{ "count" : 113968, "data" : [ { "id" : "6a2a475074d8ee00a05d9361", "title" : "Manager, Security GRC - Compliance Onboarding & Readiness", "company" : "HubSpot", "industry" : "SaaS", "salary" : { "min" : 155000.0, "max" : 215000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline data for a Manager, Security GRC - Compliance Onboarding & Readiness in the SaaS industry in the United States, adjusted for seniority and remote work." }, "location" : "Remote - USA", "locations" : [ "Remote - USA" ], "certifications" : [ "CISA", "CRISC", "CISSP" ], "timestamp" : "2026-06-14T19:25:30.388", "fingerprint" : "1706379341a7dab4f454d240093d3d84d73367c1a795cc15a1471c54f77a41d9", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.hubspot.com/careers/jobs/7988025?gh_jid=7988025", "externalId" : "7988025", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "experienceLevel" : "Manager", "technicalSkills" : "AWS, Microservices, CI/CD", "professionalSkills" : [ "Risk-based judgment", "Technical engineering", "Control design", "Control mapping", "Control testing", "Compliance onboarding", "Continuous assurance", "Data protection", "Change management", "AI governance" ], "hardSkillsList" : [ "Control design", "Control mapping", "Control testing", "Risk scoping", "Issue management" ], "hardSkills" : [ { "name" : "Control design", "level" : "intermediate" }, { "name" : "Control mapping", "level" : "intermediate" }, { "name" : "Control testing", "level" : "intermediate" }, { "name" : "Risk scoping", "level" : "intermediate" }, { "name" : "Issue management", "level" : "intermediate" } ], "coreResponsibilities" : "Lead, develop, and mentor a sub-team of GRC, Evolve team capabilities in risk-based judgment, Evolve team capabilities in technical engineering partnership, Conduct high-impact control walkthroughs, Draft complex process narratives, Design baseline control mappings for new architectures, Test critical systems, Guide team through operational maturity phases, Burn down legacy issues backlog, Manage and scale compliance onboarding intake process, Partner with Product, Engineering, and FinOps during design, Embed security and compliance controls before release, Maintain predictable compliance paths for engineering stakeholders, Lead and oversee internal testing of high-risk controls, Prioritize Identity and Access Management controls, Prioritize privileged access controls, Prioritize data protection controls, Prioritize change management controls, Prioritize AI governance controls, Design and build automated dashboards, Transition evidence collection from manual spreadsheets, Build out key control health indicators, Monitor key control health indicators, Identify control degradation, Remediate control degradation, Lead proactive reviews to validate control design, Help system owners address gaps collaboratively, Partner with Compliance Audit Execution team, Transition control packages for external testing, Feed readiness metrics into Security Governance and Risk, Build a unified view of security health", "teamCollaboration" : "Partner with Product; Partner with Engineering; Partner with FinOps; Partner with Compliance Audit Execution team", "domainKnowledge" : "SaaS environment; Cloud environments; Microservices architecture; CI/CD pipelines; Usage-based billing; Financial data pipelines; AI governance; Identity and Access Management; Data protection; Change management; SOX 404; SOC 1/2; ISO 27001; NIST; ISO 42001", "domainList" : [ "saas-environment", "cloud-environments", "microservices-architecture", "ci-cd-pipelines", "usage-based-billing", "financial-data-pipelines", "ai-governance", "identity-and-access-management", "data-protection", "change-management", "sox-404", "soc-1-2", "iso-27001", "nist", "iso-42001" ], "domainSpecificKnowledge" : [ "SaaS environment", "Cloud environments", "Microservices architecture", "CI/CD pipelines", "Usage-based billing", "Financial data pipelines", "AI governance", "Identity and Access Management", "Data protection", "Change management", "SOX 404", "SOC 1/2", "ISO 27001", "NIST", "ISO 42001" ], "communicationSkills" : "Explain regulatory 'whys'", "documentationSkills" : "Author robust control documentation; Draft complex process narratives", "problemSolvingSkills" : "Risk-based judgment", "outcomesObjectives" : "Shift compliance engineering left; Ensure product surface is secure by design; Ensure product surface is audit-ready; Minimize friction for engineering stakeholders; Transition to continuous compliance automated by telemetry; Transition evidence collection to continuous data streams; Identify and remediate control degradation before audit windows", "qualificationsBasic" : "Demonstrated experience in Security GRC, IT Compliance, or IT Audit, Experience managing, mentoring, or leading GRC professionals, Experience executing as an individual contributor, Understanding of SOX 404 control design, Experience implementing automated, scalable, lightweight controls", "qualificationsPreferred" : "Familiarity with AI governance frameworks (ISO 42001), Familiarity with SOC 1/2, ISO 27001, NIST, Experience supporting product transitions to usage-based billing, Experience supporting microservices-based financial data pipelines", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "1086155 Manager, Security GRC - Compliance Onboarding & Readiness Location: United States - Remote, Flex, or Office About the Role HubSpot is seeking a Manager, Security GRC on our Compliance Onboarding & Readiness team. This role is a critical part of how HubSpot approaches trust, security, and governance. Instead of focusing on reactive audit defense, our team acts as a proactive design and engineering partner. We shift compliance engineering \"left\" to ensure our rapidly expanding product surface, including usage-based billing systems, advanced AI capabilities, and scaling infrastructure, is fundamentally secure by design and audit-ready. This is a hands-on, \"player-coach\" role. Reporting directly to the Senior Manager, you will lead and mentor a dedicated team of GRC professionals, while also acting as a high-impact individual contributor (IC). You are someone who loves to get into the weeds: executing proactive control designs, performing technical walkthroughs, mapping controls to complex cloud environments, and directly authoring robust control documentation alongside your team. You will drive the day-to-day operationalization of our High-Risk Control Testing and Compliance Onboarding charters, moving HubSpot away from point-in-time evidence gathering and toward continuous compliance automated by telemetry. What You’ll Do Be an Active Player-Coach & Lead the Team Direct People Management: Lead, develop, and mentor a talented sub-team of GRC professionals. Evolve their capabilities in risk-based judgment and technical engineering partnership. Hands-on Execution (IC Work): Actively lead by example. You will personally conduct high-impact control walkthroughs, draft complex process narratives, design baseline control mappings for new architectures, and directly test our most critical systems. Stabilization & Backlog Burnout: Guide and support the team through its immediate operational maturity phases, and partnering cross-functionally to systematically burn down the legacy issues backlog. Operationalize the Compliance \"Front Door\" Shift Compliance Left: Manage and scale our centralized compliance onboarding intake process. Partner early with Product, Engineering, and FinOps during the design and architecture stages (pre-coding) to embed security and compliance controls before production release. Minimize Friction: Maintain predictable, frictionless compliance paths for engineering stakeholders so compliance acts as an operational accelerator rather than a bottleneck. Drive High-Risk Control Testing & Continuous Assurance Execute Deep-Dive Testing: Personally lead and oversee rigorous internal testing of HubSpot’s highest-risk controls, prioritizing Identity and Access Management (IAM), privileged access, data protection, change management, and AI governance. Continuous Monitoring Telemetry: Partner to design and build automated dashboards, transitioning the team’s evidence collection from manual spreadsheets to continuous data streams. Define Early-Warning Signals: Build out and monitor key control health indicators (OKIs/PKIs) to identify and remediate control degradation long before audit windows open. Foster Collaborative Partnerships & Seamless Hand-offs Proactive Pre-Audit Alignment: Lead proactive reviews to validate control design, helping system owners address gaps collaboratively before audit cycles begin. Frictionless Partner Handoffs: Partner deeply with our Compliance Audit Execution team to transition ready, thoroughly vetted control packages for external testing, replacing traditional siloed boundaries with smooth, cooperative handoffs. Shared Posture Insights: Actively feed readiness metrics and testing signals into the broader Security Governance and Risk ecosystem to build a unified, transparent view of security health across HubSpot. What We’re Looking For Required Experience & Technical Rigor Demonstrated experience in Security GRC, IT Compliance, or IT Audit, ideally within a fast-paced, public SaaS environment. Hands-On Player-Coach Leadership: Experience managing, mentoring, or leading GRC professionals, combined with a strong desire and demonstrated ability to execute as an individual contributor. You must love rolling up your sleeves to build. Deep Control Expertise: Strong understanding of SOX 404 control design, risk-based scoping, testing, and proactive issue management within modern engineering environments (AWS, microservices, CI/CD pipelines). First-Principles Architect Mindset: You look at compliance as a systems-engineering challenge, not a checklist. You have experience implementing controls that are automated, scalable, and lightweight for developers. Exceptional Communication & HubSpot Culture Fit: You are empathetic, remarkably clear, and direct. You can explain complex regulatory \"whys\" to engineering leaders. Preferred Experience Familiarity with emerging technology frameworks, specifically AI governance structures (such as ISO 42001) alongside traditional frameworks (SOC 1/2, ISO 27001, NIST). Experience supporting product transitions to usage-based billing or microservices-based financial data pipelines. Professional certifications such as CISA, CRISC, CISSP, or equivalent experience. Why HubSpot At HubSpot, security is a core value. We believe that to \"Grow Better,\" we must protect the operational and financial integrity of our platform with airtight, auditor-proof logic—while ensuring our teams can move fast and innovate with confidence. You’ll be joining a highly collaborative, deeply supportive GRC organization that treats governance as a modern product rather than a bureaucratic constraint. If you are inspired to build a secure-by-design compliance ecosystem at scale, we’d love to talk to you! Pay & Benefits The cash compensation below includes base salary, on-target commission for employees in eligible roles, and annual bonus targets under HubSpot’s bonus plan for eligible roles. In addition to cash compensation, some roles are eligible to participate in HubSpot’s equity plan to receive restricted stock units (RSUs). Some roles may also be eligible for overtime pay. Individual compensation packages are tailored to your skills, experience, qualifications, and other job-related reasons. This resource will help guide how we recommend thinking about the range you see. Learn more about HubSpot’s compensation philosophy. Benefits are also an important piece of your total compensation package. Explore the benefits and perks HubSpot offers to help employees grow better. At HubSpot, fair compensation practices aren’t just about checking off the box for legal compliance. It’s about living out our value of transparency with our employees, candidates, and community. Annual Cash Compensation Range: $146,200—$233,900 USD We know the confidence gap and impostor syndrome can get in the way of meeting spectacular candidates, so please don’t hesitate to apply — we’d love to hear from you. If you need accommodations or assistance due to a disability, please reach out to us using this form. At HubSpot, we value both flexibility and connection. Whether you’re a Remote employee or work from the Office, we want you to start your journey here by building strong connections with your team and peers. If you are joining our Engineering team, you will be required to attend a regional HubSpot office for in-person onboarding. If you join our broader Product team, you’ll also attend other in-person events, such as your Product Group Summit and other gatherings, to continue building on those connections. If you require an accommodation due to travel limitations or other reasons, please inform your recruiter during the hiring process. We are committed to supporting candidates who may need alternative arrangements Massachusetts Applicants: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. Germany Applicants: (m/f/d) - link to HubSpot's Career Diversity page here. India Applicants: link to HubSpot India's equal opportunity policy here. About HubSpot HubSpot (NYSE: HUBS) is an AI-powered customer platform with all the software, integrations, and resources customers need to connect marketing, sales, and service. HubSpot's connected platform enables businesses to grow faster by focusing on what matters most: customers. At HubSpot, bold is our baseline. Our employees around the globe move fast, stay customer-obsessed, and win together. Our culture is grounded in four commitments: Solve for the Customer, Be Bold, Learn Fast, Align, Adapt & Go!, and Deliver with HEART. These commitments shape how we work, lead, and grow. We’re building a company where people can do their best work. We focus on brilliant work, not badge swipes. By combining clarity, ownership, and trust, we create space for big thinking and meaningful progress. And we know that when our employees grow, our customers do too. Recognized globally for our award-winning culture by Comparably, Glassdoor, Fortune, and more, HubSpot is headquartered in Cambridge, MA, with employees and offices around the world. Explore more: HubSpot Careers Life at HubSpot on Instagram HubSpot may use AI to help screen or assess candidates, but all hiring decisions are always human. More information can be found here. By submitting your application, you agree that HubSpot may collect your personal data for recruiting, global organization planning, and related purposes. We may use CLEAR ID Verification during the hiring process to confirm your identity and help maintain a safe, secure, and trusted experience for all candidates. Refer to HubSpot's Recruiting Privacy Notice for details on data processing and your rights.", "summaryDescription" : "Manager, Security GRC - Compliance Onboarding & Readiness at HubSpot. Lead, develop, and mentor a sub-team of GRC. Evolve team capabilities in risk-based judgment", "postedDate" : "2026-06-11T21:59:05.874", "createdAt" : "2026-06-11T21:59:05.874", "lastUpdated" : "2026-06-14T19:25:30.388", "ingestTimestamp" : "2026-06-11T21:59:05.874", "mongoId" : "6a2a475074d8ee00a05d9361", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 155000, "salaryAnnualMax" : 215000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Control design", "Control mapping", "Control testing", "Risk scoping", "Issue management", "Risk-based judgment", "Technical engineering", "Compliance onboarding", "Continuous assurance", "Data protection", "Change management", "AI governance", "SaaS environment", "Cloud environments", "Microservices architecture", "CI/CD pipelines", "Usage-based billing", "Financial data pipelines", "Identity and Access Management", "SOX 404", "SOC 1/2", "ISO 27001", "NIST", "ISO 42001", "CISA", "CRISC", "CISSP" ], "skillCount" : 27, "jobCategory" : "other", "jobSubcategory" : "security", "dataQualityScore" : 0.8888889, "_score" : 1669.9236, "daysOld" : 2, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "SaaS" }, { "id" : "6a2c7ed874d8ee00a0953dec", "title" : "Sr. Security Engineer - GRC", "company" : "6sense", "industry" : "Technology", "salary" : { "min" : 2200000.0, "max" : 3500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior GRC Security Engineer in Pune, India, adjusted for the technology industry and company size." }, "location" : "Pune, Maharashtra, India", "locations" : [ "Pune", "Maharashtra", "India" ], "certifications" : [ "CISSP", "CISM", "GIAC" ], "timestamp" : "2026-06-15T09:13:54.200", "fingerprint" : "51b6ab45e2da66b612f3cf8f0dda7e35a12130f8e364cccb1d2e2d47bb9bd771", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://boards.greenhouse.io/6sense/jobs/7984436?gh_jid=7984436", "externalId" : "7984436", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Pune", "state" : "Maharashtra", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "18.5213738,73.8545071" } ], "locationText" : "Pune, Maharashtra, India", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "GRC, Vulnerability Scanners, SIEM, SOAR, AWS", "professionalSkills" : [ "Risk management", "Security governance", "Control testing", "Remediation planning", "Process improvement" ], "hardSkillsList" : [ "Control testing", "Risk assessment", "Automation development" ], "hardSkills" : [ { "name" : "Control testing", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Automation development", "level" : "intermediate" } ], "majorSkills" : "GRC, Risk management, Security compliance", "majorSkillsList" : [ "GRC", "Risk management", "Security compliance" ], "coreResponsibilities" : "Execute GRC initiatives, Lead audit engagements, Oversee control tests, Execute risk assessments, Communicate results, Develop treatment plans, Test remediation, Design test plans, Improve security control tests, Provide GRC technology administration, Mature security programs, Improve handbook pages, Improve procedures, Improve playbooks, Maintain controlled documents, Design GRC automation, Implement automation tasks, Execute Key Results, Maintain product knowledge, Prepare for 1:1s, Drive remediation, Adhere to deadlines, Adhere to SLAs, Participate in milestones, Execute security project milestones, Develop handbook pages, Develop runbooks, Develop workflows, Develop dashboards, Provide project status updates, Administer GRC technology", "teamCollaboration" : "Cross-functional teams; Second line of defense", "projectManagementSkills" : [ "Roadmap", "Milestones", "OKRs" ], "domainKnowledge" : "ISO 27001; SOC 2; GDPR; PCI; SOX; NIST; Cloud environments", "domainList" : [ "iso-27001", "soc-2", "gdpr", "pci", "sox", "nist", "cloud-environments" ], "domainSpecificKnowledge" : [ "ISO 27001", "SOC 2", "GDPR", "PCI", "SOX", "NIST", "Cloud environments" ], "communicationSkills" : "Communicate results", "documentationSkills" : "Handbook pages; Procedures; Playbooks; Controlled documents; Runbooks; Workflows; Dashboards", "continuousLearning" : "Learning and development initiatives", "problemSolvingSkills" : "Risk assessment; Issue resolution", "outcomesObjectives" : "Support team Objectives (OKRs)", "qualificationsBasic" : "5+ years of experience, 1+ years of experience developing automation, Experience with security tools, Experience with cloud environments, Experience with industry frameworks, Experience with regulations, Experience with standards", "qualificationsPreferred" : "Big 4 experience, Bachelor's degree in a related field, Relevant industry certifications", "rawDescription" : "Our Mission: 6sense's mission is to multiply what matters: growth, retention, and efficiency. We envision a future where companies, teams and people reach their full potential. Our People: People are the heart and soul of 6sense. We serve with passion and purpose. We live by our Being 6sense values of Win as One Team, Stay Curious, Do The Right Thing, Own the Outcome, and Create Belonging. Every 6sensor plays a part in deﬁning the future of our industry-leading technology. 6sense is a place where difference-makers roll up their sleeves, take risks, act with integrity, and measure success by the value we create for our customers. We want 6sense to be the best chapter of your career. Purpose of the Job : As members of 6sense’s Security department, the Governance, Risk and Compliance (GRC) team aligns Security with business objectives while managing risks and meeting industry standards, regulations and contractual obligations. GRC enforces governance, implements risk management strategies, and ensures compliance through operating as the second line of defense. Responsibilities Execute on milestones for end-to-end GRC initiatives in accordance with the Security roadmap Lead internal and external audit engagements Oversee and execute complex control tests, third-party and operational security risk assessments and communicate results across multiple audiences with varying levels of sensitivity Develop issue and risk treatment plans with owners and test remediation for closure Design high-quality test plans and improve security control test activities through peer reviews that provide feedback and guidance to other GRC Engineers Provide GRC technology administration to include user training Mature security governance, training and awareness programs Improve GRC handbook pages, procedures and playbooks and maintain security program controlled documents Design GRC control automation and implement security GRC related automation tasks Execute on quarterly individual Key Results that support team Objectives (OKRs) Performance Measurement : Maintains up-to-date knowledge of 6sense’s product, environment, systems and architecture Actively prepares for weekly 1:1s with Manager and monthly skip levels Drives remediation of security risks and threats Adheres to strict deadlines and SLAs Participates in creation of milestones associated with major security projects Executes on milestones associated with major security projects Develops and maintains up to date handbook pages, runbooks, workflows and dashboards Provides project status update on weekly basis Administers GRC technology Educational and Experience Requirements : 5+ years of experience being part of a GRC or similar team 1+ years of experience developing automation Experience with security tools and cloud environments (e.g., GRC, Vulnerability Scanners, SIEM, SOAR, AWS) Experience with industry frameworks, regulations and standards, such as: ISO 27001, SOC 2, GDPR, PCI, SOX, NIST, etc. Preferred Qualifications : Big 4 (KPMG, Deloitte, PwC, EY) or similar experience Bachelor's degree in a related field Relevant industry certifications, such as CISSP, CISM, or GIAC, are highly desirable Our Benefits: Full-time employees can take advantage of health coverage, paid parental leave, generous paid time-off and holidays, quarterly self-care days off, and stock options. We’ll make sure you have the equipment and support you need to work and connect with your teams, at home or in one of our oﬃces. We have a growth mindset culture that is represented in all that we do, from onboarding through to numerous learning and development initiatives including access to our LinkedIn Learning platform. Employee well-being is also top of mind for us. We host quarterly wellness education sessions to encourage self care and personal growth. From wellness days to ERG-hosted events, we celebrate and energize all 6sense employees and their backgrounds. Equal Opportunity Employer: 6sense is an Equal Employment Opportunity and Affirmative Action Employers. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. If you require reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to jobs@6sense.com. We are aware of recruiting impersonation attempts that are not affiliated with 6sense in any way. All email communications from 6sense will originate from the @6sense.com domain. We will not initially contact you via text message and will never request payments. If you are uncertain whether you have been contacted by an official 6sense employee, reach out to jobs@6sense.com", "summaryDescription" : "Sr. Security Engineer - GRC at 6sense. Skills: GRC, Risk management, Security compliance. Execute GRC initiatives. Lead audit engagements", "postedDate" : "2026-06-14T03:16:59.402", "createdAt" : "2026-06-14T03:16:59.402", "lastUpdated" : "2026-06-15T09:13:54.200", "ingestTimestamp" : "2026-06-14T03:16:59.402", "mongoId" : "6a2c7ed874d8ee00a0953dec", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Control testing", "Risk assessment", "Automation development", "GRC", "Risk management", "Security compliance", "Security governance", "Remediation planning", "Process improvement", "Roadmap", "Milestones", "OKRs", "ISO 27001", "SOC 2", "GDPR", "PCI", "SOX", "NIST", "Cloud environments", "CISSP", "CISM", "GIAC" ], "skillCount" : 22, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1013.2023, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c8b7c74d8ee00a0972f1d", "title" : "Senior Governance, Risk, Compliance (GRC) Analyst", "company" : "Headway", "industry" : "All Cost Centers", "salary" : { "min" : 161600.0, "max" : 202000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "San Francisco", "locations" : [ "San Francisco" ], "certifications" : [ "HITRUST", "SOC 2", "PCI-DSS", "HIPAA" ], "timestamp" : "2026-06-15T03:35:07.808", "fingerprint" : "0a7d52ad3810b3f3b4cf7a0c1ff409e60c8ab661d266ba0f90942f1da06d5571", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/headway/9e503e4c-6fea-4401-8458-c20f4d4f1e5e/application", "externalId" : "9e503e4c-6fea-4401-8458-c20f4d4f1e5e", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AI-enabled compliance", "professionalSkills" : [ "Risk management", "Compliance management", "Security awareness", "Vendor assessment", "Control remediation", "Procurement", "Policy enforcement", "Risk identification", "Risk assessment", "Risk tracking", "Risk mitigation", "Process building", "AI tooling" ], "hardSkillsList" : [ "Audit readiness", "Evidence collection", "Control gap tracking", "Remediation timelines", "Vendor security assessment", "Risk scoring", "Security awareness training", "Phishing simulations", "Completion tracking", "Centralized risk register", "Technical risk identification", "Technical risk assessment", "Technical risk tracking", "Technical risk mitigation" ], "hardSkills" : [ { "name" : "Audit readiness", "level" : "intermediate" }, { "name" : "Evidence collection", "level" : "intermediate" }, { "name" : "Control gap tracking", "level" : "intermediate" }, { "name" : "Remediation timelines", "level" : "intermediate" }, { "name" : "Vendor security assessment", "level" : "intermediate" }, { "name" : "Risk scoring", "level" : "intermediate" }, { "name" : "Security awareness training", "level" : "intermediate" }, { "name" : "Phishing simulations", "level" : "intermediate" }, { "name" : "Completion tracking", "level" : "intermediate" }, { "name" : "Centralized risk register", "level" : "intermediate" }, { "name" : "Technical risk identification", "level" : "intermediate" }, { "name" : "Technical risk assessment", "level" : "intermediate" }, { "name" : "Technical risk tracking", "level" : "intermediate" }, { "name" : "Technical risk mitigation", "level" : "intermediate" } ], "majorSkills" : "GRC, Compliance, Risk management, Security certifications", "majorSkillsList" : [ "GRC", "Compliance", "Risk management", "Security certifications" ], "coreResponsibilities" : "Support HITRUST audit readiness, Support SOC 2 audit readiness, Support PCI-DSS audit readiness, Support HIPAA audit readiness, Collect audit evidence, Coordinate with assessors, Track control gaps, Track remediation timelines, Build vendor assessment lifecycle, Manage vendor assessments, Score vendor risk, Enforce policy across procurement, Enforce policy across renewals, Stand up training program, Run security awareness training, Create onboarding modules, Run phishing simulations, Track training completion, Operate risk register, Identify technical risks, Assess technical risks, Track technical risks, Mitigate technical risks, Surface risk priorities, Partner with Privacy, Partner with Legal, Partner with IT, Partner with Engineering, Embed compliance into operations", "teamCollaboration" : "Partner with Privacy; Partner with Legal; Partner with IT; Partner with Engineering; Partner with Security leadership", "projectManagementSkills" : [ "Process building", "Repeatable processes" ], "domainKnowledge" : "HITRUST; SOC 2; PCI-DSS; HIPAA; Healthtech; Mental healthcare", "domainList" : [ "hitrust", "soc-2", "pci-dss", "hipaa", "healthtech", "mental-healthcare" ], "domainSpecificKnowledge" : [ "HITRUST", "SOC 2", "PCI-DSS", "HIPAA", "Healthtech", "Mental healthcare" ], "toolProficiency" : [ "GRC platform", "Vanta", "Drata", "OneTrust" ], "communicationSkills" : "Communicate requirements clearly", "continuousLearning" : "Training; Professional development", "innovationCreativity" : "AI-enabled compliance", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "qualificationsBasic" : "5+ years GRC experience, Working knowledge HITRUST, Working knowledge SOC 2, Working knowledge PCI-DSS, Working knowledge HIPAA", "qualificationsPreferred" : "Experience in healthcare, Experience in healthtech", "workSiteFlexibility" : "Flexible", "rawDescription" : "1 in 4 people in the US have a treatable mental health condition, but most providers don't accept insurance, making therapy too expensive for most people. Headway’s mission is to fix this by building a new mental healthcare system everyone can access. We started by solving the biggest barrier to care: insurance. The admin work - credentialing, claims, payment reconciliation - is a nightmare. We've automated that. But we're going further. Over 75,000 providers across all 50 states run their practice on our software, serving over 1 million patients. We are building the best tools for therapists to run their entire practice, reimagining the experience of finding a therapist, and investing in the platform foundations to enable this at scale. We aren't just a billing layer; we are becoming the platform where care actually happens. We're a Series D company with $325M+ in funding (a16z, Accel, Spark Capital, etc.), looking for exceptional people to help us achieve this mission. We want your time here to be the most meaningful experience of your career. Join us, and help change mental healthcare for the better. ABOUT THE ROLE Headway handles sensitive health data for millions of patients — and that responsibility demands a security and compliance program that scales with the business. We're building out our dedicated GRC team to improve and mature our program! You'll join the Security team and work across four pillars: security certifications (HITRUST, SOC 2, PCI-DSS, HIPAA), third-party risk management, security awareness training, and technical risk management. You won't be maintaining a stale compliance program — you'll be building a modern, AI-enabled one at a company that's transforming how mental healthcare is delivered in the United States. This role reports to Blake Atkinson, Director of Security, and partners closely with Privacy and Engineering teams. WHAT YOU'LL OWN - Support HITRUST, SOC 2, PCI-DSS, and HIPAA audit readiness — collecting evidence, coordinating with assessors, tracking control gaps and remediation timelines. - Build and manage the vendor security assessment lifecycle — questionnaires, SOC 2/ISO reviews, risk scoring, and policy enforcement across procurement and renewals. - Stand up and run Headway's security awareness training program — onboarding modules, phishing simulations, annual compliance training, and completion tracking. - Operate the centralized risk register — identifying, assessing, and tracking technical security risks through mitigation, and surfacing risk-informed priorities to engineering and security leadership. - Partner cross-functionally with Privacy, Legal, IT, and Engineering to embed compliance into how Headway operates — not bolt it on after the fact. YOU'D BE A GREAT FIT IF… - You have 5+ years of experience in a GRC, compliance, or security risk role. - You have working knowledge of at least two of: HITRUST, SOC 2, PCI-DSS, or HIPAA. - You've used a GRC platform like Vanta, Drata, OneTrust, or similar to automate evidence collection or manage controls. - You communicate compliance requirements clearly to both technical and non-technical audiences. - You default to building repeatable processes over one-off heroics. - You're excited about using AI and modern tooling to scale compliance operations. - Bonus: you've worked in healthcare or healthtech and understand what HIPAA means in practice, not just in theory. WHY HEADWAY - Mission that matters — your work directly protects millions of patients accessing mental healthcare. - Real risk mitigation — this isn't checkbox compliance; the data you're protecting and the programs you're building have direct, tangible impact. - Forward-thinking healthtech — Headway is investing in AI-enabled security workflows and modern GRC tooling, not spreadsheet-driven compliance. - Build from scratch — you're standing up Headway's GRC function, not inheriting legacy processes. Compensation and Benefits: The expected base pay range for this position is $161,600 to 202,000 based on a variety of factors including qualifications, experience, and geographic location. In addition to base salary, this role may be eligible for an equity grant, depending on the position and level. We are committed to offering a comprehensive and competitive total rewards package, including robust health and wellness benefits, retirement savings, and meaningful ownership opportunities through equity. Compensation decisions are made holistically, ensuring fairness and alignment with market benchmarks while recognizing individual contributions and potential. - Benefits offered include: - Equity compensation - Medical, Dental, and Vision coverage - HSA / FSA - 401K - Work-from-Home Stipend - Therapy Reimbursement - 16-week parental leave for eligible employees - Carrot Fertility annual reimbursement and membership - 13 paid holidays each year as well as a Holiday Break during the week between December 25th and December 31st - Flexible PTO - Employee Assistance Program (EAP) - Training and professional development #LI-RJ1 We believe a team's strength is in its people, and we cannot achieve this mission without a team that reflects the diversity of this problem – across race, ethnicity, gender, sexuality, age, national origin, religion, family status, disability, military status, and experience. Headway is committed to the full inclusion of all qualified individuals. As part of this commitment, Headway will ensure that persons with disabilities are provided with reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or receive other benefits and privileges of employment, please inform the recruiter when they contact you to schedule your interview. Headway participates in E-Verify. To learn more, click here. https://www.e-verify.gov/sites/default/files/everify/posters/EVerifyParticipationPoster.pdf A notice to Headway applicants: To protect yourself against phishing and recruitment fraud, please note that Headway only accepts applications through our official careers page at https://headway.co/careers. Headway will never refer you to external websites, ask for payment or personal information, or conduct interviews via messaging apps. All official communication will come from a @findheadway.com http://findheadway.com email address. If you are contacted by someone claiming to be from Headway via an unofficial channel, please do not share any information and report it as spam.", "summaryDescription" : "Senior Governance, Risk, Compliance (GRC) Analyst at Headway. Skills: GRC, Compliance, Risk management, Security certifications. Support HITRUST audit readiness. Support SOC 2 audit readiness", "createdAt" : "2026-06-13T23:29:55.940", "lastUpdated" : "2026-06-15T03:35:07.808", "ingestTimestamp" : "2026-06-13T23:29:55.940", "mongoId" : "6a2c8b7c74d8ee00a0972f1d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 161600, "salaryAnnualMax" : 202000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Audit readiness", "Evidence collection", "Control gap tracking", "Remediation timelines", "Vendor security assessment", "Risk scoring", "Security awareness training", "Phishing simulations", "Completion tracking", "Centralized risk register", "Technical risk identification", "Technical risk assessment", "Technical risk tracking", "Technical risk mitigation", "GRC", "Compliance", "Risk management", "Security certifications", "Compliance management", "Security awareness", "Vendor assessment", "Control remediation", "Procurement", "Policy enforcement", "Risk identification", "Risk assessment", "Risk tracking", "Risk mitigation", "Process building", "AI tooling", "Repeatable processes", "HITRUST", "SOC 2", "PCI-DSS", "HIPAA", "Healthtech", "Mental healthcare", "GRC platform", "Vanta", "Drata", "OneTrust" ], "skillCount" : 41, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 983.0324, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Healthcare", "llmIndustryConfidence" : 0.95 }, { "id" : "69e1043f2beec4dd3def2439", "title" : "Security Compliance Specialist", "company" : "Amazon.com Services LLC", "industry" : "Project/Program/Product Management--Non-Tech, Security Industry Specialist, amazon security", "salary" : { "min" : 102000.0, "max" : 178400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Redmond, Washington, USA", "locations" : [ "Redmond, Washington, USA" ], "certifications" : [ "ISO 27001", "ISO 22301", "NIST 800-53", "ISO27701", "SOC 2" ], "timestamp" : "2026-06-15T08:48:17.799", "fingerprint" : "4cfa0774dc539bf16510dda6431b5aaf85e717ea2e5508397ccc7094e9fab52a", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10387892/apply", "externalId" : "8a05cac9-ca75-4b02-9418-31a2a84d182a", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" }, { "city" : "Redmond", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6694141,-122.1238767" } ], "locationText" : "Arlington, Virginia, United States; Redmond, Washington, United States", "employmentType" : "FULL_TIME", "professionalSkills" : [ "Governance Risk Compliance", "Risk management", "Compliance oversight", "Regulatory requirements", "Legal analysis", "Security assurance", "Privacy assurance", "Remediation strategies", "Control implementation", "Risk concepts" ], "hardSkillsList" : [ "Security controls", "Compliance gaps", "Remediation activities", "Audit remediation" ], "hardSkills" : [ { "name" : "Security controls", "level" : "intermediate" }, { "name" : "Compliance gaps", "level" : "intermediate" }, { "name" : "Remediation activities", "level" : "intermediate" }, { "name" : "Audit remediation", "level" : "intermediate" } ], "majorSkills" : "GRC, Security compliance, Risk assessment", "majorSkillsList" : [ "GRC", "Security compliance", "Risk assessment" ], "coreResponsibilities" : "Design scalable processes, Drive scalable processes, Ensure compliance, Build compliance certifications, Maintain compliance certifications, Identify security controls, Assess compliance gaps, Assess readiness, Develop remediation strategies, Drive remediation activities, Drive certifications, Drive assurance programs, Liaise with external auditors, Liaise with security teams, Articulate control implementation, Articulate control impact, Establish considerations, Apply security concepts, Apply risk concepts, Communicate to stakeholders, Communicate to leadership, Seek diverse opinions, Coordinate improvement, Work with engineering teams, Work with compliance teams, Work with security teams, Work with bizdev teams, Work with Legal teams, Identify compliance requirements, Identify regulatory requirements, Define compliance, Serve as advisor, Manage GRC requirements, Translate requirements, Solve problems, Implement action plans", "teamCollaboration" : "Business teams; Security teams; External auditors; Regulators; Engineering teams; Compliance teams; Bizdev teams; Legal teams", "domainKnowledge" : "LEO satellites; Broadband access; ISO 27001; ISO 22301; NIST 800-53; ISO27701; SOC 2; GDPR; CCPA; Export control laws", "domainList" : [ "leo-satellites", "broadband-access", "iso-27001", "iso-22301", "nist-800-53", "iso27701", "soc-2", "gdpr", "ccpa", "export-control-laws" ], "domainSpecificKnowledge" : [ "LEO satellites", "Broadband access", "ISO 27001", "ISO 22301", "NIST 800-53", "ISO27701", "SOC 2", "GDPR", "CCPA", "Export control laws" ], "toolProficiency" : [ "SAP GRC", "SAP Identity Management" ], "communicationSkills" : "Stakeholder communication; Leadership communication", "problemSolvingSkills" : "Day-to-day problem solving; Quick action plans; Effective action plans", "specialRequirements" : "U. S. citizen or national, U. S. permanent resident, Lawfully admitted into the U. S. as a refugee, Granted asylum", "qualificationsBasic" : "U. S. citizen or national, U. S. permanent resident, Lawfully admitted into the U. S. as a refugee, Granted asylum, Experience with PCI DSS, Experience with ISO 27001, Experience with HIPAA, Experience with NIST", "qualificationsPreferred" : "Experience with SAP GRC, Experience with SAP Identity Management, Experience with Single Sign ON, Experience with User life cycle management", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "We are open to hiring candidates to work out of one of the following locations: Arlington, VA, USA | Redmond, WA, USA Amazon Leo (previously known as Project Kuiper) is an initiative to increase global broadband access through a constellation of over 3,000 Low Earth Orbit (LEO) satellites. Its mission is to bring fast, affordable broadband to unserved and underserved communities worldwide. At Leo, we are obsessed with customer trust and are seeking an individual contributor who is creative, and passionate about delivering Governance, Risk and Compliance solutions to meet Leo's regulatory and external assurance needs. In this role, you will work collaboratively with various business and security teams across Amazon to identify compliance needs, assess the maturity of processes and controls, design, build, and execute high-impact security or compliance programs and liaise with external auditors and regulators. Export Control Requirement: Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum. Key job responsibilities - Design and drive scalable processes within a GRC (Governance, Risk, and Compliance) framework to ensure compliance with Leo's regulatory and contractual security and privacy requirements; - Building and maintaining compliance certifications such as ISO 27001, ISO 22301, NIST 800-53, ISO27701, SOC 2, GDPR, CCPA etc., identifying applicable security controls, assessing compliance gaps and readiness, developing remediation strategies, and driving remediation activities to completion; - Driving certifications and assurance programs by liaising with external auditors and other Amazon security teams, articulating control implementation and impact, and establishing considerations for applying security, and risk concepts to a highly technical and complex environment; - Communicating to key stakeholders and leadership on controls implementation, audit results, compliance program metrics, key risks and areas of program improvement, as well as, seek diverse opinions and coordinate improvement efforts; - Working closely with engineering, compliance, security, bizdev and Legal teams to identify future compliance and regulatory requirements and define compliance solutions; - Serving as an advisor on audit remediation issues; - Understand and manage cross-functional GRC requirements to translate them into GRC tool; and - Be comfortable with hands-on day-to-day problem solving and implementing quick and effective action plans to meet short- and long-term priorities. A day in the life Have you wanted an opportunity to secure an advanced satellite based broadband telecom service? The Leo Security team owns the security of product and operations of Leo end-to-end. We provide the necessary infrastructure and mechanisms to ensure the security of our satellite constellation and provide assurance to our customers and regulators on our security, privacy and resiliency programs. Our team drives the implementation of compliance programs, owns the collaboration with external auditors and regulators. You will work in a start-up like environment, backed by Amazon’s infrastructure to bootstrap security mechanisms, and help instill the security culture in the organization. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Experience with compliance & security standards including PCI DSS, ISO 27001, HIPAA, and NIST Preferred Qualifications: - Experience with GRC technology (SAP GRC Access Controls, Process Controls and Risk Management), SAP Identity Management to support Identity and Access Management (Single Sign ON, User life cycle management) Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Redmond - 102,000.00 - 178,400.00 USD annually", "summaryDescription" : "Security Compliance Specialist at Amazon.com Services LLC. Skills: GRC, Security compliance, Risk assessment. Design scalable processes. Drive scalable processes", "postedDate" : "2026-06-13T14:22:13.466", "createdAt" : "2026-06-13T14:22:13.466", "lastUpdated" : "2026-06-15T08:48:17.799", "ingestTimestamp" : "2026-06-13T14:22:13.466", "mongoId" : "69e1043f2beec4dd3def2439", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10387892/apply", "salaryAnnualMin" : 102000, "salaryAnnualMax" : 178400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security controls", "Compliance gaps", "Remediation activities", "Audit remediation", "GRC", "Security compliance", "Risk assessment", "Governance Risk Compliance", "Risk management", "Compliance oversight", "Regulatory requirements", "Legal analysis", "Security assurance", "Privacy assurance", "Remediation strategies", "Control implementation", "Risk concepts", "LEO satellites", "Broadband access", "ISO 27001", "ISO 22301", "NIST 800-53", "ISO27701", "SOC 2", "GDPR", "CCPA", "Export control laws", "SAP GRC", "SAP Identity Management" ], "skillCount" : 29, "jobCategory" : "project-management", "dataQualityScore" : 0.8888889, "_score" : 894.70154, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2a511874d8ee00a05f5507", "title" : "Security GRC Manager", "company" : "Humaans", "industry" : "Finance & Operations", "salary" : { "min" : 75000.0, "max" : 110000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager in the SaaS industry in London, UK, adjusted for seniority and company size." }, "location" : "London", "locations" : [ "London" ], "timestamp" : "2026-06-13T21:28:42.299", "fingerprint" : "feb205ad5809719d1182244285a010e99b2d08220f667054b7b9369ed694eed9", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/humaans/a39fe61e-a892-480e-ae67-4696aa7938bc/application", "externalId" : "a39fe61e-a892-480e-ae67-4696aa7938bc", "industryFunction" : { }, "structuredLocations" : [ { "city" : "London", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "51.5074456,-0.1277653" } ], "locationText" : "London, United Kingdom", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "professionalSkills" : [ "Risk management", "Compliance oversight", "Regulatory requirements", "Legal analysis" ], "hardSkillsList" : [ "Security compliance", "GRC", "Audit", "Information security", "Privacy operations", "Risk assessment", "Vendor management", "Access management", "Product development", "Customer data", "Enterprise sales processes" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Security compliance", "level" : "intermediate" }, { "name" : "GRC", "level" : "intermediate" }, { "name" : "Audit", "level" : "intermediate" }, { "name" : "Information security", "level" : "intermediate" }, { "name" : "Privacy operations", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Vendor management", "level" : "intermediate" }, { "name" : "Access management", "level" : "intermediate" }, { "name" : "Product development", "level" : "intermediate" }, { "name" : "Customer data", "level" : "intermediate" }, { "name" : "Enterprise sales processes", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Security compliance, GRC, Risk management, Customer trust", "majorSkillsList" : [ "Security compliance", "GRC", "Risk management", "Customer trust" ], "coreResponsibilities" : "Own security compliance programme end-to-end, Manage audit cycles throughout the year, Coordinate with external auditors, Coordinate with internal control owners, Coordinate with Engineering, Coordinate with People, Coordinate with Legal, Coordinate with Finance, Coordinate with Operations, Maintain controls, Maintain evidence, Maintain policies, Maintain risk register, Maintain access reviews, Maintain vendor reviews, Maintain business continuity processes, Maintain incident response documentation, Support customer-facing trust work, Support sales calls, Support security reviews, Support procurement processes, Support vendor questionnaires, Support RFPs, Support DPAs, Support subprocessors, Support data protection questions, Support enterprise diligence, Build AI-assisted systems for answering security questions, Translate compliance requirements into operational controls, Make clear, risk-based decisions, Raise maturity of security thinking, Raise maturity of privacy thinking, Raise maturity of risk thinking, Raise maturity of customer trust thinking, Run security compliance programme throughout the year, Keep evidence organised, Keep controls running, Keep policies up to date, Keep vendors reviewed, Keep risks visible, Keep audits moving smoothly, Support Sales on security questions, Support Customer Success on security questions, Support Sales on compliance questions, Support Customer Success on compliance questions, Complete vendor security questionnaires, Maintain reusable trust materials, Ensure enterprise buyers get accurate answers, Ensure enterprise buyers get fast answers, Ensure enterprise buyers get confidence-building answers", "teamCollaboration" : "Cross-functional teams; Sales and Customer Success; Product and Engineering; Revenue and Operations; External auditors; Internal control owners", "projectManagementSkills" : [ "Audit cycles", "Risk register", "Business continuity processes", "Incident response documentation" ], "domainKnowledge" : "ISO 27001; SOC 1; SOC 2; HIPAA; GDPR; Cloud infrastructure; Customer data; Enterprise sales processes; HR tech; Fintech; Healthtech", "domainList" : [ "iso-27001", "soc-1", "soc-2", "hipaa", "gdpr", "cloud-infrastructure", "customer-data", "enterprise-sales-processes", "hr-tech", "fintech", "healthtech" ], "domainSpecificKnowledge" : [ "ISO 27001", "SOC 1", "SOC 2", "HIPAA", "GDPR", "Cloud infrastructure", "Customer data", "Enterprise sales processes", "HR tech", "Fintech", "Healthtech" ], "communicationSkills" : "Written communication; Sales calls; Security reviews; Questionnaire responses; Audit narratives; Internal guidance", "documentationSkills" : "Policies; Evidence; Controls; Risk register; Vendor reviews; Business continuity processes; Incident response documentation; Trust collateral", "problemSolvingSkills" : "Risk-based decisions; Cutting through noise", "outcomesObjectives" : "Scale into more demanding markets; Win larger customers", "qualificationsBasic" : "4+ years experience in security compliance, GRC, trust, audit, information security, privacy operations, Run or supported audits for frameworks such as SOC 2, ISO 27001, SOC 1, HIPAA, GDPR, Used AI in security or compliance work, Understand how modern B2B SaaS companies work, Comfortable being customer-facing, Strong written communication, Organised and detail-oriented, Pragmatic, Able to work across teams", "qualificationsPreferred" : "Experience in HR tech, fintech, healthtech, infrastructure, Experience with security compliance", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "ABOUT US Humaans is building the next generation of infrastructure for the workplace; software designed for companies that are scaling fast, operating globally, and pushing into new boundaries. What started as a system of record has evolved into a broader platform for operating people globally. With Athena, our agentic AI layer, Humaans moves beyond data management into intelligent orchestration, connecting workflows across HR, IT, Finance, and Operations so organisations can act faster and with greater confidence, redefining how work gets done. We work with ambitious teams across Europe and the US, from AI-native companies like Lovable, Poolside, Fyxer AI, and Tandem Health, to established, high-growth organisations scaling internationally and through acquisition, including Quantexa, Sellpy, Manychat, Gigs, Croud, and Threecolts. These teams don’t buy software for features,they buy leverage. The ability to run faster, cleaner, and with more control as complexity compounds. To date, we’ve raised $20m in venture funding from some of the most respected founders, operators, and funds in technology: Lachy Groom (Physical Intelligence), Stewart Butterfield (Slack), Tobias Lütke (Shopify), Dylan Field (Figma), Jeff Weiner (LinkedIn), Claire Johnson (Stripe), Oliver Jay (OpenAI), Jay Simmons (Bond) as well as Y Combinator, Moonfire, Frontline Ventures, Pathlight Ventures, and Exor. If you have massive ambition and want to work on a hard problem, with a small team that moves fast, at a moment when the category is genuinely up for grabs - this is it. We're looking for a Security GRC Manager - Trust and Compliance, to own the systems, processes, audits, and customer-facing trust work that help Humaans scale into more demanding markets. This is a hands-on ownership role, built around AI. You'll run our security compliance programme throughout the year, not just during audit season. AI is how the work gets done here. It drafts policies, speeds up questionnaire responses, and keeps evidence current. You already use these tools daily and know how to get real leverage from them. You'll own the operating rhythm for frameworks like ISO 27001, SOC 1, SOC 2, HIPAA and future standards that matter to our customers. You'll keep evidence organised, controls running, policies up to date, vendors reviewed, risks visible, and audits moving smoothly. You'll also be close to revenue. You'll support Sales and Customer Success on security and compliance questions, help complete vendor security questionnaires, maintain reusable trust materials, and make sure enterprise buyers get accurate, fast, confidence-building answers. This role sits at the intersection of Security, Legal, Product, Engineering, Revenue, and Operations. You don't need to be the person configuring every system yourself, but you do need to understand how modern SaaS companies operate, ask sharp questions, drive action across teams, and keep the bar high. Focus / Ownership You'll own Humaans' security compliance programme end-to-end, including ISO, SOC 1, SOC 2, HIPAA and future frameworks we choose to pursue. You'll manage audit cycles throughout the year, coordinating with external auditors, internal control owners, Engineering, People, Legal, Finance and Operations. You'll maintain the controls, evidence, policies, risk register, access reviews, vendor reviews, business continuity processes, and incident response documentation that support our certifications and customer commitments. AI drafts and updates these artefacts and keeps evidence current year-round, not only at audit time. You'll support customer-facing trust work, including sales calls, security reviews, procurement processes, vendor questionnaires, RFPs, DPAs, subprocessors, data protection questions, and enterprise diligence. You'll build AI-assisted systems for answering repeated security questions quickly and accurately. The answer bank drafts responses. Trust collateral stays current. A review process holds quality as volume scales. You'll work with Product and Engineering to translate compliance requirements into practical operational controls without slowing the company down unnecessarily. You'll help the company make clear, risk-based decisions, escalating when something matters and cutting through noise when it doesn't. You'll raise the maturity of how Humaans thinks about security, privacy, risk, and customer trust as we move upmarket. Requirements You have 4+ years of experience in security compliance, GRC, trust, audit, information security, privacy operations, or a closely related role. You've run or supported audits for frameworks such as SOC 2, ISO 27001, SOC 1, HIPAA, GDPR, or similar. You've used AI in security or compliance work and can speak to what you built and the outcome. Think drafting policies, speeding up questionnaire responses, or reviewing vendor documentation. You understand how modern B2B SaaS companies work, including cloud infrastructure, access management, vendor management, product development, customer data, and enterprise sales processes. You're comfortable being customer-facing. You can join a sales call, answer security questions clearly, and give buyers confidence. You're strong at written communication. You can produce crisp policies, questionnaire responses, audit narratives, and internal guidance that people actually understand. You're organised and detail-oriented. You can keep evidence, control owners, audit timelines, and customer commitments moving without dropping things. You're pragmatic. You know the difference between meaningful risk reduction and compliance theatre. You can work across teams and hold a high bar without becoming a blocker. You're excited by a high-growth, high-ownership environment where the playbook is still being written. Nice to have Experience in HR tech, fintech, healthtech, infrastructure, or another category where customer data and enterprise trust are central. Experience with security compliance platforms such as Vanta, Drata, Secureframe, Sprinto or similar. Experience reviewing DPAs, subprocessors, data residency questions, privacy documentation, and vendor contracts in partnership with Legal. Familiarity with US healthcare or HIPAA requirements. Experience building a trust centre, customer-facing security portal, or security questionnaire answer library. Experience supporting enterprise sales, procurement, RFPs, or security reviews. What success looks like Within your first 90 days, you'll understand our current compliance posture, audit calendar, control owners, customer trust materials, and major gaps. Within six months, you'll have improved the operating rhythm of our compliance programme, reduced friction in sales security reviews, and made audits feel more predictable. Within twelve months, Humaans will have a more scalable trust function: stronger evidence, better controls, faster questionnaire turnaround, clearer ownership, and a security compliance programme that helps us win larger customers. This is an in-person role. Our team comes together in the office Monday through Thursday, while most of the team collaborates in person on Mondays, Tuesdays, and Thursdays. PACKAGE & BENEFITS Early stage startups can be messy – we know that. We're putting effort in providing you with the best employee experience and a quality driven environment in exchange for trusting us. - Market-leading compensation that reflects your value - 25 days paid time off each year plus public holidays - Share Options with 5-year exercise window so you don’t feel pressure to exercise if you leave - Free Thursday lunches at HQ, quarterly team events, and company offsites. - Top tier private coverage for health, vision and dental care - A new MacBook and tools you need to do your best work - Enhanced parental leave with up to 16 weeks for primary and 4 weeks for secondary - Learning & development budget WHY JOIN HUMAANS TODAY? HR tech is having its AI moment and we’re positioned to own it. Humaans started as a next-gen HRIS taking on large incumbents in a massive market. We’ve since evolved into something even bigger: an AI platform that sits across workforce data and automates the operational layer of HR entirely; the natural progression of what we’ve been building toward. The product is highly differentiated. It’s built around a structured workforce data model that makes AI reliable in an HR context, something no one else has gotten right. Customers notice the difference immediately. We’re backed by Y Combinator, Lachy Groom, Moonfire, Frontline Ventures, and operators who’ve built some of the most consequential software companies of the last decade: the founders of Slack, Figma, and Shopify, and Asana’s former CRO and Head of OpenAI International. We’re a small team with an unapologetically high bar. It shows up in the product, in how we communicate, and in the standards we hold each other to. OUR COMMITMENT TO DIVERSITY At Humaans we’re looking for genuinely good people that are transparent and emphatic. We’re committed to providing equal opportunities, a diverse and inclusive work environment, and ensuring a fair interview process for everyone. You’re welcome to apply no matter your gender, ethnicity, sexual orientation, religion, civil or family status, age, disability, or race. PRIVACY NOTICE We care about your privacy. When you apply for a role at Humaans, we’ll collect and process your personal data as part of our recruitment process. This includes things like your CV, contact details, and any other information you choose to share. We may also contact you about future opportunities. You can ask us to delete your data at any time. For more details, see our Privacy Policy https://humaans.io/privacy#h.k3wp7f8qzl9x.", "summaryDescription" : "Security GRC Manager at Humaans. Skills: Security compliance, GRC, Risk management, Customer trust. Own security compliance programme end-to-end. Manage audit cycles throughout the year", "postedDate" : "2026-06-11T16:27:51.883", "createdAt" : "2026-06-11T16:27:51.883", "lastUpdated" : "2026-06-13T21:28:42.299", "ingestTimestamp" : "2026-06-11T16:27:51.883", "mongoId" : "6a2a511874d8ee00a05f5507", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Security compliance", "GRC", "Audit", "Information security", "Privacy operations", "Risk assessment", "Vendor management", "Access management", "Product development", "Customer data", "Enterprise sales processes", "Leadership", "Risk management", "Customer trust", "Compliance oversight", "Regulatory requirements", "Legal analysis", "Audit cycles", "Risk register", "Business continuity processes", "Incident response documentation", "ISO 27001", "SOC 1", "SOC 2", "HIPAA", "GDPR", "Cloud infrastructure", "HR tech", "Fintech", "Healthtech" ], "skillCount" : 30, "jobCategory" : "finance", "jobSubcategory" : "finance-&-operations", "dataQualityScore" : 1.0, "_score" : 892.4572, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2ca3b474d8ee00a09acfed", "title" : "Information Security Governance, Risk and Compliance Specialist", "company" : "GWI", "industry" : "Technology", "salary" : { "min" : 65000.0, "max" : 95000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Information Security Governance, Risk and Compliance Specialist in London, UK, adjusted for mid-seniority level in the technology industry." }, "location" : "London, UK", "locations" : [ "London", "UK" ], "certifications" : [ "ISO 27001" ], "timestamp" : "2026-06-16T01:21:58.151", "fingerprint" : "cd07cf418edbf652c929a8e53d688e074fbcb54e0e59e9dd5d49e6244eee6ace", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/globalwebindex/jobs/8548407002", "externalId" : "8548407002", "industryFunction" : { }, "structuredLocations" : [ { "city" : "London", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "51.5074456,-0.1277653" } ], "locationText" : "London, United Kingdom", "employmentType" : "FULL_TIME", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Mid-Senior", "professionalSkills" : [ "Risk management", "Compliance oversight", "Legal analysis", "Vendor risk management", "Client security assessments", "Security awareness training" ], "hardSkillsList" : [ "ISO 27001", "NIST frameworks", "Security policies", "Security procedures", "Cloud security" ], "hardSkills" : [ { "name" : "ISO 27001", "level" : "intermediate" }, { "name" : "NIST frameworks", "level" : "intermediate" }, { "name" : "Security policies", "level" : "intermediate" }, { "name" : "Security procedures", "level" : "intermediate" }, { "name" : "Cloud security", "level" : "intermediate" } ], "majorSkills" : "Information Security GRC, Compliance posture, Vendor risk management, Client security", "majorSkillsList" : [ "Information Security GRC", "Compliance posture", "Vendor risk management", "Client security" ], "coreResponsibilities" : "Own and maintain ISO 27001 certification, Maintain compliance across security frameworks, Develop information security policies, Implement information security policies, Maintain information security policies, Develop security procedures, Implement security procedures, Maintain security procedures, Lead vendor risk management, Lead client security assessments, Respond to client security questionnaires, Manage client onboarding requirements, Build security trust portal, Maintain security trust portal, Drive security awareness, Promote GRC culture", "teamCollaboration" : "Information Security teams; Product teams; Technology teams; Legal team", "domainKnowledge" : "Information security frameworks; SaaS environments; AI environments; Cloud security best practices", "domainList" : [ "information-security-frameworks", "saas-environments", "ai-environments", "cloud-security-best-practices" ], "domainSpecificKnowledge" : [ "Information security frameworks", "SaaS environments", "AI environments", "Cloud security best practices" ], "toolProficiency" : [ "Drata", "Vanta" ], "communicationSkills" : "Translate GRC topics; Internal guidance; Keep business informed", "continuousLearning" : "Accredited learning; Leadership development", "qualificationsBasic" : "3-5 years in information security compliance role, Develop and maintain security policies, Conduct vendor security assessments, Manage client security onboarding requirements, Implement and manage cloud security best practices", "qualificationsPreferred" : "Familiarity with Drata or Vanta, ISO 27001 certification", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Location: London, UK Weekly office requirement: Hybrid – 2 days per week Employment type: Permanent Seniority level: Mid-Senior At GWI we're always looking for extraordinary people who