Sandisk

Sandisk

Senior Information Security Analyst, GRC/Responsible AI

Irvine, CA, United States · Senior

Sponsorship not specifiedDetected 125 days ago
CI/CDMachine LearningLLMsAgentic AICybersecurityComplianceSupply ChainProcurementCommunicationCISSP

Stay score

odds of building a lasting career here

42Risky
Cap-exempt (no lottery)0
Sponsors this role100
Entry-level history0
PERM / green-card track0
Lottery odds40
Fits your clock70

Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Employer immigration record

from this employer's Department of Labor filings

DOL often reclassifies their job titles

The Department of Labor assigned a different occupation than this employer requested on 46% of its 24 wage determinations — against a 18% norm. The occupation sets the prevailing wage floor.Reclassification is routine and can reflect genuinely hybrid roles; it is not by itself evidence of underpayment.

Files H-1B transfers

91 transfer filings in the last year, covering 439 workers. Median labor-condition decision: 7 days. An employer that already files transfers is one that can take over an existing H-1B.

Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • Senior Information Security Analyst, GRC and Responsible AI
  • As a Senior Information Security Analyst (Level 4), you will play a key role in shaping and operationalizing Sandisk's enterprise Information Security Governance, Risk Management, and Strategy function, with a particular focus on Responsible GenAI.
  • This is a senior, hands‑on role for an experienced security professional who can operate independently, influence cross‑functional stakeholders, and translate emerging technology risks into practical, scalable governance solutions.

Responsibilities

  • Drive security intake, risk assessment, and ongoing oversight of enterprise AI use cases, platforms, models, and third-party vendors.
  • Lead technical risk assessments and threat modeling covering data protection, identity and access, integration patterns, model and agent behavior, and emerging AI attack surfaces.
  • Design and recommend practical, scalable controls aligned with enterprise security standards and secure-by-design principles.
  • Partner with Legal, Privacy, Procurement, IT, Engineering, and business stakeholders to advance regulatory, contractual, and governance objectives related to AI.
  • Help build the end-to-end operating model for securing AI, from intake through approval and monitoring.
  • Apply program and system-level thinking across functions to drive consistency and scale.
  • Conduct technical and business process risk assessments and document treatment recommendations.
  • Support internal and external audits with metrics, evidence, and analysis, and drive remediation activities.

Requirements

  • Bachelor's degree in information security, Computer Science, Engineering, or a related discipline, or equivalent experience.
  • 6+ years of progressive experience in Information Security, including exposure to GRC, risk management, or security governance in a complex enterprise environment.
  • Demonstrated technical proficiency in security, including hands-on experience with threat modeling, technical risk assessment, or security architecture reviews.
  • Familiarity with AI governance standards such as NIST AI RMF and ISO/IEC 42001.

Nice to have

  • Background in software development, security engineering, application security, cloud security, or security architecture.
  • Experience applying threat modeling methodologies (such as STRIDE, PASTA, or attack tree analysis) to enterprise systems or AI workloads.
  • Professional certifications such as CISSP, CISM, CRISC, or GSNA.
  • Technical security certifications such as GCIH, GPEN, CEH, OSCP, GWAPT, or CSSLP.
  • Hands-on experience with AI, ML, or generative AI in a security, risk, engineering, or architecture capacity.
  • Exposure to emerging AI integration patterns, agentic systems, or AI red teaming.
  • Skills and Attributes
  • Effective communication skills, with the ability to explain complex technical and AI concepts to a range of audiences.

Skills

  • These facilities were also recognized as Sustainability Lighthouses for breakthroughs in efficient operations.

Compensation

  • The salary range is what we believe to be the range of possible compensation for this role at the time of this posting.
  • We may ultimately pay more or less than the posted range and this range is only applicable for jobs to be performed in California, Colorado, New York or remote jobs that can be performed in California, Colorado and New York.
  • You will be eligible to participate in Sandisk's Short-Term Incentive (STI) Plan, which provides incentive awards based on Company and individual performance.
  • Depending on your role and your performance, you may be eligible to participate in our annual Long-Term Incentive (LTI) program, which consists of restricted stock units (RSUs) or cash equivalents, pursuant to the terms of the LTI plan.
  • Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and

Benefits

  • Please note that not all roles are eligible to participate in the LTI program, and not all roles are eligible for equity under the LTI plan.
  • RSU awards are also available to eligible new hires, subject to Sandisk's Standard Terms and Conditions for Restricted Stock Unit Awards.

Company info

  • Sandisk has two facilities recognized by the World Economic Forum as part of the Global Lighthouse Network for advanced 4IR innovations.
  • As a global company, we believe the most effective way to embrace the diversity of our customers and communities is to mirror it from within.
  • We believe the fusion of various perspectives results in the best outcomes for our employees, our company, our customers, and the world around us.
Apply directly at Sandisk →Create a free account for alerts like thisView Sandisk immigration profile

This listing is sourced directly from Sandisk's careers page and normalized into a canonical job model.