Cybersecurity Control Analyst

Cybersecurity Control Analyst This is a US-based remote role. You will be required to interview in person.
** About Sail Point
** SailPoint is defining the next era of identity security. Our unified, AI-powered platform seamlessly secures both the Human Fabric of your workforce and the Agentic Fabric of AI and non-human identities, completely eliminating organizational blind spots.  Built on core principles like zero-standing privilege and contextualized risk, our platform transforms identity from a vulnerability into a strategic business advantage. Today, we are trusted by some of the largest, most complex organizations in the world to deliver intelligent, autonomous identity security at scale.
** About the Role
** As a Cybersecurity Control Analyst, you will play a key role driving Cybersecurity’s control assessments and compliance program with applicable standards, requirements, and policies. This is a challenging and impactful role where you will have the opportunity to work with both internal and external stakeholders while driving the continuous improvements for our GRC program.
** About the Team
** You will join the Chief Information Security Officer (CISO) team, a collaborative group dedicated to maintaining best-in-class security across SailPoint’s SaaS and enterprise software solutions. The team works closely with partner functions across engineering, IT, compliance, and product teams to translate complex control requirements into clear, actionable business insights.
** Roadmap for Success
*** 30 Days:
Complete onboarding, familiarize yourself with SailPoint's Control Testing processes, policies, and security tooling, and establish working relationships with the CISO team and key stakeholders.
* 60 Days:
Shadow and begin creating plans for the upcoming round of control testing. Start collaborating on GRC tool evidence gathering integrations.
* 90 Days:
Independently lead prep work for the upcoming round of control testing following current processes. Consult on control advisory requests with technical and business partners.
* 6 Months:
Drive enhancements to the control testing process, collaborate on continuous strategic planning for the cybersecurity organization, and lead control advisory sessions with technical and business partners.
* 1 Year:
Serve as a subject matter expert and thought leader in cyber control advisory, mature the continuous testing process, and collaborate to align SailPoint’s risk posture, control effectiveness and emerging threats to industry frameworks.
** Requirements
* ** Bachelors degree in related field, or equivalent professional experience
* 3+ years of related professional experience in Security, Risk, and Compliance
* Strong understanding of industry security frameworks and standards such as NIST, ISO, FAIR, OWASP, and CIS
* Working knowledge of compliance frameworks including ISO 27001, SOC 2, SOX, GDPR, and FedRAMP
* Proven experience conducting control tests, developing control recommendations, and producing executive-level reporting
* Strong analytical, problem-solving, and methodical follow-up skills
* Excellent verbal and written communication skills with the ability to distill complex technical concepts into business-friendly language and influence without authority
* Demonstrated ability to manage multiple projects concurrently, prioritize effectively in a fast-paced environment, and collaborate seamlessly across distributed teams
** Preferred Skills
*** Relevant industry certifications such as CISSP, CISA, CISM, CRISC, or equivalent
* Familiarity with enterprise governance, risk, and compliance (GRC) tools and platforms
** Benefits
* * At SailPoint, our identity security innovations are powered by a global crew. We are proudly headquartered in Austin,…