessments (SCA) team helps Walmart maintain a strong cybersecurity posture through security assessments, standards enforcement, risk management, and control automation. The team partners with technology, engineering, privacy, legal, and audit stakeholders to evaluate security control effectiveness, drive remediation of identified risks, and support regulatory and audit readiness activities. SCA is leading the transformation from periodic assessments to continuous compliance through the Governance and Enforcement Automation Roadmap (GEAR), leveraging automation, continuous monitoring, and data-driven insights to improve visibility, scalability, and security outcomes across Walmart's global technology environment.
What you'll do:

• Lead enterprise security assessments, standards enforcement, and risk management programs.
• Drive the Automation Roadmap, advancing control automation, continuous compliance, and scalable security oversight.
• Partner with engineering, infrastructure, cloud, privacy, legal, and audit teams to evaluate security control effectiveness and drive risk remediation.
• Design and implement automated approaches for control testing, evidence collection, compliance monitoring, and policy enforcement.
• Support regulatory, audit, and assessment activities by translating security requirements into measurable and scalable controls.
• Develop executive-level risk reporting, metrics, and insights to inform cybersecurity strategy and investment decisions.
• Mentor team members and serve as a trusted advisor on cybersecurity governance, compliance, risk management, and security control automation.

What you'll bring:

• Deep expertise in cybersecurity, risk management, governance, compliance, or security engineering within large-scale enterprise environments.
• Strong knowledge of security frameworks and standards, including NIST, ISO
  27001, CIS Controls, and regulatory requirements.
• Experience leading enterprise security assessments, audit readiness activities, and risk management.
• Proven ability to partner with engineering teams to design and implement scalable security controls and monitoring capabilities.
• Experienced driving security control automation, continuous compliance, continuous monitoring, or policy enforcement.
• Strong analytical and problem-solving skills with the ability to assess complex cybersecurity risks.
• Excellent communication and stakeholder management skills, including influencing senior leaders and cross-functional teams.
• Industry certifications such as CISSP, CISM, CISA, or equivalent preferred.

At Walmart, we offer competitive pay as well as performance-based bonus awards and other great benefits for a happier mind, body, and wallet. Health benefits include medical, vision and dental coverage. Financial benefits include 401(k), stock purchase and company-paid life insurance. Paid time off benefits include PTO…