{ "count" : 58890, "data" : [ { "id" : "6a3092acf292fd229c0c3aec", "title" : "Senior Information Security Analyst, GRC and Responsible AI", "company" : "Sandisk", "industry" : "Computer Hardware", "salary" : { "min" : 135000.0, "max" : 185000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Information Security Analyst in Irvine, United States, adjusted for the technology industry and company size." }, "location" : "Irvine, CA, United States", "locations" : [ "Irvine", "CA", "United States" ], "timestamp" : "2026-06-16T11:20:53.196", "fingerprint" : "9dd4192c5a024a3d989a2de7f510b1ca5b484545771b865adbdd6535841ceb58", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Sandisk/744000132247129-information-security-analyst-4", "externalId" : "744000132247129", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Irvine", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.6856969,-117.8259810" } ], "locationText" : "Irvine, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "AI, GenAI", "professionalSkills" : [ "Risk management", "Governance", "Strategy", "Threat modeling", "Secure-by-design" ], "hardSkillsList" : [ "Risk assessment", "Threat modeling", "Data protection", "Model behavior analysis", "Agent behavior analysis", "AI attack surfaces" ], "hardSkills" : [ { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Data protection", "level" : "intermediate" }, { "name" : "Model behavior analysis", "level" : "intermediate" }, { "name" : "Agent behavior analysis", "level" : "intermediate" }, { "name" : "AI attack surfaces", "level" : "intermediate" } ], "majorSkills" : "GRC, Responsible AI, Risk assessment", "majorSkillsList" : [ "GRC", "Responsible AI", "Risk assessment" ], "coreResponsibilities" : "Drive security intake for AI use cases, Drive risk assessment for AI use cases, Drive ongoing oversight of AI use cases, Drive security intake for AI platforms, Drive risk assessment for AI platforms, Drive ongoing oversight of AI platforms, Drive security intake for AI models, Drive risk assessment for AI models, Drive ongoing oversight of AI models, Drive security intake for third-party vendors, Drive risk assessment for third-party vendors, Drive ongoing oversight of third-party vendors, Lead technical risk assessments, Lead threat modeling, Design practical controls, Recommend practical controls, Design scalable controls, Recommend scalable controls, Partner with Legal, Partner with Privacy, Partner with Procurement, Partner with IT, Partner with Engineering, Partner with business stakeholders, Advance regulatory objectives, Advance contractual objectives, Advance governance objectives, Shape AI governance policies, Shape AI governance standards, Shape AI governance operating procedures, Prepare materials for governance reviews, Build operating model for securing AI, Apply system-level thinking across functions, Drive consistency across functions, Drive scale across functions, Anticipate emerging AI risks, Recommend adjustments to controls, Recommend adjustments to processes, Recommend adjustments to standards, Strengthen enterprise risk management, Conduct technical risk assessments, Conduct business process risk assessments, Document treatment recommendations, Support internal audits, Support external audits, Drive remediation activities", "teamCollaboration" : "Cross-functional stakeholders; Legal; IT; Procurement; Business leaders; Privacy; Engineering", "domainKnowledge" : "Responsible AI; GenAI; Information Security Governance; Risk Management; ISO 27001; NIST CSF 2.0; NIST AI RMF; ISO/IEC 42001; Data protection; AI attack surfaces", "domainList" : [ "responsible-ai", "genai", "information-security-governance", "risk-management", "iso-27001", "nist-csf-2-0", "nist-ai-rmf", "iso-iec-42001", "data-protection", "ai-attack-surfaces" ], "domainSpecificKnowledge" : [ "Responsible AI", "GenAI", "Information Security Governance", "Risk Management", "ISO 27001", "NIST CSF 2.0", "NIST AI RMF", "ISO/IEC 42001", "Data protection", "AI attack surfaces" ], "problemSolvingSkills" : "Risk assessment; Threat modeling; Root cause analysis", "qualificationsBasic" : "5+ years security professional experience, Experience operating independently, Experience influencing cross-functional stakeholders, Experience translating risks into governance solutions, Experience leading GenAI security risk assessments, Experience defining governance standards, Experience partnering with Legal, IT, Procurement, business leaders, Experience advancing regulatory, contractual, governance objectives related to AI, Experience shaping AI governance policies, standards, operating procedures, Experience preparing materials for governance reviews, Experience building end-to-end operating model for securing AI, Experience applying program and system-level thinking, Experience anticipating emerging AI risks, Experience recommending adjustments to controls, processes, standards, Experience strengthening enterprise information security risk management, Experience conducting technical and business process risk assessments, Experience documenting treatment recommendations, Experience supporting internal and external audits, Experience driving remediation activities", "qualificationsPreferred" : "Responsible AI experience, GenAI security risk assessment experience, Experience with ISO 27001, Experience with NIST CSF 2.0, Experience with NIST AI RMF, Experience with ISO/IEC 42001", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Sandisk understands how people and businesses consume data and we relentlessly innovate to deliver solutions that enable today’s needs and tomorrow’s next big ideas. With a rich history of groundbreaking innovations in Flash and advanced memory technologies, our solutions have become the beating heart of the digital world we’re living in and that we have the power to shape. Sandisk meets people and businesses at the intersection of their aspirations and the moment, enabling them to keep moving and pushing possibility forward. We do this through the balance of our powerhouse manufacturing capabilities and our industry-leading portfolio of products that are recognized globally for innovation, performance and quality. Sandisk has two facilities recognized by the World Economic Forum as part of the Global Lighthouse Network for advanced 4IR innovations. These facilities were also recognized as Sustainability Lighthouses for breakthroughs in efficient operations. With our global reach, we ensure the global supply chain has access to the Flash memory it needs to keep our world moving forward. Job Description Senior Information Security Analyst, GRC and Responsible AI As a Senior Information Security Analyst (Level 4), you will play a key role in shaping and operationalizing Sandisk’s enterprise Information Security Governance, Risk Management, and Strategy function, with a particular focus on Responsible GenAI. This is a senior, hands‑on role for an experienced security professional who can operate independently, influence cross‑functional stakeholders, and translate emerging technology risks into practical, scalable governance solutions. You will lead GenAI security risk assessments, help define governance standards, and partner closely with Legal, IT, Procurement, and business leaders to ensure AI adoption is secure, compliant, and aligned with Sandisk’s risk appetite. In addition to AI governance, you will contribute to the evolution of Sandisk’s enterprise risk management frameworks, supporting risk‑based decision‑making, strategy, and continuous improvement across the organization. Key Responsibilities Responsible AI Security * Drive security intake, risk assessment, and ongoing oversight of enterprise AI use cases, platforms, models, and third-party vendors. * Lead technical risk assessments and threat modeling covering data protection, identity and access, integration patterns, model and agent behavior, and emerging AI attack surfaces. * Design and recommend practical, scalable controls aligned with enterprise security standards and secure-by-design principles. * Partner with Legal, Privacy, Procurement, IT, Engineering, and business stakeholders to advance regulatory, contractual, and governance objectives related to AI. * Shape AI governance policies, standards, and operating procedures, and prepare materials for governance reviews. Program and System Thinking * Help build the end-to-end operating model for securing AI, from intake through approval and monitoring. * Apply program and system-level thinking across functions to drive consistency and scale. * Anticipate emerging AI risks and recommend adjustments to controls, processes, and standards. Core GRC * Strengthen enterprise information security risk management aligned with ISO 27001, NIST CSF 2.0, NIST AI RMF, and ISO/IEC 42001. * Conduct technical and business process risk assessments and document treatment recommendations. * Support internal and external audits with metrics, evidence, and analysis, and drive remediation activities. ## Additional Information Sandisk is committed to providing equal opportunities to all applicants and employees and will not discriminate against any applicant or employee based on their race, color, ancestry, religion (including religious dress and grooming standards), sex (including pregnancy, childbirth or related medical conditions, breastfeeding or related medical conditions), gender (including a person’s gender identity, gender expression, and gender-related appearance and behavior, whether or not stereotypically associated with the person’s assigned sex at birth), age, national origin, sexual orientation, medical condition, marital status (including domestic partnership status), physical disability, mental disability, medical condition, genetic information, protected medical and family care leave, Civil Air Patrol status, military and veteran status, or other legally protected characteristics. We also prohibit harassment of any individual on any of the characteristics listed above. Our non-discrimination policy applies to all aspects of employment. We comply with the laws and regulations set forth in the \"[Know Your Rights: Workplace Discrimination is Illegal](https://www.eeoc.gov/sites/default/files/2023-06/22-088EEOCKnowYourRights6.12.pdf)” poster. Our pay transparency policy is available [here](https://www.dol.gov/sites/dolgov/files/OFCCP/pdf/pay-transp%20EnglishformattedESQA508c.pdf). Sandisk thrives on the power and potential of diversity. As a global company, we believe the most effective way to embrace the diversity of our customers and communities is to mirror it from within. We believe the fusion of various perspectives results in the best outcomes for our employees, our company, our customers, and the world around us. We are committed to an inclusive environment where every individual can thrive through a sense of belonging, respect and contribution. Sandisk is committed to offering opportunities to applicants with disabilities and ensuring all candidates can successfully navigate our careers website and our hiring process. Please contact us at [jobs.accommodations@sandisk.com](mailto:jobs.accommodations@sandisk.com) to advise us of your accommodation request. In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying. Based on our experience, we anticipate that the application deadline will be 01/15/2026 (3 months from posting), although we reserve the right to close the application process sooner if we hire an applicant for this position before the application deadline. If we are not able to hire someone from this role before the application deadline, we will update this posting with a new anticipated application deadline. Required Qualifications * Bachelor's degree in information security, Computer Science, Engineering, or a related discipline, or equivalent experience. * 6+ years of progressive experience in Information Security, including exposure to GRC, risk management, or security governance in a complex enterprise environment. * Demonstrated technical proficiency in security, including hands-on experience with threat modeling, technical risk assessment, or security architecture reviews. * Working knowledge of AI security frameworks and standards, including OWASP Top 10 for LLM Applications, NIST AI Risk Management Framework (AI RMF), and ISO/IEC 42001, with familiarity in applying these to real-world use cases. * Practical understanding of AI and generative AI technologies and associated risks, including data protection, access management, model misuse, and supply chain considerations. * Familiarity with AI governance standards such as NIST AI RMF and ISO/IEC 42001. Preferred Qualifications * Background in software development, security engineering, application security, cloud security, or security architecture. * Familiarity with secure development practices, secure-by-design principles, and modern engineering environments such as cloud, APIs, containers, and CI/CD pipelines. * Experience applying threat modeling methodologies (such as STRIDE, PASTA, or attack tree analysis) to enterprise systems or AI workloads. * Professional certifications such as CISSP, CISM, CRISC, or GSNA. * Technical security certifications such as GCIH, GPEN, CEH, OSCP, GWAPT, or CSSLP. * Hands-on experience with AI, ML, or generative AI in a security, risk, engineering, or architecture capacity. * Exposure to emerging AI integration patterns, agentic systems, or AI red teaming. Skills and Attributes * Strong intellectual curiosity and a self-driven approach to learning new technologies. * Effective communication skills, with the ability to explain complex technical and AI concepts to a range of audiences. * Ability to influence and drive outcomes in cross-functional, matrixed environments. * Pragmatic, outcome-focused, and comfortable operating in ambiguity. * Strong program and system-level thinking, with the ability to connect technical decisions to business impact. #LI-TS1 Compensation & Benefits Details * An employee’s pay position within the salary range may be based on several factors including but not limited to (1) relevant education; qualifications; certifications; and experience; (2) skills, ability, knowledge of the job; (3) performance, contribution and results; (4) geographic location; (5) shift; (6) internal and external equity; and (7) business and organizational needs. * The salary range is what we believe to be the range of possible compensation for this role at the time of this posting. We may ultimately pay more or less than the posted range and this range is only applicable for jobs to be performed in California, Colorado, New York or remote jobs that can be performed in California, Colorado and New York. This range may be modified in the future. * You will be eligible to participate in Sandisk's Short-Term Incentive (STI) Plan, which provides incentive awards based on Company and individual performance. Depending on your role and your performance, you may be eligible to participate in our annual Long-Term Incentive (LTI) program, which consists of restricted stock units (RSUs) or cash equivalents, pursuant to the terms of the LTI plan. Please note that not all roles are eligible to participate in the LTI program, and not all roles are eligible for equity under the LTI plan. RSU awards are also available to eligible new hires, subject to Sandisk's Standard Terms and Conditions for Restricted Stock Unit Awards. * We offer a comprehensive package of benefits including paid vacation time; paid sick leave; medical/dental/vision insurance; life, accident and disability insurance; tax-advantaged flexible spending and health savings accounts; employee assistance program; other voluntary benefit programs such as supplemental life and AD&D, legal plan, pet insurance, critical illness, accident and hospital indemnity; tuition reimbursement; transit; the Applause Program, employee stock purchase plan, and the Sandisk's Savings 401(k) Plan. * Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law.", "summaryDescription" : "Senior Information Security Analyst, GRC and Responsible AI at Sandisk. Skills: GRC, Responsible AI, Risk assessment. Drive security intake for AI use cases. Drive risk assessment for AI use cases", "postedDate" : "2026-06-15T16:41:47.000", "createdAt" : "2026-06-16T03:36:35.715", "lastUpdated" : "2026-06-16T11:20:53.196", "ingestTimestamp" : "2026-06-16T03:36:35.715", "mongoId" : "6a3092acf292fd229c0c3aec", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 135000, "salaryAnnualMax" : 185000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Risk assessment", "Threat modeling", "Data protection", "Model behavior analysis", "Agent behavior analysis", "AI attack surfaces", "GRC", "Responsible AI", "Risk management", "Governance", "Strategy", "Secure-by-design", "GenAI", "Information Security Governance", "Risk Management", "ISO 27001", "NIST CSF 2.0", "NIST AI RMF", "ISO/IEC 42001" ], "skillCount" : 19, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a3080e2f292fd229c068076", "title" : "Senior Information Security Analyst, GRC and Responsible AI", "company" : "Sandisk", "industry" : "Computer Hardware", "salary" : { "min" : 145000.0, "max" : 205000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Information Security Analyst, GRC and Responsible AI in Irvine, United States, adjusted for seniority and industry." }, "location" : "Irvine, CA, United States", "locations" : [ "Irvine", "CA", "United States" ], "timestamp" : "2026-06-16T12:53:21.321", "fingerprint" : "1d099c1eacbb4ce579c9886fbbdcc870e7aa2c25d1be5940c1f83908c9680cf3", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Sandisk/744000132247129-information-security-analyst-4", "externalId" : "744000132247129", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Irvine", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.6856969,-117.8259810" } ], "locationText" : "Irvine, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "AI, GenAI, Machine Learning", "professionalSkills" : [ "Risk assessment", "Threat modeling", "Governance" ], "hardSkillsList" : [ "Information security", "Risk management", "AI governance", "Threat analysis", "Control design" ], "hardSkills" : [ { "name" : "Information security", "level" : "intermediate" }, { "name" : "Risk management", "level" : "intermediate" }, { "name" : "AI governance", "level" : "intermediate" }, { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Control design", "level" : "intermediate" } ], "majorSkills" : "GRC, Responsible AI, Risk management", "majorSkillsList" : [ "GRC", "Responsible AI", "Risk management" ], "coreResponsibilities" : "Drive security intake for AI use cases, Drive risk assessment for AI use cases, Drive ongoing oversight for AI use cases, Lead technical risk assessments, Lead threat modeling, Design scalable controls, Recommend scalable controls, Partner with stakeholders to advance objectives, Shape AI governance policies, Shape AI governance standards, Shape AI governance operating procedures, Prepare materials for governance reviews, Build operating model for securing AI, Apply program-level thinking, Apply system-level thinking, Anticipate emerging AI risks, Recommend adjustments to controls, Recommend adjustments to processes, Recommend adjustments to standards, Strengthen risk management, Conduct technical risk assessments, Conduct business process risk assessments, Document treatment recommendations, Support internal audits, Support external audits, Drive remediation activities", "teamCollaboration" : "Cross-functional stakeholders; Legal; IT; Procurement; Business leaders; Privacy; Engineering", "domainKnowledge" : "ISO 27001; NIST CSF 2.0; NIST AI RMF; ISO/IEC 42001; Responsible AI; GenAI", "domainList" : [ "iso-27001", "nist-csf-2-0", "nist-ai-rmf", "iso-iec-42001", "responsible-ai", "genai" ], "domainSpecificKnowledge" : [ "ISO 27001", "NIST CSF 2.0", "NIST AI RMF", "ISO/IEC 42001", "Responsible AI", "GenAI" ], "qualificationsBasic" : "5+ years security professional experience, Experience