thrive on making an extraordinary impact. Right now we're looking for an Information Security GRC Specialist to play a key role in our Legal team in London. If that's you, and making a difference gets you out of bed in the morning, keep reading. It could be the start of something, well, extraordinary. Sounds great, what will I be doing? \uD83E\uDD14 As our Information Security GRC Specialist you'll play a pivotal role in shaping the future of security compliance at GWI. Reporting into our General Counsel and working closely with our Information Security, Product, and Technology teams, you'll own our compliance posture across security frameworks, vendor risk, and client-facing security requirements — while building a security-conscious culture across the business. A few things you'll be responsible for: \uD83D\uDC49 Own and maintain GWI's ISO 27001 certification and compliance across relevant security frameworks, keeping our posture sharp as the threat landscape evolves. \uD83D\uDC49 Develop, implement, and maintain information security policies and procedures aligned with industry best practices. \uD83D\uDC49 Lead vendor risk management and client security assessments — including responding to client security questionnaires and onboarding requirements. \uD83D\uDC49 Build and maintain GWI's security trust portal, showcasing our credentials to clients and stakeholders using tools such as Drata or Vanta. \uD83D\uDC49 Drive security awareness across the business through training programmes and internal communications that promote a strong GRC culture. It's also fun; shaking things up is what working for GWI is all about. You'll need to be flexible, comfortable with continuous change, and working in a high-tempo environment. What do I need to bring with me? \uD83E\uDDF3 You'll need to be able to demonstrate the core skills this role requires. You don't have to tick all the boxes right away; the important thing is that you're willing to learn. Here's what the team will be looking for in you: \uD83D\uDC49 In-depth, practical experience obtaining and maintaining ISO 27001 certification, with solid knowledge of frameworks such as NIST — typically 3–5 years in an information security compliance role, though other experience levels will be considered. \uD83D\uDC49 Proven ability to develop and maintain security policies and procedures that align with industry best practice. \uD83D\uDC49 Experience conducting vendor security assessments and managing client security onboarding requirements, balancing risk against commercial objectives. \uD83D\uDC49 Hands-on experience building or maintaining a security trust portal; familiarity with tools such as Drata or Vanta is a plus. \uD83D\uDC49 Knowledge of SaaS and AI environments, with experience implementing and managing cloud security best practices. \uD83D\uDC49 Strong communication skills — able to translate complex GRC topics into clear internal guidance and keep the wider business informed and engaged on security matters. Equally important is attitude. We want people who think big (to make an impact), ask why (to find a better way), and show respect (to everyone, at every level, all the time). Those are our values, and they're a big part of what we're looking for in you. What We Offer \uD83E\uDDD8 At GWI, you’ll find meaningful work, visible impact, and a culture that empowers you to do your best. Our package includes: Time to recharge – 25 days’ annual leave, plus office closures over the holidays. Health & wellbeing – Health cash plan, enhanced family benefits, carer days, and mental health support. Financial benefits – Competitive salary, 4% pension matching, and recognition programs that celebrate success. Flexibility & balance – Flexitime, early Friday finishes, hybrid and remote options, plus a “work from home” budget. Career growth – Accredited learning, leadership development, and global career mobility. Community & impact – DE&I initiatives, volunteering opportunities, donation matching, and payroll giving. Put all that together and GWI is the friendliest, most fulfilling place any of us has ever worked. Diversity, Equity & Inclusion \uD83E\uDEF6 Diversity is fundamental to who we are—both as a data company and as a workplace. Our data reflects global realities, and so must our teams. We strive to ensure our workforce is as diverse and inclusive as the insights we provide to our clients. As a Disability Confident employer, we welcome applications from disabled candidates and are committed to providing all necessary adjustments during the hiring process. We also actively encourage applications from underrepresented and marginalized communities. At GWI, you will find a place where you can contribute meaningfully, grow professionally, and belong fully. #li-hybrid #LI-NIKOSSS1", "summaryDescription" : "Information Security Governance, Risk and Compliance Specialist at GWI. Skills: Information Security GRC, Compliance posture, Vendor risk management, Client security. Own and maintain ISO 27001 certification. Maintain compliance across security frameworks", "postedDate" : "2026-06-14T20:48:06.082", "createdAt" : "2026-06-14T20:48:06.082", "lastUpdated" : "2026-06-16T01:21:58.151", "ingestTimestamp" : "2026-06-14T20:48:06.082", "mongoId" : "6a2ca3b474d8ee00a09acfed", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "ISO 27001", "NIST frameworks", "Security policies", "Security procedures", "Cloud security", "Information Security GRC", "Compliance posture", "Vendor risk management", "Client security", "Risk management", "Compliance oversight", "Legal analysis", "Client security assessments", "Security awareness training", "Information security frameworks", "SaaS environments", "AI environments", "Cloud security best practices", "Drata", "Vanta" ], "skillCount" : 20, "jobCategory" : "operations", "jobSubcategory" : "legal", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 876.98596, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c7e8674d8ee00a0952bbc", "title" : "Governance, Risk, and Compliance (GRC) Analyst", "company" : "EdgeConneX", "salary" : { "min" : 135000.0, "max" : 185000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior GRC Analyst in Herndon, United States, adjusted for the technology industry and company size." }, "location" : "Herndon, VA", "locations" : [ "Herndon", "VA" ], "timestamp" : "2026-06-16T04:29:00.261", "fingerprint" : "d005f357a10689db20da4aded1abdef1f9f833fa574ba9afc02721626fae2697", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.edgeconnex.com/company/careers/?gh_jid=5080372007", "externalId" : "5080372007", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Herndon", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9695316,-77.3859479" } ], "locationText" : "Herndon, Virginia, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "rawDescription" : "Led by an experienced management team and supported by a strong investor group, including large and experienced institutions and strategic partners, EdgeConneX offers a dynamic, fast-paced work environment where we are bringing flexibility, proximity, power, and connectivity to some of the world’s key businesses. With major offices in Herndon, Denver, and Amsterdam, we have a global footprint and a unified team of employees committed to providing a premier customer experience and delivering the full spectrum of data center solutions, from core to edge, like no other data center provider can do. Focused on driving innovation and helping our customers define and deliver their own unique vision for the Edge, at any scale, in any market worldwide, for any requirement, we are building tomorrow’s data center infrastructure, today for some of the world’s most demanding Network, Content, and Cloud customers. We are seeking a highly motivated and experienced Governance, Risk, and Compliance (GRC) Analyst to join our team. The ideal candidate will have at least five years of experience in GRC or IT risk, a bachelor’s degree or higher in a related field, and professional certifications in GRC or cybersecurity. As a GRC Analyst, you will play a pivotal role in ensuring our organization adheres to regulatory requirements, manage risks effectively, and maintain robust governance practices for industry standards, frameworks and international data protection law. Responsibilities: Develop, implement, and maintain governance, risk, and compliance frameworks, policies, standards and procedures. Conduct risk assessments and analyze potential threats to the organization’s information systems and business operations. Monitor compliance with internal policies and external regulatory requirements (e.g., NIS2, DORA, ISO27001, AICPA Trust Principles, NIST, CIS, GDPR, SOX, HIPAA). Track changes to regional data protection law in the regions where EdgeConneX operates (APAC, EU, North America and South America) Collaborate with cross-functional teams to identify, assess, and mitigate risks across the organization. Maintain risk registers, compliance metrics, and reporting dashboards Support third-party risk management and vendor security assessments Prepare and present regular reports on risk management activities, compliance status, and remediation efforts to management. Support internal and external audits, including gathering documentation and facilitating audit processes. Stay up to date with changes in relevant laws, regulations, and industry best practices. Assist in the development and delivery of training programs related to governance, risk, and compliance topics. Contribute to continuous improvement of GRC processes and tooling Required education & experience: Bachelor’s degree or higher in Information Security, Computer Science, Business Administration, or a related field. Minimum of 5 years of professional experience in governance, risk, and compliance or a related discipline. Professional certifications such as CISA, CRISC, CISSP, CISM, ISO27001LA or similar are required. Strong understanding of regulatory requirements and frameworks (e.g., ISO 27001, NIST, PCI DSS). Risk assessment methodologies and control testing Excellent analytical and problem-solving skills. Strong communication and interpersonal skills, with the ability to work collaboratively across departments. Experience with: Policy development and lifecycle management Third-party/vendor risk assessments GRC tools and risk management platforms (e.g., DRATA, VANTA, Archer, OneTrust) Detail-oriented and highly organized, with a proactive approach to identifying and managing risks. Preferred experience: Experience with GRC software platforms and tools. Project management experience or certification. Experience in a regulated industry (e.g., datacenter, finance, technology). Ability to train and mentor junior staff. EdgeConneX believes inclusion – of thought, backgrounds and experiences – affects all that we do, from our employees to the solutions we deliver. Our goal is to create an environment where embracing differences helps deepen the lives and work experience of our employees, enhances our innovation and creativity, and enriches our involvement in our communities. EdgeConneX is an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin or ancestry, physical or mental disability, as well as any other category protected by applicable federal, state, or local laws. EdgeConneX offers a competitive benefits package. For more information on how we process your data, visit our Data Privacy Policy here.", "summaryDescription" : "Governance, Risk, and Compliance (GRC) Analyst at EdgeConneX", "postedDate" : "2026-06-14T19:20:42.250", "createdAt" : "2026-06-14T19:20:42.250", "lastUpdated" : "2026-06-16T04:29:00.261", "ingestTimestamp" : "2026-06-14T19:20:42.250", "mongoId" : "6a2c7e8674d8ee00a0952bbc", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 135000, "salaryAnnualMax" : 185000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 854.38196, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cafe274d8ee00a09d81bb", "title" : "Compliance Engineer", "company" : "TRM Labs", "industry" : "R&D", "salary" : { "min" : 150000.0, "max" : 220000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Compliance Engineer in the Technology industry in North America, adjusted for company size and seniority." }, "location" : "North America", "locations" : [ "North America" ], "certifications" : [ "CISSP", "CISM" ], "timestamp" : "2026-06-15T09:07:47.324", "fingerprint" : "aaa44c06385f19d3271faabf1e43f3da5f51638b487a41af2e42cbf2c239c665", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/trm-labs/50b1091e-6697-4452-a70c-b38c400f70a4/application", "externalId" : "50b1091e-6697-4452-a70c-b38c400f70a4", "industryFunction" : { }, "structuredLocations" : [ { "continent" : "na", "workMode" : "onsite" } ], "locationText" : "", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Python, Scripting languages", "professionalSkills" : [ "Risk assessment", "Due diligence", "Vendor risk management" ], "hardSkillsList" : [ "Control validation", "Evidence collection", "Gap analysis", "Risk registry management" ], "hardSkills" : [ { "name" : "Control validation", "level" : "intermediate" }, { "name" : "Evidence collection", "level" : "intermediate" }, { "name" : "Gap analysis", "level" : "intermediate" }, { "name" : "Risk registry management", "level" : "intermediate" } ], "majorSkills" : "Compliance, GRC, Security certifications", "majorSkillsList" : [ "Compliance", "GRC", "Security certifications" ], "coreResponsibilities" : "Develop scalable processes for controls, Develop tools for controls, Normalize controls, Collect audit evidence, Monitor controls, Conduct gap analyses, Manage compliance lifecycle, Prioritize compliance needs, Operationalize GRC program, Maintain regulatory certifications, Manage customer due diligence, Develop security collateral, Conduct enterprise risk assessments, Manage risk registry, Develop vendor risk program, Identify areas for improvement, Anticipate customer needs", "teamCollaboration" : "Globally distributed team; Cross-functional teams; Business alignment", "projectManagementSkills" : [ "Agile" ], "domainKnowledge" : "NIST 800-53; SOC 2; CMMC; ISO; CyberEssentials UK; Public Sector compliance; Privacy by Design; GDPR", "domainList" : [ "nist-800-53", "soc-2", "cmmc", "iso", "cyberessentials-uk", "public-sector-compliance", "privacy-by-design", "gdpr" ], "domainSpecificKnowledge" : [ "NIST 800-53", "SOC 2", "CMMC", "ISO", "CyberEssentials UK", "Public Sector compliance", "Privacy by Design", "GDPR" ], "toolProficiency" : [ "Drata" ], "documentationSkills" : "Security collateral", "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "Python or scripting languages required, Experience with cloud-first SaaS audit", "qualificationsPreferred" : "Privacy and GDPR experience a plus, Security certifications a plus", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "BUILD A SAFER WORLD. TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM's platforms enable investigators to trace illicit activity, build cases, and construct operating pictures of threat networks. Leading agencies and businesses worldwide rely on TRM to make the world safer and more secure. The Security Team is responsible for and committed to securing all things at TRM. From our customers to our code, and everything in between, the security team is involved in all aspects of the business. We are looking for a Senior Compliance Engineer to own TRM’s compliance and GRC initiatives that ensure we continue to deliver best-in-class security and trust for our customers. - The impact you will have here: - Develop scalable and sustainable processes and tools for normalized controls, collecting audit evidence, monitoring controls, and conducting gap analyses. - Manage TRM’s existing security compliance and certification lifecycle (e.g., SOC 2 Type II, ISO 27001/27701, FedRAMP, CMMC) while planning for and prioritizing future compliance needs. - Operationalize the GRC program to maintain our regulatory certifications. - Manage customer due diligence requests including developing and maintaining security collateral for customers (e.g., SIG, CAIQ). - Conduct enterprise risk assessments and manage the risk registry. - Develop a vendor risk management program. - Identify areas for improvement based on input from customers, the go-to-market teams, and overall business objectives. Anticipate customer needs with respect to compliance and due diligence. What we’re looking for: - Develop automation to programmatically implement controls validations and evidence collections. Experience with Python or other programming and scripting languages is required. - Work to align advanced technologies and Privacy by Design principles from the first stages of development and ensure that the data use meets established regulatory compliance needs. - Strong understanding of Public Sector compliance security standards including NIST 800-53, SOC 2, CMMC, ISO, CyberEssentials UK, and other common compliance frameworks. - Experience with leading a cloud-first SaaS company through the audit procesess. - Strong focus on normalizing controls across frameworks and standards, with an eye toward improving maturity, scalability, and consistency over time, while looking beyond just “checking the box”. - Privacy and GDPR experience is a plus. - Security certifications (e.g., CISSP, CISM) are a plus. Team Characteristics: - Remote first, globally distributed team - Strong ownership and accountability - Strong technical expertise, previous software development background preferred - Open, honest, and timely information sharing - Willingness to help each other succeed - Healthy debate without personal conflict - Shared problem-solving About the Team - The culture of our team is built on mutual respect, where everyone's opinion is valued and heard. - We prioritize flexibility and efficiency, always seeking smarter ways to work without compromising quality. - Transparency is at the heart of how we operate, both within the team and with the business, as we focus on clearly communicating and addressing cyber risks. - Our collaborative approach ensures that we not only mitigate these risks but also align our efforts with business goals to protect and drive success. Time Zones: - Eastern Standard Time (EST - GMT-4) - Pacific Standard Time (PST - GMT-7) - Central European Summer Time (CET - GMT+2) Learn about TRM Speed in this position: - Automate Repetitive Compliance Checks - Manually verifying compliance across systems or reviewing logs can be time-intensive. At TRM, we build custom integrations through scripts, SOAR platforms, or compliance management software (e.g. Drata) to automate routine tasks like generating compliance reports, tracking or collecting audit evidence, and monitoring control effectiveness. - Build and leverage APIs for Cross-System Data Integration - Gathering compliance data from multiple systems can lead to delays and data silos. At TRM, we build and leverage automation and API's to pull real-time compliance data from critical systems into a centralized GRC tool or dashboard. - Shift Left in Compliance - Detecting non-compliance late in a project lifecycle often requires rework and delays. At TRM, we embed compliance checks early in the development lifecycle. We integrate security and compliance standards directly into CI/CD pipelines to flag issues before they reach production. The following represents the expected range of compensation for this role: - The estimated base salary range for this role is $200,000-$220,000. - Additionally, this role may be eligible to participate in TRM’s equity plan. - Please note – we factor in the different costs for geographies outside the United States. LIFE AT TRM We are building a safer world. That promise shows up in how we work every day. TRM moves quickly. We are a high velocity, high ownership team that expects clarity, follow-through, and impact. People who thrive here are energized by hard problems, experimentation, and continuous feedback. If something takes months elsewhere, it will ship here in days. Our work sits at the intersection of AI, national security, and fighting crime. The problems are complex, the stakes are real, and the environment evolves quickly. The pace and intensity of the work reflect the importance of the mission. As a result, the way we operate requires a high level of ownership, adaptability, collaboration, and creative problem-solving. At TRM, you should expect: - Priorities and targets to change quickly as we experiment and iterate - Work that often requires operating with a high degree of ambiguity - A high level of personal ownership and accountability - Close collaboration across teams and functions - Frequent, high-touch communication - Creative problem solving and out-of-the-box thinking - A pace that rewards urgency, adaptability, and outcomes This environment is energizing for people who enjoy building, solving hard problems, and making progress in situations that are not always fully defined. It also requires comfort navigating ambiguity, adjusting course as new information emerges, and maintaining focus and positivity in a fast-moving and intense environment. We also recognize that this style of operating is not for everyone. If you are primarily optimizing for predictability or a consistently balanced workload, we encourage you to use the interview process to pressure test whether this environment is truly the right fit. We want teammates who thrive here, not just survive here. At the same time, many people find this work deeply rewarding. If you are excited by meaningful problems, motivated by ambitious goals, and energized by working alongside mission-driven colleagues, there is a good chance you will find TRM to be an exceptional place to grow and contribute. Learn more: Interviewing at TRM: How We Hire and What Success Looks Like https://www.trmlabs.com/resources/blog/interviewing-at-trm-how-we-hire-and-what-success-looks-like AI FLUENCY AT TRM AI fluency is a baseline expectation at TRM. We believe AI meaningfully changes how top performers operate. We expect every team member to use AI to accelerate and reimagine their craft, not just automate surface tasks. At TRM, AI fluency means you are among the top 10 percent of operators in your function in how you apply AI to: - Accelerate repeatable workflows - Structure and solve problems - Improve output quality - Increase speed and leverage You will be evaluated on applied AI fluency during the interview process. LEADERSHIP PRINCIPLES We hire and grow against three leadership principles. They’re the standards for how we operate, treat each other, and make decisions. - Impact-Oriented Trailblazer: We put customers first and move with speed, focus, and adaptability. We treat every plan like an experiment – test, ship, measure, and iterate quickly. - Master Craftsperson: We care deeply about our craft. We balance speed with high standards, own outcomes end‑to‑end, and invest in getting better everyday. - Inspiring Colleague: We add clarity and energy, not noise. We bring humility, candor, and a one‑team mindset — giving and receiving feedback to make the team stronger. JOIN OUR MISSION At TRM we care deeply about our craft. We are looking for individuals who want their work to matter, who experiment with speed and rigor, and who take pride in building a safer world for billions of people. If you’re excited by TRM’s mission but don’t check every box, we encourage you to apply — we hire for slope, judgment, and the will to learn fast. TRM is a Series C company with $220M in total funding, backed by Blockchain Capital, Goldman Sachs, Bessemer, Y Combinator, Thoma Bravo, and others. Headquartered in San Francisco, TRM operates as a distributed-first company with hubs in Los Angeles, San Francisco, New York, Washington D.C., London, and Singapore. PRIVACY POLICY AND ADDITIONAL INFORMATION By submitting your application, you agree to allow TRM Labs to process your personal information in accordance with our Privacy Policy https://www.trmlabs.com/policies/privacy-policy. We collect the information you provide (such as your resume, work history, and contact details) solely for the purpose of evaluating your candidacy for current and future roles at TRM. Because our hiring cycles for certain positions may span 24 to 36 months, we retain your personal information for up to 36 months from the date of your application. After that period, your data is deleted unless a different retention period is required or permitted by law. If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with applicable data protection laws, you have the right to access, correct, or request deletion of your personal data at any time before that period ends. To exercise any of these rights, contact us at privacy@trmlabs.com. To notify TRM Labs that you believe this job posting is non-compliant, please submit a report through this form https://docs.google.com/forms/d/e/1FAIpQLSc6e8jRCl2cQwgIzXLpIGQXtwvMQh__TcokvO2toAAkT44A6Q/viewform?usp=dialog. No response will be provided to inquiries unrelated to job posting compliance. The use of AI tools of any kind (including but not limited to notetakers, interview assistants, and real-time coaching tools such as Otter.ai, Fireflies, Fathom, Cluey, or similar) during TRM interviews is not permitted without prior approval from TRM. TRM uses its own internal tools for note-taking to ensure a consistent and confidential experience for all candidates. We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made via this form https://docs.google.com/forms/d/e/1FAIpQLSevmAzPxWOYm_7kMHb9lEJlX3tpdBeHvvvNWjsI_6xhUfnXjw/viewform?usp=dialog. RECRUITMENT AGENCIES TRM Labs does not accept unsolicited agency resumes. Please do not forward resumes to TRM employees. TRM Labs is not responsible for any fees related to unsolicited resumes and will not pay fees to any third-party agency or company without a signed agreement. LEARN MORE: COMPANY VALUES https://www.trmlabs.com/culture | INTERVIEWING https://www.trmlabs.com/interviewing | FAQS https://www.trmlabs.com/faq", "summaryDescription" : "Compliance Engineer at TRM Labs. Skills: Compliance, GRC, Security certifications. Develop scalable processes for controls. Develop tools for controls", "createdAt" : "2026-06-14T04:09:27.627", "lastUpdated" : "2026-06-15T09:07:47.324", "ingestTimestamp" : "2026-06-14T04:09:27.627", "mongoId" : "6a2cafe274d8ee00a09d81bb", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 150000, "salaryAnnualMax" : 220000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Control validation", "Evidence collection", "Gap analysis", "Risk registry management", "Compliance", "GRC", "Security certifications", "Risk assessment", "Due diligence", "Vendor risk management", "Agile", "NIST 800-53", "SOC 2", "CMMC", "ISO", "CyberEssentials UK", "Public Sector compliance", "Privacy by Design", "GDPR", "CISSP", "CISM", "Drata" ], "skillCount" : 22, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 850.0297, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305303f292fd229cf10b6e", "title" : "Consultor GRC / Compliance", "company" : "Devoteam", "industry" : "Information Technology And Services", "salary" : { "min" : 38000.0, "max" : 55000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level GRC/Compliance Consultant in Madrid, Spain, adjusted for the technology industry and company size." }, "location" : "Madrid, MD, Spain", "locations" : [ "Madrid", "MD", "Spain" ], "certifications" : [ "ISO 27001", "NIST", "ENS", "GDPR" ], "timestamp" : "2026-06-16T05:12:51.228", "fingerprint" : "730218bd0b6c4dc0bc95b034e2bf6fee7a6533ac66ab0eb31e8f925febf7373a", "source" : "smartrecruiters", "language" : "es", "applyUrl" : "https://jobs.smartrecruiters.com/Devoteam/744000131886209-consultor-grc-compliance", "externalId" : "744000131886209", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Madrid", "country" : "Spain", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "40.4167820,-3.7035070" } ], "locationText" : "Madrid, Spain", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "ISO 27001, ISO 27002, NIST CSF, ENS, GDPR", "professionalSkills" : [ "Risk management", "Compliance", "Security governance", "Technology risk" ], "hardSkillsList" : [ "Auditing", "Reporting", "Documentation" ], "hardSkills" : [ { "name" : "Auditing", "level" : "intermediate" }, { "name" : "Reporting", "level" : "intermediate" }, { "name" : "Documentation", "level" : "intermediate" } ], "majorSkills" : "GRC, Compliance, Cybersecurity", "majorSkillsList" : [ "GRC", "Compliance", "Cybersecurity" ], "coreResponsibilities" : "Manage GRC activities, Execute GRC activities, Govern security, Ensure regulatory compliance, Manage control frameworks, Manage technology risk, Participate in audits, Prepare executive reports, Prepare technical documentation, Coordinate with client teams, Track action plans, Track KPIs, Track security maturity", "teamCollaboration" : "Client global teams", "domainKnowledge" : "ISO 27001; NIST; ENS; GDPR", "domainList" : [ "iso-27001", "nist", "ens", "gdpr" ], "domainSpecificKnowledge" : [ "ISO 27001", "NIST", "ENS", "GDPR" ], "toolProficiency" : [ "Archer", "ServiceNow GRC", "OneTrust" ], "communicationSkills" : "Executive reporting; Technical documentation", "documentationSkills" : "Technical documentation", "specialRequirements" : "Occasional in-person meetings", "qualificationsBasic" : "5+ years GRC experience", "qualificationsPreferred" : "B2 English level", "remoteFriendly" : false, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Devoteam es una consultora europea líder enfocada en estrategia digital, plataformas tecnológicas, ciberseguridad y transformación empresarial a través de la tecnología. La Tecnología está en nuestro ADN y creemos en ella como una palanca capaz de impulsar el cambio para mejorar, manteniendo un equilibrio que nos permite ofrecer a nuestra cartera de clientes herramientas tecnológicas de primer nivel pero siempre con la cercanía y profesionalidad de un equipo que actúa como guía durante el camino. Devoteam lleva más de 25 años comprometidos con la tecnología al servicio de las personas. Con más de 10.000 personas en el grupo, en 20 países de Europa, Oriente Medio y África. Para incorporar de forma estable en nuestra unidad de de proyectos Cyber-GRC, buscamos para incorporar de forma estable un Consultor GRC. Se puede teletrabajar salvo alguna reunión presencial en nuestras oficinas de Madrid. Funciones principales: * Gestión y ejecución de actividades de GRC. * Gobierno de seguridad, cumplimiento normativo, control framework y riesgo tecnológico. * Participación en auditorías internas/externas (ISO 27001, NIST, ENS, GDPR...). * Elaboración de informes ejecutivos y documentación técnica. * Coordinación con los equipos globales del cliente. * Seguimiento de planes de acción, KPIs y madurez de seguridad. Tecnologías y marcos: * Marcos y estándares: ISO 27001/27002, NIST CSF, ENS * Regulación: GDPR * Herramientas GRC corporativas: Archer, ServiceNow GRC, OneTrust ## Additional Information English: B2", "summaryDescription" : "Consultor GRC / Compliance at Devoteam. Skills: GRC, Compliance, Cybersecurity. Manage GRC activities. Execute GRC activities", "postedDate" : "2026-06-12T12:08:41.000", "createdAt" : "2026-06-15T21:44:58.499", "lastUpdated" : "2026-06-16T05:12:51.228", "ingestTimestamp" : "2026-06-15T21:44:58.499", "mongoId" : "6a305303f292fd229cf10b6e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "30k-50k", "hasSalary" : false, "allSkills" : [ "Auditing", "Reporting", "Documentation", "GRC", "Compliance", "Cybersecurity", "Risk management", "Security governance", "Technology risk", "ISO 27001", "NIST", "ENS", "GDPR", "Archer", "ServiceNow GRC", "OneTrust" ], "skillCount" : 16, "jobCategory" : "general", "jobSubcategory" : "general", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 847.17584, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a308500f292fd229c0766ba", "title" : "Onboarding Manager", "company" : "Altisource", "industry" : "Financial Services", "salary" : { "min" : 60000.0, "max" : 70000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "United States, UNITED STATES, United States", "locations" : [ "United States", "UNITED STATES", "United States" ], "timestamp" : "2026-06-16T12:37:56.675", "fingerprint" : "a6d70a239d94ce52e907b3fa2efa04837d03be3b60d87c4aa03df58f26cdcc9c", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Altisource/744000132288169-onboarding-manager", "externalId" : "744000132288169", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "mid", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Altisource Portfolio Solutions S.A. (NASDAQ: ASPS) is an integrated service provider and marketplace for the real estate and mortgage industries. Combining operational excellence with a suite of innovative products and technologies, Altisource helps solve the demands of the ever-changing market. Altisource manages the Lenders One Cooperative, a national network of 240+ members through which Lenders One delivers its curated suite of mission-critical solutions to help improve member profitability. https://www.altisource.com/originations/lenders-one-cooperative/ We are looking for a Onboarding Manager - Remote (US based only) to manage the Credit Service desk queue for Real Estate Mortgage Loans. PRIMARY RESPONSIBILITIES * Manage the onboarding of members into credit and verification programs by coordinating training sessions, establishing accounts, and providing necessary resources to ensure a seamless transition to our products and services * Serve as the primary point of contact for credit and verification technology (MeridianLink and LOLA), coordinating with stakeholders and distributing communications to customers regarding critical product updates and relevant information * Establish and maintain service engagement rules and guidelines in partnership with customers, ensuring alignment with their operational requirements and preferences * Monitor customer service level agreements (SLAs) to identify performance deviations from established targets and benchmarks, escalating issues and collaborating with the customer service team to determine root causes and implement corrective actions * Gather and analyze customer feedback regarding service delivery challenges and emerging trends to identify opportunities for enhancing the overall customer experience ## Qualifications REQUIRED QUALIFICATIONS * Demonstrated experience with loan origination processes * Proficiency with MeridianLink Credit and credit verification interfaces for ordering credit reports and related services * Proven client-facing experience with demonstrated ability to engage directly and professionally with clients * Ability to manage complex projects with multiple stakeholders in a collaborative environment * Strong organizational and prioritization skills with demonstrated capacity to manage multiple concurrent projects and meet established deadlines * Excellent verbal and written communication skills, including proficiency in meeting management and stakeholder coordination * Ability to maintain confidentiality and handle sensitive information with professional discretion * Capacity to perform effectively under pressure while maintaining attention to detail and quality standards * Commitment to collaborative teamwork and organizational objectives * Demonstrated ability to operate effectively within agile business environments and adapt to evolving processes * Strong desire and capability to acquire new technical and domain knowledge ## Additional Information THE PERKS OF WORKING AT ALTISOURCE Prosperity • Competitive salary based on your experience and skills at $60,000 to $70,000 annually Good Health • Comprehensive insurance plans like Medical, Personal Accident Benefit and Life Insurance Happiness • Paid holidays (including the day after Thanksgiving and Christmas Eve), plus 19 days of paid time off, for a total of 28 paid days off per year Our Innovation Starts with YOU! Altisource’s Vision to drive innovation that powers the mortgage and real estate lifecycle is made possible by an inclusive culture that celebrates the diverse voices of our employees. We believe that diversity in gender, age, religion, ethnicity, sexual orientation, identity, physical ability, neurodiversity, socioeconomic background, and experience, fosters creativity, challenges groupthink, and makes our Company stronger. At Altisource, anyone can prosper and have a positive impact on our path toward success, irrespective of their background. We are committed to fair and impartial hiring, training, and growth opportunities. We also provide employee training to help foster their ability to work with one another in an inclusive manner. Altisource is an Equal Opportunity Employer, and our employment decisions are based on merit, qualifications, and business needs.", "summaryDescription" : "Onboarding Manager at Altisource", "postedDate" : "2026-06-15T21:27:33.000", "createdAt" : "2026-06-16T01:44:53.333", "lastUpdated" : "2026-06-16T12:37:56.675", "ingestTimestamp" : "2026-06-16T01:44:53.333", "mongoId" : "6a308500f292fd229c0766ba", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 60000, "salaryAnnualMax" : 70000, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "sales", "jobSubcategory" : "customer_success", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "_score" : 841.1293, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Real Estate", "llmIndustryConfidence" : 0.95 }, { "id" : "6a307c6bf292fd229c049f00", "title" : "Onboarding Manager", "company" : "Altisource", "industry" : "Financial Services", "salary" : { "min" : 60000.0, "max" : 70000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "United States, UNITED STATES, United States", "locations" : [ "United States", "UNITED STATES", "United States" ], "timestamp" : "2026-06-16T13:44:16.788", "fingerprint" : "0150fa6e7896ae307cab8907c59b8a7515ea700b98108c40d130bab06a07ad7b", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Altisource/744000132288169-onboarding-manager", "externalId" : "744000132288169", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "mid", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Altisource Portfolio Solutions S.A. (NASDAQ: ASPS) is an integrated service provider and marketplace for the real estate and mortgage industries. Combining operational excellence with a suite of innovative products and technologies, Altisource helps solve the demands of the ever-changing market. Altisource manages the Lenders One Cooperative, a national network of 240+ members through which Lenders One delivers its curated suite of mission-critical solutions to help improve member profitability. https://www.altisource.com/originations/lenders-one-cooperative/ We are looking for a Onboarding Manager - Remote (US based only) to manage the Credit Service desk queue for Real Estate Mortgage Loans. PRIMARY RESPONSIBILITIES * Manage the onboarding of members into credit and verification programs by coordinating training sessions, establishing accounts, and providing necessary resources to ensure a seamless transition to our products and services * Serve as the primary point of contact for credit and verification technology (MeridianLink and LOLA), coordinating with stakeholders and distributing communications to customers regarding critical product updates and relevant information * Establish and maintain service engagement rules and guidelines in partnership with customers, ensuring alignment with their operational requirements and preferences * Monitor customer service level agreements (SLAs) to identify performance deviations from established targets and benchmarks, escalating issues and collaborating with the customer service team to determine root causes and implement corrective actions * Gather and analyze customer feedback regarding service delivery challenges and emerging trends to identify opportunities for enhancing the overall customer experience ## Qualifications REQUIRED QUALIFICATIONS * Demonstrated experience with loan origination processes * Proficiency with MeridianLink Credit and credit verification interfaces for ordering credit reports and related services * Proven client-facing experience with demonstrated ability to engage directly and professionally with clients * Ability to manage complex projects with multiple stakeholders in a collaborative environment * Strong organizational and prioritization skills with demonstrated capacity to manage multiple concurrent projects and meet established deadlines * Excellent verbal and written communication skills, including proficiency in meeting management and stakeholder coordination * Ability to maintain confidentiality and handle sensitive information with professional discretion * Capacity to perform effectively under pressure while maintaining attention to detail and quality standards * Commitment to collaborative teamwork and organizational objectives * Demonstrated ability to operate effectively within agile business environments and adapt to evolving processes * Strong desire and capability to acquire new technical and domain knowledge ## Additional Information THE PERKS OF WORKING AT ALTISOURCE Prosperity • Competitive salary based on your experience and skills at $60,000 to $70,000 annually Good Health • Comprehensive insurance plans like Medical, Personal Accident Benefit and Life Insurance Happiness • Paid holidays (including the day after Thanksgiving and Christmas Eve), plus 19 days of paid time off, for a total of 28 paid days off per year Our Innovation Starts with YOU! Altisource’s Vision to drive innovation that powers the mortgage and real estate lifecycle is made possible by an inclusive culture that celebrates the diverse voices of our employees. We believe that diversity in gender, age, religion, ethnicity, sexual orientation, identity, physical ability, neurodiversity, socioeconomic background, and experience, fosters creativity, challenges groupthink, and makes our Company stronger. At Altisource, anyone can prosper and have a positive impact on our path toward success, irrespective of their background. We are committed to fair and impartial hiring, training, and growth opportunities. We also provide employee training to help foster their ability to work with one another in an inclusive manner. Altisource is an Equal Opportunity Employer, and our employment decisions are based on merit, qualifications, and business needs.", "summaryDescription" : "Onboarding Manager at Altisource", "postedDate" : "2026-06-15T21:27:33.000", "createdAt" : "2026-06-16T01:42:09.235", "lastUpdated" : "2026-06-16T13:44:16.788", "ingestTimestamp" : "2026-06-16T01:42:09.235", "mongoId" : "6a307c6bf292fd229c049f00", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 60000, "salaryAnnualMax" : 70000, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "sales", "jobSubcategory" : "customer_success", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "_score" : 841.1293, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Real Estate", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cb01a74d8ee00a09d8d0e", "title" : "Lead, Governance, Risk, Compliance & Privacy (GRC)", "company" : "Beacon Software", "industry" : "Engineering", "salary" : { "min" : 175000.0, "max" : 250000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Lead, Governance, Risk, Compliance & Privacy roles in San Francisco, adjusted for the SaaS industry and company size." }, "location" : "San Francisco, CA", "locations" : [ "San Francisco, CA", "Toronto, Ontario", "New York, NY", "Remote (Canada)", "Remote (US)" ], "certifications" : [ "CIPP", "CIPM", "CISA", "CISSP", "ISO 27001 Lead Auditor", "ISO 27001 Implementer" ], "timestamp" : "2026-06-16T01:44:23.038", "fingerprint" : "13adb327ea94c4d7a49e640e9c84c304dd9ff1c31b169273389514c9d22d00cb", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/beaconsoftware/aa18aaa1-7d79-489e-b888-1b046d010d51/application", "externalId" : "aa18aaa1-7d79-489e-b888-1b046d010d51", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "AI tooling", "professionalSkills" : [ "Systems thinker", "Cross-functional communicator", "Clear writer" ], "hardSkillsList" : [ "Security compliance", "Data privacy", "Risk management", "AI governance" ], "softSkillsList" : [ "Leadership", "Bias for action" ], "hardSkills" : [ { "name" : "Security compliance", "level" : "intermediate" }, { "name" : "Data privacy", "level" : "intermediate" }, { "name" : "Risk management", "level" : "intermediate" }, { "name" : "AI governance", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Bias for action" } ], "majorSkills" : "Governance, Risk, Compliance, Privacy", "majorSkillsList" : [ "Governance", "Risk", "Compliance", "Privacy" ], "coreResponsibilities" : "Build and scale GRC function, Scale GRC across portfolio, Work with portfolio companies, Take companies through audits, Take companies through certifications, Design scalable GRC program, Build holdco's enterprise governance program, Develop security policy, Develop AI governance, Develop data governance, Develop privacy program, Manage enterprise risk, Manage third-party risk, Develop posture reporting, Pursue governance frameworks, Deliver repeatable service for audits, Map controls once, Satisfy many standards, Implement AI-first automation, Provide clear program reporting", "teamCollaboration" : "Cross-functional teams; Engineering teams; Technical teams; Non-technical teams", "domainKnowledge" : "SOC 2; ISO 27001; Accessibility conformance; Security compliance; Data privacy; Risk management; AI governance; PCI DSS; HIPAA; FedRAMP; StateRAMP; WCAG; VPAT", "domainList" : [ "soc-2", "iso-27001", "accessibility-conformance", "security-compliance", "data-privacy", "risk-management", "ai-governance", "pci-dss", "hipaa", "fedramp", "stateramp", "wcag", "vpat" ], "domainSpecificKnowledge" : [ "SOC 2", "ISO 27001", "Accessibility conformance", "Security compliance", "Data privacy", "Risk management", "AI governance", "PCI DSS", "HIPAA", "FedRAMP", "StateRAMP", "WCAG", "VPAT" ], "toolProficiency" : [ "Vanta", "Drata", "Secureframe" ], "communicationSkills" : "Translate requirements", "qualificationsBasic" : "Built or substantially matured GRC program, Taken organization through SOC 2 Type 2, 5+ years in GRC, IT governance, or security compliance, Fluent with compliance automation platform, Current on AI tooling", "qualificationsPreferred" : "Privacy or audit certifications, Experience with regimes beyond SOC 2, Experience with accessibility conformance, Technical fluency, Multi-entity experience, Private-equity experience, Holding-company experience, M&A security and privacy diligence experience", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "ABOUT BEACON SOFTWARE Beacon https://beaconsoftware.com/ is acquiring and operating a portfolio of vertical SaaS companies. Most private equity firms scale by adding people. We are building Beacon to scale by adding software. The thesis is simple: portfolio operations, value creation, and deal sourcing are bottlenecked by human attention, and an agentic operating system can lift that ceiling by an order of magnitude. We are looking for a GRC leader to build and scale the governance, risk, compliance, and privacy function for a growing portfolio of software companies. This is a founding, high-ownership role for someone who has built before and treats automation and modern AI tooling as the default way to operate. Beacon has raised $550M+ from investors including General Catalyst, Lightspeed, D1 Capital, CPMG, and the family offices of the founders of Stripe, DoorDash, and Ramp. ABOUT THE ROLE Our GRC function is at an early, formative stage. You would shape it from the foundations and scale it across the portfolio, working directly with our portfolio companies to take them through their own audits and certifications, and designing a program that grows with the business rather than one built for a single audit. The mandate spans security compliance, data privacy, risk, and AI governance. We expect it to be built AI-first: modern automation platforms and LLM-assisted workflows over manual process. WHAT YOU'LL DO The role spans two scopes: - Beacon. The holdco's enterprise governance program: security policy, AI governance, data governance and privacy, enterprise and third-party risk, and posture reporting. Governance-led, including any frameworks Beacon itself elects to pursue. - Portfolio companies. Taking our portfolio companies through their own audits and certifications (SOC 2, ISO 27001, accessibility conformance, and others as their customers require), delivered hands-on as a repeatable service that scales across the portfolio. Underpinning both: a common control architecture that maps a control once to satisfy many standards, AI-first automation, and clear program reporting. WHO YOU ARE - You have built or substantially matured a GRC program before and taken an organization through SOC 2 Type 2. Typically several years (5+) in GRC, IT governance, or security compliance, though what you have built matters more to us than the count. - A builder with a bias for action. When you see a manual process, your first instinct is how to automate it. - A strong systems thinker. You design scalable GRC architectures, not one-off fixes for the next audit. - Fluent with a compliance automation platform (Vanta, Drata, Secureframe, or similar) and current on AI tooling in practice, not just in theory. - Comfortable across both security compliance and data privacy, or able to ramp quickly on regimes you have not personally run. - An excellent cross-functional communicator who works through influence and can translate compliance requirements into terms both technical and non-technical teams can act on. - A clear writer. BONUS POINTS - Privacy or audit certifications (CIPP, CIPM, CISA, CISSP, or ISO 27001 Lead Auditor or Implementer). - Experience with regimes beyond SOC 2 (ISO 27001, PCI DSS, HIPAA, FedRAMP, StateRAMP) and accessibility conformance (WCAG, VPAT). - Enough technical fluency to scope what the program needs and partner closely with engineering, even without building the tooling yourself. - Multi-entity, private-equity, or holding-company experience. - M&A security and privacy diligence experience. Our Values at Beacon Software - Humility: We acknowledge that the path to getting to the right answer involves being wrong along the way. We have strong beliefs which are weakly held. We actively seek new ideas and believe we can learn from anyone at any time. - Honesty: We are truth seeking in our approach to business problems. Business is a repeat game and we believe that human relationships generate alpha. We understand that trust is earned over a lifetime and can be lost in an instant. - Hunger: We play to win. We hold ourselves to high standards and will not be outworked. We take pride in having a deep sense of responsibility to ourselves, each other, our partners, and our customers. We believe to whom much is given much is expected. - Horizon: We seek to build a generational software company. This will take decades. We manage our expectations and those of our partners to take advantage of the 8th wonder of the world - compounding growth. How We Use AI in Our Hiring Process: To ensure transparency, we want candidates to know that Beacon Software uses Artificial Intelligence and AI-enabled tools to assist with screening, reviewing, organizing and highlighting profiles and applications that match the key requirements for each role. AI does not make hiring decisions: Every application is reviewed by a member of our team, and all decisions throughout the process are made by humans. We use AI to support efficiency and consistency, not to replace human judgment. We are committed to a fair, thoughtful, and equitable experience for every candidate.", "summaryDescription" : "Lead, Governance, Risk, Compliance & Privacy (GRC) at Beacon Software. Skills: Governance, Risk, Compliance, Privacy. Build and scale GRC function. Scale GRC across portfolio", "createdAt" : "2026-06-14T19:29:29.795", "lastUpdated" : "2026-06-16T01:44:23.038", "ingestTimestamp" : "2026-06-14T19:29:29.795", "mongoId" : "6a2cb01a74d8ee00a09d8d0e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 175000, "salaryAnnualMax" : 250000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Security compliance", "Data privacy", "Risk management", "AI governance", "Leadership", "Bias for action", "Governance", "Risk", "Compliance", "Privacy", "Systems thinker", "Cross-functional communicator", "Clear writer", "SOC 2", "ISO 27001", "Accessibility conformance", "PCI DSS", "HIPAA", "FedRAMP", "StateRAMP", "WCAG", "VPAT", "CIPP", "CIPM", "CISA", "CISSP", "ISO 27001 Lead Auditor", "ISO 27001 Implementer", "Vanta", "Drata", "Secureframe" ], "skillCount" : 31, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.8888889, "_score" : 829.8912, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "SaaS", "llmIndustryConfidence" : 0.95 }, { "id" : "6a3080e2f292fd229c068076", "title" : "Senior Information Security Analyst, GRC and Responsible AI", "company" : "Sandisk", "industry" : "Computer Hardware", "salary" : { "min" : 145000.0, "max" : 205000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Information Security Analyst, GRC and Responsible AI in Irvine, United States, adjusted for seniority and industry." }, "location" : "Irvine, CA, United States", "locations" : [ "Irvine", "CA", "United States" ], "timestamp" : "2026-06-16T12:53:21.321", "fingerprint" : "1d099c1eacbb4ce579c9886fbbdcc870e7aa2c25d1be5940c1f83908c9680cf3", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Sandisk/744000132247129-information-security-analyst-4", "externalId" : "744000132247129", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Irvine", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.6856969,-117.8259810" } ], "locationText" : "Irvine, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "AI, GenAI, Machine Learning", "professionalSkills" : [ "Risk assessment", "Threat modeling", "Governance" ], "hardSkillsList" : [ "Information security", "Risk management", "AI governance", "Threat analysis", "Control design" ], "hardSkills" : [ { "name" : "Information security", "level" : "intermediate" }, { "name" : "Risk management", "level" : "intermediate" }, { "name" : "AI governance", "level" : "intermediate" }, { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Control design", "level" : "intermediate" } ], "majorSkills" : "GRC, Responsible AI, Risk management", "majorSkillsList" : [ "GRC", "Responsible AI", "Risk management" ], "coreResponsibilities" : "Drive security intake for AI use cases, Drive risk assessment for AI use cases, Drive ongoing oversight for AI use cases, Lead technical risk assessments, Lead threat modeling, Design scalable controls, Recommend scalable controls, Partner with stakeholders to advance objectives, Shape AI governance policies, Shape AI governance standards, Shape AI governance operating procedures, Prepare materials for governance reviews, Build operating model for securing AI, Apply program-level thinking, Apply system-level thinking, Anticipate emerging AI risks, Recommend adjustments to controls, Recommend adjustments to processes, Recommend adjustments to standards, Strengthen risk management, Conduct technical risk assessments, Conduct business process risk assessments, Document treatment recommendations, Support internal audits, Support external audits, Drive remediation activities", "teamCollaboration" : "Cross-functional stakeholders; Legal; IT; Procurement; Business leaders; Privacy; Engineering", "domainKnowledge" : "ISO 27001; NIST CSF 2.0; NIST AI RMF; ISO/IEC 42001; Responsible AI; GenAI", "domainList" : [ "iso-27001", "nist-csf-2-0", "nist-ai-rmf", "iso-iec-42001", "responsible-ai", "genai" ], "domainSpecificKnowledge" : [ "ISO 27001", "NIST CSF 2.0", "NIST AI RMF", "ISO/IEC 42001", "Responsible AI", "GenAI" ], "qualificationsBasic" : "5+ years security professional experience, Experience operating independently, Experience influencing cross-functional stakeholders, Experience translating risks to governance solutions, Experience leading GenAI security risk assessments, Experience defining governance standards, Experience partnering with Legal, IT, Procurement, business leaders, Experience contributing to enterprise risk management frameworks, Experience supporting risk-based decision-making, Experience supporting strategy, Experience supporting continuous improvement, Experience driving security intake for AI use cases, Experience driving risk assessment for AI use cases, Experience driving ongoing oversight for AI use cases, Experience leading technical risk assessments, Experience leading threat modeling, Experience designing scalable controls, Experience recommending scalable controls, Experience partnering with Legal, Privacy, Procurement, IT, Engineering, business stakeholders, Experience advancing regulatory objectives related to AI, Experience advancing contractual objectives related to AI, Experience advancing governance objectives related to AI, Experience shaping AI governance policies, Experience shaping AI governance standards, Experience shaping AI governance operating procedures, Experience preparing materials for governance reviews, Experience building end-to-end operating model for securing AI, Experience applying program-level thinking, Experience applying system-level thinking, Experience anticipating emerging AI risks, Experience recommending adjustments to controls, Experience recommending adjustments to processes, Experience recommending adjustments to standards, Experience strengthening enterprise information security risk management, Experience conducting technical risk assessments, Experience conducting business process risk assessments, Experience documenting treatment recommendations, Experience supporting internal audits, Experience supporting external audits, Experience driving remediation activities", "qualificationsPreferred" : "Responsible AI focus, GenAI focus, NIST AI RMF knowledge, ISO/IEC 42001 knowledge", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Sandisk understands how people and businesses consume data and we relentlessly innovate to deliver solutions that enable today’s needs and tomorrow’s next big ideas. With a rich history of groundbreaking innovations in Flash and advanced memory technologies, our solutions have become the beating heart of the digital world we’re living in and that we have the power to shape. Sandisk meets people and businesses at the intersection of their aspirations and the moment, enabling them to keep moving and pushing possibility forward. We do this through the balance of our powerhouse manufacturing capabilities and our industry-leading portfolio of products that are recognized globally for innovation, performance and quality. Sandisk has two facilities recognized by the World Economic Forum as part of the Global Lighthouse Network for advanced 4IR innovations. These facilities were also recognized as Sustainability Lighthouses for breakthroughs in efficient operations. With our global reach, we ensure the global supply chain has access to the Flash memory it needs to keep our world moving forward. Job Description Senior Information Security Analyst, GRC and Responsible AI As a Senior Information Security Analyst (Level 4), you will play a key role in shaping and operationalizing Sandisk’s enterprise Information Security Governance, Risk Management, and Strategy function, with a particular focus on Responsible GenAI. This is a senior, hands‑on role for an experienced security professional who can operate independently, influence cross‑functional stakeholders, and translate emerging technology risks into practical, scalable governance solutions. You will lead GenAI security risk assessments, help define governance standards, and partner closely with Legal, IT, Procurement, and business leaders to ensure AI adoption is secure, compliant, and aligned with Sandisk’s risk appetite. In addition to AI governance, you will contribute to the evolution of Sandisk’s enterprise risk management frameworks, supporting risk‑based decision‑making, strategy, and continuous improvement across the organization. Key Responsibilities Responsible AI Security * Drive security intake, risk assessment, and ongoing oversight of enterprise AI use cases, platforms, models, and third-party vendors. * Lead technical risk assessments and threat modeling covering data protection, identity and access, integration patterns, model and agent behavior, and emerging AI attack surfaces. * Design and recommend practical, scalable controls aligned with enterprise security standards and secure-by-design principles. * Partner with Legal, Privacy, Procurement, IT, Engineering, and business stakeholders to advance regulatory, contractual, and governance objectives related to AI. * Shape AI governance policies, standards, and operating procedures, and prepare materials for governance reviews. Program and System Thinking * Help build the end-to-end operating model for securing AI, from intake through approval and monitoring. * Apply program and system-level thinking across functions to drive consistency and scale. * Anticipate emerging AI risks and recommend adjustments to controls, processes, and standards. Core GRC * Strengthen enterprise information security risk management aligned with ISO 27001, NIST CSF 2.0, NIST AI RMF, and ISO/IEC 42001. * Conduct technical and business process risk assessments and document treatment recommendations. * Support internal and external audits with metrics, evidence, and analysis, and drive remediation activities. ## Additional Information Sandisk is committed to providing equal opportunities to all applicants and employees and will not discriminate against any applicant or employee based on their race, color, ancestry, religion (including religious dress and grooming standards), sex (including pregnancy, childbirth or related medical conditions, breastfeeding or related medical conditions), gender (including a person’s gender identity, gender expression, and gender-related appearance and behavior, whether or not stereotypically associated with the person’s assigned sex at birth), age, national origin, sexual orientation, medical condition, marital status (including domestic partnership status), physical disability, mental disability, medical condition, genetic information, protected medical and family care leave, Civil Air Patrol status, military and veteran status, or other legally protected characteristics. We also prohibit harassment of any individual on any of the characteristics listed above. Our non-discrimination policy applies to all aspects of employment. We comply with the laws and regulations set forth in the \"[Know Your Rights: Workplace Discrimination is Illegal](https://www.eeoc.gov/sites/default/files/2023-06/22-088EEOCKnowYourRights6.12.pdf)” poster. Our pay transparency policy is available [here](https://www.dol.gov/sites/dolgov/files/OFCCP/pdf/pay-transp%20EnglishformattedESQA508c.pdf). Sandisk thrives on the power and potential of diversity. As a global company, we believe the most effective way to embrace the diversity of our customers and communities is to mirror it from within. We believe the fusion of various perspectives results in the best outcomes for our employees, our company, our customers, and the world around us. We are committed to an inclusive environment where every individual can thrive through a sense of belonging, respect and contribution. Sandisk is committed to offering opportunities to applicants with disabilities and ensuring all candidates can successfully navigate our careers website and our hiring process. Please contact us at [jobs.accommodations@sandisk.com](mailto:jobs.accommodations@sandisk.com) to advise us of your accommodation request. In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying. Based on our experience, we anticipate that the application deadline will be 01/15/2026 (3 months from posting), although we reserve the right to close the application process sooner if we hire an applicant for this position before the application deadline. If we are not able to hire someone from this role before the application deadline, we will update this posting with a new anticipated application deadline. Required Qualifications * Bachelor's degree in information security, Computer Science, Engineering, or a related discipline, or equivalent experience. * 6+ years of progressive experience in Information Security, including exposure to GRC, risk management, or security governance in a complex enterprise environment. * Demonstrated technical proficiency in security, including hands-on experience with threat modeling, technical risk assessment, or security architecture reviews. * Working knowledge of AI security frameworks and standards, including OWASP Top 10 for LLM Applications, NIST AI Risk Management Framework (AI RMF), and ISO/IEC 42001, with familiarity in applying these to real-world use cases. * Practical understanding of AI and generative AI technologies and associated risks, including data protection, access management, model misuse, and supply chain considerations. * Familiarity with AI governance standards such as NIST AI RMF and ISO/IEC 42001. Preferred Qualifications * Background in software development, security engineering, application security, cloud security, or security architecture. * Familiarity with secure development practices, secure-by-design principles, and modern engineering environments such as cloud, APIs, containers, and CI/CD pipelines. * Experience applying threat modeling methodologies (such as STRIDE, PASTA, or attack tree analysis) to enterprise systems or AI workloads. * Professional certifications such as CISSP, CISM, CRISC, or GSNA. * Technical security certifications such as GCIH, GPEN, CEH, OSCP, GWAPT, or CSSLP. * Hands-on experience with AI, ML, or generative AI in a security, risk, engineering, or architecture capacity. * Exposure to emerging AI integration patterns, agentic systems, or AI red teaming. Skills and Attributes * Strong intellectual curiosity and a self-driven approach to learning new technologies. * Effective communication skills, with the ability to explain complex technical and AI concepts to a range of audiences. * Ability to influence and drive outcomes in cross-functional, matrixed environments. * Pragmatic, outcome-focused, and comfortable operating in ambiguity. * Strong program and system-level thinking, with the ability to connect technical decisions to business