• Develop and execute a global legal strategy for privacy and data security that aligns with SentinelOne’s rapid growth and product innovation. • Work cross-functionally across the organization, supporting the Commercial team on the privacy aspects of both inbound and outbound work while collaborating closely with the Legal Product team. • Provide expert guidance on a wide range of privacy, security, and compliance matters, ensuring that legal requirements are integrated seamlessly into our technical operations. • Lead the legal side of incident management and response, providing strategic advice and legal guidance on all types of incidents to ensure the company navigates complex security events with precision and speed.

__Own The Role:__112Cyber (formerly SP6 Cyber Risk & Compliance) is looking for a Compliance SME wanting to take the next step in their career! In this role, you will assist organizations in solidifying and strengthening their security posture while also conducting assessments for those pursuing certification. Joining our Compliance team, you will see your impact across the company as you take ownership over customer projects and advising our platform team on the different compliance rules.    From there, you will be supporting Defense Industrial Base (DiB) companies to ensure they are CMMC and/or NIST 800-171 compliant. You will accomplish this through providing pre-audit readiness and GAP assessments, plans of action and milestones (POA&M) support, Compliance as a Service (CaaS), and official C3PAO assessments.   __**How You’ll Drive Success:**____Advisory Services__ - Leading cybersecurity gap assessments aligned with NIST SP 800-171 and Cybersecurity Maturity Model Certification (CMMC). - Supporting the day-to-day activities of engagements for external clients, as a contributing member of 112Cyber’s customer-facing Cyber Risk & Compliance practice. - Assist external customers in their FedRAMP, DFARS 7012, CMMC, and NIST 800-171 compliance initiatives.  - Applying cyber compliance / risk management knowledge, control principles and technical knowledge across cyber risk and compliance engagements.   - Consulting with end clients to gather requirements and understand our clients' key business and security challenges. Working with team members to advise on practical and cost-effective solutions to help mitigate our clients’ cybersecurity risks and challenges. - In depth knowledge of relevant security regulatory compliance requirements and translating those into business processes and security controls to enhance and support client’s compliance and audit capabilities.   - Articulating and defending IT controls testing approach and performing test of design and operating effectiveness. - Develop and deliver training to internal teams and customers.   - Establishing and maintaining effective working relationships with colleagues, existing clients, and prospective client organizations.  - Supporting the ASCERA product team and advising them on NIST continuous monitoring software. __C3PAO Assessments__ - Conducting formal assessments of organizations’ cybersecurity practices using the CMMC assessment process (CAP). - Collaborate with client organizations to plan assessments, develop assessment schedules, and ensure readiness - Assess the effectiveness of security practices and ensure they align with the CMMC practices and processes. - Interview key personnel within the organization to understand how cybersecurity practices are implemented and maintained. - Evaluate sufficiency and adequacy of evidence to verify implementation. - Maintain an objective and unbiased stance during the assessment process, ensuring that conclusions are based on facts and evidence. - Ensure that all documentation is properly prepared for submission to eMASS if the organization is seeking certification.

• Develop tooling to generate and automate regulatory benchmark guidance • AI driven tooling (MCP servers/toolsets) that integrates with IDEs (Claude Code/Cursor) • Understanding Compliance Operator resources, like CustomRules and Profiles • Implementing checks using multiple scanning technologies, like OpenSCAP and CEL expressions • Developing and maintaining operators that improve OpenShift security posture • Contribute to industry benchmark regulatory bodies where applicable (CIS)

• Cultivate and maintain strong relationships with business stakeholders. • Conduct threat intelligence for potential incoming target acquisition companies. • Lead security and privacy due diligence process for target acquisitions, including technical architecture reviews, penetration tests, vulnerability assessments, security and privacy evaluations, risk identification and risk prioritization. • Develop the security strategy for each incoming M&A; documenting key details about the target acquisition, technology stack, current security and privacy posture, third-party due diligence results, etc. ahead of deal close to ensure that all members across SPA teams and relevant stakeholders are up-to-speed and understand the acquisition’s security posture. • Partner closely with our corporate IT M&A counterparts throughout the acquisition due diligence process. • Partner with the the M&A Security TPM to hand off active onboarding integration activities to ensure a smooth transition for the target acquisition personnel. • Manage long term security and privacy risk management for the subsidiary after active onboarding completes, where applicable; ensuring that critical and high risk security risks are prioritized and mitigated/resolved. • Evaluate risks within the acquisition, advise the business on prioritization, and recommend treatment strategies. • Develop metrics and reporting in partnership with the M&A Security TPM to communicate security and privacy M&A to SPA and other key stakeholders. • Serve as the subject matter expert for the target on security, privacy, risk, and compliance.