operating independently, Experience influencing cross-functional stakeholders, Experience translating risks to governance solutions, Experience leading GenAI security risk assessments, Experience defining governance standards, Experience partnering with Legal, IT, Procurement, business leaders, Experience contributing to enterprise risk management frameworks, Experience supporting risk-based decision-making, Experience supporting strategy, Experience supporting continuous improvement, Experience driving security intake for AI use cases, Experience driving risk assessment for AI use cases, Experience driving ongoing oversight for AI use cases, Experience leading technical risk assessments, Experience leading threat modeling, Experience designing scalable controls, Experience recommending scalable controls, Experience partnering with Legal, Privacy, Procurement, IT, Engineering, business stakeholders, Experience advancing regulatory objectives related to AI, Experience advancing contractual objectives related to AI, Experience advancing governance objectives related to AI, Experience shaping AI governance policies, Experience shaping AI governance standards, Experience shaping AI governance operating procedures, Experience preparing materials for governance reviews, Experience building end-to-end operating model for securing AI, Experience applying program-level thinking, Experience applying system-level thinking, Experience anticipating emerging AI risks, Experience recommending adjustments to controls, Experience recommending adjustments to processes, Experience recommending adjustments to standards, Experience strengthening enterprise information security risk management, Experience conducting technical risk assessments, Experience conducting business process risk assessments, Experience documenting treatment recommendations, Experience supporting internal audits, Experience supporting external audits, Experience driving remediation activities", "qualificationsPreferred" : "Responsible AI focus, GenAI focus, NIST AI RMF knowledge, ISO/IEC 42001 knowledge", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Sandisk understands how people and businesses consume data and we relentlessly innovate to deliver solutions that enable today’s needs and tomorrow’s next big ideas. With a rich history of groundbreaking innovations in Flash and advanced memory technologies, our solutions have become the beating heart of the digital world we’re living in and that we have the power to shape. Sandisk meets people and businesses at the intersection of their aspirations and the moment, enabling them to keep moving and pushing possibility forward. We do this through the balance of our powerhouse manufacturing capabilities and our industry-leading portfolio of products that are recognized globally for innovation, performance and quality. Sandisk has two facilities recognized by the World Economic Forum as part of the Global Lighthouse Network for advanced 4IR innovations. These facilities were also recognized as Sustainability Lighthouses for breakthroughs in efficient operations. With our global reach, we ensure the global supply chain has access to the Flash memory it needs to keep our world moving forward. Job Description Senior Information Security Analyst, GRC and Responsible AI As a Senior Information Security Analyst (Level 4), you will play a key role in shaping and operationalizing Sandisk’s enterprise Information Security Governance, Risk Management, and Strategy function, with a particular focus on Responsible GenAI. This is a senior, hands‑on role for an experienced security professional who can operate independently, influence cross‑functional stakeholders, and translate emerging technology risks into practical, scalable governance solutions. You will lead GenAI security risk assessments, help define governance standards, and partner closely with Legal, IT, Procurement, and business leaders to ensure AI adoption is secure, compliant, and aligned with Sandisk’s risk appetite. In addition to AI governance, you will contribute to the evolution of Sandisk’s enterprise risk management frameworks, supporting risk‑based decision‑making, strategy, and continuous improvement across the organization. Key Responsibilities Responsible AI Security * Drive security intake, risk assessment, and ongoing oversight of enterprise AI use cases, platforms, models, and third-party vendors. * Lead technical risk assessments and threat modeling covering data protection, identity and access, integration patterns, model and agent behavior, and emerging AI attack surfaces. * Design and recommend practical, scalable controls aligned with enterprise security standards and secure-by-design principles. * Partner with Legal, Privacy, Procurement, IT, Engineering, and business stakeholders to advance regulatory, contractual, and governance objectives related to AI. * Shape AI governance policies, standards, and operating procedures, and prepare materials for governance reviews. Program and System Thinking * Help build the end-to-end operating model for securing AI, from intake through approval and monitoring. * Apply program and system-level thinking across functions to drive consistency and scale. * Anticipate emerging AI risks and recommend adjustments to controls, processes, and standards. Core GRC * Strengthen enterprise information security risk management aligned with ISO 27001, NIST CSF 2.0, NIST AI RMF, and ISO/IEC 42001. * Conduct technical and business process risk assessments and document treatment recommendations. * Support internal and external audits with metrics, evidence, and analysis, and drive remediation activities. ## Additional Information Sandisk is committed to providing equal opportunities to all applicants and employees and will not discriminate against any applicant or employee based on their race, color, ancestry, religion (including religious dress and grooming standards), sex (including pregnancy, childbirth or related medical conditions, breastfeeding or related medical conditions), gender (including a person’s gender identity, gender expression, and gender-related appearance and behavior, whether or not stereotypically associated with the person’s assigned sex at birth), age, national origin, sexual orientation, medical condition, marital status (including domestic partnership status), physical disability, mental disability, medical condition, genetic information, protected medical and family care leave, Civil Air Patrol status, military and veteran status, or other legally protected characteristics. We also prohibit harassment of any individual on any of the characteristics listed above. Our non-discrimination policy applies to all aspects of employment. We comply with the laws and regulations set forth in the \"[Know Your Rights: Workplace Discrimination is Illegal](https://www.eeoc.gov/sites/default/files/2023-06/22-088EEOCKnowYourRights6.12.pdf)” poster. Our pay transparency policy is available [here](https://www.dol.gov/sites/dolgov/files/OFCCP/pdf/pay-transp%20EnglishformattedESQA508c.pdf). Sandisk thrives on the power and potential of diversity. As a global company, we believe the most effective way to embrace the diversity of our customers and communities is to mirror it from within. We believe the fusion of various perspectives results in the best outcomes for our employees, our company, our customers, and the world around us. We are committed to an inclusive environment where every individual can thrive through a sense of belonging, respect and contribution. Sandisk is committed to offering opportunities to applicants with disabilities and ensuring all candidates can successfully navigate our careers website and our hiring process. Please contact us at [jobs.accommodations@sandisk.com](mailto:jobs.accommodations@sandisk.com) to advise us of your accommodation request. In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying. Based on our experience, we anticipate that the application deadline will be 01/15/2026 (3 months from posting), although we reserve the right to close the application process sooner if we hire an applicant for this position before the application deadline. If we are not able to hire someone from this role before the application deadline, we will update this posting with a new anticipated application deadline. Required Qualifications * Bachelor's degree in information security, Computer Science, Engineering, or a related discipline, or equivalent experience. * 6+ years of progressive experience in Information Security, including exposure to GRC, risk management, or security governance in a complex enterprise environment. * Demonstrated technical proficiency in security, including hands-on experience with threat modeling, technical risk assessment, or security architecture reviews. * Working knowledge of AI security frameworks and standards, including OWASP Top 10 for LLM Applications, NIST AI Risk Management Framework (AI RMF), and ISO/IEC 42001, with familiarity in applying these to real-world use cases. * Practical understanding of AI and generative AI technologies and associated risks, including data protection, access management, model misuse, and supply chain considerations. * Familiarity with AI governance standards such as NIST AI RMF and ISO/IEC 42001. Preferred Qualifications * Background in software development, security engineering, application security, cloud security, or security architecture. * Familiarity with secure development practices, secure-by-design principles, and modern engineering environments such as cloud, APIs, containers, and CI/CD pipelines. * Experience applying threat modeling methodologies (such as STRIDE, PASTA, or attack tree analysis) to enterprise systems or AI workloads. * Professional certifications such as CISSP, CISM, CRISC, or GSNA. * Technical security certifications such as GCIH, GPEN, CEH, OSCP, GWAPT, or CSSLP. * Hands-on experience with AI, ML, or generative AI in a security, risk, engineering, or architecture capacity. * Exposure to emerging AI integration patterns, agentic systems, or AI red teaming. Skills and Attributes * Strong intellectual curiosity and a self-driven approach to learning new technologies. * Effective communication skills, with the ability to explain complex technical and AI concepts to a range of audiences. * Ability to influence and drive outcomes in cross-functional, matrixed environments. * Pragmatic, outcome-focused, and comfortable operating in ambiguity. * Strong program and system-level thinking, with the ability to connect technical decisions to business impact. #LI-TS1 Compensation & Benefits Details * An employee’s pay position within the salary range may be based on several factors including but not limited to (1) relevant education; qualifications; certifications; and experience; (2) skills, ability, knowledge of the job; (3) performance, contribution and results; (4) geographic location; (5) shift; (6) internal and external equity; and (7) business and organizational needs. * The salary range is what we believe to be the range of possible compensation for this role at the time of this posting. We may ultimately pay more or less than the posted range and this range is only applicable for jobs to be performed in California, Colorado, New York or remote jobs that can be performed in California, Colorado and New York. This range may be modified in the future. * You will be eligible to participate in Sandisk's Short-Term Incentive (STI) Plan, which provides incentive awards based on Company and individual performance. Depending on your role and your performance, you may be eligible to participate in our annual Long-Term Incentive (LTI) program, which consists of restricted stock units (RSUs) or cash equivalents, pursuant to the terms of the LTI plan. Please note that not all roles are eligible to participate in the LTI program, and not all roles are eligible for equity under the LTI plan. RSU awards are also available to eligible new hires, subject to Sandisk's Standard Terms and Conditions for Restricted Stock Unit Awards. * We offer a comprehensive package of benefits including paid vacation time; paid sick leave; medical/dental/vision insurance; life, accident and disability insurance; tax-advantaged flexible spending and health savings accounts; employee assistance program; other voluntary benefit programs such as supplemental life and AD&D, legal plan, pet insurance, critical illness, accident and hospital indemnity; tuition reimbursement; transit; the Applause Program, employee stock purchase plan, and the Sandisk's Savings 401(k) Plan. * Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law.", "summaryDescription" : "Senior Information Security Analyst, GRC and Responsible AI at Sandisk. Skills: GRC, Responsible AI, Risk management. Drive security intake for AI use cases. Drive risk assessment for AI use cases", "postedDate" : "2026-06-15T16:41:47.000", "createdAt" : "2026-06-16T01:42:10.630", "lastUpdated" : "2026-06-16T12:53:21.321", "ingestTimestamp" : "2026-06-16T01:42:10.630", "mongoId" : "6a3080e2f292fd229c068076", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 145000, "salaryAnnualMax" : 205000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Information security", "Risk management", "AI governance", "Threat analysis", "Control design", "GRC", "Responsible AI", "Risk assessment", "Threat modeling", "Governance", "ISO 27001", "NIST CSF 2.0", "NIST AI RMF", "ISO/IEC 42001", "GenAI" ], "skillCount" : 15, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a307671f292fd229c019d69", "title" : "Information Security Analyst", "company" : "Billtrust", "industry" : "FinTech", "salary" : { "min" : 1200000.0, "max" : 2000000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Information Security Analyst in India, adjusted for mid-seniority, FinTech industry, and company size." }, "location" : "India", "locations" : [ "India" ], "certifications" : [ "CompTIA Security+", "CISA", "CISSP", "ISO 27001 Lead Implementer" ], "timestamp" : "2026-06-16T10:56:45.318", "fingerprint" : "eeacff322dd139ae2da3f408ae64f9e900c2547981be40941000b7701261f38c", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.billtrust.com/careers/job-openings/?gh_jid=7719276003", "externalId" : "7719276003", "industryFunction" : { }, "structuredLocations" : [ { "country" : "India", "continent" : "as", "workMode" : "onsite" } ], "locationText" : "India", "minimumEducation" : "Bachelor's", "professionalSkills" : [ "Risk assessment" ], "majorSkills" : "Information Security, Compliance, Risk Management", "majorSkillsList" : [ "Information Security", "Compliance", "Risk Management" ], "coreResponsibilities" : "Support compliance and assurance programs, Contribute to risk assessment activities, Protect systems powering business payments platform, Assist with PCI DSS assessments, Support HIPAA BAA obligations, Document findings clearly and concisely", "teamCollaboration" : "Work closely with cross-functional teams", "domainKnowledge" : "Financial reporting controls; PCI DSS; HIPAA BAA obligations; ISMS documentation", "domainList" : [ "financial-reporting-controls", "pci-dss", "hipaa-baa-obligations", "isms-documentation" ], "domainSpecificKnowledge" : [ "Financial reporting controls", "PCI DSS", "HIPAA BAA obligations", "ISMS documentation" ], "documentationSkills" : "ISMS documentation; Control evidence", "qualificationsBasic" : "Bachelor's degree in Information Systems, Computer Science, Business, or a related field — or equivalent experience", "qualificationsPreferred" : "Exposure to GRC tools or audit management platforms, Experience supporting external audit engagements (SOC, PCI QSA, ISO certification body), Relevant certification in progress or obtained (e. g. , CompTIA Security+, CISA, CISSP, ISO 27001 Lead Implementer), Basic familiarity with vulnerability assessment tools or security monitoring platforms", "remoteFriendly" : false, "rawDescription" : "Who We Are Finance leaders choose Billtrust to get paid faster, control costs, and maximize customer satisfaction. As the leader in B2B accounts receivable workflow and payment software, we provide the world’s leading brands with AI-powered solutions across the full AR lifecycle—from invoice presentment and payment processing to cash application and collections. With over 2,600 global customers, more than $1 trillion in invoice dollars processed, and a proprietary network of 13 million buyers, Billtrust delivers business value through deep industry expertise and a culture relentlessly focused on meaningful customer outcomes. We’re an AI-first company, not just in what we build for our customers, but in how we work. Across every function, our teams use AI tools daily to work faster, make better decisions, and deliver higher-quality outcomes. We hire exceptional people, give them cutting-edge AI capabilities, and measure success by the impact they create. If you want to do the best work of your career at the frontier of AI and fintech, Billtrust is the place to do it. Our Values Customers We relentlessly increase value for customer and do the right thing for them. Action We make ‘thoughtfully fast’ decisions, act quickly, cut through red tape, deliver progress not perfection, take ownership and accountability. Team Spirit We put the team ahead of ourselves, foster trust and respect, collaborate with passion, despise toxic politics, value our differences, and celebrate together. Innovation We challenge the status quo, experiment thoughtfully, and are novel and brilliant in what we create. Excellence We love to win, but we hate losing even more. We aspire to be the best and take pride in our work. When we fall short, we own it and come back stronger. Information Security Analyst Information Security Analyst will support Billtrust's compliance and assurance programs across our key security frameworks, contribute to risk assessment activities, and help protect the systems that power our business payments platform. You'll work closely with cross-functional teams and report to the Information Security Manager. Assurance Frameworks This role directly supports Billtrust's compliance posture across the following frameworks: Framework Scope SOC 1 / ISAE 3402 Financial reporting controls maintain ISMS documentation and control evidence Assist with PCI DSS assessments, including scope validation, control testing, and QSA coordination Support HIPAA BAA obligations, including risk analysis activities and documentation of safeguards Risk ability to document findings clearly and concisely Bachelor's degree in Information Systems, Computer Science, Business, or a related field — or equivalent experience Preferred: Exposure to GRC tools or audit management platforms Experience supporting external audit engagements (SOC, PCI QSA, ISO certification body) Relevant certification in progress or obtained (e.g., CompTIA Security+, CISA, CISSP, ISO 27001 Lead Implementer) Basic familiarity with vulnerability assessment tools or security monitoring platforms", "summaryDescription" : "Information Security Analyst at Billtrust. Skills: Information Security, Compliance, Risk Management. Support compliance and assurance programs. Contribute to risk assessment activities", "postedDate" : "2026-06-16T01:21:47.894", "createdAt" : "2026-06-16T01:21:47.894", "lastUpdated" : "2026-06-16T10:56:45.318", "ingestTimestamp" : "2026-06-16T01:21:47.894", "mongoId" : "6a307671f292fd229c019d69", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Information Security", "Compliance", "Risk Management", "Risk assessment", "Financial reporting controls", "PCI DSS", "HIPAA BAA obligations", "ISMS documentation", "CompTIA Security+", "CISA", "CISSP", "ISO 27001 Lead Implementer" ], "skillCount" : 12, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305944f292fd229cf464d2", "title" : "Information Security Administrator", "company" : "Quadient", "industry" : "Computer Software", "salary" : { "min" : 35000.0, "max" : 