impact. #LI-TS1 Compensation & Benefits Details * An employee’s pay position within the salary range may be based on several factors including but not limited to (1) relevant education; qualifications; certifications; and experience; (2) skills, ability, knowledge of the job; (3) performance, contribution and results; (4) geographic location; (5) shift; (6) internal and external equity; and (7) business and organizational needs. * The salary range is what we believe to be the range of possible compensation for this role at the time of this posting. We may ultimately pay more or less than the posted range and this range is only applicable for jobs to be performed in California, Colorado, New York or remote jobs that can be performed in California, Colorado and New York. This range may be modified in the future. * You will be eligible to participate in Sandisk's Short-Term Incentive (STI) Plan, which provides incentive awards based on Company and individual performance. Depending on your role and your performance, you may be eligible to participate in our annual Long-Term Incentive (LTI) program, which consists of restricted stock units (RSUs) or cash equivalents, pursuant to the terms of the LTI plan. Please note that not all roles are eligible to participate in the LTI program, and not all roles are eligible for equity under the LTI plan. RSU awards are also available to eligible new hires, subject to Sandisk's Standard Terms and Conditions for Restricted Stock Unit Awards. * We offer a comprehensive package of benefits including paid vacation time; paid sick leave; medical/dental/vision insurance; life, accident and disability insurance; tax-advantaged flexible spending and health savings accounts; employee assistance program; other voluntary benefit programs such as supplemental life and AD&D, legal plan, pet insurance, critical illness, accident and hospital indemnity; tuition reimbursement; transit; the Applause Program, employee stock purchase plan, and the Sandisk's Savings 401(k) Plan. * Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law.", "summaryDescription" : "Senior Information Security Analyst, GRC and Responsible AI at Sandisk. Skills: GRC, Responsible AI, Risk management. Drive security intake for AI use cases. Drive risk assessment for AI use cases", "postedDate" : "2026-06-15T16:41:47.000", "createdAt" : "2026-06-16T01:42:10.630", "lastUpdated" : "2026-06-16T12:53:21.321", "ingestTimestamp" : "2026-06-16T01:42:10.630", "mongoId" : "6a3080e2f292fd229c068076", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 145000, "salaryAnnualMax" : 205000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Information security", "Risk management", "AI governance", "Threat analysis", "Control design", "GRC", "Responsible AI", "Risk assessment", "Threat modeling", "Governance", "ISO 27001", "NIST CSF 2.0", "NIST AI RMF", "ISO/IEC 42001", "GenAI" ], "skillCount" : 15, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 820.46204, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca4f474d8ee00a09b3f84", "title" : "GRC Analyst", "company" : "Doppel", "industry" : "Cybersecurity", "salary" : { "min" : 120000.0, "max" : 140000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Remote", "locations" : [ "Remote" ], "timestamp" : "2026-06-15T10:22:53.086", "fingerprint" : "d0623aacd375e879bd2a175cbe5c8c31d1c0f1fbd55598acff58d8abec66a237", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.doppel.com/company/careers/jobs/4187966009?gh_jid=4187966009", "externalId" : "4187966009", "industryFunction" : { }, "structuredLocations" : [ { "workMode" : "remote" } ], "locationText" : "", "professionalSkills" : [ "Risk management", "Legal analysis", "Compliance oversight", "Regulatory requirements" ], "hardSkillsList" : [ "Control testing", "Sampling" ], "hardSkills" : [ { "name" : "Control testing", "level" : "intermediate" }, { "name" : "Sampling", "level" : "intermediate" } ], "majorSkills" : "Governance, Risk, Compliance", "majorSkillsList" : [ "Governance", "Risk", "Compliance" ], "coreResponsibilities" : "Communicate security posture, Advance governance programs, Run access certifications, Run vendor risk reviews, Run customer security questionnaires", "teamCollaboration" : "Engage customers; Engage sales teams; Cross-functional teams", "domainKnowledge" : "AI governance; Cloud-first environments; ISMS; PIMS; AIMS; Trust Services Criteria", "domainList" : [ "ai-governance", "cloud-first-environments", "isms", "pims", "aims", "trust-services-criteria" ], "domainSpecificKnowledge" : [ "AI governance", "Cloud-first environments", "ISMS", "PIMS", "AIMS", "Trust Services Criteria" ], "communicationSkills" : "Communicate compliance jargon; Tailor requirements", "qualificationsBasic" : "ISO 27701 and ISO 42001 experience, SOC 2 programs ownership, Continuous compliance experience, Access certifications experience, Vendor risk reviews experience, Customer security questionnaires experience", "qualificationsPreferred" : "AI governance programs experience", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "About Doppel Doppel is building the future of social engineering defense. Our AI-native platform uses agentic AI to protect executives, employees, customers, and brands from phishing, impersonation, fraud, and other AI-powered threats across digital channels. We help some of the world’s most recognized brands detect and dismantle attacker infrastructure while strengthening employee resilience through threat-informed training and simulation. By unifying Digital Risk Protection and Human Risk Management, Doppel connects threats into a real-time intelligence graph to power faster disruption, smarter defense, and modern security awareness at scale. Backed by leading investors including Andreessen Horowitz and Bessemer Venture Partners, and trusted by leading enterprises, Doppel is a rapidly growing Series C startup building the future of social engineering defense. Our team combines deep cybersecurity expertise, operational rigor, and startup velocity to solve some of the internet’s most urgent trust and safety challenges. The Role At Doppel, we focus on building a culture where people feel respected, supported, and trusted to do meaningful work. We value clarity, collaboration, and solving real problems for our customers and teammates. We are looking for a Governance, Risk engage with customers and sales teams to communicate our security posture. Advance governance hands-on experience with ISO 27701 and ISO 42001 or equivalent AI governance programs. Proven ownership of SOC 2 programs (scope, controls, evidence, auditor management) and continuous compliance in cloud‑first environments (AWS/Azure/GCP, SaaS). Strong ability to communicate compliance jargon effectively across the business, tailoring complex requirements for technical, operational, and executive audiences. Strong command of management systems (ISMS/PIMS/AIMS), Trust Services Criteria, control testing, sampling, and evidence sufficiency. Practical experience running access certifications, vendor risk reviews, and customer security questionnaires/RFPs at scale. Why Join Doppel $120,000 - $140,000 USD Meaningful equity so you share in Doppel’s success Remote first culture with flexibility built in Flexible PTO, comprehensive health benefits, parental leave, and more A high growth environment where your work has immediate impact and visibility Salary Range $120,000—$140,000 USD", "summaryDescription" : "GRC Analyst at Doppel. Skills: Governance, Risk, Compliance. Communicate security posture. Advance governance programs", "postedDate" : "2026-06-13T21:33:33.873", "createdAt" : "2026-06-13T21:33:33.873", "lastUpdated" : "2026-06-15T10:22:53.086", "ingestTimestamp" : "2026-06-13T21:33:33.873", "mongoId" : "6a2ca4f474d8ee00a09b3f84", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 120000, "salaryAnnualMax" : 140000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Control testing", "Sampling", "Governance", "Risk", "Compliance", "Risk management", "Legal analysis", "Compliance oversight", "Regulatory requirements", "AI governance", "Cloud-first environments", "ISMS", "PIMS", "AIMS", "Trust Services Criteria" ], "skillCount" : 15, "jobCategory" : "operations", "jobSubcategory" : "legal", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 815.2312, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cc29274d8ee00a0a06d03", "title" : "GRC Manager (f/m/d)", "company" : "Enpal", "industry" : "Tech", "salary" : { "min" : 75000.0, "max" : 105000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager in Climate Tech in Berlin, Germany, adjusted for seniority and company size." }, "location" : "Berlin", "locations" : [ "Berlin", "Berlin" ], "timestamp" : "2026-06-16T02:03:32.423", "fingerprint" : "0e4b6cdb02ae9f9bab8ad8ca6c3084e7e81a05d3b2699b173ae8e965315022b3", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/enpal/f3a33bfa-b58f-460d-899e-a3eca241cba0/application", "externalId" : "f3a33bfa-b58f-460d-899e-a3eca241cba0", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Berlin", "country" : "Germany", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "52.5173885,13.3951309" } ], "locationText" : "Berlin, Germany", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "professionalSkills" : [ "Risk management", "Stakeholder management", "Organizational skills", "Audit preparation", "Policy development" ], "hardSkillsList" : [ "Information security", "IT risk", "Compliance" ], "hardSkills" : [ { "name" : "Information security", "level" : "intermediate" }, { "name" : "IT risk", "level" : "intermediate" }, { "name" : "Compliance", "level" : "intermediate" } ], "majorSkills" : "GRC, ISMS, Information Security, Risk management", "majorSkillsList" : [ "GRC", "ISMS", "Information Security", "Risk management" ], "coreResponsibilities" : "Develop, maintain and continuously improve the ISMS, Coordinate security governance activities, Ensure alignment with internal requirements, regulatory obligations and, Perform information security risk assessments, Facilitate information security risk assessments, Perform control reviews, Facilitate control reviews, Track remediation, Prepare internal audits, Coordinate internal audits, Support internal audits, Prepare external audits, Coordinate external audits, Support external audits, Prepare compliance reviews, Coordinate compliance reviews, Support compliance reviews, Maintain risk registers, Maintain control documentation, Maintain evidence repositories, Maintain management reporting materials, Partner with stakeholders, Implement security requirements, Implement compliance requirements, Support third-party risk management activities, Coordinate third-party risk assessment, Review third-party documentation, Follow-up on third-party actions, Develop reporting for senior management, Develop reporting for the CISO, Drive awareness of governance requirements, Drive awareness of security requirements, Provide documentation, Provide guidance, Provide cross-functional enablement", "teamCollaboration" : "Cross-functional teams; Technology stakeholders; Product stakeholders; Legal stakeholders; Compliance stakeholders; Data Protection stakeholders; Operations stakeholders; Business areas", "domainKnowledge" : "ISO 27001; NIST; SOC 2; Control frameworks; Information Security Management System; Governance; Risk; Compliance; Regulatory obligations; Third-party risk management", "domainList" : [ "iso-27001", "nist", "soc-2", "control-frameworks", "information-security-management-system", "governance", "risk", "compliance", "regulatory-obligations", "third-party-risk-management" ], "domainSpecificKnowledge" : [ "ISO 27001", "NIST", "SOC 2", "Control frameworks", "Information Security Management System", "Governance", "Risk", "Compliance", "Regulatory obligations", "Third-party risk management" ], "communicationSkills" : "Written communication; Verbal communication", "documentationSkills" : "Policy development; Control documentation", "problemSolvingSkills" : "Analytical skills", "outcomesObjectives" : "Ensure security governance; Ensure regulatory expectations; Ensure risk transparency; Ensure audit readiness", "qualificationsBasic" : "Several years of professional experience in GRC, ISMS, Information Security, IT Risk, Audit or Compliance, Working knowledge of common frameworks and standards such as ISO 27001, NIST, SOC 2 or comparable control frameworks, Proven experience in policy development, risk management, audit preparation and evidence-based compliance work, Ability to work effectively in cross-functional, fast-paced and evolving business environments, Analytical, organizational and stakeholder management skills", "qualificationsPreferred" : "Excellent written and verbal communication skills in German is a advantage", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Our goal is to have a solar system on every roof, a storage unit in every house, and an electric car in every garage. Enpal makes this possible with an integrated total solution for decentralized energy—from solar systems and battery storage to wall boxes, smart meters, and heat pumps. At the heart of it all is our AI-powered platform Enpal.One http://Enpal.One+, which intelligently connects thousands of systems and efficiently optimizes electricity procurement and feed-in on the energy market. Are you ready for solutions that are more than just a promise and bring real quality of life to thousands of households every day? What you create at Enpal will deliver clean electricity tomorrow and bring about lasting change in how we use energy. The GRC / ISMS Manager is responsible for the development, operational management and continuous improvement of the company’s governance, risk and compliance framework as well as the Information Security Management System (ISMS). The role acts as a key interface between Information Security and business functions, ensuring that security governance, regulatory expectations, risk transparency and audit readiness are embedded in a pragmatic and scalable way. This is an individual contributor manager role without disciplinary people management responsibility and with direct reporting to the CISO. What you'll do - Develop, maintain and continuously improve the ISMS, including policies, standards, procedures and control frameworks. - Coordinate security governance activities and ensure alignment with internal requirements, regulatory obligations and business priorities. - Perform and facilitate information security risk assessments, control reviews and remediation tracking. - Prepare, coordinate and support internal and external audits, certifications and compliance reviews. - Maintain risk registers, control documentation, evidence repositories and management reporting materials. - Partner with stakeholders across Technology, Product, Legal, Compliance, Data Protection, Operations and other business areas to implement security and compliance requirements. - Support third-party risk management activities, including assessment coordination, documentation review and follow-up actions. - Develop reporting for senior management and the CISO, including KPIs, KRIs, control status and risk exposure updates. - Drive awareness of governance and security requirements through documentation, guidance and cross-functional enablement. WHAT YOU'LL BRING - Several years of professional experience in GRC, ISMS, Information Security, IT Risk, Audit or Compliance. - Strong working knowledge of common frameworks and standards such as ISO 27001, NIST, SOC 2 or comparable control frameworks. - Proven experience in policy development, risk management, audit preparation and evidence-based compliance work. - Ability to work effectively in cross-functional, fast-paced and evolving business environments. - Strong analytical, organizational and stakeholder management skills. - Excellent written and verbal communication skills in English; German is a strong advantage. SUCCESS PROFILE - Structured and detail-oriented, while able to balance governance quality with business pragmatism. - Confident working with both technical and non-technical stakeholders. - Comfortable taking ownership in a fast-scaling environment with short decision paths and high visibility. What we offer - Work at Germany's first green unicorn - Play an active role in shaping the solar energy transition. - The sun shines all over the world - At Enpal, you'll work with a highly motivated, diverse team of over 65 nationalities. - The ideal setup for your focus - We are convinced that excellent results are achieved when the conditions are right. That's why we rely on a hybrid working concept that gives you the freedom to always work in the way that best suits your tasks. Do you need new inspiration on an international level? With Workflex, we offer you the opportunity to relocate abroad for up to 30 days a year, depending on your responsibilities. - Grown-up business & startup spirit - In our modern office in Berlin-Friedrichshain, you'll find everything your heart desires, from height-adjustable desks and table tennis to stocked beverage fridges and barista coffee. - Your kick-start at Enpal - Onboarding day with a welcome bag, buddy program, and a team that really supports you. - Stay up to date & help shape the future - Transparent all-hands meetings, short decision-making processes, and an open feedback culture - without mistakes, there is no progress. - The energy transition can only be achieved together - At Enpal, you can expect legendary team spirit and unforgettable team events. - Your extra boost - 29 + 2 vacation days, discounted membership at Wellhub, and corporate benefits. Everything you need to help you achieve a good work-life balance. At Enpal, we are proud of the diversity of our team. No decisions are made on the basis of skin colour, religion or religious belief, ethnic or national origin, nationality, gender identity, sexual orientation, disability or age, either during recruitment or employment. Enpal stands for a safe workplace and takes action against discrimination and harassment of any kind.", "summaryDescription" : "GRC Manager (f/m/d) at Enpal. Skills: GRC, ISMS, Information Security, Risk management. Develop, maintain and continuously improve the ISMS. Coordinate security governance activities", "createdAt" : "2026-06-14T19:30:10.593", "lastUpdated" : "2026-06-16T02:03:32.423", "ingestTimestamp" : "2026-06-14T19:30:10.593", "mongoId" : "6a2cc29274d8ee00a0a06d03", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Information security", "IT risk", "Compliance", "GRC", "ISMS", "Information Security", "Risk management", "Stakeholder management", "Organizational skills", "Audit preparation", "Policy development", "ISO 27001", "NIST", "SOC 2", "Control frameworks", "Information Security Management System", "Governance", "Risk", "Regulatory obligations", "Third-party risk management" ], "skillCount" : 20, "jobCategory" : "operations", "jobSubcategory" : "legal", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "_score" : 812.8016, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Climate Tech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a3092acf292fd229c0c3aec", "title" : "Senior Information Security Analyst, GRC and Responsible AI", "company" : "Sandisk", "industry" : "Computer Hardware", "salary" : { "min" : 135000.0, "max" : 185000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Information Security Analyst in Irvine, United States, adjusted for the technology industry and company size." }, "location" : "Irvine, CA, United States", "locations" : [ "Irvine", "CA", "United States" ], "timestamp" : "2026-06-16T11:20:53.196", "fingerprint" : "9dd4192c5a024a3d989a2de7f510b1ca5b484545771b865adbdd6535841ceb58", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Sandisk/744000132247129-information-security-analyst-4", "externalId" : "744000132247129", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Irvine", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.6856969,-117.8259810" } ], "locationText" : "Irvine, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "AI, GenAI", "professionalSkills" : [ "Risk management", "Governance", "Strategy", "Threat modeling", "Secure-by-design" ], "hardSkillsList" : [ "Risk assessment", "Threat modeling", "Data protection", "Model behavior analysis", "Agent behavior analysis", "AI attack surfaces" ], "hardSkills" : [ { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Data protection", "level" : "intermediate" }, { "name" : "Model behavior analysis", "level" : "intermediate" }, { "name" : "Agent behavior analysis", "level" : "intermediate" }, { "name" : "AI attack surfaces", "level" : "intermediate" } ], "majorSkills" : "GRC, Responsible AI, Risk assessment", "majorSkillsList" : [ "GRC", "Responsible AI", "Risk assessment" ], "coreResponsibilities" : "Drive security intake for AI use cases, Drive risk assessment for AI use cases, Drive ongoing oversight of AI use cases, Drive security intake for AI platforms, Drive risk assessment for AI platforms, Drive ongoing oversight of AI platforms, Drive security intake for AI models, Drive risk assessment for AI models, Drive ongoing oversight of AI models, Drive security intake for third-party vendors, Drive risk assessment for third-party vendors, Drive ongoing oversight of third-party vendors, Lead technical risk assessments, Lead threat modeling, Design practical controls, Recommend practical controls, Design scalable controls, Recommend scalable controls, Partner with Legal, Partner with Privacy, Partner with Procurement, Partner with IT, Partner with Engineering, Partner with business stakeholders, Advance regulatory objectives, Advance contractual objectives, Advance governance objectives, Shape AI governance policies, Shape AI governance standards, Shape AI governance operating procedures, Prepare materials for governance reviews, Build operating model for securing AI, Apply system-level thinking across functions, Drive consistency across functions, Drive scale across functions, Anticipate emerging AI risks, Recommend adjustments to controls, Recommend adjustments to processes, Recommend adjustments to standards, Strengthen enterprise risk management, Conduct technical risk assessments, Conduct business process risk assessments, Document treatment recommendations, Support internal audits, Support external audits, Drive remediation activities", "teamCollaboration" : "Cross-functional stakeholders; Legal; IT; Procurement; Business leaders; Privacy; Engineering", "domainKnowledge" : "Responsible AI; GenAI; Information Security Governance; Risk Management; ISO 27001; NIST CSF 2.0; NIST AI RMF; ISO/IEC 42001; Data protection; AI attack surfaces", "domainList" : [ "responsible-ai", "genai", "information-security-governance", "risk-management", "iso-27001", "nist-csf-2-0", "nist-ai-rmf", "iso-iec-42001", "data-protection", "ai-attack-surfaces" ], "domainSpecificKnowledge" : [ "Responsible AI", "GenAI", "Information Security Governance", "Risk Management", "ISO 27001", "NIST CSF 2.0", "NIST AI RMF", "ISO/IEC 42001", "Data protection", "AI attack surfaces" ], "problemSolvingSkills" : "Risk assessment; Threat modeling; Root cause analysis", "qualificationsBasic" : "5+ years security professional experience, Experience operating independently, Experience influencing cross-functional stakeholders, Experience translating risks into governance solutions, Experience leading GenAI security risk assessments, Experience defining governance standards, Experience partnering with Legal, IT, Procurement, business leaders, Experience advancing regulatory, contractual, governance objectives related to AI, Experience shaping AI governance policies, standards, operating procedures, Experience preparing materials for governance reviews, Experience building end-to-end operating model for securing AI, Experience applying program and system-level thinking, Experience anticipating emerging AI risks, Experience recommending adjustments to controls, processes, standards, Experience strengthening enterprise information security risk management, Experience conducting technical and business process risk assessments, Experience documenting treatment recommendations, Experience supporting internal and external audits, Experience driving remediation activities", "qualificationsPreferred" : "Responsible AI experience, GenAI security risk assessment experience, Experience with ISO 27001, Experience with NIST CSF 2.0, Experience with NIST AI RMF, Experience with ISO/IEC 42001", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Sandisk understands how people and businesses consume data and we relentlessly innovate to deliver solutions that enable today’s needs and tomorrow’s next big ideas. With a rich history of groundbreaking innovations in Flash and advanced memory technologies, our solutions have become the beating heart of the digital world we’re living in and that we have the power to shape. Sandisk meets people and businesses at the intersection of their aspirations and the moment, enabling them to keep moving and pushing possibility forward. We do this through the balance of our powerhouse manufacturing capabilities and our industry-leading portfolio of products that are recognized globally for innovation, performance and quality. Sandisk has two facilities recognized by the World Economic Forum as part of the Global Lighthouse Network for advanced 4IR innovations. These facilities were also recognized as Sustainability Lighthouses for breakthroughs in efficient operations. With our global reach, we ensure the global supply chain has access to the Flash memory it needs to keep our world moving forward. Job Description Senior Information Security Analyst, GRC and Responsible AI As a Senior Information Security Analyst (Level 4), you will play a key role in shaping and operationalizing Sandisk’s enterprise Information Security Governance, Risk Management, and Strategy function, with a particular focus on Responsible GenAI. This is a senior, hands‑on role for an experienced security professional who can operate independently, influence cross‑functional stakeholders, and translate emerging technology risks into practical, scalable governance solutions. You will lead GenAI security risk assessments, help define governance standards, and partner closely with Legal, IT, Procurement, and business leaders to ensure AI adoption is secure, compliant, and aligned with Sandisk’s risk appetite. In addition to AI governance, you will contribute to the evolution of Sandisk’s enterprise risk management frameworks, supporting risk‑based decision‑making, strategy, and continuous improvement across the organization. Key Responsibilities Responsible AI Security * Drive security intake, risk assessment, and ongoing oversight of enterprise AI use cases, platforms, models, and third-party vendors. * Lead technical risk assessments and threat modeling covering data protection, identity and access, integration patterns, model and agent behavior, and emerging AI attack surfaces. * Design and recommend practical, scalable controls aligned with enterprise security standards and secure-by-design principles. * Partner with Legal, Privacy, Procurement, IT, Engineering, and business stakeholders to advance regulatory, contractual, and governance objectives related to AI. * Shape AI governance policies, standards, and operating procedures, and prepare materials for governance reviews. Program and System Thinking * Help build the end-to-end operating model for securing AI, from intake through approval and monitoring. * Apply program and system-level thinking across functions to drive consistency and scale. * Anticipate emerging AI risks and recommend adjustments to controls, processes, and standards. Core GRC * Strengthen enterprise information security risk management aligned with ISO 27001, NIST CSF 2.0, NIST AI RMF, and ISO/IEC 42001. * Conduct technical and business process risk assessments and document treatment recommendations. * Support internal and external audits with metrics, evidence, and analysis, and drive remediation activities. ## Additional Information Sandisk is committed to providing equal opportunities to all applicants and employees and will not discriminate against any applicant or employee based on their race, color, ancestry, religion (including religious dress and grooming standards), sex (including pregnancy, childbirth or related medical conditions, breastfeeding or related medical conditions), gender (including a person’s gender identity, gender expression, and gender-related appearance and behavior, whether or not stereotypically associated with the person’s assigned sex at birth), age, national origin, sexual orientation, medical condition, marital status (including domestic partnership status), physical disability, mental disability, medical condition, genetic information, protected medical and family care leave, Civil Air Patrol status, military and veteran status, or other legally protected characteristics. We also prohibit harassment of any individual on any of the characteristics listed above. Our non-discrimination policy applies to all aspects of employment. We comply with the laws and regulations set forth in the \"[Know Your Rights: Workplace Discrimination is Illegal](https://www.eeoc.gov/sites/default/files/2023-06/22-088EEOCKnowYourRights6.12.pdf)” poster. Our pay transparency policy is available [here](https://www.dol.gov/sites/dolgov/files/OFCCP/pdf/pay-transp%20EnglishformattedESQA508c.pdf). Sandisk thrives on the power and potential of diversity. As a global company, we believe the most effective way to embrace the diversity of our customers and communities is to mirror it from within. We believe the fusion of various perspectives results in the best outcomes for our employees, our company, our customers, and the world around us. We are committed to an inclusive environment where every individual can thrive through a sense of belonging, respect and contribution. Sandisk is committed to offering opportunities to applicants with disabilities and ensuring all candidates can successfully navigate our careers website and our hiring process. Please contact us at [jobs.accommodations@sandisk.com](mailto:jobs.accommodations@sandisk.com) to advise us of your accommodation request. In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying. Based on our experience, we anticipate that the application deadline will be 01/15/2026 (3 months from posting), although we reserve the right to close the application process sooner if we hire an applicant for this position before the application deadline. If we are not able to hire someone from this role before the application deadline, we will update this posting with a new anticipated application deadline. Required Qualifications * Bachelor's degree in information security, Computer Science, Engineering, or a related discipline, or equivalent experience. * 6+ years of progressive experience in Information Security, including exposure to GRC, risk management, or security governance in a complex enterprise environment. * Demonstrated technical proficiency in security, including hands-on experience with threat modeling, technical risk assessment, or security architecture reviews. * Working knowledge of AI security frameworks and standards, including OWASP Top 10 for LLM Applications, NIST AI Risk Management Framework (AI RMF), and ISO/IEC 42001, with familiarity in applying these to real-world use cases. * Practical understanding of AI and generative AI technologies and associated risks, including data protection, access management, model misuse, and supply chain considerations. * Familiarity with AI governance standards such as NIST AI RMF and ISO/IEC 42001. Preferred Qualifications * Background in software development, security engineering, application security, cloud security, or security architecture. * Familiarity with secure development practices, secure-by-design principles, and modern engineering environments such as cloud, APIs, containers, and CI/CD pipelines. * Experience applying threat modeling methodologies (such as STRIDE, PASTA, or attack tree analysis) to enterprise systems or AI workloads. * Professional certifications such as CISSP, CISM, CRISC, or GSNA. * Technical security certifications such as GCIH, GPEN, CEH, OSCP, GWAPT, or CSSLP. * Hands-on experience with AI, ML, or generative AI in a security, risk, engineering, or architecture capacity. * Exposure to emerging AI integration patterns, agentic systems, or AI red teaming. Skills and Attributes * Strong intellectual curiosity and a self-driven approach to learning new technologies. * Effective communication skills, with the ability to explain complex technical and AI concepts to a range of audiences. * Ability to influence and drive outcomes in cross-functional, matrixed environments. * Pragmatic, outcome-focused, and comfortable operating in ambiguity. * Strong program and system-level thinking, with the ability to connect technical decisions to business impact. #LI-TS1 Compensation & Benefits Details * An employee’s pay position within the salary range may be based on several factors including but not limited to (1) relevant education; qualifications; certifications; and experience; (2) skills, ability, knowledge of the job; (3) performance, contribution and results; (4) geographic location; (5) shift; (6) internal and external equity; and (7) business and organizational needs. * The salary range is what we believe to be the range of possible compensation for this role at the time of this posting. We may ultimately pay more or less than the posted range and this range is only applicable for jobs to be performed in California, Colorado, New York or remote jobs that can be performed in California, Colorado and New York. This range may be modified in the future. * You will be eligible to participate in Sandisk's Short-Term Incentive (STI) Plan, which provides incentive awards based on Company and individual performance. Depending on your role and your performance, you may be eligible to participate in our annual Long-Term Incentive (LTI) program, which consists of restricted stock units (RSUs) or cash equivalents, pursuant to the terms of the LTI plan. Please note that not all roles are eligible to participate in the LTI program, and not all roles are eligible for equity under the LTI plan. RSU awards are also available to eligible new hires, subject to Sandisk's Standard Terms and Conditions for Restricted Stock Unit Awards. * We offer a comprehensive package of benefits including paid vacation time; paid sick leave; medical/dental/vision insurance; life, accident and disability insurance; tax-advantaged flexible spending and health savings accounts; employee assistance program; other voluntary benefit programs such as supplemental life and AD&D, legal plan, pet insurance, critical illness, accident and hospital indemnity; tuition reimbursement; transit; the Applause Program, employee stock purchase plan, and the Sandisk's Savings 401(k) Plan. * Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law.", "summaryDescription" : "Senior Information Security Analyst, GRC and Responsible AI at Sandisk. Skills: GRC, Responsible AI, Risk assessment. Drive security intake for AI use cases. Drive risk assessment for AI use cases", "postedDate" : "2026-06-15T16:41:47.000", "createdAt" : "2026-06-16T03:36:35.715", "lastUpdated" : "2026-06-16T11:20:53.196", "ingestTimestamp" : "2026-06-16T03:36:35.715", "mongoId" : "6a3092acf292fd229c0c3aec", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 135000, "salaryAnnualMax" : 185000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Risk assessment", "Threat modeling", "Data protection", "Model behavior analysis", "Agent behavior analysis", "AI attack surfaces", "GRC", "Responsible AI", "Risk management", "Governance", "Strategy", "Secure-by-design", "GenAI", "Information Security Governance", "Risk Management", "ISO 27001", "NIST CSF 2.0", "NIST AI RMF", "ISO/IEC 42001" ], "skillCount" : 19, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 803.07385, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2d350274d8ee00a0b1640e", "title" : "GRC Program Manager, Product and Customer Trust", "company" : "OpenAI", "industry" : "Security", "salary" : { "min" : 216000.0, "max" : 252000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "San Francisco", "locations" : [ "San Francisco" ], "timestamp" : "2026-06-15T03:31:11.449", "fingerprint" : "1455fa4dc7da490e62c71955bd252685c71968e0ec1a1610f4eaefe00929deff", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/OpenAI/cf1e5c80-f42e-45ab-a937-2a4024b961e1/application", "externalId" : "cf1e5c80-f42e-45ab-a937-2a4024b961e1", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "SaaS, Cloud, Security controls", "professionalSkills" : [ "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement", "Product assurance", "Product launch review", "Customer trust", "Security compliance", "Enterprise trust", "GTM support", "Customer security reviews", "Public trust content", "Launch readiness", "Regulated products", "Release risk assessments", "Product assurance evidence", "Intake", "Triage", "Escalations", "Quality review", "Security questionnaires", "Customer calls", "Trust Center updates", "Deal support", "Trust materials", "Launch reviews", "Data handling guidance", "AI-native workflows", "Product feedback", "Control-gap signals", "Assurance workflows" ], "hardSkillsList" : [ "Security questionnaires", "Customer calls", "Trust Center updates", "Launch readiness", "Release risk assessments", "Product assurance evidence", "Customer-facing narratives", "FAQs", "Evidence paths", "Whitepapers", "External claims support", "Internal processes support", "Internal controls support", "Launch reviews", "Data handling guidance", "AI-native workflows", "Customer discovery", "Product feedback", "Control-gap signals" ], "hardSkills" : [ { "name" : "Security questionnaires", "level" : "intermediate" }, { "name" : "Customer calls", "level" : "intermediate" }, { "name" : "Trust Center updates", "level" : "intermediate" }, { "name" : "Launch readiness", "level" : "intermediate" }, { "name" : "Release risk assessments", "level" : "intermediate" }, { "name" : "Product assurance evidence", "level" : "intermediate" }, { "name" : "Customer-facing narratives", "level" : "intermediate" }, { "name" : "FAQs", "level" : "intermediate" }, { "name" : "Evidence paths", "level" : "intermediate" }, { "name" : "Whitepapers", "level" : "intermediate" }, { "name" : "External claims support", "level" : "intermediate" }, { "name" : "Internal processes support", "level" : "intermediate" }, { "name" : "Internal controls support", "level" : "intermediate" }, { "name" : "Launch reviews", "level" : "intermediate" }, { "name" : "Data handling guidance", "level" : "intermediate" }, { "name" : "AI-native workflows", "level" : "intermediate" }, { "name" : "Customer discovery", "level" : "intermediate" }, { "name" : "Product feedback", "level" : "intermediate" }, { "name" : "Control-gap signals", "level" : "intermediate" } ], "majorSkills" : "GRC, Product assurance, Customer trust, Security compliance", "majorSkillsList" : [ "GRC", "Product assurance", "Customer trust", "Security compliance" ], "coreResponsibilities" : "Own customer trust operating model, Improve customer trust operating model, Support strategic customer trust needs, Partner to prepare trust materials, Build reusable customer-facing narratives, Build reusable FAQs, Build reusable evidence paths, Build reusable whitepapers, Ensure external claims are supported, Ensure product launches support claims, Scale launch reviews, Develop data handling guidance, Use automation and AI-native workflows, Turn recurring customer discovery into content, Turn recurring customer discovery into feedback, Turn recurring customer discovery into evidence improvements, Turn recurring customer discovery into control-gap signals", "teamCollaboration" : "Partner with Product teams; Partner with Security teams; Partner with Legal teams; Partner with Privacy teams; Partner with GTM teams; Partner with Field Security teams; Work with other org members", "projectManagementSkills" : [ "Program management" ], "domainKnowledge" : "Product launches; Regulatory readiness; Customer trust; User data handling; Enterprise customers; Strategic launches; Emerging regulatory expectations; Data handling policy; Regulated products; Release risk assessments; Product assurance; SaaS; Cloud; Security controls; Enterprise assurance; Healthcare; Financial Services; Advertising", "domainList" : [ "product-launches", "regulatory-readiness", "customer-trust", "user-data-handling", "enterprise-customers", "strategic-launches", "emerging-regulatory-expectations", "data-handling-policy", "regulated-products", "release-risk-assessments", "product-assurance", "saas", "cloud", "security-controls", "enterprise-assurance", "healthcare", "financial-services", "advertising" ], "domainSpecificKnowledge" : [ "Product launches", "Regulatory readiness", "Customer trust", "User data handling", "Enterprise customers", "Strategic launches", "Emerging regulatory expectations", "Data handling policy", "Regulated products", "Release risk assessments", "Product assurance", "SaaS", "Cloud", "Security controls", "Enterprise assurance", "Healthcare", "Financial Services", "Advertising" ], "toolProficiency" : [ "Codex", "AI-native tools" ], "communicationSkills" : "Translate technical concepts; Customer-facing narratives; External claims; Evidence", "documentationSkills" : "Data handling policy creation; Customer-facing narratives; FAQs; Evidence paths; Whitepapers", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Risk assessment", "outcomesObjectives" : "Scale GRC function; Maintain security and compliance claims; Enable GTM with information; Enable customers with information; Support enterprise customers; Support strategic launches; Support emerging regulatory expectations; Reduce one-off work; Keep claims controlled; Ensure launches support claims; Improve speed and consistency; Reduce manual review; Automate launch review processes; Keep approved content current", "qualificationsBasic" : "Product assurance experience, Product launch review experience, Customer trust experience, Security compliance experience, Enterprise trust experience, Technical fluency across SaaS, Technical fluency across cloud, Technical fluency across security controls, Technical fluency across product launches, Technical fluency across enterprise assurance workflows, Experience building scalable operating models, Experience building metrics, Experience building content systems, Experience building automation for assurance workflows, Ability to support GTM teams, Judgment to distinguish claims, Excellent written communication", "qualificationsPreferred" : "Scaling product launch reviews experience, Vertical specific experience in Healthcare, Vertical specific experience in Financial Services, Vertical specific experience in Advertising, Supported GTM teams, Supported Field Security teams, Supported Sales Engineering teams, Supported Customer Success teams, Supported strategic enterprise customers, Write clearly about external claims, Write precisely about external claims, Write with excellent judgment about external claims, Build systems that scale, Build metrics that scale, Build escalation paths that scale, Use Codex and AI-native tools", "remoteFriendly" : true, "rawDescription" : "About the Team Governance, Risk, and Compliance (GRC) is foundational to Security delivering mission outcomes at OpenAI. The GRC team provides security assurances and builds compliance for OpenAI’s technology, people, and products. We are technical in what we build but operational in how we do our work, and we partner deeply with Product, Security, Legal, Privacy, GTM, and Field Security to help OpenAI move quickly while maintaining trust with customers, auditors, regulators, and the public. About the Role We are looking for an experienced Regulatory & Product Assurance IC to help scale OpenAI’s GRC function across product launches, regulatory readiness, and customer trust. You will partner closely with Product, Security, Legal, Privacy, Field Security, and GTM teams to make sure OpenAI can move quickly while maintaining our security and compliance claims and giving customers, auditors, and regulators accurate and actionable information about how OpenAI handles user data. This role is not about supporting SOC or ISO audits; it's a highly cross-functional and deeply operational role to ensure that our products launch with the right controls; our external narratives remain true and GTM and customers are enabled with the right information to assess OpenAI’s security and compliance. You will help build the systems, content, escalation paths, and automation that allow OpenAI to support enterprise customers, strategic launches, and emerging regulatory expectations without turning GRC into a bottleneck. You should be comfortable working across high-visibility product launches, data handling policy creation, customer security reviews, public trust content, launch readiness, regulated products, release risk assessments, and product assurance evidence. We’re looking for people who bring: - Strong product assurance, product launch review, customer trust, security compliance, or enterprise trust experience in a technical environment. - Ability to support GTM teams with accurate, approved, customer-facing security and compliance narratives. - Judgment to distinguish what can be answered directly, what requires Product/Security/Legal review, and what should not be claimed externally. - Experience building scalable operating models, metrics, content systems, and automation for repeated assurance workflows. - Excellent written communication and comfort translating technical security concepts for customers, auditors, regulators, Sales, and Field Security. In this role, you will: - Own and improve the customer trust operating model with other org members and partner teams, including intake, triage, escalations, SLAs, metrics, and quality review. - Support strategic customer trust needs, including security questionnaires, customer calls, Trust Center updates, and high-priority deal support. - Partner with Product, Security, Legal, Privacy, and GTM teams to prepare accurate, approved trust materials for launches and regulated product changes. - Build reusable customer-facing narratives, FAQs, evidence paths, and whitepapers that reduce one-off work while keeping claims controlled. - Ensure external security and compliance claims are supported by internal processes and controls. - Ensure product launches support our external security and compliance narrative; scale launch reviews to ensure GRC is not a bottleneck. - Develop data handling guidance as needed to provide product teams a paved path consistent with our external commitments. - Use automation and AI-native workflows across internal and external tooling, Codex, and related systems to improve speed and consistency. - Turn recurring customer discovery into reusable content, product feedback, evidence improvements, and control-gap signals. You might thrive in this role if: - You have operated as a senior IC in GRC, product assurance, customer trust/assurance, security compliance, enterprise trust, product security assurance, or a closely related function. - You have technical fluency across SaaS, cloud, security controls, product launches, and enterprise assurance workflows. - You have experience in scaling product launch reviews. - You have vertical specific experience in Healthcare, Financial Services and Advertising. - You have supported GTM, Field Security, Sales Engineering, Customer Success, or strategic enterprise customers. - You write clearly, precisely, and with excellent judgment about external claims and evidence. - You can build systems, metrics, and escalation paths that scale a high-volume assurance function without sacrificing quality. - You are excited to use Codex and other AI-native tools to reduce manual review, automate launch review processes, and keep approved content current. About OpenAI OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity. We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic. For additional information, please see OpenAI’s Affirmative Action and Equal Employment Opportunity Policy Statement https://cdn.openai.com/policies/eeo-policy-statement.pdf. Background checks for applicants will be administered in accordance with applicable law, and qualified applicants with arrest or conviction records will be considered for employment consistent with those laws, including the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, for US-based candidates. For unincorporated Los Angeles County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: protect computer hardware entrusted to you from theft, loss or damage; return all computer hardware in your possession (including the data contained therein) upon termination of employment or end of assignment; and maintain the confidentiality of proprietary, confidential, and non-public information. In addition, job duties require access to secure and protected information technology systems and related data security obligations. To notify OpenAI that you believe this job posting is non-compliant, please submit a report through this form https://form.asana.com/?d=57018692298241&k=5MqR40fZd7jlxVUh5J-UeA. No response will be provided to inquiries unrelated to job posting compliance. We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made via this link https://form.asana.com/?k=bQ7w9h3iexRlicUdWRiwvg&d=57018692298241. OpenAI Global Applicant Privacy Policy https://cdn.openai.com/policies/global-employee-and-contractor-privacy-policy.pdf At OpenAI, we believe artificial intelligence has the potential to help people solve immense global challenges, and we want the upside of AI to be widely shared. Join us in shaping the future of technology.", "summaryDescription" : "GRC Program Manager, Product and Customer Trust at OpenAI. Skills: GRC, Product assurance, Customer trust, Security compliance. Own customer trust operating model. Improve customer trust operating model", "createdAt" : "2026-06-13T23:43:48.603", "lastUpdated" : "2026-06-15T03:31:11.449", "ingestTimestamp" : "2026-06-13T23:43:48.603", "mongoId" : "6a2d350274d8ee00a0b1640e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 216000, "salaryAnnualMax" : 252000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Security questionnaires", "Customer calls", "Trust Center updates", "Launch readiness", "Release risk assessments", "Product assurance evidence", "Customer-facing narratives", "FAQs", "Evidence paths", "Whitepapers", "External claims support", "Internal processes support", "Internal controls support", "Launch reviews", "Data handling guidance", "AI-native workflows", "Customer discovery", "Product feedback", "Control-gap signals", "GRC", "Product assurance", "Customer trust", "Security compliance", "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement", "Product launch review", "Enterprise trust", "GTM support", "Customer security reviews", "Public trust content", "Regulated products", "Intake", "Triage", "Escalations", "Quality review", "Deal support", "Trust materials", "Assurance workflows", "Program management", "Product launches", "Regulatory readiness", "User data handling", "Enterprise customers", "Strategic launches", "Emerging regulatory expectations", "Data handling policy", "SaaS", "Cloud", "Security controls", "Enterprise assurance", "Healthcare", "Financial Services", "Advertising", "Codex", "AI-native tools" ], "skillCount" : 60, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 802.695, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2d0ae174d8ee00a0acba14", "title" : "GRC Program Manager, Product and Customer Trust", "company" : "OpenAI", "industry" : "Security", "salary" : { "min" : 216000.0, "max" : 252000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "San Francisco", "locations" : [ "San Francisco" ], "timestamp" : "2026-06-15T06:53:27.934", "fingerprint" : "c5ea2f950282004ac96cba6636ca4b2a55eab052c5eb106254f177e7bb34fc47", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/openai/cf1e5c80-f42e-45ab-a937-2a4024b961e1/application", "externalId" : "cf1e5c80-f42e-45ab-a937-2a4024b961e1", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "SaaS, Cloud, Security controls", "professionalSkills" : [ "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement", "Product assurance", "Product launch review", "Customer trust", "Security compliance", "Enterprise trust", "GTM support", "External narratives", "Launch readiness", "Regulated products", "Release risk assessments", "Product assurance evidence", "Data handling policy", "Customer security reviews", "Public trust content", "Intake", "Triage", "Escalations", "Quality review", "Security questionnaires", "Customer calls", "Trust Center updates", "Deal support", "Trust materials", "Launch reviews", "Data handling guidance", "AI-native workflows", "Product feedback", "Control-gap signals" ], "hardSkillsList" : [ "Operating models", "Metrics", "Content systems", "Automation", "Assurance workflows", "SLAs", "Quality review", "Security questionnaires", "Customer calls", "Trust Center updates", "Deal support", "Trust materials", "Launch reviews", "Data handling guidance", "AI-native workflows", "Product feedback", "Control-gap signals" ], "hardSkills" : [ { "name" : "Operating models", "level" : "intermediate" }, { "name" : "Metrics", "level" : "intermediate" }, { "name" : "Content systems", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" }, { "name" : "Assurance workflows", "level" : "intermediate" }, { "name" : "SLAs", "level" : "intermediate" }, { "name" : "Quality review", "level" : "intermediate" }, { "name" : "Security questionnaires", "level" : "intermediate" }, { "name" : "Customer calls", "level" : "intermediate" }, { "name" : "Trust Center updates", "level" : "intermediate" }, { "name" : "Deal support", "level" : "intermediate" }, { "name" : "Trust materials", "level" : "intermediate" }, { "name" : "Launch reviews", "level" : "intermediate" }, { "name" : "Data handling guidance", "level" : "intermediate" }, { "name" : "AI-native workflows", "level" : "intermediate" }, { "name" : "Product feedback", "level" : "intermediate" }, { "name" : "Control-gap signals", "level" : "intermediate" } ], "majorSkills" : "GRC, Product assurance, Customer trust, Security compliance", "majorSkillsList" : [ "GRC", "Product assurance", "Customer trust", "Security compliance" ], "coreResponsibilities" : "Own customer trust operating model, Improve customer trust operating model, Support strategic customer trust needs, Partner with teams for trust materials, Build reusable customer-facing narratives, Build reusable FAQs, Build reusable evidence paths, Build reusable whitepapers, Ensure claims supported by controls, Ensure product launches support claims, Scale launch reviews, Develop data handling guidance, Use automation and AI-native workflows, Turn discovery into reusable content, Turn discovery into product feedback, Turn discovery into evidence improvements, Turn discovery into control-gap signals", "teamCollaboration" : "Partner with Product; Partner with Security; Partner with Legal; Partner with Privacy; Partner with GTM; Partner with Field Security; Partner with other org members", "projectManagementSkills" : [ "Program management" ], "domainKnowledge" : "SaaS; Cloud; Security controls; Product launches; Enterprise assurance workflows; Healthcare; Financial Services; Advertising; Data handling policy; Regulated products; General purpose AI", "domainList" : [ "saas", "cloud", "security-controls", "product-launches", "enterprise-assurance-workflows", "healthcare", "financial-services", "advertising", "data-handling-policy", "regulated-products", "general-purpose-ai" ], "domainSpecificKnowledge" : [ "SaaS", "Cloud", "Security controls", "Product launches", "Enterprise assurance workflows", "Healthcare", "Financial Services", "Advertising", "Data handling policy", "Regulated products", "General purpose AI" ], "toolProficiency" : [ "Codex", "AI-native tools" ], "communicationSkills" : "Written communication; Translate technical concepts; Customer-facing narratives; External claims; External evidence", "documentationSkills" : "Whitepapers; FAQs; Data handling guidance", "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Reduce one-off work; Keep claims controlled; Ensure GRC is not bottleneck; Improve speed and consistency", "qualificationsBasic" : "Product assurance experience, Product launch review experience, Customer trust experience, Security compliance experience, Enterprise trust experience, Technical fluency across SaaS, Technical fluency across cloud, Technical fluency across security controls, Technical fluency across product launches, Technical fluency across enterprise assurance workflows, Experience scaling product launch reviews, Ability to support GTM teams, Judgment to distinguish claims, Experience building scalable operating models, Experience building metrics, Experience building content systems, Experience building automation, Excellent written communication", "qualificationsPreferred" : "Vertical specific experience in Healthcare, Vertical specific experience in Financial Services, Vertical specific experience in Advertising, Supported GTM teams, Supported Field Security, Supported Sales Engineering, Supported Customer Success, Supported strategic enterprise customers, Write clearly about external claims, Write precisely about external claims, Write with excellent judgment about external claims, Build systems that scale, Build metrics that scale, Build escalation paths that scale, Use Codex and AI-native tools", "remoteFriendly" : true, "rawDescription" : "About the Team Governance, Risk, and Compliance (GRC) is foundational to Security delivering mission outcomes at OpenAI. The GRC team provides security assurances and builds compliance for OpenAI’s technology, people, and products. We are technical in what we build but operational in how we do our work, and we partner deeply with Product, Security, Legal, Privacy, GTM, and Field Security to help OpenAI move quickly while maintaining trust with customers, auditors, regulators, and the public. About the Role We are looking for an experienced Regulatory & Product Assurance IC to help scale OpenAI’s GRC function across product launches, regulatory readiness, and customer trust. You will partner closely with Product, Security, Legal, Privacy, Field Security, and GTM teams to make sure OpenAI can move quickly while maintaining our security and compliance claims and giving customers, auditors, and regulators accurate and actionable information about how OpenAI handles user data. This role is not about supporting SOC or ISO audits; it's a highly cross-functional and deeply operational role to ensure that our products launch with the right controls; our external narratives remain true and GTM and customers are enabled with the right information to assess OpenAI’s security and compliance. You will help build the systems, content, escalation paths, and automation that allow OpenAI to support enterprise customers, strategic launches, and emerging regulatory expectations without turning GRC into a bottleneck. You should be comfortable working across high-visibility product launches, data handling policy creation, customer security reviews, public trust content, launch readiness, regulated products, release risk assessments, and product assurance evidence. We’re looking for people who bring: - Strong product assurance, product launch review, customer trust, security compliance, or enterprise trust experience in a technical environment. - Ability to support GTM teams with accurate, approved, customer-facing security and compliance narratives. - Judgment to distinguish what can be answered directly, what requires Product/Security/Legal review, and what should not be claimed externally. - Experience building scalable operating models, metrics, content systems, and automation for repeated assurance workflows. - Excellent written communication and comfort translating technical security concepts for customers, auditors, regulators, Sales, and Field Security. In this role, you will: - Own and improve the customer trust operating model with other org members and partner teams, including intake, triage, escalations, SLAs, metrics, and quality review. - Support strategic customer trust needs, including security questionnaires, customer calls, Trust Center updates, and high-priority deal support. - Partner with Product, Security, Legal, Privacy, and GTM teams to prepare accurate, approved trust materials for launches and regulated product changes. - Build reusable customer-facing narratives, FAQs, evidence paths, and whitepapers that reduce one-off work while keeping claims controlled. - Ensure external security and compliance claims are supported by internal processes and controls. - Ensure product launches support our external security and compliance narrative; scale launch reviews to ensure GRC is not a bottleneck. - Develop data handling guidance as needed to provide product teams a paved path consistent with our external commitments. - Use automation and AI-native workflows across internal and external tooling, Codex, and related systems to improve speed and consistency. - Turn recurring customer discovery into reusable content, product feedback, evidence improvements, and control-gap signals. You might thrive in this role if: - You have operated as a senior IC in GRC, product assurance, customer trust/assurance, security compliance, enterprise trust, product security assurance, or a closely related function. - You have technical fluency across SaaS, cloud, security controls, product launches, and enterprise assurance workflows. - You have experience in scaling product launch reviews. - You have vertical specific experience in Healthcare, Financial Services and Advertising. - You have supported GTM, Field Security, Sales Engineering, Customer Success, or strategic enterprise customers. - You write clearly, precisely, and with excellent judgment about external claims and evidence. - You can build systems, metrics, and escalation paths that scale a high-volume assurance function without sacrificing quality. - You are excited to use Codex and other AI-native tools to reduce manual review, automate launch review processes, and keep approved content current. About OpenAI OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity. We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic. For additional information, please see OpenAI’s Affirmative Action and Equal Employment Opportunity Policy Statement https://cdn.openai.com/policies/eeo-policy-statement.pdf. Background checks for applicants will be administered in accordance with applicable law, and qualified applicants with arrest or conviction records will be considered for employment consistent with those laws, including the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, for US-based candidates. For unincorporated Los Angeles County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: protect computer hardware entrusted to you from theft, loss or damage; return all computer hardware in your possession (including the data contained therein) upon termination of employment or end of assignment; and maintain the confidentiality of proprietary, confidential, and non-public information. In addition, job duties require access to secure and protected information technology systems and related data security obligations. To notify OpenAI that you believe this job posting is non-compliant, please submit a report through this form https://form.asana.com/?d=57018692298241&k=5MqR40fZd7jlxVUh5J-UeA. No response will be provided to inquiries unrelated to job posting compliance. We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made via this link https://form.asana.com/?k=bQ7w9h3iexRlicUdWRiwvg&d=57018692298241. OpenAI Global Applicant Privacy Policy https://cdn.openai.com/policies/global-employee-and-contractor-privacy-policy.pdf At OpenAI, we believe artificial intelligence has the potential to help people solve immense global challenges, and we want the upside of AI to be widely shared. Join us in shaping the future of technology.", "summaryDescription" : "GRC Program Manager, Product and Customer Trust at OpenAI. Skills: GRC, Product assurance, Customer trust, Security compliance. Own customer trust operating model. Improve customer trust operating model", "createdAt" : "2026-06-13T22:57:44.670", "lastUpdated" : "2026-06-15T06:53:27.934", "ingestTimestamp" : "2026-06-13T22:57:44.670", "mongoId" : "6a2d0ae174d8ee00a0acba14", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 216000, "salaryAnnualMax" : 252000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Operating models", "Metrics", "Content systems", "Automation", "Assurance workflows", "SLAs", "Quality review", "Security questionnaires", "Customer calls", "Trust Center updates", "Deal support", "Trust materials", "Launch reviews", "Data handling guidance", "AI-native workflows", "Product feedback", "Control-gap signals", "GRC", "Product assurance", "Customer trust", "Security compliance", "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement", "Product launch review", "Enterprise trust", "GTM support", "External narratives", "Launch readiness", "Regulated products", "Release risk assessments", "Product assurance evidence", "Data handling policy", "Customer security reviews", "Public trust content", "Intake", "Triage", "Escalations", "Program management", "SaaS", "Cloud", "Security controls", "Product launches", "Enterprise assurance workflows", "Healthcare", "Financial Services", "Advertising", "General purpose AI", "Codex", "AI-native tools" ], "skillCount" : 54, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 799.70844, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "694ae6ce70f0b99d589b27ff", "title" : "Cybersecurity GRC Specialist", "company" : "Hyundai Capital America", "industry" : "Financial Services", "salary" : { "min" : 115500.0, "max" : 154000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity GRC Specialist in Irvine, CA, adjusted for the Financial Services industry and manager experience level." }, "location" : "United States-California-Irvine", "locations" : [ "United States-California-Irvine", "
Headquarters 1 (HCA_HQ1)
3161 Michelson Dr. Ste 1900
Irvine, 92612

