Senior Information Security Analyst, GRC/Responsible AI

Sandisk is seeking a Senior Information Security Analyst specializing in Governance, Risk, and Compliance (GRC) and Responsible AI to join our Information Technology team in Irvine, CA. This full-time position offers an opportunity to lead security governance and AI risk management initiatives at a global technology leader.

Position Summary

In this role, you'll develop and implement comprehensive security and compliance frameworks that address both traditional organizational governance and the evolving challenges of responsible artificial intelligence. You'll work at the intersection of regulatory compliance, risk management, and AI ethics, ensuring Sandisk's systems, processes, and emerging AI initiatives meet the highest standards for data protection, risk mitigation, and responsible technology deployment.

Your Responsibilities

• Design, maintain, and enhance GRC policies, procedures, and control frameworks aligned with industry standards and regulatory requirements
• Conduct comprehensive security and risk assessments across technology infrastructure to identify vulnerabilities and compliance gaps
• Develop governance frameworks and security controls specific to artificial intelligence systems and responsible AI programs
• Lead compliance audits, regulatory reviews, and control effectiveness evaluations
• Collaborate with engineering, product, and business teams to integrate security and risk management into system development lifecycles
• Monitor regulatory landscape changes and emerging security threats; recommend policy and procedural updates
• Prepare and manage documentation for compliance audits, regulatory submissions, and internal reviews
• Mentor junior security analysts and contribute to building a strong security-first organizational culture

Requirements

• 7+ years of hands-on information security and compliance experience
• Deep expertise in governance, risk, and compliance frameworks and methodologies
• Strong knowledge of security standards including ISO 27001, NIST Cybersecurity Framework, SOC 2, and similar regulatory requirements
• Familiarity with AI governance principles, responsible AI practices, and security considerations for AI systems
• Demonstrated expertise in risk assessment, threat modeling, and security control design
• Proficiency with GRC tools, audit platforms, and compliance management systems
• Excellent communication skills; ability to convey technical security concepts to business and executive stakeholders
• Bachelor's degree in cybersecurity, information security, information technology, or related field (or equivalent professional experience)
• Industry certifications such as CISSP, CISM, or CRISC preferred

Working at Sandisk

Sandisk is a global innovator in storage and memory solutions, committed to creating an inclusive workplace where skilled professionals develop and advance their careers. Our Irvine headquarters serves as a hub for research, engineering, and product leadership. When you join Sandisk, you contribute to technologies used by millions worldwide while collaborating with talented teams in a dynamic, forward-thinking environment.

Ready to Apply?

To apply, complete your application directly on this page, or you'll be redirected to the employer's application platform to finish submitting there.