45000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an Entry-level Information Security Administrator in London, UK, adjusted for the technology industry and company size." }, "location" : "London, United Kingdom", "locations" : [ "London", "United Kingdom" ], "certifications" : [ "ISO 27001 Foundation", "ISO 27001 Lead Implementer", "ISO 27001 Lead Auditor", "ISO 27701 Foundation", "CompTIA Security+", "Certified Information Security Manager (CISM)" ], "timestamp" : "2026-06-16T07:26:15.723", "fingerprint" : "c0993c278432bae395c64c4263b3fb8d63a0ce4054402f7d71a8eec326407f5f", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Quadient1/744000132179212-information-security-administrator", "externalId" : "744000132179212", "industryFunction" : { }, "structuredLocations" : [ { "city" : "London", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "51.5074456,-0.1277653" } ], "locationText" : "London, United Kingdom", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "mid", "technicalSkills" : "Microsoft 365, IT systems, Networks, Cloud services", "professionalSkills" : [ "Organisational skills", "Analytical thinking", "Problem-solving" ], "hardSkillsList" : [ "Risk assessment", "Supplier assessments", "Audit support" ], "hardSkills" : [ { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Supplier assessments", "level" : "intermediate" }, { "name" : "Audit support", "level" : "intermediate" } ], "majorSkills" : "Information security, ISO 27001, ISO 27701, Risk management", "majorSkillsList" : [ "Information security", "ISO 27001", "ISO 27701", "Risk management" ], "coreResponsibilities" : "Administer and maintain ISMS/PIMS, Investigate and resolve security incidents, Maintain risk registers, Ensure risks are identified, recorded, assessed, and treated, Maintain legal registers, Complete supplier security assessments, Support internal and external audits, Support management reviews, Assist with information security enquiries, Promote adherence to policies and best practices", "teamCollaboration" : "Other business areas", "domainKnowledge" : "Information security concepts; CIA triad; ISO 27001:2022; ISO 27701:2019; GDPR; Data protection principles", "domainList" : [ "information-security-concepts", "cia-triad", "iso-27001-2022", "iso-27701-2019", "gdpr", "data-protection-principles" ], "domainSpecificKnowledge" : [ "Information security concepts", "CIA triad", "ISO 27001:2022", "ISO 27701:2019", "GDPR", "Data protection principles" ], "toolProficiency" : [ "Excel", "Word", "Teams", "SharePoint" ], "communicationSkills" : "Written communication; Verbal communication", "continuousLearning" : "Online learning platform", "problemSolvingSkills" : "Problem-solving", "qualificationsBasic" : "Basic understanding of information security concepts, Awareness of ISO 27001 or similar standards, Proficiency in Microsoft 365 tools, Familiarity with basic IT systems, Degree in Information Security, IT or related field, Internship, placement, or entry-level experience in IT or security", "qualificationsPreferred" : "Exposure to ISO 27001:2022 or ISO 27701:2019 environments, Knowledge of GDPR or data protection principles, ISO 27001 Foundation / Lead Implementer / Lead Auditor, ISO 27701 Foundation, CompTIA Security+, Certified Information Security Manager (CISM) or similar", "remoteFriendly" : false, "workSiteFlexibility" : "Hybrid", "rawDescription" : "At Quadient , we support businesses of all sizes in their digital transformation and growth journey, unlocking operational efficiency with reliable, secure, and sustainable automation processes. Our success in delivering innovation and business growth is inspired by the connections our diverse teams create every day, with our clients and each other. It’s these connections that make Quadient such an exceptional place to grow your career, develop your skills and make a real impact – help our future-focused business lead the way in powering secure and sustainable business connections through digital and physical channels. The role assists the Information Security Team to ensure that security controls are implemented, monitored, and maintained in accordance with regulatory, contractual, and organisational requirements. The successful applicant will also engage with other areas of the business to assist with their Information Security enquiries, as well as helping ensure that a strong security and privacy culture is maintained across the organisation. Your role in our future: * Assist with the administration and maintenance of Quadient’s ISO 27001:2022/ISO 27701:2019 certified ISMS/PIMS * Investigate and resolve security incidents * Maintain risk registers and ensure risks are identified, recorded, assessed, and treated appropriately * Maintain legal registers * Complete supplier security assessments * Support internal and external audits, including certification and surveillance audits. * Support management reviews with relevant metrics and insights * Assist with information security enquiries from other business areas and promote adherence to Quadient’s policies and best practices ## Qualifications Your profile: * Basic understanding of information security concepts (CIA triad, risk, controls) * Awareness of ISO 27001 or similar standards (academic or practical exposure) * Proactive, self-motivated with strong organisational skills * Analytical thinking and problem-solving * Good written and verbal communication skills * Strong attention to detail * Ability to follow processes and work under guidance * Proficiency in Microsoft 365 tools (Excel, Word, Teams, SharePoint) * Exposure to ISO 27001:2022 or ISO 27701:2019 environments * Knowledge of GDPR or data protection principles * Familiarity with basic IT systems, networks, or cloud services * Internship, placement, or entry-level experience in IT or security * Degree in Information Security, IT or related field (or equivalent experience) * ISO 27001 Foundation / Lead Implementer / Lead Auditor * ISO 27701 Foundation * CompTIA Security+ * Certified Information Security Manager (CISM) or similar ## Additional Information Rewards & Benefits * Flexible Work: Embrace a hybrid work model blending office and remote setup for a balanced lifestyle. * Endless Learning: Access global opportunities for growth through our 24/7 online learning platform. * Inclusive Community: Join our Empowered Communities and engage in our Philanthropy program. * Comprehensive Rewards: Enjoy competitive Total Rewards covering wellness, work/life balance, and more, including a generous referral scheme. * Caring for Wellbeing: Access our complimentary employee assistance program for mental health support. Smart Work at Quadient At Quadient, our Smart Work approach fosters connection, collaboration, and innovation while offering flexibility based on role requirements. Whether on-site, hybrid, or remote, our work environments are designed to support productivity and engagement. Hybrid employees balance remote and in-office work, on-site roles contribute daily to our vibrant workplace culture, and remote employees stay connected through virtual collaboration and in-person events. No matter where you work, you’ll be part of a dynamic, people-first community that drives success together. Be yourself at Quadient Our values define how we work as a team: Empowerment, Passion, Inspiration and Community. They inspire us to be EPIC. Together. What makes Quadient different is how different we are. We’re a team of individuals with one goal but many perspectives. When you connect with Quadient, you become part of a community that cares - in a culture that embraces differences and values every voice. We will consider any reasonable modifications to the interview process. If you require any assistance with the application process, please email us at career@quadient.com Quadient is an Equal Employment Opportunity Employer. *: We firmly believe in zero discrimination in employment on any basis, including race, color, religion, sex, national origin, age, disability, veteran or military status, genetic information, citizenship status, and any other characteristics protected by local, state, or federal law. People. Connected.", "summaryDescription" : "Information Security Administrator at Quadient. Skills: Information security, ISO 27001, ISO 27701, Risk management. Administer and maintain ISMS/PIMS. Investigate and resolve security incidents", "postedDate" : "2026-06-15T11:43:54.000", "createdAt" : "2026-06-16T00:00:34.414", "lastUpdated" : "2026-06-16T07:26:15.723", "ingestTimestamp" : "2026-06-16T00:00:34.414", "mongoId" : "6a305944f292fd229cf464d2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "30k-50k", "hasSalary" : false, "allSkills" : [ "Risk assessment", "Supplier assessments", "Audit support", "Information security", "ISO 27001", "ISO 27701", "Risk management", "Organisational skills", "Analytical thinking", "Problem-solving", "Information security concepts", "CIA triad", "ISO 27001:2022", "ISO 27701:2019", "GDPR", "Data protection principles", "ISO 27001 Foundation", "ISO 27001 Lead Implementer", "ISO 27001 Lead Auditor", "ISO 27701 Foundation", "CompTIA Security+", "Certified Information Security Manager (CISM)", "Excel", "Word", "Teams", "SharePoint" ], "skillCount" : 26, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Entry", "dataQualityScore" : 1.0, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c91c274d8ee00a09840a7", "title" : "Application Support Specialist", "company" : "CompuNet, Inc.", "industry" : "Technology", "salary" : { "min" : 55000.0, "max" : 75000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Junior Application Support Specialist in Meridian, United States, adjusted for the technology industry and company size." }, "location" : "Meridian, Idaho, United States", "locations" : [ "Meridian", "Idaho", "United States" ], "certifications" : [ "Microsoft PL-900" ], "timestamp" : "2026-06-15T12:20:52.602", "fingerprint" : "6d047a4065b0d3223842f54927f16ebb61016d4372c6ea2a5a4ea5d8054741b2", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/compunetinc/jobs/5234720008", "externalId" : "5234720008", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Meridian", "state" : "Idaho", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "43.6086295,-116.3923260" } ], "locationText" : "Meridian, Idaho, United States", "technicalSkills" : "CRM, ERP, PSA", "professionalSkills" : [ "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement" ], "hardSkillsList" : [ "Application administration", "Troubleshooting", "Technical writing", "Process orientation" ], "hardSkills" : [ { "name" : "Application administration", "level" : "intermediate" }, { "name" : "Troubleshooting", "level" : "intermediate" }, { "name" : "Technical writing", "level" : "intermediate" }, { "name" : "Process orientation", "level" : "intermediate" } ], "majorSkills" : "Application support, System administration, Process improvement", "majorSkillsList" : [ "Application support", "System administration", "Process improvement" ], "coreResponsibilities" : "Administer line-of-business applications, Configure roles, permissions, workflows, Maintain system configuration alignment, Support application updates, Serve as escalation point, Own escalated issues, Troubleshoot issues across systems, Develop SOPs for issues, Translate complex issues, Investigate recurring issues, Apply targeted fixes, Recommend incremental improvements, Identify automation opportunities, Participate in solution builds, Assist with testing, Validate readiness for support, Assume ownership after handoff", "teamCollaboration" : "Support teams; Process owners; Internal stakeholders", "domainKnowledge" : "Business applications", "domainList" : [ "business-applications" ], "domainSpecificKnowledge" : [ "Business applications" ], "toolProficiency" : [ "ConnectWise Manage" ], "communicationSkills" : "Clear communication", "documentationSkills" : "Documentation; Technical writing", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "qualificationsBasic" : "2+ years administering ConnectWise Manage, 2+ years administering CRM, ERP, or PSA platform, Demonstrated experience producing Standard Operating Procedures, Experience researching business processes", "qualificationsPreferred" : "ConnectWise Sell experience, Microsoft PL-900 certification, Experience with homegrown applications, Experience working alongside Business Analysts", "rawDescription" : "Why join CompuNet? CompuNet values its people more than any other asset—and realizes the contributions made by each employee are a reflection of their education, experience, certifications, expertise and passions. We strive to take care of each other, do the right thing and help our customers succeed. We work to build lasting relationships and are proud that our customers across many industries see us as a trusted advisor. Putting the customer at the center of every engagement, our mission is to design, test, deploy and support the right IT solutions for every customer. We offer a generous total compensation package for our employees, including competitive wages, medical, dental, vision, PTO, company-matching retirement plans, profit-sharing and more. CompuNet is seeking an Application Support Specialist – Business Applications to administer, support, and maintain the company’s line-of-business application portfolio. This role focuses on day-to-day system operation and escalated support. The Application Support Specialist serves as the escalation point for the reactive support team, resolving issues that fall outside documented processes and developing Standard Operating Procedures (SOPs) to enable future resolution without escalation. The role primarily supports existing systems and processes, applying targeted improvements to maintain stability, usability, and supportability. Essential Duties & Responsibilities The Application Support Specialist – Business Applications will deliver and support the following areas of responsibility: APPLICATION ADMINISTRATION & CONFIGURATION Administer and maintain line-of-business applications across CRM, PSA, ERP, and related systems Configure roles, permissions, workflows, forms, and system settings Maintain alignment between system configuration and existing business processes Support application updates, releases, and configuration changes Maintain documentation of system configuration and workflows SUPPORT & ESCALATION OWNERSHIP Serve as the escalation point for the reactive support team Own escalated issues through investigation, resolution, and documentation Troubleshoot issues across systems, integrations, and workflows Distinguish between user error, configuration issues, and system defects Communicate clearly with support teams and stakeholders SOP DEVELOPMENT & KNOWLEDGE TRANSFER Develop SOPs for recurring issues and support scenarios Translate complex issues into clear, repeatable processes Enable reactive support to resolve future issues independently Maintain and update documentation as systems evolve PROCESS & ISSUE ANALYSIS Investigate recurring issues to identify root causes Apply targeted fixes and configuration updates Identify when issues require escalation beyond the role Recommend incremental improvements to reduce support volume Identify opportunities for practical automation where appropriate PROJECT PARTICIPATION & HANDOFF SUPPORT Participate in solution builds as needed to support transition into operations Assist with testing and early issue resolution Validate readiness for operational support Assume ownership after handoff Education & Experience Minimum Requirements 2+ years administering ConnectWise Manage or an equivalent CRM, ERP, or PSA platform Demonstrated experience producing Standard Operating Procedures or similar business process documentation for use by others Experience researching business processes across multiple stakeholders, systems, and approval chains Desired Experience ConnectWise Sell experience Microsoft PL-900 (Power Platform Fundamentals) certification Experience with homegrown, custom-built, or internally developed line-of-business applications Experience working alongside Business Analysts or in a Business Analyst capacity Skills & Abilities Application administration discipline across multiple line-of-business systems Troubleshooting capability and pattern recognition across systems, integrations, and workflows Escalation judgment with the ability to determine when issues exceed role scope Technical writing suitable for SOPs, support handoffs, and stakeholder consumption Communication and relationship-building across support teams, process owners, and internal stakeholders Process orientation with reliable execution in ambiguous or undocumented situations Ownership of outcomes including recurring and low-visibility operational work Who we are CompuNet, Inc. is an engineering-led IT solution provider that offers consulting, design, and professional services. Our strength lies in our team of outcome-driven and relationship-focused professionals with a long history of designing IT solutions. Our team of highly skilled engineers take the lead in designing, developing, and implementing solutions that address complex business challenges. This team takes ownership for the entire project lifecycle, from discovery and design through deployment, training, and handoff. We are an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, protected veteran status or any other characteristic protected by law.", "summaryDescription" : "Application Support Specialist at CompuNet, Inc.. Skills: Application support, System administration, Process improvement. Administer line-of-business applications. Configure roles, permissions, workflows", "postedDate" : "2026-06-14T08:42:48.722", "createdAt" : "2026-06-14T08:42:48.722", "lastUpdated" : "2026-06-15T12:20:52.602", "ingestTimestamp" : "2026-06-14T08:42:48.722", "mongoId" : "6a2c91c274d8ee00a09840a7", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 55000, "salaryAnnualMax" : 75000, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ "Application administration", "Troubleshooting", "Technical writing", "Process orientation", "Application support", "System administration", "Process improvement", "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement", "Business applications", "Microsoft PL-900", "ConnectWise Manage" ], "skillCount" : 17, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Junior", "dataQualityScore" : 0.7777778, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ac2e474d8ee00a06f811c", "title" : "Manager, Information Security GRC", "company" : "OneTrust", "industry" : "Technology", "salary" : { "min" : 65000.0, "max" : 95000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Manager, Information Security GRC in Madrid, Spain, adjusted for SaaS industry and manager seniority." }, "location" : "Madrid, Madrid, Spain", "locations" : [ "Madrid", "Madrid", "Spain" ], "timestamp" : "2026-06-14T23:06:18.191", "fingerprint" : "240858e003623d250b53cca23cd62522539ab6192172b2ccea823354de189e6a", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/onetrust/jobs/7982684", "externalId" : "7982684", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Madrid", "state" : "Madrid", "country" : "Spain", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "40.4237276,-3.6899043" } ], "locationText" : "Madrid, Madrid, Spain", "experienceLevel" : "Manager", "softSkillsList" : [ "Leadership" ], "softSkills" : [ { "name" : "Leadership" } ], "domainKnowledge" : "Information Security; Governance; Risk; Compliance; Third-party risk management; Multi-cloud environment", "domainList" : [ "information-security", "governance", "risk", "compliance", "third-party-risk-management", "multi-cloud-environment" ], "domainSpecificKnowledge" : [ "Information Security", "Governance", "Risk", "Compliance", "Third-party risk management", "Multi-cloud environment" ], "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Strength in Trust OneTrust’s mission is to enable innovation through the responsible