{ "count" : 34276, "data" : [ { "id" : "6a307671f292fd229c019d69", "title" : "Information Security Analyst", "company" : "Billtrust", "industry" : "FinTech", "salary" : { "min" : 1200000.0, "max" : 2000000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Information Security Analyst in India, adjusted for mid-seniority, FinTech industry, and company size." }, "location" : "India", "locations" : [ "India" ], "certifications" : [ "CompTIA Security+", "CISA", "CISSP", "ISO 27001 Lead Implementer" ], "timestamp" : "2026-06-16T10:56:45.318", "fingerprint" : "eeacff322dd139ae2da3f408ae64f9e900c2547981be40941000b7701261f38c", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.billtrust.com/careers/job-openings/?gh_jid=7719276003", "externalId" : "7719276003", "industryFunction" : { }, "structuredLocations" : [ { "country" : "India", "continent" : "as", "workMode" : "onsite" } ], "locationText" : "India", "minimumEducation" : "Bachelor's", "professionalSkills" : [ "Risk assessment" ], "majorSkills" : "Information Security, Compliance, Risk Management", "majorSkillsList" : [ "Information Security", "Compliance", "Risk Management" ], "coreResponsibilities" : "Support compliance and assurance programs, Contribute to risk assessment activities, Protect systems powering business payments platform, Assist with PCI DSS assessments, Support HIPAA BAA obligations, Document findings clearly and concisely", "teamCollaboration" : "Work closely with cross-functional teams", "domainKnowledge" : "Financial reporting controls; PCI DSS; HIPAA BAA obligations; ISMS documentation", "domainList" : [ "financial-reporting-controls", "pci-dss", "hipaa-baa-obligations", "isms-documentation" ], "domainSpecificKnowledge" : [ "Financial reporting controls", "PCI DSS", "HIPAA BAA obligations", "ISMS documentation" ], "documentationSkills" : "ISMS documentation; Control evidence", "qualificationsBasic" : "Bachelor's degree in Information Systems, Computer Science, Business, or a related field — or equivalent experience", "qualificationsPreferred" : "Exposure to GRC tools or audit management platforms, Experience supporting external audit engagements (SOC, PCI QSA, ISO certification body), Relevant certification in progress or obtained (e. g. , CompTIA Security+, CISA, CISSP, ISO 27001 Lead Implementer), Basic familiarity with vulnerability assessment tools or security monitoring platforms", "remoteFriendly" : false, "rawDescription" : "Who We Are Finance leaders choose Billtrust to get paid faster, control costs, and maximize customer satisfaction. As the leader in B2B accounts receivable workflow and payment software, we provide the world’s leading brands with AI-powered solutions across the full AR lifecycle—from invoice presentment and payment processing to cash application and collections. With over 2,600 global customers, more than $1 trillion in invoice dollars processed, and a proprietary network of 13 million buyers, Billtrust delivers business value through deep industry expertise and a culture relentlessly focused on meaningful customer outcomes. We’re an AI-first company, not just in what we build for our customers, but in how we work. Across every function, our teams use AI tools daily to work faster, make better decisions, and deliver higher-quality outcomes. We hire exceptional people, give them cutting-edge AI capabilities, and measure success by the impact they create. If you want to do the best work of your career at the frontier of AI and fintech, Billtrust is the place to do it. Our Values Customers We relentlessly increase value for customer and do the right thing for them. Action We make ‘thoughtfully fast’ decisions, act quickly, cut through red tape, deliver progress not perfection, take ownership and accountability. Team Spirit We put the team ahead of ourselves, foster trust and respect, collaborate with passion, despise toxic politics, value our differences, and celebrate together. Innovation We challenge the status quo, experiment thoughtfully, and are novel and brilliant in what we create. Excellence We love to win, but we hate losing even more. We aspire to be the best and take pride in our work. When we fall short, we own it and come back stronger. Information Security Analyst Information Security Analyst will support Billtrust's compliance and assurance programs across our key security frameworks, contribute to risk assessment activities, and help protect the systems that power our business payments platform. You'll work closely with cross-functional teams and report to the Information Security Manager. Assurance Frameworks This role directly supports Billtrust's compliance posture across the following frameworks: Framework Scope SOC 1 / ISAE 3402 Financial reporting controls maintain ISMS documentation and control evidence Assist with PCI DSS assessments, including scope validation, control testing, and QSA coordination Support HIPAA BAA obligations, including risk analysis activities and documentation of safeguards Risk ability to document findings clearly and concisely Bachelor's degree in Information Systems, Computer Science, Business, or a related field — or equivalent experience Preferred: Exposure to GRC tools or audit management platforms Experience supporting external audit engagements (SOC, PCI QSA, ISO certification body) Relevant certification in progress or obtained (e.g., CompTIA Security+, CISA, CISSP, ISO 27001 Lead Implementer) Basic familiarity with vulnerability assessment tools or security monitoring platforms", "summaryDescription" : "Information Security Analyst at Billtrust. Skills: Information Security, Compliance, Risk Management. Support compliance and assurance programs. Contribute to risk assessment activities", "postedDate" : "2026-06-16T01:21:47.894", "createdAt" : "2026-06-16T01:21:47.894", "lastUpdated" : "2026-06-16T10:56:45.318", "ingestTimestamp" : "2026-06-16T01:21:47.894", "mongoId" : "6a307671f292fd229c019d69", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Information Security", "Compliance", "Risk Management", "Risk assessment", "Financial reporting controls", "PCI DSS", "HIPAA BAA obligations", "ISMS documentation", "CompTIA Security+", "CISA", "CISSP", "ISO 27001 Lead Implementer" ], "skillCount" : 12, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 1308.0516, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305739f292fd229cf35bd6", "title" : "Senior Director, Information Security & Compliance", "company" : "Beeline Medicines", "industry" : "Biotech", "salary" : { "min" : 245000.0, "max" : 355000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Director, Information Security & Compliance in the US Biotech industry, adjusted for seniority and company size." }, "location" : "United States", "locations" : [ "United States" ], "timestamp" : "2026-06-16T08:47:41.814", "fingerprint" : "013ea186fd91a044d78c3a5e6a4ef0ae9f4939348a09530c3f27db232071a1ad", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/beelinemedicines/jobs/4286176009", "externalId" : "4286176009", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "hybrid" } ], "locationText" : "United States", "experienceMinYears" : 12, "experienceLevel" : "Director", "remoteFriendly" : true, "rawDescription" : "About Beeline Medicines: Beeline Medicines is a clinical‑stage biotechnology company focused on developing and delivering category-leading precision therapies to transform the lives of people living with autoimmune and inflammatory diseases. With a portfolio of potential best-in-class and first-in-disease therapeutic candidates that directly target key pathways governing dysregulated immunological and inflammatory responses, the Company is developing medicines that have the opportunity to provide durable, life-changing impact. Led by an established executive team and backed by world-class life science investors, each day Beeline Medicines is determined to bring the scientific rigor and operational excellence to get to what matters for patients – realizing a world where people with immune-mediated diseases can live life fully. Job Summary: The Senior Director, Information Security the incumbent will be expected to travel to Beeline Medicines’ offices on a periodic basis to support in-person collaboration, team engagement, and business operations. The frequency and scheduling of such visits will be determined at the company's discretion based on business need. Essential Duties and Responsibilities: Security Governance equivalent professional experience accepted. 12+ years of progressive information security experience with at least 5 years in a security leadership role (Manager, Director, or equivalent) preferred. Demonstrated experience building or significantly maturing an information security program, including policy development, risk management, and compliance framework implementation. Experience with security frameworks: NIST CSF, NIST SP 800-53, ISO 27001, or equivalent. Direct experience with SOX IT General Controls — either implementing ITGCs for IPO readiness or supporting ongoing SOX compliance at a public company. Strong working knowledge of Microsoft 365 security controls, including Entra ID, Conditional Access, Defender, and Purview. Demonstrated experience building or significantly maturing an information security program, including policy development, risk management, and compliance framework implementation. Experience managing managed security service providers (MDR, MSSP, or similar) and coordinating external security assessments (penetration testing, controls testing, risk assessments). Demonstrated experience building or significantly maturing an information security program, including policy development, risk management, and compliance framework implementation Independent judgment and self-direction — this role operates as a solo security practitioner at a small company and must prioritize effectively without day-to-day supervision. Strong written and verbal communication with the ability to translate security risks into business terms for executive and non-technical audiences. Salary Range: The expected salary range for this position varies by location and will be communicated based on the country or region in which the selected candidate is hired. Actual pay will be determined based on experience, qualifications, location, and other job-related factors permitted by applicable local law. A discretionary annual bonus and long-term incentive award (e.g., equity) may be available based on individual and Company performance. Salary Range $264,000—$285,000 USD Benefits: We offer a comprehensive benefits package tailored to the country and region in which you are hired, in compliance with local laws and practices. Benefits may include, but are not limited to: Competitive health and wellness coverage (structure and premiums vary by country) Paid time off, public holidays, and additional leave entitlements in accordance with local requirements Flexible work arrangements / hybrid schedule Benefits vary by location and are subject to eligibility requirements, local regulations, and plan terms. Specific benefit details applicable to your country or region will be provided during the offer process. Equal Employment Opportunity: Beeline Medicines is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, disability, age, protected veteran status, or any other characteristic protected by applicable federal, state, or local law. Reasonable Accommodation: If you require a reasonable accommodation to participate in the application or interview process, please contact careers@beelinemedicines.com to request an accommodation. We are committed to providing equal access to all candidates. Privacy Upon submission of this form I understand that Beeline Medicines is based in the United States and personal data submitted in the form will be transferred and accessed in the U.S., Information about Beeline Medicines privacy practices can be found at Privacy Policy - Beeline Medicines", "summaryDescription" : "Senior Director, Information Security & Compliance at Beeline Medicines", "postedDate" : "2026-06-15T23:20:59.512", "createdAt" : "2026-06-15T23:20:59.512", "lastUpdated" : "2026-06-16T08:47:41.814", "ingestTimestamp" : "2026-06-15T23:20:59.512", "mongoId" : "6a305739f292fd229cf35bd6", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 245000, "salaryAnnualMax" : 355000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.7777778, "_score" : 1082.2673, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Biotech", "llmIndustryConfidence" : 0.98 }, { "id" : "6a305b69f292fd229cf5d702", "title" : "Sr Security Compliance Analyst", "company" : "Hasbro", "salary" : { "min" : 109500.0, "max" : 164300.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "United States", "locations" : [ "United States" ], "timestamp" : "2026-06-16T08:16:19.982", "fingerprint" : "1122c8e376763cd49437a3845ede22b10f107eab6fae64a2c0f31610eaf910e5", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/hasbro/jobs/4249813009", "externalId" : "4249813009", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : true, "rawDescription" : "We take play seriously. We’re looking for curious adventurers ready to find their party, fueled by imagination and drive to build what’s never been built before. At Hasbro and Wizards of the Coast, you’ll collaborate with passionate teams to reimagine our iconic brands and create experiences that spark joy, connection, and community through the magic of play. This is your chance to shape legendary play that lasts a lifetime. At Hasbro, our mission is to inspire imagination in children and adults alike. We believe the best experiences come from people who love what they do, in an environment that values them and their ideas. We ensure that everyone has the opportunity to contribute to our collective success, whatever their role. As a leading global play and entertainment company, we help enrich a catalog of games and toys that has inspired generations. You get to play your part as a valued member of an open and dedicated team within a magical world of play and imagination. The Sr Security and Compliance Analyst plays a key role in safeguarding Hasbro's technology landscape by ensuring our security controls are practical, measurable, and aligned with regulatory requirements. This role focuses on improving how compliance is managed, tracked, and reported through efficient processes and data informed insight. Primary Responsibilities Develop and maintain information security policies and standards aligned to frameworks such as ISO 27001, NIST, SOX, GDPR, and HIPAA, ensuring requirements are clearly understood and actionable. Translate regulatory requirements into practical, measurable controls and work with process owners to implement and sustain them effectively. Improve and streamline compliance processes by collaborating with system owners and team members to automate evidence collection, control tracking, and reporting where possible. Support internal and external audits by coordinating documentation across teams and demonstrating control effectiveness through clear, organized evidence. Develop and lead phishing simulation campaigns and collaborate with leaders to address behavioral risk trends and strengthen awareness. Develop targeted security awareness content tailored to different employee audiences to promote a strong and balanced security culture. Perform vendor risk assessments and broader security risk analyses in coordination with business and technology teams. Build clear, executive ready reports and dashboards that provide relevant insight into compliance posture and human risk trends. Identify and implement AI-enabled automation opportunities to streamline audit, compliance, and control validation processes. What You Will Bring Degree in Computer Science, Information Systems, or related field or equivalent experience. 5 or more years of experience in information security, IT compliance, or risk management. Strong working knowledge of regulatory standards including ISO 27001, the NIST Cybersecurity Framework, SOX, GDPR, and HIPAA. Experience developing and maintaining security policies and translating requirements into operational controls. Hands on experience running phishing simulations and analyzing awareness metrics. Ability to interpret data and identify trends that inform risk decisions. Experience improving or automating recurring compliance or audit processes preferred. Strong written and verbal communication skills with the ability to create concise, executive ready summaries. Collaborative approach and ability to work effectively across technical and non technical teams. Hasbro is committed to equality of opportunity in all aspects of employment. We are committed to making all employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, or any other legally protected status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation. The pay transparency range for this role is listed below. The hiring range will vary based on factors such as experience, skills, location and market conditions. Additionally, employees may be eligible for annual and long-term incentives as part of their overall compensation package. Pay Range $109,500—$164,300 USD Employees may be eligible for annual and long-term incentives as part of their overall compensation package, depending on role, location, and eligibility. Benefits and programs may include: Health & Wellness Time Off to Recharge Financial Well-being Life & Family Support Volunteer and Community Initiatives Learning & Development Exclusive Perks Please review our Applicant Privacy Notice to learn how we collect, use, and protect your personal information in connection with the application process.", "summaryDescription" : "Sr Security Compliance Analyst at Hasbro", "postedDate" : "2026-06-15T23:22:57.827", "createdAt" : "2026-06-15T23:22:57.827", "lastUpdated" : "2026-06-16T08:16:19.982", "ingestTimestamp" : "2026-06-15T23:22:57.827", "mongoId" : "6a305b69f292fd229cf5d702", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 109500, "salaryAnnualMax" : 164300, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1051.0491, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Entertainment", "llmIndustryConfidence" : 0.95 }, { "id" : "6a186a5b58b93c861e19a3e7", "title" : "Information Security Analyst", "company" : "Atlas Technica", "industry" : "Cybersecurity", "salary" : { "min" : 750000.0, "max" : 1200000.0, "currency" : "UAH", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Information Security Analyst in Ukraine, adjusted for mid-seniority and the technology industry." }, "location" : "Kyiv, UA", "locations" : [ "Kyiv", "UA" ], "timestamp" : "2026-06-16T00:31:55.002", "fingerprint" : "52cba4cb4f15e2d29f684e3375134effb5b7f002a312f984cd074a7cc489f42e", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://atlas-technica.breezy.hr/p/d65fc5dd4760-information-security-analyst", "externalId" : "d65fc5dd4760", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Ukraine", "continent" : "as", "workMode" : "remote" } ], "locationText" : "Ukraine", "employmentType" : "FULL_TIME", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Position Name: Information Security Analyst Reports to: Chief Information Security Officer Location/Type: Remote (UA Candidates only) Atlas Technica", "summaryDescription" : "Information Security Analyst at Atlas Technica", "createdAt" : "2026-06-14T18:41:47.041", "lastUpdated" : "2026-06-16T00:31:55.002", "ingestTimestamp" : "2026-06-14T18:41:47.041", "mongoId" : "6a186a5b58b93c861e19a3e7", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.6666667, "_score" : 1047.8912, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca05874d8ee00a09a1fa3", "title" : "Information Security Compliance Auditor | Mid", "company" : "NORD SECURITY", "industry" : "Nord Security", "salary" : { "min" : 2200.0, "max" : 4700.0, "currency" : "EUR", "frequency" : "Yearly" }, "location" : "Vilnius", "locations" : [ "Vilnius", "Kaunas" ], "certifications" : [ "ISO 27001 Lead Auditor", "CISA", "CRISC", "CISSP" ], "timestamp" : "2026-06-15T09:38:52.897", "fingerprint" : "59437a97c518563864e270bc9598eb2e77e857d0449712bc3b7ecd77ba3d3bd7", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/nord-security/a4375804-7f54-4000-9420-7191dce29e59/application", "externalId" : "a4375804-7f54-4000-9420-7191dce29e59", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Vilnius", "country" : "Lithuania", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "54.6870458,25.2829111" } ], "locationText" : "Vilnius, Lithuania", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Information security", "professionalSkills" : [ "Risk-based guidance", "Stakeholder management", "Control expectations" ], "hardSkillsList" : [ "Internal audits", "Audit reports", "Corrective action plans", "Control frameworks" ], "hardSkills" : [ { "name" : "Internal audits", "level" : "intermediate" }, { "name" : "Audit reports", "level" : "intermediate" }, { "name" : "Corrective action plans", "level" : "intermediate" }, { "name" : "Control frameworks", "level" : "intermediate" } ], "majorSkills" : "Information security, Compliance, Risk management", "majorSkillsList" : [ "Information security", "Compliance", "Risk management" ], "coreResponsibilities" : "Plan internal audits, Execute internal audits, Report on internal audits, Evaluate design of security controls, Evaluate effectiveness of security controls, Prepare audit reports, Document audit findings, Assess audit risks, Provide remediation recommendations, Track audit findings, Track corrective action plans, Support control owners, Monitor regulatory changes, Assess impact of regulatory changes, Contribute to audit methodologies, Contribute to compliance programs, Contribute to control frameworks, Assist teams preparing for external audits, Assist teams preparing for certifications, Assist teams preparing for assessments, Promote security culture, Promote compliance culture, Promote continuous improvement culture", "teamCollaboration" : "Cross-functional teams; Engineering teams; Infrastructure teams; Product teams; Legal teams; Security teams", "domainKnowledge" : "ISO 27001; ISO 42001; SOC 2; HIPAA; PCI DSS; NIST CSF; SaaS; Cybersecurity; Fintech; Regulated industries", "domainList" : [ "iso-27001", "iso-42001", "soc-2", "hipaa", "pci-dss", "nist-csf", "saas", "cybersecurity", "fintech", "regulated-industries" ], "domainSpecificKnowledge" : [ "ISO 27001", "ISO 42001", "SOC 2", "HIPAA", "PCI DSS", "NIST CSF", "SaaS", "Cybersecurity", "Fintech", "Regulated industries" ], "communicationSkills" : "Excellent communication", "documentationSkills" : "Document findings", "continuousLearning" : "Training programs; Mentorship; Career-switch opportunities", "problemSolvingSkills" : "Analytical skills", "outcomesObjectives" : "Improve compliance maturity; Improve control environment maturity; Maintain trust with customers; Maintain trust with partners; Maintain trust with regulators; Drive continuous improvement; Influence security practices; Influence compliance practices", "qualificationsBasic" : "Previous experience in audit, Previous experience in compliance, Previous experience in governance, Previous experience in risk management, Previous experience in information security, Good understanding of information security principles, Familiarity with compliance standards", "qualificationsPreferred" : "Experience participating in certification audits, Experience participating in attestation audits", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "AT NORD SECURITY, WE’RE CREATING A SAFER CYBER FUTURE. We help people and businesses take back control of their online security, privacy, and data. From VPNs to password managers, threat intelligence to eSIMs for travel—our teams turn complex problems into solutions trusted by millions worldwide. Life is online. In this role, you’ll help people own it. ABOUT THE ROLE As an Information Security Compliance Auditor, you will play a key role in strengthening our security and compliance posture. You will lead internal audits across multiple regulatory and industry frameworks, helping ensure that security controls are effectively designed, implemented, and operating as intended. Working closely with stakeholders across Engineering, Infrastructure, Product, Legal, and Security teams, you will assess compliance readiness, identify improvement opportunities, and support continuous enhancement of our governance, risk, and compliance programs. MAIN RESPONSIBILITIES - Plan, execute, and report on internal audits against security and compliance frameworks, including ISO 27001, ISO 42001, SOC 2, HIPAA, PCI DSS, and other applicable standards. - Evaluate the design and effectiveness of security controls, policies, processes, and operational practices. - Prepare detailed audit reports, document findings, assess risks, and provide practical remediation recommendations. - Track audit findings and corrective action plans, ensuring timely resolution and evidence collection. - Support control owners in understanding compliance requirements and implementing sustainable solutions. - Monitor changes in regulatory and industry requirements and assess their impact on the organization. - Contribute to the development and continuous improvement of internal audit methodologies, compliance programs, and control frameworks. - Assist teams in preparing for external audits, certifications, and customer security assessments. - Promote a culture of security, compliance, and continuous improvement across the organization. CORE REQUIREMENTS - Previous experience in internal audit, compliance, governance, risk management, or information security. - Good understanding of information security principles and common control frameworks. - Familiarity with one or more compliance standards such as ISO 27001, SOC 2, HIPAA, PCI DSS, NIST CSF, or similar. - Business-first mindset, with the ability to act as a trusted enabler rather than an enforcer, providing pragmatic, risk-based guidance that supports the business in achieving compliant and sustainable growth. - Strong analytical skills and attention to detail. - Excellent communication and stakeholder management skills. - Ability to interpret requirements and translate them into practical control expectations. - Capability to work independently while effectively collaborating with cross-functional teams. - Strong organizational skills and ability to manage multiple audit engagements simultaneously. - Curiosity and willingness to learn technical concepts and security processes when required. NICE TO HAVE - Experience participating in certification or attestation audits. - Professional certifications such as ISO 27001 Lead Auditor, CISA, CRISC, CISSP, or similar. - Experience working in SaaS, cybersecurity, fintech, or highly regulated industries. WHAT YOU'LL ACHIEVE - Improve the effectiveness and maturity of our compliance and control environment. - Help maintain trust with customers, partners, and regulators. - Drive continuous improvement across security, governance, and risk management processes. - Influence security and compliance practices across a fast-growing technology organization WHAT WE OFFER Innovate with industry leaders Work alongside global experts to build world-leading cybersecurity tools, impacting millions of users around the world. Learn & grow Boost your skills via our extensive training programs (online and offline) & other resources. Benefit from mentorship and career-switch opportunities to grow within the company. Work in a next-gen Cyber City office Thrive in our bustling office, featuring ergonomic workspaces, modern meeting rooms, engaging events, and specialty coffee to fuel your day. Hybrid work Enjoy the flexibility with 3 office days and working from home for the remaining 2. Work from anywhere Recharge with a change of scenery – choose work from any location when you feel a need to power your creativity and drive. Physical well-being Boost your health with free-of-charge 24/7 gym access, onsite and online workouts, and consultations led by in-house Physical Well-Being experts. Mental & emotional health Nurture your mind with free psychologist consultations, dedicated mental health events, and premium access to top-rated wellness apps like Calm, Headspace, and Mindletic. Premium healthcare Receive private health insurance giving you peace of mind for your health needs. Extra days off Enjoy additional vacation days off as you grow with us. Plus, get extra days for sick leave, special occasions, or parenting needs. Joyful moments – special treats Celebrate life’s big moments with special gifts from us on your birthday, anniversary, and other major events, such as weddings or the arrival of a new family member. Company events & team-building Experience iconic Nord Security celebrations, team-buildings, and knowledge-sharing events, nurturing bonds that fuel our success. Workation Embark on a legendary company getaway abroad, filled with exciting activities, live concerts, engaging workshops, and epic time together. Kindly refer to our Privacy Notice for Recruitment Candidates https://drive.google.com/file/d/1b2tV684_SYV1jQ4kuf91cnzrRBk3ef-5/view for comprehensive information regarding our data handling procedures throughout recruitment processes. We expect all candidates to provide accurate and complete information during the recruitment process. While limited use of AI tools to refine application materials is acceptable, candidates remain fully responsible for ensuring that their submissions reflect their own qualifications, skills, and experience. Any failure to do so may negatively affect participation in the recruitment process. If broader AI assistance is allowed for a particular role or stage, we’ll let you know in advance. By submitting your application, you acknowledge that it may be processed using automated tools for evaluation purposes. As part of our recruitment process, we may use an AI-based application review tool to help assess applications based on skills and experience relevant to the role. This technology is used to support - not replace - human decision-making, and every application is ultimately reviewed by a recruiter. If you would like more information about how AI is used in this process or wish to exercise your rights under applicable data privacy laws, please contact us at privacy@nordaccount.com. Should you prefer to opt out of the automated evaluation, please submit your application directly to career@nordsec.com.", "summaryDescription" : "Information Security Compliance Auditor | Mid at NORD SECURITY. Skills: Information security, Compliance, Risk management. Plan internal audits. Execute internal audits", "createdAt" : "2026-06-14T06:41:37.878", "lastUpdated" : "2026-06-15T09:38:52.897", "ingestTimestamp" : "2026-06-14T06:41:37.878", "mongoId" : "6a2ca05874d8ee00a09a1fa3", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "<30k", "hasSalary" : false, "allSkills" : [ "Internal audits", "Audit reports", "Corrective action plans", "Control frameworks", "Information security", "Compliance", "Risk management", "Risk-based guidance", "Stakeholder management", "Control expectations", "ISO 27001", "ISO 42001", "SOC 2", "HIPAA", "PCI DSS", "NIST CSF", "SaaS", "Cybersecurity", "Fintech", "Regulated industries", "ISO 27001 Lead Auditor", "CISA", "CRISC", "CISSP" ], "skillCount" : 24, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 1034.2162, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c6c3174d8ee00a09176d2", "title" : "Information Security & Compliance Officer", "company" : "Herotel", "industry" : "Cybersecurity", "salary" : { "min" : 550000.0, "max" : 850000.0, "currency" : "ZAR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Mid-level Information Security & Compliance Officer in the Technology industry in Plattekloof, South Africa, adjusted for company size and full-time employment." }, "location" : "Plattekloof, ZA", "locations" : [ "Plattekloof", "ZA" ], "timestamp" : "2026-06-16T02:25:52.431", "fingerprint" : "d132db59283ed0e6b6644dbc877ef8326399220a31df34044b874d29a3f4c08a", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://herotel-5f74feffb7e1.breezy.hr/p/8fdeb6bfb377-information-security-compliance-officer", "externalId" : "8fdeb6bfb377", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Plattekloof", "country" : "South Africa", "continent" : "af", "source" : "llm", "workMode" : "onsite", "geo" : "-33.8775000,18.5855556" } ], "locationText" : "Plattekloof, South Africa", "employmentType" : "FULL_TIME", "coreResponsibilities" : "Take ownership of safeguarding Herotel’s digital environment", "rawDescription" : "Are you passionate about cybersecurity, threat detection, and protecting critical business systems? Join our IT team as an Information Security & Compliance Officer in Plattekloof and take ownership of safeguarding Herotel’s digital environment across our national footprint. The key purpose of", "summaryDescription" : "Information Security & Compliance Officer at Herotel. Take ownership of safeguarding Herotel’s digital environment", "createdAt" : "2026-06-14T18:55:42.519", "lastUpdated" : "2026-06-16T02:25:52.431", "ingestTimestamp" : "2026-06-14T18:55:42.519", "mongoId" : "6a2c6c3174d8ee00a09176d2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.6666667, "_score" : 1026.0742, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "69f8950e4c40e2acd1fa4a70", "title" : "Cybersecurity Analyst", "company" : "Texas Workforce Commission", "industry" : "Government", "salary" : { "max" : 6982.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "826970", "locations" : [ "826970", "
Austin:1117 Trinity St (320TX-4002)
1117 Trinity St
Austin, 78701-1919