" ], "certifications" : [ "CISSP", "CISM", "CRISC", "CGEIT", "CISA", "ITIL" ], "timestamp" : "2026-06-15T07:26:07.663", "fingerprint" : "028859dc321449421afae6164280d515a7620332b2573dec7f41455905f5c6bc", "source" : "taleo", "language" : "en", "applyUrl" : "https://hyundaicapital.taleo.net/careersection/ex/jobdetail.ftl?job=104123", "externalId" : "104123", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Irvine", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.6856969,-117.8259810" } ], "locationText" : "Irvine, California, United States", "experienceLevel" : "Manager", "technicalSkills" : "Cybersecurity governance, Risk management, Compliance, IT systems", "professionalSkills" : [ "Risk assessments", "Impact analyses", "Remediations", "IT general controls", "Vulnerability analysis", "Threat analysis", "Risk treatment", "Audit controls", "Vendor risk management", "IT risk management", "Reporting" ], "hardSkillsList" : [ "Policy enforcement", "Risk Register management", "ISO 27001 standards", "ISO 27001", "ISO 31000:2009", "ISO 27005:2008", "NIST Special Publications", "NIST Methodologies", "SP800-12", "SP800-30", "SP800-37", "SP800-39", "SP800-53", "SP800-150", "SP800-161", "Gramm-Leach-Bliley Act", "NYDFS Cybersecurity Regulation", "PCI-DSS", "FFIEC", "SOX" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Policy enforcement", "level" : "intermediate" }, { "name" : "Risk Register management", "level" : "intermediate" }, { "name" : "ISO 27001 standards", "level" : "intermediate" }, { "name" : "ISO 27001", "level" : "intermediate" }, { "name" : "ISO 31000:2009", "level" : "intermediate" }, { "name" : "ISO 27005:2008", "level" : "intermediate" }, { "name" : "NIST Special Publications", "level" : "intermediate" }, { "name" : "NIST Methodologies", "level" : "intermediate" }, { "name" : "SP800-12", "level" : "intermediate" }, { "name" : "SP800-30", "level" : "intermediate" }, { "name" : "SP800-37", "level" : "intermediate" }, { "name" : "SP800-39", "level" : "intermediate" }, { "name" : "SP800-53", "level" : "intermediate" }, { "name" : "SP800-150", "level" : "intermediate" }, { "name" : "SP800-161", "level" : "intermediate" }, { "name" : "Gramm-Leach-Bliley Act", "level" : "intermediate" }, { "name" : "NYDFS Cybersecurity Regulation", "level" : "intermediate" }, { "name" : "PCI-DSS", "level" : "intermediate" }, { "name" : "FFIEC", "level" : "intermediate" }, { "name" : "SOX", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Cybersecurity governance, Risk management, Compliance", "majorSkillsList" : [ "Cybersecurity governance", "Risk management", "Compliance" ], "coreResponsibilities" : "Manage security policies, Maintain security policies, Enforce security policies, Develop Risk Register, Implement Risk Register, Maintain Risk Register, Execute Risk Register, Develop Policy Risk Exception Process, Implement Policy Risk Exception Process, Maintain Policy Risk Exception Process, Execute Policy Risk Exception Process, Conduct risk assessments, Conduct impact analyses, Identify risks, Manage remediations, Ensure compliance, Perform GSIF assessments, Monitor GSIF assessments, Ensure remediations follow GSIF ISO 27001 standards, Collaborate with Cybersecurity Risk Management, Collaborate with Cybersecurity Engineering Operations, Collaborate with IT, Ensure security best practices are integrated, Develop metrics for senior management, Develop reporting for senior management, Develop metrics for stakeholders, Develop reporting for stakeholders, Identify security risks, Provide actionable insights, Address gaps, Develop governance mechanisms, Maintain governance mechanisms, Develop automation tools, Maintain automation tools, Track Risk Register, Track compliance status, Develop dashboards, Maintain dashboards, Develop regular reporting, Manage management performance metrics, Manage risk metrics", "teamCollaboration" : "Cross-functional departments; Cybersecurity Risk Management; Cybersecurity Engineering Operations; IT; Senior management; Stakeholders", "domainKnowledge" : "Financial services; IT systems; Cybersecurity risk management frameworks; IT general controls; ISO 27001/2; ISO 31000:2009; ISO 27005:2008; NIST Special Publications; NIST Methodologies; California Consumer Privacy Act; Gramm-Leach-Bliley Act; NYDFS Cybersecurity Regulation; PCI-DSS; FFIEC; SOX; Financial regulatory frameworks; Cybersecurity best practices", "domainList" : [ "financial-services", "it-systems", "cybersecurity-risk-management-frameworks", "it-general-controls", "iso-27001-2", "iso-31000-2009", "iso-27005-2008", "nist-special-publications", "nist-methodologies", "california-consumer-privacy-act", "gramm-leach-bliley-act", "nydfs-cybersecurity-regulation", "pci-dss", "ffiec", "sox", "financial-regulatory-frameworks", "cybersecurity-best-practices" ], "domainSpecificKnowledge" : [ "Financial services", "IT systems", "Cybersecurity risk management frameworks", "IT general controls", "ISO 27001/2", "ISO 31000:2009", "ISO 27005:2008", "NIST Special Publications", "NIST Methodologies", "California Consumer Privacy Act", "Gramm-Leach-Bliley Act", "NYDFS Cybersecurity Regulation", "PCI-DSS", "FFIEC", "SOX", "Financial regulatory frameworks", "Cybersecurity best practices" ], "toolProficiency" : [ "Governance automation tools" ], "communicationSkills" : "Communicate complex security concepts", "continuousLearning" : "Tuition reimbursement", "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "5-7 years progressive experience, Bachelor's degree in Cybersecurity, Working knowledge of Cybersecurity risk management frameworks, Working knowledge of Information Security & Risk Frameworks, Working knowledge of CCPA, Working knowledge of GLBA, Working knowledge of NYDFS Cybersecurity Regulation, Working knowledge of PCI-DSS, Working knowledge of FFIEC, Working knowledge of SOX", "qualificationsPreferred" : "Master's degree a plus, CISSP certification highly desirable, CISM certification highly desirable, CRISC certification highly desirable, CGEIT certification highly desirable, CISA certification highly desirable, ITIL certification highly desirable, Basic understanding of financial regulatory frameworks", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Who We Are Through our service brands Hyundai Motor Finance, Genesis Finance, and Kia Finance, Hyundai Capital America offers a wide range of financial products tailored to meet the needs of Hyundai, Genesis, and Kia customers and dealerships. We provide vehicle financing, leasing, subscription, and insurance solutions to over 2 million consumers and businesses. Embodying our commitment to grow, innovate, and diversify, we strive to reimagine the customer and dealer experience and launch innovative new products that broaden our market reach. We believe that success comes from within and are proud to support our team members through skill development and career advancement. Hyundai Capital America is an Equal Opportunity Employer committed to creating a diverse and inclusive culture for our workforce. We are a values-driven company dedicated to supporting both internal and external communities through volunteering, philanthropy, and the empowerment of our Employee Resource Groups. Together, we strive to be the leader in financing freedom of movement. We Take Care of Our People Along with competitive pay, as an employee of HCA, you are eligible for the following benefits: · Medical, Dental and Vision plans that include no-cost and low-cost plan options · Immediate 401(k) matching and vesting · Vehicle purchase and lease discounts plus monthly vehicle allowances · Paid Volunteer Time Off with company donation to a charity of your choice · Tuition reimbursement What to Expect The Cybersecurity Governance Manager plays a critical role in the organization's second line of defense, ensuring policies, governance frameworks, and regulatory adherence in cybersecurity governance, risk and compliance across the organization. This role establishes oversight mechanisms, monitors compliance with industry regulations, and ensures access-related risks are effectively managed. In addition, this role ensures governance and compliance strategies are aligned with business objectives and security standards. What You Will Do 1. Cybersecurity Governance and Risk Management · Manage, maintain and enforce security policies, standards and guidelines related to Cybersecurity governance processes. · Develop, implement, maintain and execute a Cybersecurity Risk Register, Policy Risk Exception Process, and Procedures. · Conduct risk assessments and impact analyses to identify risks, manage remediations, to ensure compliance across business systems, IT Infrastructure, and network operating environments. 2. Cybersecurity Risk Assessment · Perform Global Integrated Security Framework (GSIF) assessments, monitor and ensure remediations are following GSIF ISO 27001 standards across cross-functional departments. · Collaborate with Cybersecurity Risk Management, Cybersecurity Engineering Operations, and IT to ensure security best practices are integrated within each project and system deployment. 3. Cybersecurity Governance and Risk Reporting · Develop metrics and reporting for senior management and stakeholders that identify security risks and provide actionable insights to address gaps. · Develop and maintain the governance mechanisms and automation tools track the Risk Register, and compliance status across the organization. · Develop and maintain dashboards and regular reporting to manage management performance metrics, risk metrics. What You Will Bring · Minimum 5-7 years progressive experience in cybersecurity governance, risk management, or compliance within financial services with a deep understanding of the IT systems. · Bachelor’s degree in Cybersecurity, Information Security, Risk Management or a related field · Master’s degree a plus. · Certifications such as CISSP, CISM, CRISC, CGEIT, CISA, and ITIL are highly desirable. · Working knowledge of Cybersecurity risk management frameworks, Governance, Risk, and Compliance process, IT general controls (e.g. asset classification, risk assessments, vulnerability and threat analysis, risk treatment, audit controls and remediation, vendor risk management, and IT risk management & reporting). · Working knowledge of Information Security & Risk Frameworks including ISO 27001/2, ISO 31000:2009, ISO 27005:2008; NIST Special Publications and Methodologies (e.g. SP800-12, 30, 37, 39, 53,150, 161). · Working knowledge of California Consumer Privacy Act (CCPA), Gramm-Leach-Bliley Act (GLBA), NYDFS Cybersecurity Regulation, PCI-DSS, FFIEC, SOX, and other relevant laws and regulations. · Basic understanding of financial regulatory frameworks and cybersecurity best practices. · Ability to communicate complex security concepts to business leaders and technical teams. Work Environment Employees in this class are subject to extended periods of sitting, standing and walking, and using a computer. Work is performed in an office environment. The posted salary range for this job takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; geographic location, and other business and organizational needs. Successful candidates may be hired anywhere in the salary range based on these factors. It is uncommon to hire candidates at or near the top of the range. California Privacy Notice This notice only applies to our applicants who reside in the State of California. The latest version of our Privacy Policy can be found here . This Privacy Policy provides you with notice, at or before the point of collection, about the categories of personal information to be collected from you, the purposes for which your personal information is collected or used, and whether that information is sold or shared, so that you can exercise meaningful control over our use of your personal information. We are providing this notice to comply with the California Consumer Privacy Act of 2018, as amended as amended by the California Privacy Rights Act of 2020 (“CCPA”). If you have any questions about CCPA regarding California residents or HCA team members, please contact the Privacy Team at Privacy2@hcs.com . United States-California-Irvine", "summaryDescription" : "Cybersecurity GRC Specialist at Hyundai Capital America. Skills: Cybersecurity governance, Risk management, Compliance. Manage security policies. Maintain security policies", "createdAt" : "2026-06-14T02:33:22.264", "lastUpdated" : "2026-06-15T07:26:07.663", "ingestTimestamp" : "2026-06-14T02:33:22.264", "mongoId" : "694ae6ce70f0b99d589b27ff", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 115500, "salaryAnnualMax" : 154000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Policy enforcement", "Risk Register management", "ISO 27001 standards", "ISO 27001", "ISO 31000:2009", "ISO 27005:2008", "NIST Special Publications", "NIST Methodologies", "SP800-12", "SP800-30", "SP800-37", "SP800-39", "SP800-53", "SP800-150", "SP800-161", "Gramm-Leach-Bliley Act", "NYDFS Cybersecurity Regulation", "PCI-DSS", "FFIEC", "SOX", "Leadership", "Cybersecurity governance", "Risk management", "Compliance", "Risk assessments", "Impact analyses", "Remediations", "IT general controls", "Vulnerability analysis", "Threat analysis", "Risk treatment", "Audit controls", "Vendor risk management", "IT risk management", "Reporting", "Financial services", "IT systems", "Cybersecurity risk management frameworks", "ISO 27001/2", "California Consumer Privacy Act", "Financial regulatory frameworks", "Cybersecurity best practices", "CISSP", "CISM", "CRISC", "CGEIT", "CISA", "ITIL", "Governance automation tools" ], "skillCount" : 49, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 796.32764, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services", "llmIndustryConfidence" : 0.95 }, { "id" : "6a25146374d8ee00a00bb735", "title" : "Security Industry Specialist, Subsidiary & Acquisition GRC", "company" : "Amazon.com Services LLC", "industry" : "Project/Program/Product Management--Technical, Security Industry Specialist, amazon security", "salary" : { "min" : 102000.0, "max" : 178400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Austin, Texas, USA", "locations" : [ "Austin, Texas, USA" ], "certifications" : [ "AWS Professional level certification" ], "timestamp" : "2026-06-15T05:33:18.260", "fingerprint" : "fd155158f7340dad9777e98187742cf3186c07c6b5c6f5dea9ebb51f20d95502", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10440335/apply", "externalId" : "eb884b59-d156-475c-89f5-ef2b34269921", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Cloud, Devices, AWS", "professionalSkills" : [ "Risk assessment", "Compliance programs", "Audit execution", "Data protection", "Insider threat", "Third party risk", "Information security", "Security risk metrics", "Cloud environment" ], "hardSkillsList" : [ "Regulatory requirements", "Data protection", "Insider threat", "Third party risk", "Access management", "Security controls", "Risk metrics", "Control libraries", "Compliance requirements", "Security standards", "Cloud security", "Privacy concepts" ], "softSkillsList" : [ "Innovative process changes" ], "hardSkills" : [ { "name" : "Regulatory requirements", "level" : "intermediate" }, { "name" : "Data protection", "level" : "intermediate" }, { "name" : "Insider threat", "level" : "intermediate" }, { "name" : "Third party risk", "level" : "intermediate" }, { "name" : "Access management", "level" : "intermediate" }, { "name" : "Security controls", "level" : "intermediate" }, { "name" : "Risk metrics", "level" : "intermediate" }, { "name" : "Control libraries", "level" : "intermediate" }, { "name" : "Compliance requirements", "level" : "intermediate" }, { "name" : "Security standards", "level" : "intermediate" }, { "name" : "Cloud security", "level" : "intermediate" }, { "name" : "Privacy concepts", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Innovative process changes" } ], "majorSkills" : "Security risk, Compliance, Audit", "majorSkillsList" : [ "Security risk", "Compliance", "Audit" ], "coreResponsibilities" : "Understand regulatory requirements, Assess compliance needs, Assess maturity of processes, Assess maturity of controls, Design security programs, Build security programs, Execute security programs, Design compliance programs, Build compliance programs, Execute compliance programs, Ensure successful audit executions, Identify compliance needs, Assess data protection issues, Develop data protection recommendations, Assess insider threat issues, Develop insider threat recommendations, Assess third party risk issues, Develop third party risk recommendations, Ensure compliance to policies, Review technical security controls, Develop security risk metrics, Maintain control libraries, Maintain compliance requirements, Provide business interpretations, Support automation opportunities, Liaise with auditors, Articulate control implementation, Articulate control impact, Establish security considerations, Establish privacy considerations, Establish compliance considerations", "teamCollaboration" : "Business teams; Security teams; Stakeholder teams; Privacy teams; Legal teams; HR teams; IT teams; Business and SMEs; Multiple organizations; Multiple teams", "domainKnowledge" : "Service security; Device security; Data protection; Insider threat; Third party risk; Access management; Security architecture; Cloud security; Privacy concepts; NIST; SOC 2; ISO 27001; PCI DSS; HIPAA", "domainList" : [ "service-security", "device-security", "data-protection", "insider-threat", "third-party-risk", "access-management", "security-architecture", "cloud-security", "privacy-concepts", "nist", "soc-2", "iso-27001", "pci-dss", "hipaa" ], "domainSpecificKnowledge" : [ "Service security", "Device security", "Data protection", "Insider threat", "Third party risk", "Access management", "Security architecture", "Cloud security", "Privacy concepts", "NIST", "SOC 2", "ISO 27001", "PCI DSS", "HIPAA" ], "communicationSkills" : "Communicate to customers; Communicate across audiences", "innovationCreativity" : "Drive innovative process changes", "problemSolvingSkills" : "Identify compliance needs; Assess issues; Develop recommendations; Review security controls; Troubleshoot vulnerabilities", "outcomesObjectives" : "Ensure successful audit executions; Promote transparency across measures", "qualificationsBasic" : "3+ years IT platform implementation, Bachelor's degree in computer science or equivalent, 5+ years IT Security experience, 3+ years performing technical assessments, Experience in security or compliance consulting", "qualificationsPreferred" : "Master's degree in technical or engineering field, 1+ years technical specialist experience, 1+ years design and architecture experience, AWS Professional level certification, Experience communicating across technical and non-technical audiences, Experience with compliance & security standards", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Blink (Amazon’s subsidiary) Security team is growing and looking for a highly motivated security risk & compliance specialist to join our team and drive regulatory compliance requirements for our products. In this role, you will work collaboratively with various business and security teams across Amazon to identify compliance needs, assess the maturity of processes and controls, design, build, and execute high-impact security or compliance programs to ensure successful audit executions. You should be a technically experienced and innovative security, risk, compliance, and audit professional who has the ability to understand systems, security, and privacy processes, communicate to customers, and to be able to drive innovative process changes through multiple organizations and teams. Key job responsibilities • Understand and rationalize regulatory requirements for service and device security • Proactively assess, identify and develop recommendations regarding data protection, insider threat, data sharing, identity and access management, and third party risk issues and vulnerabilities by working with multiple stakeholder teams, including Privacy, Legal, HR, IT, etc • Engage with the Business and SMEs to ensure compliance to information security policies • Review security controls that are technical in nature, such as access controls, data encryption in transit and at rest, and auditing and logging user activity • Develop and maintain relevant security risk metrics to promote transparency across the organization; measures, monitors and reports on information security risks to management • Maintain control libraries and compliance requirements and guidance materials for various security standards and regulations. • Provide business specific interpretations and support automation opportunities • Liaise with auditors, articulate control implementation and impact, and establish considerations for applying security, privacy and compliance concepts to a technical cloud environment A day in the life The Subsidiary & Acquisition Security team designs and engineers high-profile consumer devices, including the Ring, Blink, Amazon Keys, and Side walk family of products. The Subsidiary & Acquisition GRC team works to ensure that our services are designed and implemented to the high standards required to maintain and enhance customer trust. Security and Privacy are paramount to maintaining trust and we need to continue to build trusted products, maintain and operate trusted environments, and advocate trust to customers and stakeholders About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Experience in security or compliance consulting or advisory work in support of a highly technical environment - 3+ years of IT platform implementation in a technical and analytical role experience - Bachelor's degree in computer science or equivalent, or 5+ years of IT Security experience - 3+ years in performing and/or participating in technical assessments in direct support of a major compliance effort (e.g. NIST, SOC 2, or ISO) Preferred Qualifications: - Master's degree or above in a technical or engineering related field, such as Electrical Engineering, Computer Science, etc. - Knowledge of one or more of the following domains: access-control system and methodology, network security, application- and system-development security, security architecture and models, cryptography, and operations security - 1+ years of technical specialist, design and architecture experience, or AWS Professional level certification - Knowledge of professional software engineering & best practices for full software development life cycle, including coding standards, software architectures, code reviews, source control management, continuous deployments, testing, and operational excellence - Experience communicating across technical and non-technical audiences, including executive level stakeholders or clients - Experience with compliance & security standards including PCI DSS, ISO 27001, HIPAA, and NIST Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, CA, Hawthorne - 102,000.00 - 178,400.00 USD annually USA, TX, Austin - 102,000.00 - 178,400.00 USD annually", "summaryDescription" : "Security Industry Specialist, Subsidiary & Acquisition GRC at Amazon.com Services LLC. Skills: Security risk, Compliance, Audit. Understand regulatory requirements. Assess compliance needs", "postedDate" : "2026-06-13T15:59:56.263", "createdAt" : "2026-06-13T15:59:56.263", "lastUpdated" : "2026-06-15T05:33:18.260", "ingestTimestamp" : "2026-06-13T15:59:56.263", "mongoId" : "6a25146374d8ee00a00bb735", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10440335/apply", "salaryAnnualMin" : 102000, "salaryAnnualMax" : 178400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Regulatory requirements", "Data protection", "Insider threat", "Third party risk", "Access management", "Security controls", "Risk metrics", "Control libraries", "Compliance requirements", "Security standards", "Cloud security", "Privacy concepts", "Innovative process changes", "Security risk", "Compliance", "Audit", "Risk assessment", "Compliance programs", "Audit execution", "Information security", "Security risk metrics", "Cloud environment", "Service security", "Device security", "Security architecture", "NIST", "SOC 2", "ISO 27001", "PCI DSS", "HIPAA", "AWS Professional level certification" ], "skillCount" : 31, "jobCategory" : "project-management", "dataQualityScore" : 0.8888889, "_score" : 792.7453, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2c6d1a74d8ee00a091d377", "title" : "GRC Engineer", "company" : "Nintendo of America", "industry" : "Technology", "salary" : { "min" : 108450.0, "max" : 173550.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Redmond, WA", "locations" : [ "Redmond", "WA" ], "timestamp" : "2026-06-15T10:09:53.541", "fingerprint" : "1cc66b0d418f64063684be0302351b2cf1e7be83c25eb7a8ae99b978424c7fec", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://careers.nintendo.com/?gh_jid=4210861009", "externalId" : "4210861009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Redmond", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "47.6694141,-122.1238767" } ], "locationText" : "Redmond, Washington, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Network security, Application security, Networking concepts, Protocols, Firewalls, TLS, IDS/IPS, Cryptographic systems, Identity management, RADIUS, Python, Perl, Scripting, NIST CSF, PCI DSS, J-SOX", "professionalSkills" : [ "Risk assessment", "Vendor risk evaluations", "Risk management", "Business partnership", "Control implementation", "Regulatory interpretation" ], "hardSkillsList" : [ "Risk-based analysis", "Anomaly detection", "Response" ], "hardSkills" : [ { "name" : "Risk-based analysis", "level" : "intermediate" }, { "name" : "Anomaly detection", "level" : "intermediate" }, { "name" : "Response", "level" : "intermediate" } ], "majorSkills" : "Governance, Risk, Compliance, Cybersecurity", "majorSkillsList" : [ "Governance", "Risk", "Compliance", "Cybersecurity" ], "coreResponsibilities" : "Conduct cybersecurity risk assessments, Evaluate third-party risk, Identify security risks, Analyze security threats, Document vulnerabilities, Support risk register development, Maintain risk treatment plans, Ensure compliance with regulations, Ensure compliance with standards, Ensure compliance with frameworks, Contribute to policy development, Review security standards, Maintain security procedures, Support internal audits, Support external audits, Collect evidence, Track remediation, Monitor compliance posture, Report on control effectiveness, Report on risk metrics, Design automation, Build automation, Maintain automation, Design tooling, Build tooling, Maintain tooling, Apply technical approach, Integrate GRC workflows, Support compliance by design, Contribute to scalable approaches, Identify opportunities to reduce toil, Identify opportunities to reduce friction, Treat GRC capabilities as products, Improve workflows, Improve usability, Improve sustainability, Partner with IT, Partner with engineering, Partner with legal, Partner with privacy, Partner with business teams, Support control implementation, Translate requirements, Provide guidance to stakeholders, Support stakeholders, Maintain awareness of threats, Maintain awareness of regulatory changes, Maintain awareness of best practices", "teamCollaboration" : "IT; Engineering; Legal; Privacy; Business teams", "domainKnowledge" : "Cybersecurity risk; Regulatory interpretation; Risk management; NIST CSF; PCI DSS; J-SOX; NIST AI RMF; ISO 42001", "domainList" : [ "cybersecurity-risk", "regulatory-interpretation", "risk-management", "nist-csf", "pci-dss", "j-sox", "nist-ai-rmf", "iso-42001" ], "domainSpecificKnowledge" : [ "Cybersecurity risk", "Regulatory interpretation", "Risk management", "NIST CSF", "PCI DSS", "J-SOX", "NIST AI RMF", "ISO 42001" ], "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "specialRequirements" : "Legally eligible to work, Visa sponsorship not available", "outcomesObjectives" : "Reduce compliance burden; Improve scalability; Enable sustainable compliance", "qualificationsBasic" : "4 years of related experience, Professional experience with architectural understanding, Experience with complex issues, Knowledge of networking concepts, Experience with programming/scripting, Understanding of networking topologies, Experience working in multiple security domains, Undergraduate degree in Computer Science", "qualificationsPreferred" : "Familiarity with compliance frameworks, Familiarity with AI risk compliance frameworks", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "About Nintendo of America: From the launch of the Nintendo Entertainment System™ more than 30 years ago, Nintendo’s mission has been to create smiles through unique entertainment experiences. Here at Nintendo of America Inc., we deliver on this mission by partnering closely with Nintendo Co., Ltd., to bring Nintendo’s iconic and cherished franchises including Mario™, Donkey Kong™, The Legend of Zelda™, Metroid™, Animal Crossing™, Pikmin™ and Splatoon™ across the Americas through our video games, hardware systems, and collaborations with partners on a range of other entertainment initiatives like feature films and theme parks. Based in Redmond, Wash., Nintendo of America serves as headquarters for Nintendo’s operations in the Americas. We are an equal opportunity employer offering a welcoming and inclusive environment in service to one another, our products, and the diverse consumers and communities we call home. For more information about Nintendo, please visit the company’s website at https://www.nintendo.com/. Job Summary: This role is within Nintendo of America (NOA)’s IT Security department. We are hiring a GRC Engineer to help modernize how Governance, Risk, and Compliance (GRC) operates across the organization. This role is focused on reducing compliance burden, improving scalability, and enabling sustainable compliance through thoughtful use of automation, tooling, and sound engineering judgment. This is an early-to-mid career role designed for someone with a solid foundation in cybersecurity risk and compliance who is ready to grow into a more technical, systems-oriented GRC career path. The GRC Engineer will work hands-on with both GRC processes and technical solutions, learning how to design workflows that scale while continuing to build depth in regulatory interpretation, risk management, and business partnership. This role is accountable for how GRC work gets done, not just for completing GRC tasks. Routine compliance activities are expected to become increasingly automated; this role focuses on designing, improving, and governing those workflows to make compliance more reliable and less disruptive to the business. Description of Duties: Conduct cybersecurity risk assessments, including third-party/vendor risk evaluations (TPRM), with an emphasis on consistency, repeatability, and scalability Identify, analyze, and document security risks, threats, and vulnerabilities Support the development and maintenance of risk registers and risk treatment plans Assist in ensuring compliance with applicable regulations, standards, and frameworks (e.g., NIST CSF, PCI DSS, J-SOX, etc.) Contribute to the development, review, and maintenance of information security policies, standards, and procedures Support internal and external audits, including evidence collection and remediation tracking Monitor and report on compliance posture, control effectiveness, and risk metrics Help design, build, and maintain automation and tooling that reduces manual GRC effort and improves reliability Apply the most appropriate technical approach—custom scripts, low-code/no-code platforms, workflow automation, or AI-assisted techniques—based on problem complexity and process maturity Integrate GRC workflows with internal systems (e.g., ticketing, asset management, identity, cloud platforms) to support compliance by design Contribute to scalable approaches for evidence collection, control testing, risk tracking, and reporting Identify opportunities to reduce GRC toil and compliance friction for both the business and the security team Treat GRC capabilities as internal products, iteratively improving workflows, usability, and sustainability over time Partner with IT, engineering, legal, privacy, and business teams to support effective and practical security control implementation Translate regulatory and framework requirements into clear, implementable expectations Provide guidance and support to stakeholders to help them meet compliance requirements with minimal disruption Maintain awareness of emerging threats, regulatory changes, and industry best practices Summary of Requirements: Minimum of four (4) years of related experience in security development technologies and practices. Professional experience with an architectural understanding of network security and application security. Experience with work on complex issues where analysis of situations or data requires an in-depth evaluation of variable factors. Strong knowledge of networking concepts, protocols (TCP/IP, HTTP, DNS, TLS) and technologies including firewalls, TLS, IDS/IPS system, cryptographic systems, identity management systems, RADIUS, etc. Experience with programming/scripting (Python/Perl/bash/etc.). Strong understanding of networking topologies and protocols. Experience working in multiple security domains with a focus on risk-based analysis of anomalies, detection and response. Proven experience with work on complex security issues where analysis of situations or data requires an in-depth evaluation of variable factors. Undergraduate degree in Computer Science, a related field, or equivalent. Familiarity with compliance frameworks (NIST, PCI, JSOX). Familiarity with AI risk compliance frameworks (NIST AI RMF, ISO 42001) a plus Applicants must be legally eligible to work in the United States to be considered. Visa sponsorship is not available for this role. This position is hybrid in Redmond, WA. Hybrid positions require regular onsite work following the schedule and guidelines for their division. This position is not open to fully remote status at this time. Relocation assistance may be available. This position includes the base pay range listed below, potential for a semi-annual discretionary performance bonus, and a comprehensive benefits package that includes medical, dental, vision, 401(k), and paid time off. Pay Range: $108,450—$173,550 USD", "summaryDescription" : "GRC Engineer at Nintendo of America. Skills: Governance, Risk, Compliance, Cybersecurity. Conduct cybersecurity risk assessments. Evaluate third-party risk", "postedDate" : "2026-06-14T09:40:28.190", "createdAt" : "2026-06-14T09:40:28.190", "lastUpdated" : "2026-06-15T10:09:53.541", "ingestTimestamp" : "2026-06-14T09:40:28.190", "mongoId" : "6a2c6d1a74d8ee00a091d377", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 108450, "salaryAnnualMax" : 173550, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Risk-based analysis", "Anomaly detection", "Response", "Governance", "Risk", "Compliance", "Cybersecurity", "Risk assessment", "Vendor risk evaluations", "Risk management", "Business partnership", "Control implementation", "Regulatory interpretation", "Cybersecurity risk", "NIST CSF", "PCI DSS", "J-SOX", "NIST AI RMF", "ISO 42001" ], "skillCount" : 19, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 791.46246, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ac2e474d8ee00a06f811c", "title" : "Manager, Information Security GRC", "company" : "OneTrust", "industry" : "Technology", "salary" : { "min" : 65000.0, "max" : 95000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Manager, Information Security GRC in Madrid, Spain, adjusted for SaaS industry and manager seniority." }, "location" : "Madrid, Madrid, Spain", "locations" : [ "Madrid", "Madrid", "Spain" ], "timestamp" : "2026-06-14T23:06:18.191", "fingerprint" : "240858e003623d250b53cca23cd62522539ab6192172b2ccea823354de189e6a", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/onetrust/jobs/7982684", "externalId" : "7982684", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Madrid", "state" : "Madrid", "country" : "Spain", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "40.4237276,-3.6899043" } ], "locationText" : "Madrid, Madrid, Spain", "experienceLevel" : "Manager", "softSkillsList" : [ "Leadership" ], "softSkills" : [ { "name" : "Leadership" } ], "domainKnowledge" : "Information Security; Governance; Risk; Compliance; Third-party risk management; Multi-cloud environment", "domainList" : [ "information-security", "governance", "risk", "compliance", "third-party-risk-management", "multi-cloud-environment" ], "domainSpecificKnowledge" : [ "Information Security", "Governance", "Risk", "Compliance", "Third-party risk management", "Multi-cloud environment" ], "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Strength in Trust OneTrust’s mission is to enable innovation through the responsible use of data and AI. We believe that ensuring data is trusted shouldn’t slow teams down—it should accelerate what’s possible. This led us to develop the first technology platform for responsible data use in 2016. Today, with AI representing the latest and most impactful expansion of data yet, OneTrust is once again redefining what responsible innovation looks like. OneTrust, the AI‑Ready Governance Platform™, unifies regulatory intelligence, automation, and connected governance workflows so businesses can continue to move at the speed of AI while ensuring good governance to prevent data misuse at scale. Trusted by thousands of organizations worldwide, OneTrust is shaping the future where trusted data becomes a transformative force for business and society. The Challenge This role leads one or more GRC (Governance, Risk and Compliance) program functions for OneTrust. This role is also responsible for customer security and third-party risk. This is a critical role at OneTrust because it helps ensure we have the right processes, oversight, and support in place to protect the company, support our customers, and scale our security and compliance efforts effectively. Your Mission Lead and mature the Security GRC team and its programs, ensuring the team is working effectively and is adequate for the size and scope of the company. This person will, on a daily and weekly basis: lead a team of Security GRC analysts mature program processes and procedures measure quality of work and performance indicators to ensure resources are applied to the right places manage the customer security team, which handles customer contract reviews, questionnaires, assessments, RFPs, and customer calls manage third-party risk for the company manage key vendor relationships Primary Responsibilities / Expected Results manage and mature the Security GRC team, ensuring monitoring so the team is working effectively and is adequate for the size and scope of the company create and maintain a scalable process for compliance and continuous assurance collaborate with IT, InfoSec, and within the GRC team to mature the compliance process and become a trust advisor to IT, InfoSec, R&D, and the business transform our ongoing risk and control self-assessment, audit management, security risk assessment, and third-party assessment processes execute risk assessments of third-party vendors provide front-line support to customer meetings and audit requests to ensure that OneTrust’s customers understand the security program and controls and how it meets their requirements support requests from the audit team, risk team, security awareness team, and other internal stakeholders Success in This Role Success in this role is defined by: a well-managed and scalable Security GRC team strong and repeatable compliance and continuous assurance processes improved risk and assessment processes across the business effective support for customer security needs and audit requests strong collaboration and trusted partnership across IT, InfoSec, R&D, and the business You Are qualified with a College BS/BA degree, progressive educational certificate, or equivalent experienced, with 5+ years of experience in Information Security knowledgeable, with 3+ years of experience in a GRC analyst or information security support role a people leader, with 2+ years as a people leader, team lead, or in a senior analyst/engineer capacity on the team experienced managing teams and technologies in a multi-cloud environment Where we Work We are embracing an office-first culture, encouraging three days a week in office for most roles, with meaningful opportunities to collaborate and celebrate in person. Each role may have specific requirements or flexibility depending on the scope of the position, so we encourage you to verify this with your recruiter during your first interview. Benefits As an employee at OneTrust, you will be part of the OneTeam. That means you’ll receive support physically, mentally, and emotionally so that you can do your best work both in and out of the office. This includes comprehensive healthcare coverage, flexible PTO, equity RSUs, annual performance bonus opportunities, retirement account support, 14+ weeks of paid parental leave, career development opportunities, company-paid privacy certification exam fees, and much more. Specific benefits differ by country. For more information, talk to your recruiter or visit onetrust.com/careers. Resources Check out the following to learn more about OneTrust and its people: OneTrust Careers on YouTube @LifeatOneTrust on Instagram Your Data You have the right to have your personal data updated or removed. You also have the right to have a copy of the information OneTrust holds about you. Further details about these rights are available on the website in our Privacy Overview. You can change your mind at any time and have your personal data removed from our database. In order to do this you must contact us and let us know you wish to be removed. The request should be made on the Data Subject Request Form. Recruitment fraud warning: OneTrust is aware of scams involving false offers of employment with our company. The fraudulent jobs, interviews and job offers use fake websites, email addresses, group chat and text messages. Be aware that we never ask candidates for personal information, IDs or bank information during the interview process. We do not interview prospective candidates via instant message or group chat, and do not require candidates to purchase products or services, or process payments on our behalf as a condition of any employment offer. Please note that any legitimate interview availability requests will come directly from a OneTrust recruiter with an \"@onetrust.com\" email address. You may also receive legitimate emails from \"@us.greenhouse-mail.io\". Recruiters will only reach out to candidates who have applied for a role through our ATS (Greenhouse) or prospects via LinkedIn InMail. Job offers will come from a recruiter and may have a \"@docusign.net\" email address. For more information or if you have been targeted please reach out to askrecruiting@onetrust.com. Our Commitment to You When you join OneTrust you are stepping onto a launching pad — the countdown has begun. The destination? A career without boundaries working alongside a diverse and inclusive crew who is passionate about doing meaningful work. As a pioneer, your voice and expertise will help chart the direction of an entirely new category. Our commitment to putting people first starts with you. Your growth is part of the mission. Our goal is to give you the power to embark on the next phase of your uniquely, unique career. OneTrust provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by local laws.", "summaryDescription" : "Manager, Information Security GRC at OneTrust", "postedDate" : "2026-06-12T03:27:19.059", "createdAt" : "2026-06-12T03:27:19.059", "lastUpdated" : "2026-06-14T23:06:18.191", "ingestTimestamp" : "2026-06-12T03:27:19.059", "mongoId" : "6a2ac2e474d8ee00a06f811c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Leadership", "Information Security", "Governance", "Risk", "Compliance", "Third-party risk management", "Multi-cloud environment" ], "skillCount" : 7, "jobCategory" : "engineering", "jobSubcategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 789.8455, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a305b69f292fd229cf5d702", "title" : "Sr Security Compliance Analyst", "company" : "Hasbro", "salary" : { "min" : 109500.0, "max" : 164300.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "United States", "locations" : [ "United States" ], "timestamp" : "2026-06-16T08:16:19.982", "fingerprint" : "1122c8e376763cd49437a3845ede22b10f107eab6fae64a2c0f31610eaf910e5", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/hasbro/jobs/4249813009", "externalId" : "4249813009", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : true, "rawDescription" : "We take play seriously. We’re looking for curious adventurers ready to find their party, fueled by imagination and drive to build what’s never been built before. At Hasbro and Wizards of the Coast, you’ll collaborate with passionate teams to reimagine our iconic brands and create experiences that spark joy, connection, and community through the magic of play. This is your chance to shape legendary play that lasts a lifetime. At Hasbro, our mission is to inspire imagination in children and adults alike. We believe the best experiences come from people who love what they do, in an environment that values them and their ideas. We ensure that everyone has the opportunity to contribute to our collective success, whatever their role. As a leading global play and entertainment company, we help enrich a catalog of games and toys that has inspired generations. You get to play your part as a valued member of an open and dedicated team within a magical world of play and imagination. The Sr Security and Compliance Analyst plays a key role in safeguarding Hasbro's technology landscape by ensuring our security controls are practical, measurable, and aligned with regulatory requirements. This role focuses on improving how compliance is managed, tracked, and reported through efficient processes and data informed insight. Primary Responsibilities Develop and maintain information security policies and standards aligned to frameworks such as ISO 27001, NIST, SOX, GDPR, and HIPAA, ensuring requirements are clearly understood and actionable. Translate regulatory requirements into practical, measurable controls and work with process owners to implement and sustain them effectively. Improve and streamline compliance processes by collaborating with system owners and team members to automate evidence collection, control tracking, and reporting where possible. Support internal and external audits by coordinating documentation across teams and demonstrating control effectiveness through clear, organized evidence. Develop and lead phishing simulation campaigns and collaborate with leaders to address behavioral risk trends and strengthen awareness. Develop targeted security awareness content tailored to different employee audiences to promote a strong and balanced security culture. Perform vendor risk assessments and broader security risk analyses in coordination with business and technology teams. Build clear, executive ready reports and dashboards that provide relevant insight into compliance posture and human risk trends. Identify and implement AI-enabled automation opportunities to streamline audit, compliance, and control validation processes. What You Will Bring Degree in Computer Science, Information Systems, or related field or equivalent experience. 5 or more years of experience in information security, IT compliance, or risk management. Strong working knowledge of regulatory standards including ISO 27001, the NIST Cybersecurity Framework, SOX, GDPR, and HIPAA. Experience developing and maintaining security policies and translating requirements into operational controls. Hands on experience running phishing simulations and analyzing awareness metrics. Ability to interpret data and identify trends that inform risk decisions. Experience improving or automating recurring compliance or audit processes preferred. Strong written and verbal communication skills with the ability to create concise, executive ready summaries. Collaborative approach and ability to work effectively across technical and non technical teams. Hasbro is committed to equality of opportunity in all aspects of employment. We are committed to making all employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, or any other legally protected status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation. The pay transparency range for this role is listed below. The hiring range will vary based on factors such as experience, skills, location and market conditions. Additionally, employees may be eligible for annual and long-term incentives as part of their overall compensation package. Pay Range $109,500—$164,300 USD Employees may be eligible for annual and long-term incentives as part of their overall compensation package, depending on role, location, and eligibility. Benefits and programs may include: Health & Wellness Time Off to Recharge Financial Well-being Life & Family Support Volunteer and Community Initiatives Learning & Development Exclusive Perks Please review our Applicant Privacy Notice to learn how we collect, use, and protect your personal information in connection with the application process.", "summaryDescription" : "Sr Security Compliance Analyst at Hasbro", "postedDate" : "2026-06-15T23:22:57.827", "createdAt" : "2026-06-15T23:22:57.827", "lastUpdated" : "2026-06-16T08:16:19.982", "ingestTimestamp" : "2026-06-15T23:22:57.827", "mongoId" : "6a305b69f292fd229cf5d702", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 109500, "salaryAnnualMax" : 164300, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 771.02686, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Entertainment", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c6a7674d8ee00a090bf68", "title" : "GRC Analyst", "company" : "Hotman Group", "industry" : "Consulting", "salary" : { "min" : 115000.0, "max" : 155000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior GRC Analyst in Fort Worth, Texas, adjusted for the cybersecurity industry and contract employment type." }, "location" : "Fort Worth, TX", "locations" : [ "Fort Worth", "TX" ], "timestamp" : "2026-06-15T10:05:00.588", "fingerprint" : "06ae305953bffa457c3f50c9524f6fff7122254796f243a0ae63147b93c02035", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://hotman-group-llc.breezy.hr/p/1356ac8cd882-experienced-or-senior-grc-analyst", "externalId" : "1356ac8cd882", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Fort Worth", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "32.7531770,-97.3327459" } ], "locationText" : "Fort Worth, Texas, United States", "employmentType" : "CONTRACT", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "professionalSkills" : [ "Risk management", "Client engagement" ], "hardSkillsList" : [ "GRC" ], "hardSkills" : [ { "name" : "GRC", "level" : "intermediate" } ], "majorSkills" : "GRC, Risk management", "majorSkillsList" : [ "GRC", "Risk management" ], "coreResponsibilities" : "Work directly with clients, Own client engagements", "domainKnowledge" : "Cybersecurity; GRC", "domainList" : [ "cybersecurity", "grc" ], "domainSpecificKnowledge" : [ "Cybersecurity", "GRC" ], "qualificationsBasic" : "GRC practitioner experience", "remoteFriendly" : true, "rawDescription" : "About the Role Hotman Group is a boutique cybersecurity and GRC consulting firm doing meaningful work for clients who need GRC done right ranging from Fortune 1000 companies to high-growth startups. We are looking for an experienced GRC practitioner who is ready to work directly with clients, own", "summaryDescription" : "GRC Analyst at Hotman Group. Skills: GRC, Risk management. Work directly with clients. Own client engagements", "createdAt" : "2026-06-14T19:36:42.613", "lastUpdated" : "2026-06-15T10:05:00.588", "ingestTimestamp" : "2026-06-14T19:36:42.613", "mongoId" : "6a2c6a7674d8ee00a090bf68", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 115000, "salaryAnnualMax" : 155000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "GRC", "Risk management", "Client engagement", "Cybersecurity" ], "skillCount" : 4, "jobCategory" : "operations", "jobSubcategory" : "legal", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 769.5918, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c8c8374d8ee00a0975b37", "title" : "GRC Analyst, Operations & Risk", "industry" : "Information Security", "salary" : { "min" : 75000.0, "max" : 95000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Junior GRC Analyst in Boston, adjusted for entry-level experience in the technology industry." }, "location" : "Boston, MA", "locations" : [ "Boston, MA" ], "certifications" : [ "CISA", "CRISC" ], "timestamp" : "2026-06-15T13:08:56.564", "fingerprint" : "ee5b4cbc9398942057ca5a128dc57ec9550bbc2c0a384d0103080760a1c675b6", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/whoop/c5280b0b-cc6e-4953-a0ed-ab4c9e1b646c/application", "externalId" : "c5280b0b-cc6e-4953-a0ed-ab4c9e1b646c", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Boston", "state" : "Massachusetts", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "42.3588336,-71.0578303" } ], "locationText" : "Boston, Massachusetts, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 2, "experienceMaxYears" : 2, "experienceLevel" : "Entry", "technicalSkills" : "Cybersecurity compliance", "professionalSkills" : [ "Risk management", "Process management", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement" ], "hardSkillsList" : [ "Third-party risk management", "Security compliance monitoring", "Audit readiness", "Risk assessment", "Control gap assessment" ], "softSkillsList" : [ "Critical thinking", "Interpersonal skills" ], "hardSkills" : [ { "name" : "Third-party risk management", "level" : "intermediate" }, { "name" : "Security compliance monitoring", "level" : "intermediate" }, { "name" : "Audit readiness", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Control gap assessment", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Critical thinking" }, { "name" : "Interpersonal skills" } ], "majorSkills" : "GRC program operations, Third-party risk management, Security compliance, Risk program management", "majorSkillsList" : [ "GRC program operations", "Third-party risk management", "Security compliance", "Risk program management" ], "coreResponsibilities" : "Support GRC program operations, Manage GRC intakes, Triage GRC intakes, Track GRC intakes, Perform third-party risk management, Support third-party risk management, Conduct vendor reviews, Perform vendor reassessments, Coordinate partners, Track remediation, Follow-up with Security, Follow-up with Legal, Follow-up with Privacy, Follow-up with Procurement, Follow-up with IT, Follow-up with Finance, Follow-up with business owners, Assist with risk program management, Support security compliance monitoring, Support audit readiness, Manage audit request lists, Gather security audit evidence, Coordinate security awareness training, Manage security awareness training", "teamCollaboration" : "Cross-functional follow-up; Work with management", "domainKnowledge" : "Cybersecurity compliance frameworks; ISO 27001; NIST CSF; COSO; SOC 2; PCI-DSS", "domainList" : [ "cybersecurity-compliance-frameworks", "iso-27001", "nist-csf", "coso", "soc-2", "pci-dss" ], "domainSpecificKnowledge" : [ "Cybersecurity compliance frameworks", "ISO 27001", "NIST CSF", "COSO", "SOC 2", "PCI-DSS" ], "communicationSkills" : "Verbal communication; Written communication", "continuousLearning" : "Leveraging AI tools", "problemSolvingSkills" : "Critical thinking; Assess complex issues", "qualificationsBasic" : "2+ years of experience, Bachelor's degree", "qualificationsPreferred" : "Computer science degree preferred, Cyber security degree preferred, Risk degree preferred, Technology degree preferred, CISA certification preferred, CRISC certification preferred", "workSiteFlexibility" : "Onsite", "rawDescription" : "RESPONSIBILITIES: - - Support day-to-day GRC program operations – manage and triage GRC intakes and accurate tracking through resolution - Perform and support third-party risk management activities, including vendor reviews, reassessments, partner coordination, remediation tracking, and cross-functional follow-up with Security, Legal, Privacy, Procurement, IT, Finance, and business owners - Assist with risk program management activities - Support security compliance monitoring and audit readiness activities, managing audit request lists and taking ownership of gathering security audit evidence to verify compliance with internal policies / regulations and industry best practices - Coordinate security awareness and training program management activities QUALIFICATIONS: - - 2+ years of experience in GRC, third-party risk management, security compliance, internal audit, risk management, or a related function - Deep understanding of Cybersecurity compliance frameworks and cybersecurity compliance controls – ISO 27001, NIST CSF, COSO, SOC 2, PDI-DSS - Possess a strong risk mindset, exceptional attention to detail, and the ability to apply critical thinking when assessing complex issues and control gaps - Highly organized and strong operational discipline ensuring clear and expedient escalations with informed recommendations to management - Superior interpersonal and communication skills – verbal and written - Being a team player and working to achieve common goal in a dynamic setting - Strong commitment to embracing and leveraging AI tools in day-to-day tasks, ensuring AI-assisted work aligns with the same high-quality standards as personal contributions. - A minimum bachelor’s degree in any discipline. Computer science, cyber security and risk or technology degrees preferred. CISA or CRISC certification preferred", "summaryDescription" : "GRC Analyst, Operations & Risk. Skills: GRC program operations, Third-party risk management, Security compliance, Risk program management. Support GRC program operations. Manage GRC intakes", "createdAt" : "2026-06-14T04:31:44.138", "lastUpdated" : "2026-06-15T13:08:56.564", "ingestTimestamp" : "2026-06-14T04:31:44.138", "mongoId" : "6a2c8c8374d8ee00a0975b37", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 75000, "salaryAnnualMax" : 95000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Third-party risk management", "Security compliance monitoring", "Audit readiness", "Risk assessment", "Control gap assessment", "Critical thinking", "Interpersonal skills", "GRC program operations", "Security compliance", "Risk program management", "Risk management", "Process management", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement", "Cybersecurity compliance frameworks", "ISO 27001", "NIST CSF", "COSO", "SOC 2", "PCI-DSS", "CISA", "CRISC" ], "skillCount" : 25, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Junior", "dataQualityScore" : 0.7777778, "_score" : 737.9282, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.92 }, { "id" : "6a2a660974d8ee00a062ba99", "title" : "Senior Security & Compliance Engineer", "company" : "AWS Security Assurance Services LLC", "industry" : "Solutions Architect, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 178400.0, "max" : 226700.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Austin, Texas, USA", "locations" : [ "Austin, Texas, USA" ], "certifications" : [ "CISSP", "CCSP", "AWS Certified Security Specialty" ], "timestamp" : "2026-06-16T04:30:33.102", "fingerprint" : "dc87cec50f78cf2a5dc019173f2ca7458bf394bc619de93af396cf1b29a21db1", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10443022/apply", "externalId" : "512c8dfe-fd12-4225-9eb8-34f7b90e9cf1", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Cloud security, Security tools, AWS, Azure, GCP, IAM, VPC, Security groups, WAF, SIEM, Vulnerability scanning, Penetration testing, Scripting, Automation", "professionalSkills" : [ "System design", "Risk assessment", "Security architecture" ], "hardSkillsList" : [ "Cloud security", "Compliance frameworks", "Security tools", "Incident response", "Vulnerability management", "Threat modeling", "Security automation" ], "hardSkills" : [ { "name" : "Cloud security", "level" : "intermediate" }, { "name" : "Compliance frameworks", "level" : "intermediate" }, { "name" : "Security tools", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Security automation", "level" : "intermediate" } ], "majorSkills" : "Cloud security, Compliance, Security engineering", "majorSkillsList" : [ "Cloud security", "Compliance", "Security engineering" ], "coreResponsibilities" : "Design and implement security controls, Develop and maintain security policies, Conduct security assessments, Respond to security incidents, Automate security processes, Collaborate with engineering teams, Stay current with security threats", "teamCollaboration" : "Engineering teams; Security operations; Compliance teams", "domainKnowledge" : "Cloud security; Compliance frameworks; AWS; Azure; GCP; NIST; ISO 27001; SOC 2; PCI DSS", "domainList" : [ "cloud-security", "compliance-frameworks", "aws", "azure", "gcp", "nist", "iso-27001", "soc-2", "pci-dss" ], "domainSpecificKnowledge" : [ "Cloud security", "Compliance frameworks", "AWS", "Azure", "GCP", "NIST", "ISO 27001", "SOC 2", "PCI DSS" ], "toolProficiency" : [ "SIEM tools", "Vulnerability scanners", "Cloud security tools", "Automation tools" ], "communicationSkills" : "Technical documentation; Security reports", "documentationSkills" : "Security policies; Security procedures; Architecture diagrams", "continuousLearning" : "Security conferences; Training courses", "problemSolvingSkills" : "Root cause analysis; Incident investigation; Security troubleshooting", "outcomesObjectives" : "Maintain security posture; Reduce security risks; Ensure compliance", "qualificationsBasic" : "Bachelor's degree or equivalent experience, 5+ years of experience in security engineering, Experience with cloud security, Experience with compliance frameworks, Experience with security tools", "qualificationsPreferred" : "Master's degree in a related field, Experience with AWS security services, Experience with compliance audits, Experience with incident response", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Security Assurance Services (SAS) is hiring a Senior Security & Compliance Engineer to innovate on behalf of customers and lead prototyping and development of the security and compliance solutions. The right candidate will own security risk identification, mitigation, and engineering outcomes that span beyond a single team: designing controls, writing code, leading reviews, automating remediations, and translating compliance frameworks into secure-by-default implementations on AWS. They will lead design, deployment, and implementation of complex AWS security and compliance solutions that accomplish defined business and security outcomes, solving for new levels of scale, complexity, and performance. Key job responsibilities Engineer AI-enabled automations, lead threat modeling, security design reviews, architecture reviews & security assessments Own design and architecture choices for security and compliance automation solutions for regulated customers and influence partner-org designs. Build secure-by-default IaC modules for Landing Zones, Control Tower customizations, Zero-Trust architectures, and AI/ML workloads. Lead the design, deployment, and implementation of AWS security controls, continuous compliance monitoring, technical control validation, visualization and reporting, automated evidence collection and remediation of insecure configurations at scale. Architect custom preventive, detective, and proactive controls, e.g. service-Control- policies, Resource-Control Policies (SCPs and RCPs), policy-as-code (cfn-guard, OPA Rego, Cedar), and automated remediation workflows. Set the bar for authentication and authorization, data handling, least privilege, encryption, micro-segmentation, tagging strategy, integrations via API and MCP, and secure AI agentic design. Write and review architecture, code, scripts, IaC, including Python, Terraform, AWS CDK, CloudFormation, REGO). Lead alignment, resolve escalations, troubleshooting, and root-cause analysis to closure with peers, senior managers, and principal engineers. Lead the development of technical content: sample code, blog posts, workshops, reference architectures, whitepapers. Communicate security risk and design decisions clearly verbally and in writing to technical, non-technical, and C-level audiences. Identify and shape sales opportunities; provide input to AWS service-team roadmaps and SAS offering strategy. Travel to customer sites as needed. About the team The Security Assurance Services team, a part of Amazon Web Services, leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the world's workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar raising security outcomes and investment in security mechanisms and automation on behalf of our customers. AWS Security Assurance Services LLC, a PCI-QSAC and HITRUST External Assessor Firm, is a team of industry certified assessors, Security & Compliance Engineers with DevOps and Cloud Infrastructure Architect backgrounds, helping our customers achieve, maintain, and automate security & compliance in the cloud. Basic Qualifications: - 5+ years of work in identifying security issues and risks, and developing mitigation plans experience - 5+ years of (non-internship) scripting, programming, and security code review in common programming languages experience - Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go - Experience (non-internship) in scripting, programming, and security code reviewing in a common programming language - Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques - Experience as a mentor, tech lead or leading an engineering team - Experience in Cyber Security and in at least one relevant technical area: large-scale systems engineering, queuing and messaging, Linux networking, performance analysis, software-defined networking - Experience in the full secure software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations Preferred Qualifications: - Custom controls development, SCPs and RCPs. - Experience writing and deploying reusable policy-as-code (cfn-guard, OPA Rego, Cedar, or equivalent). - Hands-on expertise with the AWS Security Reference Architecture, AWS Organizations multi-account strategy, Well-Architected Framework, CI/CD at enterprise scale. - Expert-level knowledge of AWS security and governance services: Config, GuardDuty, Security Hub, Control Tower, Systems Manager, KMS, IAM, VPC, Lambda, CloudTrail, CloudWatch, EventBridge. - Hands-on technical experience in incident response technology, security, automation, implementation, integration, and/or deployment - Spec-driven development; AI agentic design and Model Context Protocol (MCP) experience. - AWS certifications: Solutions Architect Professional and Security Specialty strongly preferred; additional specialty certifications a plus. - Experience producing audit-ready evidence and working with third-party assessors. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, CA, San Francisco - 183,000.00 - 247,600.00 USD annually USA, TN, Nashville - 151,200.00 - 204,600.00 USD annually USA, TX, Austin - 178,400.00 - 226,700.00 USD annually USA, TX, Dallas - 178,400.00 - 226,700.00 USD annually USA, TX, Houston - 178,400.00 - 226,700.00 USD annually USA, VA, Arlington - 178,400.00 - 226,700.00 USD annually USA, VA, Herndon - 178,400.00 - 226,700.00 USD annually USA, WA, Seattle - 178,400.00 - 226,700.00 USD annually", "summaryDescription" : "Senior Security & Compliance Engineer at AWS Security Assurance Services LLC. Skills: Cloud security, Compliance, Security engineering. Design and implement security controls. Develop and maintain security policies", "postedDate" : "2026-06-14T20:22:11.725", "createdAt" : "2026-06-14T20:22:11.725", "lastUpdated" : "2026-06-16T04:30:33.102", "ingestTimestamp" : "2026-06-14T20:22:11.725", "mongoId" : "6a2a660974d8ee00a062ba99", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10443022/apply", "salaryAnnualMin" : 178400, "salaryAnnualMax" : 226700, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Cloud security", "Compliance frameworks", "Security tools", "Incident response", "Vulnerability management", "Threat modeling", "Security automation", "Compliance", "Security engineering", "System design", "Risk assessment", "Security architecture", "AWS", "Azure", "GCP", "NIST", "ISO 27001", "SOC 2", "PCI DSS", "CISSP", "CCSP", "AWS Certified Security Specialty", "SIEM tools", "Vulnerability scanners", "Cloud security tools", "Automation tools" ], "skillCount" : 26, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 716.6433, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c7ab774d8ee00a0946845", "title" : "Cyber Security Analyst - Governance, Risk and Culture (GRC)", "company" : "Baringa", "industry" : "Consulting", "salary" : { "min" : 60000.0, "max" : 85000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cyber Security Analyst in the UK consulting industry, adjusted for seniority and company size." }, "location" : "United Kingdom", "locations" : [ "United Kingdom" ], "timestamp" : "2026-06-16T02:41:08.622", "fingerprint" : "2e8ed27e8023236cb440bbaa2179fd41ebe828bb55c70fa4af3878d90cdaa33b", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/baringa/jobs/4870447101", "externalId" : "4870447101", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United Kingdom", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "United Kingdom", "remoteFriendly" : false, "rawDescription" : "About Baringa Baringa is a global consulting firm that partners with leaders to drive change and create value. With deep industry expertise, and enabled by advanced technology, the firm helps clients to deliver with greater confidence and certainty. With over 2,000 people across the UK, Europe, North America, Asia and Australia, the firm combines global insight with local understanding. The firm works across energy and resources, financial services, government and public sector, consumer products and retail, pharmaceuticals and life sciences, manufacturing, and technology, media and telecoms, with capabilities spanning strategy, transformation and operational excellence – all powered by advanced technology, data, AI and digital innovation. Clients value Baringa’s collaborative approach and the way its teams integrate seamlessly – all working with a shared understanding of what matters most. The firm is known for its kind, curious experts who listen closely and care deeply about client success as they help clients transform energy markets, modernise financial platforms, expand telecoms and digital networks through advanced data analytics, enable digital services in government, and unlock growth in consumer sectors. Certified as a Great Place to Work around the world, Baringa has been recognised by the Financial Times in 22 categories of its UK Leading Management Consultants rankings, and by Forbes for four consecutive years as one of the World’s Best Management Consulting Firms. Cyber Security Analyst - Governance, Risk and Culture (GRC) Baringa’s TeCy Group (Technology & Cyber) is a global function supporting the firm as it enters new markets. We’re on a mission to develop great technology products and deliver great services. We’ve installed a new operating system for ourselves and rebooted what was a corporate IT department to an in-house technology company - transforming the way we work and opening the way to serve Baringa’s clients directly. We’re working on sustainability, committed to Net Zero in our supply-chain and services. We’re keeping our firm safe: protecting our data and our reputation. We are embarking upon and will be the driving force behind a new 3-Year digital strategy for the firm. Yes, we’ve got a big job in the Baringa Technology & Cyber group. So much to build on, so much to progress. So much to deliver. So much to play for! Do you know what though? We’re going to do it. All of it and more. We have the support to drive change. We have a diverse group of 90 amazing technology & cyber professionals. We have the belief. We are going to do great things. Come and join us. Overview We are currently looking for a Cyber Security Analyst to join our Governance, Risk and Culture (GRC) capability within the wider Cyber Security Team, where you will play a key role in strengthening the firm’s security posture, ensuring compliance, and embedding a cyber-conscious culture across the organisation. The role contributes to the delivery of governance, risk management and assurance activities, including supplier due diligence, audit responses, and the development and maintenance of security policies, standards and controls. You will be a key member of a growing team in a dynamic, consulting-led environment, working closely with technical, IT and business stakeholders to identify and manage cyber risks and align security strategy with business priorities. Baringa will support your development across GRC domains, offering exposure to evolving regulatory requirements, cloud technologies and emerging areas such as AI, with a wide range of opportunities to shape our approach and make a meaningful impact. What will you be doing? Develop a complete understanding of Baringa’s technology and information systems. Lead in the response to RFPs/audits, including supplier security due diligence and third-party audit and assurance activities. Identify and communicate current and emerging security threats and cyber risks. Support a program of awareness-raising and training to deliver compliance and to foster a cyber conscious culture across the company. Assist with the definition, implementation and maintenance of corporate security policies, standards and procedures. Provide ‘hands on’ assistance, particularly in technical control implementation and incident response. Coordinating the needs of in-house IT experts and remote employees, vendors and contractors. Work as part of a team to communicate ideas, suggestions and solutions that achieve the firm’s long-term objectives, especially the GRC Strategy. Align organisational security strategy and infrastructure with overall business and information technology strategy. Manage company compliance with information security, policies, standards, contractual obligations and guidance through business managers and champions providing advice, support and guidance on risk based good practice. Lead on and produce technical security MI in support of governance and vulnerability management engagements. Support client engagement leads on client queries and requests - during the business development process and during ongoing client engagement - regarding Baringa’s information technology security policies and processes. What are we looking for? We recruit individuals at all levels based on merit. Some of the key sills we are looking for: Experience in full-time operational Cyber Security GRC, or Cyber Security role. Experience of compliance requirements for cloud technologies stacks such as Microsoft and AWS . Experience utilising emerging technologies, such as AI, to design and implement security solutions, monitoring and improving those solutions while working with a Cyber Security team. Thorough understanding of relevant industry security standards and protocols including ISO27001, National Institute of Standards and Technology (NIST), NSCS CAF, SOC, NIS 2 Directive and NCSC Cloud Security Principles. Background of consulting and engineering the design and development of security best practices, implementation of security measures, policies and processes to meet business goals, customer needs and regulatory requirements. Ability to use logic and reasoning to identify the strengths and weaknesses of IT systems, while seeking out vulnerabilities in IT infrastructures. Assist in risk assessment procedures, policy formation, role-based authorisation methodologies, authentication technologies and security attack pathologies. Growth mentality with excellent problem-solving skills, willing to assist in all areas of Cyber and to learn new technologies & processes. A self-motivated individual with a “can do” attitude, who can work on their own initiative as well as part of a team. An excellent communicator who can help develop good Cyber practices with an ability to interact with all levels within the company. Strong leadership, stakeholder management, and project/team-building skills, including the ability to lead teams and drive initiatives in multiple departments. What a career at Baringa will give you Putting People First. Baringa is a People First company and wellbeing is at the forefront of our culture. We recognise the importance of work-life balance and flexible working and provide our staff amazing benefits. Some of these benefits include: Generous Annual Leave Policy: We recognise everyone needs a well-deserved break. We provide our employees with 5 weeks of annual leave, fully available at the start of each year. In addition to this, we have introduced our 5-Year Recharge benefit which allows all employees an additional 2 weeks of paid leave after 5 years continuous service. Flexible Working: We know that the ‘ideal’ work-life balance will vary from person to person and change at different stages of our working lives. To accommodate this, we have implemented a hybrid working policy and introduced more flexibility around taking unpaid leave. Corporate Responsibility Days: Our world is important to us, so all our employees get 3 every year to help social and environmental causes and increase our impact on the communities that mean the most to us. Wellbeing Fund: We want to encourage all employees to take charge and prioritise their own wellbeing. We’ve introduced our annual People Fund to support this by offering every individual a fund to support and manage their wellbeing through an activity of their choice. Profit Share Scheme: All employees participate in the Baringa Group Profit Share Scheme so everyone has a stake in the company’s success. Diversity and Inclusion We are proud to be an Equal Opportunity Employer. We believe that creating an environment where everyone feels a sense of belonging is central to our culture and that diversity is paramount to driving creativity, innovation, and value for our clients and for our people. An award-winning workplace You can be a part of our ‘Great Place to Work’ – with our commitment to women and well-being in the workplace for all. Click here to see some of our recent awards and how we’ve achieved this. Using business as a force for good. We maintain high standards of environmental performance and transparency, which can be seen through our commitment to Net Zero with our SBTI-verified Scope 1, 2 and 3 emissions reduction targets and our support of the Better Business Act. We report our progress publicly and ensure that we are also externally assessed and scored through organisations like CDP and EcoVadis - helping us to continually identify where we can improve. We have a long legacy of supporting the communities in which we work, and offer a variety of ways to contribute, by putting people first and creating impact that lasts. Our Corporate Social Responsibility (CSR) agenda is about giving back to the communities in which we live and work by sharing our skills, talent and time. In essence, we aim to empower and encourage everyone in the firm to contribute to the things we care about, and support registered charities and organisations with a clear social or environmental purpose to increase the positive impact they can have. Join us All applications received will be reviewed by a member of our Talent Acquisition team. We never rely solely on automated screening or AI tools to make hiring decisions. Your application will be considered for employment without regard to race, ethnicity, religion, gender, gender identity or expression, sexual orientation, nationality, disability, age, faith or social background. We do not filter applications by university background and encourage those who have taken alternative educational and career paths to apply. We would like to actively encourage applications from those who identify with less represented and minority groups. We operate an inclusive recruitment process, ensuring reasonable adjustments where needed. Please contact a member of our Recruitment Team to discuss further. Baringa Privacy Notices For UK & EU Your personal data will be retained by Baringa for up to two years, in accordance with our UK Recruitment Privacy Notice / EU Recruitment Privacy Notice, to evaluate your application and meet our legal and reporting obligations. In line with the General Data Protection Regulation (GDPR), you have the right to request access to, rectification, or erasure (subject to legal limitations) of your personal data. For more information, please contact us at privacy@baringa.com For the USA Your personal data may be retained by Baringa for up to two years, as outlined in our Recruitment Privacy Notice (AMER & APAC), to support the recruitment process and internal reporting requirements. Where applicable, and in accordance with relevant federal and state laws, you may have the right to request access to or correction of your personal information. For further details, please contact privacy@baringa.com For Australia & Singapore Your personal data will be retained by Baringa for up to two years, in accordance with our Recruitment Privacy Notice (AMER & APAC), to assess your application and meet applicable reporting and legal obligations. In line with the Australian Privacy Act and Singapore’s Personal Data Protection Act (PDPA), you may have rights to access, correct, or request limited deletion of your personal data. For more information, please contact us at privacy@baringa.com", "summaryDescription" : "Cyber Security Analyst - Governance, Risk and Culture (GRC) at Baringa", "postedDate" : "2026-06-14T21:29:29.800", "createdAt" : "2026-06-14T21:29:29.800", "lastUpdated" : "2026-06-16T02:41:08.622", "ingestTimestamp" : "2026-06-14T21:29:29.800", "mongoId" : "6a2c7ab774d8ee00a0946845", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.6666667, "_score" : 711.1467, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Consulting", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2a3f2274d8ee00a05c0e21", "title" : "Information Security GRC – Risk & Compliance Senior Analyst (Contract)", "company" : "AlixPartners", "salary" : { "min" : 115000.0, "max" : 155000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Information Security GRC roles in Southfield, adjusted for senior level and contract employment type." }, "location" : "Detroit", "locations" : [ "Detroit" ], "certifications" : [ "CISSP", "CISA", "CRISC" ], "timestamp" : "2026-06-11T07:16:17.534", "fingerprint" : "ce03d70094508c179dd507f23be9b08bee50332ae2b969a6557d7e62f5672486", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.alixpartners.com/careers/7767015003?gh_jid=7767015003", "externalId" : "7767015003", "structuredLocations" : [ { "city" : "Southfield", "state" : "Michigan", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "42.4733689,-83.2218731" } ], "locationText" : "Southfield, Michigan, United States", "employmentType" : "CONTRACT", "experienceMinYears" : 3, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "MS Office Suite, SharePoint", "professionalSkills" : [ "Risk assessment", "Compliance management", "Audit support" ], "hardSkillsList" : [ "Risk management", "Compliance reporting", "Audit preparation" ], "softSkillsList" : [ "Attention to detail", "Adaptability", "Problem-solving" ], "hardSkills" : [ { "name" : "Risk management", "level" : "intermediate" }, { "name" : "Compliance reporting", "level" : "intermediate" }, { "name" : "Audit preparation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Attention to detail" }, { "name" : "Adaptability" }, { "name" : "Problem-solving" } ], "majorSkills" : "Information Security, Risk, Compliance, GRC", "majorSkillsList" : [ "Information Security", "Risk", "Compliance", "GRC" ], "coreResponsibilities" : "Ensure roles communicated, Ensure responsibilities understood, Prepare audit request materials, Upload documentation, Measure metrics, Report metrics", "teamCollaboration" : "Interface with people; Support security programs", "domainKnowledge" : "Information Security; Risk Management; Compliance; GRC; ISO 27001; SOC 2; PCI; HIPAA", "domainList" : [ "information-security", "risk-management", "compliance", "grc", "iso-27001", "soc-2", "pci", "hipaa" ], "domainSpecificKnowledge" : [ "Information Security", "Risk Management", "Compliance", "GRC", "ISO 27001", "SOC 2", "PCI", "HIPAA" ], "toolProficiency" : [ "MS Office", "Excel", "PowerPoint", "SharePoint", "ServiceNow" ], "communicationSkills" : "Written communication; Oral communication", "continuousLearning" : "Obtaining training; Obtaining certifications", "problemSolvingSkills" : "Problem-solving ability; Resolve issues", "specialRequirements" : "Work full time in office, Sit/stand at computer, Work outside business hours", "qualificationsBasic" : "3 years of professional work experience, Information Security experience required, Risk experience required, Compliance experience required, Audit experience required, Information Technology experience required, Authorized to work in United States", "qualificationsPreferred" : "ISO 27001 experience preferred, SOC 2 experience preferred, PCI experience preferred, HIPAA experience preferred, Global standards experience preferred, Global regulations experience preferred, CISSP desired, CISA desired, ServiceNow experience preferred", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "At AlixPartners, we solve the most complex and critical challenges by moving quickly from analysis to action when it really matters; creating value that has a lasting impact on companies, their people, and the communities they serve. By understanding, respecting, and honoring the needs of our employees, clients, and communities, AlixPartners actively promotes an inclusive environment. We strongly believe in the value that diversity brings to our experiences and are committed to the perpetual enhancements of initiatives, policies, and practices. We hold ourselves accountable by providing space for authenticity, growth, and equity for everyone. Location: Southfield, MI (contract/hybrid) Assignment duration: through December 2026 with potential to extend MUST BE CURRENTLY AUTHORIZED TO WORK IN THE UNITED STATES. NO VISA OR IMMIGRATION SPONSORSHIP FOR THIS ROLE, NOW OR IN THE FUTURE. (e.g., H-1B, STEM OPT, TN, etc.) About the Role As a member of the Information Security team, the IS GRC Senior Analyst - Risk ensure roles and responsibilities are clearly communicated and understood Prepare audit request materials and upload documentation for internal or external auditors Measure and report metrics to IS GRC Risk relevant work experience may be considered in lieu of education Minimum 3 years of professional work experience Experience within Information Security, Risk, Compliance, Audit, or Information Technology is required Experience with ISO 27001, SOC 2, PCI, HIPAA, or other global standards or regulations is highly preferred Certified Information Systems Security Professional (CISSP) and/or Certified Information Systems Auditor (CISA) desired, but not required Willingness to increase knowledge and credibility through obtaining training and/or certifications (CISSP, CISA, CRISC, etc.) Attention to detail with the ability to manage and prioritize responsibilities effectively, adapt to changing circumstances to meet key deadlines under time constraints so work is completed in an accurate, timely manner Excellent written and oral communication skills in English Highly effective inter-personal and collaboration skills to support security programs and interface with people at all levels Excellent problem-solving ability and ability to resolve issues under tight time frames Experience using MS Office Suite (Word, Excel, PowerPoint, SharePoint etc.) Experience using ServiceNow preferred Highly organized with excellent organizational skills with experience operating in time-sensitive, ambiguous environments, balancing competing priorities with sound judgment and discretion. Core working hours are generally 8:30 AM – 5:30 PM, Monday - Friday; willingness to work outside of normal U. S. business hours, and as unique projects/needs arise Ability to work full time in an office and remote environment; physically able to sit/stand at a computer and work in front of a computer screen for significant portions of the workday Must become familiar with, and promote and abide by, our Core Values as defined by the AlixPartners’ Code of Conduct and foster an inclusive environment with people at all levels of an organization AlixPartners has embraced a hybrid work model to provide flexibility and support our employees’ work-life integration. Our hybrid model combines a mix of in-person at an AlixPartners office on Tuesday, Wednesday, and Thursday, with remote working options on Monday and Friday. AlixPartners is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to, among other things, race, color, religion, sex, sexual orientation, gender identity, national origin, age, status as a protected veteran, or disability. AlixPartners is a proud Gold Level award-winning Veteran Friendly Employer. #LI-KL2 #LI-Hybrid", "summaryDescription" : "Information Security GRC – Risk & Compliance Senior Analyst (Contract) at AlixPartners. Skills: Information Security, Risk, Compliance, GRC. Ensure roles communicated. Ensure responsibilities understood", "postedDate" : "2026-06-11T07:07:28.798", "createdAt" : "2026-06-11T07:07:28.798", "lastUpdated" : "2026-06-11T07:16:17.534", "ingestTimestamp" : "2026-06-11T07:07:28.798", "mongoId" : "6a2a3f2274d8ee00a05c0e21", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 115000, "salaryAnnualMax" : 155000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Risk management", "Compliance reporting", "Audit preparation", "Attention to detail", "Adaptability", "Problem-solving", "Information Security", "Risk", "Compliance", "GRC", "Risk assessment", "Compliance management", "Audit support", "Risk Management", "ISO 27001", "SOC 2", "PCI", "HIPAA", "CISSP", "CISA", "CRISC", "MS Office", "Excel", "PowerPoint", "SharePoint", "ServiceNow" ], "skillCount" : 26, "jobCategory" : "other", "jobSubcategory" : "it-security-(415)", "dataQualityScore" : 1.0, "_score" : 709.06976, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a30511af292fd229cefa6cb", "title" : "Sr. Cyber Security Analyst", "industry" : "IT", "salary" : { "min" : 1800000.0, "max" : 3000000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cyber Security Analyst in India, adjusted for the FinTech industry and remote work." }, "location" : "India", "locations" : [ "India" ], "certifications" : [ "CISA", "ISO 27001 Lead Auditor", "ISO 27001 Implementer", "PCI ISA" ], "timestamp" : "2026-06-16T12:54:17.107", "fingerprint" : "8e47cd7978429c52ff8190deff291fbe639b25861b51f43683e36bb215ee5153", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/jobgether/6e827605-2db0-4b5a-8fed-13a674c6e33b/apply", "externalId" : "6e827605-2db0-4b5a-8fed-13a674c6e33b", "industryFunction" : { }, "structuredLocations" : [ { "country" : "India", "continent" : "as", "workMode" : "remote" } ], "locationText" : "India", "employmentType" : "FULL_TIME", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Senior", "technicalSkills" : "SOC 2, PCI-DSS, ISO 27001, NIST CSF, IAM", "professionalSkills" : [ "Risk assessment", "Vendor risk assessment", "Access governance", "Due diligence" ], "hardSkillsList" : [ "Third-party audits", "Security policies", "Security standards", "Security controls", "Risk registers", "Mitigation plans", "Access reviews", "Least privilege", "Incident response", "Disaster recovery", "Security awareness" ], "hardSkills" : [ { "name" : "Third-party audits", "level" : "intermediate" }, { "name" : "Security policies", "level" : "intermediate" }, { "name" : "Security standards", "level" : "intermediate" }, { "name" : "Security controls", "level" : "intermediate" }, { "name" : "Risk registers", "level" : "intermediate" }, { "name" : "Mitigation plans", "level" : "intermediate" }, { "name" : "Access reviews", "level" : "intermediate" }, { "name" : "Least privilege", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Disaster recovery", "level" : "intermediate" }, { "name" : "Security awareness", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity, GRC, Risk management, Compliance", "majorSkillsList" : [ "Cybersecurity", "GRC", "Risk management", "Compliance" ], "coreResponsibilities" : "Support third-party audits, Coordinate third-party audits, Support certifications, Coordinate certifications, Support regulatory assessments, Coordinate regulatory assessments, Maintain GRC framework, Enhance GRC framework, Develop security policies, Review security policies, Update security policies, Develop security standards, Review security standards, Update security standards, Develop security controls, Review security controls, Update security controls, Manage security questionnaires, Manage customer due diligence, Respond to requests, Conduct vendor risk assessments, Track third-party compliance, Maintain risk registers, Maintain mitigation plans, Perform enterprise-wide risk assessments, Document risk assessments, Track risk remediation, Support access governance, Conduct access reviews, Manage identity lifecycle, Enforce least privilege, Contribute to incident response, Contribute to disaster recovery, Contribute to security awareness, Monitor evolving threats, Monitor compliance requirements, Monitor industry best practices, Strengthen security posture", "teamCollaboration" : "Collaborative work culture; Involving security teams; Involving engineering teams; Involving legal teams; Involving product teams", "domainKnowledge" : "SaaS; FinTech; Regulated environments", "domainList" : [ "saas", "fintech", "regulated-environments" ], "domainSpecificKnowledge" : [ "SaaS", "FinTech", "Regulated environments" ], "toolProficiency" : [ "Vanta", "Drata" ], "communicationSkills" : "Stakeholder coordination", "documentationSkills" : "Documentation practices", "continuousLearning" : "Learning opportunities; Growth opportunities", "qualificationsBasic" : "3-5 years cybersecurity experience, 3-5 years IT risk experience, 3-5 years GRC experience, Understanding compliance frameworks, Hands-on audit support, Hands-on certification support, Hands-on regulatory assessment support, Knowledge of risk management, Knowledge of control design, Knowledge of compliance documentation, Experience handling security questionnaires, Translate technical controls, Familiarity with IAM, Familiarity with access governance", "qualificationsPreferred" : "GRC platforms experience, SaaS environment exposure, FinTech environment exposure, Regulated environment exposure, CISA certification preferred, ISO 27001 Lead Auditor preferred, ISO 27001 Implementer preferred, PCI ISA certification preferred", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "## Accountabilities Support the execution and coordination of third-party audits and certifications, including SOC 2, PCI-DSS, ISO 27001, and NIST CSF. Maintain and enhance the organization’s GRC framework by developing, reviewing, and updating security policies, standards, and controls. Manage security questionnaires and customer due diligence requests, ensuring accurate and timely responses. Conduct vendor risk assessments, track third-party compliance, and maintain risk registers and mitigation plans. Perform enterprise-wide risk assessments across systems, processes, and tools, ensuring proper documentation and remediation tracking. Support access governance activities, including periodic access reviews, identity lifecycle management, and least privilege enforcement. Contribute to incident response planning, disaster recovery readiness, and security awareness initiatives. Monitor evolving threats, compliance requirements, and industry best practices to continuously strengthen the security posture. Requirements: 3–5 years of experience in cybersecurity, IT risk, or GRC-focused roles. Strong understanding of compliance frameworks such as SOC 2, ISO 27001, PCI-DSS, and NIST CSF. Hands-on experience supporting audits, certifications, or regulatory assessments. Knowledge of risk management methodologies, control design, and compliance documentation practices. Experience handling security questionnaires and translating technical controls for business stakeholders. Familiarity with identity and access management (IAM) and access governance processes. Strong communication, documentation, and stakeholder coordination skills. Experience with GRC platforms such as Vanta, Drata, or similar tools is a plus. Exposure to SaaS, FinTech, or regulated environments is highly desirable. Certifications such as CISA, ISO 27001 Lead Auditor/Implementer, or PCI ISA are preferred but not mandatory. Benefits: Opportunity to work in a high-impact cybersecurity and compliance function within a fast-growing digital environment. Exposure to global security frameworks and enterprise-grade audit and risk management programs. Collaborative work culture involving security, engineering, legal, and product teams. Strong learning and growth opportunities in governance, risk, compliance, and security operations. Flexible and remote-friendly work setup supporting work-life balance. Chance to contribute directly to strengthening security posture for financial institutions and regulated clients. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Sr. Cyber Security Analyst. Skills: Cybersecurity, GRC, Risk management, Compliance. Support third-party audits. Coordinate third-party audits", "postedDate" : "2026-06-15T12:02:21.089", "createdAt" : "2026-06-15T12:02:21.089", "lastUpdated" : "2026-06-16T12:54:17.107", "ingestTimestamp" : "2026-06-16T03:21:22.504", "mongoId" : "6a30511af292fd229cefa6cb", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Third-party audits", "Security policies", "Security standards", "Security controls", "Risk registers", "Mitigation plans", "Access reviews", "Least privilege", "Incident response", "Disaster recovery", "Security awareness", "Cybersecurity", "GRC", "Risk management", "Compliance", "Risk assessment", "Vendor risk assessment", "Access governance", "Due diligence", "SaaS", "FinTech", "Regulated environments", "CISA", "ISO 27001 Lead Auditor", "ISO 27001 Implementer", "PCI ISA", "Vanta", "Drata" ], "skillCount" : 28, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 703.0638, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2a6a8c74d8ee00a063c539", "title" : "Governance, Risk & Compliance (GRC) Manager", "company" : "Sigma Computing", "industry" : "SaaS", "salary" : { "min" : 175000.0, "max" : 235000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager in Governance, Risk & Compliance (GRC) at a SaaS company in San Francisco, adjusted for seniority and company size." }, "location" : "San Francisco, California, United States", "locations" : [ "San Francisco", "California", "United States" ], "certifications" : [ "CRISC", "CISA", "CISM", "CGEIT", "CISSP", "CIPP" ], "timestamp" : "2026-06-14T20:26:43.635", "fingerprint" : "a899c461191f8bdd91b4cb9db8661c2dfd1b93e5b2d51cf3c06990b76ec2aef4", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/sigmacomputing/jobs/7767888003", "externalId" : "7767888003", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" }, { "city" : "New York", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "40.7127281,-74.0060152" } ], "locationText" : "San Francisco, California, United States; New York, New York, United States", "experienceLevel" : "Manager", "domainKnowledge" : "Data privacy; GDPR; CCPA; SOC 2; ISO 27001; HIPAA; Labor & employment compliance; Multi-jurisdictional employment regulations; Industry-specific regulatory requirements; NIST RMF; COSO; ISO 31000; NIST CSF; CIS Controls; OWASP", "domainList" : [ "data-privacy", "gdpr", "ccpa", "soc-2", "iso-27001", "hipaa", "labor-employment-compliance", "multi-jurisdictional-employment-regulations", "industry-specific-regulatory-requirements", "nist-rmf", "coso", "iso-31000", "nist-csf", "cis-controls", "owasp" ], "domainSpecificKnowledge" : [ "Data privacy", "GDPR", "CCPA", "SOC 2", "ISO 27001", "HIPAA", "Labor & employment compliance", "Multi-jurisdictional employment regulations", "Industry-specific regulatory requirements", "NIST RMF", "COSO", "ISO 31000", "NIST CSF", "CIS Controls", "OWASP" ], "communicationSkills" : "Influence stakeholders; Leadership communication", "documentationSkills" : "Policy documentation; Procedure documentation; Control documentation; Compliance documentation; Customer-facing materials", "specialRequirements" : "In-office work environment", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Governance, Risk & Compliance (GRC) Manager Sigma is seeking an experienced GRC Manager to lead and scale our governance, risk, and compliance programs. This role is based in our San Francisco office or upcoming New York office and reports to the General Counsel. You'll have the opportunity to build a strategic, enterprise-wide GRC function that enables business growth while managing organizational risk. As our GRC Manager, you'll partner with Legal, Engineering, Product, Sales, Operations, and leadership to develop a comprehensive GRC framework that protects Sigma's interests, supports our strategic objectives, and builds stakeholder trust. You'll mature our governance structures, implement scalable risk management processes, and ensure compliance with applicable regulatory requirements—all while enabling the business to move quickly and confidently. What You'll Do Governance Design and implement governance frameworks, including reporting, policy governance, and control oversight Establish and maintain enterprise policies, standards, and procedures across technology, security, privacy, and operational functions Build and lead a governance committee structure that provides appropriate oversight and decision-making Create governance dashboards and metrics to provide visibility into program maturity and effectiveness Partner with leadership to align governance activities with business strategy and risk appetite Risk Management Develop and operate a comprehensive Enterprise Risk Management (ERM) program Conduct regular enterprise-wide risk assessments and maintain a dynamic risk register Build and maintain business continuity and disaster recovery programs, including regular testing and tabletop exercises Implement third-party risk management processes, including vendor risk assessments, contract reviews, and ongoing monitoring Create risk treatment plans and track remediation activities across the organization Facilitate risk-informed decision-making at all levels of the organization Coordinate with functional leaders to ensure risks across all business areas are identified and managed appropriately Compliance Own audit and certification programs including SOC 2, ISO 27001, HIPAA, and other relevant standards Develop and maintain compliance monitoring programs to track regulatory changes and work with the legal team to assess impact Partner with HR and Legal to support labor & employment compliance programs, including workplace safety, anti-discrimination, wage and hour requirements, and multi-jurisdictional employment regulations Monitor and ensure adherence to industry-specific regulatory requirements relevant to Sigma's business operations Manage security awareness training programs enterprise-wide Conduct internal audits and assessments to validate control effectiveness Coordinate external audits and assessments with third-party auditors Business Enablement Support sales and customer success teams with compliance documentation and security inquiries Develop customer-facing materials that articulate Sigma's risk management and compliance posture Complete and manage responses to customer security questionnaires and assessments (VSAs, SIGs, custom questionnaires) Enable efficient deal cycles by maintaining ready-to-use compliance artifacts, trust center content, and documentation Partner with Sales Engineering and Solutions teams to address prospect security and compliance requirements What You Bring Required 4+ years of experience in governance, risk management, and/or compliance roles, preferably in SaaS or technology companies Demonstrated experience building or significantly maturing a GRC program from the ground up Track record of successfully leading certification audits (SOC 2, ISO 27001, HIPAA, or similar) Experience implementing risk management frameworks (COSO, ISO 31000, NIST RMF, or similar) Strong knowledge of data privacy regulations and their practical application (GDPR, CCPA, etc.) Experience developing and maintaining information security and privacy policies, procedures, and control frameworks Strong business acumen with ability to translate risk and compliance requirements into business value Excellent communication skills with ability to influence stakeholders at all levels, including leadership Proven ability to manage multiple priorities and stakeholders in a fast-paced, high-growth environment Collaborative mindset and commitment to enabling business success while managing risk Preferred Experience with GRC platforms (ServiceNow GRC, Archer, LogicGate, or similar) Hands-on experience with cloud environments (GCP, AWS, Azure) from a compliance and security perspective Experience with labor & employment compliance or cross-functional collaboration with HR on regulatory matters Familiarity with multi-state or international employment regulations Experience with continuous compliance automation tools (Vanta, Drata, Secureframe, Tugboat, or similar) Professional certifications such as CRISC, CISA, CISM, CGEIT, CISSP, or CIPP Experience in high-growth SaaS or technology companies Background in both technical and operational risk management Experience working in organizations with distributed or remote teams Familiarity with security frameworks such as NIST CSF, CIS Controls, or OWASP Why Join Sigma This is an opportunity to build a world-class GRC program that doesn't just check boxes but genuinely enables the business to pursue opportunities with confidence. You'll work across the entire organization, have direct access to the General Counsel, and make a tangible impact on how Sigma manages risk and creates value for customers. Additional Job details The base salary range for this position is $190k - $215k annually. Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work at Sigma Computing. This role is eligible for stock options, as well as a comprehensive benefits package. About us: Sigma is the AI Apps and agentic analytics platform built on the cloud data warehouse. Business and technical teams use Sigma to explore live data, build intelligent applications, and automate critical workflows all without moving data or breaking governance. Sigma supports a spreadsheet interface, SQL, Python, and native AI in a single governed workspace, giving every team the speed to act and IT the control to scale. Sigma is trusted by more than 2,000 customers, including AMD, Duolingo, Colgate-Palmolive, and JPMorgan Chase. Sigma announced its $80M in Series E financing in May 2026. The round was led by Princeville Capital, with new strategic investors Databricks Ventures, ServiceNow Ventures, and Workday Ventures participating alongside returning investors Altimeter Capital, Avenir Growth Capital, D1 Capital Partners, K5 Global, NewView Capital, Spark Capital, Sutter Hill Ventures, and XN. This milestone follows Sigma reaching $200M in annual recurring revenue in April 2026, with more than 100% year-over-year growth and 1.1 million new active users added in the latest fiscal year. Come join us! Benefits For Our Full-Time Employees: Equity Generous health benefits Flexible time off policy. Take the time off you need! Paid bonding time for all new parents Traditional and Roth 401k Commuter and FSA benefits Lunch Program Dog friendly office Sigma is an equal opportunity employer. We are committed to building a smart and strong team regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, veteran, or any other protected status. We look forward to learning how your experience can enable all of us to grow. Note: We have an in-office work environment in all our offices in SF, NYC, London and Sydney. Our Privacy Practices When you submit a job application on this site, Sigma processes your personal data for the purposes of evaluating your candidacy for employment at Sigma and as otherwise needed throughout the recruitment and hiring process. Please review Sigma’s Candidate Privacy Notice for more details. Please note that your personal data may be transferred to a country other than the one in which it was provided (including to the USA, the UK, and Canada, Australia). Sigma’s use of AI This hiring process utilizes artificial intelligence tools to assist in candidate screening and assessment. Our AI tools are designed to complement, not replace, human decision-making.", "summaryDescription" : "Governance, Risk & Compliance (GRC) Manager at Sigma Computing", "postedDate" : "2026-06-11T20:12:10.051", "createdAt" : "2026-06-11T20:12:10.051", "lastUpdated" : "2026-06-14T20:26:43.635", "ingestTimestamp" : "2026-06-11T20:12:10.051", "mongoId" : "6a2a6a8c74d8ee00a063c539", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 175000, "salaryAnnualMax" : 235000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Data privacy", "GDPR", "CCPA", "SOC 2", "ISO 27001", "HIPAA", "Labor & employment compliance", "Multi-jurisdictional employment regulations", "Industry-specific regulatory requirements", "NIST RMF", "COSO", "ISO 31000", "NIST CSF", "CIS Controls", "OWASP", "CRISC", "CISA", "CISM", "CGEIT", "CISSP", "CIPP" ], "skillCount" : 21, "jobCategory" : "other", "jobSubcategory" : "legal", "dataQualityScore" : 0.8888889, "_score" : 699.9213, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "SaaS" }, { "id" : "6a2a7e1874d8ee00a06684d4", "title" : "Security Compliance Analyst, Privacy", "company" : "LangChain", "industry" : "Engineering", "salary" : { "min" : 175000.0, "max" : 220000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "San Francisco, CA", "locations" : [ "San Francisco, CA", "New York, NY" ], "certifications" : [ "CIPM", "CIPP/E", "CIPP/US", "CISA", "CISSP", "ISO 27001 Lead Implementer", "ISO 27701 Lead Implementer" ], "timestamp" : "2026-06-13T16:39:21.747", "fingerprint" : "f09963e340355c2eb329b3a64f0ea934a370062a94987063872f84b53ac733fe", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/langchain/f910bef0-83c0-4bce-b617-a04117874729/application", "externalId" : "f910bef0-83c0-4bce-b617-a04117874729", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "professionalSkills" : [ "Risk management", "Compliance oversight", "Legal analysis", "Regulatory requirements" ], "hardSkillsList" : [ "Control monitoring", "Evidence pipelines", "Data flows", "Access controls", "Audit support", "Program operations", "Vendor risk assessments" ], "hardSkills" : [ { "name" : "Control monitoring", "level" : "intermediate" }, { "name" : "Evidence pipelines", "level" : "intermediate" }, { "name" : "Data flows", "level" : "intermediate" }, { "name" : "Access controls", "level" : "intermediate" }, { "name" : "Audit support", "level" : "intermediate" }, { "name" : "Program operations", "level" : "intermediate" }, { "name" : "Vendor risk assessments", "level" : "intermediate" } ], "majorSkills" : "Privacy compliance, GRC, Security compliance", "majorSkillsList" : [ "Privacy compliance", "GRC", "Security compliance" ], "coreResponsibilities" : "Build compliance operations layer, Automate compliance operations layer, Embed security controls into products, Embed privacy controls into products, Maintain certification programs, Scale certification programs, Maintain audit programs, Scale audit programs, Drive audit readiness, Identify overlapping requirements, Reuse evidence across frameworks, Partner with Legal, Build templates for contracts, Build playbooks for contracts, Build review processes for contracts, Monitor adherence to obligations, Build operational workflows, Build tracking mechanisms, Contribute to customer trust program, Respond to security questionnaires, Conduct due-diligence reviews, Support vendor privacy risk assessments", "teamCollaboration" : "Work with Engineering; Partner with Legal", "domainKnowledge" : "SOC 2; ISO 27001; ISO 27701; ISO 42001; HIPAA; GDPR; CCPA; EU-US Data Privacy Framework; AI-native company security", "domainList" : [ "soc-2", "iso-27001", "iso-27701", "iso-42001", "hipaa", "gdpr", "ccpa", "eu-us-data-privacy-framework", "ai-native-company-security" ], "domainSpecificKnowledge" : [ "SOC 2", "ISO 27001", "ISO 27701", "ISO 42001", "HIPAA", "GDPR", "CCPA", "EU-US Data Privacy Framework", "AI-native company security" ], "communicationSkills" : "Technical writing; Policy drafting; Guidance translation", "documentationSkills" : "Trust documentation; Whitepapers", "qualificationsBasic" : "5+ years privacy experience, 5+ years GRC experience, 5+ years security compliance experience, Hands-on operational experience with privacy regulations, Hands-on operational experience with compliance frameworks, Experience with DPAs, Experience with BAAs, Technical fluency, Comfortable reading code, Understand data flows, Validate controls work, Collaborate with engineering teams, Exceptional writer", "qualificationsPreferred" : "Background in regulated industry, Experience working with regulated-industry customers, Experience across multi-cloud environments, Ability to write scripts, Ability to write code, Python experience a plus", "workSiteFlexibility" : "Onsite", "rawDescription" : "ABOUT US At LangChain, our mission is to make intelligent agents ubiquitous. We build the foundation for agent engineering in the real world, helping developers move from prototypes to production-ready AI agents that teams can rely on. We began as widely adopted open-source tools and have grown to also offer a platform for building, evaluating, deploying, and operating agents at scale. With $125M raised at Series B from IVP, Sequoia, Benchmark, CapitalG, and Sapphire Ventures, we’re at a stage where we’re continuing to develop new products, growth is accelerating, and all team members have meaningful impact on what we build and how we work together. LangChain is a place where your contributions can shape how this technology shows up in the real world. Today, our platform includes LangSmith (Observability, Evaluation, Deployment, Fleet, and Sandboxes), our open source frameworks (LangChain, LangGraph, and Deep Agents), and the newly launched LangSmith Engine for autonomous agent improvement. We have 100M+ monthly open source downloads, 6,000+ active LangSmith customers, and 5 of the Fortune 10 use LangSmith in production (+ 35% of the Fortune 500 overall), including teams at Klarna, Clay, Coinbase, Workday, Lyft, Cloudflare, Harvey, Rippling, Vanta, LinkedIn, Monday.com, Nvidia, and Bridgewater. ABOUT THE TEAM The Security team at LangChain treats compliance as a business enabler, not a checkbox. We move fast, build customer trust across regulated industries, and are actively rethinking what modern security compliance looks like at an AI-native company. We are a small team that operates nothing like a traditional compliance function, still deep in the work of building controls, implementing frameworks, and pushing the business forward on security. ABOUT THE ROLE You'll play a central role in building and scaling LangChain's privacy compliance program, developing the processes, technical controls, and automation that back our commitments to customers, partners, and regulators. You'll maintain and grow our SOC 2, ISO 27001, and privacy programs while taking primary ownership of our privacy framework across multiple cloud environments, deployment models, and geographies. We are looking to hire in-person in SF or NY. WHAT YOU'LL DO - Build and automate our compliance operations layer, including evidence pipelines, control monitoring, and agentic systems for always-on visibility into our compliance posture. - Work directly with Engineering to embed security and privacy controls into our products, including deletion pipelines, PII detection, access audit logging, and fine-grained data access controls. - Maintain and scale our certification and audit programs across SOC 2, ISO 27001, ISO 27701, ISO 42001, HIPAA, GDPR, CCPA, EU-US Data Privacy Framework, and others. Drive audit readiness, identify overlapping requirements, and reuse evidence across frameworks to continuously strengthen our security story. - Partner with Legal on security and privacy contract execution, covering DPAs, BAAs, security addenda, and vendor terms. Build the templates, playbooks, and review processes that enable fast, reliable execution in regulated verticals and unblock enterprise sales. - Monitor adherence to security and privacy contractual obligations across all signed agreements, building the operational workflows and tracking mechanisms to stay on top of commitments as our customer base grows. - Contribute to LangChain's customer trust program — security questionnaire responses, due-diligence reviews, and the trust documentation and whitepapers that give regulated-industry customers confidence in our security posture. - Support vendor privacy risk assessments during onboarding and renewals. WHAT YOU'LL BRING - 5+ years in privacy, GRC, or security compliance, ideally with time at a Big 4 or advisory firm, or in-house at a high-growth tech company. - Hands-on operational experience with privacy regulations and compliance frameworks (GDPR, HIPAA, CCPA, ISO 27001, ISO 27701, SOC 2), including controls mapping, audit support, and day-to-day program operations. - Experience with DPAs and BAAs: reviewing, negotiating, or operationalizing them in a commercial context. - Technical fluency: comfortable reading code, understanding data flows, validating that controls work as described, and collaborating directly with engineering teams. - Exceptional writer. You'll draft policies, respond to security questionnaires, and translate complex requirements into clear guidance for audiences ranging from engineers to executives. NICE TO HAVE - Background in a regulated industry (healthcare, finance, government) or working directly with regulated-industry customers. - Experience working across multi-cloud deployment environments. - Ability to write scripts or code (Python is a strong plus) to automate compliance checks, privacy workflows, or build integrations between security and compliance tooling. - Relevant certifications such as CIPM, CIPP/E, CIPP/US, CISA, CISSP, ISO 27001 Lead Implementer, or ISO 27701 Lead Implementer. - Annual salary range: $175,000- $220,000 USD Compensation Philosophy: We offer competitive compensation that includes base salary, variable compensation for relevant roles, meaningful equity, benefits, and perks. Actual compensation and offerings will vary based on role, level, and location. Team members in the EU, UK, and APAC receive locally competitive benefits aligned with regional norms and regulations. BENEFITS Benefits include medical, dental, and vision coverage, flexible vacation, a 401(k) plan, meals on in-office days in the US and more.", "summaryDescription" : "Security Compliance Analyst, Privacy at LangChain. Skills: Privacy compliance, GRC, Security compliance. Build compliance operations layer. Automate compliance operations layer", "postedDate" : "2026-06-11T18:54:01.870", "createdAt" : "2026-06-11T18:54:01.870", "lastUpdated" : "2026-06-13T16:39:21.747", "ingestTimestamp" : "2026-06-11T18:54:01.870", "mongoId" : "6a2a7e1874d8ee00a06684d4", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 175000, "salaryAnnualMax" : 220000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Control monitoring", "Evidence pipelines", "Data flows", "Access controls", "Audit support", "Program operations", "Vendor risk assessments", "Privacy compliance", "GRC", "Security compliance", "Risk management", "Compliance oversight", "Legal analysis", "Regulatory requirements", "SOC 2", "ISO 27001", "ISO 27701", "ISO 42001", "HIPAA", "GDPR", "CCPA", "EU-US Data Privacy Framework", "AI-native company security", "CIPM", "CIPP/E", "CIPP/US", "CISA", "CISSP", "ISO 27001 Lead Implementer", "ISO 27701 Lead Implementer" ], "skillCount" : 30, "jobCategory" : "engineering", "jobSubcategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 699.86316, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2a6a8c74d8ee00a063c536", "title" : "Governance, Risk & Compliance (GRC) Manager", "company" : "Sigma Computing", "industry" : "SaaS", "salary" : { "min" : 165000.0, "max" : 225000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager in Governance, Risk & Compliance (GRC) at a SaaS company in San Francisco, adjusted for seniority and company size." }, "location" : "San Francisco, California, United States", "locations" : [ "San Francisco", "California", "United States" ], "certifications" : [ "CRISC", "CISA", "CISM", "CGEIT", "CISSP", "CIPP" ], "timestamp" : "2026-06-14T22:09:34.541", "fingerprint" : "a8cb784c1a65c51a0dcaf232406bcabbe65b7a2cecfeb74a9acfca805e028181", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/sigmacomputing/jobs/7767889003", "externalId" : "7767889003", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" }, { "city" : "New York", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "40.7127281,-74.0060152" } ], "locationText" : "San Francisco, California, United States; New York, New York, United States", "experienceLevel" : "Manager", "softSkillsList" : [ "Leadership", "Communication", "Influence", "Problem solving" ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Communication" }, { "name" : "Influence" }, { "name" : "Problem solving" } ], "teamCollaboration" : "Partner with Legal; Partner with Engineering; Partner with Product; Partner with Sales; Partner with Operations; Partner with leadership; Coordinate with functional leaders; Cross-functional collaboration", "domainKnowledge" : "Data privacy regulations; GDPR; CCPA; SOC 2; ISO 27001; HIPAA; NIST RMF; COSO; ISO 31000; NIST CSF; CIS Controls; OWASP; Labor & employment compliance; Multi-jurisdictional employment regulations; Industry-specific regulatory requirements", "domainList" : [ "data-privacy-regulations", "gdpr", "ccpa", "soc-2", "iso-27001", "hipaa", "nist-rmf", "coso", "iso-31000", "nist-csf", "cis-controls", "owasp", "labor-employment-compliance", "multi-jurisdictional-employment-regulations", "industry-specific-regulatory-requirements" ], "domainSpecificKnowledge" : [ "Data privacy regulations", "GDPR", "CCPA", "SOC 2", "ISO 27001", "HIPAA", "NIST RMF", "COSO", "ISO 31000", "NIST CSF", "CIS Controls", "OWASP", "Labor & employment compliance", "Multi-jurisdictional employment regulations", "Industry-specific regulatory requirements" ], "communicationSkills" : "Excellent communication skills; Influence stakeholders; Leadership communication", "documentationSkills" : "Policy documentation; Procedure documentation; Control documentation; Compliance documentation; Customer-facing materials", "specialRequirements" : "In-office work environment", "workSiteFlexibility" : "Onsite", "rawDescription" : "Governance, Risk & Compliance (GRC) Manager Sigma is seeking an experienced GRC Manager to lead and scale our governance, risk, and compliance programs. This role is based in our San Francisco office or upcoming New York office and reports to the General Counsel. You'll have the opportunity to build a strategic, enterprise-wide GRC function that enables business growth while managing organizational risk. As our GRC Manager, you'll partner with Legal, Engineering, Product, Sales, Operations, and leadership to develop a comprehensive GRC framework that protects Sigma's interests, supports our strategic objectives, and builds stakeholder trust. You'll mature our governance structures, implement scalable risk management processes, and ensure compliance with applicable regulatory requirements—all while enabling the business to move quickly and confidently. What You'll Do Governance Design and implement governance frameworks, including reporting, policy governance, and control oversight Establish and maintain enterprise policies, standards, and procedures across technology, security, privacy, and operational functions Build and lead a governance committee structure that provides appropriate oversight and decision-making Create governance dashboards and metrics to provide visibility into program maturity and effectiveness Partner with leadership to align governance activities with business strategy and risk appetite Risk Management Develop and operate a comprehensive Enterprise Risk Management (ERM) program Conduct regular enterprise-wide risk assessments and maintain a dynamic risk register Build and maintain business continuity and disaster recovery programs, including regular testing and tabletop exercises Implement third-party risk management processes, including vendor risk assessments, contract reviews, and ongoing monitoring Create risk treatment plans and track remediation activities across the organization Facilitate risk-informed decision-making at all levels of the organization Coordinate with functional leaders to ensure risks across all business areas are identified and managed appropriately Compliance Own audit and certification programs including SOC 2, ISO 27001, HIPAA, and other relevant standards Develop and maintain compliance monitoring programs to track regulatory changes and work with the legal team to assess impact Partner with HR and Legal to support labor & employment compliance programs, including workplace safety, anti-discrimination, wage and hour requirements, and multi-jurisdictional employment regulations Monitor and ensure adherence to industry-specific regulatory requirements relevant to Sigma's business operations Manage security awareness training programs enterprise-wide Conduct internal audits and assessments to validate control effectiveness Coordinate external audits and assessments with third-party auditors Business Enablement Support sales and customer success teams with compliance documentation and security inquiries Develop customer-facing materials that articulate Sigma's risk management and compliance posture Complete and manage responses to customer security questionnaires and assessments (VSAs, SIGs, custom questionnaires) Enable efficient deal cycles by maintaining ready-to-use compliance artifacts, trust center content, and documentation Partner with Sales Engineering and Solutions teams to address prospect security and compliance requirements What You Bring Required 4+ years of experience in governance, risk management, and/or compliance roles, preferably in SaaS or technology companies Demonstrated experience building or significantly maturing a GRC program from the ground up Track record of successfully leading certification audits (SOC 2, ISO 27001, HIPAA, or similar) Experience implementing risk management frameworks (COSO, ISO 31000, NIST RMF, or similar) Strong knowledge of data privacy regulations and their practical application (GDPR, CCPA, etc.) Experience developing and maintaining information security and privacy policies, procedures, and control frameworks Strong business acumen with ability to translate risk and compliance requirements into business value Excellent communication skills with ability to influence stakeholders at all levels, including leadership Proven ability to manage multiple priorities and stakeholders in a fast-paced, high-growth environment Collaborative mindset and commitment to enabling business success while managing risk Preferred Experience with GRC platforms (ServiceNow GRC, Archer, LogicGate, or similar) Hands-on experience with cloud environments (GCP, AWS, Azure) from a compliance and security perspective Experience with labor & employment compliance or cross-functional collaboration with HR on regulatory matters Familiarity with multi-state or international employment regulations Experience with continuous compliance automation tools (Vanta, Drata, Secureframe, Tugboat, or similar) Professional certifications such as CRISC, CISA, CISM, CGEIT, CISSP, or CIPP Experience in high-growth SaaS or technology companies Background in both technical and operational risk management Experience working in organizations with distributed or remote teams Familiarity with security frameworks such as NIST CSF, CIS Controls, or OWASP Why Join Sigma This is an opportunity to build a world-class GRC program that doesn't just check boxes but genuinely enables the business to pursue opportunities with confidence. You'll work across the entire organization, have direct access to the General Counsel, and make a tangible impact on how Sigma manages risk and creates value for customers. Additional Job details The base salary range for this position is $190k - $215k annually. Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work at Sigma Computing. This role is eligible for stock options, as well as a comprehensive benefits package. About us: Sigma is the AI Apps and agentic analytics platform built on the cloud data warehouse. Business and technical teams use Sigma to explore live data, build intelligent applications, and automate critical workflows all without moving data or breaking governance. Sigma supports a spreadsheet interface, SQL, Python, and native AI in a single governed workspace, giving every team the speed to act and IT the control to scale. Sigma is trusted by more than 2,000 customers, including AMD, Duolingo, Colgate-Palmolive, and JPMorgan Chase. Sigma announced its $80M in Series E financing in May 2026. The round was led by Princeville Capital, with new strategic investors Databricks Ventures, ServiceNow Ventures, and Workday Ventures participating alongside returning investors Altimeter Capital, Avenir Growth Capital, D1 Capital Partners, K5 Global, NewView Capital, Spark Capital, Sutter Hill Ventures, and XN. This milestone follows Sigma reaching $200M in annual recurring revenue in April 2026, with more than 100% year-over-year growth and 1.1 million new active users added in the latest fiscal year. Come join us! Benefits For Our Full-Time Employees: Equity Generous health benefits Flexible time off policy. Take the time off you need! Paid bonding time for all new parents Traditional and Roth 401k Commuter and FSA benefits Lunch Program Dog friendly office Sigma is an equal opportunity employer. We are committed to building a smart and strong team regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, veteran, or any other protected status. We look forward to learning how your experience can enable all of us to grow. Note: We have an in-office work environment in all our offices in SF, NYC, London and Sydney. Our Privacy Practices When you submit a job application on this site, Sigma processes your personal data for the purposes of evaluating your candidacy for employment at Sigma and as otherwise needed throughout the recruitment and hiring process. Please review Sigma’s Candidate Privacy Notice for more details. Please note that your personal data may be transferred to a country other than the one in which it was provided (including to the USA, the UK, and Canada, Australia). Sigma’s use of AI This hiring process utilizes artificial intelligence tools to assist in candidate screening and assessment. Our AI tools are designed to complement, not replace, human decision-making.", "summaryDescription" : "Governance, Risk & Compliance (GRC) Manager at Sigma Computing", "postedDate" : "2026-06-11T19:35:42.482", "createdAt" : "2026-06-11T19:35:42.482", "lastUpdated" : "2026-06-14T22:09:34.541", "ingestTimestamp" : "2026-06-11T19:35:42.482", "mongoId" : "6a2a6a8c74d8ee00a063c536", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 165000, "salaryAnnualMax" : 225000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Leadership", "Communication", "Influence", "Problem solving", "Data privacy regulations", "GDPR", "CCPA", "SOC 2", "ISO 27001", "HIPAA", "NIST RMF", "COSO", "ISO 31000", "NIST CSF", "CIS Controls", "OWASP", "Labor & employment compliance", "Multi-jurisdictional employment regulations", "Industry-specific regulatory requirements", "CRISC", "CISA", "CISM", "CGEIT", "CISSP", "CIPP" ], "skillCount" : 25, "jobCategory" : "other", "jobSubcategory" : "legal", "dataQualityScore" : 0.8888889, "_score" : 697.279, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "SaaS" }, { "id" : "69d140072beec4dd3ddbe3bc", "title" : "Onboarding Success Manager", "company" : "Amazon Support Services Costa Rica SRL", "industry" : "Project/Program/Product Management--Non-Tech, Customer Success, Advertising", "salary" : { "min" : 1.85E7, "max" : 2.65E7, "currency" : "CRC", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an Onboarding Success Manager in San Jose, Costa Rica, adjusted for mid-seniority and the e-commerce industry." }, "location" : "San Jose, San Jose, CRI", "locations" : [ "San Jose, San Jose, CRI" ], "timestamp" : "2026-06-16T01:26:14.821", "fingerprint" : "8e63337e3a32bc6285f05339b409df8f23108f04081e80b39d15abcc8a331749", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10383402/apply", "externalId" : "8a53147b-f3a4-4aa3-a628-057f832818f4", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Jose", "state" : "San Jose", "country" : "Costa Rica", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "9.9327707,-84.0796144" } ], "locationText" : "San Jose, San Jose, Costa Rica", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 4, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "professionalSkills" : [ "Project management", "Account management", "Dealer onboarding" ], "hardSkillsList" : [ "Data analysis" ], "hardSkills" : [ { "name" : "Data analysis", "level" : "intermediate" } ], "majorSkills" : "Onboarding, Project management, Client relations", "majorSkillsList" : [ "Onboarding", "Project management", "Client relations" ], "coreResponsibilities" : "Own end-to-end onboarding process, Guide dealerships through stages, Ensure efficient and successful launch, Serve as primary point of contact, Build trust and maintain communication, Escalate and resolve blockers, Partner closely with internal teams, Align on onboarding milestones, Resolve issues at root cause, Identify gaps and inefficiencies, Develop scalable solutions, Contribute to continuous improvement, Track and report on onboarding KPIs, Surface insights and drive accountability, Project manage new dealers, Resolve onboarding blockers, Escalate issues to appropriate teams, Identify and implement process improvements, Accelerate time-to-launch, Improve dealer experience", "teamCollaboration" : "Cross-functional teams; Business Development; Account Management; Seller Experience; Product Management; Program Management", "projectManagementSkills" : [ "Project management" ], "domainKnowledge" : "Automotive industry; Dealership operations", "domainList" : [ "automotive-industry", "dealership-operations" ], "domainSpecificKnowledge" : [ "Automotive industry", "Dealership operations" ], "toolProficiency" : [ "Salesforce", "CRM" ], "communicationSkills" : "Clear communication; Convey complex ideas", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Occasional travel onsite", "outcomesObjectives" : "Successful launch experience; Improve onboarding experience at scale; Accelerate time-to-launch; Improve dealer experience", "qualificationsBasic" : "4+ years sales or account management, Manage multiple projects and priorities, Analyze data for business decisions, Domestic or international travel coordination", "qualificationsPreferred" : "Delivering cross functional projects, Using Salesforce or other CRM, Launching new products, Engaging with stakeholders, Automotive industry knowledge, Dealership experience", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Are you passionate about helping businesses launch and grow on one of the world's most innovative platforms? Amazon Autos is revolutionizing the vehicle discovery and shopping experience, connecting customers with their ideal vehicle. As an Onboarding Specialist at Amazon Autos, you'll play a critical role in bringing new dealerships onto our marketplace — guiding them from contract signing through their first live transactions and setting them up for long-term success. As an Onboarding Success Manager, you will serve as the primary point of contact for new dealer partners throughout the onboarding journey. You'll project manage dealers through each stage of the onboarding process — from implementation and setup to configuration — ensuring a seamless and efficient launch experience. You'll work cross-functionally with internal teams and directly with dealer personnel to resolve blockers, drive accountability, and continuously improve the onboarding experience at scale. This role offers a unique opportunity to shape how automotive retailers enter the Amazon marketplace. If you thrive in a fast-paced, start-up-like environment and are energized by building scalable processes and helping partners succeed, we encourage you to apply. Key job responsibilities - Dealer Onboarding Project Management: Own the end-to-end onboarding process for new dealerships, guiding them through each stage — including implementation, setup, configuration, integration, and launch — to ensure an efficient and successful launch. - Dealer Relationship Management: Serve as the primary point of contact for dealers during the onboarding period, building trust and maintaining clear communication throughout the process. Escalate and resolve blockers quickly to keep onboarding timelines on track. - Cross-Functional Collaboration: Partner closely with internal teams including Business Development, Account Management, Seller Experience, Product, and Program Management to align on onboarding milestones and resolve issues at the root cause. - Process Improvement: Identify gaps and inefficiencies in the onboarding process and develop scalable solutions, including updated SOPs, tooling improvements, and training materials. Contribute to continuous improvement initiatives that benefit the broader dealer base. - Data & Reporting: Track and report on onboarding KPIs — including time-to-launch, onboarding completion rates, and blocker trends — to surface insights and drive accountability across the team. A day in the life As an Onboarding Specialist, you will be based in our office and will occasionally travel onsite to meet with dealers across metro locations. You will work cross-functionally with internal partners across Seller Experience, Seller Operations, Product Management, and Program Management, and externally with dealer general managers and dealer group contacts. Your primary responsibilities will include: (1) project managing new dealers through the full onboarding lifecycle, (2) resolving onboarding blockers and escalating issues to the appropriate teams, and (3) identifying and implementing process improvements that accelerate time-to-launch and improve the dealer experience. About the team We are a newly formed, rapidly growing team with a vision to create innovative discovery and shopping experiences on Amazon, providing customers better convenience and more selection. We're collaborating with experienced teams at Amazon to define the future of how customers research and shop for vehicles. This role is part of the Amazon Ads org and is focused on vehicle sales. Basic Qualifications: - Bachelor's degree or equivalent - 4+ years of sales or account management experience - Experience managing multiple projects and priorities across teams in a fast-paced, deadline-driven environment - Experience analyzing data to make business decisions - Experience with domestic or international travel coordination Preferred Qualifications: - Experience delivering cross functional projects - Experience using Salesforce or other CRM tool - Experience in launching new products - Experience engaging, verbally and in writing, with internal and external stakeholders to convey complex ideas in a clear, concise manner - Automotive industry knowledge or dealership experience Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Onboarding Success Manager at Amazon Support Services Costa Rica SRL. Skills: Onboarding, Project management, Client relations. Own end-to-end onboarding process. Guide dealerships through stages", "postedDate" : "2026-06-14T20:05:50.831", "createdAt" : "2026-06-14T20:05:50.831", "lastUpdated" : "2026-06-16T01:26:14.821", "ingestTimestamp" : "2026-06-14T20:05:50.831", "mongoId" : "69d140072beec4dd3ddbe3bc", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10383402/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Data analysis", "Onboarding", "Project management", "Client relations", "Account management", "Dealer onboarding", "Automotive industry", "Dealership operations", "Salesforce", "CRM" ], "skillCount" : 10, "jobCategory" : "sales", "jobSubcategory" : "revenue", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 696.87177, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "E-Commerce", "llmIndustryConfidence" : 0.95 }, { "id" : "69e104402beec4dd3def2490", "title" : "Security Compliance Specialist", "company" : "Amazon.com Services LLC", "industry" : "Project/Program/Product Management--Non-Tech, Security Industry Specialist, amazon security", "salary" : { "min" : 102000.0, "max" : 178400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Redmond, Washington, USA", "locations" : [ "Redmond, Washington, USA" ], "certifications" : [ "Certified Compliance Professional (CCP)", "Certified Regulatory Compliance Manager (CRCM)" ], "timestamp" : "2026-06-15T05:19:50.128", "fingerprint" : "113ddedc38bf4d93be65ce7b5450e99fa5fcb01a160d260f5f83bd6f519e2ef9", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10387897/apply", "externalId" : "a36451f0-ade7-4e6d-aa3c-32794af9b74b", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" }, { "city" : "Redmond", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6694141,-122.1238767" } ], "locationText" : "Arlington, Virginia, United States; Redmond, Washington, United States", "employmentType" : "FULL_TIME", "professionalSkills" : [ "Regulatory analysis", "Risk management", "Legal research", "Compliance oversight" ], "hardSkillsList" : [ "Compliance auditing", "Policy development", "Regulatory reporting" ], "hardSkills" : [ { "name" : "Compliance auditing", "level" : "intermediate" }, { "name" : "Policy development", "level" : "intermediate" }, { "name" : "Regulatory reporting", "level" : "intermediate" } ], "majorSkills" : "Regulatory compliance, Risk management, Legal analysis", "majorSkillsList" : [ "Regulatory compliance", "Risk management", "Legal analysis" ], "coreResponsibilities" : "Develop and implement compliance programs, Conduct compliance audits, Identify and assess compliance risks, Develop and deliver compliance training, Monitor regulatory changes, Advise business units on compliance matters, Investigate compliance issues, Prepare compliance reports", "teamCollaboration" : "Cross-functional teams; Legal department; Business units", "projectManagementSkills" : [ "Project planning" ], "domainKnowledge" : "E-commerce regulations; Data privacy laws; Consumer protection laws; International trade compliance", "domainList" : [ "e-commerce-regulations", "data-privacy-laws", "consumer-protection-laws", "international-trade-compliance" ], "domainSpecificKnowledge" : [ "E-commerce regulations", "Data privacy laws", "Consumer protection laws", "International trade compliance" ], "toolProficiency" : [ "GRC tools" ], "communicationSkills" : "Report writing; Presentation skills", "documentationSkills" : "Policy documentation; Procedure documentation", "continuousLearning" : "Professional development; Industry conferences", "problemSolvingSkills" : "Root cause analysis; Issue resolution", "outcomesObjectives" : "Ensure adherence to regulations; Mitigate compliance risks; Improve compliance posture", "qualificationsBasic" : "Bachelor's degree or equivalent experience, 5+ years of experience in compliance or legal roles, Experience with regulatory frameworks, Experience with risk management", "qualificationsPreferred" : "Master's degree or JD, Experience in the e-commerce industry, Experience with data privacy regulations, Experience with international compliance", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "We are open to hiring candidates to work out of one of the following locations: Arlington, VA, USA | Redmond, WA, USA Amazon Leo (previously known as Project Kuiper) is an initiative to increase global broadband access through a constellation of over 3,000 Low Earth Orbit (LEO) satellites. Its mission is to bring fast, affordable broadband to unserved and underserved communities worldwide. At Leo, we are obsessed with customer trust and are seeking an individual contributor who is creative, and passionate about delivering Governance, Risk and Compliance solutions to meet Leo's regulatory and external assurance needs. In this role, you will work collaboratively with various business and security teams across Amazon to identify compliance needs, assess the maturity of processes and controls, design, build, and execute high-impact security or compliance programs and liaise with external auditors and regulators. Export Control Requirement: Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum. Key job responsibilities - Design and drive scalable processes within a GRC (Governance, Risk, and Compliance) framework to ensure compliance with Leo's regulatory and contractual security and privacy requirements; - Building and maintaining compliance certifications such as ISO 27001, ISO 22301, NIST 800-53, ISO27701, SOC 2, GDPR, CCPA etc., identifying applicable security controls, assessing compliance gaps and readiness, developing remediation strategies, and driving remediation activities to completion; - Driving certifications and assurance programs by liaising with external auditors and other Amazon security teams, articulating control implementation and impact, and establishing considerations for applying security, and risk concepts to a highly technical and complex environment; - Communicating to key stakeholders and leadership on controls implementation, audit results, compliance program metrics, key risks and areas of program improvement, as well as, seek diverse opinions and coordinate improvement efforts; - Working closely with engineering, compliance, security, bizdev and Legal teams to identify future compliance and regulatory requirements and define compliance solutions; - Serving as an advisor on audit remediation issues; - Understand and manage cross-functional GRC requirements to translate them into GRC tool; and - Be comfortable with hands-on day-to-day problem solving and implementing quick and effective action plans to meet short- and long-term priorities. A day in the life Have you wanted an opportunity to secure an advanced satellite based broadband telecom service? The Leo Security team owns the security of product and operations of Leo end-to-end. We provide the necessary infrastructure and mechanisms to ensure the security of our satellite constellation and provide assurance to our customers and regulators on our security, privacy and resiliency programs. Our team drives the implementation of compliance programs, owns the collaboration with external auditors and regulators. You will work in a start-up like environment, backed by Amazon’s infrastructure to bootstrap security mechanisms, and help instill the security culture in the organization. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Experience with GRC technology (SAP GRC Access Controls, Process Controls and Risk Management), SAP Identity Management to support Identity and Access Management (Single Sign ON, User life cycle management) Preferred Qualifications: - Knowledge of statutory compliance requirements Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Redmond - 102,000.00 - 178,400.00 USD annually", "summaryDescription" : "Security Compliance Specialist at Amazon.com Services LLC. Skills: Regulatory compliance, Risk management, Legal analysis. Develop and implement compliance programs. Conduct compliance audits", "postedDate" : "2026-06-13T18:58:45.783", "createdAt" : "2026-06-13T18:58:45.783", "lastUpdated" : "2026-06-15T05:19:50.128", "ingestTimestamp" : "2026-06-13T18:58:45.783", "mongoId" : "69e104402beec4dd3def2490", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10387897/apply", "salaryAnnualMin" : 102000, "salaryAnnualMax" : 178400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Compliance auditing", "Policy development", "Regulatory reporting", "Regulatory compliance", "Risk management", "Legal analysis", "Regulatory analysis", "Legal research", "Compliance oversight", "Project planning", "E-commerce regulations", "Data privacy laws", "Consumer protection laws", "International trade compliance", "Certified Compliance Professional (CCP)", "Certified Regulatory Compliance Manager (CRCM)", "GRC tools" ], "skillCount" : 17, "jobCategory" : "operations", "jobSubcategory" : "legal", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 696.448, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "69e1043f2beec4dd3def2489", "title" : "Security Compliance Specialist, Devices & Services Security Compliance", "company" : "Amazon.com Services LLC", "industry" : "Project/Program/Product Management--Non-Tech, Security Industry Specialist, amazon security", "salary" : { "min" : 102000.0, "max" : 178400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T03:29:41.932", "fingerprint" : "7cc0bf45d0a25eeeab0562af9b3c7ffbfdf42825d62d49d4d7c4862889d6453d", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10387917/apply", "externalId" : "ef7d0e34-03d9-48c4-9693-d204970ee7c5", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "AWS, Redshift, S3, EC2, Glue", "professionalSkills" : [ "Risk management", "Governance", "Compliance", "Security architecture", "System development", "Operations security" ], "hardSkillsList" : [ "Access control", "Data encryption", "Auditing", "Logging", "Network security", "Cryptography" ], "softSkillsList" : [ "Problem solving" ], "hardSkills" : [ { "name" : "Access control", "level" : "intermediate" }, { "name" : "Data encryption", "level" : "intermediate" }, { "name" : "Auditing", "level" : "intermediate" }, { "name" : "Logging", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Cryptography", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Problem solving" } ], "majorSkills" : "Security compliance, Risk management, Governance", "majorSkillsList" : [ "Security compliance", "Risk management", "Governance" ], "coreResponsibilities" : "Understand compliance requirements, Rationalize compliance requirements, Provide business specific interpretations, Support automation opportunities, Review security controls, Engage with Business, Engage with SMEs, Define information security policies, Ensure compliance to policies, Maintain control libraries, Maintain compliance requirements, Maintain guidance materials", "teamCollaboration" : "Business and SMEs; Security and engineering teams", "domainKnowledge" : "Service security; Device security; ISO 27001/2; HIPAA; NIST 800-53; NIST CSF; Access-control system; Access-control methodology; Network security; Application security; System-development security; Security architecture; Security models; Cryptography; Operations security; Medical devices; Medical software; HITRUST; Hardware development; Software development; Product launches; Device lifecycles; Service lifecycles", "domainList" : [ "service-security", "device-security", "iso-27001-2", "hipaa", "nist-800-53", "nist-csf", "access-control-system", "access-control-methodology", "network-security", "application-security", "system-development-security", "security-architecture", "security-models", "cryptography", "operations-security", "medical-devices", "medical-software", "hitrust", "hardware-development", "software-development", "product-launches", "device-lifecycles", "service-lifecycles" ], "domainSpecificKnowledge" : [ "Service security", "Device security", "ISO 27001/2", "HIPAA", "NIST 800-53", "NIST CSF", "Access-control system", "Access-control methodology", "Network security", "Application security", "System-development security", "Security architecture", "Security models", "Cryptography", "Operations security", "Medical devices", "Medical software", "HITRUST", "Hardware development", "Software development", "Product launches", "Device lifecycles", "Service lifecycles" ], "communicationSkills" : "Written communications; Oral communications", "documentationSkills" : "Policies; Supporting documentation", "innovationCreativity" : "Innovative process changes", "problemSolvingSkills" : "Problem solving abilities", "qualificationsBasic" : "Bachelor's degree or equivalent, Experience developing policies, 3+ years information security experience, 3+ years compliance experience, Experience with multiple security frameworks, Experience with multiple regulations", "qualificationsPreferred" : "Experience working with security teams, Experience working with engineering teams, Experience implementing repeatable processes, Experience driving automation, Experience driving standardization, Experience handling ambiguous challenges, Experience creating written communications, Experience delivering written communications, Experience creating oral communications, Experience delivering oral communications, Experience supporting security compliance medical devices, Experience supporting security compliance medical software, Experience with hardware development processes, Experience with software development processes, Experience with product launches, Experience with lifecycles of devices, Experience with lifecycles of services", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon’s Devices & Services Security Compliance team is growing and looking for a highly motivated security compliance specialist to help us enhance and integrate our governance and compliance programs. You will help to determine the high security bar we hold for our products, analyze regulatory and certification requirements, and ensure we have sufficient enforcement mechanisms to keep our products and services safe for our customers. You should be a technically experienced and innovative security governance, risk, and compliance professional who has the ability to understand systems, security, and privacy processes, communicate to customers, and to be able to drive innovative process changes through multiple organizations and teams. Key job responsibilities * Understand and rationalize compliance requirements for service and device security. * Provide business specific interpretations and support automation opportunities * Review security controls that are technical in nature, such as access controls, data encryption in transit and at rest, and auditing and logging user activity * Engage with the Business and SMEs to define and ensure compliance to information security policies * Maintain control libraries and compliance requirements and guidance materials for various security standards and regulations About the team The Devices & Services Security Compliance Team work across products like Alexa, FireTV, Echo, Kindle, and others to ensure the safety and security of our customers and their data. We support Amazon Devices by defining the security bar for our products and services, ensuring regulatory compliance, and obtaining and maintaining industry certifications and standards. Basic Qualifications: - Bachelor's degree or equivalent in Information Security, Computer Science, Risk Management, Engineering, Math, Statistics, or a related discipline, or equivalent technology experience - Experience developing policies and supporting documentation - 3+ years of information security and compliance experience - Experience working with multiple security frameworks and regulations like ISO 27001/2, HIPAA, NIST 800-53, NIST CSF Preferred Qualifications: - Experience working directly with security and engineering teams - Knowledge of AWS tech stack (e.g., AWS Redshift, S3, EC2, Glue) - Experience implementing repeatable processes and driving automation or standardization - Experience handling ambiguous or undefined challenges through strong problem solving abilities - Experience creating and delivering written and oral communications for technical and non-technical audiences - Knowledge of one or more of the following domains: access-control system and methodology, network security, application- and system-development security, security architecture and models, cryptography, and operations security - Experience supporting security compliance for medical devices or software (e.g. HIPAA, HITRUST) - Experience with hardware and software development processes, products launches and lifecycles of devices and/or services Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 102,000.00 - 178,400.00 USD annually", "summaryDescription" : "Security Compliance Specialist, Devices & Services Security Compliance at Amazon.com Services LLC. Skills: Security compliance, Risk management, Governance. Understand compliance requirements. Rationalize compliance requirements", "postedDate" : "2026-06-13T07:59:22.647", "createdAt" : "2026-06-13T07:59:22.647", "lastUpdated" : "2026-06-15T03:29:41.932", "ingestTimestamp" : "2026-06-13T07:59:22.647", "mongoId" : "69e1043f2beec4dd3def2489", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10387917/apply", "salaryAnnualMin" : 102000, "salaryAnnualMax" : 178400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Access control", "Data encryption", "Auditing", "Logging", "Network security", "Cryptography", "Problem solving", "Security compliance", "Risk management", "Governance", "Compliance", "Security architecture", "System development", "Operations security", "Service security", "Device security", "ISO 27001/2", "HIPAA", "NIST 800-53", "NIST CSF", "Access-control system", "Access-control methodology", "Application security", "System-development security", "Security models", "Medical devices", "Medical software", "HITRUST", "Hardware development", "Software development", "Product launches", "Device lifecycles", "Service lifecycles" ], "skillCount" : 33, "jobCategory" : "project-management", "dataQualityScore" : 1.0, "_score" : 695.9672, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a305739f292fd229cf35bd6", "title" : "Senior Director, Information Security & Compliance", "company" : "Beeline Medicines", "industry" : "Biotech", "salary" : { "min" : 245000.0, "max" : 355000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Director, Information Security & Compliance in the US Biotech industry, adjusted for seniority and company size." }, "location" : "United States", "locations" : [ "United States" ], "timestamp" : "2026-06-16T08:47:41.814", "fingerprint" : "013ea186fd91a044d78c3a5e6a4ef0ae9f4939348a09530c3f27db232071a1ad", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/beelinemedicines/jobs/4286176009", "externalId" : "4286176009", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "hybrid" } ], "locationText" : "United States", "experienceMinYears" : 12, "experienceLevel" : "Director", "remoteFriendly" : true, "rawDescription" : "About Beeline Medicines: Beeline Medicines is a clinical‑stage biotechnology company focused on developing and delivering category-leading precision therapies to transform the lives of people living with autoimmune and inflammatory diseases. With a portfolio of potential best-in-class and first-in-disease therapeutic candidates that directly target key pathways governing dysregulated immunological and inflammatory responses, the Company is developing medicines that have the opportunity to provide durable, life-changing impact. Led by an established executive team and backed by world-class life science investors, each day Beeline Medicines is determined to bring the scientific rigor and operational excellence to get to what matters for patients – realizing a world where people with immune-mediated diseases can live life fully. Job Summary: The Senior Director, Information Security the incumbent will be expected to travel to Beeline Medicines’ offices on a periodic basis to support in-person collaboration, team engagement, and business operations. The frequency and scheduling of such visits will be determined at the company's discretion based on business need. Essential Duties and Responsibilities: Security Governance equivalent professional experience accepted. 12+ years of progressive information security experience with at least 5 years in a security leadership role (Manager, Director, or equivalent) preferred. Demonstrated experience building or significantly maturing an information security program, including policy development, risk management, and compliance framework implementation. Experience with security frameworks: NIST CSF, NIST SP 800-53, ISO 27001, or equivalent. Direct experience with SOX IT General Controls — either implementing ITGCs for IPO readiness or supporting ongoing SOX compliance at a public company. Strong working knowledge of Microsoft 365 security controls, including Entra ID, Conditional Access, Defender, and Purview. Demonstrated experience building or significantly maturing an information security program, including policy development, risk management, and compliance framework implementation. Experience managing managed security service providers (MDR, MSSP, or similar) and coordinating external security assessments (penetration testing, controls testing, risk assessments). Demonstrated experience building or significantly maturing an information security program, including policy development, risk management, and compliance framework implementation Independent judgment and self-direction — this role operates as a solo security practitioner at a small company and must prioritize effectively without day-to-day supervision. Strong written and verbal communication with the ability to translate security risks into business terms for executive and non-technical audiences. Salary Range: The expected salary range for this position varies by location and will be communicated based on the country or region in which the selected candidate is hired. Actual pay will be determined based on experience, qualifications, location, and other job-related factors permitted by applicable local law. A discretionary annual bonus and long-term incentive award (e.g., equity) may be available based on individual and Company performance. Salary Range $264,000—$285,000 USD Benefits: We offer a comprehensive benefits package tailored to the country and region in which you are hired, in compliance with local laws and practices. Benefits may include, but are not limited to: Competitive health and wellness coverage (structure and premiums vary by country) Paid time off, public holidays, and additional leave entitlements in accordance with local requirements Flexible work arrangements / hybrid schedule Benefits vary by location and are subject to eligibility requirements, local regulations, and plan terms. Specific benefit details applicable to your country or region will be provided during the offer process. Equal Employment Opportunity: Beeline Medicines is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, disability, age, protected veteran status, or any other characteristic protected by applicable federal, state, or local law. Reasonable Accommodation: If you require a reasonable accommodation to participate in the application or interview process, please contact careers@beelinemedicines.com to request an accommodation. We are committed to providing equal access to all candidates. Privacy Upon submission of this form I understand that Beeline Medicines is based in the United States and personal data submitted in the form will be transferred and accessed in the U.S., Information about Beeline Medicines privacy practices can be found at Privacy Policy - Beeline Medicines", "summaryDescription" : "Senior Director, Information Security & Compliance at Beeline Medicines", "postedDate" : "2026-06-15T23:20:59.512", "createdAt" : "2026-06-15T23:20:59.512", "lastUpdated" : "2026-06-16T08:47:41.814", "ingestTimestamp" : "2026-06-15T23:20:59.512", "mongoId" : "6a305739f292fd229cf35bd6", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 245000, "salaryAnnualMax" : 355000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.7777778, "_score" : 694.87085, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Biotech", "llmIndustryConfidence" : 0.98 }, { "id" : "69e1043f2beec4dd3def243a", "title" : "Security Compliance Specialist", "company" : "Amazon.com Services LLC", "industry" : "Project/Program/Product Management--Non-Tech, Security Industry Specialist, amazon security", "salary" : { "min" : 102000.0, "max" : 178400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Redmond, Washington, USA", "locations" : [ "Redmond, Washington, USA" ], "certifications" : [ "Certified Compliance Professional (CCP)", "Certified Regulatory Compliance Manager (CRCM)" ], "timestamp" : "2026-06-15T05:58:39.913", "fingerprint" : "159c3d162fcd9a8ba3b246e67eb961c53b324da6210c067c4ac35f170c25cdda", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10387889/apply", "externalId" : "52d9d870-6576-4c36-839a-6ce399cc2724", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" }, { "city" : "Redmond", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6694141,-122.1238767" } ], "locationText" : "Arlington, Virginia, United States; Redmond, Washington, United States", "employmentType" : "FULL_TIME", "professionalSkills" : [ "Regulatory analysis", "Risk management", "Legal research", "Compliance oversight" ], "hardSkillsList" : [ "Compliance auditing", "Policy development", "Regulatory reporting" ], "hardSkills" : [ { "name" : "Compliance auditing", "level" : "intermediate" }, { "name" : "Policy development", "level" : "intermediate" }, { "name" : "Regulatory reporting", "level" : "intermediate" } ], "majorSkills" : "Regulatory compliance, Risk management, Legal analysis", "majorSkillsList" : [ "Regulatory compliance", "Risk management", "Legal analysis" ], "coreResponsibilities" : "Develop and implement compliance programs, Conduct compliance audits, Identify and assess compliance risks, Develop and deliver compliance training, Monitor regulatory changes, Advise business units on compliance matters, Investigate compliance issues, Prepare compliance reports", "teamCollaboration" : "Cross-functional teams; Legal department; Business units", "projectManagementSkills" : [ "Project planning", "Task prioritization" ], "domainKnowledge" : "E-commerce regulations; Data privacy laws; Consumer protection laws; International trade compliance", "domainList" : [ "e-commerce-regulations", "data-privacy-laws", "consumer-protection-laws", "international-trade-compliance" ], "domainSpecificKnowledge" : [ "E-commerce regulations", "Data privacy laws", "Consumer protection laws", "International trade compliance" ], "toolProficiency" : [ "GRC tools" ], "communicationSkills" : "Report writing; Presentation skills", "documentationSkills" : "Policy documentation; Procedure documentation", "continuousLearning" : "Professional development; Industry conferences", "problemSolvingSkills" : "Root cause analysis; Issue resolution", "outcomesObjectives" : "Maintain high compliance standards; Reduce compliance risks; Ensure adherence to regulations", "qualificationsBasic" : "Bachelor's degree or equivalent experience, 5+ years of experience in compliance or legal roles, Experience with regulatory frameworks, Experience with risk management", "qualificationsPreferred" : "Master's degree or JD, Experience in the e-commerce industry, Experience with data privacy regulations, Experience with international compliance", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "We are open to hiring candidates to work out of one of the following locations: Arlington, VA, USA | Redmond, WA, USA Amazon Leo (previously known as Project Kuiper) is an initiative to increase global broadband access through a constellation of over 3,000 Low Earth Orbit (LEO) satellites. Its mission is to bring fast, affordable broadband to unserved and underserved communities worldwide. At Leo, we are obsessed with customer trust and are seeking an individual contributor who is creative, and passionate about delivering Governance, Risk and Compliance solutions to meet Leo's regulatory and external assurance needs. In this role, you will work collaboratively with various business and security teams across Amazon to identify compliance needs, assess the maturity of processes and controls, design, build, and execute high-impact security or compliance programs and liaise with external auditors and regulators. Export Control Requirement: Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum. Key job responsibilities - Design and drive scalable processes within a GRC (Governance, Risk, and Compliance) framework to ensure compliance with Leo's regulatory and contractual security and privacy requirements; - Building and maintaining compliance certifications such as ISO 27001, ISO 22301, NIST 800-53, ISO27701, SOC 2, GDPR, CCPA etc., identifying applicable security controls, assessing compliance gaps and readiness, developing remediation strategies, and driving remediation activities to completion; - Driving certifications and assurance programs by liaising with external auditors and other Amazon security teams, articulating control implementation and impact, and establishing considerations for applying security, and risk concepts to a highly technical and complex environment; - Communicating to key stakeholders and leadership on controls implementation, audit results, compliance program metrics, key risks and areas of program improvement, as well as, seek diverse opinions and coordinate improvement efforts; - Working closely with engineering, compliance, security, bizdev and Legal teams to identify future compliance and regulatory requirements and define compliance solutions; - Serving as an advisor on audit remediation issues; - Understand and manage cross-functional GRC requirements to translate them into GRC tool; and - Be comfortable with hands-on day-to-day problem solving and implementing quick and effective action plans to meet short- and long-term priorities. A day in the life Have you wanted an opportunity to secure an advanced satellite based broadband telecom service? The Leo Security team owns the security of product and operations of Leo end-to-end. We provide the necessary infrastructure and mechanisms to ensure the security of our satellite constellation and provide assurance to our customers and regulators on our security, privacy and resiliency programs. Our team drives the implementation of compliance programs, owns the collaboration with external auditors and regulators. You will work in a start-up like environment, backed by Amazon’s infrastructure to bootstrap security mechanisms, and help instill the security culture in the organization. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Knowledge of security technology and concepts (Authentication, Authorization, Single sign-on, Cryptography, etc.) Preferred Qualifications: - Experience with GRC technology (SAP GRC Access Controls, Process Controls and Risk Management), SAP Identity Management to support Identity and Access Management (Single Sign ON, User life cycle management) Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Redmond - 102,000.00 - 178,400.00 USD annually", "summaryDescription" : "Security Compliance Specialist at Amazon.com Services LLC. Skills: Regulatory compliance, Risk management, Legal analysis. Develop and implement compliance programs. Conduct compliance audits", "postedDate" : "2026-06-13T18:02:25.389", "createdAt" : "2026-06-13T18:02:25.389", "lastUpdated" : "2026-06-15T05:58:39.913", "ingestTimestamp" : "2026-06-13T18:02:25.389", "mongoId" : "69e1043f2beec4dd3def243a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10387889/apply", "salaryAnnualMin" : 102000, "salaryAnnualMax" : 178400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Compliance auditing", "Policy development", "Regulatory reporting", "Regulatory compliance", "Risk management", "Legal analysis", "Regulatory analysis", "Legal research", "Compliance oversight", "Project planning", "Task prioritization", "E-commerce regulations", "Data privacy laws", "Consumer protection laws", "International trade compliance", "Certified Compliance Professional (CCP)", "Certified Regulatory Compliance Manager (CRCM)", "GRC tools" ], "skillCount" : 18, "jobCategory" : "operations", "jobSubcategory" : "legal", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 693.17993, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a30677df292fd229cfbe2f5", "title" : "Senior Sales Onboarding Manager", "company" : "dbt Labs", "industry" : "SaaS", "salary" : { "min" : 134000.0, "max" : 205000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "US - Remote", "locations" : [ "US - Remote" ], "timestamp" : "2026-06-16T07:48:00.193", "fingerprint" : "83d439fdd85fe8a423dea4a151c003f551640f7805a4da7547f52cf402101686", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/dbtlabsinc/jobs/4705388005", "externalId" : "4705388005", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "About Us dbt Labs is the pioneer of analytics engineering, helping data teams transform raw data into reliable, actionable insights. Since 2016, we’ve grown from an open source project into the leading analytics engineering platform, now used by over 90,000 teams every week, driving data transformations and AI use cases. As of February 2025, we’ve surpassed $100 million in annual recurring revenue (ARR) and serve more than 5,400 dbt Platform customers, including AstraZeneca, Sky, Nasdaq, Volvo, JetBlue, and SafetyCulture. We’re backed by top-tier investors including Andreessen Horowitz, Sequoia Capital, and Altimeter. At our core, we believe in empowering data practitioners: Reliable, high-quality data is the fuel that propels AI-powered data engineering.  AI is changing data work, fast. dbt’s data control plane keeps data engineers ahead of that curve. We empower engineers to deliver reliable, governed data faster, cheaper, and at scale. dbt Labs is now synonymous with analytics engineering, defining the modern data stack and serving as the data control plane for enterprise teams around the world. And we’re just getting started.. We’re growing fast and building a team of passionate, curious people across the globe. Learn more about what makes us special by checking out our values. As the Sales Onboarding Manager, you'll play a crucial role in empowering our Sales team to excel in selling a diverse and expanding range of products. Reporting directly to the Manager of Enablement, you'll help spearhead the global Sales Enablement Strategy, overseeing operations across three geographical regions and multiple sales segments. The ideal candidate will possess extensive experience in sales enablement, demonstrating a proven track record of implementing successful enablement strategies with measurable impacts to pipeline and revenue. They should also exhibit a deep passion for the sales process and be well-versed in MEDDPICC sales qualification and the Command of the Message framework. In this role, you can expect to: Conduct engaging onboarding and ramp courses and follow up workshops, for ICS and leadership emphasizing interaction and understanding with a focus on reducing new hire ramp time Foster inclusivity across in-person, hybrid, and remote audiences during sessions Collaborate with Sales leadership to pinpoint knowledge gaps and devise strategies to create intervention enablement, such as skills and process training Lead the onboarding live and virtual content audit quarterly to ensure our onboarding program so content is always up to date Create practical exercises for hands-on learning during sessions to ensure comprehension Partner with curriculum sales enablement managers to ensure that core content and programs are addressed in ramp program Track time-to-productivity and other ramp metrics for new hires Inform leadership of team’s performance and engagement across the ramp cycle Manage a Gong library folder with gold standard calls which can be used in content or have insights extracted for use in sales strategies Provide continuous training on MEDDPICC methodologies to support ongoing learning and skill enhancement within the sales team This position will require approximately 25-50% travel to our hub office. This candidate will facilitate live training and coaching You are a good fit if you have: 3+ years of experience in sales enablement, sales, or sales leadership Experience with MEDDPICC and Command of the Message Experience with various systems and tools including Gong, Clari, Salesforce, Claude Experience building and iterating on AI-assisted workflows for content creation, communications, and operational efficiency Deep knowledge of sales processes, methodologies, and solution-selling best practices Proven track record of scoping, building, and executing integrated sales communications, enablement programs, and content Proven track record of delivering engaging and impactful live training sessions or workshops Demonstrated experience working for a global organization, collaborating with colleagues in multiple time zones Compensation & Benefits Competitive Salary Equity Stake Benefits - dbt Labs offers: Unlimited vacation (and yes we use it!) 401k with 3% guaranteed contribution Excellent healthcare Paid Parental Leave Wellness stipend Home office stipend, and more! #LI-Remote Salary: We offer competitive compensation packages commensurate with experience, including salary, equity, and where applicable, performance-based pay. Our Talent Acquisition Team can answer questions around dbt Labs' total rewards during your interview process. In select locations (including Boston, Chicago, Denver, Los Angeles, Philadelphia, New York Metro, San Francisco, DC Metro, Seattle, Austin), an alternate range may apply, as specified below. The typical starting salary range for this role is: $134,000 - $190,000 USD The typical starting salary range for this role in the select locations listed is: $149,000 - $205,000 US dbt Labs is an equal opportunity employer, committed to building an inclusive team that welcomes diverse perspectives, backgrounds, and experiences. Even if your experience doesn’t perfectly align with the job description, we encourage you to apply—we value potential just as much as a perfect resume. Want to learn more about our focus on Diversity, Equity and Inclusion at dbt Labs? Check out our DEI page. dbt Labs reserves the right to amend or withdraw the posting at any time. For employees outside the United States, dbt Labs offers a competitive benefits package. RSUs or comparable benefits may be offered depending on the legal or country limitations. Privacy Notice Supplement to Privacy Notice - Californians Supplement to Privacy Notice - EEA/UK", "summaryDescription" : "Senior Sales Onboarding Manager at dbt Labs", "postedDate" : "2026-06-15T23:26:08.490", "createdAt" : "2026-06-15T23:26:08.490", "lastUpdated" : "2026-06-16T07:48:00.193", "ingestTimestamp" : "2026-06-15T23:26:08.490", "mongoId" : "6a30677df292fd229cfbe2f5", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 134000, "salaryAnnualMax" : 205000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "sales", "jobSubcategory" : "revenue", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "_score" : 690.4839, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "SaaS", "llmIndustryConfidence" : 0.98 }, { "id" : "6a30795ef292fd229c031bbf", "title" : "Consultor Junior GRC Galicia", "company" : "BABEL", "industry" : "Consulting", "salary" : { "min" : 24000.0, "max" : 32000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Junior GRC Consultant in Madrid, Spain, with adjustments for the technology industry and company size." }, "location" : "MADRID", "locations" : [ "MADRID", "Spain" ], "certifications" : [ "DPD", "ISO2700" ], "timestamp" : "2026-06-16T12:12:51.574", "fingerprint" : "842224848803a789143f5f99744b8583d57a4a5cb0329c40fe25d13173e6ff86", "source" : "workday", "language" : "es", "applyUrl" : "https://babelgroup.wd103.myworkdayjobs.com/REC_External_Career_Site/job/MADRID/Consultor-Junior-GRC-Galicia_JR108073", "externalId" : "JR108073", "industryFunction" : { }, "locationPoint" : "9.26211,125.96437", "structuredLocations" : [ { "city" : "Madrid", "country" : "Spain", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "40.4167820,-3.7035070" } ], "locationText" : "Madrid, Spain", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 2, "experienceLevel" : "Entry", "coreResponsibilities" : "Aplicar conocimiento tecnológico en aceleración digital, Gestionar procesos de selección", "domainKnowledge" : "Seguridad de la información; Ciberseguridad", "domainList" : [ "seguridad-de-la-informacion", "ciberseguridad" ], "domainSpecificKnowledge" : [ "Seguridad de la información", "Ciberseguridad" ], "continuousLearning" : "Formación continua", "specialRequirements" : "Viajar eventualmente a Galicia", "qualificationsBasic" : "Titulación universitaria, 2 años de experiencia, Disponibilidad para viajar eventualmente, Residencia en Galicia", "qualificationsPreferred" : "Conocimiento de gallego, Certificados DPD, Certificados ISO2700, Certificados similares", "remoteFriendly" : false, "workSiteFlexibility" : "Flexible", "rawDescription" : "We are**One Team.** We**make it happen.** We are **Unstoppable.** BABEL es una consultora tecnológica multinacional especializada en aplicar sus servicios y conocimiento tecnológico en los procesos de aceleración digital de sus clientes, grandes empresas y organismos públicos. **¿Cuál es nuestro plan estratégico?** ¡Miramos hacia el futuro! Nuestro**plan estratégico Hiperespacio 2029** promete ser un viaje emocionante, **lleno de oportunidades** para crecer y desarrollarse profesionalmente. Alcanzar **1000 millones** de facturación, un reto que estamos seguros de que con la **colaboración** y el **talento** de nuestra gente, será otra historia de éxito que escribiremos juntos y juntas. **¿Qué buscamos?** Buscamos un nuevo compañero/a como Consultor junior GRC para formar parte de nuestro equipo de Ciberseguridad. Requisitos necesarios : * **Titulación** : Titulación universitaria (preferentemente del ámbito técnico relacionado con las TIC o con la seguridad de la información o licenciatura o grado y derecho) * **Experiencia** : Al menos 2 años de experiencia. * **Presencialidad** : Residual. Disponibilidad para viajar eventualmente a Galicia o residencia en dicha Comunidad Autónoma. * **idioma** : Valorable conocimiento de gallego. * **Certificaciones** : Valorables certificados DPD, ISO2700 o similares. **¿Qué ofrecemos?** **Babel, the great way to achieve the success.** ¿Quieres formar parte de un equipo en expansión, comprometido e innovador que hace historia cada día? En Babel te acompañamos en tu camino hacia el éxito. Creemos en el talento de las personas y lo queremos potenciar ofreciéndote un gran entorno de trabajo basado en la colaboración y la solidaridad. Trabajar en Babel es mucho más que trabajar en una empresa, es unirse a un equipo de personas con una misión compartida y a un modelo de compañía centrado en valores. Y lo hacemos promoviendo la diversidad, la equidad y la inclusión, garantizando la igualdad de oportunidades a todas las personas candidatas, en un entorno libre de cualquier tipo de discriminación. Además, * Apostamos por la flexibilidad laboral-personal. (Sistema de vacaciones por puntos, teletrabajo y flexibilidad). * Invertimos en la formación de nuestros _Babelievers_. * Invertimos en tu salud física y emocional. (Seguro Médico Privado/ Seguro de vida, entrenador personal y programa de wellbeing). * Invertimos también en tu tiempo libre (Actividades en la naturaleza, campeonatos deportivos, suscripción a plataforma streaming (por Ej. Netflix) * Participamos del crecimiento de la compañía y reconocemos la participación de cada persona (Bono de Beneficios). * Ponemos foco en trabajar con últimas tecnologías y proyectos innovadores, pero sobre todo, acompañamos a la transformación digital y acercamos la tecnología a la sociedad. **¿Aceptas el desafío? ¡Te esperamos!** _En cumplimiento de la normativa vigente en materia de protección de datos te informamos que el responsable de tus datos personales es GRUPO BABEL (consultar empresas en la política de privacidad), y los utilizará para gestionar tus procesos de selección, tanto actuales como futuros y el resto de finalidades descritas en la web. Este tratamiento está basado en el consentimiento del candidato. Los datos personales recabados no serán en ningún caso cedidos a terceros salvo por obligaciones legales expresas. Puedes ejercer los derechos que te asisten sobre protección de datos en la dirección_[ _data.protection @babelgroup.com_](mailto:data.protection@babelgroup.com) _. Toda la información sobre política de privacidad en nuestra web._", "summaryDescription" : "Consultor Junior GRC Galicia at BABEL. Aplicar conocimiento tecnológico en aceleración digital. Gestionar procesos de selección", "postedDate" : "2026-06-16T03:52:14.844", "createdAt" : "2026-06-16T03:52:14.826", "lastUpdated" : "2026-06-16T12:12:51.574", "ingestTimestamp" : "2026-06-16T03:52:14.826", "mongoId" : "6a30795ef292fd229c031bbf", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://babelgroup.wd103.myworkdayjobs.com/REC_External_Career_Site/job/MADRID/Consultor-Junior-GRC-Galicia_JR108073", "salaryBand" : "<30k", "hasSalary" : false, "allSkills" : [ "Seguridad de la información", "Ciberseguridad", "DPD", "ISO2700" ], "skillCount" : 4, "jobCategory" : "general", "jobSubcategory" : "general", "seniorityLevel" : "junior", "dataQualityScore" : 1.0, "_score" : 685.1402, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cc34474d8ee00a0a08dfc", "title" : "Manager, Customer Onboarding", "company" : "Owner", "industry" : "Revenue", "salary" : { "min" : 1150000.0, "max" : 1450000.0, "currency" : "MXN", "frequency" : "yearly", "is_estimated" : false }, "location" : "Remote - Colombia/Mexico", "locations" : [ "Remote - Colombia/Mexico", "Remote - Colombia", "Remote - Mexico" ], "timestamp" : "2026-06-16T06:43:55.734", "fingerprint" : "b599bcb9a60ecbbf14d69838da98c7004d45dee7b327c637a6d32c492aed15fe", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/owner/89d8bfb8-5bed-4481-b9c6-5f7a98c8b243/application", "externalId" : "89d8bfb8-5bed-4481-b9c6-5f7a98c8b243", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Colombia", "continent" : "sa", "workMode" : "remote" }, { "country" : "Mexico", "continent" : "na", "workMode" : "remote" } ], "locationText" : "Colombia; Mexico", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "professionalSkills" : [ "Team management", "Process improvement" ], "hardSkillsList" : [ "Data analysis" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Data analysis", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Customer onboarding, Team leadership, Churn reduction", "majorSkillsList" : [ "Customer onboarding", "Team leadership", "Churn reduction" ], "coreResponsibilities" : "Build, lead, and mentor a team, Provide training, coaching, and performance management, Set clear team goals, Monitor team progress, Report on team performance, Refine Onboarding process, Support new restaurants, Set restaurants up for success, Maximize customer early retention, Identify key metrics, Develop strategies to reduce churn, Utilize data-driven insights, Improve the Onboarding process, Work closely with teams, Ensure seamless transition, Ensure consistent messaging, Collaborate with Product team, Advocate for features", "teamCollaboration" : "Cross-functional collaboration; Sales, Product, Customer Support teams", "domainKnowledge" : "Restaurant tech industry", "domainList" : [ "restaurant-tech-industry" ], "domainSpecificKnowledge" : [ "Restaurant tech industry" ], "toolProficiency" : [ "CRM tools" ], "communicationSkills" : "Interpersonal abilities", "problemSolvingSkills" : "Analytical mindset", "outcomesObjectives" : "Maximize customer early retention; Reduce early churn", "qualificationsBasic" : "5 years of experience in customer success, 2 years in a leadership position, Proficiency in customer relationship management (CRM) tools", "qualificationsPreferred" : "Experience in the restaurant tech industry", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "About Owner Owner is the AI-native system local business owners use to succeed, starting with restaurants. We’re building the system that replaces the many tools owners use to run their business. It powers everything from the restaurant’s website, online ordering, CRM, POS, and more. Product philosophy Most small business software makes owners do the work to get what they want: sales growth and profit growth. Owner does the work for them agentically. Our system drives demand, converts it, and helps operators run their business day to day. As it improves, the business improves with it. Using Owner should feel like having a team of great operators, engineers, and marketers working for you. Our vision We’re starting by helping independent restaurants succeed online. But it’s not just restaurants that need our help. Most local businesses are struggling with these same problems. Huge technology corporations are taking their customers, bleeding their profits, and making it hard for them to survive. Once we nail the solution for restaurants – we’ll scale it into every other local business type. In the future we envision, tens of millions of local business owners will use our technology to succeed in the digital age. Read our Series C memo here → https://www.owner.com/c Our traction Since 2020, we've generated tens of millions in revenue and processed over a billion dollars of online orders. 1 in 5 Americans have used an Owner.com http://Owner.com website. More importantly, we’ve helped over 20,000 restaurant owners, and saved them nearly $200 million in fees. Our team Our team is now in the low hundreds. We’ve got top talent from the most successful companies in SMB software, including: Shopify, HubSpot, DoorDash, ServiceTitan, Rappi, Faire and Stripe. We’ll be scaling even faster in 2026 to keep pace with our customer growth. Where we work Owner is a remote-first, global company headquartered in San Francisco, with a sales hub in Toronto. For a few of our roles we prioritize in-person collaboration at one of our office locations. Most of our teammates are distributed throughout the globe. Please review the role description and discuss with your recruiter for more details on location! Why we’re looking for you We're looking for a strategic and people-focused Launch/Onboarding Manager to lead a team of Customer Onboarding Specialists and drive the success of new restaurant clients. This role is responsible for building, coaching and mentoring a high-performing team, refining and executing onboarding processes that maximize early retention, and reducing churn through data-driven strategies. You’ll collaborate cross-functionally with Sales, Product, and Customer Support to ensure a seamless and consistent experience for new clients, while continuously advocating for improvements that enhance customer success. Ideal candidates are strong leaders with a passion for process improvement and a track record of using insights to drive measurable outcomes. This role is 100% remote and can be based anywhere in Mexico or Colombia. The impact you will have 1. Team Leadership and Development: - Build, lead, and mentor a team of Launch Specialists, fostering a culture of excellence and continuous improvement. - Provide training, coaching, and performance management to ensure the team delivers high-quality support. - Set clear team goals, monitor progress, and report on team performance to senior management. 2. Process Design & Implementation: - Refine our Onboarding process to support new restaurants and set them up for success - Maximize customer early retention 3. Churn Reduction Strategy: - Identify key metrics and develop strategies to reduce early churn among new restaurant clients. - Utilize data-driven insights to continuously improve the Onboarding process. 4. Cross-Functional Collaboration: - Work closely with Onboarding, Sales, Product, and Customer Support teams to ensure seamless transition and consistent messaging for new clients. - Collaborate with the Product team to identify and advocate for features that enhance new client success. Who you’ll work with - A team of exceptional Launch Managers - Sales, Product, and Customer Support teams Minimum Requirements - Minimum of 5 years of experience in customer success, account management, or a similar role, with at least 2 years in a leadership position. - Proven experience in the restaurant tech industry is highly desirable. - Strong leadership and team management skills. - Excellent communication and interpersonal abilities. - Analytical mindset with the ability to leverage data for decision-making. - Proficiency in customer relationship management (CRM) tools and platforms. - Ability to work independently and manage multiple priorities in a fast-paced environment. Pay and benefits - The annual base salary and commission for this role: - Mexico: $1,150,000 MXN base + $300,000 MXN commission - Colombia: $235,000,000 COP base + $65,000,000 COP commission - Plus comprehensive health coverage, unlimited PTO, and additional perks! Interview Process - Recruiter Screen — 30-minute video call to align on your background, what you're looking for, and answer any early questions - Hiring Manager Screen — 30-minute video interview with the hiring manager to go deeper on your experience and how you work - Full Interview Round — 1-hour video interview with senior stakeholders on the team covering your skills, approach, and how you'd show up in the role - Final Round — 60-minute video conversation with a senior leadership member Notice - Employment Scams Communication from our team regarding job opportunities will only be made by an Owner team member with an @owner.com email address. We do not conduct interviews over email or chat platforms, and we will never ask you to provide personal or financial information such as your mailing address, social security number, credit card numbers or banking information. If you believe you are being contacted by a scammer, please mark the communication as \"phishing\" or “spam” and do not respond.", "summaryDescription" : "Manager, Customer Onboarding at Owner. Skills: Customer onboarding, Team leadership, Churn reduction. Build, lead, and mentor a team. Provide training, coaching, and performance management", "createdAt" : "2026-06-14T21:05:40.630", "lastUpdated" : "2026-06-16T06:43:55.734", "ingestTimestamp" : "2026-06-14T21:05:40.630", "mongoId" : "6a2cc34474d8ee00a0a08dfc", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Data analysis", "Leadership", "Customer onboarding", "Team leadership", "Churn reduction", "Team management", "Process improvement", "Restaurant tech industry", "CRM tools" ], "skillCount" : 9, "jobCategory" : "sales", "jobSubcategory" : "customer_success", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "_score" : 684.5202, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "SaaS", "llmIndustryConfidence" : 0.97 }, { "id" : "6a2176df74d8ee00a0c1b2f6", "title" : "Compliance Assessment Manager, AWS Compliance & Security Assurance", "company" : "Amazon.com Services LLC", "industry" : "Project/Program/Product Management--Non-Tech, Security Industry Specialist, amazon security", "salary" : { "min" : 131300.0, "max" : 229700.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Herndon, Virginia, USA", "locations" : [ "Herndon, Virginia, USA" ], "certifications" : [ "ISO", "NIST", "SOX", "PCI", "HIPAA", "GDPR" ], "timestamp" : "2026-06-15T05:36:07.458", "fingerprint" : "a807974fea665080da40cbe8514b8f06a97bfb9d74ce330221e5401430fa2c5c", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10437747/apply", "externalId" : "4b9484ab-792b-4e46-b4fa-9e77154740a6", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Herndon", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9695316,-77.3859479" } ], "locationText" : "Herndon, Virginia, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "AWS, Cloud engineering, Cloud security", "professionalSkills" : [ "Security assessment", "Compliance assessment", "Risk management", "Governance", "Risk", "Control operations" ], "hardSkillsList" : [ "Technical audits", "Compliance assessments", "Performance management", "Career progression" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Technical audits", "level" : "intermediate" }, { "name" : "Compliance assessments", "level" : "intermediate" }, { "name" : "Performance management", "level" : "intermediate" }, { "name" : "Career progression", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Security assurance, Compliance assessment, Team management", "majorSkillsList" : [ "Security assurance", "Compliance assessment", "Team management" ], "coreResponsibilities" : "Lead a team of risk assessors, Review AWS services for security and compliance prior, Drive compliance assessment processes, Enable customers operating in regulated markets, Build and develop high-performing teams, Drive strategic security and compliance assessment programs, Raise the bar on security at unparalleled scale", "teamCollaboration" : "Cross-functional teams; Builder engagement workflows", "projectManagementSkills" : [ "Program management" ], "domainKnowledge" : "AWS security controls framework; Regulated markets; Healthcare; Finance; Government", "domainList" : [ "aws-security-controls-framework", "regulated-markets", "healthcare", "finance", "government" ], "domainSpecificKnowledge" : [ "AWS security controls framework", "Regulated markets", "Healthcare", "Finance", "Government" ], "documentationSkills" : "Policy documentation", "qualificationsBasic" : "Bachelor's degree in Auditing, Information Systems Management, Computer Science, Cyber Security, or other related fields, Experience performing technical audits/assessments in direct support of a major compliance effort, 5+ years experience in IT audit, cloud engineering, and/or cloud security, 5+ years experience managing a team of 5 or more", "qualificationsPreferred" : "Experience with technology risk, IT security audit experience, Compliance experience, Relevant regulatory knowledge", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "At AWS, Security is priority zero. As part of the AWS Compliance & Security Assurance (CSA) organization, the Security Controls, Policies, and Assessments team reinvents AWS Security's approach to managing operational risks — making security transparent for builders and ensuring effective Governance, Risk, and Control operations through builder engagement workflows, specialized security requirements, compliance assessments, and policy documentation. We are looking for an experienced people manager who is passionate about building and developing high-performing teams, driving strategic security and compliance assessment programs, and raising the bar on security at unparalleled scale. In this role, you will lead a team of risk assessors responsible for reviewing AWS services for security and compliance prior to launch, aligned to AWS's security controls framework, driving compliance assessment processes, and enabling customers operating in regulated markets such as Healthcare, Finance, and Government. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Bachelor's degree in Auditing, Information Systems Management, Computer Science, Cyber Security, or other related fields - Experience performing technical audits/assessments in direct support of a major compliance effort (e.g., ISO, NIST, SOX, PCI, HIPAA, GDPR and other regulatory/industry certifications) - 5+ years experience in IT audit, cloud engineering, and/or cloud security. - 5+ years experience managing a team of 5 or more including providing guidance on career progression, promotion, and performance management. Preferred Qualifications: - Experience with technology risk, IT security audit, compliance and/or relevant regulatory knowledge Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, NY, New York - 144,400.00 - 252,700.00 USD annually USA, VA, Arlington - 131,300.00 - 229,700.00 USD annually USA, VA, Herndon - 131,300.00 - 229,700.00 USD annually USA, WA, Seattle - 131,300.00 - 229,700.00 USD annually", "summaryDescription" : "Compliance Assessment Manager, AWS Compliance & Security Assurance at Amazon.com Services LLC. Skills: Security assurance, Compliance assessment, Team management. Lead a team of risk assessors. Review AWS services for security and compliance prior", "postedDate" : "2026-06-13T09:13:39.027", "createdAt" : "2026-06-13T09:13:39.027", "lastUpdated" : "2026-06-15T05:36:07.458", "ingestTimestamp" : "2026-06-13T09:13:39.027", "mongoId" : "6a2176df74d8ee00a0c1b2f6", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10437747/apply", "salaryAnnualMin" : 131300, "salaryAnnualMax" : 229700, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Technical audits", "Compliance assessments", "Performance management", "Career progression", "Leadership", "Security assurance", "Compliance assessment", "Team management", "Security assessment", "Risk management", "Governance", "Risk", "Control operations", "Program management", "AWS security controls framework", "Regulated markets", "Healthcare", "Finance", "Government", "ISO", "NIST", "SOX", "PCI", "HIPAA", "GDPR" ], "skillCount" : 25, "jobCategory" : "project-management", "dataQualityScore" : 1.0, "_score" : 680.9795, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "69e1043e2beec4dd3def22c7", "title" : "Sr. Regulatory Compliance Specialist", "company" : "Amazon.com Services LLC", "industry" : "Project/Program/Product Management--Non-Tech, Security Industry Specialist, amazon security", "salary" : { "min" : 119000.0, "max" : 208900.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Arlington, Virginia, USA", "locations" : [ "Arlington, Virginia, USA" ], "timestamp" : "2026-06-15T01:34:56.035", "fingerprint" : "afe48962cb0ad2f21231965a6df13c8590a812665e80cccbdc89c0e760bae518", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10387893/apply", "externalId" : "a17a05ce-2349-4d79-b886-7efdd708025a", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" } ], "locationText" : "Arlington, Virginia, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "professionalSkills" : [ "Governance", "Risk", "Compliance", "Regulatory requirements", "Privacy requirements", "Remediation strategies", "Risk management", "GRC requirements" ], "hardSkillsList" : [ "Process design", "Program development", "Gap assessment", "Control implementation", "Action plans" ], "softSkillsList" : [ "Creative" ], "hardSkills" : [ { "name" : "Process design", "level" : "intermediate" }, { "name" : "Program development", "level" : "intermediate" }, { "name" : "Gap assessment", "level" : "intermediate" }, { "name" : "Control implementation", "level" : "intermediate" }, { "name" : "Action plans", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Creative" } ], "majorSkills" : "Regulatory compliance, GRC framework, Security programs", "majorSkillsList" : [ "Regulatory compliance", "GRC framework", "Security programs" ], "coreResponsibilities" : "Design scalable processes, Ensure compliance with regulatory requirements, Ensure compliance with privacy requirements, Build global regulatory compliance program, Maintain global regulatory compliance program, Identify regulatory requirements, Assess regulatory gaps, Develop remediation strategies, Drive remediation activities, Drive regulatory assurance programs, Liaise with external regulators, Liaise with Amazon security teams, Articulate control implementation, Articulate control impact, Establish frameworks for security concepts, Establish frameworks for risk concepts, Communicate regulatory requirements, Communicate compliance program metrics, Communicate key risks, Communicate areas for program improvement, Coordinate improvement efforts, Work with Engineering teams, Work with Regulatory teams, Work with Legal teams, Work with Security teams, Work with Business Development teams, Identify future compliance requirements, Identify future regulatory requirements, Define solutions for compliance, Define solutions for regulatory requirements, Serve as subject matter advisor, Provide guidance on compliance obligations, Provide guidance on risk management, Understand GRC requirements, Manage GRC requirements, Translate GRC requirements, Implement action plans", "teamCollaboration" : "Business and security teams; External auditors; Regulators; Key stakeholders; Leadership; Engineering teams; Regulatory teams; Legal teams; Security teams; Business Development teams", "projectManagementSkills" : [ "Program development" ], "domainKnowledge" : "NIS2; DORA; EU Cyber Resilience Act; Global regulatory; Privacy regulations; Satellite broadband telecom", "domainList" : [ "nis2", "dora", "eu-cyber-resilience-act", "global-regulatory", "privacy-regulations", "satellite-broadband-telecom" ], "domainSpecificKnowledge" : [ "NIS2", "DORA", "EU Cyber Resilience Act", "Global regulatory", "Privacy regulations", "Satellite broadband telecom" ], "toolProficiency" : [ "GRC tool" ], "communicationSkills" : "Communicate to stakeholders; Communicate to leadership", "problemSolvingSkills" : "Hands-on problem solving; Quick action plans; Effective action plans", "specialRequirements" : "U. S. citizen or national, U. S. permanent resident, Lawfully admitted into the U. S. as a refugee, Granted asylum", "qualificationsBasic" : "Bachelor's degree or equivalent, 6+ years of professional experience, Designing and implementing NIS2, DORA, GDPR, SOCI and other similar global regulatory and privacy programs, U. S. citizen or national, U. S. permanent resident, Lawfully admitted into the U. S. as a refugee, Granted asylum", "qualificationsPreferred" : "Experience working across functional teams, Experience working with senior stakeholders, Experience working in highly regulated industry, Implementing global regulatory and privacy requirements, Experience working with regulatory agencies, Experience on submissions to regulatory agencies", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon Leo (previously known as Project Kuiper) is an initiative to increase global broadband access through a constellation of over 3,000 Low Earth Orbit (LEO) satellites. Its mission is to bring fast, affordable broadband to unserved and underserved communities worldwide. At Leo, we are obsessed with customer trust and are seeking an individual contributor who is creative, and passionate about delivering Governance, Risk and Compliance solutions to meet Leo's regulatory and external assurance needs. In this role, you will work collaboratively with various business and security teams across Amazon to identify compliance needs, assess the maturity of processes and controls, design, build, and execute high-impact security or compliance programs and liaise with external auditors and regulators. We are open to hiring candidates to work out of one of the following locations: Arlington, VA, USA Export Control Requirement: Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum. Key job responsibilities 1. Design and drive scalable processes within a Governance, Risk, and Compliance (GRC) framework to ensure compliance with Leo's regulatory and privacy requirements. 2. Build and maintain a global regulatory compliance program covering NIS2, DORA, the Security of Critical Infrastructure Act 2018 (SOCI), the EU Cyber Resilience Act (CRA), and other applicable regulations — including identifying requirements, assessing gaps, developing remediation strategies, and driving remediation activities to completion. 3. Drive regulatory assurance programs by liaising with external regulators and other Amazon security teams, articulating control implementation and impact, and establishing frameworks for applying security and risk concepts within a highly technical and complex environment. 4. Communicate to key stakeholders and leadership on regulatory requirements, compliance program metrics, key risks, and areas for program improvement; proactively seek diverse perspectives and coordinate improvement efforts. 5. Work closely with Engineering, Regulatory, Legal, Security, and Business Development teams to identify future compliance and regulatory requirements and define solutions. 6. Serve as a subject matter advisor on regulatory issues, providing guidance to internal teams on compliance obligations and risk management considerations. 7. Understand and manage cross-functional GRC requirements, translating them into actionable configurations within the GRC tool. 8. Demonstrate comfort with hands-on, day-to-day problem solving and the ability to implement quick, effective action plans to address both short- and long-term priorities. A day in the life Have you wanted an opportunity to secure an advanced satellite based broadband telecom service? The Leo Security team owns the security of product and operations of Leo end-to-end. We provide the necessary infrastructure and mechanisms to ensure the security of our satellite constellation and provide assurance to our customers and regulators on our security, privacy and resiliency programs. Our team drives the implementation of compliance programs, owns the collaboration with external auditors and regulators. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Bachelor's degree or equivalent in Computer Science, Engineering, Information Systems Management, Information Security or other related fields - 6+ years of professional experience in regulatory compliance - designing and implementing NIS2, DORA, GDPR, SOCI and other similar global regulatory and privacy programs Preferred Qualifications: - Experience working across functional teams and senior stakeholders - Experience working in highly regulated industry and implementing global regulatory and privacy requirements. - Experience working with regulatory agencies and on submissions to regulatory agencies. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, VA, Arlington - 119,300.00 - 208,900.00 USD annually", "summaryDescription" : "Sr. Regulatory Compliance Specialist at Amazon.com Services LLC. Skills: Regulatory compliance, GRC framework, Security programs. Design scalable processes. Ensure compliance with regulatory requirements", "postedDate" : "2026-06-13T01:45:14.171", "createdAt" : "2026-06-13T01:45:14.171", "lastUpdated" : "2026-06-15T01:34:56.035", "ingestTimestamp" : "2026-06-13T01:45:14.171", "mongoId" : "69e1043e2beec4dd3def22c7", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10387893/apply", "salaryAnnualMin" : 119000, "salaryAnnualMax" : 208900, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Process design", "Program development", "Gap assessment", "Control implementation", "Action plans", "Creative", "Regulatory compliance", "GRC framework", "Security programs", "Governance", "Risk", "Compliance", "Regulatory requirements", "Privacy requirements", "Remediation strategies", "Risk management", "GRC requirements", "NIS2", "DORA", "EU Cyber Resilience Act", "Global regulatory", "Privacy regulations", "Satellite broadband telecom", "GRC tool" ], "skillCount" : 24, "jobCategory" : "project-management", "dataQualityScore" : 1.0, "_score" : 680.3196, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2ca0ce74d8ee00a09a358b", "title" : "Customer Onboarding Manager", "company" : "Auror", "industry" : "Customer", "salary" : { "min" : 65000.0, "max" : 95000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager in the SaaS industry in London, UK, adjusted for seniority and company size." }, "location" : "Auror London Office", "locations" : [ "Auror London Office" ], "timestamp" : "2026-06-16T01:54:20.169", "fingerprint" : "c2ff1ea74556b8b378678490768bfbe2386b93330e8980778cd86e9f0163bb0d", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/auror/1accbc51-496a-4f74-9a12-5098ba8a789c/application", "externalId" : "1accbc51-496a-4f74-9a12-5098ba8a789c", "industryFunction" : { }, "structuredLocations" : [ { "city" : "London", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "51.5074456,-0.1277653" } ], "locationText" : "London, United Kingdom", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "professionalSkills" : [ "Customer onboarding", "Value realization", "Stakeholder engagement", "ROI articulation" ], "hardSkillsList" : [ "Use case identification", "Data translation" ], "hardSkills" : [ { "name" : "Use case identification", "level" : "intermediate" }, { "name" : "Data translation", "level" : "intermediate" } ], "majorSkills" : "Customer pilots, Customer implementations, Onboarding, Value realization", "majorSkillsList" : [ "Customer pilots", "Customer implementations", "Onboarding", "Value realization" ], "coreResponsibilities" : "Own end-to-end delivery of customer pilots, Own end-to-end delivery of implementations, Complete pilots within set time frame, Complete implementations within set time frame, Build pilot plans, Execute pilot plans, Build implementation plans, Execute implementation plans, Build onboarding plans, Execute onboarding plans, Manage onboarding projects, Guide customers toward early value, Identify high-impact use cases, Activate high-impact use cases, Translate platform data into outcomes, Contribute to pilot business cases, Articulate ROI, Articulate value, Lead structured onboarding engagements, Lead pilot engagements, Align customer stakeholders, Set clear expectations, Deliver customer training, Deliver onboarding sessions, Deliver weekly performance updates, Work closely with Sales, Work closely with CS Engagement, Work closely with Product teams, Unblock progress, Support conversion, Ensure clean handoffs, Identify health status, Identify risks, Manage multiple pilots concurrently, Travel at least monthly", "teamCollaboration" : "Collaborate with Sales; Collaborate with Customer Success Engagement; Collaborate with Product", "projectManagementSkills" : [ "Scope management", "Milestone management", "Risk management", "Timeline management" ], "domainKnowledge" : "Retail industry; Organised Retail Crime; AI in retail", "domainList" : [ "retail-industry", "organised-retail-crime", "ai-in-retail" ], "domainSpecificKnowledge" : [ "Retail industry", "Organised Retail Crime", "AI in retail" ], "communicationSkills" : "Customer training; Performance updates", "documentationSkills" : "Comprehensive documentation", "continuousLearning" : "Personal growth support; Courses; Conferences; Events", "innovationCreativity" : "AI potential exploration", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Customer travel monthly", "outcomesObjectives" : "Reach value quickly; Reach value confidently; Drive pilot success metrics; Achieve shrink reduction; Achieve operational improvements; Achieve community safety impact; Support pilot conversion", "qualificationsBasic" : "Experience delivering pilots, Experience delivering implementations, Experience delivering onboarding, Enterprise SaaS experience, Retail experience, Data-driven environments experience, Manage timelines, Manage dependencies, Manage risks, Minimal oversight", "qualificationsPreferred" : "AI curiosity", "remoteFriendly" : true, "workSiteFlexibility" : "Onsite", "rawDescription" : "ABOUT AUROR At Auror, we’re empowering the retail industry to tackle theft and Organised Retail Crime, a $150 Billion problem globally. It’s high volume crime that’s increasingly organised in nature and is putting people, retailers, and communities at risk every day. Founded in New Zealand 12 years ago, we’re working with some of the best and largest retailers in the world across the US, Canada, Australia, New Zealand, and the UK. Auror is connecting people and intelligence to reduce crime. We’re using technology for good. Our mission is clear: reduce violent retail crime by 50% in 5 years. It's an ambitious goal - and one we believe is achievable. In partnership with our leading retail partners, we need people with the passion, determination, and innovation required to overcome one of the world's largest problems. If you’re looking to make a difference with and for the people dedicated to stopping crime, for good, then we want you on our team. We're also embracing the potential of AI to supercharge our impact - whether that's enhancing the way we detect trends, support our customers, or improve internal workflows. As a company, we're committed to responsibly incorporating AI into how we work and what we build, and we encourage all Aurors to be curious about how AI can elevate their work, regardless of role or function. THE ROLE As a Customer Onboarding Manager (IC3), you will own the delivery of Customer pilots, and new + existing Customer implementations, ensuring enterprise customers reach value quickly and confidently. You will operate with autonomy on defined work, guiding customers through onboarding, activation, and proof of value while collaborating closely with Sales, Customer Success Engagement, and Product. This role is hands-on and outcome-driven. You’ll connect customer goals to practical use cases, translate data into measurable outcomes, and support pilot conversion through strong execution and stakeholder engagement. Success is measured by adoption, time-to-value, and pilot outcomes - not just activity. Practically this will involve: - Own end-to-end delivery of customer pilots and implementations, completing pilots and implementations within a set time frame depending on customer size. - Build and execute pilot, implementation, and onboarding plans that drive pilot success metrics. - Manage onboarding projects end-to-end, including scope, milestones, dependencies, risks, and timelines. - Guide customers toward early value by identifying and activating high-impact use cases aligned to their operating reality. - Translate platform data into clear, measurable outcomes such as shrink reduction, operational improvements, and community safety impact. - Contribute meaningfully to pilot business cases by articulating ROI and value tied to customer use cases. - Lead structured onboarding and pilot engagements, aligning multiple customer stakeholders and setting clear expectations. - Deliver customer training, onboarding sessions, and weekly performance updates covering adoption, engagement, insights, and next steps. - Work closely with Sales, CS Engagement, and Product teams to unblock progress, support conversion, and ensure clean handoffs with comprehensive documentation, with health status and risks identified. - Manage multiple pilots concurrently in a fast-paced environment, including customer travel at least monthly as needed. You’ll be reporting to Aaron Koumi, https://docs.google.com/document/d/1iphx97ErquVyPvstXg3kzAJONZGh86K26jXfg7lKOEE/editSenior Customer Success Lead Profile photo for Aaron [https://ca.slack-edge.com/T09D3NMQX-U06P4R69TQV-629eaa8b4dee-512] I joined the incredible team at Auror to be part of the global movement empowering retailers and police to prevent and reduce crime in our communities. It’s not just a job, it’s meaningful work that makes a real difference. Every day, I see firsthand the positive impact Auror has in helping our retail partners stop crime, protect their teams, and create safer environments for everyone. Our Customer Success team embodies everything that’s great about Auror. They care deeply, bring a high standard of excellence, and never forget to have fun along the way. You can check out my LinkedIn here https://www.linkedin.com/in/aaron-koumi?utm_source=share&utm_campaign=share_via&utm_content=profile&utm_medium=android_app About you: You are a dependable executor who balances urgency with quality, owns outcomes, and collaborates effectively across teams. - You have experience delivering pilots, implementations, and onboarding in enterprise SaaS, retail, or data-driven environments. - You operate independently on clear priorities, managing timelines, dependencies, and risks with minimal oversight. - You communicate confidently with customers, explaining product value, outcomes, and ROI in clear, practical terms. - You coach customers and users to embed new ways of working. - You identify blockers to adoption and address them early. - You translate data into insights that help customers make decisions and adopt the platform effectively. - You build trust with customer stakeholders across roles and adapt your communication to different audiences. - You are organised, detail-oriented, and comfortable managing multiple workstreams at once. - You are proactive, growth-minded, and comfortable travelling monthly or as needed to support customers. We are looking for people who demonstrate a strong alignment to our Guiding Principles (you can find these on our Careers page https://www.auror.co/company-careers). With diversity and inclusion at the forefront of Auror’s guiding principles, we promote a culture that celebrates diversity and inclusiveness at Auror, regardless of, but not limited to, race, gender, sexual orientation, family status, religion, ethnicity, national origin, physical disability, veteran status, or age. BENEFITS: - Competitive salary range: Depending on level of experience of £50,000 - £65,000 (IC3) - Annual bonus: Eligibility for a GBP £3,000 bonus at the end of the financial year if we’ve hit our revenue goals together. - Employee share scheme: You’ll own part of a company making a real difference! - Flexibility: We are hard-working and outcome-focused, but recognise there is more to life than work. We promote a healthy work/life blend. - Shorter work weeks (at full pay): Everyone gets Friday afternoons off, so you can start your weekend early, and do more of whatever it is that makes you happy. - Focus on mental and physical health: We understand how vital our health is and have policies to support your wellness, including Wellness Days, and up to £375 GBP for expert sessions every year. - Health insurance: We prioritise looking after your health by contributing to your individual health insurance plan through Vitality Health - Family-friendly: We offer comprehensive paid parental leave - 12 weeks for birth parents and 6 weeks for non-birth parents following birth, adoption, or surrogacy, available to all Aurors from day one. - Personal growth: We support our team to participate in courses, conferences, or events that will help them develop their skills. - Team love: We have regular team lunches and social events where most (if not all) activities are during work hours. WHAT ARE THE NEXT STEPS? If you’re excited about our mission and you have the experience and a passion for this role, please hit “Apply”. If you’re not sure that you tick all the boxes but feel you’re close to what we’re looking for, please apply anyway! We’re proud that Auror is a place where everyone can learn and grow so we’d love to hear from you. You'll be asked to submit a cover letter as part of your application. While this is optional we do encourage it, as we find cover letters can tell a story that resumes alone often cannot. Our hiring team love to understand what attracted you to this role and why you are excited about the opportunity to join Auror. Once you apply, you’ll hear from us to acknowledge your application. If you have questions about any of the above, or if you have any accessibility requirements, we’ll be able to help you from there.", "summaryDescription" : "Customer Onboarding Manager at Auror. Skills: Customer pilots, Customer implementations, Onboarding, Value realization. Own end-to-end delivery of customer pilots. Own end-to-end delivery of implementations", "createdAt" : "2026-06-14T19:19:43.104", "lastUpdated" : "2026-06-16T01:54:20.169", "ingestTimestamp" : "2026-06-14T19:19:43.104", "mongoId" : "6a2ca0ce74d8ee00a09a358b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Use case identification", "Data translation", "Customer pilots", "Customer implementations", "Onboarding", "Value realization", "Customer onboarding", "Stakeholder engagement", "ROI articulation", "Scope management", "Milestone management", "Risk management", "Timeline management", "Retail industry", "Organised Retail Crime", "AI in retail" ], "skillCount" : 16, "jobCategory" : "sales", "jobSubcategory" : "customer_success", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "_score" : 677.2184, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "SaaS", "llmIndustryConfidence" : 0.97 }, { "id" : "6a2176dc74d8ee00a0c1b299", "title" : "Assurance Program Manager, AWS Compliance & Security Assurance", "company" : "Amazon.com Services LLC", "industry" : "Project/Program/Product Management--Non-Tech, Security Industry Specialist, amazon security", "salary" : { "min" : 119300.0, "max" : 208900.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Herndon, Virginia, USA", "locations" : [ "Herndon, Virginia, USA" ], "timestamp" : "2026-06-16T02:48:56.736", "fingerprint" : "4d9802b1157866f49ce29b4e50e7f2d03cd4b8a1398af2259718e4ff31091156", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10437758/apply", "externalId" : "62b3abf4-b637-4e49-962e-4e67d636ccfb", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Herndon", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9695316,-77.3859479" } ], "locationText" : "Herndon, Virginia, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, Cloud computing", "professionalSkills" : [ "Program management", "Risk management", "Security assurance", "Compliance management", "Stakeholder management", "Cross-functional leadership" ], "hardSkillsList" : [ "Audit processes", "Regulatory requirements" ], "hardSkills" : [ { "name" : "Audit processes", "level" : "intermediate" }, { "name" : "Regulatory requirements", "level" : "intermediate" } ], "majorSkills" : "Program management, Compliance, Security assurance", "majorSkillsList" : [ "Program management", "Compliance", "Security assurance" ], "coreResponsibilities" : "Develop and execute program plans, Manage program risks and issues, Coordinate with internal and external stakeholders, Ensure program deliverables meet quality standards, Communicate program status to leadership, Drive continuous improvement of program processes, Manage program budgets and resources, Ensure compliance with relevant regulations and standards", "teamCollaboration" : "Cross-functional teams; Internal stakeholders; External stakeholders", "projectManagementSkills" : [ "Program management", "Risk management", "Budget management", "Resource management" ], "domainKnowledge" : "AWS compliance; Security assurance; Risk management frameworks; Audit processes; Regulatory requirements", "domainList" : [ "aws-compliance", "security-assurance", "risk-management-frameworks", "audit-processes", "regulatory-requirements" ], "domainSpecificKnowledge" : [ "AWS compliance", "Security assurance", "Risk management frameworks", "Audit processes", "Regulatory requirements" ], "communicationSkills" : "Program status reporting", "problemSolvingSkills" : "Risk mitigation; Issue resolution", "outcomesObjectives" : "Deliver successful compliance and security assurance programs; Ensure adherence to security standards; Improve program efficiency and effectiveness", "qualificationsBasic" : "Bachelor's degree or equivalent experience, 5+ years of program management experience, Experience managing complex, cross-functional programs, Experience with compliance and security programs, Experience with cloud computing environments", "qualificationsPreferred" : "Master's degree or PhD, Experience in AWS compliance and security, Experience with security assurance frameworks, Experience with risk management frameworks, Experience with audit processes, Experience with regulatory requirements", "remoteFriendly" : false, "workSiteFlexibility" : "onsite", "rawDescription" : "Are you passionate about delivering security assurance at scale and see compliance as a business enabler? Amazon Web Services (AWS) is looking for a Senior Compliance Program Manager to join our Third-Party Assurance team within AWS Security Assurance. In this role, you will own and drive the delivery of AWS's SOC compliance programs, ensuring that AWS continues to meet the highest standards of security and compliance that our customers depend on. You will partner with independent external auditors, AWS service teams, and internal compliance stakeholders to manage the full audit lifecycle from planning and evidence collection through execution, reporting, and continuous improvement. You will serve as the bridge between technical teams and auditors, translating complex control implementations into clear, structured compliance narratives. This role requires a technically experienced compliance professional who can dive deep into cloud infrastructure controls, communicate effectively with both auditors and engineers, and drive process improvements that scale across a rapidly growing portfolio of services and compliance programs. Key job responsibilities Own end-to-end delivery of SOC audit engagements, managing scope, timelines, evidence collection, auditor coordination, and report issuance to achieve clean opinions on schedule. Serve as the primary liaison between independent external auditors and AWS control owners, articulating control design and operating effectiveness, managing auditor inquiries, and coordinating walkthroughs and interviews. Drive the SOC control lifecycle, evaluating new controls for onboarding, managing material control changes, coordinating remediation of findings, and maintaining evidence baseline packages for cross-program reuse. Develop deep technical understanding of AWS's control environment, including infrastructure security, change management, access controls, encryption, and physical security, and translate that understanding into compliance narratives auditors can rely on. Reduce builder burden by streamlining evidence collection, consolidating overlapping auditor requests across programs, and investing in automation and self-service evidence mechanisms. Monitor evolving audit standards and industry frameworks (AICPA Trust Services Criteria, SSAE 18) and proactively assess impact on AWS's control environment and reporting obligations. Drive continuous improvement by identifying opportunities to strengthen controls, improve audit efficiency, and enhance the quality and reusability of evidence across SOC, ISO, PCI, and other compliance programs. Communicate program status, risks, and outcomes to senior leadership with clarity and precision, including assessment progress, remediation tracking, and strategic roadmap updates. Partner cross-functionally with internal security, compliance, engineering, and legal teams to ensure alignment across the compliance portfolio. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Bachelor's degree or equivalent in Information Security, Computer Science, Risk Management, Engineering, Math, Statistics, or a related discipline, or equivalent technology experience - Bachelor's Degree in Accounting, Auditing, Information Systems Management, Computer Science, Informatics, or related field - 7+ years of experience in security or compliance consulting/advisory work in support of a highly technical environment - 7+ years of experience performing and/or participating in technical assessments in direct support of a major compliance effort (e.g., SOC 1, SOC 2, PCI, HITRUST, or ISO) Preferred Qualifications: - 7+ years of HR, privacy, legal, compliance or risk management experience - Experience managing SOC 1 and/or SOC 2 audit programs end-to-end (planning, fieldwork, evidence collection, auditor engagement, report issuance) - Experience working directly with external auditors or as an auditor, with a detailed understanding of evaluating the design and operating effectiveness of IT controls - Experience in cloud technologies, deployment models (IaaS/PaaS/SaaS), familiarity with AWS core services (EC2, S3, KMS, etc.), and auditing cloud environments - Experience engaging builder/engineering teams in defining technical requirements and seeing them through to development and release - Experience building certification roadmaps based on customer requirements and ensuring committed assessments are delivered on schedule - Experience in IT program/project management, IT auditing, and/or control framework development and implementation - Professional certifications: CISA, CISSP, CPA, or equivalent Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, VA, Herndon - 119,300.00 - 208,900.00 USD annually USA, WA, Seattle - 119,300.00 - 208,900.00 USD annually", "summaryDescription" : "Assurance Program Manager, AWS Compliance & Security Assurance at Amazon.com Services LLC. Skills: Program management, Compliance, Security assurance. Develop and execute program plans. Manage program risks and issues", "postedDate" : "2026-06-14T19:51:22.785", "createdAt" : "2026-06-14T19:51:22.785", "lastUpdated" : "2026-06-16T02:48:56.736", "ingestTimestamp" : "2026-06-14T19:51:22.785", "mongoId" : "6a2176dc74d8ee00a0c1b299", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10437758/apply", "salaryAnnualMin" : 119300, "salaryAnnualMax" : 208900, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Audit processes", "Regulatory requirements", "Program management", "Compliance", "Security assurance", "Risk management", "Compliance management", "Stakeholder management", "Cross-functional leadership", "Budget management", "Resource management", "AWS compliance", "Risk management frameworks" ], "skillCount" : 13, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 673.03375, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca0d274d8ee00a09a36ec", "title" : "Senior GRC Analyst, Privacy", "company" : "Benevity", "industry" : "Risk & Compliance", "salary" : { "min" : 98600.0, "max" : 135000.0, "currency" : "CAD", "frequency" : "Yearly" }, "location" : "Toronto, Ontario", "locations" : [ "Toronto, Ontario" ], "certifications" : [ "CIPP/E", "CIPP/US", "CIPM", "CIPT", "CISM", "CRISC" ], "timestamp" : "2026-06-16T03:14:53.196", "fingerprint" : "b945d33356a184422818955da8bb2cc28cb33f4b6dfa0f9df65c80e6b99f20b7", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/benevity/616b5ae2-5d43-42aa-bdd3-2eb4576e0a50/application", "externalId" : "616b5ae2-5d43-42aa-bdd3-2eb4576e0a50", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Toronto", "state" : "Ontario", "country" : "Canada", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "43.6534817,-79.3839347" } ], "locationText" : "Toronto, Ontario, Canada", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "professionalSkills" : [ "Risk management", "Legal analysis", "Compliance oversight" ], "hardSkillsList" : [ "Data protection", "Privacy compliance", "Regulatory requirements" ], "hardSkills" : [ { "name" : "Data protection", "level" : "intermediate" }, { "name" : "Privacy compliance", "level" : "intermediate" }, { "name" : "Regulatory requirements", "level" : "intermediate" } ], "majorSkills" : "Privacy program, Data protection, Regulatory compliance", "majorSkillsList" : [ "Privacy program", "Data protection", "Regulatory compliance" ], "coreResponsibilities" : "Own and maintain Records of Processing Activities, Develop and maintain privacy policies, Develop and maintain privacy notices, Develop and maintain privacy standards, Develop and maintain control frameworks, Support privacy policy approval, Support exception management, Support attestation processes, Build and manage DSAR intake workflows, Build and manage DSAR triage workflows, Build and manage DSAR response workflows, Maintain and refresh subprocessor listing, Design Data Protection Impact Assessments, Operationalize Data Protection Impact Assessments, Improve Data Protection Impact Assessments, Embed DPIA requirements into workflows, Support DPO operational function, Partner on Data Processing Agreement reviews, Translate privacy requirements into controls, Review Data Processing Agreements, Support negotiation of Data Processing Agreements, Support data transfer mechanisms, Monitor global privacy regulatory landscape, Assess impact of new requirements, Support multi-entity privacy obligations, Maintain privacy workflows in GRC platforms, Enhance privacy workflows in GRC platforms, Deliver executive-ready privacy reports, Deliver risk insights, Deliver dashboards, Leverage AI tools, Leverage automation, Design privacy awareness programs, Design privacy training programs, Serve as privacy advisor, Partner with teams to embed privacy", "teamCollaboration" : "Cross-functional teams; Legal; Security; Engineering; Product; Data Governance", "domainKnowledge" : "GDPR; UK-GDPR; CPRA; PIPEDA; CASL; Global frameworks; Controller regimes; Processor regimes; Article 30; Article 28; Data Processing Agreements; Data transfer mechanisms; AU Privacy Act; India DPDP; Swiss FADP", "domainList" : [ "gdpr", "uk-gdpr", "cpra", "pipeda", "casl", "global-frameworks", "controller-regimes", "processor-regimes", "article-30", "article-28", "data-processing-agreements", "data-transfer-mechanisms", "au-privacy-act", "india-dpdp", "swiss-fadp" ], "domainSpecificKnowledge" : [ "GDPR", "UK-GDPR", "CPRA", "PIPEDA", "CASL", "Global frameworks", "Controller regimes", "Processor regimes", "Article 30", "Article 28", "Data Processing Agreements", "Data transfer mechanisms", "AU Privacy Act", "India DPDP", "Swiss FADP" ], "toolProficiency" : [ "OneTrust Privacy module" ], "communicationSkills" : "Executive presentations; Privacy reports; Risk insights; Dashboards", "documentationSkills" : "Records of Processing Activities; Privacy policies; Data Processing Agreements", "qualificationsBasic" : "5+ years experience in privacy, 5+ years experience in data protection, 5+ years experience in GRC, 5+ years experience in closely related field", "qualificationsPreferred" : "CIPP/E certification, CIPP/US certification, CIPM certification, CIPT certification, CISM certification, CRISC certification", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "MEET BENEVITY Benevity is the way the world does good, providing companies (and their employees) with technology to take social action on the issues they care about. Through giving, volunteering, grantmaking, employee resource groups and micro-actions, we help most of the Fortune 100 brands build better cultures and use their power for good. We’re also one of the first B Corporations in Canada, meaning we’re as committed to purpose as we are to profits. We have people working all over the world, including Canada, Spain, Switzerland, the United Kingdom, the United States and more! Benevity is seeking a Sr. GRC Analyst, Privacy to anchor and advance our data protection program across a complex, multi-jurisdictional regulatory landscape. In this role, you will own the design, operationalization, and continuous maturity of Benevity’s privacy compliance program, spanning GDPR, UK-GDPR, CPRA, PIPEDA, CASL, and emerging global frameworks. You will build the foundational infrastructure that keeps Benevity accountable to its regulatory obligations: Records of Processing Activities, Data Subject Access Request workflows, Data Protection Impact Assessments, and subprocessor governance, ensuring the program is not only defensible to regulators but scalable as Benevity grows. As a trusted privacy advisor embedded across cross-functional teams, you will work closely with Legal, Security, Engineering, Product, and Data Governance to embed Privacy by Design into the business. You will support the DPO operational function, partner on Data Processing Agreement reviews, and translate complex privacy requirements into practical, business-aligned controls. Your work will directly protect Benevity’s clients, employees, and the communities they serve, and ensure that trust remains a core competitive advantage. What you’ll do: Privacy Program & Governance - Own and maintain Benevity’s Records of Processing Activities (ROPA) under both controller and processor regimes, ensuring compliance with GDPR Article 30 and equivalent requirements across applicable jurisdictions. - Develop and maintain privacy policies, notices, standards, and control frameworks aligned with GDPR, UK-GDPR, CPRA/CCPA, PIPEDA, CASL, and emerging global laws (AU Privacy Act, India DPDP, Swiss FADP, and others). - Support privacy policy approval, exception management, and attestation processes, actively seeking opportunities for process improvement and automation. Data Subject Rights & DSAR - Build and manage DSAR intake, triage, and response workflows in compliance with statutory deadlines (30 days under GDPR; 45 days under CPRA), including coordination with business and legal stakeholders. - Maintain and refresh the subprocessor listing in alignment with client Data Processing Agreement commitments and GDPR Article 28 obligations. Data Protection Impact & Risk - Design, operationalize, and continuously improve the Data Protection Impact Assessment (DPIA) process; embed DPIA requirements into product, data, and business initiative workflows. - Support the DPO operational function, including regulatory correspondence readiness, breach notification preparedness, and supervisory authority interface support in coordination with Legal. - Partner with Security, Engineering, Product, Legal, and Data Governance teams to embed privacy by design and by default into key business initiatives. Regulatory Compliance & Monitoring - Review and support the negotiation of Data Processing Agreements and data transfer mechanisms (SCCs, UK IDTAs) in collaboration with Legal. - Monitor the global privacy regulatory landscape and assess the impact of new and evolving requirements on Benevity’s operations and client commitments. - Support multi-entity privacy obligations across Benevity’s partner ecosystem, including jurisdiction-specific compliance requirements and data processing documentation. Tooling & Operational Delivery - Maintain and enhance privacy workflows in GRC platforms (e.g., OneTrust Privacy module) to automate and streamline compliance operations at scale. - Deliver executive-ready privacy reports, risk insights, and dashboards to inform leadership decision-making. - Leverage AI tools and automation as a force multiplier, accelerating DSAR triage, regulatory horizon scanning, policy drafting, and evidence workflows to scale program output without scaling headcount. Advisory & Awareness - Design and deliver privacy awareness and training programs to build a culture of data protection across Benevity. - Serve as a cross-functional privacy advisor, partnering with teams across the organization to embed privacy requirements into products, services, and operational decisions. What you’ll bring: - 5+ years of experience in privacy, data protection, GRC, or a closely related field, ideally within a SaaS or high-growth technology environment. - Deep, practical knowledge of global privacy frameworks, including GDPR, UK-GDPR, CPRA/CCPA, PIPEDA, and CASL, with working familiarity of emerging regimes (India DPDP, Swiss FADP, AU Privacy Act reforms). - Hands-on experience building and maintaining ROPAs under both controller and processor regimes, managing DSAR workflows, conducting DPIAs, and maintaining subprocessor inventories. - Experience supporting or operating within a DPO function, including regulatory interface and breach notification processes. - Proven ability to review and support the negotiation of Data Processing Agreements and data transfer mechanisms in collaboration with Legal. - Hands-on experience with privacy or GRC tooling (e.g., OneTrust Privacy module, Hyperproof, or equivalent) to operationalize compliance workflows at scale. - Ability to communicate complex privacy and regulatory concepts clearly to technical, legal, and business audiences. - A demonstrated interest and track record in leveraging AI and automation as a force multiplier, streamlining privacy operations, accelerating routine workflows, and expanding program capacity without proportional headcount growth. - Certifications such as CIPP/E, CIPP/US, or CIPM are highly valued; CIPT, CISM, or CRISC are also welcomed. DISCOVER YOUR PURPOSE AT WORK We’re not employees, we’re Benevity-ites. From all locations, backgrounds and walks of life, who deserve more … Innovative work. Growth opportunities. Caring co-workers. And a chance to do work that fills us with a sense of purpose. If the idea of working on tech that helps people do good in the world lights you up ... If you want a career where you’re valued for who you are and challenged to see who you can become … It’s time to join Benevity. We’re so excited to meet you. WHERE WE WORK At Benevity, we embrace a flexible hybrid approach to where we work that empowers our people in a way that supports great work, strong relationships, and personal well-being. For those located near one of our offices, while there’s no set requirement for in-office time, we do value the moments when coming together in person helps us build connection and collaboration. Whether it’s for onboarding, project work, or a chance to align and bond as a team, we trust our people to make thoughtful decisions about when showing up in person matters most. JOIN A COMPANY WHERE DEIB ISN’T A BUZZWORD Diversity, equity, inclusion and belonging are part of Benevity’s DNA. You’ll see the impact of our massive investment in DEIB daily — from our well-supported employee resources groups to the exceptional diversity on our leadership and tech teams. We know that diverse backgrounds, experiences, skills and passions are what move our business and our people forward, so we're committed to creating a culture of belonging with equal opportunities for everyone to shine. That starts with a fair and accessible hiring process. If you want to feel seen, heard and celebrated, you belong at Benevity. Candidates with disabilities who may require accommodations throughout the hiring or assessment process are encouraged to reach out to accommodations@benevity.com.", "summaryDescription" : "Senior GRC Analyst, Privacy at Benevity. Skills: Privacy program, Data protection, Regulatory compliance. Own and maintain Records of Processing Activities. Develop and maintain privacy policies", "createdAt" : "2026-06-14T20:12:37.446", "lastUpdated" : "2026-06-16T03:14:53.196", "ingestTimestamp" : "2026-06-14T20:12:37.446", "mongoId" : "6a2ca0d274d8ee00a09a36ec", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Data protection", "Privacy compliance", "Regulatory requirements", "Privacy program", "Regulatory compliance", "Risk management", "Legal analysis", "Compliance oversight", "GDPR", "UK-GDPR", "CPRA", "PIPEDA", "CASL", "Global frameworks", "Controller regimes", "Processor regimes", "Article 30", "Article 28", "Data Processing Agreements", "Data transfer mechanisms", "AU Privacy Act", "India DPDP", "Swiss FADP", "CIPP/E", "CIPP/US", "CIPM", "CIPT", "CISM", "CRISC", "OneTrust Privacy module" ], "skillCount" : 30, "jobCategory" : "operations", "jobSubcategory" : "legal", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 670.561, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a210ec474d8ee00a0af9822", "title" : "Data Center Security Manager, Compliance, Strategy, and Risk Management", "salary" : { "min" : 135000.0, "max" : 195000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager in the Technology industry in New Albany, United States, adjusted for seniority and experience." }, "location" : "[New Albany, OH, USA, [New Albany, OH, USA], New Albany, null, OH, US]", "locations" : [ "[New Albany, OH, USA, [New Albany, OH, USA], New Albany, null, OH, US]" ], "timestamp" : "2026-06-16T11:48:42.021", "fingerprint" : "1de24230d3da225d2837f599fb84570360446a638bebc41db487297c527e668e", "source" : "google", "language" : "en", "externalId" : "107940585561563846", "industryFunction" : { }, "structuredLocations" : [ { "city" : "New Albany", "state" : "Ohio", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "40.0811745,-82.8087864" } ], "locationText" : "New Albany, Ohio, United States", "experienceLevel" : "Manager", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "summaryDescription" : "Data Center Security Manager, Compliance, Strategy, and Risk Management", "postedDate" : "2026-06-16T01:49:50.411", "createdAt" : "2026-06-16T01:49:50.411", "lastUpdated" : "2026-06-16T11:48:42.021", "ingestTimestamp" : "2026-06-16T01:49:50.411", "mongoId" : "6a210ec474d8ee00a0af9822", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 135000, "salaryAnnualMax" : 195000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Manager", "dataQualityScore" : 0.5555556, "_score" : 670.26636, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.92 }, { "id" : "6a210ec474d8ee00a0af981d", "title" : "Data Center Security Manager, Compliance, Safety, and Risk Management", "salary" : { "min" : 5.25E8, "max" : 7.85E8, "currency" : "IDR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager in the Technology industry in Jakarta, Indonesia, adjusted for seniority and compliance, safety, and risk management responsibilities." }, "location" : "[Jakarta, Indonesia, [Jakarta, Indonesia], Jakarta, null, Jakarta, ID]", "locations" : [ "[Jakarta, Indonesia, [Jakarta, Indonesia], Jakarta, null, Jakarta, ID]" ], "timestamp" : "2026-06-16T12:19:16.364", "fingerprint" : "837e27aa14cec846b5f3fd4414506e096b3689e369aa836c61b1f1587874708f", "source" : "google", "language" : "en", "externalId" : "103889877249991366", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Jakarta", "country" : "Indonesia", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "-6.1754049,106.8271680" } ], "locationText" : "Jakarta, Indonesia", "experienceLevel" : "Manager", "summaryDescription" : "Data Center Security Manager, Compliance, Safety, and Risk Management", "postedDate" : "2026-06-16T01:49:22.931", "createdAt" : "2026-06-16T01:49:22.931", "lastUpdated" : "2026-06-16T12:19:16.364", "ingestTimestamp" : "2026-06-16T01:49:22.931", "mongoId" : "6a210ec474d8ee00a0af981d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Manager", "dataQualityScore" : 0.5555556, "_score" : 670.24994, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.9 }, { "id" : "6a2c79e274d8ee00a0943963", "title" : "Onboarding Account Manager", "company" : "Outside Interactive, Inc.", "industry" : "SaaS", "salary" : { "min" : 75000.0, "max" : 85000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Boulder, Colorado, United States", "locations" : [ "Boulder", "Colorado", "United States", "Remote" ], "timestamp" : "2026-06-16T00:56:05.344", "fingerprint" : "ce732089540862d7f7fd9160ed40c375708da077211f1451b73d2e3807bde8d1", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.outsideinc.com/openings?gh_jid=5214638008", "externalId" : "5214638008", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Boulder", "state" : "Colorado", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "40.0149856,-105.2705450" } ], "locationText" : "Boulder, Colorado, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "CRM software", "professionalSkills" : [ "Customer relationship management", "Account management", "Client retention", "Value realization", "Customer satisfaction" ], "hardSkillsList" : [ "Customer onboarding", "Customer retention strategies", "Client relationship building" ], "hardSkills" : [ { "name" : "Customer onboarding", "level" : "intermediate" }, { "name" : "Customer retention strategies", "level" : "intermediate" }, { "name" : "Client relationship building", "level" : "intermediate" } ], "majorSkills" : "Customer Success, Account Management, Client Retention", "majorSkillsList" : [ "Customer Success", "Account Management", "Client Retention" ], "coreResponsibilities" : "Manage a portfolio of accounts, Drive customer adoption and value realization, Ensure high levels of customer satisfaction, Proactively identify and address customer needs, Develop and execute customer success plans, Conduct regular business reviews with customers, Identify opportunities for account growth and expansion, Collaborate with sales and support teams, Gather customer feedback for product improvement, Onboard new customers effectively", "teamCollaboration" : "Sales teams; Support teams; Product teams", "domainKnowledge" : "SaaS customer lifecycle", "domainList" : [ "saas-customer-lifecycle" ], "domainSpecificKnowledge" : [ "SaaS customer lifecycle" ], "toolProficiency" : [ "CRM software" ], "communicationSkills" : "Customer communication; Business reviews", "problemSolvingSkills" : "Customer issue resolution", "outcomesObjectives" : "Maximize customer retention; Drive customer satisfaction; Achieve customer value realization; Identify upsell opportunities", "qualificationsBasic" : "5+ years of experience in customer success, Experience with CRM software, Experience with customer onboarding", "qualificationsPreferred" : "Experience in the SaaS industry, Bachelor's degree", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "ARE YOU READY TO TAKE YOUR CAREER TO NEW HEIGHTS? ARE YOU SEEKING A NEW CHALLENGE IN A DYNAMIC SECTOR? This is a very exciting and highly innovative time here at Outside. OUR TRUE NORTH:Outside Interactive, Inc., the premier hub for active lifestyle enthusiasts, offers best-in-class content and experiences to more than 70 million of the world’s most passionate outdoor, wellness, and endurance enthusiasts every month. We inspire a broad and diverse audience to do the activities they love with greater enjoyment, inspiration, and knowledge and are dedicated to making real change in the outdoor and fitness industries. Onboarding Account Managers are responsible for overall satisfaction of our partners, which includes initial project management during the launch phase, ongoing training, regular updates on our latest features, troubleshooting of platform features as well as strategic advice and guidance on how to enhance revenue and reduce costs. Inntopia’s Commerce Platform partners will be a key area of focus. Inntopia’s Onboarding Account Managers are also responsible for identifying opportunities to increase the “sticky” factor of our software with our partners during the implementation process and adapt partner internal processes to new Inntopia processes. Our goal is to continuously exceed partner expectations while increasing value and capturing that value through increased revenue. This role requires taking complete ownership of assigned accounts from post-contract signing on through go-live and beyond. Primary Duties and Responsibilities: Coordinate schedules and tasks during partner onboarding phase. Collaborate with internal stakeholders during design phase of onboarding. (engineering, sales, etc.) Perform or delegate system setup tasks as necessary during onboarding phase Primary point of contact for Inntopia Commerce and Marketing Cloud partners Assist with troubleshooting and provide strategic guidance to our partners. Collaborate with other departments accordingly to ensure continued successful relationship management. Collaborate with other departments to curate relevant content, insights, and industry knowledge. Provide consultative and trusted advisor services, maintain relationships with key partner personnel including both end-users and leadership/C-suite staff. Work with partners and end-users to maximize their use of Inntopia Commerce and Marketing Cloud. Successfully demonstrate a proactive approach to fulfill and maintain partner’s needs and satisfaction. Look for ways to create efficiencies, both internally, and within the partners’ workflow and setups, to improve overall partner experience. Regularly review partner campaign conversion and other Key Performance Indicators to identify opportunities for improved conversion and ROI. Develop efficiencies of scale for reporting. Regularly review partner ecomm sales channels for opportunities for improved conversion Troubleshoot software system, integration issues, and customer/transactional data related inquiries for partners. Assist with internal product support, troubleshoot issues, test resolved issues, and new product features. Report results back to development team. Schedule and facilitate regular meetings with designated partners to discuss new and existing features that may be beneficial. Conduct and facilitate trainings as needed/requested, including assistance with the production and participation of in-person panel discussions, and/or online recorded webinars. Collaborate with eLearning and Documentation team to document partner information and Inntopia business processes within internal documentation tools, as a point of reference for internal knowledge and training. Provide feedback to Inntopia management based on observations and insights from partners. Be responsible for consultative upsell of features/products within your existing account portfolio as opportunities arise Required Job Related Skills and Experience: 5 Years Resort/Hospitality related experience, preferably with software systems Strong Project Management and organization a must Account management/agency experience Travel Commerce and call center experience a plus. Strong critical thinking and decision-making aptitude Must possess strong cross-team, group and org collaboration skills Strong analytical problem solving, written and verbal skills Proven ability to navigate complex discussions with stakeholder groups, gather requirements, distill information to and from partners to/from Inntopia leadership and product development Positive, upbeat and customer-service oriented College Graduate, B. S. preferred Proven technical aptitude and experience with complex software Knowledge and experience with HTML concepts and email marketing tactics Knowledge and experience with CRM and customer databases Knowledge and experience with SMS and mobile push notifications a plus Ability to work independently and proactively with little management oversight Understanding of Microsoft SQL based databases and query constructs Understanding of the Agile Development Process Understanding of Salesforce for account management and record-keeping a plus Understanding of Active Campaign and Acoustic ESP and other Marketing Automation / Email Service Providers a plus Familiarity with Travel software like Property Management Systems, Point of Sale Systems, Ticketing, Reservations, Food & Beverage, etc. What We Offer: Entirely remote jobs that could be performed in Colorado: Employees can expect to be paid a salary of between $75,000 to $85,000. Additional compensation may include a bonus or commission. Additional benefits include health care, vision, dental, retirement, Flexible Time Away, sick leave, and more. This salary range is merely an estimate and may vary based on an applicant’s location, market data/ranges, an applicant’s skills and prior relevant experience, certain degrees and certifications, and other relevant factors We are committed to fostering a diverse and inclusive workplace. Outside Inc is an Equal Opportunity Employer. We do not discriminate based on race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, gender identity, or any other legally protected characteristics. Pursuant to applicable laws, we also make accommodations for qualified individuals with disabilities. We believe a diverse team is a strong team, and we encourage candidates from all backgrounds to apply.", "summaryDescription" : "Onboarding Account Manager at Outside Interactive, Inc.. Skills: Customer Success, Account Management, Client Retention. Manage a portfolio of accounts. Drive customer adoption and value realization", "postedDate" : "2026-06-14T19:18:50.247", "createdAt" : "2026-06-14T19:18:50.247", "lastUpdated" : "2026-06-16T00:56:05.344", "ingestTimestamp" : "2026-06-14T19:18:50.247", "mongoId" : "6a2c79e274d8ee00a0943963", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 75000, "salaryAnnualMax" : 85000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Customer onboarding", "Customer retention strategies", "Client relationship building", "Customer Success", "Account Management", "Client Retention", "Customer relationship management", "Account management", "Client retention", "Value realization", "Customer satisfaction", "SaaS customer lifecycle", "CRM software" ], "skillCount" : 13, "jobCategory" : "sales", "jobSubcategory" : "customer_success", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 668.3095, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Travel", "llmIndustryConfidence" : 0.97 }, { "id" : "6a30518ff292fd229cf0227f", "title" : "GRC Specialist, Automation & Technology", "company" : "Collibra", "industry" : "Technology", "salary" : { "min" : 115500.0, "max" : 164500.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Mid-level GRC Specialist, Automation & Technology in New York, United States, within the SaaS industry, adjusted for company size and specific location." }, "location" : "New York City ", "locations" : [ "New York City" ], "timestamp" : "2026-06-16T09:03:00.311", "fingerprint" : "5b7e26edf7a0de2bd150836719adfdef060fe5befdec31ab3c90d9707561efe3", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.collibra.com/us/en/company/careers/job-listing/?gh_jid=8007845", "externalId" : "8007845", "industryFunction" : { }, "structuredLocations" : [ { "city" : "New York", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "40.7127281,-74.0060152" } ], "locationText" : "New York, New York, United States", "employmentType" : "FULL_TIME", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Joining Collibra’s GRC team Collibra’s GRC Team is looking for a GRC Specialist, Automation & Technology who brings a strong technical mindset and a passion for automation, combined with solid core experience supporting audits and compliance programs. In your day to day, you will act as a strategic, technical contributor who can bridge the gap between compliance requirements and modern automation tools (like Claude and Workato) to make our team more impactful. You will partner directly with GRC and Internal Audit teams to manage workloads and automate manual processes: helping build and maintain AI-driven agent workflows to streamline repeatable processes and controls, facilitating continuous monitoring for our control environment, and supporting technical implementations of controls, such as for new cloud environments or new AI initiatives. Values-in-action: Our customers are our true north. Our GRC Specialist, Automation & Technology will enhance customer trust and accelerate sales pipelines by engineering automated, always-audit-ready environments for critical frameworks. This is a hybrid role based in our New York City office. Our hybrid model means you’ll work from the office at least two days each week. This setup helps us stay connected, work more closely together, and keep making progress as a team. The GRC Specialist, Automation & Technology at Collibra is responsible for Collaborating with the GRC and Internal Audit teams to architect and deploy AI agentic capabilities, such as multi-step Claude workflows, Workato recipes, and autonomous control monitoring processes in order to eliminate repeatable manual GRC overhead and streamline evidence validation. Engineering continuous control monitoring pipelines and real-time control checks for our key security frameworks in order to shift Collibra from point-in-time sampling to an always-audit-ready risk posture. Supporting the technical GRC infrastructure integration of new cloud environments into our control framework starting in Q3. Facilitating automated governance guardrails and continuous monitoring systems for our expanding portfolio (i. e. AIUC-1) in order to maintain ongoing compliance. Partnering closely with Internal Audit and GRC colleagues to evaluate manual processes and controls and leverage orchestration and automation platforms in order to maximize the strategic efficiency and impact of our risk mitigation practices. Helping design automated key risk indicator (KRI) and key performance indicator (KPI) reporting to senior management. Administering the day-to-day functions of Collibra’s GRC platforms and tools (i. e. Optro) to maintain a reliable source of truth. You have 3+ years of experience in a technical compliance role, IT internal audit, or GRC environment, ideally within an enterprise SaaS platform. Experience building workflow automations using industry standard platforms (e.g., Workato, Claude, or native GRC platform automation engines). Hands-on experience reviewing or auditing cloud environments (Cloud infrastructure, IAM, and native logging systems) and AI programs. One or more current qualifications is nice-to-have: CISA, CRISC, CISSP, CIA, CPA, or relevant cloud/automation certifications (e.g., Azure, AWS, GCP, Workato). A bachelor’s degree or equivalent related working experience is required. This position is not eligible for visa sponsorship. You are Passionate about automation and efficiency, with a strong interest in leveraging AI and orchestration tools to optimize risk practices. Knowledgeable about information security fundamentals, cloud compliance principles, and the core mechanics of continuous control monitoring. Familiar with performing control testing or supporting technology audits, with some exposure to cloud environments (AWS/GCP/Azure) and enterprise ecosystems. Familiar with common control frameworks, specifically ISO 27001, ISO 42001, NIST AI, SOC 2, gained through direct support of an audit or compliance program. Familiarity with AIUC-1 is nice to have. Ability to translate manual compliance workflows into structured logic and discuss technical automation requirements clearly with stakeholders. Strong problem-solving and analytical skills to proactively identify repeatable day-to-day bottlenecks and design automated, sustainable solutions. Measures of success Within your first month, you will begin building relationships within the GRC and Internal Audit teams, gain a thorough understanding of Collibra’s GRC tooling and Claude automation workflows, and align on the roadmap for cloud environment onboarding. Within your third month, you will be helping design and maintaining your first AI-driven workflows to automate repeatable day-to-day tasks like user access recertifications and training escalations, while supporting the technical onboarding of new cloud environments into our control framework. Within your sixth month, you will help the team achieve control compliance for in-scope systems and infrastructure, establish automated continuous control monitoring pipelines for Collibra’s ISO framework, and begin designing workflows to support Collibra’s expanding AIUC-1 program. Compensation for this role The standard base salary range for this position is $88,000.00 - $110,000.00 per year. This position is not eligible for additional commission-based compensation. Salary offers are based on a combination of factors, including, but not limited to, experience, skills, and location. In addition to base salary, we offer equity ownership at every level, bonus potential, a Flex Fund monthly stipend, pension/401k plans, and more. Benefits at Collibra Collibra recognizes and values that everyone has different needs, interests, and life goals. We built our benefits program with flexibility in mind to support you and your loved ones through a diverse range of circumstances and life events. These flexible offerings sit on a foundation of competitive compensation, health coverage, and time off. Learn more about Collibra’s benefits. We create inclusion and belonging through how we onboard, meet, connect, engage, and communicate. Learn more about diversity, equity, and inclusion at Collibra. At Collibra, we’re proud to be an equal opportunity employer. We realize the key to creating a company with a world-class culture and employee experience comes from who we hire and creating a workplace that celebrates everyone. With this, we proudly consider qualified applicants without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sexual orientation, pregnancy, sex, gender identity, gender expression, genetic information, physical or mental disability, HIV status, registered domestic partner status, caregiver status, marital status, veteran or military status, citizenship status or any other legally protected category. If you have a need that requires accommodation, let us know by completing our Accommodations for Applicants form.", "summaryDescription" : "GRC Specialist, Automation & Technology at Collibra", "postedDate" : "2026-06-15T23:15:49.850", "createdAt" : "2026-06-15T23:15:49.850", "lastUpdated" : "2026-06-16T09:03:00.311", "ingestTimestamp" : "2026-06-15T23:15:49.850", "mongoId" : "6a30518ff292fd229cf0227f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 115500, "salaryAnnualMax" : 164500, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 667.61475, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "SaaS", "llmIndustryConfidence" : 0.95 }, { "id" : "693c2b8970f0b99d5843fc3d", "title" : "Security Compliance Specialist", "company" : "Amazon Kuiper Manufacturing Enterprises LLC", "industry" : "Project/Program/Product Management--Non-Tech, Security Industry Specialist, amazon security", "salary" : { "min" : 91800.0, "max" : 196300.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Redmond, Washington, USA", "locations" : [ "Redmond, Washington, USA" ], "certifications" : [ "CISSP", "CISA", "CISM", "ISO 27001:2022 Lead Implementer", "ISO 27001:2022 Lead Auditor", "ISO 22301:2019 Lead Implementer", "ISO 22301:2019 Lead Auditor" ], "timestamp" : "2026-06-15T03:55:52.083", "fingerprint" : "fc35e4d033d438c1800b22ddad2bbc1bd5f0730854eee79d908f7ce3bc2a2020", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3139204/apply", "externalId" : "de8f683d-f40e-45af-a6d4-6713c9d63612", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" }, { "city" : "Redmond", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6694141,-122.1238767" } ], "locationText" : "Arlington, Virginia, United States; Redmond, Washington, United States", "employmentType" : "FULL_TIME", "professionalSkills" : [ "Governance Risk Compliance", "Regulatory compliance", "External assurance", "Risk management", "Security programs", "Compliance oversight", "Audit readiness", "Remediation strategies", "Control implementation", "Risk concepts", "Stakeholder communication", "Program metrics", "Program improvement", "Assurance advisory" ], "hardSkillsList" : [ "Security controls", "Privacy controls", "Compliance gaps", "Remediation activities" ], "hardSkills" : [ { "name" : "Security controls", "level" : "intermediate" }, { "name" : "Privacy controls", "level" : "intermediate" }, { "name" : "Compliance gaps", "level" : "intermediate" }, { "name" : "Remediation activities", "level" : "intermediate" } ], "majorSkills" : "Governance Risk Compliance, Regulatory compliance, Security assurance", "majorSkillsList" : [ "Governance Risk Compliance", "Regulatory compliance", "Security assurance" ], "coreResponsibilities" : "Design scalable processes, Build compliance certifications, Maintain compliance certifications, Identify security controls, Assess compliance gaps, Develop remediation strategies, Drive remediation activities, Drive certifications, Drive assurance programs, Articulate control implementation, Articulate control impact, Establish security considerations, Establish risk considerations, Communicate controls implementation, Communicate audit results, Communicate program metrics, Communicate key risks, Communicate program improvement, Seek diverse opinions, Coordinate improvement, Identify compliance requirements, Identify regulatory requirements, Define compliance, Serve as advisor, Manage GRC requirements, Translate requirements, Solve day-to-day problems, Implement action plans", "teamCollaboration" : "Business teams; Security teams; Engineering teams; Compliance teams; Bizdev teams; Legal teams; External auditors; Regulators", "domainKnowledge" : "Satellite broadband; LEO satellites; Broadband access; ISO 27001; ISO 22301; NIST 800-53; ISO 27701; SOC 2; GDPR; CCPA; US Government Compliance; FedRAMP; NIST 800-171; NIST Risk Management; FISMA; ITAR; EAR", "domainList" : [ "satellite-broadband", "leo-satellites", "broadband-access", "iso-27001", "iso-22301", "nist-800-53", "iso-27701", "soc-2", "gdpr", "ccpa", "us-government-compliance", "fedramp", "nist-800-171", "nist-risk-management", "fisma", "itar", "ear" ], "domainSpecificKnowledge" : [ "Satellite broadband", "LEO satellites", "Broadband access", "ISO 27001", "ISO 22301", "NIST 800-53", "ISO 27701", "SOC 2", "GDPR", "CCPA", "US Government Compliance", "FedRAMP", "NIST 800-171", "NIST Risk Management", "FISMA", "ITAR", "EAR" ], "communicationSkills" : "Stakeholder communication; Leadership communication", "problemSolvingSkills" : "Problem solving; Action plans", "specialRequirements" : "U. S. citizen or national, U. S. permanent resident, Lawfully admitted refugee, Granted asylum", "qualificationsBasic" : "Bachelor's degree or equivalent, 6+ years experience in GRC, Experience performing audits", "qualificationsPreferred" : "Experience leveraging internal tools, Experience with ITAR and EAR data, Hold industry certification, Comprehensive understanding of compliance requirements, Highly organized, Build trusting relationships", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "We are open to hiring candidates to work out of one of the following locations: Arlington, VA, USA | Redmond, WA, USA Amazon Leo (previously known as Project Kuiper) is an initiative to increase global broadband access through a constellation of over 3,000 Low Earth Orbit (LEO) satellites. Its mission is to bring fast, affordable broadband to unserved and underserved communities worldwide. At Leo, we are obsessed with customer trust and are seeking an individual contributor who is creative, and passionate about delivering Governance, Risk and Compliance solutions to meet Leo's regulatory and external assurance needs. In this role, you will work collaboratively with various business and security teams across Amazon to identify compliance needs, assess the maturity of processes and controls, design, build, and execute high-impact security or compliance programs and liaise with external auditors and regulators. Export Control Requirement: Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum. Key job responsibilities - Design and drive scalable processes within a GRC (Governance, Risk, and Compliance) framework to ensure compliance with Leo's regulatory and contractual security and privacy requirements; - Building and maintaining compliance certifications such as ISO 27001, ISO 22301, NIST 800-53, ISO27701, SOC 2, GDPR, CCPA etc., identifying applicable security controls, assessing compliance gaps and readiness, developing remediation strategies, and driving remediation activities to completion; - Driving certifications and assurance programs by liaising with external auditors and other Amazon security teams, articulating control implementation and impact, and establishing considerations for applying security, and risk concepts to a highly technical and complex environment; - Communicating to key stakeholders and leadership on controls implementation, audit results, compliance program metrics, key risks and areas of program improvement, as well as, seek diverse opinions and coordinate improvement efforts; - Working closely with engineering, compliance, security, bizdev and Legal teams to identify future compliance and regulatory requirements and define compliance solutions; - Serving as an advisor on assurance issues; - Understand and manage cross-functional GRC requirements to translate them into GRC tool; and - Be comfortable with hands-on day-to-day problem solving and implementing quick and effective action plans to meet short- and long-term priorities. A day in the life Have you wanted an opportunity to secure an advanced satellite based broadband telecom service? The Leo Security team owns the security of product and operations of Leo end-to-end. We provide the necessary infrastructure and mechanisms to ensure the security of our satellite constellation and provide assurance to our customers and regulators on our security, privacy and resiliency programs. Our team drives the implementation of compliance programs, owns the collaboration with external auditors and regulators. You will work in a start-up like environment, backed by Amazon’s infrastructure to bootstrap security mechanisms, and help instill the security culture in the organization. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Bachelor's degree or equivalent - 6+ years of professional experience in governance, risk and compliance designing and implementing controls or experience performing audits over ISO 27001, NIST 800-53, SOC 1/ SOC 2 and other similar globally recognized compliance programs Preferred Qualifications: - Experience leveraging and improving internal tools - Experience working with ITAR and EAR controlled data - Hold an industry certification such as CISSP, CISA, CISM, ISO 27001:2022 Lead Implementer/Lead Auditor, or ISO 22301:2019 Lead Implementer/Lead Auditor - Demonstrate comprehensive understanding of compliance requirements for ISO 27001, ISO 22301, SOC 2, and US Government Compliance Frameworks/Programs (FedRAMP, NIST 800-53, NIST 800-171, NIST Risk Management Framework, FISMA). - Highly organized and able to build trusting relationships with stakeholders at various levels across the organization Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $91,800/year in our lowest geographic market up to $196,300/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Security Compliance Specialist at Amazon Kuiper Manufacturing Enterprises LLC. Skills: Governance Risk Compliance, Regulatory compliance, Security assurance. Design scalable processes. Build compliance certifications", "postedDate" : "2026-06-13T12:18:11.966", "createdAt" : "2026-06-13T12:18:11.966", "lastUpdated" : "2026-06-15T03:55:52.083", "ingestTimestamp" : "2026-06-13T12:18:11.966", "mongoId" : "693c2b8970f0b99d5843fc3d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3139204/apply", "salaryAnnualMin" : 91800, "salaryAnnualMax" : 196300, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Security controls", "Privacy controls", "Compliance gaps", "Remediation activities", "Governance Risk Compliance", "Regulatory compliance", "Security assurance", "External assurance", "Risk management", "Security programs", "Compliance oversight", "Audit readiness", "Remediation strategies", "Control implementation", "Risk concepts", "Stakeholder communication", "Program metrics", "Program improvement", "Assurance advisory", "Satellite broadband", "LEO satellites", "Broadband access", "ISO 27001", "ISO 22301", "NIST 800-53", "ISO 27701", "SOC 2", "GDPR", "CCPA", "US Government Compliance", "FedRAMP", "NIST 800-171", "NIST Risk Management", "FISMA", "ITAR", "EAR", "CISSP", "CISA", "CISM", "ISO 27001:2022 Lead Implementer", "ISO 27001:2022 Lead Auditor", "ISO 22301:2019 Lead Implementer", "ISO 22301:2019 Lead Auditor" ], "skillCount" : 43, "jobCategory" : "project-management", "dataQualityScore" : 0.8888889, "_score" : 664.4096, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" } ], "status" : 200, "message" : "OK", "pagination" : { "page" : 0, "limit" : 50, "totalCount" : 113968, "totalPages" : 2280, "hasNext" : true, "hasPrevious" : false } }