use of data and AI. We believe that ensuring data is trusted shouldn’t slow teams down—it should accelerate what’s possible. This led us to develop the first technology platform for responsible data use in 2016. Today, with AI representing the latest and most impactful expansion of data yet, OneTrust is once again redefining what responsible innovation looks like. OneTrust, the AI‑Ready Governance Platform™, unifies regulatory intelligence, automation, and connected governance workflows so businesses can continue to move at the speed of AI while ensuring good governance to prevent data misuse at scale. Trusted by thousands of organizations worldwide, OneTrust is shaping the future where trusted data becomes a transformative force for business and society. The Challenge This role leads one or more GRC (Governance, Risk and Compliance) program functions for OneTrust. This role is also responsible for customer security and third-party risk. This is a critical role at OneTrust because it helps ensure we have the right processes, oversight, and support in place to protect the company, support our customers, and scale our security and compliance efforts effectively. Your Mission Lead and mature the Security GRC team and its programs, ensuring the team is working effectively and is adequate for the size and scope of the company. This person will, on a daily and weekly basis: lead a team of Security GRC analysts mature program processes and procedures measure quality of work and performance indicators to ensure resources are applied to the right places manage the customer security team, which handles customer contract reviews, questionnaires, assessments, RFPs, and customer calls manage third-party risk for the company manage key vendor relationships Primary Responsibilities / Expected Results manage and mature the Security GRC team, ensuring monitoring so the team is working effectively and is adequate for the size and scope of the company create and maintain a scalable process for compliance and continuous assurance collaborate with IT, InfoSec, and within the GRC team to mature the compliance process and become a trust advisor to IT, InfoSec, R&D, and the business transform our ongoing risk and control self-assessment, audit management, security risk assessment, and third-party assessment processes execute risk assessments of third-party vendors provide front-line support to customer meetings and audit requests to ensure that OneTrust’s customers understand the security program and controls and how it meets their requirements support requests from the audit team, risk team, security awareness team, and other internal stakeholders Success in This Role Success in this role is defined by: a well-managed and scalable Security GRC team strong and repeatable compliance and continuous assurance processes improved risk and assessment processes across the business effective support for customer security needs and audit requests strong collaboration and trusted partnership across IT, InfoSec, R&D, and the business You Are qualified with a College BS/BA degree, progressive educational certificate, or equivalent experienced, with 5+ years of experience in Information Security knowledgeable, with 3+ years of experience in a GRC analyst or information security support role a people leader, with 2+ years as a people leader, team lead, or in a senior analyst/engineer capacity on the team experienced managing teams and technologies in a multi-cloud environment Where we Work We are embracing an office-first culture, encouraging three days a week in office for most roles, with meaningful opportunities to collaborate and celebrate in person. Each role may have specific requirements or flexibility depending on the scope of the position, so we encourage you to verify this with your recruiter during your first interview. Benefits As an employee at OneTrust, you will be part of the OneTeam. That means you’ll receive support physically, mentally, and emotionally so that you can do your best work both in and out of the office. This includes comprehensive healthcare coverage, flexible PTO, equity RSUs, annual performance bonus opportunities, retirement account support, 14+ weeks of paid parental leave, career development opportunities, company-paid privacy certification exam fees, and much more. Specific benefits differ by country. For more information, talk to your recruiter or visit onetrust.com/careers. Resources Check out the following to learn more about OneTrust and its people: OneTrust Careers on YouTube @LifeatOneTrust on Instagram Your Data You have the right to have your personal data updated or removed. You also have the right to have a copy of the information OneTrust holds about you. Further details about these rights are available on the website in our Privacy Overview. You can change your mind at any time and have your personal data removed from our database. In order to do this you must contact us and let us know you wish to be removed. The request should be made on the Data Subject Request Form. Recruitment fraud warning: OneTrust is aware of scams involving false offers of employment with our company. The fraudulent jobs, interviews and job offers use fake websites, email addresses, group chat and text messages. Be aware that we never ask candidates for personal information, IDs or bank information during the interview process. We do not interview prospective candidates via instant message or group chat, and do not require candidates to purchase products or services, or process payments on our behalf as a condition of any employment offer. Please note that any legitimate interview availability requests will come directly from a OneTrust recruiter with an \"@onetrust.com\" email address. You may also receive legitimate emails from \"@us.greenhouse-mail.io\". Recruiters will only reach out to candidates who have applied for a role through our ATS (Greenhouse) or prospects via LinkedIn InMail. Job offers will come from a recruiter and may have a \"@docusign.net\" email address. For more information or if you have been targeted please reach out to askrecruiting@onetrust.com. Our Commitment to You When you join OneTrust you are stepping onto a launching pad — the countdown has begun. The destination? A career without boundaries working alongside a diverse and inclusive crew who is passionate about doing meaningful work. As a pioneer, your voice and expertise will help chart the direction of an entirely new category. Our commitment to putting people first starts with you. Your growth is part of the mission. Our goal is to give you the power to embark on the next phase of your uniquely, unique career. OneTrust provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by local laws.", "summaryDescription" : "Manager, Information Security GRC at OneTrust", "postedDate" : "2026-06-12T03:27:19.059", "createdAt" : "2026-06-12T03:27:19.059", "lastUpdated" : "2026-06-14T23:06:18.191", "ingestTimestamp" : "2026-06-12T03:27:19.059", "mongoId" : "6a2ac2e474d8ee00a06f811c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Leadership", "Information Security", "Governance", "Risk", "Compliance", "Third-party risk management", "Multi-cloud environment" ], "skillCount" : 7, "jobCategory" : "engineering", "jobSubcategory" : "engineering", "dataQualityScore" : 0.8888889, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a30518ff292fd229cf0227f", "title" : "GRC Specialist, Automation & Technology", "company" : "Collibra", "industry" : "Technology", "salary" : { "min" : 115500.0, "max" : 164500.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Mid-level GRC Specialist, Automation & Technology in New York, United States, within the SaaS industry, adjusted for company size and specific location." }, "location" : "New York City ", "locations" : [ "New York City" ], "timestamp" : "2026-06-16T09:03:00.311", "fingerprint" : "5b7e26edf7a0de2bd150836719adfdef060fe5befdec31ab3c90d9707561efe3", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.collibra.com/us/en/company/careers/job-listing/?gh_jid=8007845", "externalId" : "8007845", "industryFunction" : { }, "structuredLocations" : [ { "city" : "New York", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "40.7127281,-74.0060152" } ], "locationText" : "New York, New York, United States", "employmentType" : "FULL_TIME", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Joining Collibra’s GRC team Collibra’s GRC Team is looking for a GRC Specialist, Automation & Technology who brings a strong technical mindset and a passion for automation, combined with solid core experience supporting audits and compliance programs. In your day to day, you will act as a strategic, technical contributor who can bridge the gap between compliance requirements and modern automation tools (like Claude and Workato) to make our team more impactful. You will partner directly with GRC and Internal Audit teams to manage workloads and automate manual processes: helping build and maintain AI-driven agent workflows to streamline repeatable processes and controls, facilitating continuous monitoring for our control environment, and supporting technical implementations of controls, such as for new cloud environments or new AI initiatives. Values-in-action: Our customers are our true north. Our GRC Specialist, Automation & Technology will enhance customer trust and accelerate sales pipelines by engineering automated, always-audit-ready environments for critical frameworks. This is a hybrid role based in our New York City office. Our hybrid model means you’ll work from the office at least two days each week. This setup helps us stay connected, work more closely together, and keep making progress as a team. The GRC Specialist, Automation & Technology at Collibra is responsible for Collaborating with the GRC and Internal Audit teams to architect and deploy AI agentic capabilities, such as multi-step Claude workflows, Workato recipes, and autonomous control monitoring processes in order to eliminate repeatable manual GRC overhead and streamline evidence validation. Engineering continuous control monitoring pipelines and real-time control checks for our key security frameworks in order to shift Collibra from point-in-time sampling to an always-audit-ready risk posture. Supporting the technical GRC infrastructure integration of new cloud environments into our control framework starting in Q3. Facilitating automated governance guardrails and continuous monitoring systems for our expanding portfolio (i. e. AIUC-1) in order to maintain ongoing compliance. Partnering closely with Internal Audit and GRC colleagues to evaluate manual processes and controls and leverage orchestration and automation platforms in order to maximize the strategic efficiency and impact of our risk mitigation practices. Helping design automated key risk indicator (KRI) and key performance indicator (KPI) reporting to senior management. Administering the day-to-day functions of Collibra’s GRC platforms and tools (i. e. Optro) to maintain a reliable source of truth. You have 3+ years of experience in a technical compliance role, IT internal audit, or GRC environment, ideally within an enterprise SaaS platform. Experience building workflow automations using industry standard platforms (e.g., Workato, Claude, or native GRC platform automation engines). Hands-on experience reviewing or auditing cloud environments (Cloud infrastructure, IAM, and native logging systems) and AI programs. One or more current qualifications is nice-to-have: CISA, CRISC, CISSP, CIA, CPA, or relevant cloud/automation certifications (e.g., Azure, AWS, GCP, Workato). A bachelor’s degree or equivalent related working experience is required. This position is not eligible for visa sponsorship. You are Passionate about automation and efficiency, with a strong interest in leveraging AI and orchestration tools to optimize risk practices. Knowledgeable about information security fundamentals, cloud compliance principles, and the core mechanics of continuous control monitoring. Familiar with performing control testing or supporting technology audits, with some exposure to cloud environments (AWS/GCP/Azure) and enterprise ecosystems. Familiar with common control frameworks, specifically ISO 27001, ISO 42001, NIST AI, SOC 2, gained through direct support of an audit or compliance program. Familiarity with AIUC-1 is nice to have. Ability to translate manual compliance workflows into structured logic and discuss technical automation requirements clearly with stakeholders. Strong problem-solving and analytical skills to proactively identify repeatable day-to-day bottlenecks and design automated, sustainable solutions. Measures of success Within your first month, you will begin building relationships within the GRC and Internal Audit teams, gain a thorough understanding of Collibra’s GRC tooling and Claude automation workflows, and align on the roadmap for cloud environment onboarding. Within your third month, you will be helping design and maintaining your first AI-driven workflows to automate repeatable day-to-day tasks like user access recertifications and training escalations, while supporting the technical onboarding of new cloud environments into our control framework. Within your sixth month, you will help the team achieve control compliance for in-scope systems and infrastructure, establish automated continuous control monitoring pipelines for Collibra’s ISO framework, and begin designing workflows to support Collibra’s expanding AIUC-1 program. Compensation for this role The standard base salary range for this position is $88,000.00 - $110,000.00 per year. This position is not eligible for additional commission-based compensation. Salary offers are based on a combination of factors, including, but not limited to, experience, skills, and location. In addition to base salary, we offer equity ownership at every level, bonus potential, a Flex Fund monthly stipend, pension/401k plans, and more. Benefits at Collibra Collibra recognizes and values that everyone has different needs, interests, and life goals. We built our benefits program with flexibility in mind to support you and your loved ones through a diverse range of circumstances and life events. These flexible offerings sit on a foundation of competitive compensation, health coverage, and time off. Learn more about Collibra’s benefits. We create inclusion and belonging through how we onboard, meet, connect, engage, and communicate. Learn more about diversity, equity, and inclusion at Collibra. At Collibra, we’re proud to be an equal opportunity employer. We realize the key to creating a company with a world-class culture and employee experience comes from who we hire and creating a workplace that celebrates everyone. With this, we proudly consider qualified applicants without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sexual orientation, pregnancy, sex, gender identity, gender expression, genetic information, physical or mental disability, HIV status, registered domestic partner status, caregiver status, marital status, veteran or military status, citizenship status or any other legally protected category. If you have a need that requires accommodation, let us know by completing our Accommodations for Applicants form.", "summaryDescription" : "GRC Specialist, Automation & Technology at Collibra", "postedDate" : "2026-06-15T23:15:49.850", "createdAt" : "2026-06-15T23:15:49.850", "lastUpdated" : "2026-06-16T09:03:00.311", "ingestTimestamp" : "2026-06-15T23:15:49.850", "mongoId" : "6a30518ff292fd229cf0227f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 115500, "salaryAnnualMax" : 164500, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "SaaS", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305182f292fd229cf0181f", "title" : "Senior Manager, Information Security", "company" : "Stanley 1913", "salary" : { "min" : 150000.0, "max" : 170000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, United States", "locations" : [ "Seattle", "Washington", "United States" ], "timestamp" : "2026-06-16T08:55:12.146", "fingerprint" : "416c22c3585eafa5ab1c1c6432458aa19d722f28e0521a05199e58841e2d6d0a", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/stanley1913-us/jobs/5213919008", "externalId" : "5213919008", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "rawDescription" : "About us: Stanley 1913 - Built for Life® since 1913. The Stanley 1913 brand has fueled the human experience since the iconic Stanley vacuum bottle revolutionized the way people enjoyed food and beverage. Today, our colorful and thoughtfully designed products including the popular Quencher™ series go beyond function, elevating everyday moments with style and empowering active lifestyles. We’re a community of creators, builders, and inventors who believe in creating sustainable products for a better life and world that minimizes our impact on the planet. Learn more at www.stanley1913.com.  Position Overview We are seeking a highly accomplished and strategic Senior Manager, Information Security to join our team in Seattle, WA. In this leadership role, you will drive the vision, development, and execution of enterprise-grade security programs supporting the Stanley 1913 brand, in alignment with the broader HAVI Enterprise Security strategy. You will play a critical role in scaling and maturing Stanley 1913’s security capabilities to protect consumers, partners, and business operations during a period of accelerated growth. As a senior leader, you will influence organizational strategy, guide cross-functional decision-making, and ensure that security is embedded as a core component of business innovation and digital transformation. ***Seattle location strongly preferred*** What You Will Do Lead the development and ongoing improvement of an information security strategy. This strategy protects Stanley 1913’s digital ecosystem and aligns with security priorities across HAVI and Morgan Street. Serve as a trusted advisor to executive leadership, providing expert guidance on cybersecurity risks, emerging threats, and strategic investments to strengthen organizational resilience. Drive the development and operationalization of enterprise risk management frameworks, including identifying, assessing, and mitigating cybersecurity risks across a complex setting that prioritizes customer experience. Establish and oversee robust security monitoring, detection, and response capabilities, ensuring integration into business operations and alignment with industry-leading practices. Direct incident response and crisis management efforts, including leading major incident investigations, enhancing response plans, and incorporating lessons learned into improved controls and processes. Build, lead, and develop a high-performing cybersecurity team, fostering a culture of accountability, continuous learning, and technical excellence. Partner with cross-functional leaders (IT, Product, Legal, Compliance, and Operations) to embed security into business processes, product development, and customer experiences. Champion security awareness and culture across the organization, driving training initiatives, executive reporting, and enterprise-wide engagement. Stay ahead of the evolving threat landscape, regulatory requirements, and industry guidelines, proactively adapting strategies to maintain a strong security posture. Who You Are Bachelor’s degree in Information Security, Computer Science, or a related field, with equivalent experience also considered; advanced degree (MBA or Master’s in Cybersecurity) strongly preferred. 