" ], "timestamp" : "2026-06-15T09:42:30.940", "fingerprint" : "79d57d066c1e9f1688bb80c121b3a094589b0455ca67250a444d6c53761b762b", "source" : "taleo", "language" : "en", "applyUrl" : "https://aa270.taleo.net/careersection/ex/jobdetail.ftl?job=34795", "externalId" : "34795", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Cybersecurity analysis, Information security analysis, Digital forensics, Vulnerability scanning, Forensic analysis, Data recovery, System monitoring", "professionalSkills" : [ "Risk assessment", "Independent judgment" ], "hardSkillsList" : [ "Account permissions review", "Security violation review", "Incident detection", "Incident analysis", "Incident prevention", "Network vulnerability scans", "Application vulnerability scans", "System monitoring", "Cybersecurity alert analysis" ], "softSkillsList" : [ "Critical thinking" ], "hardSkills" : [ { "name" : "Account permissions review", "level" : "intermediate" }, { "name" : "Security violation review", "level" : "intermediate" }, { "name" : "Incident detection", "level" : "intermediate" }, { "name" : "Incident analysis", "level" : "intermediate" }, { "name" : "Incident prevention", "level" : "intermediate" }, { "name" : "Network vulnerability scans", "level" : "intermediate" }, { "name" : "Application vulnerability scans", "level" : "intermediate" }, { "name" : "System monitoring", "level" : "intermediate" }, { "name" : "Cybersecurity alert analysis", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Critical thinking" } ], "majorSkills" : "Cybersecurity analysis, Information security, Digital forensics", "majorSkillsList" : [ "Cybersecurity analysis", "Information security", "Digital forensics" ], "coreResponsibilities" : "Perform technical risk assessments, Review account permissions, Review security violations, Conduct cybersecurity incident detection, Conduct cybersecurity incident analysis, Conduct cybersecurity incident prevention, Perform vulnerability scans, Identify network weaknesses, Identify application weaknesses, Execute forensic analysis, Recover data using tools, Monitor systems, Monitor procedures, Protect data systems, Analyze cybersecurity alerts", "domainKnowledge" : "Information security; Cybersecurity", "domainList" : [ "information-security", "cybersecurity" ], "domainSpecificKnowledge" : [ "Information security", "Cybersecurity" ], "toolProficiency" : [ "Assessment tools" ], "continuousLearning" : "Training opportunities; Development opportunities", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Must be Texas resident, Willing to relocate to Texas", "qualificationsBasic" : "Four years cybersecurity analysis experience, Four years information security analysis experience, Four years digital forensics experience, Relevant academic credits may apply, Acceptance into TWC Internship, Acceptance into TWC Apprenticeship", "qualificationsPreferred" : "High interest in cybersecurity", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "WHO WE ARE: Texas Workforce Commission connects people with careers across the state. While we are based in Austin on the north lawn of the Texas State Capitol, we have offices statewide. We're a Family Friendly Certified Workplace with great work-life balance, competitive salaries, extensive opportunities for training and development, and fantastic benefits. This position is located at 1117 Trinity Street, Austin, Texas in the Chief Info Security Officer department. TWC is not considering applications from individuals who require sponsorship for an employment visa, including those currently on student or postgraduate visas. You must be a Texas resident to work for the Texas Workforce Commission or willing to relocate to Texas. WHO YOU ARE: A person with technical experience and experience or a high interest in cybersecurity WHAT YOU WILL DO: The Cybersecurity Analyst I performs moderately complex (journey-level) information security and cybersecurity analysis work. Works under general supervision, with moderate latitude for the use of initiative and independent judgment. YOU WILL BE TRUSTED TO: -Perform technical risk assessments and reviews of account permissions and security violations. -Conduct cybersecurity incident detection, analysis, and prevention. -Perform vulnerability scans of networks and applications to identify weaknesses. -Execute forensic analysis and recovery of data using assessment tools. -Monitor systems and procedures to protect data systems from unauthorized access. -Analyze cybersecurity alerts from tools, network devices, and information systems. - Perform other duties as assigned. YOU QUALIFY WITH: -Four years of full-time experience in cybersecurity analysis, information security analysis, or digital forensics. -Relevant academic credits may be applied toward experience qualifications for this position. -Acceptance into a TWC Internship or TWC Apprenticeship will satisfy the minimum qualifications. YOU ARE A GREAT FIT WITH: You are ready to learn and use critical thinking skills to succeed. YOU GAIN: - A Family Friendly Certified Workplace. - Competitive salary: $6,982.50/month - Defined Retirement Benefit Plan - Optional 401(k) and 457 accounts - Medical Insurance - Paid time off, including time for vacation, sick and family care leave - Additional benefits for active employees can be found at https://www.ers.texas.gov/Active-Employees/Health-Benefits. VETERANS: Use your military skills to qualify for this position or other jobs! Go to www.texasskillstowork.com to translate your military work experience and training courses into civilian job terms, qualifications, and skill sets. Also, you can compare this position to military occupations (MOS) at the Texas State Auditor's Office by pasting this link into your browser: https://hr.sao.texas.gov/Compensation/MilitaryCrosswalk/MOSC_InformationTechnology.pdf HOW TO APPLY: To be considered, please complete a State of Texas Application for Employment and apply online at www.workintexas.com or on Taleo ( Job Search ). TWC is not considering applications from individuals who require sponsorship for an employment visa, including those currently on student or postgraduate visas. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire. A position utilizing this classification will be designated as security sensitive according to the Texas Labor Code, Section 301.042. United States-Texas-Austin", "summaryDescription" : "Cybersecurity Analyst at Texas Workforce Commission. Skills: Cybersecurity analysis, Information security, Digital forensics. Perform technical risk assessments. Review account permissions", "createdAt" : "2026-06-14T07:31:02.477", "lastUpdated" : "2026-06-15T09:42:30.940", "ingestTimestamp" : "2026-06-14T07:31:02.477", "mongoId" : "69f8950e4c40e2acd1fa4a70", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMax" : 83784, "hasSalary" : false, "allSkills" : [ "Account permissions review", "Security violation review", "Incident detection", "Incident analysis", "Incident prevention", "Network vulnerability scans", "Application vulnerability scans", "System monitoring", "Cybersecurity alert analysis", "Critical thinking", "Cybersecurity analysis", "Information security", "Digital forensics", "Risk assessment", "Independent judgment", "Cybersecurity", "Assessment tools" ], "skillCount" : 17, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 1013.2353, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305b76f292fd229cf5e059", "title" : "Associate Director, Information Security Risk", "company" : "EQT Group", "industry" : "FinTech", "salary" : { "min" : 360000.0, "max" : 540000.0, "currency" : "PLN", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for an Associate Director, Information Security Risk in Financial Services in Warsaw, Poland, adjusted for director-level seniority and full-time employment." }, "location" : "Warszawa, Masovian Voivodeship, Poland", "locations" : [ "Warszawa", "Masovian Voivodeship", "Poland" ], "certifications" : [ "CISM", "CRISC", "CISSP" ], "timestamp" : "2026-06-16T08:06:33.159", "fingerprint" : "952a1d4d8a31c3e333437b382c388dfa4b1e6fbad80af07de3bcbf4abb568f95", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/eqtpartners/jobs/4897613101", "externalId" : "4897613101", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Warszawa", "state" : "Masovian Voivodeship", "country" : "Poland", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "52.2333742,21.0711489" } ], "locationText" : "Warszawa, Masovian Voivodeship, Poland", "experienceMinYears" : 10, "experienceLevel" : "Director", "technicalSkills" : "DORA, NIS2, ISO 27001, NIST", "professionalSkills" : [ "Risk assessment", "Control design", "Governance design" ], "hardSkillsList" : [ "Information security risk", "Cybersecurity governance", "Technology risk", "Security controls", "Vendor risk assessments", "Incident response", "Cybersecurity technologies", "Cybersecurity architectures", "Cybersecurity solutions" ], "hardSkills" : [ { "name" : "Information security risk", "level" : "intermediate" }, { "name" : "Cybersecurity governance", "level" : "intermediate" }, { "name" : "Technology risk", "level" : "intermediate" }, { "name" : "Security controls", "level" : "intermediate" }, { "name" : "Vendor risk assessments", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Cybersecurity technologies", "level" : "intermediate" }, { "name" : "Cybersecurity architectures", "level" : "intermediate" }, { "name" : "Cybersecurity solutions", "level" : "intermediate" } ], "majorSkills" : "Information security risk, Cybersecurity governance, Regulatory frameworks", "majorSkillsList" : [ "Information security risk", "Cybersecurity governance", "Regulatory frameworks" ], "coreResponsibilities" : "Identify security risks, Assess security risks, Track security risks, Escalate material issues, Design security controls, Implement security controls, Draft information security policies, Maintain information security policies, Enforce information security policies, Lead implementation regulatory frameworks, Monitor emerging obligations, Oversee information security component, Define vendor security requirements, Track remediation identified gaps, Coordinate response activities, Ensure governance obligations met, Lead post-incident reviews, Produce board-ready reporting, Produce risk appetite dashboards, Produce briefing materials", "teamCollaboration" : "Across global footprint; Across functions; With CISO; With governance forums; With Technology teams", "domainKnowledge" : "Regulated financial services; Cross-border regulatory dynamics; Third-party vendor risk; Critical outsourcing; Cyber incident response; Information security policies; Security risk frameworks; Technology risk; Asset management; Private equity; Banking; Financial services", "domainList" : [ "regulated-financial-services", "cross-border-regulatory-dynamics", "third-party-vendor-risk", "critical-outsourcing", "cyber-incident-response", "information-security-policies", "security-risk-frameworks", "technology-risk", "asset-management", "private-equity", "banking", "financial-services" ], "domainSpecificKnowledge" : [ "Regulated financial services", "Cross-border regulatory dynamics", "Third-party vendor risk", "Critical outsourcing", "Cyber incident response", "Information security policies", "Security risk frameworks", "Technology risk", "Asset management", "Private equity", "Banking", "Financial services" ], "communicationSkills" : "Board-ready reporting; Risk appetite dashboards; Briefing materials; Senior audiences; Board-level audiences", "qualificationsBasic" : "10 years information security risk, 10 years cybersecurity governance, 10 years technology risk, Build security risk frameworks, Operate security risk frameworks, Implement regulatory frameworks, Lead third-party vendor risk assessments, Solid background incident response, Advise technology teams, Credibly challenge technology teams, Distil technical topics, Distil risk topics", "qualificationsPreferred" : "CISM, CRISC, CISSP, Experience international team, Experience matrix organisation, Familiarity digital tools, Familiarity workflow automation, Exposure data governance obligations, Contribute board reporting, Contribute senior governance reporting", "rawDescription" : "EQT is looking for an Associate Director, Information Security Risk to serve as the firm's subject matter expert on information security risk — translating complex cybersecurity and technology risk into clear governance frameworks and actionable business outcomes. This is a senior individual contributor role sitting within the CISO function, reporting directly to the CISO, and operating across a global, regulated financial services environment. About the Team Risk, Regulatory, Compliance identify, assess and track security risks across the firm and escalate material issues to the CISO and relevant governance forums. Design and implement pragmatic, proportionate security controls that balance risk reduction with business agility. Draft, maintain and enforce information security policies, standards and procedures aligned to regulatory requirements and industry best practice. Lead implementation of applicable regulatory frameworks across EQT's global footprint (including DORA, NIS2, ISO 27001 and NIST) and monitor the horizon for emerging obligations. Oversee the information security component of third-party vendor risk reviews, including critical outsourcing assessments; define vendor security requirements and track remediation of identified gaps. Play a central role in EQT's cyber incident response capability — coordinating response activities, ensuring governance obligations are met, and leading post-incident reviews. Produce high-quality, board-ready reporting, risk appetite dashboards and briefing materials for senior management and governance committees. About You You are a seasoned information security risk professional with a commercial mindset and a talent for making complex risk topics accessible to senior audiences. You build trust across functions naturally, hold your ground on risk positions constructively, and bring genuine intellectual rigour to governance and control design. What you'll bring (must-have): Around 10 years of experience in information security risk, cybersecurity governance, or technology risk within asset management, private equity, banking or financial services. Proven track record building and operating security risk and control frameworks in a regulated financial services environment. Hands-on experience implementing regulatory frameworks such as DORA, NIS2, ISO 27001 or NIST, with solid understanding of cross-border regulatory dynamics. Demonstrated experience leading third-party vendor risk assessments, including outsourcing and critical supplier reviews. Solid background in incident response, from operational coordination through to governance reporting and lessons learned. Deep working knowledge of cybersecurity technologies, architectures and solutions, sufficient to advise and credibly challenge Technology teams. Strong communication skills with the ability to distil complex technical and risk topics into concise, impactful materials for senior and board-level audiences. Nice to have: Relevant professional qualifications such as CISM, CRISC or CISSP. Experience working within an international team or matrix organisation. Familiarity with digital tools and workflow automation that enhance team efficiency and risk reporting. Exposure to data governance obligations and their intersection with information security risk. Prior experience contributing to board or senior governance committee reporting in a financial services context. What We Offer At EQT, you will join a global firm that operates at the intersection of technology, finance and impact. You will have direct access to senior leadership, meaningful scope to shape how information security risk is governed at a complex, internationally active firm, and the opportunity to work alongside colleagues who hold themselves and each other to a high standard. EQT supports continuous professional development and values diverse perspectives as a driver of better outcomes. Compensation We understand and believe that being a great place to work drives the best performance.At EQT, inclusion is a business imperative and it's embedded into our talent strategy, decision-making, and culture to ensure that every individual and team operates at their full potential. By doing so, we unlock better collaboration, stronger innovation, and superior investment outcomes. About EQT EQT is a purpose-driven global investment organization focused on active ownership strategies. With a Nordic heritage and a global mindset, EQT has a track record of over three decades of developing companies across multiple geographies, sectors and strategies. EQT has investment strategies covering all phases of a business’ development, from start-up to maturity. EQT has EUR ‌270 billion in total assets under management (EUR ‌‌141 billion in fee-generating assets under management), within two business segments – Private Capital and Real Assets. With its roots in the Wallenberg family’s entrepreneurial mindset and philosophy of long-term ownership, EQT is guided by a set of strong values and a distinct corporate culture. EQT manages and advises funds and vehicles that invest across the world with the mission to future-proof companies, generate attractive returns and make a positive impact with everything EQT does. EQT has offices in more than 25 countries across Europe, Asia and the Americas and has more than 1,900 employees. More info: www.eqtgroup.com Follow EQT on LinkedIn, X, YouTube and Instagram", "summaryDescription" : "Associate Director, Information Security Risk at EQT Group. Skills: Information security risk, Cybersecurity governance, Regulatory frameworks. Identify security risks. Assess security risks", "postedDate" : "2026-06-15T23:23:26.048", "createdAt" : "2026-06-15T23:23:26.048", "lastUpdated" : "2026-06-16T08:06:33.159", "ingestTimestamp" : "2026-06-15T23:23:26.048", "mongoId" : "6a305b76f292fd229cf5e059", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Information security risk", "Cybersecurity governance", "Technology risk", "Security controls", "Vendor risk assessments", "Incident response", "Cybersecurity technologies", "Cybersecurity architectures", "Cybersecurity solutions", "Regulatory frameworks", "Risk assessment", "Control design", "Governance design", "Regulated financial services", "Cross-border regulatory dynamics", "Third-party vendor risk", "Critical outsourcing", "Cyber incident response", "Information security policies", "Security risk frameworks", "Asset management", "Private equity", "Banking", "Financial services", "CISM", "CRISC", "CISSP" ], "skillCount" : 27, "jobCategory" : "finance", "jobSubcategory" : "accounting", "seniorityLevel" : "Director", "dataQualityScore" : 0.8888889, "_score" : 999.7867, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2ca37374d8ee00a09abccb", "title" : "Information Security Systems Analyst", "company" : "Arrowhead Pharmaceuticals", "industry" : "Pharma", "salary" : { "min" : 85000.0, "max" : 100000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Madison, Wisconsin, United States", "locations" : [ "Madison", "Wisconsin", "United States" ], "certifications" : [ "SC-400" ], "timestamp" : "2026-06-15T21:16:53.144", "fingerprint" : "45a32f0296fdffdd4e9f8457d8f3846786e9bbc385f174ca30f6806f1f088423", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://arrowheadpharma.com/careers/?gh_jid=5163400007", "externalId" : "5163400007", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Madison", "state" : "Wisconsin", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "43.0746900,-89.3841663" } ], "locationText" : "Madison, Wisconsin, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Microsoft Purview, Data governance, Data loss prevention, Information protection, Microsoft 365, Intune, Exchange, SharePoint, OneDrive, Teams, Endpoints, SIEM tools, EDR platforms", "professionalSkills" : [ "Analytical skills", "Problem-solving skills", "Subject matter expert" ], "hardSkillsList" : [ "Data classification", "DLP policy tuning", "EDiscovery", "Insider Risk Management", "Audit log interpretation", "Compliance reporting", "Platform administration", "Health monitoring", "Change management" ], "hardSkills" : [ { "name" : "Data classification", "level" : "intermediate" }, { "name" : "DLP policy tuning", "level" : "intermediate" }, { "name" : "EDiscovery", "level" : "intermediate" }, { "name" : "Insider Risk Management", "level" : "intermediate" }, { "name" : "Audit log interpretation", "level" : "intermediate" }, { "name" : "Compliance reporting", "level" : "intermediate" }, { "name" : "Platform administration", "level" : "intermediate" }, { "name" : "Health monitoring", "level" : "intermediate" }, { "name" : "Change management", "level" : "intermediate" } ], "majorSkills" : "Microsoft Purview, Data Loss Prevention, Information Protection, Data Classification", "majorSkillsList" : [ "Microsoft Purview", "Data Loss Prevention", "Information Protection", "Data Classification" ], "coreResponsibilities" : "Administer Microsoft Purview platform, Serve as subject matter expert for data governance, Serve as subject matter expert for DLP, Serve as subject matter expert for information protection, Administer sensitivity labels, Maintain label policies, Configure auto-labeling, Develop classification taxonomies, Refine auto-classification rules, Build DLP policies, Maintain DLP policies, Tune DLP policies, Investigate DLP policy matches, Investigate DLP alerts, Refine DLP rules, Document DLP incidents, Escalate DLP violations, Support legal hold requests, Execute eDiscovery collections, Export content searches, Administer Insider Risk Management policies, Review insider risk alerts, Coordinate insider risk cases, Generate Purview audit logs, Generate compliance reports, Generate dashboard analytics, Report on DLP incidents, Report on label adoption rates, Report on policy effectiveness, Report on compliance posture, Identify trends, Recommend policy adjustments, Monitor Purview platform health, Monitor Purview platform performance, Apply configuration changes, Apply updates, Manage connector integrations, Maintain documentation, Contribute to knowledge base, Triage security alerts, Escalate security alerts", "teamCollaboration" : "Work with business stakeholders; Work with Legal; Work with HR; Work with Security leadership; Coordinate with functional teams", "domainKnowledge" : "Pharmaceutical data types; Regulatory submissions; Patient data; RNAi technologies", "domainList" : [ "pharmaceutical-data-types", "regulatory-submissions", "patient-data", "rnai-technologies" ], "domainSpecificKnowledge" : [ "Pharmaceutical data types", "Regulatory submissions", "Patient data", "RNAi technologies" ], "toolProficiency" : [ "Microsoft Purview", "Microsoft 365", "Intune" ], "communicationSkills" : "Explain technical concepts", "documentationSkills" : "Maintain documentation; Runbooks; Diagrams; Standards; Exceptions", "problemSolvingSkills" : "Investigate alerts; Interpret audit logs; Distinguish signal from noise", "specialRequirements" : "Valid authorization to work", "qualificationsBasic" : "Bachelor's degree in Information Security, IT, or Computer Science, 3+ years in Information Security, IT compliance, or data governance, Hands-on experience administering Microsoft Purview or M365 Compliance Center, Experience with sensitivity labels, DLP, retention policies, eDiscovery, or Insider Risk Management, Experience working within a regulated industry", "qualificationsPreferred" : "Microsoft certifications relevant to security and compliance, Experience with Microsoft Defender for Cloud Apps, Prior experience in pharmaceutical, biotech, or life sciences, Experience supporting eDiscovery or legal hold workflows, Exposure to SIEM tools, Exposure to EDR platforms, Exposure to identity and access management systems", "rawDescription" : "Arrowhead Pharmaceuticals, Inc. (Nasdaq ARWR) is a commercial stage biopharmaceutical company that develops medicines that treat intractable diseases by silencing the genes that cause them. Using a broad portfolio of RNA chemistries and efficient modes of delivery, Arrowhead therapies trigger the RNA interference mechanism to induce rapid, deep, and durable knockdown of target genes. RNA interference, or RNAi, is a mechanism present in living cells that inhibits the expression of a specific gene, thereby affecting the production of a specific protein. Arrowhead’s RNAi-based therapeutics leverage this natural pathway of gene silencing. Arrowhead is focused on developing innovative drugs for diseases with a genetic basis, typically characterized by the overproduction of one or more proteins that are involved with disease. The depth and versatility of our RNAi technologies enables us to potentially address conditions in virtually any therapeutic area and pursue disease targets that are not otherwise addressable by small molecules and biologics. Arrowhead is leading the field in bringing the promise of RNAi to address diseases outside of the liver, and our clinical pipeline includes disease targets in the liver and lung with a promising pipeline of preclinical candidates. Arrowhead’s corporate headquarters is in Pasadena, CA with research and development teams in Madison, WI & San Diego, CA, and a state of the art manufacturing facility in Verona, WI. Our employees are nimble, science-driven innovators who are collaborating to bring new therapies to patients in need. The Position The Information Security Systems Analyst is responsible for the day-to-day administration, operation, and continuous improvement of the organization's Microsoft Purview platform, serving as the primary subject matter expert for data governance, data loss prevention (DLP), and information protection. This role operates at the intersection of information security, data governance, and regulatory compliance, ensuring that sensitive data - including intellectual property, clinical trial data, and personally identifiable information - is properly classified, protected, and governed in accordance with applicable regulations and internal policies. In addition to Purview-focused responsibilities, this analyst contributes to broader information security operations including troubleshooting endpoints, working in Microsoft 365, and Intune. Responsibilities The analyst will serve as the hands-on operational owner of Microsoft Purview, managing the platform on a daily basis across its core functional areas: Information Protection & Data Classification - Administer and maintain Microsoft Purview sensitivity labels, label policies, and auto-labeling configurations. Develop and refine classification taxonomies appropriate to pharmaceutical data types, including research data, regulatory submissions, and patient data. Review and tune auto-classification rules to minimize false positives and ensure accurate labeling across Microsoft 365 and connected data sources. Data Loss Prevention - Build, maintain, and continuously tune DLP policies across Exchange, SharePoint, OneDrive, Teams, and endpoints. Investigate DLP policy matches and alerts, differentiate true policy violations from false positives, and work with business stakeholders to refine rules without disrupting legitimate business workflows. Document DLP incidents and escalate confirmed violations per the incident response process. eDiscovery & Content Search - Support legal hold requests and eDiscovery collections. Work with Legal and HR to scope, execute, and export content searches accurately and in accordance with chain-of-custody requirements. Insider Risk Management - Administer Purview Insider Risk Management policies, review alerts, and coordinate with HR, Legal, and Security leadership on confirmed or suspected insider risk cases. Maintain strict confidentiality in handling all insider risk data. Audit & Reporting - Generate and interpret Purview audit logs, compliance reports, and dashboard analytics. Provide regular reporting to management on DLP incidents, label adoption rates, policy effectiveness, and compliance posture. Identify trends and recommend adjustments to policies and configurations. Platform Administration & Health Monitoring - Monitor the health and performance of the Purview platform, apply configuration changes and updates in alignment with change management processes, and stay current on Microsoft feature releases relevant to Purview. Manage connector integrations with third-party data sources as required. Maintain clear documentation (runbooks, diagrams, standards, exceptions) and contribute to a knowledge base. Triage security alerts and escalate as necessary. Requirements Bachelor's degree in Information Security, Information Technology, Computer Science, or a related field, or equivalent practical experience 3+ years of experience in Information Security, IT compliance, or data governance role Demonstrated hands-on experience administering Microsoft Purview or its predecessor Microsoft 365 Compliance Center, including at least two of the following areas: sensitivity labels, DLP, retention policies, eDiscovery, or Insider Risk Management Experience working within or supporting a regulated industry environment Strong analytical and problem-solving skills with the ability to investigate alerts, interpret audit logs, and distinguish signal from noise Effective written and verbal communication skills, with the ability to explain technical concepts to non-technical stakeholders Preferred Microsoft certifications relevant to security and compliance, such as SC-401 Experience with Microsoft Defender for Cloud Apps (MCAS) and its integration with Purview Prior experience in the pharmaceutical, biotech, or life sciences sector Experience supporting eDiscovery or legal hold workflows in collaboration with Legal teams Exposure to SIEM tools, endpoint detection and response (EDR) platforms, or identity and access management systems Comfortable working across functional teams including Legal, Compliance, HR, and IT, and possesses the judgment to handle sensitive data and insider risk information with appropriate discretion. Wisconsin pay range $85,000—$100,000 USD Arrowhead provides competitive salaries and an excellent benefit package. Candidates must have current, valid authorization to work in the country where this role is located. California Applicant Privacy Policy", "summaryDescription" : "Information Security Systems Analyst at Arrowhead Pharmaceuticals. Skills: Microsoft Purview, Data Loss Prevention, Information Protection, Data Classification. Administer Microsoft Purview platform. Serve as subject matter expert for data governance", "postedDate" : "2026-06-14T19:24:05.102", "createdAt" : "2026-06-14T19:24:05.102", "lastUpdated" : "2026-06-15T21:16:53.144", "ingestTimestamp" : "2026-06-14T19:24:05.102", "mongoId" : "6a2ca37374d8ee00a09abccb", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 85000, "salaryAnnualMax" : 100000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Data classification", "DLP policy tuning", "EDiscovery", "Insider Risk Management", "Audit log interpretation", "Compliance reporting", "Platform administration", "Health monitoring", "Change management", "Microsoft Purview", "Data Loss Prevention", "Information Protection", "Data Classification", "Analytical skills", "Problem-solving skills", "Subject matter expert", "Pharmaceutical data types", "Regulatory submissions", "Patient data", "RNAi technologies", "SC-400", "Microsoft 365", "Intune" ], "skillCount" : 23, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 987.08307, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Biotech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305b5ff292fd229cf5cfa2", "title" : "Information System Security Officer (ISSO)", "industry" : "Government", "salary" : { "min" : 95000.0, "max" : 135000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an Information System Security Officer in the United States, adjusted for mid-seniority and government industry in the Wright Patterson Air Force Base area." }, "location" : "Wright Patterson Air Force Base, OH", "locations" : [ "Wright Patterson Air Force Base, OH" ], "certifications" : [ "DoD 8570.01-M IAM Level II or III", "CISSP" ], "timestamp" : "2026-06-16T05:21:20.586", "fingerprint" : "baef343129e02bf44b7e8af56e282c0f7f9b2e0a17dd10febc2179967883b57a", "source" : "jazzhr", "language" : "en", "externalId" : "IUvLm6nPQp", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Wright Patterson Air Force Base", "state" : "Ohio", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.8219053,-84.0495886" } ], "locationText" : "Wright Patterson Air Force Base, Ohio, United States", "technicalSkills" : "RMF, DIACAP, NIST", "majorSkills" : "Information Security, Risk Management, Cybersecurity", "majorSkillsList" : [ "Information Security", "Risk Management", "Cybersecurity" ], "coreResponsibilities" : "Develop and maintain security documentation, Conduct security assessments, Implement security controls, Monitor system security, Respond to security incidents, Provide security training, Ensure compliance with regulations", "teamCollaboration" : "System administrators; Developers; Security team", "domainKnowledge" : "DoD security requirements; RMF framework; DIACAP framework; NIST guidelines", "domainList" : [ "dod-security-requirements", "rmf-framework", "diacap-framework", "nist-guidelines" ], "domainSpecificKnowledge" : [ "DoD security requirements", "RMF framework", "DIACAP framework", "NIST guidelines" ], "communicationSkills" : "Security briefings", "documentationSkills" : "Security documentation", "problemSolvingSkills" : "Risk analysis", "specialRequirements" : "Security clearance", "qualificationsBasic" : "5+ years ISSO experience, Bachelor's degree, DoD 8570.01-M IAM Level II or III certification", "qualificationsPreferred" : "Master's degree, CISSP certification", "workSiteFlexibility" : "Onsite", "summaryDescription" : "Information System Security Officer (ISSO). Skills: Information Security, Risk Management, Cybersecurity. Develop and maintain security documentation. Conduct security assessments", "createdAt" : "2026-06-15T22:22:43.417", "lastUpdated" : "2026-06-16T05:21:20.586", "ingestTimestamp" : "2026-06-15T22:22:43.417", "mongoId" : "6a305b5ff292fd229cf5cfa2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 95000, "salaryAnnualMax" : 135000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Information Security", "Risk Management", "Cybersecurity", "DoD security requirements", "RMF framework", "DIACAP framework", "NIST guidelines", "DoD 8570.01-M IAM Level II or III", "CISSP" ], "skillCount" : 9, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.44444445, "_score" : 973.8283, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305b76f292fd229cf5e05a", "title" : "Associate Director, Information Security Risk", "company" : "EQT Group", "industry" : "FinTech", "salary" : { "min" : 360000.0, "max" : 540000.0, "currency" : "PLN", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an Associate Director, Information Security Risk in Financial Services in Warsaw, Poland, adjusted for Director seniority and full-time employment." }, "location" : "Warszawa, Masovian Voivodeship, Poland", "locations" : [ "Warszawa", "Masovian Voivodeship", "Poland" ], "certifications" : [ "CISM", "CRISC", "CISSP" ], "timestamp" : "2026-06-16T08:55:33.446", "fingerprint" : "1002902146dbbaeebab6c88f26f44d9b30e387829be17cdefc2b9427c735de83", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/eqtpartners/jobs/4897327101", "externalId" : "4897327101", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Warszawa", "state" : "Masovian Voivodeship", "country" : "Poland", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "52.2333742,21.0711489" } ], "locationText" : "Warszawa, Masovian Voivodeship, Poland", "experienceMinYears" : 10, "experienceLevel" : "Director", "technicalSkills" : "DORA, NIS2, ISO 27001, NIST", "professionalSkills" : [ "Risk assessment", "Control design", "Governance design", "Incident response", "Vendor risk management", "Policy development", "Standards development", "Procedure development" ], "hardSkillsList" : [ "Information security risk", "Cybersecurity governance", "Technology risk", "Security controls", "Risk reporting", "Vendor security requirements", "Cyber incident response", "Board reporting", "Risk appetite dashboards" ], "softSkillsList" : [ "Intellectual rigour", "Constructive challenge" ], "hardSkills" : [ { "name" : "Information security risk", "level" : "intermediate" }, { "name" : "Cybersecurity governance", "level" : "intermediate" }, { "name" : "Technology risk", "level" : "intermediate" }, { "name" : "Security controls", "level" : "intermediate" }, { "name" : "Risk reporting", "level" : "intermediate" }, { "name" : "Vendor security requirements", "level" : "intermediate" }, { "name" : "Cyber incident response", "level" : "intermediate" }, { "name" : "Board reporting", "level" : "intermediate" }, { "name" : "Risk appetite dashboards", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Intellectual rigour" }, { "name" : "Constructive challenge" } ], "majorSkills" : "Information security risk, Cybersecurity governance, Technology risk, Regulatory frameworks", "majorSkillsList" : [ "Information security risk", "Cybersecurity governance", "Technology risk", "Regulatory frameworks" ], "coreResponsibilities" : "Translate cybersecurity risk, Translate technology risk, Design security controls, Implement security controls, Draft information security policies, Maintain information security policies, Enforce information security policies, Lead regulatory framework implementation, Monitor emerging obligations, Oversee vendor risk reviews, Define vendor security requirements, Track remediation of gaps, Coordinate incident response, Ensure governance obligations met, Lead post-incident reviews, Produce board-ready reporting, Produce risk appetite dashboards, Produce briefing materials", "teamCollaboration" : "Across global footprint; With CISO function; With governance forums; With Technology teams; With senior management; With governance committees", "domainKnowledge" : "Financial services environment; Cross-border regulatory dynamics; Cybersecurity technologies; Cybersecurity architectures; Cybersecurity solutions; Digital tools; Workflow automation; Data governance obligations", "domainList" : [ "financial-services-environment", "cross-border-regulatory-dynamics", "cybersecurity-technologies", "cybersecurity-architectures", "cybersecurity-solutions", "digital-tools", "workflow-automation", "data-governance-obligations" ], "domainSpecificKnowledge" : [ "Financial services environment", "Cross-border regulatory dynamics", "Cybersecurity technologies", "Cybersecurity architectures", "Cybersecurity solutions", "Digital tools", "Workflow automation", "Data governance obligations" ], "toolProficiency" : [ "Bloomberg Terminal", "Reuters Eikon", "FactSet" ], "communicationSkills" : "Board-level reporting; Senior audience communication", "continuousLearning" : "Continuous professional development", "problemSolvingSkills" : "Risk reduction; Risk mitigation", "qualificationsBasic" : "10 years information security risk, 10 years cybersecurity governance, 10 years technology risk, Build security risk frameworks, Operate security risk frameworks, Implement regulatory frameworks, Lead third-party vendor risk assessments, Solid background incident response, Advise technology teams, Credibly challenge technology teams, Distil technical topics, Distil risk topics", "qualificationsPreferred" : "CISM, CRISC, CISSP, Experience international team, Experience matrix organisation, Familiarity digital tools, Familiarity workflow automation, Exposure data governance obligations, Contribute board reporting, Contribute senior governance reporting", "rawDescription" : "EQT is looking for an Associate Director, Information Security Risk to serve as the firm's subject matter expert on information security risk — translating complex cybersecurity and technology risk into clear governance frameworks and actionable business outcomes. This is a senior individual contributor role sitting within the CISO function, reporting directly to the CISO, and operating across a global, regulated financial services environment. About the Team Risk, Regulatory, Compliance identify, assess and track security risks across the firm and escalate material issues to the CISO and relevant governance forums. Design and implement pragmatic, proportionate security controls that balance risk reduction with business agility. Draft, maintain and enforce information security policies, standards and procedures aligned to regulatory requirements and industry best practice. Lead implementation of applicable regulatory frameworks across EQT's global footprint (including DORA, NIS2, ISO 27001 and NIST) and monitor the horizon for emerging obligations. Oversee the information security component of third-party vendor risk reviews, including critical outsourcing assessments; define vendor security requirements and track remediation of identified gaps. Play a central role in EQT's cyber incident response capability — coordinating response activities, ensuring governance obligations are met, and leading post-incident reviews. Produce high-quality, board-ready reporting, risk appetite dashboards and briefing materials for senior management and governance committees. About You You are a seasoned information security risk professional with a commercial mindset and a talent for making complex risk topics accessible to senior audiences. You build trust across functions naturally, hold your ground on risk positions constructively, and bring genuine intellectual rigour to governance and control design. What you'll bring (must-have): Around 10 years of experience in information security risk, cybersecurity governance, or technology risk within asset management, private equity, banking or financial services. Proven track record building and operating security risk and control frameworks in a regulated financial services environment. Hands-on experience implementing regulatory frameworks such as DORA, NIS2, ISO 27001 or NIST, with solid understanding of cross-border regulatory dynamics. Demonstrated experience leading third-party vendor risk assessments, including outsourcing and critical supplier reviews. Solid background in incident response, from operational coordination through to governance reporting and lessons learned. Deep working knowledge of cybersecurity technologies, architectures and solutions, sufficient to advise and credibly challenge Technology teams. Strong communication skills with the ability to distil complex technical and risk topics into concise, impactful materials for senior and board-level audiences. Nice to have: Relevant professional qualifications such as CISM, CRISC or CISSP. Experience working within an international team or matrix organisation. Familiarity with digital tools and workflow automation that enhance team efficiency and risk reporting. Exposure to data governance obligations and their intersection with information security risk. Prior experience contributing to board or senior governance committee reporting in a financial services context. What We Offer At EQT, you will join a global firm that operates at the intersection of technology, finance and impact. You will have direct access to senior leadership, meaningful scope to shape how information security risk is governed at a complex, internationally active firm, and the opportunity to work alongside colleagues who hold themselves and each other to a high standard. EQT supports continuous professional development and values diverse perspectives as a driver of better outcomes. Compensation We understand and believe that being a great place to work drives the best performance.At EQT, inclusion is a business imperative and it's embedded into our talent strategy, decision-making, and culture to ensure that every individual and team operates at their full potential. By doing so, we unlock better collaboration, stronger innovation, and superior investment outcomes. About EQT EQT is a purpose-driven global investment organization focused on active ownership strategies. With a Nordic heritage and a global mindset, EQT has a track record of over three decades of developing companies across multiple geographies, sectors and strategies. EQT has investment strategies covering all phases of a business’ development, from start-up to maturity. EQT has EUR ‌270 billion in total assets under management (EUR ‌‌141 billion in fee-generating assets under management), within two business segments – Private Capital and Real Assets. With its roots in the Wallenberg family’s entrepreneurial mindset and philosophy of long-term ownership, EQT is guided by a set of strong values and a distinct corporate culture. EQT manages and advises funds and vehicles that invest across the world with the mission to future-proof companies, generate attractive returns and make a positive impact with everything EQT does. EQT has offices in more than 25 countries across Europe, Asia and the Americas and has more than 1,900 employees. More info: www.eqtgroup.com Follow EQT on LinkedIn, X, YouTube and Instagram", "summaryDescription" : "Associate Director, Information Security Risk at EQT Group. Skills: Information security risk, Cybersecurity governance, Technology risk, Regulatory frameworks. Translate cybersecurity risk. Translate technology risk", "postedDate" : "2026-06-15T23:24:48.348", "createdAt" : "2026-06-15T23:24:48.348", "lastUpdated" : "2026-06-16T08:55:33.446", "ingestTimestamp" : "2026-06-15T23:24:48.348", "mongoId" : "6a305b76f292fd229cf5e05a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Information security risk", "Cybersecurity governance", "Technology risk", "Security controls", "Risk reporting", "Vendor security requirements", "Cyber incident response", "Board reporting", "Risk appetite dashboards", "Intellectual rigour", "Constructive challenge", "Regulatory frameworks", "Risk assessment", "Control design", "Governance design", "Incident response", "Vendor risk management", "Policy development", "Standards development", "Procedure development", "Financial services environment", "Cross-border regulatory dynamics", "Cybersecurity technologies", "Cybersecurity architectures", "Cybersecurity solutions", "Digital tools", "Workflow automation", "Data governance obligations", "CISM", "CRISC", "CISSP", "Bloomberg Terminal", "Reuters Eikon", "FactSet" ], "skillCount" : 34, "jobCategory" : "finance", "jobSubcategory" : "accounting", "seniorityLevel" : "Director", "dataQualityScore" : 0.8888889, "_score" : 962.1089, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services", "llmIndustryConfidence" : 0.98 }, { "id" : "6a30511af292fd229cefa6cb", "title" : "Sr. Cyber Security Analyst", "industry" : "IT", "salary" : { "min" : 1800000.0, "max" : 3000000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cyber Security Analyst in India, adjusted for the FinTech industry and remote work." }, "location" : "India", "locations" : [ "India" ], "certifications" : [ "CISA", "ISO 27001 Lead Auditor", "ISO 27001 Implementer", "PCI ISA" ], "timestamp" : "2026-06-16T12:54:17.107", "fingerprint" : "8e47cd7978429c52ff8190deff291fbe639b25861b51f43683e36bb215ee5153", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/jobgether/6e827605-2db0-4b5a-8fed-13a674c6e33b/apply", "externalId" : "6e827605-2db0-4b5a-8fed-13a674c6e33b", "industryFunction" : { }, "structuredLocations" : [ { "country" : "India", "continent" : "as", "workMode" : "remote" } ], "locationText" : "India", "employmentType" : "FULL_TIME", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Senior", "technicalSkills" : "SOC 2, PCI-DSS, ISO 27001, NIST CSF, IAM", "professionalSkills" : [ "Risk assessment", "Vendor risk assessment", "Access governance", "Due diligence" ], "hardSkillsList" : [ "Third-party audits", "Security policies", "Security standards", "Security controls", "Risk registers", "Mitigation plans", "Access reviews", "Least privilege", "Incident response", "Disaster recovery", "Security awareness" ], "hardSkills" : [ { "name" : "Third-party audits", "level" : "intermediate" }, { "name" : "Security policies", "level" : "intermediate" }, { "name" : "Security standards", "level" : "intermediate" }, { "name" : "Security controls", "level" : "intermediate" }, { "name" : "Risk registers", "level" : "intermediate" }, { "name" : "Mitigation plans", "level" : "intermediate" }, { "name" : "Access reviews", "level" : "intermediate" }, { "name" : "Least privilege", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Disaster recovery", "level" : "intermediate" }, { "name" : "Security awareness", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity, GRC, Risk management, Compliance", "majorSkillsList" : [ "Cybersecurity", "GRC", "Risk management", "Compliance" ], "coreResponsibilities" : "Support third-party audits, Coordinate third-party audits, Support certifications, Coordinate certifications, Support regulatory assessments, Coordinate regulatory assessments, Maintain GRC framework, Enhance GRC framework, Develop security policies, Review security policies, Update security policies, Develop security standards, Review security standards, Update security standards, Develop security controls, Review security controls, Update security controls, Manage security questionnaires, Manage customer due diligence, Respond to requests, Conduct vendor risk assessments, Track third-party compliance, Maintain risk registers, Maintain mitigation plans, Perform enterprise-wide risk assessments, Document risk assessments, Track risk remediation, Support access governance, Conduct access reviews, Manage identity lifecycle, Enforce least privilege, Contribute to incident response, Contribute to disaster recovery, Contribute to security awareness, Monitor evolving threats, Monitor compliance requirements, Monitor industry best practices, Strengthen security posture", "teamCollaboration" : "Collaborative work culture; Involving security teams; Involving engineering teams; Involving legal teams; Involving product teams", "domainKnowledge" : "SaaS; FinTech; Regulated environments", "domainList" : [ "saas", "fintech", "regulated-environments" ], "domainSpecificKnowledge" : [ "SaaS", "FinTech", "Regulated environments" ], "toolProficiency" : [ "Vanta", "Drata" ], "communicationSkills" : "Stakeholder coordination", "documentationSkills" : "Documentation practices", "continuousLearning" : "Learning opportunities; Growth opportunities", "qualificationsBasic" : "3-5 years cybersecurity experience, 3-5 years IT risk experience, 3-5 years GRC experience, Understanding compliance frameworks, Hands-on audit support, Hands-on certification support, Hands-on regulatory assessment support, Knowledge of risk management, Knowledge of control design, Knowledge of compliance documentation, Experience handling security questionnaires, Translate technical controls, Familiarity with IAM, Familiarity with access governance", "qualificationsPreferred" : "GRC platforms experience, SaaS environment exposure, FinTech environment exposure, Regulated environment exposure, CISA certification preferred, ISO 27001 Lead Auditor preferred, ISO 27001 Implementer preferred, PCI ISA certification preferred", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "## Accountabilities Support the execution and coordination of third-party audits and certifications, including SOC 2, PCI-DSS, ISO 27001, and NIST CSF. Maintain and enhance the organization’s GRC framework by developing, reviewing, and updating security policies, standards, and controls. Manage security questionnaires and customer due diligence requests, ensuring accurate and timely responses. Conduct vendor risk assessments, track third-party compliance, and maintain risk registers and mitigation plans. Perform enterprise-wide risk assessments across systems, processes, and tools, ensuring proper documentation and remediation tracking. Support access governance activities, including periodic access reviews, identity lifecycle management, and least privilege enforcement. Contribute to incident response planning, disaster recovery readiness, and security awareness initiatives. Monitor evolving threats, compliance requirements, and industry best practices to continuously strengthen the security posture. Requirements: 3–5 years of experience in cybersecurity, IT risk, or GRC-focused roles. Strong understanding of compliance frameworks such as SOC 2, ISO 27001, PCI-DSS, and NIST CSF. Hands-on experience supporting audits, certifications, or regulatory assessments. Knowledge of risk management methodologies, control design, and compliance documentation practices. Experience handling security questionnaires and translating technical controls for business stakeholders. Familiarity with identity and access management (IAM) and access governance processes. Strong communication, documentation, and stakeholder coordination skills. Experience with GRC platforms such as Vanta, Drata, or similar tools is a plus. Exposure to SaaS, FinTech, or regulated environments is highly desirable. Certifications such as CISA, ISO 27001 Lead Auditor/Implementer, or PCI ISA are preferred but not mandatory. Benefits: Opportunity to work in a high-impact cybersecurity and compliance function within a fast-growing digital environment. Exposure to global security frameworks and enterprise-grade audit and risk management programs. Collaborative work culture involving security, engineering, legal, and product teams. Strong learning and growth opportunities in governance, risk, compliance, and security operations. Flexible and remote-friendly work setup supporting work-life balance. Chance to contribute directly to strengthening security posture for financial institutions and regulated clients. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Sr. Cyber Security Analyst. Skills: Cybersecurity, GRC, Risk management, Compliance. Support third-party audits. Coordinate third-party audits", "postedDate" : "2026-06-15T12:02:21.089", "createdAt" : "2026-06-15T12:02:21.089", "lastUpdated" : "2026-06-16T12:54:17.107", "ingestTimestamp" : "2026-06-16T03:21:22.504", "mongoId" : "6a30511af292fd229cefa6cb", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Third-party audits", "Security policies", "Security standards", "Security controls", "Risk registers", "Mitigation plans", "Access reviews", "Least privilege", "Incident response", "Disaster recovery", "Security awareness", "Cybersecurity", "GRC", "Risk management", "Compliance", "Risk assessment", "Vendor risk assessment", "Access governance", "Due diligence", "SaaS", "FinTech", "Regulated environments", "CISA", "ISO 27001 Lead Auditor", "ISO 27001 Implementer", "PCI ISA", "Vanta", "Drata" ], "skillCount" : 28, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 955.38306, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca13274d8ee00a09a4b5f", "title" : "Cybersecurity Analyst", "company" : "Level", "industry" : "Corporate", "salary" : { "min" : 85000.0, "max" : 115000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Analyst in Austin, United States, adjusted for the Education industry and company size." }, "location" : "Austin", "locations" : [ "Austin" ], "certifications" : [ "CompTIA Security+", "CySA+", "Microsoft Certified: Security Operations Analyst Associate", "Azure Security Engineer Associate", "CEH", "GIAC GSEC", "GIAC GCIA", "GIAC GCIH" ], "timestamp" : "2026-06-15T05:23:45.000", "fingerprint" : "c34b92369538dc90b549740abdc4c0b596f06d245e039dd634669205c40fec2e", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/level/b19529e9-60a7-4e0d-83cd-5ceb5aa2e1a9/application", "externalId" : "b19529e9-60a7-4e0d-83cd-5ceb5aa2e1a9", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 3, "experienceMaxYears" : 5, "technicalSkills" : "SIEM, EDR, Network monitoring, TCP/IP, Firewalls, DNS, VPNs, IDS/IPS, MDM, RBAC, IAM, Zero Trust, Azure, AWS, GCP, DevSecOps, CI/CD", "professionalSkills" : [ "Threat hunting", "Incident response", "Vulnerability management", "Compliance assessment", "Risk management", "Security audits" ], "hardSkillsList" : [ "Security monitoring", "Log analysis", "Threat detection", "Endpoint security", "Network traffic analysis", "Cloud security monitoring", "Vulnerability scanning", "Remediation tracking" ], "hardSkills" : [ { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Endpoint security", "level" : "intermediate" }, { "name" : "Network traffic analysis", "level" : "intermediate" }, { "name" : "Cloud security monitoring", "level" : "intermediate" }, { "name" : "Vulnerability scanning", "level" : "intermediate" }, { "name" : "Remediation tracking", "level" : "intermediate" } ], "majorSkills" : "Security monitoring, Threat detection, Incident response, Endpoint security", "majorSkillsList" : [ "Security monitoring", "Threat detection", "Incident response", "Endpoint security" ], "coreResponsibilities" : "Monitor security alerts, Analyze security events, Investigate security incidents, Investigate anomalies, Investigate potential threats, Tune detection rules, Maintain detection rules, Tune alerts, Maintain alerts, Tune dashboards, Maintain dashboards, Conduct threat hunting, Identify indicators of compromise, Identify attacker TTPs, Participate incident response, Contain incidents, Eradicate incidents, Document timelines, Document remediation actions, Administer endpoint security tools, Support MDM operations, Manage identity controls, Manage access controls, Enforce RBAC policies, Conduct access reviews, Monitor network traffic, Monitor logs, Assist maintaining firewall rules, Assist maintaining network segmentation, Support Zero Trust implementation, Support least-privilege enforcement, Monitor cloud environments, Identify misconfigurations, Identify policy violations, Assist vulnerability scans, Assist remediation tracking, Assist compliance assessments, Collaborate development teams, Collaborate IT ops teams, Integrate security CI/CD pipelines", "teamCollaboration" : "Security team; Development teams; IT ops teams", "domainKnowledge" : "Network security fundamentals; Zero Trust concepts; DevSecOps principles; NIST CSF; SOC 2; CIS Controls", "domainList" : [ "network-security-fundamentals", "zero-trust-concepts", "devsecops-principles", "nist-csf", "soc-2", "cis-controls" ], "domainSpecificKnowledge" : [ "Network security fundamentals", "Zero Trust concepts", "DevSecOps principles", "NIST CSF", "SOC 2", "CIS Controls" ], "toolProficiency" : [ "SIEM platforms", "EDR platforms", "Antivirus platforms", "MDM platforms", "Firewall rules" ], "documentationSkills" : "IR playbooks; Runbooks; Escalation procedures", "problemSolvingSkills" : "Problem-solving skills", "specialRequirements" : "Based in Austin, TX, Willing to relocate", "qualificationsBasic" : "3-5 years cybersecurity analyst experience, Solid security monitoring knowledge, Solid log analysis knowledge, Solid SIEM platforms knowledge, Experience incident response, Working knowledge network security, Hands-on endpoint security experience, Hands-on EDR tools experience, Experience MDM platforms, Understanding RBAC principles, Understanding IAM principles, Familiarity Zero Trust concepts, Basic cloud security knowledge, Familiarity DevSecOps principles, Familiarity secure SDLC practices, Analytical skills, Problem-solving skills, Exceptional attention to detail", "qualificationsPreferred" : "CompTIA Security+ certification, CySA+ certification, Microsoft Certified: Security Operations Analyst Associate, Azure Security Engineer Associate, CEH certification, GIAC GSEC certification, GIAC GCIA certification, GIAC GCIH certification", "workSiteFlexibility" : "Onsite", "rawDescription" : "Level is a learning technology company dedicated to helping students build real academic and life skills with confidence and joy. We combine proven curriculum principles with world class interactive design to make meaningful practice something students want to come back to, not something they struggle through. We support what teachers, schools, and parents are already doing by increasing student engagement with high quality, standards aligned practice that reinforces classroom learning. That's why we're building: For students: Rewarding and motivating learning experiences that meet students where they are to build real academic proficiency. For educators: Tools that fit naturally into instruction and help students stay engaged while reducing teacher workload. For parents: Activities that help your kid catch up or get ahead, build confidence, and minimize homework battles, whether learning at school or at home. We are committed to helping every person maximize their potential and live a life of meaning. It's a difficult problem that requires brilliant people and tremendous effort over time. Level is looking for a skilled and motivated Cybersecurity Analyst to join our security team and help protect the organization's systems, networks, and data from evolving cyber threats. This is a hands-on technical role that requires a strong foundation in security monitoring, threat detection, incident response, and endpoint security. Reporting to the Director of Cybersecurity, this analyst will be a key contributor to day-to-day security operations, working across network security, cloud environments, and endpoint management tools to identify risks, respond to incidents, and continuously improve the organization's security posture. What You Will Do: - Monitor and analyze security alerts and events across SIEM, EDR, and network monitoring platforms - Investigate security incidents, anomalies, and potential threats to determine scope and impact - Tune and maintain detection rules, alerts, and dashboards to reduce noise and improve fidelity - Conduct threat hunting to proactively identify indicators of compromise (IOCs) and attacker TTPs - Participate in incident response including containment, eradication, and recovery; document timelines and remediation actions - Assist in developing and maintaining IR playbooks, runbooks, and escalation procedures - Administer endpoint security tools including EDR/antivirus platforms and support MDM operations - Manage identity and access controls, enforce RBAC policies, and conduct access reviews - Monitor network traffic and logs for suspicious activity; assist in maintaining firewall rules and network segmentation - Support Zero Trust implementation efforts and least-privilege enforcement - Monitor cloud environments (Azure, AWS, or GCP) for misconfigurations and policy violations - Assist with vulnerability scans, remediation tracking, and compliance assessments (NIST CSF, SOC 2, CIS Controls) - Collaborate with development and IT ops teams to integrate security into CI/CD pipelines (DevSecOps) - Assist with third-party risk management and security audits Qualifications Need to Have: - 3-5 years of hands-on experience in a cybersecurity analyst, SOC analyst, or related technical security role - Solid understanding of security monitoring, log analysis, and SIEM platforms - Experience participating in incident response activities, including investigation and remediation - Working knowledge of network security fundamentals: TCP/IP, firewalls, DNS, VPNs, IDS/IPS - Hands-on experience with endpoint security platforms and EDR tools - Experience with MDM platforms for device management and policy enforcement - Understanding of RBAC and IAM principles in enterprise environments - Familiarity with Zero Trust concepts and practical enterprise application - Basic cloud security knowledge in at least one of Azure, AWS, or GCP - Familiarity with DevSecOps principles and secure SDLC practices - Strong analytical and problem-solving skills with exceptional attention to detail - Based in Austin, TX or willing to relocate prior to start date Nice to Have: - CompTIA Security+ (strongly preferred), CySA+, or equivalent certification - Microsoft Certified: Security Operations Analyst Associate (SC-200) or Azure Security Engineer Associate (AZ-500) - CEH, GIAC GSEC, GCIA, or GCIH", "summaryDescription" : "Cybersecurity Analyst at Level. Skills: Security monitoring, Threat detection, Incident response, Endpoint security. Monitor security alerts. Analyze security events", "createdAt" : "2026-06-14T04:08:21.356", "lastUpdated" : "2026-06-15T05:23:45.000", "ingestTimestamp" : "2026-06-14T04:08:21.356", "mongoId" : "6a2ca13274d8ee00a09a4b5f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 85000, "salaryAnnualMax" : 115000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Security monitoring", "Log analysis", "Threat detection", "Endpoint security", "Network traffic analysis", "Cloud security monitoring", "Vulnerability scanning", "Remediation tracking", "Incident response", "Threat hunting", "Vulnerability management", "Compliance assessment", "Risk management", "Security audits", "Network security fundamentals", "Zero Trust concepts", "DevSecOps principles", "NIST CSF", "SOC 2", "CIS Controls", "CompTIA Security+", "CySA+", "Microsoft Certified: Security Operations Analyst Associate", "Azure Security Engineer Associate", "CEH", "GIAC GSEC", "GIAC GCIA", "GIAC GCIH", "SIEM platforms", "EDR platforms", "Antivirus platforms", "MDM platforms", "Firewall rules" ], "skillCount" : 33, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 951.7356, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Education", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca3b474d8ee00a09acfed", "title" : "Information Security Governance, Risk and Compliance Specialist", "company" : "GWI", "industry" : "Technology", "salary" : { "min" : 