Manager Security Grc Compliance Onboarding Readiness Jobs in Delhi

Manager, Security GRC - Compliance Onboarding & Readiness

Sr. Security Engineer - GRC

Senior Governance, Risk, Compliance (GRC) Analyst

Security Compliance Specialist

Security GRC Manager

Information Security Governance, Risk and Compliance Specialist

Governance, Risk, and Compliance (GRC) Analyst

Compliance Engineer

Consultor GRC / Compliance

Onboarding Manager

Onboarding Manager

Lead, Governance, Risk, Compliance & Privacy (GRC)

Senior Information Security Analyst, GRC and Responsible AI

GRC Analyst

GRC Manager (f/m/d)

Senior Information Security Analyst, GRC and Responsible AI

GRC Program Manager, Product and Customer Trust

GRC Program Manager, Product and Customer Trust

Cybersecurity GRC Specialist

Security Industry Specialist, Subsidiary & Acquisition GRC

GRC Engineer

Manager, Information Security GRC

Sr Security Compliance Analyst

GRC Analyst

GRC Analyst, Operations & Risk

Senior Security & Compliance Engineer

Cyber Security Analyst - Governance, Risk and Culture (GRC)

Information Security GRC – Risk & Compliance Senior Analyst (Contract)

Sr. Cyber Security Analyst

Governance, Risk & Compliance (GRC) Manager

Security Compliance Analyst, Privacy

Governance, Risk & Compliance (GRC) Manager

Onboarding Success Manager

Security Compliance Specialist

Security Compliance Specialist, Devices & Services Security Compliance

Senior Director, Information Security & Compliance

Security Compliance Specialist

Senior Sales Onboarding Manager

Consultor Junior GRC Galicia

Manager, Customer Onboarding

Compliance Assessment Manager, AWS Compliance & Security Assurance

Sr. Regulatory Compliance Specialist

Customer Onboarding Manager

Assurance Program Manager, AWS Compliance & Security Assurance

Senior GRC Analyst, Privacy

Data Center Security Manager, Compliance, Strategy, and Risk Management

Data Center Security Manager, Compliance, Safety, and Risk Management

Onboarding Account Manager

GRC Specialist, Automation & Technology

Security Compliance Specialist

Common Questions