10+ years of progressive experience in information technology, with 7+ years in information security, cybersecurity, risk management, or compliance leadership roles. Proven track record of designing and leading enterprise-scale security programs within complex, high-growth, or consumer-focused organizations. Deep expertise in security frameworks (e.g., NIST, ISO 27001), regulatory requirements, and risk management methodologies. Strong leadership experience with demonstrated ability to build, mentor, and retain high-performing teams while driving measurable outcomes. Advanced understanding of security architecture, threat detection/response, cloud security, and modern cybersecurity technologies. Certifications such as CISSP, CISM, CISA, or equivalent strongly preferred. Outstanding communication and executive presence, with the ability to influence senior collaborators and translate technical risks into business impact. #LI-Hybrid Stanley 1913 is committed to a diverse and inclusive work environment. Stanley 1913 is an equal opportunity employer and does not discriminate based on race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please reach out to recruiting@stanley1913.com. Stanley 1913 is a total rewards company, which includes rewards beyond base salary. At Stanley 1913, full-time employees are eligible for an annual bonus, based on company and individual results. In addition, we offer a variety of employee benefits, personalized time off, 14-Paid holidays, dental, vision, 401(k), and much more. The base pay range for this position is for a successful candidate within the state listed. The successful candidate’s actual pay will be based on multiple factors such as work location, job-related knowledge, skills, qualifications, and experience. Salary Range $150,000—$170,000 USD About our parent company: Morgan Street Holdings The Stanley 1913 brand is owned by Morgan Street Holdings (formerly HAVI), a privately held enterprise with a diverse portfolio of operating companies, including HAVI Supply Chain, tms, and Continental. Morgan Street Holdings’ portfolio provides best-in-class sourcing and supply chain capabilities, brand-defining marketing and promotion services, innovative consumer products, and dining and refreshment food solutions. Morgan Street Holdings employs over 10,000 people and serves 300+ customers across the globe.  Morgan Street Holdings supports the Stanley 1913 brand with competitive pay and benefits, along with exposure to diverse industries and professional networking and development opportunities.  ", "summaryDescription" : "Senior Manager, Information Security at Stanley 1913", "postedDate" : "2026-06-15T23:19:17.324", "createdAt" : "2026-06-15T23:19:17.324", "lastUpdated" : "2026-06-16T08:55:12.146", "ingestTimestamp" : "2026-06-15T23:19:17.324", "mongoId" : "6a305182f292fd229cf0181f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 150000, "salaryAnnualMax" : 170000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Retail", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305872f292fd229cf42242", "title" : "Senior Information Security Engineer", "company" : "Strategic Systems International", "industry" : "Cybersecurity", "salary" : { "min" : 5000000.0, "max" : 9000000.0, "currency" : "PKR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Information Security Engineer in Lahore, Pakistan, adjusted for industry and seniority." }, "location" : "Lahore, PK", "locations" : [ "Lahore", "PK" ], "timestamp" : "2026-06-16T06:35:29.089", "fingerprint" : "cdc4bcd74d0e4b5b9b6029cbbb17999f968831330916b0fa1eb6190378c8f110", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://strategic-systems-international.breezy.hr/p/13df0023754f-senior-information-security-engineer", "externalId" : "13df0023754f", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Lahore", "country" : "Pakistan", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "31.5656822,74.3141829" } ], "locationText" : "Lahore, Pakistan", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "rawDescription" : "Senior Information Security Engineer Overview We are seeking a highly motivated Senior Information Security Engineer to support and strengthen our organization", "summaryDescription" : "Senior Information Security Engineer at Strategic Systems International", "createdAt" : "2026-06-15T22:11:59.035", "lastUpdated" : "2026-06-16T06:35:29.089", "ingestTimestamp" : "2026-06-15T22:11:59.035", "mongoId" : "6a305872f292fd229cf42242", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a3098d2f292fd229c0e6896", "title" : "Senior Security Analyst- Application Security & DevSecOps", "company" : "Software Mind", "industry" : "Information Technology And Services", "salary" : { "min" : 2.7E7, "max" : 3.9E7, "currency" : "CRC", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Analyst in San José, Costa Rica, adjusted for the technology industry and senior experience level." }, "location" : "San José, San José Province, CR", "locations" : [ "San José", "San José Province", "CR" ], "certifications" : [ "CSSLP", "GWAPT", "CISSP", "Cloud security certifications" ], "timestamp" : "2026-06-16T14:18:28.225", "fingerprint" : "95cac723a13694e715e41a9032668d31ddd1080123b26d8cd3e455cf7e517e96", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/SoftwareMind/744000132287444--8pp-senior-security-analyst-application-security-devsecops", "externalId" : "744000132287444", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San José", "state" : "San José Province", "country" : "Costa Rica", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "9.9327707,-84.0796144" } ], "locationText" : "San José, San José Province, Costa Rica", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "SAST, DAST, SCA, CI/CD, Azure DevOps, Bitbucket, AWS, Azure, M365, WAF", "professionalSkills" : [ "Risk assessment", "System design", "Architecture review", "Vendor risk management", "Compliance alignment" ], "hardSkillsList" : [ "Secure coding", "Threat modeling", "Policy-as-code", "Infrastructure-as-code", "Configuration hardening", "Network segmentation", "Code signing" ], "hardSkills" : [ { "name" : "Secure coding", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Policy-as-code", "level" : "intermediate" }, { "name" : "Infrastructure-as-code", "level" : "intermediate" }, { "name" : "Configuration hardening", "level" : "intermediate" }, { "name" : "Network segmentation", "level" : "intermediate" }, { "name" : "Code signing", "level" : "intermediate" } ], "majorSkills" : "Application Security, DevSecOps, Secure SDLC, Cloud Security", "majorSkillsList" : [ "Application Security", "DevSecOps", "Secure SDLC", "Cloud Security" ], "coreResponsibilities" : "Partner with development teams, Embed secure coding practices, Assess development practices, Identify gaps, Drive maturity roadmap, Lead developer enablement initiatives, Provide secure coding guidance, Conduct threat modeling, Manage security champions program, Integrate SAST, Integrate DAST, Integrate SCA, Integrate secrets scanning, Tune SAST, Tune DAST, Tune SCA, Tune secrets scanning, Deliver fast feedback, Evaluate prospective products, Evaluate platforms, Evaluate SaaS tools, Evaluate developer tooling, Confirm alignment with best practices, Conduct architecture reviews, Conduct design reviews, Assess authentication, Assess authorization, Assess data handling, Assess encryption, Assess logging, Assess multi-tenancy, Review third-party risk, Review supply chain risk, Define conditions for safe use, Produce risk-based assessments, Produce recommendations, Align product reviews with SOC 2, Align product reviews with control requirements, Implement policy-as-code guardrails, Implement infrastructure-as-code security controls, Drive cloud posture improvements, Harden configurations, Align with CIS benchmarks, Implement WAF, Implement network segmentation, Establish supply chain security controls, Govern dependencies, Implement code signing", "teamCollaboration" : "Partner with development teams; Coach developers; Present risk to technical audiences; Present risk to executive audiences", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Application Security; DevSecOps; Secure SDLC; Cloud-native architecture; Supply chain risk; NIST SSDF; OWASP SAMM; OWASP ASVS; BSIMM; CIS benchmarks; SOC 2; ISO 27001; AI/ML security", "domainList" : [ "application-security", "devsecops", "secure-sdlc", "cloud-native-architecture", "supply-chain-risk", "nist-ssdf", "owasp-samm", "owasp-asvs", "bsimm", "cis-benchmarks", "soc-2", "iso-27001", "ai-ml-security" ], "domainSpecificKnowledge" : [ "Application Security", "DevSecOps", "Secure SDLC", "Cloud-native architecture", "Supply chain risk", "NIST SSDF", "OWASP SAMM", "OWASP ASVS", "BSIMM", "CIS benchmarks", "SOC 2", "ISO 27001", "AI/ML security" ], "toolProficiency" : [ "Azure DevOps", "Bitbucket", "SAST tools", "DAST tools", "SCA tools", "Secrets scanning" ], "communicationSkills" : "Risk presentation", "problemSolvingSkills" : "Risk assessment; Root cause analysis", "qualificationsBasic" : "5+ years of experience in Application Security, 5+ years of experience in DevSecOps, Hands-on AppSec background, Hands-on DevSecOps background, SAST/DAST/SCA experience, CI/CD pipeline security experience, Secrets management experience, Product security review experience, Technology security review experience, Experience with CI/CD tooling, Experience with source control tooling, Cloud security experience in AWS, Cloud security experience in Azure, +90% English proficiency", "qualificationsPreferred" : "Experience in a SOC 2 environment, Experience in an ISO 27001 environment, Threat modeling experience, AI/ML security considerations, AI/ML governance considerations", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "We are Software Mind, an awesome team of engineers who are ready to ramp up any top-notch company’s projects! Our aim? To always be one step ahead. Become part of a multicultural company in constant growth with an excellent work environment certified by Great Place To Work! Overview Software Mind is seeking qualified candidates to fill the role of Senior Security Analyst- Application Security & DevSecOps In addition to a competitive salary rate and a positive work environment, we are committed to delivering high-quality technology solutions, we also offer: * Flexible schedules * An authentic work-life balance * Payment in US Dollars Senior Security Analyst – Application Security & DevSecOps About the Role We are seeking a Senior Security Analyst with a strong background in Application Security and DevSecOps , focused on embedding security throughout the software development lifecycle. This is not a traditional SecOps monitoring role — the ideal candidate is someone who partners closely with engineering teams, drives security program maturity, and can assess technology risk at both a technical and strategic level. ## Qualifications Key Responsibilities SSDLC Maturity & Developer Enablement * Partner with development teams to embed secure coding practices throughout the SDLC, shifting security from a final gate to a shared, integrated responsibility * Assess current development practices against Secure SDLC standards, identify gaps, and drive a phased maturity roadmap with measurable milestones * Lead developer enablement initiatives — secure coding guidance, threat modeling, and a security champions program — that build durable capability within engineering teams * Integrate and tune SAST, DAST, SCA, and secrets scanning in CI/CD pipelines (Azure DevOps, Bitbucket) to deliver fast, in-workflow feedback with minimal friction Product & Technology Security Review * Evaluate prospective products, platforms, SaaS tools, and developer tooling to confirm alignment with security best practices before adoption * Conduct architecture and design reviews, assessing authentication, authorization, data handling, encryption, logging, and multi-tenancy considerations * Review third-party and supply chain risk — dependencies, integrations, AI/ML components, and vendor security posture — and define conditions for safe use * Produce clear, risk-based assessments and recommendations (approve, approve-with-conditions, or reject) for engineering and security leadership * Partner with vendor risk and compliance functions to align product reviews with SOC 2 and broader control requirements Cloud & Pipeline Security * Implement policy-as-code guardrails and infrastructure-as-code security controls across Azure/M365 cloud environments * Drive cloud posture improvements — configuration hardening, CIS benchmark alignment, WAF, and network segmentation * Establish supply chain security controls including dependency governance and code signing What We're Looking For Required * 5+ years of experience in Application Security, DevSecOps, or a similar role * Demonstrated experience maturing an engineering organization through Secure SDLC adoption — not just deploying tools * Hands-on AppSec and DevSecOps background: SAST/DAST/SCA, CI/CD pipeline security, secrets management * Strong product and technology security review experience — ability to assess a new platform or tool and articulate concrete risks and mitigations * Experience with CI/CD and source control tooling (Azure DevOps, Bitbucket, or equivalents) * Familiarity with secure development frameworks (NIST SSDF, OWASP SAMM/ASVS, BSIMM) * Cloud security experience in AWS and/or Azure * Strong collaboration and communication skills — able to coach developers and present risk to both technical and executive audiences * +90% English proficiency (written and spoken, minimum B2 level) ## Additional Information Preferred * Experience in a SOC 2 and/or ISO 27001 environment * Threat modeling experience * Exposure to AI/ML security and governance considerations * Relevant certifications: CSSLP, GWAPT, CISSP, or cloud security certifications", "summaryDescription" : "Senior Security Analyst- Application Security & DevSecOps at Software Mind. Skills: Application Security, DevSecOps, Secure SDLC, Cloud Security. Partner with development teams. Embed secure coding practices", "postedDate" : "2026-06-15T21:23:28.000", "createdAt" : "2026-06-16T03:35:05.388", "lastUpdated" : "2026-06-16T14:18:28.225", "ingestTimestamp" : "2026-06-16T03:35:05.388", "mongoId" : "6a3098d2f292fd229c0e6896", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Secure coding", "Threat modeling", "Policy-as-code", "Infrastructure-as-code", "Configuration hardening", "Network segmentation", "Code signing", "Application Security", "DevSecOps", "Secure SDLC", "Cloud Security", "Risk assessment", "System design", "Architecture review", "Vendor risk management", "Compliance alignment", "Roadmap planning", "Cloud-native architecture", "Supply chain risk", "NIST SSDF", "OWASP SAMM", "OWASP ASVS", "BSIMM", "CIS benchmarks", "SOC 2", "ISO 27001", "AI/ML security", "CSSLP", "GWAPT", "CISSP", "Cloud security certifications", "Azure DevOps", "Bitbucket", "SAST tools", "DAST tools", "SCA tools", "Secrets scanning" ], "skillCount" : 37, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a3089aaf292fd229c094820", "title" : "Senior Security Analyst- Application Security & DevSecOps", "company" : "Software Mind", "industry" : "Information Technology And Services", "salary" : { "min" : 2.85E7, "max" : 4.25E7, "currency" : "CRC", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Analyst in San José, Costa Rica, adjusted for the technology industry and senior experience level." }, "location" : "San José, San José Province, CR", "locations" : [ "San José", "San José Province", "CR" ], "certifications" : [ "CSSLP", "GWAPT", "CISSP", "Cloud security certifications" ], "timestamp" : "2026-06-16T11:44:59.994", "fingerprint" : "4c5dac592989d57061d87c6ddac65517b5402d56d455db92a6350bb043974590", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/SoftwareMind/744000132287444--8pp-senior-security-analyst-application-security-devsecops", "externalId" : "744000132287444", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San José", "state" : "San José Province", "country" : "Costa Rica", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "9.9327707,-84.0796144" } ], "locationText" : "San José, San José Province, Costa Rica", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "SAST, DAST, SCA, CI/CD, Azure DevOps, Bitbucket, AWS, Azure, M365, WAF", "professionalSkills" : [ "Risk assessment", "System design", "Architecture review", "Vendor security posture" ], "hardSkillsList" : [ "Secure coding practices", "Threat modeling", "Policy-as-code", "Infrastructure-as-code", "Configuration hardening", "CIS benchmark alignment", "Network segmentation", "Dependency governance", "Code signing" ], "hardSkills" : [ { "name" : "Secure coding practices", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Policy-as-code", "level" : "intermediate" }, { "name" : "Infrastructure-as-code", "level" : "intermediate" }, { "name" : "Configuration hardening", "level" : "intermediate" }, { "name" : "CIS benchmark alignment", "level" : "intermediate" }, { "name" : "Network segmentation", "level" : "intermediate" }, { "name" : "Dependency governance", "level" : "intermediate" }, { "name" : "Code signing", "level" : "intermediate" } ], "majorSkills" : "Application Security, DevSecOps, Secure SDLC, Cloud Security", "majorSkillsList" : [ "Application Security", "DevSecOps", "Secure SDLC", "Cloud Security" ], "coreResponsibilities" : "Partner with development teams, Embed secure coding practices, Assess development practices, Identify gaps, Drive maturity roadmap, Lead developer enablement initiatives, Provide secure coding guidance, Conduct threat modeling, Manage security champions program, Integrate SAST, Integrate DAST, Integrate SCA, Integrate secrets scanning, Tune SAST, Tune DAST, Tune SCA, Tune secrets scanning, Deliver fast feedback, Evaluate prospective products, Evaluate platforms, Evaluate SaaS tools, Evaluate developer tooling, Confirm alignment with best practices, Conduct architecture reviews, Conduct design reviews, Assess authentication, Assess authorization, Assess data handling, Assess encryption, Assess logging, Assess multi-tenancy, Review third-party risk, Review supply chain risk, Define conditions for safe use, Produce risk-based assessments, Produce recommendations, Align product reviews, Implement policy-as-code guardrails, Implement IaC security controls, Drive cloud posture improvements, Establish supply chain security controls", "teamCollaboration" : "Partner with development teams; Coach developers; Present risk to technical audiences; Present risk to executive audiences", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Secure SDLC standards; NIST SSDF; OWASP SAMM; OWASP ASVS; BSIMM; Cloud security; Supply chain risk; AI/ML components; Vendor security posture; SOC 2; CIS benchmarks", "domainList" : [ "secure-sdlc-standards", "nist-ssdf", "owasp-samm", "owasp-asvs", "bsimm", "cloud-security", "supply-chain-risk", "ai-ml-components", "vendor-security-posture", "soc-2", "cis-benchmarks" ], "domainSpecificKnowledge" : [ "Secure SDLC standards", "NIST SSDF", "OWASP SAMM", "OWASP ASVS", "BSIMM", "Cloud security", "Supply chain risk", "AI/ML components", "Vendor security posture", "SOC 2", "CIS benchmarks" ], "toolProficiency" : [ "Azure DevOps", "Bitbucket", "SAST tools", "DAST tools", "SCA tools", "Secrets scanning" ], "communicationSkills" : "Risk presentation", "problemSolvingSkills" : "Risk assessment; Root cause analysis", "outcomesObjectives" : "Drive phased maturity roadmap; Build durable capability", "qualificationsBasic" : "5+ years of experience in Application Security, 5+ years of experience in DevSecOps, Hands-on AppSec background, Hands-on DevSecOps background, SAST/DAST/SCA experience, CI/CD pipeline security experience, Secrets management experience, Product security review experience, Technology security review experience, Experience with CI/CD tooling, Experience with source control tooling, Cloud security experience in AWS, Cloud security experience in Azure, +90% English proficiency", "qualificationsPreferred" : "Experience in a SOC 2 environment, Experience in a ISO 27001 environment, Threat modeling experience, AI/ML security experience, AI/ML governance experience", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "We are Software Mind, an awesome team of engineers who are ready to ramp up any