65000.0, "max" : 95000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Information Security Governance, Risk and Compliance Specialist in London, UK, adjusted for mid-seniority level in the technology industry." }, "location" : "London, UK", "locations" : [ "London", "UK" ], "certifications" : [ "ISO 27001" ], "timestamp" : "2026-06-16T01:21:58.151", "fingerprint" : "cd07cf418edbf652c929a8e53d688e074fbcb54e0e59e9dd5d49e6244eee6ace", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/globalwebindex/jobs/8548407002", "externalId" : "8548407002", "industryFunction" : { }, "structuredLocations" : [ { "city" : "London", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "51.5074456,-0.1277653" } ], "locationText" : "London, United Kingdom", "employmentType" : "FULL_TIME", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Mid-Senior", "professionalSkills" : [ "Risk management", "Compliance oversight", "Legal analysis", "Vendor risk management", "Client security assessments", "Security awareness training" ], "hardSkillsList" : [ "ISO 27001", "NIST frameworks", "Security policies", "Security procedures", "Cloud security" ], "hardSkills" : [ { "name" : "ISO 27001", "level" : "intermediate" }, { "name" : "NIST frameworks", "level" : "intermediate" }, { "name" : "Security policies", "level" : "intermediate" }, { "name" : "Security procedures", "level" : "intermediate" }, { "name" : "Cloud security", "level" : "intermediate" } ], "majorSkills" : "Information Security GRC, Compliance posture, Vendor risk management, Client security", "majorSkillsList" : [ "Information Security GRC", "Compliance posture", "Vendor risk management", "Client security" ], "coreResponsibilities" : "Own and maintain ISO 27001 certification, Maintain compliance across security frameworks, Develop information security policies, Implement information security policies, Maintain information security policies, Develop security procedures, Implement security procedures, Maintain security procedures, Lead vendor risk management, Lead client security assessments, Respond to client security questionnaires, Manage client onboarding requirements, Build security trust portal, Maintain security trust portal, Drive security awareness, Promote GRC culture", "teamCollaboration" : "Information Security teams; Product teams; Technology teams; Legal team", "domainKnowledge" : "Information security frameworks; SaaS environments; AI environments; Cloud security best practices", "domainList" : [ "information-security-frameworks", "saas-environments", "ai-environments", "cloud-security-best-practices" ], "domainSpecificKnowledge" : [ "Information security frameworks", "SaaS environments", "AI environments", "Cloud security best practices" ], "toolProficiency" : [ "Drata", "Vanta" ], "communicationSkills" : "Translate GRC topics; Internal guidance; Keep business informed", "continuousLearning" : "Accredited learning; Leadership development", "qualificationsBasic" : "3-5 years in information security compliance role, Develop and maintain security policies, Conduct vendor security assessments, Manage client security onboarding requirements, Implement and manage cloud security best practices", "qualificationsPreferred" : "Familiarity with Drata or Vanta, ISO 27001 certification", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Location: London, UK Weekly office requirement: Hybrid – 2 days per week Employment type: Permanent Seniority level: Mid-Senior At GWI we're always looking for extraordinary people who thrive on making an extraordinary impact. Right now we're looking for an Information Security GRC Specialist to play a key role in our Legal team in London. If that's you, and making a difference gets you out of bed in the morning, keep reading. It could be the start of something, well, extraordinary. Sounds great, what will I be doing? \uD83E\uDD14 As our Information Security GRC Specialist you'll play a pivotal role in shaping the future of security compliance at GWI. Reporting into our General Counsel and working closely with our Information Security, Product, and Technology teams, you'll own our compliance posture across security frameworks, vendor risk, and client-facing security requirements — while building a security-conscious culture across the business. A few things you'll be responsible for: \uD83D\uDC49 Own and maintain GWI's ISO 27001 certification and compliance across relevant security frameworks, keeping our posture sharp as the threat landscape evolves. \uD83D\uDC49 Develop, implement, and maintain information security policies and procedures aligned with industry best practices. \uD83D\uDC49 Lead vendor risk management and client security assessments — including responding to client security questionnaires and onboarding requirements. \uD83D\uDC49 Build and maintain GWI's security trust portal, showcasing our credentials to clients and stakeholders using tools such as Drata or Vanta. \uD83D\uDC49 Drive security awareness across the business through training programmes and internal communications that promote a strong GRC culture. It's also fun; shaking things up is what working for GWI is all about. You'll need to be flexible, comfortable with continuous change, and working in a high-tempo environment. What do I need to bring with me? \uD83E\uDDF3 You'll need to be able to demonstrate the core skills this role requires. You don't have to tick all the boxes right away; the important thing is that you're willing to learn. Here's what the team will be looking for in you: \uD83D\uDC49 In-depth, practical experience obtaining and maintaining ISO 27001 certification, with solid knowledge of frameworks such as NIST — typically 3–5 years in an information security compliance role, though other experience levels will be considered. \uD83D\uDC49 Proven ability to develop and maintain security policies and procedures that align with industry best practice. \uD83D\uDC49 Experience conducting vendor security assessments and managing client security onboarding requirements, balancing risk against commercial objectives. \uD83D\uDC49 Hands-on experience building or maintaining a security trust portal; familiarity with tools such as Drata or Vanta is a plus. \uD83D\uDC49 Knowledge of SaaS and AI environments, with experience implementing and managing cloud security best practices. \uD83D\uDC49 Strong communication skills — able to translate complex GRC topics into clear internal guidance and keep the wider business informed and engaged on security matters. Equally important is attitude. We want people who think big (to make an impact), ask why (to find a better way), and show respect (to everyone, at every level, all the time). Those are our values, and they're a big part of what we're looking for in you. What We Offer \uD83E\uDDD8 At GWI, you’ll find meaningful work, visible impact, and a culture that empowers you to do your best. Our package includes: Time to recharge – 25 days’ annual leave, plus office closures over the holidays. Health & wellbeing – Health cash plan, enhanced family benefits, carer days, and mental health support. Financial benefits – Competitive salary, 4% pension matching, and recognition programs that celebrate success. Flexibility & balance – Flexitime, early Friday finishes, hybrid and remote options, plus a “work from home” budget. Career growth – Accredited learning, leadership development, and global career mobility. Community & impact – DE&I initiatives, volunteering opportunities, donation matching, and payroll giving. Put all that together and GWI is the friendliest, most fulfilling place any of us has ever worked. Diversity, Equity & Inclusion \uD83E\uDEF6 Diversity is fundamental to who we are—both as a data company and as a workplace. Our data reflects global realities, and so must our teams. We strive to ensure our workforce is as diverse and inclusive as the insights we provide to our clients. As a Disability Confident employer, we welcome applications from disabled candidates and are committed to providing all necessary adjustments during the hiring process. We also actively encourage applications from underrepresented and marginalized communities. At GWI, you will find a place where you can contribute meaningfully, grow professionally, and belong fully. #li-hybrid #LI-NIKOSSS1", "summaryDescription" : "Information Security Governance, Risk and Compliance Specialist at GWI. Skills: Information Security GRC, Compliance posture, Vendor risk management, Client security. Own and maintain ISO 27001 certification. Maintain compliance across security frameworks", "postedDate" : "2026-06-14T20:48:06.082", "createdAt" : "2026-06-14T20:48:06.082", "lastUpdated" : "2026-06-16T01:21:58.151", "ingestTimestamp" : "2026-06-14T20:48:06.082", "mongoId" : "6a2ca3b474d8ee00a09acfed", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "ISO 27001", "NIST frameworks", "Security policies", "Security procedures", "Cloud security", "Information Security GRC", "Compliance posture", "Vendor risk management", "Client security", "Risk management", "Compliance oversight", "Legal analysis", "Client security assessments", "Security awareness training", "Information security frameworks", "SaaS environments", "AI environments", "Cloud security best practices", "Drata", "Vanta" ], "skillCount" : 20, "jobCategory" : "operations", "jobSubcategory" : "legal", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 909.3258, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca2e374d8ee00a09a9a04", "title" : "Cybersecurity Analyst", "company" : "Teal", "industry" : "Technology", "salary" : { "min" : 85000.0, "max" : 115000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Analyst in Minneapolis, adjusted for the technology industry and company size." }, "location" : "Minneapolis, MN", "locations" : [ "Minneapolis", "MN" ], "timestamp" : "2026-06-16T04:21:23.693", "fingerprint" : "853d0f753d05faf012dc74d9778dba2382c7bdade43a981f8f08a22818956966", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://teal.breezy.hr/p/edbfcb760892-cybersecurity-analyst", "externalId" : "edbfcb760892", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Minneapolis", "state" : "Minnesota", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "44.9772995,-93.2654692" } ], "locationText" : "Minneapolis, Minnesota, United States", "employmentType" : "FULL_TIME", "remoteFriendly" : false, "rawDescription" : "In 2023, TechGen and Aligned Technology Solutions, both award-winning Managed IT Service Providers, merged – forming the premier company of Teal. Teal is an advanced IT services that assists small- to medium-sized organizations in strategically leveraging their technology. With roots dating back to", "summaryDescription" : "Cybersecurity Analyst at Teal", "createdAt" : "2026-06-14T21:48:16.617", "lastUpdated" : "2026-06-16T04:21:23.693", "ingestTimestamp" : "2026-06-14T21:48:16.617", "mongoId" : "6a2ca2e374d8ee00a09a9a04", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 85000, "salaryAnnualMax" : 115000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.6666667, "_score" : 903.6143, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cb0a474d8ee00a09da9a8", "title" : "Information security & data protection analyst", "company" : "Seccl", "industry" : "Risk & compliance", "salary" : { "min" : 32000.0, "max" : 40000.0, "currency" : "GBP", "frequency" : "Yearly" }, "location" : "Edinburgh", "locations" : [ "Edinburgh" ], "timestamp" : "2026-06-15T09:16:08.561", "fingerprint" : "7d4c49c91ebbcf143a0ee6794bf2e629ae716bb691e952cb97a2499f3716bb04", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/seccl/fe4c8a0b-2017-4feb-975a-cdc89f8befaf/application", "externalId" : "fe4c8a0b-2017-4feb-975a-cdc89f8befaf", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Edinburgh", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "55.9533456,-3.1883749" } ], "locationText" : "Edinburgh, United Kingdom", "employmentType" : "FULL_TIME", "experienceMinYears" : 0, "experienceMaxYears" : 2, "experienceLevel" : "Entry", "professionalSkills" : [ "Risk management", "Legal analysis", "Compliance oversight" ], "hardSkillsList" : [ "GDPR", "DORA" ], "softSkillsList" : [ "Communicator", "Curious", "Problem solving" ], "hardSkills" : [ { "name" : "GDPR", "level" : "intermediate" }, { "name" : "DORA", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Communicator" }, { "name" : "Curious" }, { "name" : "Problem solving" } ], "majorSkills" : "Information security, Data protection, Regulatory compliance", "majorSkillsList" : [ "Information security", "Data protection", "Regulatory compliance" ], "coreResponsibilities" : "Be first point of contact for queries, Support GDPR-related activity, Assist with data subject access requests, Assist with data subject rights, Help with data protection impact assessments, Help with legitimate interest assessments, Support maintenance of Information Security Management System, Help facilitate information security risk assessments, Advise teams on data use, Support information security governance, Support data protection governance, Monitor regulatory developments, Promote awareness of information security, Promote awareness of data protection", "teamCollaboration" : "Work with people backgrounds; Work with business teams", "domainKnowledge" : "Cybersecurity; Privacy; Operational resilience; GDPR; DORA", "domainList" : [ "cybersecurity", "privacy", "operational-resilience", "gdpr", "dora" ], "domainSpecificKnowledge" : [ "Cybersecurity", "Privacy", "Operational resilience", "GDPR", "DORA" ], "communicationSkills" : "Building relationships", "continuousLearning" : "Learning budget; Training support", "problemSolvingSkills" : "Solving problems; Asking good questions", "qualificationsBasic" : "Information security experience, Data protection experience", "qualificationsPreferred" : "Technical experience", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Hybrid role to be based in our Edinburgh office. ABOUT US Seccl is the Octopus-owned embedded investment platform that’s on a mission to helping more people to invest – and invest well. We’re B-Corp certified with an amazing product-market fit, impressive early traction and the potential to transform an outdated industry, for the better. We've been growing fast and will scale even faster over the next few years. We’re also proud to be part of Octopus, the £multi billion group that's on a mission to breathe new life into broken industries, through companies like Octopus Energy, Octopus Investments and Octopus Money. Check out the Seccl website https://seccl.tech/ for the latest on our products and our mission https://seccl.tech/about/ to shape the future of investments. THE ROLE Looking to start or build your career in information security and data protection? We’re looking for an Information security and data protection analyst to join our Governance, Risk and Compliance team. You’ll report into our Head of Information security and data protection officer, who’ll support your development and help you build your knowledge as you grow into the role. You’ll be part of our 2nd Line of Defence team, helping Seccl protect its people, customers and operations. You don’t need to come with lots of technical experience. What matters most is that you’re curious, proactive, a strong communicator and keen to learn. Over time, you’ll develop valuable knowledge across cybersecurity, privacy and operational resilience, with the opportunity to become a subject matter expert in how we manage information security and data protection at Seccl. ON A TYPICAL DAY YOU WILL... - Be a first point of contact for information security and data protection queries from across the business - Support with GDPR-related activity, including data subject access requests and data subject rights - Help with data protection impact assessments and legitimate interest assessments - Support the maintenance of our Information Security Management System - Help facilitate information security risk assessments - Advise teams on the appropriate use of personal data - Support information security and data protection governance - Keep an eye on regulatory developments, including GDPR and DORA - Help promote information security and data protection awareness across Seccl THIS ROLE’S FOR YOU IF... - You’re a strong communicator who enjoys building relationships and working with people from different backgrounds - You’re comfortable being a first point of contact and helping people find the right answer - You have a genuine interest in information security, data protection, resilience or technology - You’re proactive and happy to take initiative, rather than waiting to be told what to do - You’re curious, motivated and keen to learn - You enjoy solving problems, asking good questions and working with others - You’re open to learning technical concepts and applying them in a real business setting. We’ll support you with the training you need THIS ROLE ISN’T FOR YOU IF... - You rely on a lot of top-down direction. Here, you’ll have a lot of freedom and ownership of your role, and you’ll be expected to shape your own progression - You’re not comfortable working in a fast-paced environment. Our speed and scalability are what set us apart; you need to be able to act quickly and think on your feet - You struggle to follow through on ideas. We value people who do what they say they will. If you care about something, you have the freedom here to make it happen - You don’t like change. You’ll get on great here if you relish the ambiguity of rapid growth and are willing to embrace uncertainty WHAT’S IN IT FOR YOU… We offer a generous mix of benefits for the things that really matter to our people, including: \uD83D\uDCB0 A salary between £32,000 and £40,000 – dependant on experience + reviewed annually \uD83C\uDF34 27 days holiday + bank holidays (some can be flexible) + day off on your birthday + three days (full time) per year for Dependant leave \uD83D\uDC99 Two volunteering days per year \uD83C\uDF0E Option to work abroad for up to six weeks a year \uD83C\uDF1F Secclbrate - our recognition programme that offers a mix of flexible rewards including extra pay, additional holiday and increased learning budget \uD83C\uDFC5 Length of service award – one month paid sabbatical at eight years ✅ 6% employer pension contribution, and life assurance \uD83C\uDFE5 Private medical insurance with AXA Health \uD83D\uDC6A Enhanced Parental leave \uD83D\uDCBB MacBook and up to £500 home office set up budget \uD83D\uDCD6 £750 per person learning budget \uD83C\uDF3B Health and wellbeing initiatives including free therapy via Wellness Cloud, mental health support via Headspace \uD83C\uDF31 Strong financial wellbeing focus including access to Octopus Money https://octopusmoney.com/, Octopus Share Incentive Plan and will writing offering via Octopus Legacy \uD83C\uDF81 Perkbox https://www.perkbox.com/uk – Flexi-points giving you a range of discounts and perks including free weekly coffee, gym and retail discounts \uD83D\uDEB2 Access to initiatives like Cycle to Work and Octopus Electric Vehicle Leasing OUR CULTURE We're proud to put people first, creating a culture where we truly listen to what matters most to them. Our transparent and inclusive environment encourages diversity of thought, challenge and experimentation. Check out our Glassdoor https://www.glassdoor.co.uk/Reviews/Seccl-Reviews-E3185313.htm page for the latest reviews or our LinkedIn https://www.linkedin.com/company/11050304/admin/ for company updates and insights from the team. Interview process Interviewing is a two-way thing, and we want you to have the time and opportunity to get to know us, as much as we are getting to know you. Our interviews are conversational, so come with questions and be curious. In general, you can expect the interview process to look a bit like this, (following an initial chat with one of our Talent team): - First stage – one-hour competencies-based interview with the hiring manager and another member of the team - Second stage – 30 minute team focused interview with the Chief risk officer and Head of operational resilience ⏳ We’ll only close this role once we have enough applications for the next stage. Please submit your application as soon as possible to make sure you don’t miss out and you should expect to hear back from us within one to two weeks of applying. \uD83C\uDF08 Our aim is to build a diverse and inclusive company of awesome people, with unique skills, passions and experiences. All applicants will be considered for employment without attention to age, ethnicity, religion, sex, sexual orientation, gender identity, family or parental status, national origin, or veteran, neurodiversity or disability status. If this sounds like your kind of thing, we encourage you to apply even if you don’t tick every box. We’d love to hear from you! ", "summaryDescription" : "Information security & data protection analyst at Seccl. Skills: Information security, Data protection, Regulatory compliance. Be first point of contact for queries. Support GDPR-related activity", "createdAt" : "2026-06-14T02:18:49.721", "lastUpdated" : "2026-06-15T09:16:08.561", "ingestTimestamp" : "2026-06-14T02:18:49.721", "mongoId" : "6a2cb0a474d8ee00a09da9a8", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "30k-50k", "hasSalary" : false, "allSkills" : [ "GDPR", "DORA", "Communicator", "Curious", "Problem solving", "Information security", "Data protection", "Regulatory compliance", "Risk management", "Legal analysis", "Compliance oversight", "Cybersecurity", "Privacy", "Operational resilience" ], "skillCount" : 14, "jobCategory" : "operations", "jobSubcategory" : "legal", "seniorityLevel" : "Entry", "dataQualityScore" : 0.8888889, "_score" : 901.08124, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c6b2d74d8ee00a0910932", "title" : "Information Security Officer", "company" : "Moonfare", "location" : "Berlin, Germany", "locations" : [ "Berlin", "Germany" ], "certifications" : [ "CISM", "CISA", "ISO 27001 Lead Auditor", "ISO 27001 Implementer", "GSLC", "GISP" ], "timestamp" : "2026-06-15T06:56:57.349", "fingerprint" : "558b46adf9ac516ab72e0922992095dc5cef62ec25cd21960077daf51d876952", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.moonfare.com/open-position/?gh_jid=7693276003", "externalId" : "7693276003", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Berlin", "country" : "Germany", "continent" : "eu", "source" : "llm", "workMode" : "hybrid" } ], "locationText" : "Berlin, Germany", "employmentType" : "FULL_TIME", "experienceMinYears" : 3, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Information Security", "professionalSkills" : [ "Finance or FinTech industry in the EU, specifically in the DACH region." ], "hardSkillsList" : [ "BaFin requirements", "DORA", "NIS2", "ISO 27001", "CISM", "CISA", "ISO 27001 Lead Auditor", "ISO 27001 Implementer", "GSLC", "GISP" ], "softSkillsList" : [ "Client-Centric Focus, Commitment to Excellence, Win together, Growth and Merit" ], "hardSkills" : [ { "name" : "BaFin requirements", "level" : "intermediate" }, { "name" : "DORA", "level" : "intermediate" }, { "name" : "NIS2", "level" : "intermediate" }, { "name" : "ISO 27001", "level" : "intermediate" }, { "name" : "CISM", "level" : "intermediate" }, { "name" : "CISA", "level" : "intermediate" }, { "name" : "ISO 27001 Lead Auditor", "level" : "intermediate" }, { "name" : "ISO 27001 Implementer", "level" : "intermediate" }, { "name" : "GSLC", "level" : "intermediate" }, { "name" : "GISP", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Client-Centric Focus, Commitment to Excellence, Win together, Growth and Merit" } ], "majorSkills" : "Information Security Management System (ISMS), risk assessments, security audits, BaFin requirements, ISO 27001", "majorSkillsList" : [ "Information Security Management System (ISMS), risk assessments, security audits, BaFin requirements, ISO 27001" ], "coreResponsibilities" : "Lead all information security and relevant Governance, Risk, and Compliance (GRC) initiatives. Ensure information security posture is robust, compliant with German and EU regulations, and aligned with business goals. Develop, implement, and maintain the Information Security Management System (ISMS) in accordance with ISO 27001. Conduct risk assessments and monitor risk mitigation activities. Oversee internal and external security audits. Promote continuous employee awareness of Information Security and Data Protection topics.", "teamCollaboration" : "Work closely with various departments to embed security into the fabric of our organization.", "projectManagementSkills" : [ "Lead the company's efforts to achieve and maintain compliance" ], "toolProficiency" : [ "Moonfare careers website" ], "communicationSkills" : "English; German", "documentationSkills" : "Information Security Management System (ISMS)", "continuousLearning" : "We support your development with an individual growth budget of €1,500 or 2% of your base salary (whichever is higher).", "problemSolvingSkills" : "risk mitigation", "specialRequirements" : "Only accept applications from those eligible to live and work in Berlin. Hybrid role with office attendance required 4 days/week. Do not accept applications sent by email.", "outcomesObjectives" : "Empowered to bring ideas, make decisions, and see your work directly contribute to Moonfare's success.", "qualificationsBasic" : "Proven experience in a similar Information Security role. Deep understanding and practical experience with German security regulations and BaFin requirements. Expert knowledge of information security frameworks and regulations such as ISO 27001, DORA, and NIS2. Experience in developing, maintaining, and implementing an ISMS, leading to successful certification. Excellent communication skills with full professional proficiency in English.", "qualificationsPreferred" : "A background in Software Engineering or Computer Science is beneficial. Working proficiency in German is desirable. Industry-recognized certifications such as CISM, CISA, ISO 27001 Lead Auditor/Implementer, or SANS/GIAC certifications (e.g. GSLC, GISP) are highly desirable.", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Join the team rewriting the rules in private markets. Moonfare delivers what few others can: the highly sought-after funds and hidden-gem investments that go beyond what most private banks offer. Every opportunity is subjected to a ruthless vetting process; the bar is unforgivingly high. The result? Institutional-quality portfolios for investors who demand more. Our team combines finance veterans with talent from tech, consulting, law and industries you’d never expect. Headquartered in Berlin, we operate from eight offices across Europe, the US and Asia. If you're ready to build what's next in private markets, let's talk. Information Security Officer (m/f/d) As an Information Security Officer, you will be a central figure in our journey to become a BaFin-regulated entity. As part of the 2nd line of defence, you will lead all information security and relevant Governance, Risk, and Compliance (GRC) initiatives. Your primary objective will be to ensure our information security posture is robust, compliant with German and EU regulations, and aligned with our business goals. In this role you will work closely with various departments to embed security into the fabric of our organization. Your Mission: Lead the company's efforts to achieve and maintain compliance with key information security regulations, including BaFin requirements, DORA, and NIS2. Develop, implement, and maintain the Information Security Management System (ISMS) in accordance with ISO 27001 and other relevant standards. Conduct comprehensive risk assessments and work with control functions to monitor and report on risk mitigation activities. Provide expert guidance to internal teams on information security policies, procedures, and best practices. Oversee internal and external security audits to ensure we meet our compliance goals. Act as the primary point of contact for all information security matters within the licensed entity. Promote continuous employee awareness of Information Security and Data Protection topics. The next Moonfarian: Proven experience in a similar Information Security role, preferably within the finance or FinTech industry in the EU, with specific experience in the DACH region. Deep understanding and practical experience with German security regulations and BaFin requirements. Expert knowledge of information security frameworks and regulations such as ISO 27001, DORA, and NIS2. Experience in developing, maintaining, and implementing an ISMS, leading to successful certification (e.g., ISO 27001). A background in Software Engineering or Computer Science is beneficial. Industry-recognized certifications such as CISM, CISA, ISO 27001 Lead Auditor/Implementer, or SANS/GIAC certifications (e. g. GSLC, GISP) are highly desirable. Excellent communication skills with full professional proficiency in English, working proficiency in German is desirable. If you feel you do not meet all of the requirements, we still encourage you to apply! Please Note: We can only accept applications from those eligible to live and work in Berlin. This is a hybrid role with office attendance required 4 days/week. Please note that we do not accept applications sent by email. You should submit your application directly through our careers website. Invest in yourself: Ownership and Impact: You are empowered to bring ideas, make decisions, and see your work directly contribute to Moonfare's success. Transparent Environment: We believe in open communication. You will receive regular updates on company strategy, performance against our KPIs, and key business decisions. Personal Growth: We support your development with an individual growth budget of €1,500 or 2% of your base salary (whichever is higher). Invest in Your Future: We support your long-term financial goals with a company pension scheme, providing a 20% employer contribution. Relax and Recharge: You start with 25 vacation days and you’ll receive one additional day for each year of tenure, up to a maximum of 30 days. Daily Lunch: Enjoy a free lunch every day that you are in the Berlin office, with a weekly changing menu that includes salads, curries, pastas, and a variety of vegan and vegetarian options. Subsidised Public Transport: We support your commute with a monthly subsidy for the Deutschland job ticket, making your travel easier and more affordable. Fitness and Wellbeing: Stay active with a subsidised Urban Sports Club membership, giving you flexible access to a wide variety of sports and wellness activities across Germany. A Culture of Excellence: Join a team of ambitious, smart, and committed professionals who are passionate about revolutionising private market investing. Our Values: Client-Centric Focus: Our clients come first, Moonfare comes second, and we prioritise ourselves third. Putting clients first means creating value for them is essential. Placing Moonfare second signifies that our individual professional future at Moonfare depends on the company's commercial success. Prioritising ourselves third reflects our humility in putting clients and Moonfare before personal interests. Commitment to Excellence: We pursue excellence and honor our promises. We hold ourselves to the highest standards, taking responsibility for our failures, and celebrating our successes. We commit to deadlines and stick to them and we learn from our mistakes. Win together: We are here to win and to celebrate our collective achievements. We are mission-focused and think and act like owners. We exemplify the attitude we expect and each of us commits to do what it takes to succeed. Growth and Merit: We foster personal growth but each of us earns our place as a Moonfarian through merit. We hire, retain, and develop exceptional people and invest in empowering them to excel. We must all earn our place at the table every day. We understand the important role that diversity plays in our success. Different backgrounds, experiences and ideas push us further and raise the bar. We’re committed to developing an inclusive and safe culture where everyone—regardless of colour, race, religion, sex, origin, sexuality, disability, marital status, citizenship or gender identity—knows that they are an integral part of the team and can bring their full potential to their work.", "summaryDescription" : "Information Security Officer at Moonfare. Skills: Information Security Management System (ISMS), risk assessments, security audits, BaFin requirements, ISO 27001. Lead all information security and relevant Governance, Risk, and Compliance (GRC) initiatives. Ensure information security posture is robust, compliant with German and EU regulations, and aligned with business goals. Develop, implement, and maintain the Information Security Management System (ISMS) in accordance with ISO 27001. Conduct", "postedDate" : "2026-06-14T19:15:48.901", "createdAt" : "2026-06-14T19:15:48.901", "lastUpdated" : "2026-06-15T06:56:57.349", "ingestTimestamp" : "2026-06-14T19:15:48.901", "mongoId" : "6a2c6b2d74d8ee00a0910932", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "hasSalary" : false, "allSkills" : [ "BaFin requirements", "DORA", "NIS2", "ISO 27001", "CISM", "CISA", "ISO 27001 Lead Auditor", "ISO 27001 Implementer", "GSLC", "GISP", "Client-Centric Focus, Commitment to Excellence, Win together, Growth and Merit", "Information Security Management System (ISMS), risk assessments, security audits, BaFin requirements, ISO 27001", "Finance or FinTech industry in the EU, specifically in the DACH region.", "Lead the company's efforts to achieve and maintain compliance", "Moonfare careers website" ], "skillCount" : 15, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "_score" : 898.1129, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a307371f292fd229c00211a", "title" : "Cybersecurity Network Security Specialist", "company" : "ARHS", "industry" : "Information Technology And Services", "salary" : { "min" : 105000.0, "max" : 155000.0, "currency" : "PLN", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Network Security Specialist in Warsaw, Poland, adjusted for the Technology industry." }, "location" : "Warsaw, Masovian Voivodeship, Poland", "locations" : [ "Warsaw", "Masovian Voivodeship", "Poland" ], "certifications" : [ "CCNP Security", "CCSP", "AZ-305" ], "timestamp" : "2026-06-16T10:05:41.899", "fingerprint" : "6d596a72f69922c8858a3833af24cb7a198df43530aa1956969029da8294be71", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/ARHS/744000132166709-cybersecurity-network-security-specialist", "externalId" : "744000132166709", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Warsaw", "state" : "Masovian Voivodeship", "country" : "Poland", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "52.2333742,21.0711489" } ], "locationText" : "Warsaw, Masovian Voivodeship, Poland", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "TCP/IP, DNS, DHCP, NTP, HTTPS, SSL/TLS, PKI, Cisco, Palo Alto, Panorama, Azure, SASE, SSE, Zero Trust, WAF, Load Balancing, 802.1X, NAC", "professionalSkills" : [ "Network administration", "Network security", "Troubleshooting", "Configuration management", "Documentation", "Governance" ], "hardSkillsList" : [ "Firewall management", "Routing", "Switching", "VPN management", "Packet analysis", "Network segmentation" ], "softSkillsList" : [ "Analytical skills", "Sense of responsibility", "Independent work", "Clear communication", "Structured mindset", "Team-oriented mindset" ], "hardSkills" : [ { "name" : "Firewall management", "level" : "intermediate" }, { "name" : "Routing", "level" : "intermediate" }, { "name" : "Switching", "level" : "intermediate" }, { "name" : "VPN management", "level" : "intermediate" }, { "name" : "Packet analysis", "level" : "intermediate" }, { "name" : "Network segmentation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Analytical skills" }, { "name" : "Sense of responsibility" }, { "name" : "Independent work" }, { "name" : "Clear communication" }, { "name" : "Structured mindset" }, { "name" : "Team-oriented mindset" } ], "majorSkills" : "Network security, Firewall management, Cloud networking, Troubleshooting", "majorSkillsList" : [ "Network security", "Firewall management", "Cloud networking", "Troubleshooting" ], "coreResponsibilities" : "Administer network security solutions, Monitor network security solutions, Troubleshoot network security solutions, Manage firewalls, Manage routing, Manage switching, Manage secure access technologies, Ensure stable operation of enterprise network infrastructure, Support hybrid connectivity, Provide 2nd line support, Perform advanced troubleshooting, Investigate connectivity issues, Resolve connectivity issues, Investigate performance issues, Resolve performance issues, Investigate security issues, Resolve security issues, Implement network configurations, Maintain network configurations, Manage VPNs, Manage secure remote access, Manage network segmentation, Support wireless network integrations, Support wired network integrations, Identify gaps in network security controls, Propose security improvements, Support Zero Trust initiatives, Support modern security architecture initiatives, Contribute to migration efforts, Create technical documentation, Maintain technical documentation, Create operating procedures, Maintain operating procedures, Ensure adherence to network security policies, Ensure adherence to network security standards", "teamCollaboration" : "Technical stakeholders; Non-technical stakeholders", "projectManagementSkills" : [ "Program management" ], "domainKnowledge" : "Network infrastructure; Cloud environments; Network security; Hybrid connectivity; Zero Trust; SASE/SSE; Cloud networking", "domainList" : [ "network-infrastructure", "cloud-environments", "network-security", "hybrid-connectivity", "zero-trust", "sase-sse", "cloud-networking" ], "domainSpecificKnowledge" : [ "Network infrastructure", "Cloud environments", "Network security", "Hybrid connectivity", "Zero Trust", "SASE/SSE", "Cloud networking" ], "toolProficiency" : [ "Panorama" ], "communicationSkills" : "Technical documentation; Operating procedures", "documentationSkills" : "Technical documentation; Operating procedures", "problemSolvingSkills" : "Troubleshooting; Analytical skills", "specialRequirements" : "Occasional travel within Europe, Driving license Category B", "qualificationsBasic" : "Understanding of TCP/IP, Understanding of routing, Understanding of network security policies, Knowledge of DNS, Knowledge of DHCP, Knowledge of NTP, Knowledge of core network services, Understanding of wired access technologies, Understanding of wireless access technologies, Knowledge of HTTPS, Knowledge of SSL/TLS, Knowledge of PKI, Knowledge of certificate-based authentication, Experience with traffic filtering, Hands-on experience with enterprise network environments, Experience with Cisco, Experience with Palo Alto, Experience with wireless solutions, Familiarity with endpoint network configurations, Azure networking, Network security controls, CCNP Security or equivalent", "qualificationsPreferred" : "CCSP or Azure AZ-305", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Arηs Group, Part of Accenture, specializes in the management of complex public sector IT projects, including systems integration, informatics and analytics, solution implementation and program management. Our team helps lead clients through digital and information systems design, bringing expertise in a variety of areas ranging from software development, data science and security management to machine learning, cloud, and mobile development. Arηs Group was acquired by Accenture in July 2024. Role Overview You will manage and secure enterprise network infrastructure across on-prem and cloud environments, ensuring reliable connectivity, strong security posture, and consistent network operations. The role combines hands-on administration, troubleshooting, and continuous improvement of network security capabilities. Responsibilities Network Security & Operations * Administer, monitor, and troubleshoot network security solutions * Manage firewalls, routing, switching, and secure access technologies * Ensure secure and stable operation of enterprise network infrastructure * Support hybrid connectivity (on-prem and cloud environments) Support & Troubleshooting * Provide 2nd line support for network and security-related incidents * Perform advanced troubleshooting (network flows, packet analysis, firewall dataplane) * Investigate and resolve connectivity, performance, and security issues Configuration & Implementation * Implement and maintain network configurations across environments * Manage VPNs, secure remote access, and network segmentation * Support wireless and wired network integrations (e.g. 802.1X, NAC) Security & Continuous Improvement * Identify gaps in network security controls and propose improvements * Support Zero Trust and modern security architecture initiatives * Contribute to migration efforts (e.g. SASE/SSE, cloud networking) Documentation & Governance * Create and maintain technical documentation and operating procedures * Ensure adherence to network security policies and standards ## Qualifications Core Networking * Strong understanding of TCP/IP, routing, and network security policies * Knowledge of DNS, DHCP, NTP and core network services * Understanding of wired and wireless access technologies Security & Encryption * Knowledge of HTTPS, SSL/TLS, PKI, and certificate-based authentication * Experience with traffic filtering (stateful/stateless) Infrastructure & Tools * Hands-on experience with enterprise network environments * Experience with Cisco (routing/switching), Palo Alto (firewalls, Panorama), wireless solutions * Familiarity with endpoint network configurations (Windows, Linux, iOS) Cloud & Modern Networking * Azure networking (VNets, segmentation, private endpoints, hybrid connectivity) * Network security controls (NSGs, routing, isolation) * Experience with SASE/SSE and Zero Trust principles is an advantage * Exposure to WAF and Load Balancing solutions Certifications * CCNP Security or equivalent (required) * CCSP or Azure AZ-305 (nice to have) Key Competencies * Strong analytical and troubleshooting skills * Attention to detail and sense of responsibility * Ability to work independently in complex environments * Clear communication with technical and non-technical stakeholders * Proactive, structured, and team-oriented mindset ## Additional Information * This role requires occasional travel within Europe (up to ~10 times/year) * Driving license (Category B) required", "summaryDescription" : "Cybersecurity Network Security Specialist at ARHS. Skills: Network security, Firewall management, Cloud networking, Troubleshooting. Administer network security solutions. Monitor network security solutions", "postedDate" : "2026-06-15T10:33:17.000", "createdAt" : "2026-06-16T01:31:53.743", "lastUpdated" : "2026-06-16T10:05:41.899", "ingestTimestamp" : "2026-06-16T01:31:53.743", "mongoId" : "6a307371f292fd229c00211a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Firewall management", "Routing", "Switching", "VPN management", "Packet analysis", "Network segmentation", "Analytical skills", "Sense of responsibility", "Independent work", "Clear communication", "Structured mindset", "Team-oriented mindset", "Network security", "Cloud networking", "Troubleshooting", "Network administration", "Configuration management", "Documentation", "Governance", "Program management", "Network infrastructure", "Cloud environments", "Hybrid connectivity", "Zero Trust", "SASE/SSE", "CCNP Security", "CCSP", "AZ-305", "Panorama" ], "skillCount" : 29, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 891.4059, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a306986f292fd229cfc88fd", "title" : "Cybersecurity Network Security Specialist", "company" : "ARHS", "industry" : "Information Technology And Services", "salary" : { "min" : 100000.0, "max" : 150000.0, "currency" : "PLN", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Network Security Specialist in Warsaw, Poland, adjusted for the Technology industry." }, "location" : "Warsaw, Masovian Voivodeship, Poland", "locations" : [ "Warsaw", "Masovian Voivodeship", "Poland" ], "certifications" : [ "CCNP Security", "CCSP", "AZ-305" ], "timestamp" : "2026-06-16T11:22:30.636", "fingerprint" : "55cff00c6020b96fa74b303d42642034c59187fb924c4a1f4ea7192080a0c5cb", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/ARHS/744000132166709-cybersecurity-network-security-specialist", "externalId" : "744000132166709", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Warsaw", "state" : "Masovian Voivodeship", "country" : "Poland", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "52.2333742,21.0711489" } ], "locationText" : "Warsaw, Masovian Voivodeship, Poland", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "TCP/IP, DNS, DHCP, NTP, HTTPS, SSL/TLS, PKI, Cisco, Palo Alto, Panorama, Azure, SASE, SSE, Zero Trust, WAF, Load Balancing, 802.1X, NAC", "professionalSkills" : [ "Network administration", "Network security", "Troubleshooting", "Configuration management", "Documentation", "Governance" ], "hardSkillsList" : [ "Firewall management", "Routing", "Switching", "VPN management", "Packet analysis", "Network segmentation", "Wireless integration", "Wired integration" ], "softSkillsList" : [ "Analytical skills", "Sense of responsibility", "Clear communication", "Structured mindset", "Team-oriented mindset" ], "hardSkills" : [ { "name" : "Firewall management", "level" : "intermediate" }, { "name" : "Routing", "level" : "intermediate" }, { "name" : "Switching", "level" : "intermediate" }, { "name" : "VPN management", "level" : "intermediate" }, { "name" : "Packet analysis", "level" : "intermediate" }, { "name" : "Network segmentation", "level" : "intermediate" }, { "name" : "Wireless integration", "level" : "intermediate" }, { "name" : "Wired integration", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Analytical skills" }, { "name" : "Sense of responsibility" }, { "name" : "Clear communication" }, { "name" : "Structured mindset" }, { "name" : "Team-oriented mindset" } ], "majorSkills" : "Network security, Enterprise network infrastructure, Cloud networking", "majorSkillsList" : [ "Network security", "Enterprise network infrastructure", "Cloud networking" ], "coreResponsibilities" : "Administer network security solutions, Monitor network security solutions, Troubleshoot network security solutions, Manage firewalls, Manage routing, Manage switching, Manage secure access technologies, Ensure stable operation of enterprise network infrastructure, Support hybrid connectivity, Provide 2nd line support, Perform advanced troubleshooting, Investigate connectivity issues, Investigate performance issues, Investigate security issues, Resolve connectivity issues, Resolve performance issues, Resolve security issues, Implement network configurations, Maintain network configurations, Manage VPNs, Manage secure remote access, Manage network segmentation, Support wireless network integrations, Support wired network integrations, Identify gaps in network security controls, Propose improvements to network security, Support Zero Trust initiatives, Support modern security architecture initiatives, Contribute to migration efforts, Create technical documentation, Maintain technical documentation, Create operating procedures, Maintain operating procedures, Ensure adherence to network security policies, Ensure adherence to network security standards", "teamCollaboration" : "Technical stakeholders; Non-technical stakeholders", "projectManagementSkills" : [ "Program management" ], "domainKnowledge" : "Network security; Cloud networking; Zero Trust principles; SASE; SSE; Modern security architecture", "domainList" : [ "network-security", "cloud-networking", "zero-trust-principles", "sase", "sse", "modern-security-architecture" ], "domainSpecificKnowledge" : [ "Network security", "Cloud networking", "Zero Trust principles", "SASE", "SSE", "Modern security architecture" ], "toolProficiency" : [ "Panorama" ], "communicationSkills" : "Technical documentation; Operating procedures", "documentationSkills" : "Technical documentation; Operating procedures", "problemSolvingSkills" : "Troubleshooting; Analytical skills", "specialRequirements" : "Occasional travel within Europe, Driving license Category B", "qualificationsBasic" : "Understanding of TCP/IP, Understanding of routing, Understanding of network security policies, Knowledge of DNS, Knowledge of DHCP, Knowledge of NTP, Knowledge of core network services, Understanding of wired access technologies, Understanding of wireless access technologies, Knowledge of HTTPS, Knowledge of SSL/TLS, Knowledge of PKI, Knowledge of certificate-based authentication, Experience with traffic filtering, Hands-on experience with enterprise network environments, Experience with Cisco, Experience with Palo Alto, Experience with wireless solutions, Familiarity with endpoint network configurations, Azure networking, Network security controls, CCNP Security or equivalent", "qualificationsPreferred" : "CCSP or Azure AZ-305", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Arηs Group, Part of Accenture, specializes in the management of complex public sector IT projects, including systems integration, informatics and analytics, solution implementation and program management. Our team helps lead clients through digital and information systems design, bringing expertise in a variety of areas ranging from software development, data science and security management to machine learning, cloud, and mobile development. Arηs Group was acquired by Accenture in July 2024. Role Overview You will manage and secure enterprise network infrastructure across on-prem and cloud environments, ensuring reliable connectivity, strong security posture, and consistent network operations. The role combines hands-on administration, troubleshooting, and continuous improvement of network security capabilities. Responsibilities Network Security & Operations * Administer, monitor, and troubleshoot network security solutions * Manage firewalls, routing, switching, and secure access technologies * Ensure secure and stable operation of enterprise network infrastructure * Support hybrid connectivity (on-prem and cloud environments) Support & Troubleshooting * Provide 2nd line support for network and security-related incidents * Perform advanced troubleshooting (network flows, packet analysis, firewall dataplane) * Investigate and resolve connectivity, performance, and security issues Configuration & Implementation * Implement and maintain network configurations across environments * Manage VPNs, secure remote access, and network segmentation * Support wireless and wired network integrations (e.g. 802.1X, NAC) Security & Continuous Improvement * Identify gaps in network security controls and propose improvements * Support Zero Trust and modern security architecture initiatives * Contribute to migration efforts (e.g. SASE/SSE, cloud networking) Documentation & Governance * Create and maintain technical documentation and operating procedures * Ensure adherence to network security policies and standards ## Qualifications Core Networking * Strong understanding of TCP/IP, routing, and network security policies * Knowledge of DNS, DHCP, NTP and core network services * Understanding of wired and wireless access technologies Security & Encryption * Knowledge of HTTPS, SSL/TLS, PKI, and certificate-based authentication * Experience with traffic filtering (stateful/stateless) Infrastructure & Tools * Hands-on experience with enterprise network environments * Experience with Cisco (routing/switching), Palo Alto (firewalls, Panorama), wireless solutions * Familiarity with endpoint network configurations (Windows, Linux, iOS) Cloud & Modern Networking * Azure networking (VNets, segmentation, private endpoints, hybrid connectivity) * Network security controls (NSGs, routing, isolation) * Experience with SASE/SSE and Zero Trust principles is an advantage * Exposure to WAF and Load Balancing solutions Certifications * CCNP Security or equivalent (required) * CCSP or Azure AZ-305 (nice to have) Key Competencies * Strong analytical and troubleshooting skills * Attention to detail and sense of responsibility * Ability to work independently in complex environments * Clear communication with technical and non-technical stakeholders * Proactive, structured, and team-oriented mindset ## Additional Information * This role requires occasional travel within Europe (up to ~10 times/year) * Driving license (Category B) required", "summaryDescription" : "Cybersecurity Network Security Specialist at ARHS. Skills: Network security, Enterprise network infrastructure, Cloud networking. Administer network security solutions. Monitor network security solutions", "postedDate" : "2026-06-15T10:33:17.000", "createdAt" : "2026-06-16T00:19:01.793", "lastUpdated" : "2026-06-16T11:22:30.636", "ingestTimestamp" : "2026-06-16T00:19:01.793", "mongoId" : "6a306986f292fd229cfc88fd", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Firewall management", "Routing", "Switching", "VPN management", "Packet analysis", "Network segmentation", "Wireless integration", "Wired integration", "Analytical skills", "Sense of responsibility", "Clear communication", "Structured mindset", "Team-oriented mindset", "Network security", "Enterprise network infrastructure", "Cloud networking", "Network administration", "Troubleshooting", "Configuration management", "Documentation", "Governance", "Program management", "Zero Trust principles", "SASE", "SSE", "Modern security architecture", "CCNP Security", "CCSP", "AZ-305", "Panorama" ], "skillCount" : 30, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 891.4059, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305944f292fd229cf464d2", "title" : "Information Security Administrator", "company" : "Quadient", "industry" : "Computer Software", "salary" : { "min" : 35000.0, "max" : 45000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an Entry-level Information Security Administrator in London, UK, adjusted for the technology industry and company size." }, "location" : "London, United Kingdom", "locations" : [ "London", "United Kingdom" ], "certifications" : [ "ISO 27001 Foundation", "ISO 27001 Lead Implementer", "ISO 27001 Lead Auditor", "ISO 27701 Foundation", "CompTIA Security+", "Certified Information Security Manager (CISM)" ], "timestamp" : "2026-06-16T07:26:15.723", "fingerprint" : "c0993c278432bae395c64c4263b3fb8d63a0ce4054402f7d71a8eec326407f5f", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Quadient1/744000132179212-information-security-administrator", "externalId" : "744000132179212", "industryFunction" : { }, "structuredLocations" : [ { "city" : "London", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "51.5074456,-0.1277653" } ], "locationText" : "London, United Kingdom", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "mid", "technicalSkills" : "Microsoft 365, IT systems, Networks, Cloud services", "professionalSkills" : [ "Organisational skills", "Analytical thinking", "Problem-solving" ], "hardSkillsList" : [ "Risk assessment", "Supplier assessments", "Audit support" ], "hardSkills" : [ { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Supplier assessments", "level" : "intermediate" }, { "name" : "Audit support", "level" : "intermediate" } ], "majorSkills" : "Information security, ISO 27001, ISO 27701, Risk management", "majorSkillsList" : [ "Information security", "ISO 27001", "ISO 27701", "Risk management" ], "coreResponsibilities" : "Administer and maintain ISMS/PIMS, Investigate and resolve security incidents, Maintain risk registers, Ensure risks are identified, recorded, assessed, and treated, Maintain legal registers, Complete supplier security assessments, Support internal and external audits, Support management reviews, Assist with information security enquiries, Promote adherence to policies and best practices", "teamCollaboration" : "Other business areas", "domainKnowledge" : "Information security concepts; CIA triad; ISO 27001:2022; ISO 27701:2019; GDPR; Data protection principles", "domainList" : [ "information-security-concepts", "cia-triad", "iso-27001-2022", "iso-27701-2019", "gdpr", "data-protection-principles" ], "domainSpecificKnowledge" : [ "Information security concepts", "CIA triad", "ISO 27001:2022", "ISO 27701:2019", "GDPR", "Data protection principles" ], "toolProficiency" : [ "Excel", "Word", "Teams", "SharePoint" ], "communicationSkills" : "Written communication; Verbal communication", "continuousLearning" : "Online learning platform", "problemSolvingSkills" : "Problem-solving", "qualificationsBasic" : "Basic understanding of information security concepts, Awareness of ISO 27001 or similar standards, Proficiency in Microsoft 365 tools, Familiarity with basic IT systems, Degree in Information Security, IT or related field, Internship, placement, or entry-level experience in IT or security", "qualificationsPreferred" : "Exposure to ISO 27001:2022 or ISO 27701:2019 environments, Knowledge of GDPR or data protection principles, ISO 27001 Foundation / Lead Implementer / Lead Auditor, ISO 27701 Foundation, CompTIA Security+, Certified Information Security Manager (CISM) or similar", "remoteFriendly" : false, "workSiteFlexibility" : "Hybrid", "rawDescription" : "At Quadient , we support businesses of all sizes in their digital transformation and growth journey, unlocking operational efficiency with reliable, secure, and sustainable automation processes. Our success in delivering innovation and business growth is inspired by the connections our diverse teams create every day, with our clients and each other. It’s these connections that make Quadient such an exceptional place to grow your career, develop your skills and make a real impact – help our future-focused business lead the way in powering secure and sustainable business connections through digital and physical channels. The role assists the Information Security Team to ensure that security controls are implemented, monitored, and maintained in accordance with regulatory, contractual, and organisational requirements. The successful applicant will also engage with other areas of the business to assist with their Information Security enquiries, as well as helping ensure that a strong security and privacy culture is maintained across the organisation. Your role in our future: * Assist with the administration and maintenance of Quadient’s ISO 27001:2022/ISO 27701:2019 certified ISMS/PIMS * Investigate and resolve security incidents * Maintain risk registers and ensure risks are identified, recorded, assessed, and treated appropriately * Maintain legal registers * Complete supplier security assessments * Support internal and external audits, including certification and surveillance audits. * Support management reviews with relevant metrics and insights * Assist with information security enquiries from other business areas and promote adherence to Quadient’s policies and best practices ## Qualifications Your profile: * Basic understanding of information security concepts (CIA triad, risk, controls) * Awareness of ISO 27001 or similar standards (academic or practical exposure) * Proactive, self-motivated with strong organisational skills * Analytical thinking and problem-solving * Good written and verbal communication skills * Strong attention to detail * Ability to follow processes and work under guidance * Proficiency in Microsoft 365 tools (Excel, Word, Teams, SharePoint) * Exposure to ISO 27001:2022 or ISO 27701:2019 environments * Knowledge of GDPR or data protection principles * Familiarity with basic IT systems, networks, or cloud services * Internship, placement, or entry-level experience in IT or security * Degree in Information Security, IT or related field (or equivalent experience) * ISO 27001 Foundation / Lead Implementer / Lead Auditor * ISO 27701 Foundation * CompTIA Security+ * Certified Information Security Manager (CISM) or similar ## Additional Information Rewards & Benefits * Flexible Work: Embrace a hybrid work model blending office and remote setup for a balanced lifestyle. * Endless Learning: Access global opportunities for growth through our 24/7 online learning platform. * Inclusive Community: Join our Empowered Communities and engage in our Philanthropy program. * Comprehensive Rewards: Enjoy competitive Total Rewards covering wellness, work/life balance, and more, including a generous referral scheme. * Caring for Wellbeing: Access our complimentary employee assistance program for mental health support. Smart Work at Quadient At Quadient, our Smart Work approach fosters connection, collaboration, and innovation while offering flexibility based on role requirements. Whether on-site, hybrid, or remote, our work environments are designed to support productivity and engagement. Hybrid employees balance remote and in-office work, on-site roles contribute daily to our vibrant workplace culture, and remote employees stay connected through virtual collaboration and in-person events. No matter where you work, you’ll be part of a dynamic, people-first community that drives success together. Be yourself at Quadient Our values define how we work as a team: Empowerment, Passion, Inspiration and Community. They inspire us to be EPIC. Together. What makes Quadient different is how different we are. We’re a team of individuals with one goal but many perspectives. When you connect with Quadient, you become part of a community that cares - in a culture that embraces differences and values every voice. We will consider any reasonable modifications to the interview process. If you require any assistance with the application process, please email us at career@quadient.com Quadient is an Equal Employment Opportunity Employer. *: We firmly believe in zero discrimination in employment on any basis, including race, color, religion, sex, national origin, age, disability, veteran or military status, genetic information, citizenship status, and any other characteristics protected by local, state, or federal law. People. Connected.", "summaryDescription" : "Information Security Administrator at Quadient. Skills: Information security, ISO 27001, ISO 27701, Risk management. Administer and maintain ISMS/PIMS. Investigate and resolve security incidents", "postedDate" : "2026-06-15T11:43:54.000", "createdAt" : "2026-06-16T00:00:34.414", "lastUpdated" : "2026-06-16T07:26:15.723", "ingestTimestamp" : "2026-06-16T00:00:34.414", "mongoId" : "6a305944f292fd229cf464d2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "30k-50k", "hasSalary" : false, "allSkills" : [ "Risk assessment", "Supplier assessments", "Audit support", "Information security", "ISO 27001", "ISO 27701", "Risk management", "Organisational skills", "Analytical thinking", "Problem-solving", "Information security concepts", "CIA triad", "ISO 27001:2022", "ISO 27701:2019", "GDPR", "Data protection principles", "ISO 27001 Foundation", "ISO 27001 Lead Implementer", "ISO 27001 Lead Auditor", "ISO 27701 Foundation", "CompTIA Security+", "Certified Information Security Manager (CISM)", "Excel", "Word", "Teams", "SharePoint" ], "skillCount" : 26, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Entry", "dataQualityScore" : 1.0, "_score" : 873.78986, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c692274d8ee00a09062b7", "title" : "Chief Information Security Officer", "company" : "Sarvam", "industry" : "Engineering", "salary" : { "min" : 7500000.0, "max" : 1.25E7, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an Executive Chief Information Security Officer in the Technology industry in Bengaluru, India, adjusted for seniority and company size." }, "location" : "Bengaluru", "locations" : [ "Bengaluru" ], "certifications" : [ "CISSP", "CISM" ], "timestamp" : "2026-06-16T00:41:38.759", "fingerprint" : "c5579bb11e7b1802741135aea9ae051716cafaf8003516a4eaad66af4031e0d6", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/sarvam/8b83a923-78ac-485d-a1b4-304ea526160c/application", "externalId" : "8b83a923-78ac-485d-a1b4-304ea526160c", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bengaluru", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "12.9767936,77.5900820" } ], "locationText" : "Bengaluru, India", "employmentType" : "FULL_TIME", "experienceMinYears" : 10, "experienceMaxYears" : 99, "experienceLevel" : "Executive", "professionalSkills" : [ "Risk mitigation", "Stakeholder management", "Problem solving" ], "hardSkillsList" : [ "Vulnerability management" ], "hardSkills" : [ { "name" : "Vulnerability management", "level" : "intermediate" } ], "majorSkills" : "Information security leadership, Security compliance, Risk management", "majorSkillsList" : [ "Information security leadership", "Security compliance", "Risk management" ], "coreResponsibilities" : "Oversee compliance with security standards, Identify and assess vulnerabilities, Manage vulnerabilities across systems, Establish security policies, Drive security procedures, Drive security best practices, Integrate security into development lifecycle, Lead risk assessments, Lead audits, Lead security reviews, Ensure timely remediation of security issues, Ensure remediation of compliance gaps, Act as primary point of contact, Build security-focused culture, Mentor security-focused culture", "teamCollaboration" : "Product teams; Engineering teams; Platform teams", "domainKnowledge" : "Security compliance frameworks; ISO 27001; SOC 2; GDPR", "domainList" : [ "security-compliance-frameworks", "iso-27001", "soc-2", "gdpr" ], "domainSpecificKnowledge" : [ "Security compliance frameworks", "ISO 27001", "SOC 2", "GDPR" ], "communicationSkills" : "Stakeholder management; Communication", "problemSolvingSkills" : "Problem solving; Analytical abilities", "qualificationsBasic" : "Proven experience in information security leadership roles, Hands-on experience in vulnerability management, Ability to work cross-functionally, Excellent stakeholder management skills, Excellent communication skills, Analytical and problem-solving abilities", "qualificationsPreferred" : "Relevant certifications such as CISSP, Relevant certifications such as CISM, Experience in scaling security practices", "rawDescription" : "About Sarvam Sarvam is building the bedrock of Sovereign AI for India. The company is developing India’s full-stack sovereign AI platform, building across research, models, infrastructure and applications with a singular focus on making AI genuinely work for India. Sarvam works with leading enterprises and public institutions and is backed by Lightspeed, Peak XV, and Khosla Ventures. Sarvam partners with India’s leading brands, including Tata Capital, SBI Life, CRED, IDFC, and LIC. About the Role We are looking for an experienced and strategic Chief Information Security Officer (CISO) to lead and strengthen our organization’s information security posture. The ideal candidate will be responsible for overseeing all security and compliance initiatives, managing vulnerabilities, and ensuring alignment of security practices across product and engineering teams. What You’ll Do - Oversee and ensure compliance with all relevant security standards, regulations, and frameworks applicable to the organization. - Identify, assess, and manage vulnerabilities across systems, applications, and infrastructure. - Establish and drive organization-wide security policies, procedures, and best practices. - Collaborate closely with product, engineering, and platform teams to integrate security into the development lifecycle. - Lead risk assessments, audits, and security reviews to proactively mitigate threats. - Ensure timely remediation of security issues and compliance gaps. - Act as the primary point of contact for all information security-related matters. - Build and mentor a security-focused culture across teams. What We're Looking For - Proven experience in information security leadership roles (preferably as a CISO or similar). - Strong understanding of security compliance frameworks (ISO 27001, SOC 2, GDPR, etc.). - Hands-on experience in vulnerability management and risk mitigation strategies. - Ability to work cross-functionally with product and engineering teams. - Excellent stakeholder management and communication skills. - Strong analytical and problem-solving abilities. Bonus Points - Relevant certifications such as CISSP, CISM, or equivalent. - Experience in scaling security practices in a fast-paced product/tech environment. Why Sarvam? Sarvam is a fast-moving, high talent-density team building full-stack AI for India, working on problems that push the frontiers of AI with real population-scale impact. - Work alongside researchers, engineers, builders, and business leaders who move fast and hold each other to a very high bar - High ownership and high impact, from day one - Everything we do is AI-first, from the way we build and ship to the way we think about problems - You can work on problems that could change how an entire country learns, works, and communicates If you want to work on problems at the frontier of AI in India, Sarvam is the place to be. ", "summaryDescription" : "Chief Information Security Officer at Sarvam. Skills: Information security leadership, Security compliance, Risk management. Oversee compliance with security standards. Identify and assess vulnerabilities", "createdAt" : "2026-06-14T19:27:09.187", "lastUpdated" : "2026-06-16T00:41:38.759", "ingestTimestamp" : "2026-06-14T19:27:09.187", "mongoId" : "6a2c692274d8ee00a09062b7", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Vulnerability management", "Information security leadership", "Security compliance", "Risk management", "Risk mitigation", "Stakeholder management", "Problem solving", "Security compliance frameworks", "ISO 27001", "SOC 2", "GDPR", "CISSP", "CISM" ], "skillCount" : 13, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Executive", "dataQualityScore" : 0.8888889, "_score" : 871.191, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c5dc974d8ee00a08de8b8", "title" : "Cybersecurity Analyst", "company" : "SkyePoint Decisions", "industry" : "IT service provider", "salary" : { "min" : 95000.0, "max" : 135000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Analyst in Arlington, United States, adjusted for industry and contract employment type." }, "location" : "1801 North Lynn St, Arlington, VA 22209", "locations" : [ "1801 North Lynn St", "Arlington", "VA 22209" ], "certifications" : [ "CISSP-ISSAP", "CISSP-ISSEP", "CISSP", "Security+ CE", "CySA+", "PPDA", "Agile IC", "SNOW App Dev" ], "timestamp" : "2026-06-15T00:47:32.599", "fingerprint" : "ac1a419fb03473c9fa3f06eee0d53bbb3539addd4fcad99688fd84023b604265", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/skyepointdecisionsinc/jobs/4273942009", "externalId" : "4273942009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" } ], "locationText" : "Arlington, Virginia, United States", "employmentType" : "CONTRACT", "minimumEducation" : "Bachelor's", "technicalSkills" : "Windows Server, Active Directory, SQL, Oracle, Azure AD", "professionalSkills" : [ "Cybersecurity Architecture", "Critical Infrastructure", "Applications Development", "Business processes", "Enterprise application security", "Customer service excellence", "Business acumen" ], "hardSkillsList" : [ "FISMA compliance", "NIST SP 800-53", "CIS Benchmarks", "DISA STIGs", "Research plans execution" ], "hardSkills" : [ { "name" : "FISMA compliance", "level" : "intermediate" }, { "name" : "NIST SP 800-53", "level" : "intermediate" }, { "name" : "CIS Benchmarks", "level" : "intermediate" }, { "name" : "DISA STIGs", "level" : "intermediate" }, { "name" : "Research plans execution", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity, NIST SP 800-53, FISMA compliance", "majorSkillsList" : [ "Cybersecurity", "NIST SP 800-53", "FISMA compliance" ], "coreResponsibilities" : "Support Security Standards HS, Provide cyber and technology security experience, Enable innovative business processes, Enable effective business processes, Enable secure business processes, Develop research plans, Execute research plans, Work with Windows Server, Manage Active Directory, Work with enterprise application virtualization, Work with server virtualization", "projectManagementSkills" : [ "Agile IC" ], "domainKnowledge" : "Cybersecurity domains; Enterprise application security; CIS Benchmarks; DISA STIGs; Cloud identity services", "domainList" : [ "cybersecurity-domains", "enterprise-application-security", "cis-benchmarks", "disa-stigs", "cloud-identity-services" ], "domainSpecificKnowledge" : [ "Cybersecurity domains", "Enterprise application security", "CIS Benchmarks", "DISA STIGs", "Cloud identity services" ], "documentationSkills" : "Technical writing skills", "continuousLearning" : "Certification incentive program", "specialRequirements" : "U. S. citizenship required, Onsite 5 days a week", "qualificationsBasic" : "4 years experience in lieu of degree, Active Secret clearance, Ability to obtain Top Secret clearance", "qualificationsPreferred" : "Process automation experience, AI tools and automation platforms, Virtualized IT systems development, Enterprise mobile device deployments, Red Hat Enterprise Linux systems, Networking technologies expertise", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U. S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively – anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results. This is a contingent position based upon customer approval. SkyePoint Decisions is seeking a Cybersecurity Analyst to support the Diplomatic Security Cyber Mission (DSCM) program providing leading cyber and technology security experience to enable innovative, effective, and secure business processes. This position is located in Arlington, VA and will be onsite 5 days a week. No hybrid/telework allowed. Responsibilities: Support the Security Standards HS and an additional 4 years may be considered in lieu of bachelors degree. Must possess, or obtain prior to start date, at least one of the following certifications (continued certification is required as a condition of employment): CISSP-ISSAP, CISSP-ISSEP, CISSP, Security+ CE, CySA+, PPDA, Agile IC, SNOW App Dev. Experience and expertise across multiple cybersecurity domains, including FISMA compliance, NIST SP 800‑53 Revision 5 security controls, enterprise application security configuration, CIS Benchmarks, and DISA STIGs. Experience developing and executing research plans. Experience working with Windows Server in an enterprise environment. Experience managing Active Directory in a multi-domain environment. Experience with enterprise application or server virtualization. Demonstrated customer service excellence and strong business acumen. U. S. citizenship required. Active Secret clearance with the ability to obtain a final Top Secret security clearance. Preferred Qualifications: Experience with process automation - strongly desired. Demonstrated use of AI tools and automation platforms to enhance workflows, analysis, and documentation efficiency. Strong technical writing skills. Experience engineering or maintaining database infrastructure (SQL, Oracle). Experience with Active Directory Federation Services (ADFS), Azure AD, or cloud identity services. Experience developing or managing virtualized IT systems. Networking technologies expertise. Experience configuring or administering enterprise mobile device deployments. Experience working with Red Hat Enterprise Linux systems in an enterprise environment. Compensation: Salary Range: $90,000-$103,000 The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package. Salary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate’s combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, market data and business considerations. In addition to a competitive salary, SkyePoint offers benefits including a certification incentive program, PTO, floating federal holiday options, several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, Vision, ST/LT Disability, Life Insurance, and 401k matched. What We Can Offer You: At SkyePoint, we go B.I. G. (beginning in GRATITUDE) by recognizing all we have and giving back to our employees, families, and communities. It instills a positive mindset that permeates all we do. By beginning in gratitude, SkyePoint can continue to spread living in gratitude each day. Great Benefits: Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, ST/LT Disability, Life Insurance, floating federal holiday options, and 401k matched Certificate Incentive Program: To promote professional development, we recognize and reward employees who obtain new certifications aligned with business needs. Flexible Work Environment SkyePoint Decisions is an established ISO 9001:2015 and ISO/IEC 27001:2013 certified small business and appraised at CMMI Level 3 for Services and Development. We possess a common vision of excellence and foster a collaborative team culture built upon individual performance and accountability. We invest in our people and systems to create value for our clients. It is the SkyePoint Way. We are grateful for the opportunity to work with exceptional people and give back to the communities we serve. Our employees value the flexibility at SkyePoint that allows them to balance quality work and their personal lives. SkyePoint Decisions is a participating E-Verify Employer. U. S. Citizenship is required for most positions. Equal Opportunity Employer/Veterans/Disabled. CCPA Disclosure Notice Here", "summaryDescription" : "Cybersecurity Analyst at SkyePoint Decisions. Skills: Cybersecurity, NIST SP 800-53, FISMA compliance. Support Security Standards HS. Provide cyber and technology security experience", "postedDate" : "2026-06-12T21:39:27.187", "createdAt" : "2026-06-12T21:39:27.187", "lastUpdated" : "2026-06-15T00:47:32.599", "ingestTimestamp" : "2026-06-12T21:39:27.187", "mongoId" : "6a2c5dc974d8ee00a08de8b8", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 95000, "salaryAnnualMax" : 135000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "FISMA compliance", "NIST SP 800-53", "CIS Benchmarks", "DISA STIGs", "Research plans execution", "Cybersecurity", "Cybersecurity Architecture", "Critical Infrastructure", "Applications Development", "Business processes", "Enterprise application security", "Customer service excellence", "Business acumen", "Agile IC", "Cybersecurity domains", "Cloud identity services", "CISSP-ISSAP", "CISSP-ISSEP", "CISSP", "Security+ CE", "CySA+", "PPDA", "SNOW App Dev" ], "skillCount" : 23, "jobCategory" : "other", "jobSubcategory" : "billable-", "dataQualityScore" : 0.8888889, "_score" : 868.62915, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "IT service provider" }, { "id" : "69ce5e3b9bc74574cb677960", "title" : "Information Security Consultant", "company" : "Mercedes-Benz Group China Ltd.", "industry" : "Technology", "salary" : { "min" : 450000.0, "max" : 750000.0, "currency" : "CNY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Information Security Consultant in Beijing, China, adjusted for senior seniority and the technology industry." }, "location" : "China (Mainland)-Beijing-Beijing", "locations" : [ "China (Mainland)-Beijing-Beijing", "Daimler Tower 8, Wangjing Street Chaoyang District, , Beijing" ], "certifications" : [ "CISA", "CISSP" ], "timestamp" : "2026-06-16T00:40:11.634", "fingerprint" : "a292e8ca2ab8e33feb17fa83068d132ff45387a45e2d7f1bce4df6ff3bd255ee", "source" : "taleo", "language" : "en", "applyUrl" : "https://daimler.taleo.net/careersection/ex/jobdetail.ftl?job=873158", "externalId" : "873158", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Beijing", "state" : "Beijing", "country" : "China", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "39.9011168,116.4210134" } ], "locationText" : "Beijing, Beijing, China", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Cloud Security, Network, Web Technologies, Database, Operating Systems", "professionalSkills" : [ "Risk Management", "Compliance", "Security Standards", "Data Protection", "IT Operations" ], "hardSkillsList" : [ "Security governance", "Security operations" ], "hardSkills" : [ { "name" : "Security governance", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" } ], "majorSkills" : "Security governance, Security operations, Risk Management, Compliance", "majorSkillsList" : [ "Security governance", "Security operations", "Risk Management", "Compliance" ], "domainKnowledge" : "Information Security; IT Assets; ISO 27001; NIST; ITIL", "domainList" : [ "information-security", "it-assets", "iso-27001", "nist", "itil" ], "domainSpecificKnowledge" : [ "Information Security", "IT Assets", "ISO 27001", "NIST", "ITIL" ], "qualificationsBasic" : "Experience with security frameworks, Experience with NIST, Experience with ISO 27001, CISA certification, CISSP certification, 5+ years experience", "remoteFriendly" : false, "rawDescription" : "Objective of job Ensure that the organization and IT assets follow the security standard and governance. You monitor and identify vulnerabilities in systems, threats and issues, document it and track the remediation. Develop and implement cloud security strategies. -Responsible for the governance of compliance with policies and processes to protect the confidentiality, integrity and availability of IT assets (information, data and IT services) within the organization. -Responsible for organizational and technical controls -Support in risk assessment and analysis and monitoring the implementation of risk control/minimization measures -Identification of possible vulnerabilities in services and applications. Ordering and monitoring of penetration and assessment services. Document the results and ensure mitigation/minimization -Assessing threats and developing appropriate security measures and assessing their effectiveness -Assist businesspartners in information classification -Coordination for security incidents and participation in incident response activities, including mitigation and remediation strategies [3] -Take care of actuality of disaster or application recovery plans -Develop and conduct target group orientated awareness campaigns -Define security controls derived from policies Job designation •Developing and Maintaining Security Policies and Standards Responsible for creating, updating, and enforcing information security policies, standards, and procedures that align with legal, regulatory, and contractual requirements. This includes ensuring that policies are comprehensive, clearly communicated, and regularly reviewed. •Ensuring Regulatory Compliance Ensure the organization complies with relevant laws, regulations, and industry standards such as ISO 27001, NIST, and others. This involves understanding the specific requirements of each regulation and implementing controls to meet them. •Security Audits and Assessments -Responsible for planning and conducting internal security audits to assess the effectiveness of security controls and identify areas for improvement. -Coordinate external audits and assessments, ensuring the organization is prepared and responsive to auditor requests. •Risk Management and Governance -Identifying, assessing, and managing information security risks across the organization. This includes conducting regular risk assessments, developing risk mitigation strategies, and monitoring the effectiveness of controls. -Contribute to the development of a strong governance framework for information security. •Compliance Reporting Responsible for preparing and submitting reports to management and regulatory bodies on the organization's security posture and compliance efforts. This includes tracking key security metrics, documenting compliance activities, and communicating security risks and issues to relevant stakeholders. •Policy Enforcement Responsible for ensuring that security policies are consistently enforced across the organization. This includes monitoring compliance with policies, investigating security violations, and taking corrective action when necessary •Supplier Risk Management Assesses the security practices of third-party suppliers and service providers to ensure they meet the organization's security requirements. This includes reviewing vendor contracts, conducting security assessments, and monitoring vendor compliance with security policies •Collaboration and Communication -Collaborating with other IT teams, developers, and business stakeholders. -Providing security training and awareness to employees. -Communicating security risks and recommendations to management. Qualification •Professional Skills: -Deep understanding and experience on: IT Security, Risk Management, Compliance & Security Standards, Knowledge in all relevant Operating Systems, Data Protection -Knowledge of: Cloud Security, Network, Web Technologies, Database, IT operations (ITIL) •Experience with security frameworks, such as NIST, and ISO 27001. •Relevant certifications, CISA, CISSP •> 5 years experience with focus in areas of security governance and security operations Education: Bachelor's degree and above in Computer Science encompassing Information Security Mercedes-Benz Group China Ltd.", "summaryDescription" : "Information Security Consultant at Mercedes-Benz Group China Ltd.. Skills: Security governance, Security operations, Risk Management, Compliance", "createdAt" : "2026-06-14T18:46:29.111", "lastUpdated" : "2026-06-16T00:40:11.634", "ingestTimestamp" : "2026-06-14T18:46:29.111", "mongoId" : "69ce5e3b9bc74574cb677960", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Security governance", "Security operations", "Risk Management", "Compliance", "Security Standards", "Data Protection", "IT Operations", "Information Security", "IT Assets", "ISO 27001", "NIST", "ITIL", "CISA", "CISSP" ], "skillCount" : 14, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 864.68665, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c7feb74d8ee00a0956e72", "title" : "Senior Cloud Information Security Analyst", "company" : "AppDirect", "industry" : "Technology", "salary" : { "min" : 2200000.0, "max" : 3500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cloud Information Security Analyst in Pune, India, adjusted for the technology industry and company size." }, "location" : "Pune", "locations" : [ "Pune" ], "timestamp" : "2026-06-15T09:26:13.707", "fingerprint" : "a04229f0292016ff7575c0ef57df78339a429142973956d055e066257280a53b", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/appdirect/jobs/8586630002", "externalId" : "8586630002", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Pune", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "18.5213738,73.8545071" } ], "locationText" : "Pune, India", "employmentType" : "FULL_TIME", "experienceMinYears" : 6, "experienceMaxYears" : 8, "experienceLevel" : "Senior", "technicalSkills" : "AWS, Azure, Kubernetes, Linux, Windows", "professionalSkills" : [ "Risk classification", "False positive analysis", "End-to-end initiatives" ], "hardSkillsList" : [ "Incident detection", "Incident response" ], "hardSkills" : [ { "name" : "Incident detection", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" } ], "majorSkills" : "Cloud security, Vulnerability management, Incident response", "majorSkillsList" : [ "Cloud security", "Vulnerability management", "Incident response" ], "coreResponsibilities" : "Ensure company assets secure, Prioritize mitigation activities, Collaborate with engineering teams, Collaborate with support teams, Collaborate with company-wide teams, Maintain security programs, Maintain compliance programs, Provide recommendations for security", "teamCollaboration" : "Cross-functional teams; Engineering teams; Support teams; Company-wide teams", "domainKnowledge" : "Cloud security posture; Vulnerability management; Security Operations Center; Modern infrastructure security; Container security; CI/CD pipeline security", "domainList" : [ "cloud-security-posture", "vulnerability-management", "security-operations-center", "modern-infrastructure-security", "container-security", "ci-cd-pipeline-security" ], "domainSpecificKnowledge" : [ "Cloud security posture", "Vulnerability management", "Security Operations Center", "Modern infrastructure security", "Container security", "CI/CD pipeline security" ], "toolProficiency" : [ "SIEM", "EDR", "DLP", "CSPM", "CASB", "CWPP", "IPS/IDS", "Threat intelligence" ], "problemSolvingSkills" : "Solution-oriented mindset", "qualificationsBasic" : "6-8 years experience, Cloud security posture management, Vulnerability management, Incident detection and response, SIEM, EDR, DLP, CSPM, CASB, CWPP, IPS/IDS, Threat intelligence, Linux environments, Windows environments, Kubernetes security, Container security, CI/CD pipeline security", "qualificationsPreferred" : "AWS, Azure", "workSiteFlexibility" : "Onsite", "rawDescription" : "About AppDirect Become a digital, global citizen and enable the new generation of digital entrepreneurs around the world. AppDirect offers a subscription commerce platform to sell any product, through any channel, on any device - as a service. We power millions of subscriptions worldwide for organizations. We do this by our values-driven culture—one that enables you to Be Seen, Be Yourself, and Do Your Best Work. About You We’re looking for talented yet humble individuals who are smart, passionate, and want to drive disruption in the Information security industry. If you thrive in a fast-paced, collaborative workplace, AppDirect provides an environment where you will be challenged and inspired every day. If you relish the freedom to bring creative, thoughtful solutions to the table that reflect your experience and personality, there's no limit to what you can accomplish here. What you’ll do and how you’ll have an impact Work within the Information Security team as a Cloud Information Security Analyst. Ensure the company's assets—primarily cloud-based—are kept as secure as possible. Prioritize mitigation activities in collaboration with various stakeholders. Collaborate closely with engineering, support, and company-wide teams to maintain security and compliance programs. Provide recommendations to improve the security capabilities of the company’s platform. What we’re looking for 6-8 years of experience in a similar role, even if partially meeting the listed requirements below: Expertise in: Cloud security posture management (AWS/Azure) Vulnerability management (risk classification, remediation, false positive analysis) Building and maintaining Security Operations Center (SOC) activities Strong skills in incident detection and response, including spotting malicious activity. Solid knowledge of security tools: SIEM, EDR, DLP, CSPM, CASB, CWPP, IPS/IDS,Threat intelligence, etc. Comfortable working with Linux and Windows environments. Understanding of modern infrastructure: Kubernetes, containers, CI/CD pipelines, and their security. Proven ability to collaborate with cross-functional teams and own initiatives end-to-end. Creative, risk-aware, and solution-oriented mindset with strong prioritization and autonomy. Any Information Security Certification (CEH, Security+, OSCP, etc.) is an asset. At AppDirect, we believe that innovation thrives in an environment that houses diversity of excellence, experience and thought. We respect each AppDirector as their own fingerprint; unique with no one alike. We foster an environment of inclusion without regard to race, religion, age, sexual orientation, or gender identity enabling AppDirectors to embrace their uniqueness to do their best work. As such, we strongly encourage applications from Indigenous peoples, racialized people, people with disabilities, people from gender and sexually diverse communities, and/or people with intersectional identities. At AppDirect we take privacy very seriously. For more information about our use and handling of personal data from job applicants, please read our Candidate Privacy Policy. For more information of our general privacy practices, please see AppDirect Privacy Notice: https://www.appdirect.com/about/privacy-notice At AppDirect, AI tools may assist our recruitment team with administrative automations — always under human oversight. AI tools do not make hiring decisions or solely automated decisions about your candidacy – all decisions are made by our people. By submitting your application, you acknowledge that your information may be processed in this way. You may request access or deletion at any time by contacting privacy@appdirect.com.", "summaryDescription" : "Senior Cloud Information Security Analyst at AppDirect. Skills: Cloud security, Vulnerability management, Incident response. Ensure company assets secure. Prioritize mitigation activities", "postedDate" : "2026-06-14T05:43:56.904", "createdAt" : "2026-06-14T05:43:56.904", "lastUpdated" : "2026-06-15T09:26:13.707", "ingestTimestamp" : "2026-06-14T05:43:56.904", "mongoId" : "6a2c7feb74d8ee00a0956e72", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Incident detection", "Incident response", "Cloud security", "Vulnerability management", "Risk classification", "False positive analysis", "End-to-end initiatives", "Cloud security posture", "Security Operations Center", "Modern infrastructure security", "Container security", "CI/CD pipeline security", "SIEM", "EDR", "DLP", "CSPM", "CASB", "CWPP", "IPS/IDS", "Threat intelligence" ], "skillCount" : 20, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 858.8768, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2a8a7474d8ee00a0681f5a", "title" : "Senior Information Security Compliance Specialist", "company" : "Boeing", "salary" : { "min" : 150450.0, "max" : 233450.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "USA - Arlington, VA", "locations" : [ "USA - Arlington, VA", "United States of America" ], "timestamp" : "2026-06-13T15:36:31.211", "fingerprint" : "aa4f9c9a30a4b784c68792ba54c62e4cbc1fc81e4ccc08326b131d0e1ada8a1f", "source" : "workday", "language" : "en", "applyUrl" : "https://boeing.wd1.myworkdayjobs.com/EXTERNAL_CAREERS/job/USA---Arlington-VA/Senior-Information-Security-Compliance-Specialist_JR2026513178-1", "externalId" : "JR2026513178", "locationPoint" : "39.34857,-76.68324", "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" }, { "city" : "El Segundo", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.9170280,-118.4156337" }, { "city" : "Huntsville", "state" : "Alabama", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "34.7298470,-86.5859011" }, { "city" : "Mesa", "state" : "Arizona", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.4151005,-111.8314550" }, { "city" : "Oklahoma City", "state" : "Oklahoma", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "35.4729886,-97.5170536" }, { "city" : "Orlando", "state" : "Florida", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "28.5421218,-81.3790450" }, { "city" : "San Antonio", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "29.4246002,-98.4951405" }, { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" }, { "city" : "Berkeley", "state" : "Missouri", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.7544952,-90.3312256" } ], "locationText" : "Arlington, Virginia, United States; El Segundo, California, United States; Huntsville, Alabama, United States; Mesa, Arizona, United States; Oklahoma City, Oklahoma, United States; Orlando, Florida, United States; San Antonio, Texas, United States; Seattle, Washington, United States; Berkeley, Missouri, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "professionalSkills" : [ "Cybersecurity", "Information Assurance", "Technical instruction", "Security posture assessment", "Enterprise compliance", "Security readiness", "Internal evaluations", "Security requirements guidance", "COMSEC duties", "Personnel security", "Security education", "Physical controls", "Export compliance", "Security awareness training" ], "hardSkillsList" : [ "Compliance assessment reviews", "Self-inspections", "Corrective action development", "Administrative inquiries", "Inventory management", "Information protection", "Security procedure administration", "Sub-contractor management" ], "hardSkills" : [ { "name" : "Compliance assessment reviews", "level" : "intermediate" }, { "name" : "Self-inspections", "level" : "intermediate" }, { "name" : "Corrective action development", "level" : "intermediate" }, { "name" : "Administrative inquiries", "level" : "intermediate" }, { "name" : "Inventory management", "level" : "intermediate" }, { "name" : "Information protection", "level" : "intermediate" }, { "name" : "Security procedure administration", "level" : "intermediate" }, { "name" : "Sub-contractor management", "level" : "intermediate" } ], "majorSkills" : "Information Security Compliance, Cybersecurity, Government Security Programs", "majorSkillsList" : [ "Information Security Compliance", "Cybersecurity", "Government Security Programs" ], "coreResponsibilities" : "Execute internal security controls, Perform compliance assessment reviews, Perform self-inspections, Identify deficiencies, Develop corrective action, Implement corrective action, Conduct administrative inquiries, Conduct COMSEC duties, Protect government information, Protect intellectual information, Protect third party information, Protect company information, Develop security education, Implement security education, Administer security education, Develop physical controls, Implement physical controls, Administer physical controls, Contribute to enterprise IPT, Participate in review cycle, Participate in decision making, Provide innovation into Personnel Security, Provide creativity into Personnel Security, Obtain security clearances, Obtain security accesses, Provide innovation into security awareness training, Provide creativity into security awareness training, Educate personnel, Refresh personnel, Motivate personnel, Complete tasks toward long-range goals, Complete tasks toward objectives, Oversee Sub-Contractor Management, Provide contractual requirements, Provide contractual direction, Conduct site assistance visits, Conduct site reviews", "teamCollaboration" : "Enterprise Integrated Product Team (IPT)", "domainKnowledge" : "Classified environments; Information System Security; Communication Security (COMSEC); Personnel Security; Sensitive Compartmented Information (SCI); Special Access Program (SAP)", "domainList" : [ "classified-environments", "information-system-security", "communication-security-comsec", "personnel-security", "sensitive-compartmented-information-sci", "special-access-program-sap" ], "domainSpecificKnowledge" : [ "Classified environments", "Information System Security", "Communication Security (COMSEC)", "Personnel Security", "Sensitive Compartmented Information (SCI)", "Special Access Program (SAP)" ], "toolProficiency" : [ "MS Office", "Word", "Excel", "Teams", "Outlook" ], "communicationSkills" : "Oral communication; Written communication", "innovationCreativity" : "Innovation into Personnel Security; Creativity into Personnel Security; Innovation into security awareness training; Creativity into security awareness training", "specialRequirements" : "Maintain access to SCI/SAP, U.S. Person required", "qualificationsBasic" : "Tier 5 Investigation (T5) within last 5 years, 10+ years implementing information security policies, 10+ years SAP Security/GRC, 5+ years government security programs, Maintain SCI/SAP access, Active U.S. Top Secret/SCI Security Clearance, U.S. Citizenship required", "qualificationsPreferred" : "MS Office experience, Oral and written communications skills, Obtain successful US government polygraph", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Senior Information Security Compliance Specialist **Company:** The Boeing Company The Boeing Company is looking for a **Senior Information Security Compliance Specialist** to join the team in **Arlington, VA****; El Segundo, CA; Huntsville, AL; Mesa, AZ; Oklahoma City, OK; Orlando, FL; San Antonio, TX; Seattle, WA;** or **Berkeley, MO.** The selected candidates will apply advanced expertise in cybersecurity, Information Assurance (IA), and technical instruction to assess the security posture of classified environments, support enterprise compliance activities, and strengthen the cybersecurity readiness of Boeing personnel and program stakeholders. The assessor will be responsible for conducting internal evaluations, providing expert guidance on security requirements, and helping shape and sustain the implementation of Information System Security policies, standards, and directives to ensure the inspection readiness of information systems processing classified information. **Position Responsibilities:** * Executes Internal Security Controls through performance of compliance assessment reviews and self-inspections to ensure compliance with government and company regulations/requirements * Identifies deficiencies, develops and implements corrective action * Conducts administrative inquiries on personnel, processes and situations in accordance with established operating procedures to determine level and scope of non-compliance with government and company regulations/requirements * Conducts Communication Security (COMSEC) duties and responsibilities (to include inventory, distribution and destruction), in compliance with government regulations/requirements * Protects government, intellectual, third party and company information from unauthorized disclosures * Develops, implements and administers security education, procedures and physical controls to ensure compliance with government and company regulations/requirements on large and/or highly complex programs * Contributes to enterprise Integrated Product Team (IPT) (e.g., participates in the review cycle and decision making process for enterprise export compliance, procedures (PROs), Business Process Instructions (BPI's) and Desktop Instructions (DI's) * Provides innovation and creativity into Personnel Security (e.g., reduce cycle time) to assist in obtaining individual security clearances/accesses for complex customer requirements * Provides innovation and creativity into security awareness training and education program (briefings, bulletins and visual reminders) to educate, refresh, and motivate personnel to protect people, property and information * Completes tasks toward long-range goals and objectives * Oversees Sub-Contractor Management (e.g., providing contractual requirements and direction, site assistance visits and reviews) to ensure compliance with government regulations/requirements **Basic Qualifications (Required Skills/Experience):** * Successfully completed Tier 5 Investigation (T5), formerly known as a Single Scope Background Investigation (SSBI) by the federal government within the last 5 years, or requires candidate to have been enrolled in a Continuous Vetting program within the last 5 years * 10+ years of experience implementing information security policies and procedures * 10+ years of experience with SAP Security and/or SAP GRC * 5+ years of experience in government security programs * Ability to obtain and maintain access to a Sensitive Compartmented Information (SCI) and/or Special Access Program (SAP) access **Preferred Qualifications (Desired Skills/Experience):** * Experience with MS Office (Word, Excel, Teams, and outlook) * Experience with oral and written communications skills * Ability to obtain a successful US government polygraph examination **Conflict Of Interest:** Successful Candidates for this job must satisfy the Company’s Conflict Of Interest (COI) assessment process. **Drug Free Workplace:** Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies _._ **Pay & Benefits:** At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities. The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements. Pay is based upon candidate experience and qualifications, as well as market and business considerations. Summary pay range: $150,450 - $233,450 **Language Requirements:** Not Applicable **Education:** Not Applicable **Relocation:** Relocation assistance is not a negotiable benefit for this position. **Export Control Requirement:** This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a “U.S. Person” as defined by 22 C.F.R. §120.62 is required. “U.S. Person” includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee. **Safety Sensitive:** This is not a Safety Sensitive Position. **Security Clearance:** This position requires an active U.S. Top Secret/SCI Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active) **Visa Sponsorship:** Employer will not sponsor applicants for employment visa status. **Contingent Upon Award Program** This position is not contingent upon program award **Shift:** Shift 1 (United States of America) **Stay safe from recruitment fraud! The only way to apply for a position at Boeing is via our Careers website. Learn how to protect yourself from recruitment fraud** \\- [Recruitment Fraud Warning](http://www.boeing.com/careers/recruitment-fraud-warning.page) Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law. [EEO is the law](http://www.boeing.com/resources/boeingdotcom/careers/footer/EEOIsTheLawPoster.pdf) [Boeing EEO Policy](https://tbcdn.talentbrew.com/company/185/v1_0/img/2018_Policy_Statement.pdf) [Request an Accommodation](http://www.boeing.com/careers/request-accommodation.page) [Applicant Privacy](http://www.boeing.com/careers/privacy-statement.page) **Boeing Participates in E – Verify** * [E-Verify (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterEnglish.pdf) * [E-Verify (Spanish) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterSpanish.pdf) **Right to Work Statement** * [Right to Work (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWEnglishversion.pdf) * [Right to Work (Spanish)](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWSpanishversion.pdf)", "summaryDescription" : "Senior Information Security Compliance Specialist at Boeing. Skills: Information Security Compliance, Cybersecurity, Government Security Programs. Execute internal security controls. Perform compliance assessment reviews", "postedDate" : "2026-06-11T19:50:43.714", "createdAt" : "2026-06-11T19:50:42.038", "lastUpdated" : "2026-06-13T15:36:31.211", "ingestTimestamp" : "2026-06-11T19:50:42.038", "mongoId" : "6a2a8a7474d8ee00a0681f5a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://boeing.wd1.myworkdayjobs.com/EXTERNAL_CAREERS/job/USA---Arlington-VA/Senior-Information-Security-Compliance-Specialist_JR2026513178-1", "salaryAnnualMin" : 150450, "salaryAnnualMax" : 233450, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Compliance assessment reviews", "Self-inspections", "Corrective action development", "Administrative inquiries", "Inventory management", "Information protection", "Security procedure administration", "Sub-contractor management", "Information Security Compliance", "Cybersecurity", "Government Security Programs", "Information Assurance", "Technical instruction", "Security posture assessment", "Enterprise compliance", "Security readiness", "Internal evaluations", "Security requirements guidance", "COMSEC duties", "Personnel security", "Security education", "Physical controls", "Export compliance", "Security awareness training", "Classified environments", "Information System Security", "Communication Security (COMSEC)", "Personnel Security", "Sensitive Compartmented Information (SCI)", "Special Access Program (SAP)", "MS Office", "Word", "Excel", "Teams", "Outlook" ], "skillCount" : 35, "jobCategory" : "engineering", "seniorityLevel" : "senior", "dataQualityScore" : 1.0, "_score" : 852.91754, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2c8cef74d8ee00a0977ae0", "title" : "Security Officer - Classified Information", "company" : "ICEYE Germany", "industry" : "Operations", "salary" : { "min" : 85000.0, "max" : 120000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager Security Officer in Berlin, Germany, adjusted for the defense industry and company size." }, "location" : "Berlin", "locations" : [ "Berlin" ], "timestamp" : "2026-06-16T03:19:34.454", "fingerprint" : "84d321020f97cdc967dd255ef42822ef3315ea75327eb774610b2ead5e22cb2c", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/iceye/b2cdf1d7-086c-4ea6-a76c-388c871a6148/application", "externalId" : "b2cdf1d7-086c-4ea6-a76c-388c871a6148", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Berlin", "country" : "Germany", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "52.5173885,13.3951309" } ], "locationText" : "Berlin, Germany", "employmentType" : "FULL_TIME", "professionalSkills" : [ "Risk management", "Regulatory compliance", "Legal analysis" ], "hardSkillsList" : [ "Classified information security", "Security framework design", "Personnel security clearances", "IT accreditation", "Secure area design", "Audit trail implementation", "Incident response procedures" ], "hardSkills" : [ { "name" : "Classified information security", "level" : "intermediate" }, { "name" : "Security framework design", "level" : "intermediate" }, { "name" : "Personnel security clearances", "level" : "intermediate" }, { "name" : "IT accreditation", "level" : "intermediate" }, { "name" : "Secure area design", "level" : "intermediate" }, { "name" : "Audit trail implementation", "level" : "intermediate" }, { "name" : "Incident response procedures", "level" : "intermediate" } ], "majorSkills" : "Classified information security, Security framework design, Regulatory compliance", "majorSkillsList" : [ "Classified information security", "Security framework design", "Regulatory compliance" ], "coreResponsibilities" : "Define and execute security roadmap, Build classified information security posture, Design security framework, Run security framework, Represent security framework to authorities, Advise partners on security posture, Act as company's official security officer, Lead interactions with authorities, Represent ICEYE Germany to regulators, Design and implement policies, Design and implement SOPs, Design and implement registries, Design and implement secure areas, Design and implement VS-NfD-konforme IT, Design and implement accreditation pathways, Design and implement audit trail, Drive personnel security clearances, Coordinate personnel clearances, Translate security requirements for business, Unblock bids and customer engagements, Lead partner ecosystem security, Help partners implement security posture, Assess partner security posture, Certify partner security posture, Grow security function team", "teamCollaboration" : "Cross-functional teams; Work with People Operations; Collaborate with sales; Collaborate with product; Collaborate with engineering; Work with industry partners; Work with supply chain", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "German classified information regime; SÜG; VSA; Geheimschutzhandbuch; Geheimschutzbetreuung by BMWi; NATO classification; EU classification; National security; Defence technology; Earth observation; Sovereign intelligence; SAR satellite constellation; VS-NfD; VS-VERTRAULICH; GEHEIM; NATO SECRET; EU SECRET; Facility security clearance; Personnel clearances; IT accreditation; VS-Verwahrgelass; Sicherheitsbereich; Ü1; Ü2; Ü3; Sicherheitsüberprüfung", "domainList" : [ "german-classified-information-regime", "sug", "vsa", "geheimschutzhandbuch", "geheimschutzbetreuung-by-bmwi", "nato-classification", "eu-classification", "national-security", "defence-technology", "earth-observation", "sovereign-intelligence", "sar-satellite-constellation", "vs-nfd", "vs-vertraulich", "geheim", "nato-secret", "eu-secret", "facility-security-clearance", "personnel-clearances", "it-accreditation", "vs-verwahrgelass", "sicherheitsbereich", "u1", "u2", "u3", "sicherheitsuberprufung" ], "domainSpecificKnowledge" : [ "German classified information regime", "SÜG", "VSA", "Geheimschutzhandbuch", "Geheimschutzbetreuung by BMWi", "NATO classification", "EU classification", "National security", "Defence technology", "Earth observation", "Sovereign intelligence", "SAR satellite constellation", "VS-NfD", "VS-VERTRAULICH", "GEHEIM", "NATO SECRET", "EU SECRET", "Facility security clearance", "Personnel clearances", "IT accreditation", "VS-Verwahrgelass", "Sicherheitsbereich", "Ü1", "Ü2", "Ü3", "Sicherheitsüberprüfung" ], "communicationSkills" : "Represent to authorities; Translate requirements", "documentationSkills" : "Audit-ready documentation", "continuousLearning" : "Training opportunities; Professional development; Certification schemes", "specialRequirements" : "Security screening, German security clearance", "outcomesObjectives" : "Operate at every classification level; Build defensible security framework; Achieve facility security clearance; Achieve accredited environments; Achieve path to GEHEIM; Obtain required personnel clearances; Participate in classified procurements; Partners reach required posture; Implement audit-ready documentation; Implement exercises; Implement incident-response procedures", "qualificationsBasic" : "Deep knowledge of German classified information regime, Track record as Sicherheitsbevollmächtigter, Working fluency in NATO and EU classification frameworks", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "- Job Title: Security Officer – Classified Information - Department: ICEYE Germany - Location: Germany (Berlin) - Reports to: CEO, ICEYE Germany - Employment type: Permanent - Working type: On-Site - Employment is subject to applicable security screening (incl. SUPO, where required) THE MISSION OF THE SECURITY OFFICER Build and own the classified information security posture that lets ICEYE Germany operate at every classification level our customers require — from VS-NfD through VS-VERTRAULICH, GEHEIM, and beyond, including the corresponding NATO and EU equivalents. You are the person who turns a blank page into a defensible, audit-ready security framework. You will design it, run it, and represent it to the German authorities who decide whether we can sit at the table on the most sensitive national security work in Europe. You are also the trusted advisor who helps our German industry partners reach the posture they need to deliver alongside us. This is a foundational role. You will not inherit a finished framework — you will build it, and you will be measured on outcomes twelve months from your start date. WHO WE ARE ICEYE is the world leader in sovereign intelligence from space. We deliver persistent monitoring capabilities to detect and respond to changes in any location on Earth. ICEYE owns the world's largest and most advanced SAR (synthetic aperture radar) satellite constellation. To our customers we provide intelligence with unmatched quality, latency and revisit times, in any weather, day or night. To governments who choose to operate their own constellation we provide this proven capability as a sovereign system. ICEYE-built constellations serve customers in defence and intelligence, environmental monitoring, insurance and emergency management. We enable fast decisions that contribute to a safer future. Founded and headquartered in Finland, ICEYE operates globally with over 1000 employees across Europe, North America, the Middle East, and Asia-Pacific. WHAT YOU'LL DO - Own the roadmap. Define and execute the twelve-month plan to take ICEYE Germany from current state to fully cleared operations at VS-NfD, VS-VERTRAULICH, and GEHEIM — including facility security clearance (Sicherheitsbescheid), personnel clearances, IT accreditation, and the operational processes that sit underneath. - Be the Sicherheitsbevollmächtigter. Act as the company's official security officer towards BMWi, BfV, BSI, BAAINBw and other relevant authorities. Lead all interactions with the Geheimschutzbetreuende Stelle and represent ICEYE Germany in front of regulators with credibility and precision. - Build the framework. Design and implement policies, SOPs, registries, secure areas (VS-Verwahrgelass / Sicherheitsbereich), VS-NfD-konforme IT, accreditation pathways toward higher classifications, and the audit trail that makes the whole framework defensible. - Run the clearance pipeline. Drive personnel security clearances (Ü1, Ü2, Ü3) across the German organisation in close coordination with People Operations, candidates, and authorities — keeping timelines tight without compromising rigour. - Enable the business. Translate security requirements into language sales, product, and engineering can act on. Unblock bids and customer engagements rather than slow them down. - Lead the partner ecosystem. Serve as the lead figure helping ICEYE Germany's partners and supply chain implement the equivalent posture on their side — from initial assessment through to certification. - Grow the function. Start as an individual contributor with executive backing; scale the team as workload and classification scope demand it. WHAT WE MEASURE AFTER TWELVE MONTHS - ICEYE Germany holds a valid facility security clearance and operates accredited environments at VS-NfD and VS-VERTRAULICH, with a credible, authority-aligned path to GEHEIM. - The core German team holds the personnel clearances required for our priority programmes. - We are able to participate in classified procurements we could not have addressed without this work. - Key industry partners have reached the posture needed for joint delivery. - Audit-ready documentation, exercises, and incident-response procedures are in place and proven. WHAT WE ARE LOOKING FOR - Deep, hands-on knowledge of the German classified information regime: SÜG, VSA, Geheimschutzhandbuch, and the practical workings of Geheimschutzbetreuung by BMWi. - Track record as Sicherheitsbevollmächtigter (or directly equivalent) inside a German defence, intelligence, aerospace, or critical-infrastructure organisation — ideally one that scaled its classification level during your tenure. - Working fluency in NATO and EU classification frameworks (NATO SECRET, EU SECRET) and how they interlock with German national levels. - Credibility with German federal authorities. You have sat across the table from BMWi, BfV, BSI, BAAINBw or equivalents and know how they think and decide. - Strong grasp of IT security accreditation paths for classified systems — BSI Grundschutz, VS-NfD-konforme IT, and Zulassung for higher classifications. - Builder's mindset. You are energised by a blank page, fast-moving environments, and the responsibility of being the accountable owner. - Fluent German and English, with the ability to brief at executive, authority, and working level. APPLICATION PROCESS 1. Intro conversation with Talent Acquisition (30 min) 2. Hiring manager interview with the CEO, ICEYE Germany (60 min) 3. Technical case: a take-home roadmap exercise — staged plan from current state to GEHEIM, including facility, personnel, and IT accreditation — presented and defended live to a panel (90 min) 4. Cross-functional interviews with Operations, Legal/Compliance, and a senior ICEYE leader (3 × 45 min) 5. Final conversation with the CEO of ICEYE WHAT WE OFFER AT ICEYE At ICEYE, you will join a diverse and highly engaged team united by the ambition to make the impossible possible. We know that we will succeed only through exceptional people in our team — which is why your growth, wellbeing, and success are a priority. As a global scale-up, we combine speed and ambition with the opportunity to take real ownership from day one. You will benefit from continuous professional development, training opportunities, and a culture that values collaboration, curiosity, and integrity. ICEYE is a place where your contributions have a visible impact, and where we celebrate success together. BENEFITS - A job that matters in a dynamic Defence Technology and Earth Observation environment with a scale-up approach - An independent role with a supportive and diverse work environment - Time for self-development, research, training, conferences, or certification schemes Employment is subject to applicable security screening, including German Sicherheitsüberprüfung (Ü1/Ü2/Ü3 as required by the role). OUR COMMITMENT TO DIVERSITY, EQUITY, AND INCLUSION At ICEYE, we believe that diversity isn't just a buzzword – it's our greatest asset. We're committed to fostering an inclusive environment where every voice is not only heard but celebrated. We know that diverse perspectives breed innovation and creativity, which is why we actively seek out individuals from all walks of life, backgrounds, and experiences. Whatever your background, we want you to bring your authentic self to the table. Join us and be part of a team where differences are not only embraced but cherished, because together, we're stronger. We welcome applications from people of all backgrounds, including those who may need workplace adjustments. If you require any specific accommodations or assistance during the recruitment process for any reason, please let us know. Apply now to start your ICEYE journey, and help us continue to make the impossible possible together. Read more about ICEYE and working with us at iceye.com http://iceye.com.", "summaryDescription" : "Security Officer - Classified Information at ICEYE Germany. Skills: Classified information security, Security framework design, Regulatory compliance. Define and execute security roadmap. Build classified information security posture", "createdAt" : "2026-06-14T20:12:32.492", "lastUpdated" : "2026-06-16T03:19:34.454", "ingestTimestamp" : "2026-06-14T20:12:32.492", "mongoId" : "6a2c8cef74d8ee00a0977ae0", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Classified information security", "Security framework design", "Personnel security clearances", "IT accreditation", "Secure area design", "Audit trail implementation", "Incident response procedures", "Regulatory compliance", "Risk management", "Legal analysis", "Roadmap planning", "German classified information regime", "SÜG", "VSA", "Geheimschutzhandbuch", "Geheimschutzbetreuung by BMWi", "NATO classification", "EU classification", "National security", "Defence technology", "Earth observation", "Sovereign intelligence", "SAR satellite constellation", "VS-NfD", "VS-VERTRAULICH", "GEHEIM", "NATO SECRET", "EU SECRET", "Facility security clearance", "Personnel clearances", "VS-Verwahrgelass", "Sicherheitsbereich", "Ü1", "Ü2", "Ü3", "Sicherheitsüberprüfung" ], "skillCount" : 36, "jobCategory" : "operations", "jobSubcategory" : "legal", "seniorityLevel" : "Manager", "dataQualityScore" : 0.7777778, "_score" : 840.7218, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Defense", "llmIndustryConfidence" : 0.95 }, { "id" : "6a191e7758b93c861e39f6dc", "title" : "Information Security Consultant", "company" : "Mercedes-Benz Group China Ltd.", "industry" : "Cybersecurity", "salary" : { "min" : 450000.0, "max" : 750000.0, "currency" : "CNY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Information Security Consultant in Beijing, China, adjusted for senior seniority and the technology industry." }, "location" : "China (Mainland)-Beijing-Beijing", "locations" : [ "China (Mainland)-Beijing-Beijing", "Daimler Tower 8, Wangjing Street Chaoyang District, , Beijing" ], "certifications" : [ "CISA", "CISSP" ], "timestamp" : "2026-06-15T09:53:12.916", "fingerprint" : "7e2caca3c00aa40e6265f8afe6cfca01e02ebb78252dfd0c2981b06992e945e7", "source" : "taleo", "language" : "en", "applyUrl" : "https://tas-daimler.taleo.net/careersection/ex/jobdetail.ftl?job=873158", "externalId" : "873158", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Beijing", "state" : "Beijing", "country" : "China", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "39.9011168,116.4210134" } ], "locationText" : "Beijing, Beijing, China", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Cloud Security, Network Security, Web Technologies, Database Security, IT Operations", "professionalSkills" : [ "Risk Management", "Compliance", "Security Standards", "Data Protection", "IT Operations" ], "hardSkillsList" : [ "Security governance", "Security operations" ], "hardSkills" : [ { "name" : "Security governance", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" } ], "majorSkills" : "Information Security, Risk Management, Compliance, Security Standards", "majorSkillsList" : [ "Information Security", "Risk Management", "Compliance", "Security Standards" ], "coreResponsibilities" : "Monitor vulnerabilities, Identify vulnerabilities, Document vulnerabilities, Track remediation, Develop cloud security strategies, Implement cloud security strategies, Govern compliance with policies, Govern compliance with processes, Protect confidentiality, Protect integrity, Protect availability, Support risk assessment, Support risk analysis, Monitor risk control implementation, Monitor risk minimization implementation, Identify vulnerabilities in services, Identify vulnerabilities in applications, Order penetration services, Order assessment services, Monitor penetration services, Monitor assessment services, Ensure mitigation, Ensure minimization, Assess threats, Develop security measures, Assess effectiveness of measures, Assist business partners, Classify information, Coordinate security incidents, Participate in incident response, Develop mitigation strategies, Develop remediation strategies, Maintain disaster recovery plans, Maintain application recovery plans, Develop awareness campaigns, Conduct awareness campaigns, Define security controls, Create security policies, Update security policies, Enforce security policies, Align policies with requirements, Ensure policies are communicated, Review policies, Ensure regulatory compliance, Implement controls for regulations, Plan internal security audits, Conduct internal security audits, Assess effectiveness of controls, Identify areas for improvement, Coordinate external audits, Coordinate external assessments, Respond to auditor requests, Identify information security risks, Assess information security risks, Manage information security risks, Conduct risk assessments, Develop risk mitigation strategies, Monitor control effectiveness, Contribute to governance framework, Prepare compliance reports, Submit compliance reports, Track security metrics, Document compliance activities, Communicate security risks, Communicate security issues, Enforce security policies consistently, Investigate security violations, Take corrective action, Assess supplier security practices, Monitor vendor compliance, Collaborate with IT teams, Collaborate with developers, Collaborate with business stakeholders, Provide security training, Provide security awareness, Communicate recommendations to management", "teamCollaboration" : "Collaborate with IT teams; Collaborate with developers; Collaborate with business stakeholders", "domainKnowledge" : "Information Security; Cloud Security; Network Security; Web Technologies; Database Security; IT Operations; ISO 27001; NIST", "domainList" : [ "information-security", "cloud-security", "network-security", "web-technologies", "database-security", "it-operations", "iso-27001", "nist" ], "domainSpecificKnowledge" : [ "Information Security", "Cloud Security", "Network Security", "Web Technologies", "Database Security", "IT Operations", "ISO 27001", "NIST" ], "qualificationsBasic" : "5+ years experience, Security governance experience, Security operations experience, Experience with NIST, Experience with ISO 27001, Knowledge of IT Security, Knowledge of Risk Management, Knowledge of Compliance, Knowledge of Security Standards, Knowledge of Operating Systems, Knowledge of Data Protection, Knowledge of Cloud Security, Knowledge of Network, Knowledge of Web Technologies, Knowledge of Database, Knowledge of IT operations", "qualificationsPreferred" : "CISA certification, CISSP certification", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Objective of job Ensure that the organization and IT assets follow the security standard and governance. You monitor and identify vulnerabilities in systems, threats and issues, document it and track the remediation. Develop and implement cloud security strategies. -Responsible for the governance of compliance with policies and processes to protect the confidentiality, integrity and availability of IT assets (information, data and IT services) within the organization. -Responsible for organizational and technical controls -Support in risk assessment and analysis and monitoring the implementation of risk control/minimization measures -Identification of possible vulnerabilities in services and applications. Ordering and monitoring of penetration and assessment services. Document the results and ensure mitigation/minimization -Assessing threats and developing appropriate security measures and assessing their effectiveness -Assist businesspartners in information classification -Coordination for security incidents and participation in incident response activities, including mitigation and remediation strategies [3] -Take care of actuality of disaster or application recovery plans -Develop and conduct target group orientated awareness campaigns -Define security controls derived from policies Job designation •Developing and Maintaining Security Policies and Standards Responsible for creating, updating, and enforcing information security policies, standards, and procedures that align with legal, regulatory, and contractual requirements. This includes ensuring that policies are comprehensive, clearly communicated, and regularly reviewed. •Ensuring Regulatory Compliance Ensure the organization complies with relevant laws, regulations, and industry standards such as ISO 27001, NIST, and others. This involves understanding the specific requirements of each regulation and implementing controls to meet them. •Security Audits and Assessments -Responsible for planning and conducting internal security audits to assess the effectiveness of security controls and identify areas for improvement. -Coordinate external audits and assessments, ensuring the organization is prepared and responsive to auditor requests. •Risk Management and Governance -Identifying, assessing, and managing information security risks across the organization. This includes conducting regular risk assessments, developing risk mitigation strategies, and monitoring the effectiveness of controls. -Contribute to the development of a strong governance framework for information security. •Compliance Reporting Responsible for preparing and submitting reports to management and regulatory bodies on the organization's security posture and compliance efforts. This includes tracking key security metrics, documenting compliance activities, and communicating security risks and issues to relevant stakeholders. •Policy Enforcement Responsible for ensuring that security policies are consistently enforced across the organization. This includes monitoring compliance with policies, investigating security violations, and taking corrective action when necessary •Supplier Risk Management Assesses the security practices of third-party suppliers and service providers to ensure they meet the organization's security requirements. This includes reviewing vendor contracts, conducting security assessments, and monitoring vendor compliance with security policies •Collaboration and Communication -Collaborating with other IT teams, developers, and business stakeholders. -Providing security training and awareness to employees. -Communicating security risks and recommendations to management. Qualification •Professional Skills: -Deep understanding and experience on: IT Security, Risk Management, Compliance & Security Standards, Knowledge in all relevant Operating Systems, Data Protection -Knowledge of: Cloud Security, Network, Web Technologies, Database, IT operations (ITIL) •Experience with security frameworks, such as NIST, and ISO 27001. •Relevant certifications, CISA, CISSP •> 5 years experience with focus in areas of security governance and security operations Education: Bachelor's degree and above in Computer Science encompassing Information Security Mercedes-Benz Group China Ltd.", "summaryDescription" : "Information Security Consultant at Mercedes-Benz Group China Ltd.. Skills: Information Security, Risk Management, Compliance, Security Standards. Monitor vulnerabilities. Identify vulnerabilities", "createdAt" : "2026-06-14T08:47:02.519", "lastUpdated" : "2026-06-15T09:53:12.916", "ingestTimestamp" : "2026-06-14T08:47:02.519", "mongoId" : "6a191e7758b93c861e39f6dc", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Security governance", "Security operations", "Information Security", "Risk Management", "Compliance", "Security Standards", "Data Protection", "IT Operations", "Cloud Security", "Network Security", "Web Technologies", "Database Security", "ISO 27001", "NIST", "CISA", "CISSP" ], "skillCount" : 16, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 840.5801, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca18874d8ee00a09a5cb5", "title" : "Information / Cybersecurity Engineer (Clearance Required)", "company" : "Nexxis Solutions", "industry" : "Government", "salary" : { "min" : 115000.0, "max" : 155000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Information/Cybersecurity Engineer in Annapolis Junction, United States, adjusted for mid-seniority level and industry." }, "location" : "Annapolis Junction, MD", "locations" : [ "Annapolis Junction", "MD" ], "timestamp" : "2026-06-15T05:13:36.867", "fingerprint" : "598c9533a9e614d34ba5de3683468e491b6e899be4b78b18ab67f9d63bcca9ec", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://nexxis-solutions.breezy.hr/p/47e43887d893-information-cybersecurity-engineer-clearance-required", "externalId" : "47e43887d893", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Annapolis Junction", "state" : "Maryland", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.1189965,-76.7963417" } ], "locationText" : "Annapolis Junction, Maryland, United States", "employmentType" : "FULL_TIME", "professionalSkills" : [ "Risk assessment" ], "coreResponsibilities" : "Provide information security engineering, Provide system security engineering, Provide life cycle solutions, Provide system security testing, Provide risk assessment, Provide continuous monitoring, Provide Cybersecurity expertise", "specialRequirements" : "Clearance Required", "qualificationsBasic" : "Clearance Required", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Nexxis Solutions is supporting current and near-term efforts to provide information and system security engineering, life cycle solutions, system security testing, risk assessment, and continuous monitoring. We are looking for candidates to provide Cybersecurity expertise to systems and projects t", "summaryDescription" : "Information / Cybersecurity Engineer (Clearance Required) at Nexxis Solutions. Provide information security engineering. Provide system security engineering", "createdAt" : "2026-06-14T01:38:44.756", "lastUpdated" : "2026-06-15T05:13:36.867", "ingestTimestamp" : "2026-06-14T01:38:44.756", "mongoId" : "6a2ca18874d8ee00a09a5cb5", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 115000, "salaryAnnualMax" : 155000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Risk assessment" ], "skillCount" : 1, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 840.5666, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cb0a474d8ee00a09da9aa", "title" : "Information security & digital operational resilience analyst", "company" : "Seccl", "industry" : "Risk & compliance", "salary" : { "min" : 32000.0, "max" : 40000.0, "currency" : "GBP", "frequency" : "Yearly" }, "location" : "Edinburgh", "locations" : [ "Edinburgh" ], "timestamp" : "2026-06-16T00:48:59.570", "fingerprint" : "3855dc33931a77cfaf466858fb6c305aa9957bcaf84089ae125de285a2445ffb", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/seccl/24825e59-baca-4942-807b-ecf849fe3972/application", "externalId" : "24825e59-baca-4942-807b-ecf849fe3972", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Edinburgh", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "55.9533456,-3.1883749" } ], "locationText" : "Edinburgh, United Kingdom", "employmentType" : "FULL_TIME", "experienceMinYears" : 0, "experienceMaxYears" : 2, "experienceLevel" : "Entry", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Hybrid role to be based in our Edinburgh office. ABOUT US Seccl is the Octopus-owned embedded investment platform that’s on a mission to helping more people to invest – and invest well. We’re B-Corp certified with an amazing product-market fit, impressive early traction and the potential to transform an outdated industry, for the better. We've been growing fast and will scale even faster over the next few years. We’re also proud to be part of Octopus, the £multi billion group that's on a mission to breathe new life into broken industries, through companies like Octopus Energy, Octopus Investments and Octopus Money. Check out the Seccl website https://seccl.tech/ for the latest on our products and our mission https://seccl.tech/about/ to shape the future of investments. THE ROLE Looking to start or build your career in information security and digital operational resilience? We’re looking for an Information security and digital operational resilience analyst to join our Governance, Risk and Compliance team. You’ll report into our Head of Information security and data protection officer, who’ll support your development and help you build your knowledge as you grow into the role. You’ll be part of our 2nd Line of Defence team, helping Seccl protect its people, customers, systems and operations. You don’t need to come with lots of technical experience. What matters most is that you’re curious, proactive, a strong communicator and keen to learn. Over time, you’ll develop valuable knowledge across cybersecurity, technology risk and operational resilience, with the opportunity to become a subject matter expert in how we keep Seccl’s important services running safely and reliably. ON A TYPICAL DAY YOU WILL… - Help assess how technology is used across different teams and departments - Support information security and operational resilience governance - Help facilitate information security risk assessments - Support digital operational resilience initiatives - Review incident response plans - Help with business continuity and disaster recovery assessments - Conduct due diligence assessments - Maintain our Information Security Management System - Keep an eye on regulatory developments, including GDPR and DORA - Help promote information security and operational resilience awareness across Seccl THIS ROLE’S FOR YOU IF... - You’re a strong communicator who enjoys building relationships and working with people from different backgrounds - You’re interested in how organisations manage risk, respond to disruption and keep important services running - You’re comfortable being a first point of contact and helping people find the right answer - You have a genuine interest in information security, technology, resilience or risk - You’re proactive and happy to take initiative, rather than waiting to be told what to do - You’re curious, motivated and keen to learn - You enjoy solving problems, asking good questions and working with others - You’re open to learning technical concepts and applying them in a real business setting. We’ll support you with the training you need THIS ROLE ISN’T FOR YOU IF... - You rely on a lot of top-down direction. Here, you’ll have a lot of freedom and ownership of your role, and you’ll be expected to shape your own progression - You’re not comfortable working in a fast-paced environment. Our speed and scalability are what set us apart; you need to be able to act quickly and think on your feet - You struggle to follow through on ideas. We value people who do what they say they will. If you care about something, you have the freedom here to make it happen - You don’t like change. You’ll get on great here if you relish the ambiguity of rapid growth and are willing to embrace uncertainty WHAT’S IN IT FOR YOU… We offer a generous mix of benefits for the things that really matter to our people, including: \uD83D\uDCB0 A salary between £32,000 and £40,000 – dependant on experience + reviewed annually \uD83C\uDF34 27 days holiday + bank holidays (some can be flexible) + day off on your birthday + three days (full time) per year for Dependant leave \uD83D\uDC99 Two volunteering days per year \uD83C\uDF0E Option to work abroad for up to six weeks a year \uD83C\uDF1F Secclbrate - our recognition programme that offers a mix of flexible rewards including extra pay, additional holiday and increased learning budget \uD83C\uDFC5 Length of service award – one month paid sabbatical at eight years ✅ 6% employer pension contribution, and life assurance \uD83C\uDFE5 Private medical insurance with AXA Health \uD83D\uDC6A Enhanced Parental leave \uD83D\uDCBB MacBook and up to £500 home office set up budget \uD83D\uDCD6 £750 per person learning budget \uD83C\uDF3B Health and wellbeing initiatives including free therapy via Wellness Cloud, mental health support via Headspace \uD83C\uDF31 Strong financial wellbeing focus including access to Octopus Money https://octopusmoney.com/, Octopus Share Incentive Plan and will writing offering via Octopus Legacy \uD83C\uDF81 Perkbox https://www.perkbox.com/uk – Flexi-points giving you a range of discounts and perks including free weekly coffee, gym and retail discounts \uD83D\uDEB2 Access to initiatives like Cycle to Work and Octopus Electric Vehicle Leasing OUR CULTURE We're proud to put people first, creating a culture where we truly listen to what matters most to them. Our transparent and inclusive environment encourages diversity of thought, challenge and experimentation. Check out our Glassdoor https://www.glassdoor.co.uk/Reviews/Seccl-Reviews-E3185313.htm page for the latest reviews or our LinkedIn https://www.linkedin.com/company/11050304/admin/ for company updates and insights from the team. Interview process Interviewing is a two-way thing, and we want you to have the time and opportunity to get to know us, as much as we are getting to know you. Our interviews are conversational, so come with questions and be curious. In general, you can expect the interview process to look a bit like this, (following an initial chat with one of our Talent team): - First stage – one-hour competencies-based interview with the hiring manager and another member of the team - Second stage – 30 minute team focused interview with the Chief risk officer and Head of operational resilience ⏳ We’ll only close this role once we have enough applications for the next stage. Please submit your application as soon as possible to make sure you don’t miss out and you should expect to hear back from us within one to two weeks of applying. \uD83C\uDF08 Our aim is to build a diverse and inclusive company of awesome people, with unique skills, passions and experiences. All applicants will be considered for employment without attention to age, ethnicity, religion, sex, sexual orientation, gender identity, family or parental status, national origin, or veteran, neurodiversity or disability status. If this sounds like your kind of thing, we encourage you to apply even if you don’t tick every box. We’d love to hear from you! ", "summaryDescription" : "Information security & digital operational resilience analyst at Seccl", "createdAt" : "2026-06-14T19:21:49.813", "lastUpdated" : "2026-06-16T00:48:59.570", "ingestTimestamp" : "2026-06-14T19:21:49.813", "mongoId" : "6a2cb0a474d8ee00a09da9aa", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "30k-50k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Entry", "dataQualityScore" : 0.7777778, "_score" : 827.99493, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a307962f292fd229c031df7", "title" : "Cybersecurity Risk Analyst", "company" : "Creative Artists Agency", "industry" : "Media", "salary" : { "min" : 87000.0, "max" : 104000.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "Nashville, TN", "locations" : [ "Nashville, TN", "United States of America" ], "timestamp" : "2026-06-16T12:55:55.344", "fingerprint" : "0dafd0b944144f4385f400d40b1f09fa7918648878e2580865a55fbc67fe73e5", "source" : "workday", "language" : "en", "applyUrl" : "https://caa.wd1.myworkdayjobs.com/Careers/job/Nashville-TN/Cybersecurity-Risk-Analyst_JR8926", "externalId" : "JR8926", "industryFunction" : { }, "locationPoint" : "42.60281,-85.09305", "structuredLocations" : [ { "city" : "Nashville", "state" : "Tennessee", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "36.1622767,-86.7742984" } ], "locationText" : "Nashville, Tennessee, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "NIST CSF, CIS, ITIL, ISO 270001, SSO, GDPR, CCPA, SOC, ISO, PCIDSS, FedRAMP", "professionalSkills" : [ "Vendor management", "Risk reviews", "Security assessments", "Workflow review", "Security integrations", "Security metrics", "Due diligence" ], "hardSkillsList" : [ "Threat detection", "Risk mitigation", "Threat response", "Security controls" ], "hardSkills" : [ { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Risk mitigation", "level" : "intermediate" }, { "name" : "Threat response", "level" : "intermediate" }, { "name" : "Security controls", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity risk management, Information security frameworks, Data privacy regulations, Security analytics", "majorSkillsList" : [ "Cybersecurity risk management", "Information security frameworks", "Data privacy regulations", "Security analytics" ], "coreResponsibilities" : "Support Technology Vendor Management program, Ensure technology risk reviews, Monitor for renewals, Monitor for savings opportunities, Participate in risk reviews of IT control framework, Conduct vendor security assessments, Conduct product security assessments, Conduct applications security assessments, Integrate security early during project lifecycle, Review workflows, Produce output to enhance security processes, Coordinate implementation of core security integrations, Ensure security considerations are implemented, Configure solutions securely, Develop key security metrics, Deliver key security metrics, Ensure technical security controls are meeting desired, Ensure measurable effectiveness of technical controls", "teamCollaboration" : "Partnering with systems owners; Partner with business groups; Coordinate across service owners", "domainKnowledge" : "Information security frameworks; Data privacy regulations; Information security certifications; Servers; Operating systems; Cloud applications; Infrastructure", "domainList" : [ "information-security-frameworks", "data-privacy-regulations", "information-security-certifications", "servers", "operating-systems", "cloud-applications", "infrastructure" ], "domainSpecificKnowledge" : [ "Information security frameworks", "Data privacy regulations", "Information security certifications", "Servers", "Operating systems", "Cloud applications", "Infrastructure" ], "toolProficiency" : [ "OneTrust" ], "communicationSkills" : "Written security assessment", "documentationSkills" : "Written security assessment", "problemSolvingSkills" : "Analytical skills", "outcomesObjectives" : "Ensure enterprise systems are protected; Ensure enterprise data are protected; Meet policy requirements; Meet compliance requirements; Support business needs; Enable business needs", "qualificationsBasic" : "3-4 years in Information Technology, 2 years' experience in cybersecurity risk management, Bachelor's or Master's Degree in a relevant field, Analytical skills in conducting due diligence, Experience coordinating technical integrations, Ability to review complex systems architectures, Produce a comprehensive, written, security assessment, Experience using security analytics tooling, Understanding of fundamental operations of servers, Understanding of operating systems, Understanding of cloud applications, Understanding of infrastructure", "qualificationsPreferred" : "Core skills in Cybersecurity fundamentals, Core skills in Third Party Risk Management, Familiarity with Third Party Risk Management tools/processes", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## **Job Description** **Who We Are** Creative Artists Agency (CAA) is the leading entertainment and sports agency, with global expertise in filmed and live entertainment, digital media, publishing, sponsorship sales and endorsements, media finance, consumer investing, fashion, trademark licensing, and philanthropy. Distinguished by its culture of collaboration and exceptional client service, CAA’s diverse workforce identifies, innovates, and amplifies opportunities for the people and organizations that shape culture and inspire the world. The trailblazer of the agency business, CAA was the first to build a sports business, create an investment bank, launch a venture fund, found technology start-up companies, establish a philanthropic arm, build a business in China, and form a brand marketing services division, among other innovations. Named Most Valuable Sports Agency by Forbes for eight consecutive years, CAA represents more than 2,000 of the world’s top athletes in football, baseball, basketball, hockey, soccer, in addition to coaches, on-air broadcasters, and sports personalities and works in the areas of broadcast rights, corporate marketing initiatives, social impact, and sports properties for sales and sponsorship opportunities. Founded in 1975, CAA is headquartered in Los Angeles, and has offices in New York, Nashville, Memphis, Chicago, Miami, London, Munich, Geneva, Stockholm, Shanghai, and Beijing, among other locations globally. **The Role** This is a hands-on security position working within the Information Security group and with the internal IT department at large. This position’s core focus is to ensure consistent, measurable end to end delivery of security services. The successful candidate will work to develop and deploy capabilities ensuring enterprise systems and data are protected with the security controls and tools required to meet policy and compliance requirements. We are looking for candidates who have a passion for cybersecurity, threat detection, risk mitigation and response. You will be a key part of our efforts to build and support a defensible environment where we are able to detect, contain and respond quickly to threats and compromises in ways that serve to enable the business needs of a highly collaborative organization. The environment is fast-paced and commonly on the leading edge of technology, including early adoption of various cloud services along with the challenges of integrating those services into our security practice. **Responsibilities** Support a Technology Vendor Management program, ensuring technology risk reviews across multiple disciplines, and monitoring for renewals and savings opportunities ⁠Participate in risk reviews of the IT control framework (NIST CSF, CIS, ITIL, ISO 270001, etc.) Conduct thorough vendor, product and applications security assessments partnering with systems owners to integrate security early during the project lifecycle. Partner with business groups to review workflows, producing output to enhance security processes in support of those workflows. Coordinate, across service owners, the implementation of core security integrations (SSO, Event Logs, Secrets, Alerting, Threat Model and Backup/Recovery) with applications developed in-house and externally/SaaS hosted environments. Ensure the security considerations identified are implemented and the solutions are configured securely. Coordinate with IRM leadership to develop and deliver key security metrics to ensure technical security controls are meeting desired objectives; ensuring the measurable effectiveness of CAA’s technical controls. **Qualifications** * A minimum of 3-4 years in Information Technology * A minimum of 2 years’ experience in cybersecurity risk management * A Bachelor’s or Master’s Degree in a relevant field of work * Strong analytical skills in conducting due diligence to identify, assess and prioritize vendor risks * Familiarity with information security frameworks (NIST, ISO27001), data privacy regulations (GDPR, CCPA), and information security certifications/attestations (SOC, ISO, PCIDSS, FedRAMP) * Experience in coordinating technical integrations for security tooling and processes. * Ability to review complex systems architectures to identify key security integration opportunities * Produce a comprehensive, written, security assessment of vendors security posture * Experience using security analytics tooling to produce operational metrics and dashboards * A strong understanding of the fundamental operations of servers, operating systems, cloud applications, and infrastructure **Preferred****Qualifications** * Core skills in Cybersecurity fundamentals and Third Party Risk Management * Familiarity with using Third Party Risk Management tools/processes such as OneTrust, SIG or similar GRC platforms. * Hands-on experience in Azure, AWS Cloud environments and familiarity with core Cloud services and Cloud architecture * Familiarity with core security concepts of Single Sign-on (e.g PingFed, SAML), Identity and Access Administration (Active Directory, Azure AD, AWS IAM), Event Management (Splunk), * Expert skills in using Microsoft Office suite, JIRA. **Location** This role is hybrid, based in our Nashville office. **Compensation** The annual base salary for this position is in the range of $87,000 - $104,000 in Nashville. This position is also eligible for benefits and a discretionary bonus. Ultimately, the salary may vary based upon, but not limited to, relevant experience, time in the role, business sector, and geographic location, among other criteria. Please talk with a CAA Recruiter to learn more. Creative Artists Agency, LLC (the “Company”) is committed to a policy of Equal Employment Opportunity and will not discriminate on the basis of race (inclusive of traits historically associated with race, including hair texture and protective hairstyles), color, religion, creed, gender or sex (including pregnancy, childbirth, breastfeeding or related medical conditions), national origin, ancestry, age, physical disability, mental disability, medical condition, genetic information, family and medical care leave status, military or veteran status, marital status, family status, sexual orientation, gender identity, gender expression, political affiliation, an employee’s or their dependent’s reproductive health decision making (e.g., the decision to use or access a particular drug, device or medical service), or any other characteristic protected by applicable law. The absence of a permanent address is not a bar to employment. The Company does not discriminate against individuals based on housing status, including the absence of a fixed address. The Company also complies with the Americans with Disabilities Act and applicable state and local laws with regard to providing reasonable accommodation for qualified individuals with disabilities. CAA does not accept unsolicited resumes from third-party recruiters unless they were contractually engaged by CAA to provide candidates for a specified opening. Any such employment agency, person or entity that submits an unsolicited resume does so with the acknowledgement and agreement that CAA will have the right to hire that applicant at its discretion without any fee owed to the submitting employment agency, person or entity.", "summaryDescription" : "Cybersecurity Risk Analyst at Creative Artists Agency. Skills: Cybersecurity risk management, Information security frameworks, Data privacy regulations, Security analytics. Support Technology Vendor Management program. Ensure technology risk reviews", "postedDate" : "2026-06-13T04:11:26.306", "createdAt" : "2026-06-16T04:11:26.294", "lastUpdated" : "2026-06-16T12:55:55.344", "ingestTimestamp" : "2026-06-16T04:11:26.294", "mongoId" : "6a307962f292fd229c031df7", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://caa.wd1.myworkdayjobs.com/Careers/job/Nashville-TN/Cybersecurity-Risk-Analyst_JR8926", "salaryAnnualMin" : 87000, "salaryAnnualMax" : 104000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Threat detection", "Risk mitigation", "Threat response", "Security controls", "Cybersecurity risk management", "Information security frameworks", "Data privacy regulations", "Security analytics", "Vendor management", "Risk reviews", "Security assessments", "Workflow review", "Security integrations", "Security metrics", "Due diligence", "Information security certifications", "Servers", "Operating systems", "Cloud applications", "Infrastructure", "OneTrust" ], "skillCount" : 21, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "mid", "dataQualityScore" : 0.8888889, "_score" : 821.0399, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Media", "llmIndustryConfidence" : 0.95 }, { "id" : "6a3092acf292fd229c0c3aec", "title" : "Senior Information Security Analyst, GRC and Responsible AI", "company" : "Sandisk", "industry" : "Computer Hardware", "salary" : { "min" : 135000.0, "max" : 185000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Information Security Analyst in Irvine, United States, adjusted for the technology industry and company size." }, "location" : "Irvine, CA, United States", "locations" : [ "Irvine", "CA", "United States" ], "timestamp" : "2026-06-16T11:20:53.196", "fingerprint" : "9dd4192c5a024a3d989a2de7f510b1ca5b484545771b865adbdd6535841ceb58", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Sandisk/744000132247129-information-security-analyst-4", "externalId" : "744000132247129", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Irvine", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.6856969,-117.8259810" } ], "locationText" : "Irvine, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "AI, GenAI", "professionalSkills" : [ "Risk management", "Governance", "Strategy", "Threat modeling", "Secure-by-design" ], "hardSkillsList" : [ "Risk assessment", "Threat modeling", "Data protection", "Model behavior analysis", "Agent behavior analysis", "AI attack surfaces" ], "hardSkills" : [ { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Data protection", "level" : "intermediate" }, { "name" : "Model behavior analysis", "level" : "intermediate" }, { "name" : "Agent behavior analysis", "level" : "intermediate" }, { "name" : "AI attack surfaces", "level" : "intermediate" } ], "majorSkills" : "GRC, Responsible AI, Risk assessment", "majorSkillsList" : [ "GRC", "Responsible AI", "Risk assessment" ], "coreResponsibilities" : "Drive security intake for AI use cases, Drive risk assessment for AI use cases, Drive ongoing oversight of AI use cases, Drive security intake for AI platforms, Drive risk assessment for AI platforms, Drive ongoing oversight of AI platforms, Drive security intake for AI models, Drive risk assessment for AI models, Drive ongoing oversight of AI models, Drive security intake for third-party vendors, Drive risk assessment for third-party vendors, Drive ongoing oversight of third-party vendors, Lead technical risk assessments, Lead threat modeling, Design practical controls, Recommend practical controls, Design scalable controls, Recommend scalable controls, Partner with Legal, Partner with Privacy, Partner with Procurement, Partner with IT, Partner with Engineering, Partner with business stakeholders, Advance regulatory objectives, Advance contractual objectives, Advance governance objectives, Shape AI governance policies, Shape AI governance standards, Shape AI governance operating procedures, Prepare materials for governance reviews, Build operating model for securing AI, Apply system-level thinking across functions, Drive consistency across functions, Drive scale across functions, Anticipate emerging AI risks, Recommend adjustments to controls, Recommend adjustments to processes, Recommend adjustments to standards, Strengthen enterprise risk management, Conduct technical risk assessments, Conduct business process risk assessments, Document treatment recommendations, Support internal audits, Support external audits, Drive remediation activities", "teamCollaboration" : "Cross-functional stakeholders; Legal; IT; Procurement; Business leaders; Privacy; Engineering", "domainKnowledge" : "Responsible AI; GenAI; Information Security Governance; Risk Management; ISO 27001; NIST CSF 2.0; NIST AI RMF; ISO/IEC 42001; Data protection; AI attack surfaces", "domainList" : [ "responsible-ai", "genai", "information-security-governance", "risk-management", "iso-27001", "nist-csf-2-0", "nist-ai-rmf", "iso-iec-42001", "data-protection", "ai-attack-surfaces" ], "domainSpecificKnowledge" : [ "Responsible AI", "GenAI", "Information Security Governance", "Risk Management", "ISO 27001", "NIST CSF 2.0", "NIST AI RMF", "ISO/IEC 42001", "Data protection", "AI attack surfaces" ], "problemSolvingSkills" : "Risk assessment; Threat modeling; Root cause analysis", "qualificationsBasic" : "5+ years security professional experience, Experience operating independently, Experience influencing cross-functional stakeholders, Experience translating risks into governance solutions, Experience leading GenAI security risk assessments, Experience defining governance standards, Experience partnering with Legal, IT, Procurement, business leaders, Experience advancing regulatory, contractual, governance objectives related to AI, Experience shaping AI governance policies, standards, operating procedures, Experience preparing materials for governance reviews, Experience building end-to-end operating model for securing AI, Experience applying program and system-level thinking, Experience anticipating emerging AI risks, Experience recommending adjustments to controls, processes, standards, Experience strengthening enterprise information security risk management, Experience conducting technical and business process risk assessments, Experience documenting treatment recommendations, Experience supporting internal and external audits, Experience driving remediation activities", "qualificationsPreferred" : "Responsible AI experience, GenAI security risk assessment experience, Experience with ISO 27001, Experience with NIST CSF 2.0, Experience with NIST AI RMF, Experience with ISO/IEC 42001", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Sandisk understands how people and businesses consume data and we relentlessly innovate to deliver solutions that enable today’s needs and tomorrow’s next big ideas. With a rich history of groundbreaking innovations in Flash and advanced memory technologies, our solutions have become the beating heart of the digital world we’re living in and that we have the power to shape. Sandisk meets people and businesses at the intersection of their aspirations and the moment, enabling them to keep moving and pushing possibility forward. We do this through the balance of our powerhouse manufacturing capabilities and our industry-leading portfolio of products that are recognized globally for innovation, performance and quality. Sandisk has two facilities recognized by the World Economic Forum as part of the Global Lighthouse Network for advanced 4IR innovations. These facilities were also recognized as Sustainability Lighthouses for breakthroughs in efficient operations. With our global reach, we ensure the global supply chain has access to the Flash memory it needs to keep our world moving forward. Job Description Senior Information Security Analyst, GRC and Responsible AI As a Senior Information Security Analyst (Level 4), you will play a key role in shaping and operationalizing Sandisk’s enterprise Information Security Governance, Risk Management, and Strategy function, with a particular focus on Responsible GenAI. This is a senior, hands‑on role for an experienced security professional who can operate independently, influence cross‑functional stakeholders, and translate emerging technology risks into practical, scalable governance solutions. You will lead GenAI security risk assessments, help define governance standards, and partner closely with Legal, IT, Procurement, and business leaders to ensure AI adoption is secure, compliant, and aligned with Sandisk’s risk appetite. In addition to AI governance, you will contribute to the evolution of Sandisk’s enterprise risk management frameworks, supporting risk‑based decision‑making, strategy, and continuous improvement across the organization. Key Responsibilities Responsible AI Security * Drive security intake, risk assessment, and ongoing oversight of enterprise AI use cases, platforms, models, and third-party vendors. * Lead technical risk assessments and threat modeling covering data protection, identity and access, integration patterns, model and agent behavior, and emerging AI attack surfaces. * Design and recommend practical, scalable controls aligned with enterprise security standards and secure-by-design principles. * Partner with Legal, Privacy, Procurement, IT, Engineering, and business stakeholders to advance regulatory, contractual, and governance objectives related to AI. * Shape AI governance policies, standards, and operating procedures, and prepare materials for governance reviews. Program and System Thinking * Help build the end-to-end operating model for securing AI, from intake through approval and monitoring. * Apply program and system-level thinking across functions to drive consistency and scale. * Anticipate emerging AI risks and recommend adjustments to controls, processes, and standards. Core GRC * Strengthen enterprise information security risk management aligned with ISO 27001, NIST CSF 2.0, NIST AI RMF, and ISO/IEC 42001. * Conduct technical and business process risk assessments and document treatment recommendations. * Support internal and external audits with metrics, evidence, and analysis, and drive remediation activities. ## Additional Information Sandisk is committed to providing equal opportunities to all applicants and employees and will not discriminate against any applicant or employee based on their race, color, ancestry, religion (including religious dress and grooming standards), sex (including pregnancy, childbirth or related medical conditions, breastfeeding or related medical conditions), gender (including a person’s gender identity, gender expression, and gender-related appearance and behavior, whether or not stereotypically associated with the person’s assigned sex at birth), age, national origin, sexual orientation, medical condition, marital status (including domestic partnership status), physical disability, mental disability, medical condition, genetic information, protected medical and family care leave, Civil Air Patrol status, military and veteran status, or other legally protected characteristics. We also prohibit harassment of any individual on any of the characteristics listed above. Our non-discrimination policy applies to all aspects of employment. We comply with the laws and regulations set forth in the \"[Know Your Rights: Workplace Discrimination is Illegal](https://www.eeoc.gov/sites/default/files/2023-06/22-088EEOCKnowYourRights6.12.pdf)” poster. Our pay transparency policy is available [here](https://www.dol.gov/sites/dolgov/files/OFCCP/pdf/pay-transp%20EnglishformattedESQA508c.pdf). Sandisk thrives on the power and potential of diversity. As a global company, we believe the most effective way to embrace the diversity of our customers and communities is to mirror it from within. We believe the fusion of various perspectives results in the best outcomes for our employees, our company, our customers, and the world around us. We are committed to an inclusive environment where every individual can thrive through a sense of belonging, respect and contribution. Sandisk is committed to offering opportunities to applicants with disabilities and ensuring all candidates can successfully navigate our careers website and our hiring process. Please contact us at [jobs.accommodations@sandisk.com](mailto:jobs.accommodations@sandisk.com) to advise us of your accommodation request. In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying. Based on our experience, we anticipate that the application deadline will be 01/15/2026 (3 months from posting), although we reserve the right to close the application process sooner if we hire an applicant for this position before the application deadline. If we are not able to hire someone from this role before the application deadline, we will update this posting with a new anticipated application deadline. Required Qualifications * Bachelor's degree in information security, Computer Science, Engineering, or a related discipline, or equivalent experience. * 6+ years of progressive experience in Information Security, including exposure to GRC, risk management, or security governance in a complex enterprise environment. * Demonstrated technical proficiency in security, including hands-on experience with threat modeling, technical risk assessment, or security architecture reviews. * Working knowledge of AI security frameworks and standards, including OWASP Top 10 for LLM Applications, NIST AI Risk Management Framework (AI RMF), and ISO/IEC 42001, with familiarity in applying these to real-world use cases. * Practical understanding of AI and generative AI technologies and associated risks, including data protection, access management, model misuse, and supply chain considerations. * Familiarity with AI governance standards such as NIST AI RMF and ISO/IEC 42001. Preferred Qualifications * Background in software development, security engineering, application security, cloud security, or security architecture. * Familiarity with secure development practices, secure-by-design principles, and modern engineering environments such as cloud, APIs, containers, and CI/CD pipelines. * Experience applying threat modeling methodologies (such as STRIDE, PASTA, or attack tree analysis) to enterprise systems or AI workloads. * Professional certifications such as CISSP, CISM, CRISC, or GSNA. * Technical security certifications such as GCIH, GPEN, CEH, OSCP, GWAPT, or CSSLP. * Hands-on experience with AI, ML, or generative AI in a security, risk, engineering, or architecture capacity. * Exposure to emerging AI integration patterns, agentic systems, or AI red teaming. Skills and Attributes * Strong intellectual curiosity and a self-driven approach to learning new technologies. * Effective communication skills, with the ability to explain complex technical and AI concepts to a range of audiences. * Ability to influence and drive outcomes in cross-functional, matrixed environments. * Pragmatic, outcome-focused, and comfortable operating in ambiguity. * Strong program and system-level thinking, with the ability to connect technical decisions to business impact. #LI-TS1 Compensation & Benefits Details * An employee’s pay position within the salary range may be based on several factors including but not limited to (1) relevant education; qualifications; certifications; and experience; (2) skills, ability, knowledge of the job; (3) performance, contribution and results; (4) geographic location; (5) shift; (6) internal and external equity; and (7) business and organizational needs. * The salary range is what we believe to be the range of possible compensation for this role at the time of this posting. We may ultimately pay more or less than the posted range and this range is only applicable for jobs to be performed in California, Colorado, New York or remote jobs that can be performed in California, Colorado and New York. This range may be modified in the future. * You will be eligible to participate in Sandisk's Short-Term Incentive (STI) Plan, which provides incentive awards based on Company and individual performance. Depending on your role and your performance, you may be eligible to participate in our annual Long-Term Incentive (LTI) program, which consists of restricted stock units (RSUs) or cash equivalents, pursuant to the terms of the LTI plan. Please note that not all roles are eligible to participate in the LTI program, and not all roles are eligible for equity under the LTI plan. RSU awards are also available to eligible new hires, subject to Sandisk's Standard Terms and Conditions for Restricted Stock Unit Awards. * We offer a comprehensive package of benefits including paid vacation time; paid sick leave; medical/dental/vision insurance; life, accident and disability insurance; tax-advantaged flexible spending and health savings accounts; employee assistance program; other voluntary benefit programs such as supplemental life and AD&D, legal plan, pet insurance, critical illness, accident and hospital indemnity; tuition reimbursement; transit; the Applause Program, employee stock purchase plan, and the Sandisk's Savings 401(k) Plan. * Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law.", "summaryDescription" : "Senior Information Security Analyst, GRC and Responsible AI at Sandisk. Skills: GRC, Responsible AI, Risk assessment. Drive security intake for AI use cases. Drive risk assessment for AI use cases", "postedDate" : "2026-06-15T16:41:47.000", "createdAt" : "2026-06-16T03:36:35.715", "lastUpdated" : "2026-06-16T11:20:53.196", "ingestTimestamp" : "2026-06-16T03:36:35.715", "mongoId" : "6a3092acf292fd229c0c3aec", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 135000, "salaryAnnualMax" : 185000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Risk assessment", "Threat modeling", "Data protection", "Model behavior analysis", "Agent behavior analysis", "AI attack surfaces", "GRC", "Responsible AI", "Risk management", "Governance", "Strategy", "Secure-by-design", "GenAI", "Information Security Governance", "Risk Management", "ISO 27001", "NIST CSF 2.0", "NIST AI RMF", "ISO/IEC 42001" ], "skillCount" : 19, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 820.6309, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a3080e2f292fd229c068076", "title" : "Senior Information Security Analyst, GRC and Responsible AI", "company" : "Sandisk", "industry" : "Computer Hardware", "salary" : { "min" : 145000.0, "max" : 205000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Information Security Analyst, GRC and Responsible AI in Irvine, United States, adjusted for seniority and industry." }, "location" : "Irvine, CA, United States", "locations" : [ "Irvine", "CA", "United States" ], "timestamp" : "2026-06-16T12:53:21.321", "fingerprint" : "1d099c1eacbb4ce579c9886fbbdcc870e7aa2c25d1be5940c1f83908c9680cf3", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Sandisk/744000132247129-information-security-analyst-4", "externalId" : "744000132247129", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Irvine", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.6856969,-117.8259810" } ], "locationText" : "Irvine, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "AI, GenAI, Machine Learning", "professionalSkills" : [ "Risk assessment", "Threat modeling", "Governance" ], "hardSkillsList" : [ "Information security", "Risk management", "AI governance", "Threat analysis", "Control design" ], "hardSkills" : [ { "name" : "Information security", "level" : "intermediate" }, { "name" : "Risk management", "level" : "intermediate" }, { "name" : "AI governance", "level" : "intermediate" }, { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Control design", "level" : "intermediate" } ], "majorSkills" : "GRC, Responsible AI, Risk management", "majorSkillsList" : [ "GRC", "Responsible AI", "Risk management" ], "coreResponsibilities" : "Drive security intake for AI use cases, Drive risk assessment for AI use cases, Drive ongoing oversight for AI use cases, Lead technical risk assessments, Lead threat modeling, Design scalable controls, Recommend scalable controls, Partner with stakeholders to advance objectives, Shape AI governance policies, Shape AI governance standards, Shape AI governance operating procedures, Prepare materials for governance reviews, Build operating model for securing AI, Apply program-level thinking, Apply system-level thinking, Anticipate emerging AI risks, Recommend adjustments to controls, Recommend adjustments to processes, Recommend adjustments to standards, Strengthen risk management, Conduct technical risk assessments, Conduct business process risk assessments, Document treatment recommendations, Support internal audits, Support external audits, Drive remediation activities", "teamCollaboration" : "Cross-functional stakeholders; Legal; IT; Procurement; Business leaders; Privacy; Engineering", "domainKnowledge" : "ISO 27001; NIST CSF 2.0; NIST AI RMF; ISO/IEC 42001; Responsible AI; GenAI", "domainList" : [ "iso-27001", "nist-csf-2-0", "nist-ai-rmf", "iso-iec-42001", "responsible-ai", "genai" ], "domainSpecificKnowledge" : [ "ISO 27001", "NIST CSF 2.0", "NIST AI RMF", "ISO/IEC 42001", "Responsible AI", "GenAI" ], "qualificationsBasic" : "5+ years security professional experience, Experience operating independently, Experience influencing cross-functional stakeholders, Experience translating risks to governance solutions, Experience leading GenAI security risk assessments, Experience defining governance standards, Experience partnering with Legal, IT, Procurement, business leaders, Experience contributing to enterprise risk management frameworks, Experience supporting risk-based decision-making, Experience supporting strategy, Experience supporting continuous improvement, Experience driving security intake for AI use cases, Experience driving risk assessment for AI use cases, Experience driving ongoing oversight for AI use cases, Experience leading technical risk assessments, Experience leading threat modeling, Experience designing scalable controls, Experience recommending scalable controls, Experience partnering with Legal, Privacy, Procurement, IT, Engineering, business stakeholders, Experience advancing regulatory objectives related to AI, Experience advancing contractual objectives related to AI, Experience advancing governance objectives related to AI, Experience shaping AI governance policies, Experience shaping AI governance standards, Experience shaping AI governance operating procedures, Experience preparing materials for governance reviews, Experience building end-to-end operating model for securing AI, Experience applying program-level thinking, Experience applying system-level thinking, Experience anticipating emerging AI risks, Experience recommending adjustments to controls, Experience recommending adjustments to processes, Experience recommending adjustments to standards, Experience strengthening enterprise information security risk management, Experience conducting technical risk assessments, Experience conducting business process risk assessments, Experience documenting treatment recommendations, Experience supporting internal audits, Experience supporting external audits, Experience driving remediation activities", "qualificationsPreferred" : "Responsible AI focus, GenAI focus, NIST AI RMF knowledge, ISO/IEC 42001 knowledge", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Sandisk understands how people and businesses consume data and we relentlessly innovate to deliver solutions that enable today’s needs and tomorrow’s next big ideas. With a rich history of groundbreaking innovations in Flash and advanced memory technologies, our solutions have become the beating heart of the digital world we’re living in and that we have the power to shape. Sandisk meets people and businesses at the intersection of their aspirations and the moment, enabling them to keep moving and pushing possibility forward. We do this through the balance of our powerhouse manufacturing capabilities and our industry-leading portfolio of products that are recognized globally for innovation, performance and quality. Sandisk has two facilities recognized by the World Economic Forum as part of the Global Lighthouse Network for advanced 4IR innovations. These facilities were also recognized as Sustainability Lighthouses for breakthroughs in efficient operations. With our global reach, we ensure the global supply chain has access to the Flash memory it needs to keep our world moving forward. Job Description Senior Information Security Analyst, GRC and Responsible AI As a Senior Information Security Analyst (Level 4), you will play a key role in shaping and operationalizing Sandisk’s enterprise Information Security Governance, Risk Management, and Strategy function, with a particular focus on Responsible GenAI. This is a senior, hands‑on role for an experienced security professional who can operate independently, influence cross‑functional stakeholders, and translate emerging technology risks into practical, scalable governance solutions. You will lead GenAI security risk assessments, help define governance standards, and partner closely with Legal, IT, Procurement, and business leaders to ensure AI adoption is secure, compliant, and aligned with Sandisk’s risk appetite. In addition to AI governance, you will contribute to the evolution of Sandisk’s enterprise risk management frameworks, supporting risk‑based decision‑making, strategy, and continuous improvement across the organization. Key Responsibilities Responsible AI Security * Drive security intake, risk assessment, and ongoing oversight of enterprise AI use cases, platforms, models, and third-party vendors. * Lead technical risk assessments and threat modeling covering data protection, identity and access, integration patterns, model and agent behavior, and emerging AI attack surfaces. * Design and recommend practical, scalable controls aligned with enterprise security standards and secure-by-design principles. * Partner with Legal, Privacy, Procurement, IT, Engineering, and business stakeholders to advance regulatory, contractual, and governance objectives related to AI. * Shape AI governance policies, standards, and operating procedures, and prepare materials for governance reviews. Program and System Thinking * Help build the end-to-end operating model for securing AI, from intake through approval and monitoring. * Apply program and system-level thinking across functions to drive consistency and scale. * Anticipate emerging AI risks and recommend adjustments to controls, processes, and standards. Core GRC * Strengthen enterprise information security risk management aligned with ISO 27001, NIST CSF 2.0, NIST AI RMF, and ISO/IEC 42001. * Conduct technical and business process risk assessments and document treatment recommendations. * Support internal and external audits with metrics, evidence, and analysis, and drive remediation activities. ## Additional Information Sandisk is committed to providing equal opportunities to all applicants and employees and will not discriminate against any applicant or employee based on their race, color, ancestry, religion (including religious dress and grooming standards), sex (including pregnancy, childbirth or related medical conditions, breastfeeding or related medical conditions), gender (including a person’s gender identity, gender expression, and gender-related appearance and behavior, whether or not stereotypically associated with the person’s assigned sex at birth), age, national origin, sexual orientation, medical condition, marital status (including domestic partnership status), physical disability, mental disability, medical condition, genetic information, protected medical and family care leave, Civil Air Patrol status, military and veteran status, or other legally protected characteristics. We also prohibit harassment of any individual on any of the characteristics listed above. Our non-discrimination policy applies to all aspects of employment. We comply with the laws and regulations set forth in the \"[Know Your Rights: Workplace Discrimination is Illegal](https://www.eeoc.gov/sites/default/files/2023-06/22-088EEOCKnowYourRights6.12.pdf)” poster. Our pay transparency policy is available [here](https://www.dol.gov/sites/dolgov/files/OFCCP/pdf/pay-transp%20EnglishformattedESQA508c.pdf). Sandisk thrives on the power and potential of diversity. As a global company, we believe the most effective way to embrace the diversity of our customers and communities is to mirror it from within. We believe the fusion of various perspectives results in the best outcomes for our employees, our company, our customers, and the world around us. We are committed to an inclusive environment where every individual can thrive through a sense of belonging, respect and contribution. Sandisk is committed to offering opportunities to applicants with disabilities and ensuring all candidates can successfully navigate our careers website and our hiring process. Please contact us at [jobs.accommodations@sandisk.com](mailto:jobs.accommodations@sandisk.com) to advise us of your accommodation request. In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying. Based on our experience, we anticipate that the application deadline will be 01/15/2026 (3 months from posting), although we reserve the right to close the application process sooner if we hire an applicant for this position before the application deadline. If we are not able to hire someone from this role before the application deadline, we will update this posting with a new anticipated application deadline. Required Qualifications * Bachelor's degree in information security, Computer Science, Engineering, or a related discipline, or equivalent experience. * 6+ years of progressive experience in Information Security, including exposure to GRC, risk management, or security governance in a complex enterprise environment. * Demonstrated technical proficiency in security, including hands-on experience with threat modeling, technical risk assessment, or security architecture reviews. * Working knowledge of AI security frameworks and standards, including OWASP Top 10 for LLM Applications, NIST AI Risk Management Framework (AI RMF), and ISO/IEC 42001, with familiarity in applying these to real-world use cases. * Practical understanding of AI and generative AI technologies and associated risks, including data protection, access management, model misuse, and supply chain considerations. * Familiarity with AI governance standards such as NIST AI RMF and ISO/IEC 42001. Preferred Qualifications * Background in software development, security engineering, application security, cloud security, or security architecture. * Familiarity with secure development practices, secure-by-design principles, and modern engineering environments such as cloud, APIs, containers, and CI/CD pipelines. * Experience applying threat modeling methodologies (such as STRIDE, PASTA, or attack tree analysis) to enterprise systems or AI workloads. * Professional certifications such as CISSP, CISM, CRISC, or GSNA. * Technical security certifications such as GCIH, GPEN, CEH, OSCP, GWAPT, or CSSLP. * Hands-on experience with AI, ML, or generative AI in a security, risk, engineering, or architecture capacity. * Exposure to emerging AI integration patterns, agentic systems, or AI red teaming. Skills and Attributes * Strong intellectual curiosity and a self-driven approach to learning new technologies. * Effective communication skills, with the ability to explain complex technical and AI concepts to a range of audiences. * Ability to influence and drive outcomes in cross-functional, matrixed environments. * Pragmatic, outcome-focused, and comfortable operating in ambiguity. * Strong program and system-level thinking, with the ability to connect technical decisions to business impact. #LI-TS1 Compensation & Benefits Details * An employee’s pay position within the salary range may be based on several factors including but not limited to (1) relevant education; qualifications; certifications; and experience; (2) skills, ability, knowledge of the job; (3) performance, contribution and results; (4) geographic location; (5) shift; (6) internal and external equity; and (7) business and organizational needs. * The salary range is what we believe to be the range of possible compensation for this role at the time of this posting. We may ultimately pay more or less than the posted range and this range is only applicable for jobs to be performed in California, Colorado, New York or remote jobs that can be performed in California, Colorado and New York. This range may be modified in the future. * You will be eligible to participate in Sandisk's Short-Term Incentive (STI) Plan, which provides incentive awards based on Company and individual performance. Depending on your role and your performance, you may be eligible to participate in our annual Long-Term Incentive (LTI) program, which consists of restricted stock units (RSUs) or cash equivalents, pursuant to the terms of the LTI plan. Please note that not all roles are eligible to participate in the LTI program, and not all roles are eligible for equity under the LTI plan. RSU awards are also available to eligible new hires, subject to Sandisk's Standard Terms and Conditions for Restricted Stock Unit Awards. * We offer a comprehensive package of benefits including paid vacation time; paid sick leave; medical/dental/vision insurance; life, accident and disability insurance; tax-advantaged flexible spending and health savings accounts; employee assistance program; other voluntary benefit programs such as supplemental life and AD&D, legal plan, pet insurance, critical illness, accident and hospital indemnity; tuition reimbursement; transit; the Applause Program, employee stock purchase plan, and the Sandisk's Savings 401(k) Plan. * Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law.", "summaryDescription" : "Senior Information Security Analyst, GRC and Responsible AI at Sandisk. Skills: GRC, Responsible AI, Risk management. Drive security intake for AI use cases. Drive risk assessment for AI use cases", "postedDate" : "2026-06-15T16:41:47.000", "createdAt" : "2026-06-16T01:42:10.630", "lastUpdated" : "2026-06-16T12:53:21.321", "ingestTimestamp" : "2026-06-16T01:42:10.630", "mongoId" : "6a3080e2f292fd229c068076", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 145000, "salaryAnnualMax" : 205000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Information security", "Risk management", "AI governance", "Threat analysis", "Control design", "GRC", "Responsible AI", "Risk assessment", "Threat modeling", "Governance", "ISO 27001", "NIST CSF 2.0", "NIST AI RMF", "ISO/IEC 42001", "GenAI" ], "skillCount" : 15, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 820.6309, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305126f292fd229cefb164", "title" : "Cleared On Site Mid-Level Information Systems Security Officers (ISSO)", "company" : "SMX", "salary" : { "min" : 105200.0, "max" : 176900.