DocuSign

Security Risk Manager

Security Risk Manager at DocuSign, Dublin. 5+ yrs experience in risk management, ServiceNow IRM expertise required. Manage cyber threats, compliance frameworks (ISO 27001, NIST, FedRAMP). PTO, 401k, tuition reimbursement.

Department - JobBoardly X Webflow Template
Direct Hire
Job Level - JobBoardly X Webflow Template
Mid-Level
ServiceNow Role Type:
Department - JobBoardly X Webflow Template
System Administrator
ServiceNow Modules:
Department - JobBoardly X Webflow Template
Governance, Risk, and Compliance
Department - JobBoardly X Webflow Template
Incident Management
ServiceNow Certifications (nice to have):
Department - JobBoardly X Webflow Template
Certified System Administrator

Job description

Date - JobBoardly X Webflow Template
Posted on:
 
December 9, 2025

Docusign is looking for a Security Risk Senior Analyst to join our Security Governance, Risk & Compliance (GRC) team. The ideal candidate combines technical expertise with business acumen, translating risk findings into actionable insights that influence engineering, security and business decisions.

Requirements

  • 5+ years of experience in security risk management or related areas
  • Bachelor’s degree in Computer Science, Information Systems, Information Security, or a related field
  • Experience with cyber threats and vulnerabilities, with hands-on expertise in one or more security domains
  • Experience with risk management frameworks (RMF, ISO 27005, NIST 800-37, NIST 800-30)
  • Experience with risk quantification models (e.g., FAIR) or building custom risk scoring approaches
  • Experience with control frameworks (SSAE16, ISO27001, NIST CSF/800-53, PCI DSS, SIG, CSA, HIPAA, FedRAMP)
  • Experience with GRC platforms and automation tools, preferably ServiceNow IRM

Benefits

  • Generous Paid Time Off
  • 401k Matching
  • Retirement Plan
  • Tuition Reimbursement
  • Relocation Assistance

Requirements Summary

5+ years of experience in security risk management, Bachelor’s degree in Computer Science, Information Systems, Information Security, or a related field, and experience with risk management frameworks and GRC platforms