top-notch company’s projects! Our aim? To always be one step ahead. Become part of a multicultural company in constant growth with an excellent work environment certified by Great Place To Work! Overview Software Mind is seeking qualified candidates to fill the role of Senior Security Analyst- Application Security & DevSecOps In addition to a competitive salary rate and a positive work environment, we are committed to delivering high-quality technology solutions, we also offer: * Flexible schedules * An authentic work-life balance * Payment in US Dollars Senior Security Analyst – Application Security & DevSecOps About the Role We are seeking a Senior Security Analyst with a strong background in Application Security and DevSecOps , focused on embedding security throughout the software development lifecycle. This is not a traditional SecOps monitoring role — the ideal candidate is someone who partners closely with engineering teams, drives security program maturity, and can assess technology risk at both a technical and strategic level. ## Qualifications Key Responsibilities SSDLC Maturity & Developer Enablement * Partner with development teams to embed secure coding practices throughout the SDLC, shifting security from a final gate to a shared, integrated responsibility * Assess current development practices against Secure SDLC standards, identify gaps, and drive a phased maturity roadmap with measurable milestones * Lead developer enablement initiatives — secure coding guidance, threat modeling, and a security champions program — that build durable capability within engineering teams * Integrate and tune SAST, DAST, SCA, and secrets scanning in CI/CD pipelines (Azure DevOps, Bitbucket) to deliver fast, in-workflow feedback with minimal friction Product & Technology Security Review * Evaluate prospective products, platforms, SaaS tools, and developer tooling to confirm alignment with security best practices before adoption * Conduct architecture and design reviews, assessing authentication, authorization, data handling, encryption, logging, and multi-tenancy considerations * Review third-party and supply chain risk — dependencies, integrations, AI/ML components, and vendor security posture — and define conditions for safe use * Produce clear, risk-based assessments and recommendations (approve, approve-with-conditions, or reject) for engineering and security leadership * Partner with vendor risk and compliance functions to align product reviews with SOC 2 and broader control requirements Cloud & Pipeline Security * Implement policy-as-code guardrails and infrastructure-as-code security controls across Azure/M365 cloud environments * Drive cloud posture improvements — configuration hardening, CIS benchmark alignment, WAF, and network segmentation * Establish supply chain security controls including dependency governance and code signing What We're Looking For Required * 5+ years of experience in Application Security, DevSecOps, or a similar role * Demonstrated experience maturing an engineering organization through Secure SDLC adoption — not just deploying tools * Hands-on AppSec and DevSecOps background: SAST/DAST/SCA, CI/CD pipeline security, secrets management * Strong product and technology security review experience — ability to assess a new platform or tool and articulate concrete risks and mitigations * Experience with CI/CD and source control tooling (Azure DevOps, Bitbucket, or equivalents) * Familiarity with secure development frameworks (NIST SSDF, OWASP SAMM/ASVS, BSIMM) * Cloud security experience in AWS and/or Azure * Strong collaboration and communication skills — able to coach developers and present risk to both technical and executive audiences * +90% English proficiency (written and spoken, minimum B2 level) ## Additional Information Preferred * Experience in a SOC 2 and/or ISO 27001 environment * Threat modeling experience * Exposure to AI/ML security and governance considerations * Relevant certifications: CSSLP, GWAPT, CISSP, or cloud security certifications", "summaryDescription" : "Senior Security Analyst- Application Security & DevSecOps at Software Mind. Skills: Application Security, DevSecOps, Secure SDLC, Cloud Security. Partner with development teams. Embed secure coding practices", "postedDate" : "2026-06-15T21:23:28.000", "createdAt" : "2026-06-16T01:41:40.834", "lastUpdated" : "2026-06-16T11:44:59.994", "ingestTimestamp" : "2026-06-16T01:41:40.834", "mongoId" : "6a3089aaf292fd229c094820", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Secure coding practices", "Threat modeling", "Policy-as-code", "Infrastructure-as-code", "Configuration hardening", "CIS benchmark alignment", "Network segmentation", "Dependency governance", "Code signing", "Application Security", "DevSecOps", "Secure SDLC", "Cloud Security", "Risk assessment", "System design", "Architecture review", "Vendor security posture", "Roadmap planning", "Secure SDLC standards", "NIST SSDF", "OWASP SAMM", "OWASP ASVS", "BSIMM", "Cloud security", "Supply chain risk", "AI/ML components", "SOC 2", "CIS benchmarks", "CSSLP", "GWAPT", "CISSP", "Cloud security certifications", "Azure DevOps", "Bitbucket", "SAST tools", "DAST tools", "SCA tools", "Secrets scanning" ], "skillCount" : 38, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c6b2d74d8ee00a0910932", "title" : "Information Security Officer", "company" : "Moonfare", "location" : "Berlin, Germany", "locations" : [ "Berlin", "Germany" ], "certifications" : [ "CISM", "CISA", "ISO 27001 Lead Auditor", "ISO 27001 Implementer", "GSLC", "GISP" ], "timestamp" : "2026-06-15T06:56:57.349", "fingerprint" : "558b46adf9ac516ab72e0922992095dc5cef62ec25cd21960077daf51d876952", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.moonfare.com/open-position/?gh_jid=7693276003", "externalId" : "7693276003", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Berlin", "country" : "Germany", "continent" : "eu", "source" : "llm", "workMode" : "hybrid" } ], "locationText" : "Berlin, Germany", "employmentType" : "FULL_TIME", "experienceMinYears" : 3, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Information Security", "professionalSkills" : [ "Finance or FinTech industry in the EU, specifically in the DACH region." ], "hardSkillsList" : [ "BaFin requirements", "DORA", "NIS2", "ISO 27001", "CISM", "CISA", "ISO 27001 Lead Auditor", "ISO 27001 Implementer", "GSLC", "GISP" ], "softSkillsList" : [ "Client-Centric Focus, Commitment to Excellence, Win together, Growth and Merit" ], "hardSkills" : [ { "name" : "BaFin requirements", "level" : "intermediate" }, { "name" : "DORA", "level" : "intermediate" }, { "name" : "NIS2", "level" : "intermediate" }, { "name" : "ISO 27001", "level" : "intermediate" }, { "name" : "CISM", "level" : "intermediate" }, { "name" : "CISA", "level" : "intermediate" }, { "name" : "ISO 27001 Lead Auditor", "level" : "intermediate" }, { "name" : "ISO 27001 Implementer", "level" : "intermediate" }, { "name" : "GSLC", "level" : "intermediate" }, { "name" : "GISP", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Client-Centric Focus, Commitment to Excellence, Win together, Growth and Merit" } ], "majorSkills" : "Information Security Management System (ISMS), risk assessments, security audits, BaFin requirements, ISO 27001", "majorSkillsList" : [ "Information Security Management System (ISMS), risk assessments, security audits, BaFin requirements, ISO 27001" ], "coreResponsibilities" : "Lead all information security and relevant Governance, Risk, and Compliance (GRC) initiatives. Ensure information security posture is robust, compliant with German and EU regulations, and aligned with business goals. Develop, implement, and maintain the Information Security Management System (ISMS) in accordance with ISO 27001. Conduct risk assessments and monitor risk mitigation activities. Oversee internal and external security audits. Promote continuous employee awareness of Information Security and Data Protection topics.", "teamCollaboration" : "Work closely with various departments to embed security into the fabric of our organization.", "projectManagementSkills" : [ "Lead the company's efforts to achieve and maintain compliance" ], "toolProficiency" : [ "Moonfare careers website" ], "communicationSkills" : "English; German", "documentationSkills" : "Information Security Management System (ISMS)", "continuousLearning" : "We support your development with an individual growth budget of €1,500 or 2% of your base salary (whichever is higher).", "problemSolvingSkills" : "risk mitigation", "specialRequirements" : "Only accept applications from those eligible to live and work in Berlin. Hybrid role with office attendance required 4 days/week. Do not accept applications sent by email.", "outcomesObjectives" : "Empowered to bring ideas, make decisions, and see your work directly contribute to Moonfare's success.", "qualificationsBasic" : "Proven experience in a similar Information Security role. Deep understanding and practical experience with German security regulations and BaFin requirements. Expert knowledge of information security frameworks and regulations such as ISO 27001, DORA, and NIS2. Experience in developing, maintaining, and implementing an ISMS, leading to successful certification. Excellent communication skills with full professional proficiency in English.", "qualificationsPreferred" : "A background in Software Engineering or Computer Science is beneficial. Working proficiency in German is desirable. Industry-recognized certifications such as CISM, CISA, ISO 27001 Lead Auditor/Implementer, or SANS/GIAC certifications (e.g. GSLC, GISP) are highly desirable.", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Join the team rewriting the rules in private markets. Moonfare delivers what few others can: the highly sought-after funds and hidden-gem investments that go beyond what most private banks offer. Every opportunity is subjected to a ruthless vetting process; the bar is unforgivingly high. The result? Institutional-quality portfolios for investors who demand more. Our team combines finance veterans with talent from tech, consulting, law and industries you’d never expect. Headquartered in Berlin, we operate from eight offices across Europe, the US and Asia. If you're ready to build what's next in private markets, let's talk. Information Security Officer (m/f/d) As an Information Security Officer, you will be a central figure in our journey to become a BaFin-regulated entity. As part of the 2nd line of defence, you will lead all information security and relevant Governance, Risk, and Compliance (GRC) initiatives. Your primary objective will be to ensure our information security posture is robust, compliant with German and EU regulations, and aligned with our business goals. In this role you will work closely with various departments to embed security into the fabric of our organization. Your Mission: Lead the company's efforts to achieve and maintain compliance with key information security regulations, including BaFin requirements, DORA, and NIS2. Develop, implement, and maintain the Information Security Management System (ISMS) in accordance with ISO 27001 and other relevant standards. Conduct comprehensive risk assessments and work with control functions to monitor and report on risk mitigation activities. Provide expert guidance to internal teams on information security policies, procedures, and best practices. Oversee internal and external security audits to ensure we meet our compliance goals. Act as the primary point of contact for all information security matters within the licensed entity. Promote continuous employee awareness of Information Security and Data Protection topics. The next Moonfarian: Proven experience in a similar Information Security role, preferably within the finance or FinTech industry in the EU, with specific experience in the DACH region. Deep understanding and practical experience with German security regulations and BaFin requirements. Expert knowledge of information security frameworks and regulations such as ISO 27001, DORA, and NIS2. Experience in developing, maintaining, and implementing an ISMS, leading to successful certification (e.g., ISO 27001). A background in Software Engineering or Computer Science is beneficial. Industry-recognized certifications such as CISM, CISA, ISO 27001 Lead Auditor/Implementer, or SANS/GIAC certifications (e. g. GSLC, GISP) are highly desirable. Excellent communication skills with full professional proficiency in English, working proficiency in German is desirable. If you feel you do not meet all of the requirements, we still encourage you to apply! Please Note: We can only accept applications from those eligible to live and work in Berlin. This is a hybrid role with office attendance required 4 days/week. Please note that we do not accept applications sent by email. You should submit your application directly through our careers website. Invest in yourself: Ownership and Impact: You are empowered to bring ideas, make decisions, and see your work directly contribute to Moonfare's success. Transparent Environment: We believe in open communication. You will receive regular updates on company strategy, performance against our KPIs, and key business decisions. Personal Growth: We support your development with an individual growth budget of €1,500 or 2% of your base salary (whichever is higher). Invest in Your Future: We support your long-term financial goals with a company pension scheme, providing a 20% employer contribution. Relax and Recharge: You start with 25 vacation days and you’ll receive one additional day for each year of tenure, up to a maximum of 30 days. Daily Lunch: Enjoy a free lunch every day that you are in the Berlin office, with a weekly changing menu that includes salads, curries, pastas, and a variety of vegan and vegetarian options. Subsidised Public Transport: We support your commute with a monthly subsidy for the Deutschland job ticket, making your travel easier and more affordable. Fitness and Wellbeing: Stay active with a subsidised Urban Sports Club membership, giving you flexible access to a wide variety of sports and wellness activities across Germany. A Culture of Excellence: Join a team of ambitious, smart, and committed professionals who are passionate about revolutionising private market investing. Our Values: Client-Centric Focus: Our clients come first, Moonfare comes second, and we prioritise ourselves third. Putting clients first means creating value for them is essential. Placing Moonfare second signifies that our individual professional future at Moonfare depends on the company's commercial success. Prioritising ourselves third reflects our humility in putting clients and Moonfare before personal interests. Commitment to Excellence: We pursue excellence and honor our promises. We hold ourselves to the highest standards, taking responsibility for our failures, and celebrating our successes. We commit to deadlines and stick to them and we learn from our mistakes. Win together: We are here to win and to celebrate our collective achievements. We are mission-focused and think and act like owners. We exemplify the attitude we expect and each of us commits to do what it takes to succeed. Growth and Merit: We foster personal growth but each of us earns our place as a Moonfarian through merit. We hire, retain, and develop exceptional people and invest in empowering them to excel. We must all earn our place at the table every day. We understand the important role that diversity plays in our success. Different backgrounds, experiences and ideas push us further and raise the bar. We’re committed to developing an inclusive and safe culture where everyone—regardless of colour, race, religion, sex, origin, sexuality, disability, marital status, citizenship or gender identity—knows that they are an integral part of the team and can bring their full potential to their work.", "summaryDescription" : "Information Security Officer at Moonfare. Skills: Information Security Management System (ISMS), risk assessments, security audits, BaFin requirements, ISO 27001. Lead all information security and relevant Governance, Risk, and Compliance (GRC) initiatives. Ensure information security posture is robust, compliant with German and EU regulations, and aligned with business goals. Develop, implement, and maintain the Information Security Management System (ISMS) in accordance with ISO 27001. Conduct", "postedDate" : "2026-06-14T19:15:48.901", "createdAt" : "2026-06-14T19:15:48.901", "lastUpdated" : "2026-06-15T06:56:57.349", "ingestTimestamp" : "2026-06-14T19:15:48.901", "mongoId" : "6a2c6b2d74d8ee00a0910932", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "hasSalary" : false, "allSkills" : [ "BaFin requirements", "DORA", "NIS2", "ISO 27001", "CISM", "CISA", "ISO 27001 Lead Auditor", "ISO 27001 Implementer", "GSLC", "GISP", "Client-Centric Focus, Commitment to Excellence, Win together, Growth and Merit", "Information Security Management System (ISMS), risk assessments, security audits, BaFin requirements, ISO 27001", "Finance or FinTech industry in the EU, specifically in the DACH region.", "Lead the company's efforts to achieve and maintain compliance", "Moonfare careers website" ], "skillCount" : 15, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305abef292fd229cf5500b", "title" : "Health Information Specialist", "company" : "Datavant", "salary" : { "min" : 58000.0, "max" : 78000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Entry-level Health Information Specialists in Austin, TX, adjusted for company size and industry." }, "location" : "Texas", "locations" : [ "Texas" ], "timestamp" : "2026-06-16T08:01:31.292", "fingerprint" : "833a6d24bfc549fdd6565511685e0f87affae7a6f9abb943c8f915eca57d75ba", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.datavant.com/about/careers/open-roles/job?gh_jid=5138321008", "externalId" : "5138321008", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 0, "experienceMaxYears" : 2, "experienceLevel" : "Entry", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Datavant is the data collaboration platform trusted for healthcare. Guided by our mission to make the world’s health data secure, accessible and actionable, we provide critical data solutions for organizations across the healthcare ecosystem - including providers, health plans, researchers, and life sciences companies. From fulfilling a single patient’s request for their medical records to powering the AI revolution in healthcare, Datavanters are building the future of how data is connected and used to improve health. By joining Datavant today, you’re stepping onto a driven and highly collaborative team that is passionate about creating transformative change in healthcare. This is an entry level position responsible for processing all release of information (ROI), specifically medical record requests, in a timely and efficient manner ensuring accuracy and providing customers with the highest quality product and customer service. Associate must at all times safeguard and protect the patient’s right to privacy by ensuring that only authorized individuals have access to the patient’s medical information and that all releases of information are in compliance with the request, authorization, company policy and HIPAA regulations. Position Highlights - Onsite position in Austin, TX - Full-time, Mo-Fri 8:00 am-4:30pm - Front desk processing medical records requests and customer service duties - Full benefits: PTO, Health, Vision, Dental, 401k savings plan, and tuition assistance - Tremendous growth opportunities both locally and nationwide What We’re Looking For - Strong customer service and clerical skills - Proficient in Microsoft Office, including Word and Excel - Comfortable working in a high-volume production environment - Medical office experience preferred - Willingness to learn and grow within Datavant You will: Receive and process requests for patient health information in accordance with Company