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Hollywood, Maryland, United States", "locations" : [ "Hollywood", "Maryland", "United States" ], "certifications" : [ "DoD 8570.01-M IAM Level II or III", "CISSP" ], "timestamp" : "2026-06-16T06:41:20.995", "fingerprint" : "506b07b375446406cc2a5d27050c2f494877e3ce9f6fd918dcd99ef6289d7d6f", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.smxtech.com/careers/?gh_jid=7772112003", "externalId" : "7772112003", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Washington", "state" : "District of Columbia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8950982,-77.0363849" } ], "locationText" : "Washington, District of Columbia, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Information Security, Risk Management, Vulnerability Management, Security Audits, Network Security, System Security, Security Policies, Security Procedures, Security Controls, Incident Response, Security Awareness Training, Security Architecture, Security Compliance, NIST, RMF, DIACAP, DoD, DISA STIGs, ACAS, HBSS", "professionalSkills" : [ "Risk assessment", "Security analysis", "Policy development", "Procedure development", "Compliance monitoring", "Training development", "Security architecture design", "Security control implementation", "Incident investigation", "Vulnerability assessment" ], "hardSkillsList" : [ "Risk management", "Vulnerability management", "Security audits", "Network security", "System security", "Security policy", "Security procedures", "Security controls", "Incident response", "Security awareness", "Security architecture", "Security compliance", "NIST RMF", "DIACAP", "DISA STIGs", "ACAS", "HBSS" ], "hardSkills" : [ { "name" : "Risk management", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Security audits", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "System security", "level" : "intermediate" }, { "name" : "Security policy", "level" : "intermediate" }, { "name" : "Security procedures", "level" : "intermediate" }, { "name" : "Security controls", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security awareness", "level" : "intermediate" }, { "name" : "Security architecture", "level" : "intermediate" }, { "name" : "Security compliance", "level" : "intermediate" }, { "name" : "NIST RMF", "level" : "intermediate" }, { "name" : "DIACAP", "level" : "intermediate" }, { "name" : "DISA STIGs", "level" : "intermediate" }, { "name" : "ACAS", "level" : "intermediate" }, { "name" : "HBSS", "level" : "intermediate" } ], "majorSkills" : "Information Systems Security, Risk Management Framework, Security Compliance", "majorSkillsList" : [ "Information Systems Security", "Risk Management Framework", "Security Compliance" ], "coreResponsibilities" : "Develop and implement security policies and procedures, Conduct security audits and assessments, Manage vulnerability scanning and remediation, Implement and maintain security controls, Develop and deliver security awareness training, Support incident response activities, Ensure compliance with DoD and NIST standards, Document security architecture and configurations, Review and approve system security plans, Monitor security alerts and logs", "teamCollaboration" : "Cross-functional teams; System administrators; Network engineers; Program managers", "domainKnowledge" : "DoD Information Security; NIST RMF; DIACAP; DISA STIGs; Cybersecurity compliance", "domainList" : [ "dod-information-security", "nist-rmf", "diacap", "disa-stigs", "cybersecurity-compliance" ], "domainSpecificKnowledge" : [ "DoD Information Security", "NIST RMF", "DIACAP", "DISA STIGs", "Cybersecurity compliance" ], "toolProficiency" : [ "ACAS", "HBSS" ], "communicationSkills" : "Technical documentation; Security briefings", "documentationSkills" : "Security policies; Security procedures; System security plans; Security architecture documentation", "problemSolvingSkills" : "Root cause analysis; Troubleshooting security issues", "specialRequirements" : "Must possess an active Top Secret security clearance", "qualificationsBasic" : "5+ years of experience in Information Systems Security, Bachelor's degree in Information Systems, Cybersecurity, or related field, DoD 8570.01-M IAM Level II or III certification", "qualificationsPreferred" : "Master's degree in a related field, CISSP certification", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "SMX is seeking a highly motivated Information System Security Officer (ISSO) – Mid to support a mission-critical federal program in Washington, DC. This individual will serve as a key cybersecurity resource responsible for supporting the security posture, compliance activities, and operational security requirements of enterprise information systems and applications. The selected candidate will act as a trusted advisor to System Owners (SOs), Business Process Owners, Information System Security Managers (ISSMs), and cybersecurity leadership on matters related to information system security, risk management, and regulatory compliance. This role requires experience supporting Risk Management Framework (RMF) activities, implementing security controls, monitoring system security posture, and ensuring information systems remain compliant with federal cybersecurity requirements while supporting mission objectives. This position is on site in Washington, DC and requires an active TS/SCI clearance. Essential Duties & Responsibilities: Serve as a primary cybersecurity advisor to System Owners (SOs), Business Process Owners, and ISSMs on matters related to information system security Support implementation, maintenance, and continuous improvement of security controls across enterprise systems and applications Assist with Risk Management Framework (RMF) activities including system categorization, security control implementation, assessment support, and continuous monitoring Develop, maintain, and update security documentation including System Security Plans (SSPs), POA&Ms, security procedures, and supporting authorization artifacts Monitor system security posture and identify risks, vulnerabilities, and compliance gaps requiring remediation Coordinate with engineers, system administrators, developers, and security personnel to ensure security requirements are incorporated throughout the system lifecycle Support Authorization to Operate (ATO) activities and ongoing authorization maintenance efforts Conduct security reviews and assessments to validate implementation and effectiveness of security controls Assist in the identification, documentation, tracking, and remediation of security findings and vulnerabilities Review and validate user access controls, privileged accounts, hardware inventories, software inventories, and system configurations Support audit activities, compliance reviews, and cybersecurity inspections Provide guidance regarding physical and logical protection of information system assets Develop reports, metrics, and recommendations related to system security posture and compliance status Recommend improvements to security processes, procedures, and operational controls Support incident response, security investigations, and remediation activities as required Required Skills & Experience Active TS/SCI clearance required Minimum of 5 years of professional experience supporting cybersecurity, information assurance, RMF, or information system security activities Experience serving as an ISSO, cybersecurity analyst, security engineer, or related security role within a federal environment Experience supporting Risk Management Framework (RMF) activities and Authorization to Operate (ATO) processes Experience developing and maintaining SSPs, POA&Ms, security control documentation, and related authorization artifacts Familiarity with NIST 800-53, NIST 800-37, FISMA, and federal cybersecurity requirements Experience implementing and assessing security controls within enterprise information systems Experience supporting vulnerability management, remediation tracking, and continuous monitoring activities Knowledge of access control management, security documentation, and compliance reporting Strong analytical, troubleshooting, and problem-solving skills Ability to assess risks and recommend practical security solutions Strong written and verbal communication skills Ability to work independently while managing multiple priorities in a fast-paced environment Desired Skills & Experience Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field Experience supporting federal government, law enforcement, intelligence community, or national security programs Experience supporting cloud-based systems and cloud security compliance activities Experience supporting Governance, Risk, and Compliance (GRC) platforms Familiarity with enterprise security tools including vulnerability scanners, SIEM platforms, and compliance monitoring tools Experience supporting security audits, inspections, and assessment activities Familiarity with Agile development methodologies and DevSecOps practices One or more of the following certifications preferred: Security+ CAP (Certified Authorization Professional) SSCP GSEC CISSP Associate CASP+ Other relevant cybersecurity certifications Application Deadline: 9-4-2026 # LI-SA1 The SMX salary determination process takes into account a number of factors, including but not limited to, geographic location, Federal Government contract labor categories, relevant prior work experience, specific skills, education and certifications. At SMX, one of our Core Values is to Invest in Our People so we offer a competitive mix of compensation, learning & development opportunities, and benefits. Some key components of our robust benefits include health insurance, paid leave, and retirement. The proposed salary for this position is: $105,200—$176,900 USD At SMX®, we are a team of technical and domain experts dedicated to enabling your mission. From priority national security initiatives for the DoD to highly assured and compliant solutions for healthcare, we understand that digital transformation is key to your future success. We share your vision for the future and strive to accelerate your impact on the world. We bring both cutting edge technology and an expansive view of what’s possible to every engagement. Our delivery model and unique approaches harness our deep technical and domain knowledge, providing forward-looking insights and practical solutions to power secure mission acceleration. SMX is an Equal Opportunity employer including disabilities and veterans. Selected applicant may be subject to a background investigation and/or education verification. SMX does not sponsor a new applicant for employment authorization or immigration related support for this position (i. e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, E-2, E-3, L-1 and O-1, or any EADs or other forms of work authorization that require immigration support from an employer).", "summaryDescription" : "Cleared On Site Mid-Level Information Systems Security Officers (ISSO) at SMX. Skills: Information Systems Security, Risk Management Framework, Security Compliance. Develop and implement security policies and procedures. Conduct security audits and assessments", "postedDate" : "2026-06-15T23:15:34.638", "createdAt" : "2026-06-15T23:15:34.638", "lastUpdated" : "2026-06-16T06:41:20.995", "ingestTimestamp" : "2026-06-15T23:15:34.638", "mongoId" : "6a305126f292fd229cefb164", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 105200, "salaryAnnualMax" : 176900, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Risk management", "Vulnerability management", "Security audits", "Network security", "System security", "Security policy", "Security procedures", "Security controls", "Incident response", "Security awareness", "Security architecture", "Security compliance", "NIST RMF", "DIACAP", "DISA STIGs", "ACAS", "HBSS", "Information Systems Security", "Risk Management Framework", "Security Compliance", "Risk assessment", "Security analysis", "Policy development", "Procedure development", "Compliance monitoring", "Training development", "Security architecture design", "Security control implementation", "Incident investigation", "Vulnerability assessment", "DoD Information Security", "Cybersecurity compliance", "DoD 8570.01-M IAM Level II or III", "CISSP" ], "skillCount" : 34, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 817.4048, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.98 }, { "id" : "6a305182f292fd229cf0181f", "title" : "Senior Manager, Information Security", "company" : "Stanley 1913", "salary" : { "min" : 150000.0, "max" : 170000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, United States", "locations" : [ "Seattle", "Washington", "United States" ], "timestamp" : "2026-06-16T08:55:12.146", "fingerprint" : "416c22c3585eafa5ab1c1c6432458aa19d722f28e0521a05199e58841e2d6d0a", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/stanley1913-us/jobs/5213919008", "externalId" : "5213919008", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "rawDescription" : "About us: Stanley 1913 - Built for Life® since 1913. The Stanley 1913 brand has fueled the human experience since the iconic Stanley vacuum bottle revolutionized the way people enjoyed food and beverage. Today, our colorful and thoughtfully designed products including the popular Quencher™ series go beyond function, elevating everyday moments with style and empowering active lifestyles. We’re a community of creators, builders, and inventors who believe in creating sustainable products for a better life and world that minimizes our impact on the planet. Learn more at www.stanley1913.com.  Position Overview We are seeking a highly accomplished and strategic Senior Manager, Information Security to join our team in Seattle, WA. In this leadership role, you will drive the vision, development, and execution of enterprise-grade security programs supporting the Stanley 1913 brand, in alignment with the broader HAVI Enterprise Security strategy. You will play a critical role in scaling and maturing Stanley 1913’s security capabilities to protect consumers, partners, and business operations during a period of accelerated growth. As a senior leader, you will influence organizational strategy, guide cross-functional decision-making, and ensure that security is embedded as a core component of business innovation and digital transformation. ***Seattle location strongly preferred*** What You Will Do Lead the development and ongoing improvement of an information security strategy. This strategy protects Stanley 1913’s digital ecosystem and aligns with security priorities across HAVI and Morgan Street. Serve as a trusted advisor to executive leadership, providing expert guidance on cybersecurity risks, emerging threats, and strategic investments to strengthen organizational resilience. Drive the development and operationalization of enterprise risk management frameworks, including identifying, assessing, and mitigating cybersecurity risks across a complex setting that prioritizes customer experience. Establish and oversee robust security monitoring, detection, and response capabilities, ensuring integration into business operations and alignment with industry-leading practices. Direct incident response and crisis management efforts, including leading major incident investigations, enhancing response plans, and incorporating lessons learned into improved controls and processes. Build, lead, and develop a high-performing cybersecurity team, fostering a culture of accountability, continuous learning, and technical excellence. Partner with cross-functional leaders (IT, Product, Legal, Compliance, and Operations) to embed security into business processes, product development, and customer experiences. Champion security awareness and culture across the organization, driving training initiatives, executive reporting, and enterprise-wide engagement. Stay ahead of the evolving threat landscape, regulatory requirements, and industry guidelines, proactively adapting strategies to maintain a strong security posture. Who You Are Bachelor’s degree in Information Security, Computer Science, or a related field, with equivalent experience also considered; advanced degree (MBA or Master’s in Cybersecurity) strongly preferred. 10+ years of progressive experience in information technology, with 7+ years in information security, cybersecurity, risk management, or compliance leadership roles. Proven track record of designing and leading enterprise-scale security programs within complex, high-growth, or consumer-focused organizations. Deep expertise in security frameworks (e.g., NIST, ISO 27001), regulatory requirements, and risk management methodologies. Strong leadership experience with demonstrated ability to build, mentor, and retain high-performing teams while driving measurable outcomes. Advanced understanding of security architecture, threat detection/response, cloud security, and modern cybersecurity technologies. Certifications such as CISSP, CISM, CISA, or equivalent strongly preferred. Outstanding communication and executive presence, with the ability to influence senior collaborators and translate technical risks into business impact. #LI-Hybrid Stanley 1913 is committed to a diverse and inclusive work environment. Stanley 1913 is an equal opportunity employer and does not discriminate based on race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please reach out to recruiting@stanley1913.com. Stanley 1913 is a total rewards company, which includes rewards beyond base salary. At Stanley 1913, full-time employees are eligible for an annual bonus, based on company and individual results. In addition, we offer a variety of employee benefits, personalized time off, 14-Paid holidays, dental, vision, 401(k), and much more. The base pay range for this position is for a successful candidate within the state listed. The successful candidate’s actual pay will be based on multiple factors such as work location, job-related knowledge, skills, qualifications, and experience. Salary Range $150,000—$170,000 USD About our parent company: Morgan Street Holdings The Stanley 1913 brand is owned by Morgan Street Holdings (formerly HAVI), a privately held enterprise with a diverse portfolio of operating companies, including HAVI Supply Chain, tms, and Continental. Morgan Street Holdings’ portfolio provides best-in-class sourcing and supply chain capabilities, brand-defining marketing and promotion services, innovative consumer products, and dining and refreshment food solutions. Morgan Street Holdings employs over 10,000 people and serves 300+ customers across the globe.  Morgan Street Holdings supports the Stanley 1913 brand with competitive pay and benefits, along with exposure to diverse industries and professional networking and development opportunities.  ", "summaryDescription" : "Senior Manager, Information Security at Stanley 1913", "postedDate" : "2026-06-15T23:19:17.324", "createdAt" : "2026-06-15T23:19:17.324", "lastUpdated" : "2026-06-16T08:55:12.146", "ingestTimestamp" : "2026-06-15T23:19:17.324", "mongoId" : "6a305182f292fd229cf0181f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 150000, "salaryAnnualMax" : 170000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "_score" : 812.79065, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Retail", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca53574d8ee00a09b52b5", "title" : "Agency Chief Information Security Officer", "company" : "GovTech", "industry" : "Government", "salary" : { "min" : 220000.0, "max" : 350000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an executive-level Agency Chief Information Security Officer in Singapore, adjusted for the government industry." }, "location" : "Cybersecurity", "locations" : [ "Cybersecurity" ], "certifications" : [ "CISSP", "CISM", "CCSP", "GCIH" ], "timestamp" : "2026-06-15T07:39:41.476", "fingerprint" : "2a08a63e3169fabc9c30dee6942eb5b9b48e68aee8965e6407ffb8276b383d1d", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://jobs.careers.gov.sg/jobs/greenhouse/4004028201?gh_jid=4004028201", "externalId" : "4004028201", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "technicalSkills" : "AWS, Azure, GCP, IaaS, PaaS, SaaS, Serverless, Containers, Microservices, Infrastructure as Code, CI/CD", "professionalSkills" : [ "Risk management", "Threat assessment", "Security architecture", "Incident response", "Security testing", "Risk mitigation", "Risk monitoring", "Risk reporting", "ICT asset oversight", "Security posture governance", "Security operations oversight", "Security awareness training", "Digital resilience", "Business requirements alignment", "WOG-wide advisories", "WOG-wide practices" ], "hardSkillsList" : [ "Threat-based risk assessments", "Incident response plan", "Security incident management", "ICT security incidents", "Cybersecurity awareness", "Cybersecurity training" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Threat-based risk assessments", "level" : "intermediate" }, { "name" : "Incident response plan", "level" : "intermediate" }, { "name" : "Security incident management", "level" : "intermediate" }, { "name" : "ICT security incidents", "level" : "intermediate" }, { "name" : "Cybersecurity awareness", "level" : "intermediate" }, { "name" : "Cybersecurity training", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Information security management, Cybersecurity governance, Cloud security, Risk management", "majorSkillsList" : [ "Information security management", "Cybersecurity governance", "Cloud security", "Risk management" ], "coreResponsibilities" : "Lead cybersecurity function, Support digital transformation, Ensure digital resilience, Formulate cybersecurity strategies, Implement cybersecurity strategies, Formulate policies, Implement policies, Formulate work plans, Implement work plans, Align with business goals, Enhance risk management, Conduct risk assessments, Mitigate risks, Monitor risks, Report risks, Consult on risk management, Endorse risk mitigation plans, Govern security posture, Enhance security posture, Maintain ICT asset visibility, Maintain ICT asset oversight, Maintain security architecture visibility, Maintain security architecture oversight, Maintain cybersecurity operations visibility, Maintain cybersecurity operations oversight, Develop incident response plan, Maintain incident response plan, Develop incident response playbooks, Maintain incident response playbooks, Plan security exercises, Design security exercises, Conduct security exercises, Lead incident investigation, Manage ICT security incidents, Provide advisory on technologies, Recommend cybersecurity technologies, Ensure secure by design development, Ensure security control compliance, Develop cybersecurity awareness programmes, Maintain cybersecurity awareness programmes, Develop cybersecurity training programmes, Maintain cybersecurity training programmes", "teamCollaboration" : "Collaborate with stakeholders; Collaborate with agency management; Collaborate with agency project teams; Collaborate with outsourced vendors; Work with multi-functional teams; Work with multi-disciplined teams", "projectManagementSkills" : [ "Risk management" ], "domainKnowledge" : "Cybersecurity Governance frameworks; Security Operations; Incident Response; Architecture design; Threat risk assessment; On-premises infrastructure security; Cloud security architectures; Native security features; Identity management systems; Security control implementations; Cloud service models; Cloud-native architectures; On-premises cybersecurity risks; Cloud-specific cybersecurity risks; Insider threats; Vendor risks; Data leakage; Malwares; Ransomware; Account hijacking; Compliance risks; Data security issues; Emerging threats; Emerging technologies; Compliance requirements", "domainList" : [ "cybersecurity-governance-frameworks", "security-operations", "incident-response", "architecture-design", "threat-risk-assessment", "on-premises-infrastructure-security", "cloud-security-architectures", "native-security-features", "identity-management-systems", "security-control-implementations", "cloud-service-models", "cloud-native-architectures", "on-premises-cybersecurity-risks", "cloud-specific-cybersecurity-risks", "insider-threats", "vendor-risks", "data-leakage", "malwares", "ransomware", "account-hijacking", "compliance-risks", "data-security-issues", "emerging-threats", "emerging-technologies", "compliance-requirements" ], "domainSpecificKnowledge" : [ "Cybersecurity Governance frameworks", "Security Operations", "Incident Response", "Architecture design", "Threat risk assessment", "On-premises infrastructure security", "Cloud security architectures", "Native security features", "Identity management systems", "Security control implementations", "Cloud service models", "Cloud-native architectures", "On-premises cybersecurity risks", "Cloud-specific cybersecurity risks", "Insider threats", "Vendor risks", "Data leakage", "Malwares", "Ransomware", "Account hijacking", "Compliance risks", "Data security issues", "Emerging threats", "Emerging technologies", "Compliance requirements" ], "communicationSkills" : "Communicate cyber security topics", "problemSolvingSkills" : "Risk assessment; Threat assessment; Root cause analysis", "specialRequirements" : "Singaporeans only", "qualificationsBasic" : "Degree in Computer Science, 8-10 years management experience, Solid grasp of ICT operations, Solid grasp of security policies, Solid grasp of business processes, Knowledge of security by design, Experience in security by design, Review of system architecture, DevSecOps practices, Infrastructure as Code tools, Securing CI/CD pipelines, Understanding cloud service models, Understanding core cloud services, Understanding modern cloud-native architectures, Identify cybersecurity risks, Assess risk impact, Assess risk likelihood, Evaluate existing controls, Recommend mitigation strategies, Understanding emerging threats, Understanding emerging technologies, Translate risk into business impact, Understanding compliance requirements, Identify potential violations, Communicate cyber security topics, CISSP certification", "qualificationsPreferred" : "Other related certifications, CISM certification, CCSP certification, GCIH certification", "rawDescription" : "GovTech supports various Government Agencies in carrying out ICT delivery services and appoints Agency Chief Information Security Officers (ACISO) to oversee information security management within these agencies. The ACISO is a leadership role that requires technical proficiency demonstrated in multiple cybersecurity domains. The role demands knowledge and/or practical experience in most of the domains below: Cybersecurity Governance frameworks, Security Operations including incident response, Architecture design and threat risk assessment, Security Testing. The ACISO must possess technical understanding of both on-premises infrastructure security and cloud security architectures across major platforms (e.g., AWS, Azure, and GCP), including their native security features, identity management systems, and security control implementations. [What you will be working on] Emplaced in public agencies and reporting to the agency’s Chief Information Officer (CIO) and Ministry Family CISO, you will collaborate with various stakeholders (GovTech HQ teams, Agency management, Agency project teams, and outsourced vendors) and will be responsible to: Lead the agency-level cybersecurity function in supporting agency digital transformation initiatives whilst ensuring digital resilience of agency systems. Formulate and implement agency cybersecurity strategies, policies and work plans, ensuring continuous alignment with Ministry Family's business strategic goals Review and enhance risk management through threat-based risk assessments, risk mitigations, risk monitoring and reporting. Provide consultation and endorse risk management and mitigation plans from agency’s project teams. Govern and enhance the agency's security posture by maintaining visibility and oversight of ICT assets, security architectures, and cybersecurity operations code of practices. Develop and maintain incident response plan and playbooks. This involves planning, designing and conduct of security incident response workshops and exercises (table-top exercises, simulation and drills) as well as lead the investigation and management of ICT security incidents. Provide advisory and recommendations on appropriate cybersecurity technologies to be deployed that meets agency’s business requirements and aligned with WOG-wide advisories and practices. Ensure secure by design ICT product development, and that security controls implementations comply with the defined security policies, standards and guidelines. Develop and maintain effective cybersecurity awareness and training programmes [What we are looking for] Degree in Computer Science, Information Systems, Engineering or related Technology field At least 8-10 years of management experience related to information security and solid grasp of ICT operations, security policies, business processes and the relationship between them. Ability to work with multi-functional, multi-disciplined teams to formulate, institute real time awareness of security posture and baseline among end users. Good interpersonal and partner/executive leadership skills. Demonstrate knowledge and experience in security by design implementations, review of system architecture, devsecops practices, Infrastructure as Code (IaC) tools and securing CI/CD pipelines  Demonstrate understanding of cloud service models (IaaS, PaaS, SaaS), coupled with a strong understanding of core cloud services and modern cloud-native architectures (serverless, containers, microservices) Identify on-premises and cloud-specific cybersecurity risks and threats, demonstrating skills to thoroughly assess their impact and likelihood. This assessment encompasses, but is not limited to, secure configurations, insider threats, vendor risks, data leakage, malwares including ransomware, account hijacking, and compliance risks. Evaluate the effectiveness of existing controls and recommending appropriate mitigation strategies for on-premises and cloud-related cybersecurity and data security issues. Display understanding of emerging threats and technologies, and the ability to translate risk into business impact Strong understanding of compliance requirements and the ability to identify potential violations in on-premises or cloud environments. Able to communicate cyber security topics effectively to senior stakeholders. Minimally possess CISSP certification, preferably with other related certifications, e. g. CISM, CCSP, GCIH that demonstrates continuous learning and knowledge of industry best practices. We believe in being Agile, Bold and Collaborative, and are looking for people who identify with these values. Singaporeans only.", "summaryDescription" : "Agency Chief Information Security Officer at GovTech. Skills: Information security management, Cybersecurity governance, Cloud security, Risk management. Lead cybersecurity function. Support digital transformation", "postedDate" : "2026-06-13T21:11:53.335", "createdAt" : "2026-06-13T21:11:53.335", "lastUpdated" : "2026-06-15T07:39:41.476", "ingestTimestamp" : "2026-06-13T21:11:53.335", "mongoId" : "6a2ca53574d8ee00a09b52b5", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Threat-based risk assessments", "Incident response plan", "Security incident management", "ICT security incidents", "Cybersecurity awareness", "Cybersecurity training", "Leadership", "Information security management", "Cybersecurity governance", "Cloud security", "Risk management", "Threat assessment", "Security architecture", "Incident response", "Security testing", "Risk mitigation", "Risk monitoring", "Risk reporting", "ICT asset oversight", "Security posture governance", "Security operations oversight", "Security awareness training", "Digital resilience", "Business requirements alignment", "WOG-wide advisories", "WOG-wide practices", "Cybersecurity Governance frameworks", "Security Operations", "Incident Response", "Architecture design", "Threat risk assessment", "On-premises infrastructure security", "Cloud security architectures", "Native security features", "Identity management systems", "Security control implementations", "Cloud service models", "Cloud-native architectures", "On-premises cybersecurity risks", "Cloud-specific cybersecurity risks", "Insider threats", "Vendor risks", "Data leakage", "Malwares", "Ransomware", "Account hijacking", "Compliance risks", "Data security issues", "Emerging threats", "Emerging technologies", "Compliance requirements", "CISSP", "CISM", "CCSP", "GCIH" ], "skillCount" : 55, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Executive", "dataQualityScore" : 0.7777778, "_score" : 804.09784, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca18874d8ee00a09a5cad", "title" : "Cybersecurity / Network Analyst", "company" : "Nexxis Solutions", "location" : "Annapolis Junction, MD", "locations" : [ "Annapolis Junction", "MD" ], "timestamp" : "2026-06-15T06:47:27.981", "fingerprint" : "a7421207a5114f60aec4e848fe483d001ef28985bdadeb0329993cdefb6e9855", "source" : "breezyhr", "applyUrl" : "https://nexxis-solutions.breezy.hr/p/a6d7fe471958-cybersecurity-network-analyst-general-application-clearance-required", "externalId" : "a6d7fe471958", "industryFunction" : { }, "structuredLocations" : [ { "city" : "annapolis", "state" : "maryland", "country" : "United States", "continent" : "north america", "source" : "locations-index", "geo" : "38.97859,-76.49184" } ], "locationText" : "Annapolis Junction, MD", "employmentType" : "FULL_TIME", "technicalSkills" : "Cybersecurity, Data analysis, Network analysis", "hardSkillsList" : [ "Clearance Required" ], "hardSkills" : [ { "name" : "Clearance Required", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity, Network Analysis, Vulnerability Analysis", "majorSkillsList" : [ "Cybersecurity, Network Analysis, Vulnerability Analysis" ], "coreResponsibilities" : "Provide cybersecurity, data and network analysis expertise to mission.", "specialRequirements" : "Clearance Required", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Nexxis Solutions is supporting current and near-term efforts to provide cybersecurity, data and network analysis expertise to mission. We are currently looking for cleared professionals in the following areas: Network Analysts (Cyber, Forensic, Signals, Exploitation etc) Vulnerability Analysts Da", "summaryDescription" : "Cybersecurity / Network Analyst at Nexxis Solutions. Skills: Cybersecurity, Network Analysis, Vulnerability Analysis. Provide cybersecurity, data and network analysis expertise to mission.", "createdAt" : "2026-06-14T18:55:45.224", "lastUpdated" : "2026-06-15T06:47:27.981", "ingestTimestamp" : "2026-06-14T18:55:45.224", "mongoId" : "6a2ca18874d8ee00a09a5cad", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "hasSalary" : false, "allSkills" : [ "Clearance Required", "Cybersecurity, Network Analysis, Vulnerability Analysis" ], "skillCount" : 2, "jobCategory" : "engineering", "jobSubcategory" : "infrastructure", "seniorityLevel" : "Mid", "dataQualityScore" : 0.6666667, "_score" : 799.7847, "hasLocation" : true, "hasGeo" : true, "llmIndustryConfidence" : 0.0 }, { "id" : "6a2c6ac174d8ee00a090db72", "title" : "IT Internal Audit Manager", "company" : "Atlas Air Worldwide", "industry" : "Logistics", "salary" : { "min" : 113000.0, "max" : 152000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "White Plains, NY, USA", "locations" : [ "White Plains", "NY", "USA" ], "certifications" : [ "CISA", "CISM", "CISSP", "CPA", "MBA" ], "timestamp" : "2026-06-15T03:35:07.816", "fingerprint" : "1dfc572f414cf63216572616c4f4013cd31a7a34e08a4ddacafbb30de0fb5238", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.atlasairworldwide.com/careers/job-board/?gh_jid=4237288009", "externalId" : "4237288009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "White Plains", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "41.0339862,-73.7629097" } ], "locationText" : "White Plains, New York, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "Cloud computing, Cybersecurity, Data analytics", "professionalSkills" : [ "Risk assessment", "Control design", "Process execution", "Business judgment", "Strategic thinking" ], "hardSkillsList" : [ "IT General Controls", "Financial reporting controls", "System development standards", "Disaster recovery", "Network reviews" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "IT General Controls", "level" : "intermediate" }, { "name" : "Financial reporting controls", "level" : "intermediate" }, { "name" : "System development standards", "level" : "intermediate" }, { "name" : "Disaster recovery", "level" : "intermediate" }, { "name" : "Network reviews", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "IT audit, Cybersecurity, SOX compliance", "majorSkillsList" : [ "IT audit", "Cybersecurity", "SOX compliance" ], "coreResponsibilities" : "Lead IT audits, Execute IT audits, Perform system reviews, Review system access security, Review program change management, Review backup and disaster recovery, Perform cybersecurity assessments, Assess vendor IT resiliency, Review patch management, Perform cloud security assessments, Perform network reviews, Identify improvement areas, Facilitate remediation efforts, Monitor remediation progress, Guide data analytical techniques, Encourage data analytics sharing, Provide briefs to management, Lead discussions with management, Prepare audit report drafts, Coordinate agreement on issues, Oversee policies and procedures manual, Ensure IIA compliance, Enhance department brand, Communicate audit risks, Develop risk-based audit plan, Lead annual IT risk assessment, Rank IT environment, Collect audit committee materials, Supervise audit staff, Assist audit staff development, Support multiple projects, Manage project timelines, Deliver high-quality work, Perform internal controls compliance, Document policies and procedures, Lead testing strategies, Assess operating effectiveness, Identify areas for improvement, Agree upon corrective actions, Facilitate remediation", "teamCollaboration" : "Work with Business Unit leadership; Work with Internal Audit teams; Share data analytics best practices; Interact with senior management; Coordinate with audit committee; Develop audit staff; Work with management", "projectManagementSkills" : [ "Project management", "Manage timelines", "Hold accountable to deadlines" ], "domainKnowledge" : "COBIT framework; NIST framework; SOX compliance; COSO framework; IT General Controls; Cloud security; Cybersecurity; Third-party risk", "domainList" : [ "cobit-framework", "nist-framework", "sox-compliance", "coso-framework", "it-general-controls", "cloud-security", "cybersecurity", "third-party-risk" ], "domainSpecificKnowledge" : [ "COBIT framework", "NIST framework", "SOX compliance", "COSO framework", "IT General Controls", "Cloud security", "Cybersecurity", "Third-party risk" ], "toolProficiency" : [ "MS Word", "MS PowerPoint", "MS Excel", "Tableau", "PowerBI", "Python" ], "communicationSkills" : "Executive presentations; Audit reports", "problemSolvingSkills" : "Risk management; Internal control; Governance processes", "qualificationsBasic" : "5+ years IT audit experience, Bachelor's degree", "qualificationsPreferred" : "CISA certification preferred, CISM certification preferred, CISSP certification preferred, CPA preferred, MBA preferred", "workSiteFlexibility" : "Onsite", "rawDescription" : "Join Atlas Air Worldwide. Move the World with Us! At Atlas Air Worldwide, we’re not just an airline, we’re a global engine powering cargo, passenger, and leasing operations across more than 70 countries. As a leader in outsourced aviation logistics, we’re built on a foundation of safety, service excellence, integrity, innovation, teamwork, and responsibility. With over 30 years of history, a modern all-Boeing fleet, and nearly 5,000 teammates collaborating across operations, technical, and corporate functions, we’re driven by purpose. If you're ready to grow, innovate, and help us deliver excellence every single day, you belong here. Position Summary: The position will be responsible for leading, managing and executing Information Technology (“IT”) audits of critical systems, infrastructure, and emerging technology domains, including cloud computing, cybersecurity, and third-party risk in compliance with Company policies, the Internal Audit Charter and the IIA’s International Professional Practices Framework. The position will be responsible for the planning, execution and reporting of risk-based audits and internal controls compliance. The position reports directly to the Staff Vice President, Internal Audit and indirectly to the Senior Audit Manager. Values and Behavioral Standards: To ensure the effective communication and application of company values and behavioral standards, as stated in our company “Code of Conduct” policy, and to respond appropriately in the event of any known departure. Major Job Accountabilities: INTERNAL AUDIT Lead the execution of IT and operational internal audit activities including risk assessments, scoping, planning, fieldwork, testing, and reporting. Perform reviews associated with system development standards, operating procedures, system access security, program change management, backup and disaster recovery, cybersecurity assessment, vendor IT resiliency, patch management, cloud security assessment, network reviews, etc. Constructively work with Business Unit leadership and Internal Audit teams to identify improvement areas, agree upon appropriate corrective actions, facilitate remediation efforts, and monitor progress to ensure that the Company is responding timely to address deficiencies that jeopardize the achievement of its objectives. Guide the development and implementation of data analytical audit techniques. Encourage the sharing of data analytics best practices throughout the organization and its various locations. Provide briefs to, and lead discussion with, local management on all audit issues during the closing meeting. Prepare an audit report draft to share with local management. Work with local management to coordinate agreement on all reportable issues, action plans and timing of remediation. Oversee the maintenance of a comprehensive departmental policies and procedures manual while ensuring ongoing compliance with the IIA’s International Professional Practices Framework. Work with Internal Audit management to develop, sustain, and continuously enhance the brand and perceived value of the Department within the Company. Interact with senior levels of management (CIO, CFO, Controller, etc.) to communicate audit risks, issues and related corrective actions. Assist in the development and lead the execution of a comprehensive risk-based audit plan that evaluates the Company’s risk management, internal control, and governance processes. Lead the annual IT risk assessment and ranking of the information technology environment. Assist the Staff Vice President, Internal Audit with the collection and coordination of information and materials for presentation to the audit committee. Supervise and assist in the development of other members of the internal audit group. Support multiple projects simultaneously and effectively manage timelines to deliver high-quality work products efficiently and effectively with limited supervision. Exhibit strong project management skills with the ability to hold self and others accountable to deadlines. INTERNAL CONTROLS OVER FINANCIAL REPORTING/SARBANES-OXLEY COMPLIANCE Perform activities related to internal controls compliance including risk assessment, control design and test of operating effectiveness of IT General Controls and other controls over financial reporting. Lead effort to assist key executives in documenting both existing and newly created policies and procedures using established Company standards. Lead the execution of appropriate testing strategies and plans to enable management to assess the operating effectiveness of IT general and other controls over financial reporting. Constructively work with management to identify areas for improvement, collectively agree upon appropriate corrective actions, facilitate remediation efforts, and monitor progress to ensure that the Company is timely addressing and remediating significant deficiencies and/or material weaknesses. Ensure effective coordination with the external auditors to ensure they can place optimal reliance on Internal Audit’s IT compliance-related work and facilitate the sharing of process and testing documentation. Ensure the seamless integration of the efforts of internal audit and internal control compliance activities to maximize the resources of the Departmental team. Qualifications: Bachelor’s degree in Computer Science, Information Systems or Accounting. CISA, CISSP, CIA or CPA required. 5+ years’ experience auditing information systems including planning, execution and documentation IT Risk management and project management experience. Higher level knowledge of IT security and application development. Strong expertise in one or more of the following areas of technology: Infrastructure (e. g. servers, storage, O/S), Network, Information Security, Third-Party IT Risk Management, Application/Database Architecture, Cloud Technology (e.g., AWS, Azure) Experience reviewing System and Organization Controls (SOC) Reports. Experience building data analytic procedures and implementing routines on audits. Excellent oral and written communication and presentation skills, strong analytical skills, ability to maintain composure under pressure, and a proactive approach to problem-solving and the overall execution of job responsibilities are all essential qualities necessary to be successful in this position. Strong familiarity with Control Objectives for Information and Related Technology (“COBIT”)/National Institute of Standards and Technology (“NIST”) framework and other professional auditing standards. Demonstrated knowledge of SOX/Internal Controls compliance frameworks (e.g., COSO). Strong organizational and leadership skills with the ability to develop talented individuals. Strong time management skills and strong attention to detail. Ability to inspire a strong spirit of cooperation among the management team and Internal Audit staff while embracing the Department’s philosophy of continuous improvement and disciplined process execution. Ability to provide sound business judgment and strategic thinking to enable the Company to create and sustain a “world class” internal control and risk assurance environment. Skills: Proficiency with MS Word to develop impactful audit reports. Proficiency with MS PowerPoint to create executive-level presentations. Proficiency with advanced MS Excel skills to perform data analysis. Proficiency in data analytical audit techniques (e.g., use of Tableau, PowerBI, Python). Drive adoption of AI/automation in testing by identifying opportunities to leverage analytics, scripts, or AI-based tools to streamline control testing, risk assessments, and documentation. Other Requirements: Ability to travel approximately 5 – 10% is required. Ability to work overtime as required. #GH19 #LI-Hybrid #LI-20 The Company is an Equal Opportunity Employer. It is our policy to afford equal employment opportunity to all employees and applicants for employment without regard to race, color, religion, sex, sexual orientation, national origin, citizenship, place of birth, age, disability, protected veteran status, gender identity or any other characteristic or status protected by applicable in accordance with federal, state and local laws. If you'd like more information about your EEO rights as an applicant under the law, please download the available EEO is the Law document by clicking \"EEO Is The Law\" . To view our Pay Transparency Statement, please click here: Pay Transparency Statement Competitive compensation will be offered based on a variety of factors, including a candidate's experience, skills, education, geographic location, internal equity and other factors. In addition, a range of benefits to include medical, dental and vision insurance, employee assistance program, as well as generous paid time off, and 401K contributions are offered as a part of the total compensation package. Pay Range $113,000—$152,000 USD At Atlas Air Worldwide, we believe in the power of people, the promise of innovation, and the responsibility we hold to each other, to our customers, and to the planet. Join us and be part of a team that lifts more than cargo; we lift ambition.", "summaryDescription" : "IT Internal Audit Manager at Atlas Air Worldwide. Skills: IT audit, Cybersecurity, SOX compliance. Lead IT audits. Execute IT audits", "postedDate" : "2026-06-14T02:54:52.699", "createdAt" : "2026-06-14T02:54:52.699", "lastUpdated" : "2026-06-15T03:35:07.816", "ingestTimestamp" : "2026-06-14T02:54:52.699", "mongoId" : "6a2c6ac174d8ee00a090db72", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 113000, "salaryAnnualMax" : 152000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "IT General Controls", "Financial reporting controls", "System development standards", "Disaster recovery", "Network reviews", "Leadership", "Mentoring", "IT audit", "Cybersecurity", "SOX compliance", "Risk assessment", "Control design", "Process execution", "Business judgment", "Strategic thinking", "Project management", "Manage timelines", "Hold accountable to deadlines", "COBIT framework", "NIST framework", "COSO framework", "Cloud security", "Third-party risk", "CISA", "CISM", "CISSP", "CPA", "MBA", "MS Word", "MS PowerPoint", "MS Excel", "Tableau", "PowerBI", "Python" ], "skillCount" : 34, "jobCategory" : "finance", "jobSubcategory" : "accounting", "seniorityLevel" : "Manager", "dataQualityScore" : 1.0, "_score" : 795.8867, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Logistics", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305872f292fd229cf42242", "title" : "Senior Information Security Engineer", "company" : "Strategic Systems International", "industry" : "Cybersecurity", "salary" : { "min" : 5000000.0, "max" : 9000000.0, "currency" : "PKR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Information Security Engineer in Lahore, Pakistan, adjusted for industry and seniority." }, "location" : "Lahore, PK", "locations" : [ "Lahore", "PK" ], "timestamp" : "2026-06-16T06:35:29.089", "fingerprint" : "cdc4bcd74d0e4b5b9b6029cbbb17999f968831330916b0fa1eb6190378c8f110", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://strategic-systems-international.breezy.hr/p/13df0023754f-senior-information-security-engineer", "externalId" : "13df0023754f", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Lahore", "country" : "Pakistan", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "31.5656822,74.3141829" } ], "locationText" : "Lahore, Pakistan", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "rawDescription" : "Senior Information Security Engineer Overview We are seeking a highly motivated Senior Information Security Engineer to support and strengthen our organization", "summaryDescription" : "Senior Information Security Engineer at Strategic Systems International", "createdAt" : "2026-06-15T22:11:59.035", "lastUpdated" : "2026-06-16T06:35:29.089", "ingestTimestamp" : "2026-06-15T22:11:59.035", "mongoId" : "6a305872f292fd229cf42242", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 795.6328, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c6af174d8ee00a090f56a", "title" : "Senior Compliance Audit Manager", "company" : "Bybit", "industry" : "FinTech", "salary" : { "min" : 350000.0, "max" : 550000.0, "currency" : "AED", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Compliance Audit Manager in Abu Dhabi, UAE, adjusted for FinTech industry and senior experience level." }, "location" : "Abu Dhabi", "locations" : [ "Abu Dhabi" ], "timestamp" : "2026-06-15T22:21:01.716", "fingerprint" : "4b165ea9a781a9c9f96e7329dd4a5b35c11f96e37ad44693c829e3a759b95649", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/bybit/jobs/4867388101", "externalId" : "4867388101", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Abu Dhabi", "country" : "United Arab Emirates", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "24.4538352,54.3774014" }, { "country" : "Malaysia", "continent" : "as", "workMode" : "onsite" } ], "locationText" : "Abu Dhabi, United Arab Emirates; Malaysia", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "coreResponsibilities" : "Support delivery of internal audit coverage, Plan risk-based audits, Execute risk-based audits, Evaluate effectiveness of controls, Contribute to enhancement of compliance framework, Provide high-quality audit execution, Provide data-driven insights, Provide practical recommendations", "teamCollaboration" : "Works closely with Compliance Audit Director; Works closely with broader Internal Audit team", "domainKnowledge" : "Regulatory compliance", "domainList" : [ "regulatory-compliance" ], "domainSpecificKnowledge" : [ "Regulatory compliance" ], "continuousLearning" : "Study Growth Fund", "qualificationsBasic" : "5+ years experience", "qualificationsPreferred" : "Chinese language skills are a plus", "rawDescription" : "About Us Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance. Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution. Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services. Job Summary We are looking for a highly capable Senior Compliance Audit Manager to support the delivery of internal audit coverage over regulatory compliance topics across Bybit Group. The role will assist in planning and executing risk-based audits, evaluating the effectiveness of controls, and contributing to the enhancement of Bybit’s compliance framework across multiple jurisdictions. This position works closely with the Compliance Audit Director and broader Internal Audit team, providing high-quality audit execution, data-driven insights, and practical recommendations to strengthen governance and controls. Responsibilities Audit Planning Chinese language skills are a plus. Location: Preferably based in Abu Dhabi or Malaysia. Why Join Us At Bybit, we are committed to fostering a supportive and enriching work environment. Our benefits include: - Study Growth Fund: We support your professional development and continuous learning. - Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation. - Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world. - Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company. - Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.", "summaryDescription" : "Senior Compliance Audit Manager at Bybit. Support delivery of internal audit coverage. Plan risk-based audits", "postedDate" : "2026-06-14T19:57:33.802", "createdAt" : "2026-06-14T19:57:33.802", "lastUpdated" : "2026-06-15T22:21:01.716", "ingestTimestamp" : "2026-06-14T19:57:33.802", "mongoId" : "6a2c6af174d8ee00a090f56a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Regulatory compliance" ], "skillCount" : 1, "jobCategory" : "finance", "jobSubcategory" : "accounting", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 791.72266, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2eb32774d8ee00a0e7dca3", "title" : "Information Security Senior Analyst", "company" : "Citi", "industry" : "Banking", "salary" : { "min" : 96400.0, "max" : 144600.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "United States of America", "locations" : [ "United States of America" ], "timestamp" : "2026-06-16T07:32:43.395", "fingerprint" : "6605fbb3653d833d999b710a4de83943a23ec8e6fb9ea1c60bfb28294f2c79b3", "source" : "workday", "language" : "en", "applyUrl" : "https://citi.wd5.myworkdayjobs.com/2/job/Irving-Texas-United-States/Information-Security-Senior-Analyst_26969766-1", "externalId" : "26969766", "industryFunction" : { }, "locationPoint" : "51.43667,5.97917", "structuredLocations" : [ { "city" : "Irving", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "32.8295183,-96.9442177" } ], "locationText" : "Irving, Texas, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "rawDescription" : "Citi, a leading global bank with approximately 200 million customer accounts in over 160 countries, provides a broad range of financial products and services to consumers, corporations, governments, and institutions. The bank's Enterprise Operations & Technology division underpins these offerings, delivering secure, reliable, and efficient technology solutions that are foundational to managing global resources, ensuring safety, and providing a first-class customer experience. This reflects Citi's mission to create economic value that is systemically responsible and in its clients’ best interests. Fostering a culture of diversity and inclusion, Citi is committed to a workforce that represents the clients it serves. The company values respect, promotes individuals based on merit, and ensures opportunities for personal development are widely available. Ideal candidates are passionate, innovative problem-solvers who contribute to a culture of delivering results with pride and are empowered to enable growth and progress together with the firm. The **Information Security Senior** **Analyst** on Citi’s Social Engineering Attack Response team supports Email Security and Brand Protection functions as an intermediate-level cyber analyst responsible for supporting efforts to prevent, monitor, and respond to social engineering threats. This role is pivotal in protecting the firm, its clients, and its assets from brand and email-related threats. The **Senior Analyst** will provide operational support, intelligence gathering, analysis, report development, and project management for the firm's email security and brand protection functions. The position requires substantial collaboration with other members of the team and across various Cyber and Information Security teams to ensure that appropriate security solutions are enhanced, implemented, and triaged effectively. _**Job Responsibilities:**_ **Threat Monitoring & Research:** * Actively monitor and research cyber threats, including phishing, that have a direct or indirect impact or threat on Citi, its workforce, or the Citi brand. Monitor a wide range of digital channels, including e-commerce platforms, social media, and app stores, for brand abuse. **Incident Management & Takedown:** * Develop and manage processes to track identified incidents to resolution. * Initiate and manage takedown requests on various platforms for phishing sites and brand impersonation cases. **Analysis, Reporting & Metrics:** * Analyze email threats and manage associated controls. * Identify automation opportunities for repetitive triage, enrichment, and documentation tasks. Use approved AI/LLM tools to assist with alert summarization, IOC extraction, and case narrative drafting while critically validating all outputs for accuracy, bias, and trustworthiness prior to operational use. * Develop and manage weekly, monthly, quarterly, and annual metrics and reports on brand protection activities, trends. **Stakeholder Collaboration:** * Triage information received from vendors and process it through defined internal workflows. * Actively engage in liaison activities with internal stakeholders, intelligence communities, industry associations, and peer institutions. * Keep up to date with the ever-changing cybersecurity landscape to remain relevant and knowledgeable. **Risk Management & Compliance:** * Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients, and assets. _**Qualifications**_ **Experience:** * 3+ years of experience in Information Technology, Cybersecurity, brand protection, or fraud prevention. * Demonstrated experience with the tools and resources available to conduct email and threat analysis. **Technical Skills:** * Strong technical and analytical expertise. * Cross-functional understanding of email operations, security practices, and user experience. * Familiarity with OSINT (Open Source Intelligence) techniques. * Demonstrated ability to use approved AI/LLM tools responsibly, including prompt development, critical output validation, and documentation of analyst review in alignment with acceptable-use and governance requirements. **Soft Skills:** * Excellent written and verbal communication and presentation skills. * Strong analytical, investigative, and problem-solving skills. * Ability to organize and prioritize multiple ongoing tasks via efficient time management. Project management skills are a plus. * Ability to work independently as well as in a team to achieve desired results. * Developed communication and diplomacy skills to guide and influence decision-makers. _**Education**_ * Bachelor's degree or equivalent work experience is preferred. A degree in Cybersecurity, IT, or a related field is a plus. * Cyber Certifications are desired, though optional (e.g., CISSP, GSEC, CISA, Security+). This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required. \\------------------------------------------------------ ## **Job Family Group:** Technology \\------------------------------------------------------ ## **Job Family:** Information Security \\------------------------------------------------------ ## **Time Type:** Full time \\------------------------------------------------------ ## **Primary Location:** Irving Texas United States \\------------------------------------------------------ ## **Primary Location Full Time Salary Range:** $96,400.00 - $144,600.00 In addition to salary, Citi’s offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including: medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire. \\------------------------------------------------------ ## **Most Relevant Skills** Please see the requirements listed above. \\------------------------------------------------------ ## **Other Relevant Skills** For complementary skills, please see above and/or contact the recruiter. \\------------------------------------------------------ ## **Anticipated Posting Close Date:** Jun 28, 2026 \\------------------------------------------------------ _Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law._ __ _If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review[Accessibility at Citi](https://www.citigroup.com/citi/accessibility/application-accessibility.htm). View Citi’s [EEO Policy Statement](https://www.citigroup.com/global/eeo-aa-policy) and the [Know Your Rights](https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12ScreenRdr.pdf) poster._", "summaryDescription" : "Information Security Senior Analyst at Citi", "postedDate" : "2026-06-12T21:06:22.835", "createdAt" : "2026-06-14T21:06:22.818", "lastUpdated" : "2026-06-16T07:32:43.395", "ingestTimestamp" : "2026-06-14T21:06:22.818", "mongoId" : "6a2eb32774d8ee00a0e7dca3", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://citi.wd5.myworkdayjobs.com/2/job/Irving-Texas-United-States/Information-Security-Senior-Analyst_26969766-1", "salaryAnnualMin" : 96400, "salaryAnnualMax" : 144600, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "senior", "dataQualityScore" : 0.8888889, "_score" : 785.1265, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Banking", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2aa66d74d8ee00a06b911b", "title" : "Security Compliance Analyst", "company" : "Barbaricum", "industry" : "Government Contracting", "salary" : { "min" : 85000.0, "max" : 115000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Security Compliance Analyst in Doral, United States, adjusted for the government industry." }, "location" : "Doral, Florida, United States", "locations" : [ "Doral", "Florida", "United States" ], "certifications" : [ "CISSP", "CISA", "Security+" ], "timestamp" : "2026-06-13T21:14:26.875", "fingerprint" : "cb3645859726d8205e5953d9e3a0c57ced3960d970bb0241d2cff6d21ef50884", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/barbaricum/jobs/5252304008", "externalId" : "5252304008", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Doral", "state" : "Florida", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "25.8195424,-80.3553302" } ], "locationText" : "Doral, Florida, United States", "minimumEducation" : "Bachelor's", "technicalSkills" : "Cloud security, Cybersecurity", "professionalSkills" : [ "Compliance initiatives", "Security assessments", "Risk assessments", "Vulnerability management", "Compliance documentation" ], "hardSkillsList" : [ "DoD RMF", "Zero Trust principles" ], "hardSkills" : [ { "name" : "DoD RMF", "level" : "intermediate" }, { "name" : "Zero Trust principles", "level" : "intermediate" } ], "majorSkills" : "Security compliance, Cloud security, Cybersecurity requirements", "majorSkillsList" : [ "Security compliance", "Cloud security", "Cybersecurity requirements" ], "coreResponsibilities" : "Assess security controls, Implement security controls, Monitor security controls, Support compliance initiatives, Conduct security assessments, Identify compliance gaps, Identify remediation actions, Develop compliance documentation, Maintain compliance documentation, Support vulnerability management, Support risk assessments, Support continuous monitoring activities, Assist with ATO activities, Assist with audits, Assist with inspections, Assist with compliance reviews, Collaborate with engineers, Collaborate with administrators, Collaborate with cybersecurity teams, Develop compliance reports, Develop risk summaries, Develop recommendations for leadership, Develop recommendations for stakeholders", "teamCollaboration" : "With engineers; With administrators; With cybersecurity teams", "domainKnowledge" : "Federal cybersecurity requirements; DoD cybersecurity requirements; FedRAMP; NIST 800-53 Rev. 5; DoD RMF; Zero Trust principles; Cloud environments; Hybrid environments; Intelligence; Analytics; Data-sharing capabilities", "domainList" : [ "federal-cybersecurity-requirements", "dod-cybersecurity-requirements", "fedramp", "nist-800-53-rev-5", "dod-rmf", "zero-trust-principles", "cloud-environments", "hybrid-environments", "intelligence", "analytics", "data-sharing-capabilities" ], "domainSpecificKnowledge" : [ "Federal cybersecurity requirements", "DoD cybersecurity requirements", "FedRAMP", "NIST 800-53 Rev. 5", "DoD RMF", "Zero Trust principles", "Cloud environments", "Hybrid environments", "Intelligence", "Analytics", "Data-sharing capabilities" ], "toolProficiency" : [ "Microsoft Purview", "AWS Security Hub", "Nessus", "Splunk Enterprise Security" ], "communicationSkills" : "Compliance reports; Risk summaries; Recommendations", "documentationSkills" : "Compliance documentation; SSPs; POA&Ms", "problemSolvingSkills" : "Identify compliance gaps; Identify remediation actions", "qualificationsBasic" : "Bachelor's degree in Cybersecurity, Information Assurance, or related field, Five (5) years of equivalent professional experience, Experience conducting security assessments, Experience supporting cybersecurity compliance programs, Experience with FedRAMP, NIST 800-53 Rev. 5, DoD RMF, Experience with cloud security requirements, Experience developing and maintaining SSPs, Experience developing and maintaining POA&Ms, Experience developing and maintaining compliance documentation, Experience supporting vulnerability remediation, Experience supporting risk management, Experience supporting continuous monitoring activities", "qualificationsPreferred" : "Experience supporting DoD programs, Experience supporting Intelligence Community programs, Experience supporting Federal programs, Experience with AWS cloud environments, Experience with Azure cloud environments, Familiarity with ATO processes, Familiarity with Zero Trust architectures", "rawDescription" : "Barbaricum is a rapidly growing government contractor providing leading-edge support to federal customers, with a particular focus on Defense and National Security mission sets. We leverage more than 17 years of support to stakeholders across the federal government, with established and growing capabilities across Intelligence, Analytics, Engineering, Mission Support, and Communications disciplines. Founded in 2008, our mission is to transform the way our customers approach constantly changing and complex problem sets by bringing to bear the latest in technology and the highest caliber of talent. Headquartered in Washington, DC's historic Dupont Circle neighborhood, Barbaricum also has a corporate presence in Tampa, FL, Bedford, IN, and Dayton, OH, with team members across the United States and around the world. As a leader in our space, we partner with firms in the private sector, academic institutions, and industry associations with a goal of continually building our expertise and capabilities for the benefit of our employees and the customers we support. Through all of this, we have built a vibrant corporate culture diverse in expertise and perspectives with a focus on collaboration and innovation. Our teams are at the frontier of the Nation's most complex and rewarding challenges. Join our team. Join a team supporting U. S. Southern Command's Enhanced Domain Awareness (EDA) initiative, helping secure and sustain cloud-based intelligence, analytics, and data-sharing capabilities. This role focuses on ensuring systems and platforms remain compliant with Federal and DoD cybersecurity requirements while supporting mission-critical operations. Note: This position is contingent upon contract award, expected in the next 30-60 days. What You'll Do Assess, implement, and monitor security controls across cloud and hybrid environments. Support compliance initiatives aligned with FedRAMP, NIST 800-53 Rev. 5, DoD RMF, and Zero Trust principles. Conduct security assessments and identify compliance gaps and remediation actions. Develop and maintain compliance documentation, including SSPs and POA&Ms. Support vulnerability management, risk assessments, and continuous monitoring activities. Assist with ATO activities, audits, inspections, and compliance reviews. Collaborate with engineers, administrators, and cybersecurity teams to ensure secure and compliant operations. Develop compliance reports, risk summaries, and recommendations for leadership and stakeholders. What We Require Bachelor's degree in Cybersecurity, Information Assurance, or a related field, or five (5) years of equivalent professional experience. Experience conducting security assessments and supporting cybersecurity compliance programs. Experience with FedRAMP, NIST 800-53 Rev. 5, DoD RMF, and cloud security requirements. Experience developing and maintaining SSPs, POA&Ms, and other compliance documentation. Experience supporting vulnerability remediation, risk management, and continuous monitoring activities. Experience with Microsoft Purview, AWS Security Hub, Nessus, Splunk Enterprise Security, or similar security and compliance tools. What We Value Experience supporting DoD, Intelligence Community, or Federal programs. Experience with AWS and Azure cloud environments. Familiarity with ATO processes and Zero Trust architectures. Certifications such as CISSP, CISA, Security+, or other cybersecurity credentials. EEO Commitment All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law.", "summaryDescription" : "Security Compliance Analyst at Barbaricum. Skills: Security compliance, Cloud security, Cybersecurity requirements. Assess security controls. Implement security controls", "postedDate" : "2026-06-11T20:12:12.658", "createdAt" : "2026-06-11T20:12:12.658", "lastUpdated" : "2026-06-13T21:14:26.875", "ingestTimestamp" : "2026-06-11T20:12:12.658", "mongoId" : "6a2aa66d74d8ee00a06b911b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 85000, "salaryAnnualMax" : 115000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "DoD RMF", "Zero Trust principles", "Security compliance", "Cloud security", "Cybersecurity requirements", "Compliance initiatives", "Security assessments", "Risk assessments", "Vulnerability management", "Compliance documentation", "Federal cybersecurity requirements", "DoD cybersecurity requirements", "FedRAMP", "NIST 800-53 Rev. 5", "Cloud environments", "Hybrid environments", "Intelligence", "Analytics", "Data-sharing capabilities", "CISSP", "CISA", "Security+", "Microsoft Purview", "AWS Security Hub", "Nessus", "Splunk Enterprise Security" ], "skillCount" : 26, "jobCategory" : "other", "jobSubcategory" : "cyber-intel", "dataQualityScore" : 0.7777778, "_score" : 776.67615, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government Contracting" }, { "id" : "6a308ed5f292fd229c0a5ec5", "title" : "Freight Audit & Payment Analyst", "company" : "T1 Energy", "industry" : "Operations", "salary" : { "min" : 72000.0, "max" : 98000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Freight Audit & Payment Analyst in Dallas, United States, adjusted for the manufacturing industry." }, "location" : "Dallas, TX", "locations" : [ "Dallas, TX" ], "timestamp" : "2026-06-16T10:59:52.027", "fingerprint" : "ed3e7669f6c4b0cba0bdb939856092a70c6885debce8fc3c77d25b5547326a30", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/t1energy/d77a962b-c5d2-4834-a1a3-cf329817728e/application", "externalId" : "d77a962b-c5d2-4834-a1a3-cf329817728e", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Dallas", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "32.7762719,-96.7968559" } ], "locationText" : "Dallas, Texas, United States", "employmentType" : "FULL_TIME", "rawDescription" : "T1 Energy is bringing solar manufacturing back to the U.S. by building a domestic solar supply chain. Our mission is to invigorate America with scalable, reliable, and low-cost energy. Our fully operational 5GW solar module facility in Wilmer, Texas, can manufacture more than 20,000 modules every 24 hours. By the time you finish reading this paragraph, we will have produced two solar panels that will power American homes and fuel domestic AI. We're focused on building advanced American manufacturing and we're passionate about engineering a better future filled with abundant energy. Position Summary We are seeking a detail-oriented Freight Audit & Payment Analyst to review, audit, and process transportation, warehousing, and logistics-related invoices supporting a large-scale solar manufacturing operation. This high-volume role validates invoices against contracted rates, tariffs, and service agreements before payment; identifies and resolves billing discrepancies with carriers and vendors; and supports logistics spend reporting. Invoice scope spans ocean freight, drayage, air freight, domestic transportation, 3PL warehousing, and accessorial charges. Invoice Review & Approval • Review and process a high weekly volume of invoices covering ocean freight, drayage, air freight, domestic trucking, shuttle operations, and 3PL warehousing services. • Validate freight charges against contracted rates, tariffs, fuel surcharge schedules, and negotiated pricing agreements prior to approval. • Audit detention, demurrage, per diem, chassis, storage, labor, and other accessorial charges for accuracy and contractual validity. • Verify invoice support documentation, including proof of delivery, rate confirmations, container and BOL numbers, and accessorial backup. • Work an exception-based audit queue, prioritizing high-dollar, aged, and out-of-tolerance invoices while meeting approval cycle-time standards. • Route approved invoices to Accounts Payable within established payment terms to avoid late fees, service interruptions, and credit holds. • Escalate invoices exceeding established approval thresholds to logistics leadership with audit findings attached. Discrepancy & Dispute Resolution • Identify billing discrepancies, duplicate invoices, rating errors, and unauthorized accessorials; work directly with carriers, freight forwarders, customs brokers, and 3PL providers to resolve them. • File and track overcharge claims and credits; maintain a dispute log with aging, status, and recovery amounts. • Flag recurring billing-error patterns by vendor and escalate systemic issues to logistics leadership. • Track vendor compliance with contractual pricing and report variances. Reporting & Support • Prepare weekly reporting on invoice volume, approval cycle time, audit savings, dispute recovery, and accessorial spend trends. • Support logistics accrual preparation and month-end close in partnership with Finance and Accounts Payable. • Maintain accurate cost coding by lane, mode, vendor, and business unit to support landed-cost analysis. • Provide spend data and audit findings to support carrier rate negotiations and contract renewals as requested. The T1 Way We move fast, expect accountability, and treat people with respect. We also have a no-jerks policy: we don't tolerate big egos, bad behavior or \"that's not my job attitude\". Be sharp, be honest, be human. If you can hold the line and have a sense of humor, you'll fit right in. T1 Energy is an Equal Opportunity Employer. We are committed to creating an inclusive environment for all employees and applicants and do not discriminate on the basis of any legally protected characteristics.", "summaryDescription" : "Freight Audit & Payment Analyst at T1 Energy", "createdAt" : "2026-06-16T01:59:59.843", "lastUpdated" : "2026-06-16T10:59:52.027", "ingestTimestamp" : "2026-06-16T01:59:59.843", "mongoId" : "6a308ed5f292fd229c0a5ec5", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 72000, "salaryAnnualMax" : 98000, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Mid", "dataQualityScore" : 0.6666667, "_score" : 766.4653, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Manufacturing", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2abe2074d8ee00a06eca54", "title" : "Senior Information Security Compliance Specialist", "company" : "Boeing", "salary" : { "min" : 150450.0, "max" : 233450.