Senior Risk Expert

Position Summary...

What you'll do...

Senior Risk Expert – Information Security Technical Control Assessment

Role Overview

The Senior Risk Expert for Information Security Technical Control Assessment leads security reviews to ensure products, solutions, and AI-driven implementations are designed in strict adherence to Walmart Security Standards. This role is pivotal in embedding security principles across global teams, driving continuous program improvement, and safeguarding organizational and customer data through rigorous risk assessment and control validation.

This is a high-impact individual contributor and cross-functional leadership role that demands deep technical expertise, a builder mindset, and strong stakeholder communication skills.

Key Responsibilities

Program Ownership & Governance

• Own and manage the InfoSec Technical Control Assessment (TCA) program end-to-end.
• Ensure security reviews are thorough, accurate, and completed within established SLAs.
• Maintain audit-ready documentation for all review engagements and risk decisions.
• Align the TCA program with global security directives, standards, and compliance requirements (e.g., PCI-DSS, SOC 2, ISO 27001, NIST CSF, HIPAA).

Security Review & Risk Assessment

• Assess solutions, architectures, and third-party integrations against Walmart Security Standards and Solution Security Plan (SSP) requirements.
• Validate that applicable security controls — covering confidentiality, integrity, availability, and privacy — are in place and effective.
• Conduct risk assessments across a broad range of IT technologies including cloud platforms, APIs, microservices, data pipelines, and AI/ML systems.
• Identify security gaps, weaknesses, threats, and vulnerabilities; recommend risk treatments with actionable remediation guidance.
• Evaluate AI-related implementations for security compliance, model risk posture, data governance, and adversarial threat exposure.

Continuous Improvement & Automation

• Proactively identify opportunities to streamline review workflows, reduce manual effort, and increase throughput without sacrificing quality.
• Build lightweight tooling and automation scripts (Python, Bash, or similar) to accelerate repetitive assessment tasks, generate reports, and flag policy deviations.
• Incorporate updated security policies and emerging threat intelligence into existing review processes on a continuous basis.

Stakeholder Engagement & Communication

• Serve as the primary point of contact for requester queries via collaboration platforms and email, ensure timely, clear, and actionable responses.
• Translate complex technical security findings into business-familiar language for non-technical stakeholders and leadership.
• Conduct security awareness sessions for regional and international teams, tailoring content to audience technical depth.
• Collaborate across the global security team to ensure program consistency, knowledge sharing, and alignment with enterprise risk strategy.

Thought Leadership & Culture

• Champion Walmart's security-first culture by embedding security principles into team workflows, product development lifecycles, and vendor assessments.
• Research and stay current on advancements in security technologies, AI/GenAI threat landscapes, and evaluation methodologies.
• Provide guidance on complex review scenarios and risk decision-making frameworks.

Qualifications

Education

• Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, or a related technical discipline.

Experience

• 8–12 years of total professional experience, with a minimum of 5 years in technical security architecture review roles.
• 6–8 years of hands-on experience in security risk management, covering:
  • Risk assessment across diverse IT technologies (cloud, on-premise, hybrid, SaaS)
  • Cyber risk assessment and management frameworks (NIST RMF, FAIR, ISO 27005)
  • Identification and treatment of security risks, threats, and vulnerabilities
  • Evolving threat landscape awareness including AI/ML-specific attack vectors
  • Business impact analysis of security gaps

Technical Skills

• Strong understanding of security architecture principles: Zero Trust, defense-in-depth, least privilege, data minimization.
• Proficiency in assessing cloud-native environments (Azure, GCP) and containerized workloads (Kubernetes, Docker).
• Familiarity with application security concepts: OWASP Top 10, SAST/DAST, secure SDLC.
• Working knowledge of scripting/automation: Python, Bash, or equivalent — used to build assessment tooling, not just configure existing tools.
• Experience reviewing AI/ML implementations for risks such as prompt injection, model inversion, data poisoning, and bias-driven security gaps.

Certifications (Good to Have)

• CISA (Certified Information Systems Auditor)
• CISSP (Certified Information Systems Security Professional)
• ISO 27001 Lead Auditor / Implementer
• CCSP (Certified Cloud Security Professional)
•  Azure / GCP Security Specialty

About Walmart Global Tech

Imagine working in an environment where one line of code can make life easier for hundreds of millions of people. That’s what we do at Walmart Global Tech. We’re a team of software engineers, data scientists, cybersecurity expert's and service professionals within the world’s leading retailer who make an epic impact and are at the forefront of the next retail disruption. People are why we innovate, and people power our innovations. We are people-led and tech-empowered. We train our team in the skillsets of the future and bring in experts like you to help us grow. We have roles for those chasing their first opportunity as well as those looking for the opportunity that will define their career. Here, you can kickstart a great career in tech, gain new skills and experience for virtually every industry, or leverage your expertise to innovate at scale, impact millions and reimagine the future of retail.

Walmart’s culture sets us apart, and we know being together helps us innovate, learn and grow great careers. This role is based in our Bangalore office for daily work, with the flexibility for associates to manage their personal lives.

Benefits

Beyond our great compensation package, you can receive incentive awards for your performance. Other great perks include a host of best-in-class benefits maternity and parental leave, PTO, health benefits, and much more.

Equal Opportunity Employer:

Walmart, Inc. is an Equal Opportunity Employer – By Choice. We believe we are best equipped to help our associates, customers and the communities we serve live better when we really know them. That means understanding, respecting and valuing diversity- unique styles, experiences, identities, ideas and opinions – while being inclusive of all people.

Minimum Qualifications...

Outlined below are the required minimum qualifications for this position. If none are listed, there are no minimum qualifications.

Option 1: Bachelor's degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 3 years’ experience in cybersecurity risk or related area at a technology, retail, or data-driven company. Option 2: 5 years’ experience in cybersecurity risk or related area at a technology, retail, or data-driven company.

Preferred Qualifications...

Outlined below are the optional preferred qualifications for this position. If none are listed, there are no preferred qualifications.

Certification in Security+, GISF, GSEC, CISA, CISSP, or CCSP, Master’s degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 1 year’s experience leading information security or cybersecurity projects

Primary Location...

Building 10 (sez), Cessna Business Park, Kadubeesanahalli Village, Varthur Hobli , India