and Facility policies and procedures. Maintain confidentiality and security with all privileged information. Maintain working knowledge of Company and facility software. Adhere to the Company's and Customer facilities Code of Conduct and policies. Inform manager of work, site difficulties, and/or fluctuating volumes. Assist with additional work duties or responsibilities as evident or required. Consistent application of medical privacy regulations to guard against unauthorized disclosure. Responsible for managing patient health records. Responsible for safeguarding patient records and ensuring compliance with HIPAA standards. Prepares new patient charts, gathering documents and information from paper sources and/or electronic health record. Ensures medical records are assembled in standard order and are accurate and complete. Creates digital images of paperwork to be stored in the electronic medical record. Responds to requests for patient records, both within the facility and by external sources, retrieving them and transmitting them appropriately. Answering of inbound/outbound calls. May assist with patient walk-ins. May assist with administrative duties such as handling faxes, opening mail, and data entry. Must meet productivity expectations as outlined at specific site. May schedules pick-ups. Other duties as assigned. What you will bring to the table: High School Diploma or GED. Ability to commute between locations as needed. Able to work overtime during peak seasons when required. Basic computer proficiency. Comfortable utilizing phones, fax machine, printers, and other general office equipment on a regular basis. Professional verbal and written communication skills in the English language. Detail and quality oriented as it relates to accurate and compliant information for medical records. Strong data entry skills. Must be able to work with minimum supervision responding to changing priorities and role needs. Ability to organize and manage multiple tasks. Able to respond to requests in a fast-paced environment. Bonus points if: Experience in a healthcare environment. Previous production/metric-based work experience. In-person customer service experience. Ability to build relationships with on-site clients and customers. Comfortable bringing new ideas, process improvement suggestions, and feedback to internal stakeholders. To ensure the safety of patients and staff, many of our clients require post-offer health screenings and proof and/or completion of various vaccinations such as the flu shot, Tdap, COVID-19, etc. Any requests to be exempted from these requirements will be reviewed by Datavant Human Resources and determined on a case-by-case basis. Depending on the state in which you will be working, exemptions may be available on the basis of disability, medical contraindications to the vaccine or any of its components, pregnancy or pregnancy-related medical conditions, and/or religion. This job is not eligible for employment sponsorship. Datavant is committed to a work environment free from job discrimination. We are proud to be an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status. To learn more about our commitment, please review our EEO Commitment Statement here. Know Your Rights, explore the resources available through the EEOC for more information regarding your legal rights and protections. In addition, Datavant does not and will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay. At the end of this application, you will find a set of voluntary demographic questions. If you choose to respond, your answers will be anonymous and will help us identify areas for improvement in our recruitment process. (We can only see aggregate responses, not individual ones. In fact, we aren’t even able to see whether you’ve responded.) Responding is entirely optional and will not affect your application or hiring process in any way. Datavant is committed to working with and providing reasonable accommodations to individuals with physical and mental disabilities. If you need an accommodation while seeking employment, please request it here, by selecting the ‘Interview Accommodation Request’ category. You will need your requisition ID when submitting your request, you can find instructions for locating it here. Requests for reasonable accommodations will be reviewed on a case-by-case basis. For more information about how we collect and use your data, please review our Privacy Policy.", "summaryDescription" : "Health Information Specialist at Datavant", "postedDate" : "2026-06-15T23:27:52.056", "createdAt" : "2026-06-15T23:27:52.056", "lastUpdated" : "2026-06-16T08:01:31.292", "ingestTimestamp" : "2026-06-15T23:27:52.056", "mongoId" : "6a305abef292fd229cf5500b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 58000, "salaryAnnualMax" : 78000, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Entry", "dataQualityScore" : 0.8888889, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Healthcare", "llmIndustryConfidence" : 0.95 }, { "id" : "6a210e7274d8ee00a0af7913", "title" : "Principal Application Security Consultant, National Security", "company" : "Mandiant", "industry" : "Consulting", "salary" : { "min" : 175000.0, "max" : 250000.0, "currency" : "CAD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Principal Application Security Consultant in Ottawa, Canada, adjusted for lead seniority and the cybersecurity industry." }, "location" : "[Ottawa, ON, Canada, [Ottawa, ON, Canada], Ottawa, null, ON, CA]", "locations" : [ "[Ottawa, ON, Canada, [Ottawa, ON, Canada], Ottawa, null, ON, CA]" ], "timestamp" : "2026-06-16T11:51:17.560", "fingerprint" : "b31d7b4d5eeba8bcc207bd5235b81f95d25fb7cfc953a7adaf5cfbdd36a93c97", "source" : "google", "language" : "en", "externalId" : "93794131418981062", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Ottawa", "state" : "Ontario", "country" : "Canada", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "45.4208777,-75.6901106" } ], "locationText" : "Ottawa, Ontario, Canada", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "summaryDescription" : "Principal Application Security Consultant, National Security at Mandiant", "postedDate" : "2026-06-16T01:50:17.615", "createdAt" : "2026-06-16T01:50:17.615", "lastUpdated" : "2026-06-16T11:51:17.560", "ingestTimestamp" : "2026-06-16T01:50:17.615", "mongoId" : "6a210e7274d8ee00a0af7913", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "150k-200k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.6666667, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.95 }, { "id" : "6a309695f292fd229c0d50f8", "title" : "Application Support Specialist (m/w/d)", "company" : "wheel-IT AG", "industry" : "Technology", "salary" : { "min" : 52000.0, "max" : 73000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Application Support Specialist in Walldorf, Germany, adjusted for the Technology industry and company size." }, "location" : "Walldorf", "locations" : [ "Walldorf", "Germany" ], "timestamp" : "2026-06-16T12:28:44.004", "fingerprint" : "01e77a955a8e20964ad58cd98f13c4a72e98fa24f93c7c607fb3a5044d1d57b4", "source" : "join_com", "language" : "de", "applyUrl" : "https://join.com/companies/dailytalents/16274446-application-support-specialist-m-w-d-oder-wheel-it-ag-oder-walldorf", "externalId" : "16214814", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Walldorf", "country" : "Germany", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "49.3032669,8.6432056" } ], "locationText" : "Walldorf, Germany", "summaryDescription" : "Application Support Specialist (m/w/d) at wheel-IT AG", "createdAt" : "2026-06-16T02:50:53.217", "lastUpdated" : "2026-06-16T12:28:44.004", "ingestTimestamp" : "2026-06-16T02:50:53.217", "mongoId" : "6a309695f292fd229c0d50f8", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.44444445, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.9 }, { "id" : "69ce5e3b9bc74574cb677960", "title" : "Information Security Consultant", "company" : "Mercedes-Benz Group China Ltd.", "industry" : "Technology", "salary" : { "min" : 450000.0, "max" : 750000.0, "currency" : "CNY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Information Security Consultant in Beijing, China, adjusted for senior seniority and the technology industry." }, "location" : "China (Mainland)-Beijing-Beijing", "locations" : [ "China (Mainland)-Beijing-Beijing", "Daimler Tower 8, Wangjing Street Chaoyang District, , Beijing" ], "certifications" : [ "CISA", "CISSP" ], "timestamp" : "2026-06-16T00:40:11.634", "fingerprint" : "a292e8ca2ab8e33feb17fa83068d132ff45387a45e2d7f1bce4df6ff3bd255ee", "source" : "taleo", "language" : "en", "applyUrl" : "https://daimler.taleo.net/careersection/ex/jobdetail.ftl?job=873158", "externalId" : "873158", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Beijing", "state" : "Beijing", "country" : "China", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "39.9011168,116.4210134" } ], "locationText" : "Beijing, Beijing, China", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Cloud Security, Network, Web Technologies, Database, Operating Systems", "professionalSkills" : [ "Risk Management", "Compliance", "Security Standards", "Data Protection", "IT Operations" ], "hardSkillsList" : [ "Security governance", "Security operations" ], "hardSkills" : [ { "name" : "Security governance", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" } ], "majorSkills" : "Security governance, Security operations, Risk Management, Compliance", "majorSkillsList" : [ "Security governance", "Security operations", "Risk Management", "Compliance" ], "domainKnowledge" : "Information Security; IT Assets; ISO 27001; NIST; ITIL", "domainList" : [ "information-security", "it-assets", "iso-27001", "nist", "itil" ], "domainSpecificKnowledge" : [ "Information Security", "IT Assets", "ISO 27001", "NIST", "ITIL" ], "qualificationsBasic" : "Experience with security frameworks, Experience with NIST, Experience with ISO 27001, CISA certification, CISSP certification, 5+ years experience", "remoteFriendly" : false, "rawDescription" : "Objective of job Ensure that the organization and IT assets follow the security standard and governance. You monitor and identify vulnerabilities in systems, threats and issues, document it and track the remediation. Develop and implement cloud security strategies. -Responsible for the governance of compliance with policies and processes to protect the confidentiality, integrity and availability of IT assets (information, data and IT services) within the organization. -Responsible for organizational and technical controls -Support in risk assessment and analysis and monitoring the implementation of risk control/minimization measures -Identification of possible vulnerabilities in services and applications. Ordering and monitoring of penetration and assessment services. Document the results and ensure mitigation/minimization -Assessing threats and developing appropriate security measures and assessing their effectiveness -Assist businesspartners in information classification -Coordination for security incidents and participation in incident response activities, including mitigation and remediation strategies [3] -Take care of actuality of disaster or application recovery plans -Develop and conduct target group orientated awareness campaigns -Define security controls derived from policies Job designation •Developing and Maintaining Security Policies and Standards Responsible for creating, updating, and enforcing information security policies, standards, and procedures that align with legal, regulatory, and contractual requirements. This includes ensuring that policies are comprehensive, clearly communicated, and regularly reviewed. •Ensuring Regulatory Compliance Ensure the organization complies with relevant laws, regulations, and industry standards such as ISO 27001, NIST, and others. This involves understanding the specific requirements of each regulation and implementing controls to meet them. •Security Audits and Assessments -Responsible for planning and conducting internal security audits to assess the effectiveness of security controls and identify areas for improvement. -Coordinate external audits and assessments, ensuring the organization is prepared and responsive to auditor requests. •Risk Management and Governance -Identifying, assessing, and managing information security risks across the organization. This includes conducting regular risk assessments, developing risk mitigation strategies, and monitoring the effectiveness of controls. -Contribute to the development of a strong governance framework for information security. •Compliance Reporting Responsible for preparing and submitting reports to management and regulatory bodies on the organization's security posture and compliance efforts. This includes tracking key security metrics, documenting compliance activities, and communicating security risks and issues to relevant stakeholders. •Policy Enforcement Responsible for ensuring that security policies are consistently enforced across the organization. This includes monitoring compliance with policies, investigating security violations, and taking corrective action when necessary •Supplier Risk Management Assesses the security practices of third-party suppliers and service providers to ensure they meet the organization's security requirements. This includes reviewing vendor contracts, conducting security assessments, and monitoring vendor compliance with security policies •Collaboration and Communication -Collaborating with other IT teams, developers, and business stakeholders. -Providing security training and awareness to employees. -Communicating security risks and recommendations to management. Qualification •Professional Skills: -Deep understanding and experience on: IT Security, Risk Management, Compliance & Security Standards, Knowledge in all relevant Operating Systems, Data Protection -Knowledge of: Cloud Security, Network, Web Technologies, Database, IT operations (ITIL) •Experience with security frameworks, such as NIST, and ISO 27001. •Relevant certifications, CISA, CISSP •> 5 years experience with focus in areas of security governance and security operations Education: Bachelor's degree and above in Computer Science encompassing Information Security Mercedes-Benz Group China Ltd.", "summaryDescription" : "Information Security Consultant at Mercedes-Benz Group China Ltd.. Skills: Security governance, Security operations, Risk Management, Compliance", "createdAt" : "2026-06-14T18:46:29.111", "lastUpdated" : "2026-06-16T00:40:11.634", "ingestTimestamp" : "2026-06-14T18:46:29.111", "mongoId" : "69ce5e3b9bc74574cb677960", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Security governance", "Security operations", "Risk Management", "Compliance", "Security Standards", "Data Protection", "IT Operations", "Information Security", "IT Assets", "ISO 27001", "NIST", "ITIL", "CISA", "CISSP" ], "skillCount" : 14, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c68f774d8ee00a0905732", "title" : "Application Security Engineer", "company" : "Opal Security", "industry" : "Engineering", "salary" : { "min" : 155000.0, "max" : 210000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Application Security Engineer in San Francisco, adjusted for mid-seniority and technology industry." }, "location" : "San Francisco", "locations" : [ "San Francisco" ], "timestamp" : "2026-06-16T04:17:34.353", "fingerprint" : "a8435b07c820b5d36481804b12332ad4349a0ff3519ba32e6d6e27d1a6947f36", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/opal/d2beff94-0445-4a4b-af58-30ef33eea2c8/application", "externalId" : "d2beff94-0445-4a4b-af58-30ef33eea2c8", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 4, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Go, TypeScript, AWS, Kubernetes, Docker, IAM, EKS, KMS, OAuth 2.0, OIDC, SAML", "professionalSkills" : [ "Threat modeling", "Design reviews", "Code reviews", "Incident response", "Cloud hardening", "Detection and response", "Security roadmap", "Secure coding", "Security architecture" ], "hardSkillsList" : [ "SAST", "DAST", "SCA", "Encryption services", "Authz enforcement", "Authn flows", "Token management", "Session management", "MFA", "SSO", "Least-privilege enforcement", "Detection rules" ], "hardSkills" : [ { "name" : "SAST", "level" : "intermediate" }, { "name" : "DAST", "level" : "intermediate" }, { "name" : "SCA", "level" : "intermediate" }, { "name" : "Encryption services", "level" : "intermediate" }, { "name" : "Authz enforcement", "level" : "intermediate" }, { "name" : "Authn flows", "level" : "intermediate" }, { "name" : "Token management", "level" : "intermediate" }, { "name" : "Session management", "level" : "intermediate" }, { "name" : "MFA", "level" : "intermediate" }, { "name" : "SSO", "level" : "intermediate" }, { "name" : "Least-privilege enforcement", "level" : "intermediate" }, { "name" : "Detection rules", "level" : "intermediate" } ], "majorSkills" : "Application security, Product security, Cloud security, Identity governance", "majorSkillsList" : [ "Application security", "Product security", "Cloud security", "Identity governance" ], "coreResponsibilities" : "Own secure SDLC end-to-end, Run app pentests, Coordinate app pentests, Drive findings to closure, Build SAST/DAST/SCA tooling, Own SAST/DAST/SCA tooling, Triage vulnerabilities, Remediate vulnerabilities, Build security-critical stuff, Maintain security-critical stuff, Own Auth0 integration, Ship production Go, Ship production TypeScript, Harden APIs, Enforce least-privilege, Close vuln classes, Create shared libraries, Investigate security incidents, Contain security incidents, Find root cause, Fix security incidents, Partner on cloud hardening, Level up detection, Level up response, Write detection rules, Improve logging, Improve alerting, Mentor engineers, Set security roadmap, Be security teammate", "teamCollaboration" : "Embedded with engineering; Partner with Infra; Work with engineers; Cross-functional initiatives", "domainKnowledge" : "Identity governance; AI era; Access management; Enterprise software; Cloud security; Application security; Product security; Auth0 integration; AWS IAM; EKS; KMS; Network segmentation; OAuth 2.0; OIDC; SAML; Containerized environments", "domainList" : [ "identity-governance", "ai-era", "access-management", "enterprise-software", "cloud-security", "application-security", "product-security", "auth0-integration", "aws-iam", "eks", "kms", "network-segmentation", "oauth-2-0", "oidc", "saml", "containerized-environments" ], "domainSpecificKnowledge" : [ "Identity governance", "AI era", "Access management", "Enterprise software", "Cloud security", "Application security", "Product security", "Auth0 integration", "AWS IAM", "EKS", "KMS", "Network segmentation", "OAuth 2.0", "OIDC", "SAML", "Containerized environments" ], "toolProficiency" : [ "CI/CD" ], "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "4+ years in application security, Write production code, Know auth cold, Comfortable in AWS, Comfortable in containerized environments", "qualificationsPreferred" : "Familiarity with Go, Familiarity with TypeScript, Familiarity with React, Familiarity with PostgreSQL, Familiarity with Redis, Familiarity with GraphQL, Led complex security initiatives, Run external pentests, Thrive on ownership and ambiguity", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "About Opal Security: At Opal, we’re building modern identity governance for the AI era—intelligent access management that empowers enterprises to move fast while staying secure. Our mission is to bring clarity, control, and confidence to complex enterprise environments, helping teams govern access without slowing down innovation. The Role: Most security engineers spend their careers bolting locks onto doors that were already built. This is not that job. We're hiring an Application Security Engineer to own security across Opal's product and platform — and yes, own means what it sounds like. You'd be our dedicated security