About Netskope

Today, there's more data and users outside the enterprise than inside, causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed, one that is built in the cloud and follows and protects data wherever it goes, so we started Netskope to redefine Cloud, Network and Data Security. 

Since 2012, we have built the market-leading cloud security company and an award-winning culture powered by hundreds of employees spread across offices in Santa Clara, St. Louis, Bangalore, London, Melbourne, Taipei, and Tokyo. Our core values are openness, honesty, and transparency, and we purposely developed our open desk layouts and large meeting spaces to support and promote partnerships, collaboration, and teamwork. From catered lunches and office celebrations to employee recognition events (pre and hopefully post-Covid) and social professional groups such as the Awesome Women of Netskope (AWON), we strive to keep work fun, supportive and interactive.  Visit us at Netskope Careers. Please follow us on LinkedIn and Twitter@Netskope.

About the position:

Based in our St. Louis office, this role is a member of the Global Information Security (GIS) team which has oversight and operational responsibilities for the Information security of Netskope.  The GRC Compliance Analyst - Global Federal will be a key member of the GRC team responsible for collaborating with the business on Federal GRC activities, administering GRC solutions, and ensuring compliance objectives are being achieved. This role will be critical as we mature our controls and overall Information Security program.

Responsibilities:

  • Assist in conducting enterprise-wide, ongoing risk analysis in tandem with compliance and internal audit.
  • Support the development and maturing of mandatory documentation (SSP Packages and supporting documents)
  • Support continuous monitoring efforts and maintain POA&Ms (Plan of action and milestones) include control and vulnerability management.
  • Support Federal Compliance Assessments - Liaison with auditors and accreditation
  • Support customer risk assessments, audits and evidence collection.
  • Assist in the development and maintenance of the  Information Security Risk Register 
  • Monitor control effectiveness and escalates where issues are identified
  • Contribute and co-manages KPI programs including monitoring and metrics
  • Contribute to security requirement documentation packages 
  • Assist in development and maintenance of Information Security control mappings to defined frameworks
  • Ensures risk treatment plans are appropriately communicated and tracked to the proper level of management
  • Perform Technology and Information Security risk assessments
  • Collaborate with Internal Audit and other assessors on Audits for Technology
  • Work closely with cross functional teams to address control maturity or issues
  • Review and provide feedback on other members work and documentation
  • General knowledge of security technologies and approaches to secure an organization.
  • General knowledge of risk management and how to use risk management in a security program.
  •  

Requirements:

  • A minimum of four (4) years’ experience in Information Security and/or Technology.
  • Must have knowledge and experience in managing GRC tools.
  • Must be highly analytical with the ability to present your analysis
  • Must have great written and verbal communication
  • Must have experience in performing risk assessments.
  • Must have experience in maintaining metrics and measures.
  • Must have experience in supporting customer audits
  • Must have experience working with software engineering teams in an agile environment
  • Prefer candidates with critical technical and IT security certifications, such as CISSP, CISM, CISA or equivalent.
  • US Citizen

Preferred Requirements: 

  • Experience in performing risk assessments
  • Experience with vulnerability management tools and vulnerability risk analysis
  • Experience with US federal programs and frameworks (FedRAMP, FISMA, NIST, etc) and POA&M management. 
  • General understanding of Cloud technologies
  • General understanding of meeting multiple federal and industry compliance frameworks such as FedRAMP, PBMM, iRAP, ISMAP, ISO 27001, SSAE-18 SOC2, CSA STAR, HIPAA, PCI-DSS, etc. 

Additional Skills:

  • Ability to be an active member of a team
  • Ability to communicate effectively (written and verbal) 
  • Self-motivated to work on tasks independently within the team 
  • Ability to educate other members of the on existing processes and technologies
  • Adds to the diversity (gender, religion, race) of the team
  • Self and quick learner
  • Ability to ask questions
  • Knowledgeable pertaining to news and current events.

Education:

  • Bachelor’s degree/University degree or equivalent experience

#LI-SC1

Netskope is committed to implementing equal employment opportunities for all employees and applicants for employment. Netskope does not discriminate in employment opportunities or practices based on religion, race, color, sex, marital or veteran statues, age, national origin, ancestry, physical or mental disability, medical condition, sexual orientation, gender identity/expression, genetic information, pregnancy (including childbirth, lactation and related medical conditions), or any other characteristic protected by the laws or regulations of any jurisdiction in which we operate.

Netskope respects your privacy and is committed to protecting the personal information you share with us, please refer to Netskope's Privacy Policy for more details.

Apply for this Job

* Required
resume chosen  
Dropbox
(File types: pdf, doc, docx, txt, rtf)
Cancel
cover_letter chosen  
Dropbox
(File types: pdf, doc, docx, txt, rtf)
Cancel
When autocomplete results are available use up and down arrows to review
+ Add another education
Voluntary Pronoun Self-Identification

We invite applicants to share your personal pronouns.

To help us better understand how you would like to be addressed, please feel free to share your personal pronouns by selecting an option below, or skip to the next question: (Select one)





Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Netskope’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

Enter the verification code sent to to confirm you are not a robot, then submit your application.

This application was flagged as potential bot traffic. To resubmit your application, turn off any VPNs, clear the browser's cache and cookies, or try another browser. If you still can't submit it, contact our support team through the help center.