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "USA - Arlington, VA", "locations" : [ "USA - Arlington, VA", "United States of America" ], "timestamp" : "2026-06-14T23:29:48.256", "fingerprint" : "b684311f241735626660b1c9ce339f6752e64b4d7496df8c57318ea1580ff825", "source" : "workday", "language" : "en", "applyUrl" : "https://boeing.wd1.myworkdayjobs.com/external_subsidiary/job/USA---Arlington-VA/Senior-Information-Security-Compliance-Specialist_JR2026513178", "externalId" : "JR2026513178", "locationPoint" : "39.34857,-76.68324", "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" }, { "city" : "El Segundo", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.9170280,-118.4156337" }, { "city" : "Huntsville", "state" : "Alabama", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "34.7298470,-86.5859011" }, { "city" : "Mesa", "state" : "Arizona", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.4151005,-111.8314550" }, { "city" : "Oklahoma City", "state" : "Oklahoma", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "35.4729886,-97.5170536" }, { "city" : "Orlando", "state" : "Florida", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "28.5421218,-81.3790450" }, { "city" : "San Antonio", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "29.4246002,-98.4951405" }, { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" }, { "city" : "Berkeley", "state" : "Missouri", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.7544952,-90.3312256" } ], "locationText" : "Arlington, Virginia, United States; El Segundo, California, United States; Huntsville, Alabama, United States; Mesa, Arizona, United States; Oklahoma City, Oklahoma, United States; Orlando, Florida, United States; San Antonio, Texas, United States; Seattle, Washington, United States; Berkeley, Missouri, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "professionalSkills" : [ "Cybersecurity", "Information Assurance", "Technical instruction", "Security posture assessment", "Enterprise compliance", "Security readiness", "Internal evaluations", "Security requirements guidance", "COMSEC duties", "Personnel security", "Security education", "Physical controls", "Export compliance", "Security awareness training" ], "hardSkillsList" : [ "Compliance assessment reviews", "Self-inspections", "Corrective action development", "Administrative inquiries", "Inventory management", "Information protection", "Security procedures", "Sub-contractor management" ], "hardSkills" : [ { "name" : "Compliance assessment reviews", "level" : "intermediate" }, { "name" : "Self-inspections", "level" : "intermediate" }, { "name" : "Corrective action development", "level" : "intermediate" }, { "name" : "Administrative inquiries", "level" : "intermediate" }, { "name" : "Inventory management", "level" : "intermediate" }, { "name" : "Information protection", "level" : "intermediate" }, { "name" : "Security procedures", "level" : "intermediate" }, { "name" : "Sub-contractor management", "level" : "intermediate" } ], "majorSkills" : "Information Security Compliance, Cybersecurity, Government Security Programs", "majorSkillsList" : [ "Information Security Compliance", "Cybersecurity", "Government Security Programs" ], "coreResponsibilities" : "Execute internal security controls, Perform compliance assessment reviews, Perform self-inspections, Identify deficiencies, Develop corrective action, Implement corrective action, Conduct administrative inquiries, Conduct COMSEC duties, Protect government information, Develop security education, Implement security education, Administer security education, Develop physical controls, Implement physical controls, Administer physical controls, Contribute to enterprise IPT, Provide innovation into Personnel Security, Provide innovation into security awareness training, Complete tasks toward long-range goals, Oversee Sub-Contractor Management, Provide contractual requirements, Provide contractual direction, Conduct site assistance visits, Conduct site reviews", "teamCollaboration" : "Enterprise Integrated Product Team (IPT)", "domainKnowledge" : "Classified environments; Information Assurance; SAP Security; SAP GRC; Government security programs; COMSEC; Sensitive Compartmented Information (SCI); Special Access Program (SAP); Export compliance; Personnel Security; U.S. export control compliance", "domainList" : [ "classified-environments", "information-assurance", "sap-security", "sap-grc", "government-security-programs", "comsec", "sensitive-compartmented-information-sci", "special-access-program-sap", "export-compliance", "personnel-security", "u-s-export-control-compliance" ], "domainSpecificKnowledge" : [ "Classified environments", "Information Assurance", "SAP Security", "SAP GRC", "Government security programs", "COMSEC", "Sensitive Compartmented Information (SCI)", "Special Access Program (SAP)", "Export compliance", "Personnel Security", "U.S. export control compliance" ], "toolProficiency" : [ "MS Office", "Excel", "Teams", "Outlook" ], "communicationSkills" : "Written communications; Oral communications", "innovationCreativity" : "Innovation into Personnel Security; Innovation into security awareness training", "specialRequirements" : "Maintain SCI/SAP access, U.S. Citizenship required, U.S. Person required", "qualificationsBasic" : "Tier 5 Investigation (T5) within last 5 years, 10+ years implementing information security policies, 10+ years SAP Security/GRC, 5+ years government security programs, Maintain SCI/SAP access, Active U.S. Top Secret/SCI Security Clearance, U.S. Citizenship required", "qualificationsPreferred" : "MS Office experience, Oral and written communications skills, Obtain successful US government polygraph", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Senior Information Security Compliance Specialist **Company:** The Boeing Company The Boeing Company is looking for a **Senior Information Security Compliance Specialist** to join the team in **Arlington, VA****; El Segundo, CA; Huntsville, AL; Mesa, AZ; Oklahoma City, OK; Orlando, FL; San Antonio, TX; Seattle, WA;** or **Berkeley, MO.** The selected candidates will apply advanced expertise in cybersecurity, Information Assurance (IA), and technical instruction to assess the security posture of classified environments, support enterprise compliance activities, and strengthen the cybersecurity readiness of Boeing personnel and program stakeholders. The assessor will be responsible for conducting internal evaluations, providing expert guidance on security requirements, and helping shape and sustain the implementation of Information System Security policies, standards, and directives to ensure the inspection readiness of information systems processing classified information. **Position Responsibilities:** * Executes Internal Security Controls through performance of compliance assessment reviews and self-inspections to ensure compliance with government and company regulations/requirements * Identifies deficiencies, develops and implements corrective action * Conducts administrative inquiries on personnel, processes and situations in accordance with established operating procedures to determine level and scope of non-compliance with government and company regulations/requirements * Conducts Communication Security (COMSEC) duties and responsibilities (to include inventory, distribution and destruction), in compliance with government regulations/requirements * Protects government, intellectual, third party and company information from unauthorized disclosures * Develops, implements and administers security education, procedures and physical controls to ensure compliance with government and company regulations/requirements on large and/or highly complex programs * Contributes to enterprise Integrated Product Team (IPT) (e.g., participates in the review cycle and decision making process for enterprise export compliance, procedures (PROs), Business Process Instructions (BPI's) and Desktop Instructions (DI's) * Provides innovation and creativity into Personnel Security (e.g., reduce cycle time) to assist in obtaining individual security clearances/accesses for complex customer requirements * Provides innovation and creativity into security awareness training and education program (briefings, bulletins and visual reminders) to educate, refresh, and motivate personnel to protect people, property and information * Completes tasks toward long-range goals and objectives * Oversees Sub-Contractor Management (e.g., providing contractual requirements and direction, site assistance visits and reviews) to ensure compliance with government regulations/requirements **Basic Qualifications (Required Skills/Experience):** * Successfully completed Tier 5 Investigation (T5), formerly known as a Single Scope Background Investigation (SSBI) by the federal government within the last 5 years, or requires candidate to have been enrolled in a Continuous Vetting program within the last 5 years * 10+ years of experience implementing information security policies and procedures * 10+ years of experience with SAP Security and/or SAP GRC * 5+ years of experience in government security programs * Ability to obtain and maintain access to a Sensitive Compartmented Information (SCI) and/or Special Access Program (SAP) access **Preferred Qualifications (Desired Skills/Experience):** * Experience with MS Office (Word, Excel, Teams, and outlook) * Experience with oral and written communications skills * Ability to obtain a successful US government polygraph examination **Conflict Of Interest:** Successful Candidates for this job must satisfy the Company’s Conflict Of Interest (COI) assessment process. **Drug Free Workplace:** Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies _._ **Pay & Benefits:** At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities. The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements. Pay is based upon candidate experience and qualifications, as well as market and business considerations. Summary pay range: $150,450 - $233,450 **Language Requirements:** Not Applicable **Education:** Not Applicable **Relocation:** Relocation assistance is not a negotiable benefit for this position. **Export Control Requirement:** This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a “U.S. Person” as defined by 22 C.F.R. §120.62 is required. “U.S. Person” includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee. **Safety Sensitive:** This is not a Safety Sensitive Position. **Security Clearance:** This position requires an active U.S. Top Secret/SCI Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active) **Visa Sponsorship:** Employer will not sponsor applicants for employment visa status. **Contingent Upon Award Program** This position is not contingent upon program award **Shift:** Shift 1 (United States of America) **Stay safe from recruitment fraud! The only way to apply for a position at Boeing is via our Careers website. Learn how to protect yourself from recruitment fraud** \\- [Recruitment Fraud Warning](http://www.boeing.com/careers/recruitment-fraud-warning.page) Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law. [EEO is the law](http://www.boeing.com/resources/boeingdotcom/careers/footer/EEOIsTheLawPoster.pdf) [Boeing EEO Policy](https://tbcdn.talentbrew.com/company/185/v1_0/img/2018_Policy_Statement.pdf) [Request an Accommodation](http://www.boeing.com/careers/request-accommodation.page) [Applicant Privacy](http://www.boeing.com/careers/privacy-statement.page) **Boeing Participates in E – Verify** * [E-Verify (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterEnglish.pdf) * [E-Verify (Spanish) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterSpanish.pdf) **Right to Work Statement** * [Right to Work (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWEnglishversion.pdf) * [Right to Work (Spanish)](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWSpanishversion.pdf)", "summaryDescription" : "Senior Information Security Compliance Specialist at Boeing. Skills: Information Security Compliance, Cybersecurity, Government Security Programs. Execute internal security controls. Perform compliance assessment reviews", "postedDate" : "2026-06-11T02:38:57.862", "createdAt" : "2026-06-12T02:38:57.826", "lastUpdated" : "2026-06-14T23:29:48.256", "ingestTimestamp" : "2026-06-12T02:38:57.826", "mongoId" : "6a2abe2074d8ee00a06eca54", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://boeing.wd1.myworkdayjobs.com/external_subsidiary/job/USA---Arlington-VA/Senior-Information-Security-Compliance-Specialist_JR2026513178", "salaryAnnualMin" : 150450, "salaryAnnualMax" : 233450, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Compliance assessment reviews", "Self-inspections", "Corrective action development", "Administrative inquiries", "Inventory management", "Information protection", "Security procedures", "Sub-contractor management", "Information Security Compliance", "Cybersecurity", "Government Security Programs", "Information Assurance", "Technical instruction", "Security posture assessment", "Enterprise compliance", "Security readiness", "Internal evaluations", "Security requirements guidance", "COMSEC duties", "Personnel security", "Security education", "Physical controls", "Export compliance", "Security awareness training", "Classified environments", "SAP Security", "SAP GRC", "Government security programs", "COMSEC", "Sensitive Compartmented Information (SCI)", "Special Access Program (SAP)", "Personnel Security", "U.S. export control compliance", "MS Office", "Excel", "Teams", "Outlook" ], "skillCount" : 37, "jobCategory" : "engineering", "seniorityLevel" : "senior", "dataQualityScore" : 1.0, "_score" : 765.4068, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true }, { "id" : "69dde45b2beec4dd3d9a3eea", "title" : "Senior Compliance Analyst, Research Compliance", "company" : "City of Hope", "industry" : "Healthcare", "salary" : { "min" : 115000.0, "max" : 165000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline data for a Senior Compliance Analyst in the Healthcare industry in the US, adjusted for seniority and remote work." }, "location" : "US-Nationwide-USA-Remote-US-Remote", "locations" : [ "US-Nationwide-USA-Remote-US-Remote", "Compliance Administration", "Remote, Days, Days" ], "certifications" : [ "Certified IRB Professional (CIP)", "Certified Clinical Research Professional (CCRC)", "Certified Clinical Research Coordinator (CCRC)", "Certified Clinical Research Associate (CCRA)" ], "timestamp" : "2026-06-16T00:17:42.251", "fingerprint" : "f162ff179424bdc5aab2059b806ba31beff12e1a97c422813f52d62ff5545558", "source" : "taleo", "language" : "en", "applyUrl" : "https://aa067.taleo.net/careersection/ex/jobdetail.ftl?job=229764", "externalId" : "229764", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "professionalSkills" : [ "Risk management", "Regulatory affairs", "Compliance oversight", "Legal analysis" ], "hardSkillsList" : [ "Research compliance", "Regulatory requirements", "Auditing", "Policy development", "Data analysis" ], "hardSkills" : [ { "name" : "Research compliance", "level" : "intermediate" }, { "name" : "Regulatory requirements", "level" : "intermediate" }, { "name" : "Auditing", "level" : "intermediate" }, { "name" : "Policy development", "level" : "intermediate" }, { "name" : "Data analysis", "level" : "intermediate" } ], "majorSkills" : "Research compliance, Regulatory requirements, Risk management", "majorSkillsList" : [ "Research compliance", "Regulatory requirements", "Risk management" ], "coreResponsibilities" : "Develop and implement compliance policies, Conduct compliance audits, Monitor research activities, Ensure adherence to regulations, Manage compliance risks, Provide compliance training, Interpret regulatory requirements, Develop corrective action plans, Maintain compliance documentation, Collaborate with research staff", "teamCollaboration" : "Research teams; Regulatory bodies; Internal stakeholders", "projectManagementSkills" : [ "Project management" ], "domainKnowledge" : "Federal regulations; Institutional policies; Research ethics; Clinical trials", "domainList" : [ "federal-regulations", "institutional-policies", "research-ethics", "clinical-trials" ], "domainSpecificKnowledge" : [ "Federal regulations", "Institutional policies", "Research ethics", "Clinical trials" ], "toolProficiency" : [ "Microsoft Office Suite" ], "communicationSkills" : "Written communication; Verbal communication; Presentation skills", "documentationSkills" : "Policy development; Compliance documentation", "continuousLearning" : "Professional development", "problemSolvingSkills" : "Problem solving; Analytical skills", "outcomesObjectives" : "Ensure compliance with regulations; Mitigate compliance risks; Improve compliance processes", "qualificationsBasic" : "5+ years experience, Bachelor's degree", "qualificationsPreferred" : "Master's degree, Certified IRB Professional (CIP), Certified Clinical Research Professional (CCRC), Certified Clinical Research Coordinator (CCRC), Certified Clinical Research Associate (CCRA)", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Join the transformative team at City of Hope , where we're changing lives and making a real difference in the fight against cancer, diabetes, and other life-threatening illnesses. City of Hope’s growing national system includes its Los Angeles campus, a network of clinical care locations across Southern California, a new cancer center in Orange County, California, and treatment facilities in Atlanta, Chicago and Phoenix. Our dedicated and compassionate employees are driven by a common mission: To deliver the cures of tomorrow to the people who need them today. The Senior Compliance Analyst conducts assurance audits/reviews systemwide to evaluate integrity of research activities in accordance with appropriate standards, metrics, established compliance plan(s) and prescribed institutional policies. This position also provides critical regulatory interpretation of City of Hope’s clinical and basic science research programs and assists with implementing and maintaining research standards of conduct in accordance with all applicable laws, regulations, and best practices. The Senior Compliance Analyst assists with responding to research compliance-related inquiries and may participate in conducting investigations and monitoring corrective action plans. As a successful candidate, you will: Conduct regulatory and clinical trials audits /reviews in accordance with appropriate standards, metrics, established research compliance plan(s) and prescribed institutional policies. Prepare research compliance reports providing supporting evidence and recommendations regarding identified research compliance deficiencies or gaps. Ensure findings and recommendations are adequately documented and audit work is performed according to appropriate auditing standards and policies. Develop and reviews audit reports to support audit conclusions and provides summary of consulting engagements with regard to achieving understandability of audit issues and recommendations by all levels of management and the board. Assist in investigations of alleged breaches of policy, misconduct, or other acts of research non-compliance to determine the cause, extent of risk and mechanisms for prevention. Handle multiple concurrent requests from stakeholders requiring multiple and/or simultaneous deadlines as well as managing audits between peak periods. Attends and participates in audit meetings. Your qualifications should include: Minimum Education: Bachelor’s degree; 3 additional years of experience plus the minimum experience requirement may substitute for minimum education. Minimum Experience: At least five (5) years of experience in research compliance, preferably in a large academic medical center, or related experience in a similar field. Skills/Abilities: Excellent attention to detail, strong written and verbal communication skills, and analytical and critical decision-making skills required. Strong background in research compliance and operations. Demonstrated experience with Good Clinical Practices and Human Subjects Research. Experience in effectively developing and implementing comprehensive research audit programs. Experience in healthcare research setting understanding institutional risk and applying appropriate judgement to use a risk-based approach in planning and executing duties. City of Hope employees pay is based on the following criteria: work experience, qualifications, and work location. City of Hope is an equal opportunity employer. To learn more about our Comprehensive Benefits, please CLICK HERE . US-Nationwide-USA-Remote-US-Remote", "summaryDescription" : "Senior Compliance Analyst, Research Compliance at City of Hope. Skills: Research compliance, Regulatory requirements, Risk management. Develop and implement compliance policies. Conduct compliance audits", "createdAt" : "2026-06-14T18:50:42.957", "lastUpdated" : "2026-06-16T00:17:42.251", "ingestTimestamp" : "2026-06-14T18:50:42.957", "mongoId" : "69dde45b2beec4dd3d9a3eea", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 115000, "salaryAnnualMax" : 165000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Research compliance", "Regulatory requirements", "Auditing", "Policy development", "Data analysis", "Risk management", "Regulatory affairs", "Compliance oversight", "Legal analysis", "Project management", "Federal regulations", "Institutional policies", "Research ethics", "Clinical trials", "Certified IRB Professional (CIP)", "Certified Clinical Research Professional (CCRC)", "Certified Clinical Research Coordinator (CCRC)", "Certified Clinical Research Associate (CCRA)", "Microsoft Office Suite" ], "skillCount" : 19, "jobCategory" : "operations", "jobSubcategory" : "legal", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 752.07227, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Healthcare", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2d41ea74d8ee00a0b3c42b", "title" : "Information Security Officer", "company" : "NECT GmbH", "industry" : "Cybersecurity", "salary" : { "min" : 135000.0, "max" : 195000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Director, Information Security Officer in Hamburg, Germany, adjusted for the technology industry." }, "location" : "Hamburg, Deutschland", "locations" : [ "Hamburg", "Deutschland" ], "timestamp" : "2026-06-15T22:44:56.993", "fingerprint" : "ab31e4ae8835c272ba436de6d624639ef68587de3d20d283163454ccf1380f8b", "source" : "softgarden_portal", "language" : "de", "applyUrl" : "https://nect.softgarden.io/job/63310079/Information-Security-Officer-all-genders-?jobDbPVId=275240653&l=en", "externalId" : "63310079_275240653", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Hamburg", "country" : "Germany", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "53.5501721,10.0013165" } ], "locationText" : "Hamburg, Germany", "summaryDescription" : "Information Security Officer at NECT GmbH", "createdAt" : "2026-06-14T21:55:52.797", "lastUpdated" : "2026-06-15T22:44:56.993", "ingestTimestamp" : "2026-06-14T21:55:52.797", "mongoId" : "6a2d41ea74d8ee00a0b3c42b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.44444445, "_score" : 748.8091, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.92 }, { "id" : "6a3064adf292fd229cfa263e", "title" : "Accounting Controls & Audit Analyst", "company" : "Inetum", "industry" : "Information Technology And Services", "salary" : { "min" : 38000.0, "max" : 55000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Accounting Controls & Audit Analyst in Lisbon, Portugal, adjusted for the Technology industry and company size." }, "location" : "Lisbon, Lisbon, PT", "locations" : [ "Lisbon", "Lisbon", "PT" ], "timestamp" : "2026-06-16T09:30:27.634", "fingerprint" : "1e12572baaec542f2de7ef35cbcd490edce0ca0eb9d8c127549e5fa86d3d4435", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Inetum2/744000132147260-accounting-controls-audit-analyst", "externalId" : "744000132147260", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Lisbon", "state" : "Lisbon", "country" : "Portugal", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "38.7077507,-9.1365919" } ], "locationText" : "Lisbon, Lisbon, Portugal", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "professionalSkills" : [ "Risk management", "Internal control" ], "hardSkillsList" : [ "Accounting principles", "IFRS" ], "hardSkills" : [ { "name" : "Accounting principles", "level" : "intermediate" }, { "name" : "IFRS", "level" : "intermediate" } ], "majorSkills" : "Accounting controls, Audit analysis", "majorSkillsList" : [ "Accounting controls", "Audit analysis" ], "coreResponsibilities" : "Build partnerships with regional finance teams, Oversee rollout and monitoring of Group Accounting Control, Review control frameworks, Identify control gaps, Report control findings to senior management, Perform LOD2 controls on central teams, Ensure compliance with procedures, Analyze accounting certifications, Summarize key issues, Summarize remediation plans, Track audit recommendations, Track operational risk incidents, Ensure timely resolution of recommendations, Lead internal control committees, Contribute to internal control committees, Lead governance forums, Contribute to governance forums", "teamCollaboration" : "Regional finance teams; Stakeholders", "domainKnowledge" : "Accounting control; IFRS; Accounting principles; Internal control", "domainList" : [ "accounting-control", "ifrs", "accounting-principles", "internal-control" ], "domainSpecificKnowledge" : [ "Accounting control", "IFRS", "Accounting principles", "Internal control" ], "communicationSkills" : "Reporting skills", "problemSolvingSkills" : "Analytical skills", "qualificationsBasic" : "Experience in audit or internal control, Knowledge of IFRS, Knowledge of accounting principles, Fluent in English", "qualificationsPreferred" : "Big 4 or similar experience, Financial services experience preferred", "remoteFriendly" : false, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Inetum is a European leader in digital services. Inetum’s team of 28,000 consultants and specialists strive every day to make a digital impact for businesses, public sector entities and society. Inetum’s solutions aim at contributing to its clients’ performance and innovation as well as the common good. Present in 19 countries with a dense network of sites, Inetum partners with major software publishers to meet the challenges of digital transformation with proximity and flexibility. Driven by its ambition for growth and scale, Inetum generated sales of 2.5 billion euros in 2023. At Inetum you have space to grow and boost your talent! \uD83D\uDD0E We’re looking for an Accounting Controls & Audit Analyst to strengthen financial governance and ensure robust accounting control across multiple regions. If you have an audit background and a passion for risk management, this role is for you! Location:Lisbon What You’ll Do: * Build strong partnerships with regional finance teams and stakeholders. * Oversee the rollout and monitoring of the Group Accounting Control Plan. * Review control frameworks, identify gaps, and report findings to senior management. * Perform LOD2 controls on central teams and ensure compliance with procedures. * Analyze accounting certifications and summarize key issues and remediation plans. * Track audit recommendations and operational risk incidents, ensuring timely resolution. * Lead and contribute to internal control committees and governance forums. ## Qualifications What You Bring: * Experience in audit or internal control (Big 4 or similar, financial services preferred). * Strong knowledge of IFRS and accounting principles. * Excellent analytical and reporting skills. * Fluent in English (written and spoken). ## Additional Information (Hybrid work , with 2/3 days of work in the office in LISBON per week) Are you the one?! \uD83D\uDCEC Send your CV & Join our team!", "summaryDescription" : "Accounting Controls & Audit Analyst at Inetum. Skills: Accounting controls, Audit analysis. Build partnerships with regional finance teams. Oversee rollout and monitoring of Group Accounting Control", "postedDate" : "2026-06-15T08:56:12.000", "createdAt" : "2026-06-16T00:21:34.645", "lastUpdated" : "2026-06-16T09:30:27.634", "ingestTimestamp" : "2026-06-16T00:21:34.645", "mongoId" : "6a3064adf292fd229cfa263e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "30k-50k", "hasSalary" : false, "allSkills" : [ "Accounting principles", "IFRS", "Accounting controls", "Audit analysis", "Risk management", "Internal control", "Accounting control" ], "skillCount" : 7, "jobCategory" : "finance", "jobSubcategory" : "accounting", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 748.1153, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a306853f292fd229cfc3578", "title" : "Accounting Controls & Audit Analyst", "company" : "Inetum", "industry" : "Information Technology And Services", "salary" : { "min" : 35000.0, "max" : 50000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Accounting Controls & Audit Analyst in Lisbon, Portugal, adjusted for the Technology industry." }, "location" : "Lisbon, Lisbon, PT", "locations" : [ "Lisbon", "Lisbon", "PT" ], "timestamp" : "2026-06-16T08:12:17.163", "fingerprint" : "4d383f629edba58830ba93545b8b38dd5e3501ba6f43060cc18dc704657f3513", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Inetum2/744000132147260-accounting-controls-audit-analyst", "externalId" : "744000132147260", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Lisbon", "state" : "Lisbon", "country" : "Portugal", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "38.7077507,-9.1365919" } ], "locationText" : "Lisbon, Lisbon, Portugal", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "professionalSkills" : [ "Risk management", "Internal control" ], "hardSkillsList" : [ "Accounting principles", "IFRS" ], "hardSkills" : [ { "name" : "Accounting principles", "level" : "intermediate" }, { "name" : "IFRS", "level" : "intermediate" } ], "majorSkills" : "Accounting controls, Audit analysis", "majorSkillsList" : [ "Accounting controls", "Audit analysis" ], "coreResponsibilities" : "Build partnerships with regional finance teams, Oversee rollout and monitoring of Group Accounting Control, Review control frameworks, Identify control gaps, Report control findings to senior management, Perform LOD2 controls on central teams, Ensure compliance with procedures, Analyze accounting certifications, Summarize key issues, Summarize remediation plans, Track audit recommendations, Track operational risk incidents, Ensure timely resolution of recommendations, Lead internal control committees, Contribute to internal control committees, Lead governance forums, Contribute to governance forums", "teamCollaboration" : "Regional finance teams; Stakeholders", "domainKnowledge" : "Accounting control; IFRS; Accounting principles; Internal control", "domainList" : [ "accounting-control", "ifrs", "accounting-principles", "internal-control" ], "domainSpecificKnowledge" : [ "Accounting control", "IFRS", "Accounting principles", "Internal control" ], "communicationSkills" : "Reporting skills", "problemSolvingSkills" : "Analytical skills", "qualificationsBasic" : "Experience in audit or internal control, Knowledge of IFRS, Knowledge of accounting principles, Fluent in English", "qualificationsPreferred" : "Big 4 or similar experience, Financial services experience preferred", "remoteFriendly" : false, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Inetum is a European leader in digital services. Inetum’s team of 28,000 consultants and specialists strive every day to make a digital impact for businesses, public sector entities and society. Inetum’s solutions aim at contributing to its clients’ performance and innovation as well as the common good. Present in 19 countries with a dense network of sites, Inetum partners with major software publishers to meet the challenges of digital transformation with proximity and flexibility. Driven by its ambition for growth and scale, Inetum generated sales of 2.5 billion euros in 2023. At Inetum you have space to grow and boost your talent! \uD83D\uDD0E We’re looking for an Accounting Controls & Audit Analyst to strengthen financial governance and ensure robust accounting control across multiple regions. If you have an audit background and a passion for risk management, this role is for you! Location:Lisbon What You’ll Do: * Build strong partnerships with regional finance teams and stakeholders. * Oversee the rollout and monitoring of the Group Accounting Control Plan. * Review control frameworks, identify gaps, and report findings to senior management. * Perform LOD2 controls on central teams and ensure compliance with procedures. * Analyze accounting certifications and summarize key issues and remediation plans. * Track audit recommendations and operational risk incidents, ensuring timely resolution. * Lead and contribute to internal control committees and governance forums. ## Qualifications What You Bring: * Experience in audit or internal control (Big 4 or similar, financial services preferred). * Strong knowledge of IFRS and accounting principles. * Excellent analytical and reporting skills. * Fluent in English (written and spoken). ## Additional Information (Hybrid work , with 2/3 days of work in the office in LISBON per week) Are you the one?! \uD83D\uDCEC Send your CV & Join our team!", "summaryDescription" : "Accounting Controls & Audit Analyst at Inetum. Skills: Accounting controls, Audit analysis. Build partnerships with regional finance teams. Oversee rollout and monitoring of Group Accounting Control", "postedDate" : "2026-06-15T08:56:12.000", "createdAt" : "2026-06-15T23:51:08.844", "lastUpdated" : "2026-06-16T08:12:17.163", "ingestTimestamp" : "2026-06-15T23:51:08.844", "mongoId" : "6a306853f292fd229cfc3578", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "30k-50k", "hasSalary" : false, "allSkills" : [ "Accounting principles", "IFRS", "Accounting controls", "Audit analysis", "Risk management", "Internal control", "Accounting control" ], "skillCount" : 7, "jobCategory" : "finance", "jobSubcategory" : "accounting", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 748.1153, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2a8a7774d8ee00a0681fdf", "title" : "Cybersecurity – Information System Security Officer (ISSO)", "company" : "Boeing", "salary" : { "min" : 113050.0, "max" : 152950.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "USA - Ridley Park, PA", "locations" : [ "USA - Ridley Park, PA", "United States of America" ], "certifications" : [ "IAM Level 1 DoD 8140.03 compliant certification" ], "timestamp" : "2026-06-13T02:47:33.340", "fingerprint" : "bc0ab20ff8240feba7df8afca44b6c18182830d243e595306277245618514f06", "source" : "workday", "language" : "en", "applyUrl" : "https://boeing.wd1.myworkdayjobs.com/EXTERNAL_CAREERS/job/USA---Ridley-Park-PA/Cybersecurity---Information-System-Security-Officer--ISSO-_JR2026496226-1", "externalId" : "JR2026496226", "locationPoint" : "39.88122,-75.3238", "structuredLocations" : [ { "city" : "Ridley Park", "state" : "Pennsylvania", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.8812236,-75.3237993" } ], "locationText" : "Ridley Park, Pennsylvania, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Cybersecurity, Information Assurance, Risk Management Framework, NIST SP 800", "professionalSkills" : [ "Information System Security", "Security Analysis", "Risk Assessment", "Incident Response", "Configuration Management", "Compliance" ], "hardSkillsList" : [ "Security policy implementation", "System authorization", "Continuous monitoring", "Hardware/software inventory" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Security policy implementation", "level" : "intermediate" }, { "name" : "System authorization", "level" : "intermediate" }, { "name" : "Continuous monitoring", "level" : "intermediate" }, { "name" : "Hardware/software inventory", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Information System Security, Risk Management Framework, Cybersecurity", "majorSkillsList" : [ "Information System Security", "Risk Management Framework", "Cybersecurity" ], "coreResponsibilities" : "Perform security analysis, Assess compliance with standards, Lead Assessment and Authorization (A&A) processes, Implement RMF for information systems, Facilitate MOUs, Facilitate ISAs, Facilitate RALs, Support Continuous Monitoring (CONMON), Oversee configuration management, Ensure security posture integrity, Lead staff with assessments, Document state of compliance, Conduct risk assessments, Conduct investigations, Execute risk mitigations, Oversee incident response, Conduct periodic inventory assessments, Serve as spokesperson on projects, Advise management on technical research, Interface with government customers, Interface with suppliers, Implement protective mechanisms, Ensure understanding of cybersecurity requirements, Oversee development of program information security, Deploy program information security, Meet program and enterprise requirements, Manage security compliance monitoring, Perform security compliance monitoring, Oversee security assessments, Participate in security audits, Prepare technical reports, Review technical reports, Present technical briefings, Identify root causes, Prioritize threats, Recommend corrective action, Implement corrective action, Explore industry knowledge, Explore industry methods", "teamCollaboration" : "Interface with government customers; Interface with suppliers; Work with management; Work with customers", "projectManagementSkills" : [ "Program information security" ], "domainKnowledge" : "Classified computing domains; Information System Security; Risk Management Framework; DAAG; CNSSI 1253; ICD-503; JSIG; NIST SP 800; DFARs compliance", "domainList" : [ "classified-computing-domains", "information-system-security", "risk-management-framework", "daag", "cnssi-1253", "icd-503", "jsig", "nist-sp-800", "dfars-compliance" ], "domainSpecificKnowledge" : [ "Classified computing domains", "Information System Security", "Risk Management Framework", "DAAG", "CNSSI 1253", "ICD-503", "JSIG", "NIST SP 800", "DFARs compliance" ], "toolProficiency" : [ "NESSUS", "ACAS", "DISA STIGs", "SCAP", "HBSS" ], "communicationSkills" : "Technical reports; Technical briefings", "documentationSkills" : "Memorandums of Understanding; Interconnection Security Agreements; Risk Acknowledgement Letters; Technical reports", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Active U.S. Secret Security Clearance, U.S. Citizenship Required", "qualificationsBasic" : "IAM Level 1 DoD 8140.03 compliant certification, 3+ years cybersecurity, IT, or related experience, 3+ years RMF, cybersecurity policies, RMF implementation experience", "qualificationsPreferred" : "3+ years ISSO/ISSM experience, 3+ years experience with security tools for RMF, 3+ years assessing and documenting test data, 3+ years DFARs compliance experience", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Cybersecurity – Information System Security Officer (ISSO) **Company:** The Boeing Company Boeing Classified Cybersecurity is currently seeking a highly motivated **Cybersecurity – Information System Security Officer (ISSO)** to join their team in **Ridley Park, PA**. The selected candidate will rely on Cybersecurity and Information Assurance (IA) background to be a technical leader and support Enterprise activities and Boeing customers throughout multiple classified computing domains. The ISSO is responsible for maintaining and implementing all Information System Security policies, standards, and directives to ensure assessment and authorization of information systems processing classified information. **Position Responsibilities:** * Perform security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and government standards * Lead and implement the Assessment and Authorization (A&A) processes under the Risk Management Framework (RMF) for new and existing information systems * Facilitate development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA), Risk Acknowledgement Letters (RAL) and support Continuous Monitoring (CONMON) * Oversee configuration management of assigned systems; auditing systems to ensure security posture integrity * Lead staff with assessments and test/analysis data to document state of compliance with security requirements * Conduct risk assessments and investigations, execute appropriate risk mitigations, and oversee incident response activities * Conduct periodic hardware/software inventory assessments * Serve as organization spokesperson on advanced projects and programs * Act as advisor to management and customers on advanced technical research studies * Interface with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements **Additional Responsibilities:** * Oversee the development and deployment of program information security for all program systems to meet the program and enterprise requirements, policies, standards, guidelines and procedures * Manage and perform security compliance continuous monitoring * Oversee and participate in security assessments and audits * Prepare, review, and present technical reports and briefings * Identify root causes, prioritizes threats and recommends and/or implements corrective action * Explore the enterprise and industry for evolving state of industry knowledge and methods regarding information security best practices **Basic Qualifications (Required Skills/Experience):** * IAM Level 1 DoD 8140.03 (previously 8570.01) compliant certification (i.e. , Security+ CE, CAP, CISSP, CASP, CISM, GSLC) * 3+ years of combined experience and/or education in cybersecurity, IT, or a related field * 3+ years of experience with the Risk Management Framework (RMF), cybersecurity policies, and RMF implementation (e.g., DAAG, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series) **Preferred Qualifications (Desired Skills/Experience):** * 3+ years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs * 3+ years of experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS * 3+ years of experience assessing and documenting test or analysis data to show cyber security compliance * 3+ years of experience with DFARs compliance **Conflict of Interest:** Successful candidates for this job must satisfy the Company’s Conflict of Interest (COI) assessment process. **Drug Free Workplace:** Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies _._ **Pay & Benefits:** At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities. The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements. Pay is based upon candidate experience and qualifications, as well as market and business considerations. Summary pay range: $113,050 – $152,950 **Language Requirements:** Not Applicable **Education:** Not Applicable **Relocation:** Relocation assistance is not a negotiable benefit for this position. **Export Control Requirement:** This is not an Export Control position. **Safety Sensitive:** This is not a Safety Sensitive Position. **Security Clearance:** This position requires an active U.S. Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active) **Visa Sponsorship:** Employer will not sponsor applicants for employment visa status. **Contingent Upon Award Program** This position is not contingent upon program award **Shift:** Shift 1 (United States of America) **Stay safe from recruitment fraud! The only way to apply for a position at Boeing is via our Careers website. Learn how to protect yourself from recruitment fraud** \\- [Recruitment Fraud Warning](http://www.boeing.com/careers/recruitment-fraud-warning.page) Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law. [EEO is the law](http://www.boeing.com/resources/boeingdotcom/careers/footer/EEOIsTheLawPoster.pdf) [Boeing EEO Policy](https://tbcdn.talentbrew.com/company/185/v1_0/img/2018_Policy_Statement.pdf) [Request an Accommodation](http://www.boeing.com/careers/request-accommodation.page) [Applicant Privacy](http://www.boeing.com/careers/privacy-statement.page) **Boeing Participates in E – Verify** * [E-Verify (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterEnglish.pdf) * [E-Verify (Spanish) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterSpanish.pdf) **Right to Work Statement** * [Right to Work (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWEnglishversion.pdf) * [Right to Work (Spanish)](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWSpanishversion.pdf)", "summaryDescription" : "Cybersecurity – Information System Security Officer (ISSO) at Boeing. Skills: Information System Security, Risk Management Framework, Cybersecurity. Perform security analysis. Assess compliance with standards", "postedDate" : "2026-06-11T16:32:13.076", "createdAt" : "2026-06-11T16:32:13.030", "lastUpdated" : "2026-06-13T02:47:33.340", "ingestTimestamp" : "2026-06-11T16:32:13.030", "mongoId" : "6a2a8a7774d8ee00a0681fdf", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://boeing.wd1.myworkdayjobs.com/EXTERNAL_CAREERS/job/USA---Ridley-Park-PA/Cybersecurity---Information-System-Security-Officer--ISSO-_JR2026496226-1", "salaryAnnualMin" : 113050, "salaryAnnualMax" : 152950, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security policy implementation", "System authorization", "Continuous monitoring", "Hardware/software inventory", "Leadership", "Information System Security", "Risk Management Framework", "Cybersecurity", "Security Analysis", "Risk Assessment", "Incident Response", "Configuration Management", "Compliance", "Program information security", "Classified computing domains", "DAAG", "CNSSI 1253", "ICD-503", "JSIG", "NIST SP 800", "DFARs compliance", "IAM Level 1 DoD 8140.03 compliant certification", "NESSUS", "ACAS", "DISA STIGs", "SCAP", "HBSS" ], "skillCount" : 27, "jobCategory" : "engineering", "seniorityLevel" : "mid", "dataQualityScore" : 0.8888889, "_score" : 744.49493, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2c6ac174d8ee00a090db9b", "title" : "Sr. Cybersecurity Operations Analyst", "company" : "Atlas Air", "salary" : { "min" : 135000.0, "max" : 185000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Operations Analyst in White Plains, NY, adjusted for industry and company size." }, "location" : "White Plains, NY, USA", "locations" : [ "White Plains", "NY", "USA" ], "timestamp" : "2026-06-15T22:36:57.018", "fingerprint" : "b22b12aba85b1209b9458c38499c58725ca1486cec8d9c90b54b808147e3e7ca", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.atlasairworldwide.com/careers/job-board/?gh_jid=4267649009", "externalId" : "4267649009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "White Plains", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "41.0339862,-73.7629097" } ], "locationText" : "White Plains, New York, United States", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "rawDescription" : "Join Atlas Air Worldwide. Move the World with Us! At Atlas Air Worldwide, we’re not just an airline, we’re a global engine powering cargo, passenger, and leasing operations across more than 70 countries. As a leader in outsourced aviation logistics, we’re built on a foundation of safety, service excellence, integrity, innovation, teamwork, and responsibility. With over 30 years of history, a modern all-Boeing fleet, and nearly 5,000 teammates collaborating across operations, technical, and corporate functions, we’re driven by purpose. If you're ready to grow, innovate, and help us deliver excellence every single day, you belong here. This position is responsible for cybersecurity operations and defense including threat assessment, incident handling, and managing vulnerabilities against Atlas Air Global Technology environment. Values and Behavioral Standards: To ensure the effective communication and application of company values and behavioral standards, as stated in our company “Code of Conduct” policy, and to respond appropriately in the event of any known departure. Major Job Responsibilities: This position will be responsible for security event monitoring, vulnerability assessments, web application penetration tests, integrity checking, and maintaining necessary standards we lift ambition.", "summaryDescription" : "Sr. Cybersecurity Operations Analyst at Atlas Air", "postedDate" : "2026-06-14T19:15:37.345", "createdAt" : "2026-06-14T19:15:37.345", "lastUpdated" : "2026-06-15T22:36:57.018", "ingestTimestamp" : "2026-06-14T19:15:37.345", "mongoId" : "6a2c6ac174d8ee00a090db9b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 135000, "salaryAnnualMax" : 185000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 743.45044, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Logistics", "llmIndustryConfidence" : 0.95 }, { "id" : "6a306afff292fd229cfceb54", "title" : "Analyst, Compliance Operations", "company" : "NBCUniversal", "industry" : "Entertainment", "salary" : { "min" : 65000.0, "max" : 85000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Universal City, CA, United States", "locations" : [ "Universal City", "CA", "United States" ], "timestamp" : "2026-06-16T09:23:42.327", "fingerprint" : "bfdbbacf0058f1d5e3f6d745adcfd154d276138181a65116cefcb6fdaa2833fc", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/NBCUniversal3/744000132271799-analyst-compliance-operations", "externalId" : "744000132271799", "industryFunction" : { }, "structuredLocations" : [ { "city" : "New York", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "40.7127281,-74.0060152" }, { "city" : "Los Angeles", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "34.0536909,-118.2427660" }, { "city" : "Miami", "state" : "Florida", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "25.7741566,-80.1935973" }, { "city" : "Orlando", "state" : "Florida", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "28.5421218,-81.3790450" } ], "locationText" : "New York, New York, United States; Los Angeles, California, United States; Miami, Florida, United States; Orlando, Florida, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "mid", "professionalSkills" : [ "Legal analysis", "Risk management", "Compliance oversight", "Regulatory analysis" ], "hardSkillsList" : [ "Regulatory compliance", "Legal operations", "Risk assessment", "Compliance reporting" ], "hardSkills" : [ { "name" : "Regulatory compliance", "level" : "intermediate" }, { "name" : "Legal operations", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Compliance reporting", "level" : "intermediate" } ], "majorSkills" : "Compliance operations, Legal analysis, Risk management", "majorSkillsList" : [ "Compliance operations", "Legal analysis", "Risk management" ], "coreResponsibilities" : "Support compliance operations, Assist with legal analysis, Help manage regulatory requirements, Contribute to risk management initiatives, Maintain compliance documentation, Process legal requests, Monitor compliance activities, Prepare compliance reports", "teamCollaboration" : "Legal department; Compliance teams; Business units", "domainKnowledge" : "Regulatory requirements; Legal frameworks; Compliance best practices", "domainList" : [ "regulatory-requirements", "legal-frameworks", "compliance-best-practices" ], "domainSpecificKnowledge" : [ "Regulatory requirements", "Legal frameworks", "Compliance best practices" ], "toolProficiency" : [ "EDiscovery tools", "Contract management software" ], "communicationSkills" : "Report writing; Presentation skills", "documentationSkills" : "Compliance documentation; Process documentation", "continuousLearning" : "Professional development opportunities", "problemSolvingSkills" : "Analytical skills; Problem identification", "outcomesObjectives" : "Ensure adherence to regulations; Mitigate legal risks; Improve compliance processes", "qualificationsBasic" : "5+ years of experience in compliance or legal operations, Bachelor's degree in a related field, Experience with regulatory requirements, Experience with risk management, Experience with legal analysis, Experience with compliance oversight", "qualificationsPreferred" : "Master's degree or JD preferred, Experience with eDiscovery tools, Experience with contract management software", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "NBCUniversal is one of the world's leading media and entertainment companies. We create world-class content, which we distribute across our portfolio of film, television, and streaming, and bring to life through our global theme park destinations, consumer products, and experiences. We own and operate leading entertainment and news brands, including NBC, NBC News, NBC Sports, Telemundo, NBC Local Stations, Bravo, and Peacock, our premium ad-supported streaming service. We produce and distribute premier filmed entertainment and programming through our powerhouse film and television studios, including Universal Pictures, DreamWorks Animation, and Focus Features, and the four global television studios under the Universal Studio Group banner, and operate industry-leading theme parks and experiences around the world through Universal Destinations & Experiences, including Universal Orlando Resort, home to Universal Epic Universe, and Universal Studios Hollywood. NBCUniversal is a subsidiary of Comcast Corporation. Visit www.nbcuniversal.com for more information. Our impact is rooted in improving the communities where our employees, customers, and audiences live and work. We have a rich tradition of giving back and ensuring our employees have the opportunity to serve their communities. We champion an inclusive culture and strive to attract and develop a talented workforce to create and deliver a wide range of content reflecting our world. Join our NBCUniversal EPIC Legal Team! EPIC symbolizes key foundational principles as we strive to be extraordinary partners to our businesses in an evolving environment. Here at NBCU Legal, we are Expert Partners who provide Inspiring and Creative solutions to our clients. We are subject-matter experts who collaborate with our legal colleagues and clients to guide, solve and push for our collective success. We inspire by bringing optimism and positivity to our work, and apply strategic and innovative thinking to support our businesses. The Analyst, Compliance Operations, will play a pivotal role in promoting NBCUniversal’s strong culture of compliance and ethics. The successful candidate will work as a highly experienced analyst and project manager capable of driving and supporting global compliance monitoring and other initiatives. The position will report to the Vice President, Compliance Operations. Responsibilities: * Design, implement, and execute monitoring, testing, and reporting focused on potential corruption, economic sanctions, fraud, money laundering, conflicts of interest, and other risks * Review and analyze data to identify potential risks * Support research, due diligence, and advice on compliance-related risks for range of business activities * Create summaries and visualizations of monitoring and testing performed * Create and manage project plans, including timelines, milestones, and dependencies * Assist in implementing and tracking remedial actions as necessary * Partner with cross-functional stakeholders, including businesses, HR, Finance, Operations and Technology, and other partners to design and execute monitoring and other compliance initiatives * Identify systems and data improvements and proactively develop potential solutions * Help develop and enhance policies, procedures, and training, and lead training sessions on key compliance initiatives * Prepare and deliver comprehensive reports and presentations * Coordinate with Compliance counterparts at Comcast and Sky, and collaborate on other initiatives as needed ## Qualifications Basic Requirements: * BA/BS degree required * 2+ years of experience * Demonstrated strength in project management, organization, and execution * Excellent judgment and ability to handle sensitive matters * Understanding of the elements of an effective compliance program for a publicly-traded, global company * Highly proficient in PowerPoint, Excel, and PowerBI * Experience with AI tools, such as CoPilot Desired Characteristics: * Prior experience in compliance, internal audit, data and analytics, or related functions * Understanding of rules, regulations, and best practices regarding compliance with anti-corruption, anti-money laundering, economic sanctions, U.S. political activities, conflicts of interest, gifts and business entertainment, and other compliance-related rules and regulations * An experienced multi-tasker, who can manage numerous, complex projects through periods of growth and change, with expert prioritization, organizational and management skills * Superior teamwork skills; able to gain the respect of, and build a rapport with, multiple constituencies, internally and externally * Ability to self-motivate, work independently as well as collaboratively and to manage and motivate a team * Excellent writing, communication, and presentation skills Must be willing to work in New York City, NY, Los Angeles, CA, or Miami or Orlando, FL This position currently has a hybrid schedule, which requires contributing from the office a minimum of four days per week. The Company reserves the right to change in-office requirements at any time. This position is eligible for company sponsored benefits, including medical, dental and vision insurance, 401(k), paid leave, tuition reimbursement, and a variety of other discounts and perks. Learn more about the benefits offered by NBCUniversal by visiting the [Benefits page](https://www.nbcunicareers.com/benefits) of the Careers website. Salary range: $65,000 - $85,000 ## Additional Information As part of our selection process, external candidates may be required to attend an in-person interview with an NBCUniversal employee at one of our locations prior to a hiring decision. NBCUniversal's policy is to provide equal employment opportunities to all applicants and employees without regard to race, color, religion, creed, gender, gender identity or expression, age, national origin or ancestry, citizenship, disability, sexual orientation, marital status, pregnancy, veteran status, membership in the uniformed services, genetic information, or any other basis protected by applicable law. NBCUniversal will consider for employment qualified applicants with criminal histories, or arrest or conviction records, in a manner consistent with relevant legal requirements, including the City of Los Angeles' Fair Chance Initiative For Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, where applicable. If you are a qualified individual with a disability or a disabled veteran and require support throughout the application and/or recruitment process as a result of your disability, you have the right to request a reasonable accommodation. You can submit your request to AccessibilitySupport@nbcuni.com.", "summaryDescription" : "Analyst, Compliance Operations at NBCUniversal. Skills: Compliance operations, Legal analysis, Risk management. Support compliance operations. Assist with legal analysis", "postedDate" : "2026-06-15T19:20:24.000", "createdAt" : "2026-06-16T00:04:32.835", "lastUpdated" : "2026-06-16T09:23:42.327", "ingestTimestamp" : "2026-06-16T00:04:32.835", "mongoId" : "6a306afff292fd229cfceb54", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 65000, "salaryAnnualMax" : 85000, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ "Regulatory compliance", "Legal operations", "Risk assessment", "Compliance reporting", "Compliance operations", "Legal analysis", "Risk management", "Compliance oversight", "Regulatory analysis", "Regulatory requirements", "Legal frameworks", "Compliance best practices", "EDiscovery tools", "Contract management software" ], "skillCount" : 14, "jobCategory" : "operations", "jobSubcategory" : "legal", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 743.29364, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Media", "llmIndustryConfidence" : 0.95 } ], "status" : 200, "message" : "OK", "pagination" : { "page" : 0, "limit" : 50, "totalCount" : 34276, "totalPages" : 686, "hasNext" : true, "hasPrevious" : false } }

Information Security Analyst Audit Compliance Cybersecurity Jobs in Singapore

Information Security Analyst

Senior Director, Information Security & Compliance

Sr Security Compliance Analyst

Information Security Analyst

Information Security Compliance Auditor | Mid

Information Security & Compliance Officer

Cybersecurity Analyst

Associate Director, Information Security Risk

Information Security Systems Analyst

Information System Security Officer (ISSO)

Associate Director, Information Security Risk

Sr. Cyber Security Analyst

Cybersecurity Analyst

Information Security Governance, Risk and Compliance Specialist

Cybersecurity Analyst

Information security & data protection analyst

Information Security Officer

Cybersecurity Network Security Specialist

Cybersecurity Network Security Specialist

Information Security Administrator

Chief Information Security Officer

Cybersecurity Analyst

Information Security Consultant

Senior Cloud Information Security Analyst

Senior Information Security Compliance Specialist

Security Officer - Classified Information

Information Security Consultant

Information / Cybersecurity Engineer (Clearance Required)

Information security & digital operational resilience analyst

Cybersecurity Risk Analyst

Senior Information Security Analyst, GRC and Responsible AI

Senior Information Security Analyst, GRC and Responsible AI

Cleared On Site Mid-Level Information Systems Security Officers (ISSO)

Senior Manager, Information Security

Agency Chief Information Security Officer

Cybersecurity / Network Analyst

IT Internal Audit Manager

Senior Information Security Engineer

Senior Compliance Audit Manager

Information Security Senior Analyst

Security Compliance Analyst

Freight Audit & Payment Analyst

Senior Information Security Compliance Specialist

Senior Compliance Analyst, Research Compliance

Information Security Officer

Accounting Controls & Audit Analyst

Accounting Controls & Audit Analyst

Cybersecurity – Information System Security Officer (ISSO)

Sr. Cybersecurity Operations Analyst

Analyst, Compliance Operations

Common Questions