engineer, embedded directly with engineering, writing production code in Go and TypeScript, and building security into the product while it's still being designed. You’ll work closely with a team of engineers that genuinely care about getting this right, and a product that happens to be one of the most security-critical tools in enterprise software. Oh, and one more thing: Opal is a security company. We sell access control to organizations that take security seriously. That means your work isn't a cost center — it's core to what we do. This role lives on the Platform team and partners closely with Infrastructure Engineering on cloud security. It is explicitly scoped to application and product security — enterprise IT, compliance, and vendor risk management are handled separately. What You’ll Do: Secure Development Lifecycle - - Own the secure SDLC end-to-end: threat modeling, design reviews, code reviews — you set the bar - Run and coordinate app pentests (internal and external) and drive findings to closure - Build and own SAST/DAST/SCA tooling wired into CI/CD so security ships with the code - Triage and remediate vulnerabilities from every angle — bug bounty, internal scans, the works Software Security Engineering - - Build and maintain the security-critical stuff: encryption services, authz enforcement, authn flows - Own the Auth0 ↔ Opal integration — tokens, sessions, MFA, SSO (SAML, OIDC, OAuth 2.0) - Ship production Go and TypeScript to harden APIs, enforce least-privilege, and close vuln classes for good - Create shared libraries that make the secure path the easy path for every product engineer Incident Response & Cloud Security - - Be first on the scene for security incidents: investigate, contain, find the root cause, fix it - Partner with Infra on cloud hardening — AWS IAM, EKS, KMS, network segmentation - Level up detection and response by writing detection rules and improving logging and alerting Security Culture - - Mentor engineers on secure coding, common vuln patterns, and security architecture — you make the org smarter - Help set the security roadmap by grounding it in real product risk - Be the security teammate engineers want to work with — a collaborator, not a bottleneck You Might Be a Fit If You: - Have 4+ years in application security or software security engineering - Actually write production code — findings reports are the floor, not the ceiling - Know auth cold: OAuth 2.0, OIDC, SAML, session management, token lifecycle - Are comfortable in AWS and containerized environments (Kubernetes, Docker) - Bonus points for familiarity with our stack: Go, TypeScript, React, PostgreSQL, Redis, GraphQL - Have led complex, cross-functional security initiatives from kickoff to completion - Have run or participated in external pentests and seen findings through remediation - Thrive on ownership and ambiguity — you'd rather write the playbook than wait for one", "summaryDescription" : "Application Security Engineer at Opal Security. Skills: Application security, Product security, Cloud security, Identity governance. Own secure SDLC end-to-end. Run app pentests", "createdAt" : "2026-06-14T19:19:47.190", "lastUpdated" : "2026-06-16T04:17:34.353", "ingestTimestamp" : "2026-06-14T19:19:47.190", "mongoId" : "6a2c68f774d8ee00a0905732", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 155000, "salaryAnnualMax" : 210000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "SAST", "DAST", "SCA", "Encryption services", "Authz enforcement", "Authn flows", "Token management", "Session management", "MFA", "SSO", "Least-privilege enforcement", "Detection rules", "Application security", "Product security", "Cloud security", "Identity governance", "Threat modeling", "Design reviews", "Code reviews", "Incident response", "Cloud hardening", "Detection and response", "Security roadmap", "Secure coding", "Security architecture", "AI era", "Access management", "Enterprise software", "Auth0 integration", "AWS IAM", "EKS", "KMS", "Network segmentation", "OAuth 2.0", "OIDC", "SAML", "Containerized environments", "CI/CD" ], "skillCount" : 38, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c7ed874d8ee00a0953dec", "title" : "Sr. Security Engineer - GRC", "company" : "6sense", "industry" : "Technology", "salary" : { "min" : 2200000.0, "max" : 3500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior GRC Security Engineer in Pune, India, adjusted for the technology industry and company size." }, "location" : "Pune, Maharashtra, India", "locations" : [ "Pune", "Maharashtra", "India" ], "certifications" : [ "CISSP", "CISM", "GIAC" ], "timestamp" : "2026-06-15T09:13:54.200", "fingerprint" : "51b6ab45e2da66b612f3cf8f0dda7e35a12130f8e364cccb1d2e2d47bb9bd771", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://boards.greenhouse.io/6sense/jobs/7984436?gh_jid=7984436", "externalId" : "7984436", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Pune", "state" : "Maharashtra", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "18.5213738,73.8545071" } ], "locationText" : "Pune, Maharashtra, India", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "GRC, Vulnerability Scanners, SIEM, SOAR, AWS", "professionalSkills" : [ "Risk management", "Security governance", "Control testing", "Remediation planning", "Process improvement" ], "hardSkillsList" : [ "Control testing", "Risk assessment", "Automation development" ], "hardSkills" : [ { "name" : "Control testing", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Automation development", "level" : "intermediate" } ], "majorSkills" : "GRC, Risk management, Security compliance", "majorSkillsList" : [ "GRC", "Risk management", "Security compliance" ], "coreResponsibilities" : "Execute GRC initiatives, Lead audit engagements, Oversee control tests, Execute risk assessments, Communicate results, Develop treatment plans, Test remediation, Design test plans, Improve security control tests, Provide GRC technology administration, Mature security programs, Improve handbook pages, Improve procedures, Improve playbooks, Maintain controlled documents, Design GRC automation, Implement automation tasks, Execute Key Results, Maintain product knowledge, Prepare for 1:1s, Drive remediation, Adhere to deadlines, Adhere to SLAs, Participate in milestones, Execute security project milestones, Develop handbook pages, Develop runbooks, Develop workflows, Develop dashboards, Provide project status updates, Administer GRC technology", "teamCollaboration" : "Cross-functional teams; Second line of defense", "projectManagementSkills" : [ "Roadmap", "Milestones", "OKRs" ], "domainKnowledge" : "ISO 27001; SOC 2; GDPR; PCI; SOX; NIST; Cloud environments", "domainList" : [ "iso-27001", "soc-2", "gdpr", "pci", "sox", "nist", "cloud-environments" ], "domainSpecificKnowledge" : [ "ISO 27001", "SOC 2", "GDPR", "PCI", "SOX", "NIST", "Cloud environments" ], "communicationSkills" : "Communicate results", "documentationSkills" : "Handbook pages; Procedures; Playbooks; Controlled documents; Runbooks; Workflows; Dashboards", "continuousLearning" : "Learning and development initiatives", "problemSolvingSkills" : "Risk assessment; Issue resolution", "outcomesObjectives" : "Support team Objectives (OKRs)", "qualificationsBasic" : "5+ years of experience, 1+ years of experience developing automation, Experience with security tools, Experience with cloud environments, Experience with industry frameworks, Experience with regulations, Experience with standards", "qualificationsPreferred" : "Big 4 experience, Bachelor's degree in a related field, Relevant industry certifications", "rawDescription" : "Our Mission: 6sense's mission is to multiply what matters: growth, retention, and efficiency. We envision a future where companies, teams and people reach their full potential. Our People: People are the heart and soul of 6sense. We serve with passion and purpose. We live by our Being 6sense values of Win as One Team, Stay Curious, Do The Right Thing, Own the Outcome, and Create Belonging. Every 6sensor plays a part in deﬁning the future of our industry-leading technology. 6sense is a place where difference-makers roll up their sleeves, take risks, act with integrity, and measure success by the value we create for our customers. We want 6sense to be the best chapter of your career. Purpose of the Job : As members of 6sense’s Security department, the Governance, Risk and Compliance (GRC) team aligns Security with business objectives while managing risks and meeting industry standards, regulations and contractual obligations. GRC enforces governance, implements risk management strategies, and ensures compliance through operating as the second line of defense. Responsibilities Execute on milestones for end-to-end GRC initiatives in accordance with the Security roadmap Lead internal and external audit engagements Oversee and execute complex control tests, third-party and operational security risk assessments and communicate results across multiple audiences with varying levels of sensitivity Develop issue and risk treatment plans with owners and test remediation for closure Design high-quality test plans and improve security control test activities through peer reviews that provide feedback and guidance to other GRC Engineers Provide GRC technology administration to include user training Mature security governance, training and awareness programs Improve GRC handbook pages, procedures and playbooks and maintain security program controlled documents Design GRC control automation and implement security GRC related automation tasks Execute on quarterly individual Key Results that support team Objectives (OKRs) Performance Measurement : Maintains up-to-date knowledge of 6sense’s product, environment, systems and architecture Actively prepares for weekly 1:1s with Manager and monthly skip levels Drives remediation of security risks and threats Adheres to strict deadlines and SLAs Participates in creation of milestones associated with major security projects Executes on milestones associated with major security projects Develops and maintains up to date handbook pages, runbooks, workflows and dashboards Provides project status update on weekly basis Administers GRC technology Educational and Experience Requirements : 5+ years of experience being part of a GRC or similar team 1+ years of experience developing automation Experience with security tools and cloud environments (e.g., GRC, Vulnerability Scanners, SIEM, SOAR, AWS) Experience with industry frameworks, regulations and standards, such as: ISO 27001, SOC 2, GDPR, PCI, SOX, NIST, etc. Preferred Qualifications : Big 4 (KPMG, Deloitte, PwC, EY) or similar experience Bachelor's degree in a related field Relevant industry certifications, such as CISSP, CISM, or GIAC, are highly desirable Our Benefits: Full-time employees can take advantage of health coverage, paid parental leave, generous paid time-off and holidays, quarterly self-care days off, and stock options. We’ll make sure you have the equipment and support you need to work and connect with your teams, at home or in one of our oﬃces. We have a growth mindset culture that is represented in all that we do, from onboarding through to numerous learning and development initiatives including access to our LinkedIn Learning platform. Employee well-being is also top of mind for us. We host quarterly wellness education sessions to encourage self care and personal growth. From wellness days to ERG-hosted events, we celebrate and energize all 6sense employees and their backgrounds. Equal Opportunity Employer: 6sense is an Equal Employment Opportunity and Affirmative Action Employers. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. If you require reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to jobs@6sense.com. We are aware of recruiting impersonation attempts that are not affiliated with 6sense in any way. All email communications from 6sense will originate from the @6sense.com domain. We will not initially contact you via text message and will never request payments. If you are uncertain whether you have been contacted by an official 6sense employee, reach out to jobs@6sense.com", "summaryDescription" : "Sr. Security Engineer - GRC at 6sense. Skills: GRC, Risk management, Security compliance. Execute GRC initiatives. Lead audit engagements", "postedDate" : "2026-06-14T03:16:59.402", "createdAt" : "2026-06-14T03:16:59.402", "lastUpdated" : "2026-06-15T09:13:54.200", "ingestTimestamp" : "2026-06-14T03:16:59.402", "mongoId" : "6a2c7ed874d8ee00a0953dec", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Control testing", "Risk assessment", "Automation development", "GRC", "Risk management", "Security compliance", "Security governance", "Remediation planning", "Process improvement", "Roadmap", "Milestones", "OKRs", "ISO 27001", "SOC 2", "GDPR", "PCI", "SOX", "NIST", "Cloud environments", "CISSP", "CISM", "GIAC" ], "skillCount" : 22, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "68e6b1db70f0b99d58d66daf", "title" : "Application Security Engineer", "company" : "Amazon Development Centre (London) Limited", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 55000.0, "max" : 75000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Junior Application Security Engineer in London, adjusted for the technology industry and Amazon's company size." }, "location" : "London, England, GBR", "locations" : [ "London, England, GBR" ], "timestamp" : "2026-06-16T01:57:26.450", "fingerprint" : "d3974ea204548c28f42f84f0a96ba4fbca435835132ce4e66af95d7724c72fad", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3102637/apply", "externalId" : "03491f98-e093-4403-96b4-f3dffbb26348", "industryFunction" : { }, "structuredLocations" : [ { "city" : "London", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "51.5074456,-0.1277653" } ], "locationText" : "London, United Kingdom", "employmentType" : "FULL_TIME", "experienceMinYears" : 0, "experienceMaxYears" : 2, "experienceLevel" : "Entry", "remoteFriendly" : false, "workSiteFlexibility" : "onsite", "rawDescription" : "At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Amazon is continuously innovating new services and features for our customers. Our engineers invent, build, and sometimes break things to make them easier, faster, better, and more cost-effective. However, no matter what we’re building – from websites to web services, AR to AI, drones to devices – security is always our top priority. The Amazon Application Security team focuses on working with our builders to provide experiences that our customers can trust. That means constantly learning new things and solving complex problems to protect the safety, security, and privacy of billions of lives on a global scale. At Amazon, you’ll be working with the best minds in technology and security. Learn and be curious here, and accelerate your career growth. You can take pride in knowing that your work is meaningful, having a positive impact on others and making the world a better place. We are looking for an application security engineer to join the Application Security team. You should know how to prioritize, communicate clearly and compellingly, and understand how to maintain a high level of focus and excellence in a growing application landscape. Passion and discipline around cloud computing is critical, as is a high level of ownership and accountability. This position is for earlier career engineers who are starting their journey in security. We know not everyone has research experience in a company, we are interested in candidates with different types of research experience, even if it is independent, in university or in adjacent fields to vulnerability research. Key job responsibilities Your work will include: - First party application security research - Identifying and mitigating security issues at scale - Creating tools for security research - Working with internal software development teams on securing their applications - Security guidance documentation - Assistance with recruiting activities About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. #Joinstoresappsec Basic Qualifications: - Bachelor's degree in computer science or equivalent - Knowledge of networking protocols such as HTTP, DNS and TCP/IP - Experience programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language Preferred Qualifications: - Experience with AWS products and services - Experience with any combination of the following: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security - Experience with programming languages such as Python, Java, C++ Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice ( https://www.amazon.jobs/en/privacy_page ) to know more about how we collect, use and transfer the personal data of our candidates. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Application Security Engineer at Amazon Development Centre (London) Limited", "postedDate" : "2026-06-14T17:34:06.997", "createdAt" : "2026-06-14T17:34:06.997", "lastUpdated" : "2026-06-16T01:57:26.450", "ingestTimestamp" : "2026-06-14T17:34:06.997", "mongoId" : "68e6b1db70f0b99d58d66daf", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3102637/apply", "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Junior", "dataQualityScore" : 0.8888889, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305b76f292fd229cf5e05a", "title" : "Associate Director, Information Security Risk", "company" : "EQT Group", "industry" : "FinTech", "salary" : { "min" : 360000.0, "max" : 540000.0, "currency" : "PLN", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an Associate Director, Information Security Risk in Financial Services in Warsaw, Poland, adjusted for Director seniority and full-time employment." }, "location" : "Warszawa, Masovian Voivodeship, Poland", "locations" : [ "Warszawa", "Masovian Voivodeship", "Poland" ], "certifications" : [ "CISM", "CRISC", "CISSP" ], "timestamp" : "2026-06-16T08:55:33.446", "fingerprint" : "1002902146dbbaeebab6c88f26f44d9b30e387829be17cdefc2b9427c735de83", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/eqtpartners/jobs/4897327101", "externalId" : "4897327101", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Warszawa", "state" : "Masovian Voivodeship", "country" : "Poland", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "52.2333742,21.0711489" } ], "locationText" : "Warszawa, Masovian Voivodeship, Poland", "experienceMinYears" : 10, "experienceLevel" : "Director", "technicalSkills" : "DORA, NIS2, ISO 27001, NIST", "professionalSkills" : [ "Risk assessment", "Control design", "Governance design", "Incident response", "Vendor risk management", "Policy development", "Standards development", "Procedure development" ], "hardSkillsList" : [ "Information security risk", "Cybersecurity governance", "Technology risk", "Security controls", "Risk reporting", "Vendor security requirements", "Cyber incident response", "Board reporting", "Risk appetite dashboards" ], "softSkillsList" : [ "Intellectual rigour", "Constructive challenge" ], "hardSkills" : [ { "name" : "Information security risk", "level" : "intermediate" }, { "name" : "Cybersecurity governance", "level" : "intermediate" }, { "name" : "Technology risk", "level" : "intermediate" }, { "name" : "Security controls", "level" : "intermediate" }, { "name" : "Risk reporting", "level" : "intermediate" }, { "name" : "Vendor security requirements", "level" : "intermediate" }, { "name" : "Cyber incident response", "level" : "intermediate" }, { "name" : "Board reporting", "level" : "intermediate" }, { "name" : "Risk appetite dashboards", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Intellectual rigour" }, { "name" : "Constructive challenge" } ], "majorSkills" : "Information security risk, Cybersecurity governance, Technology risk, Regulatory frameworks", "majorSkillsList" : [ "Information security risk", "Cybersecurity governance", "Technology risk", "Regulatory frameworks" ], "coreResponsibilities" : "Translate cybersecurity risk, Translate technology risk, Design security controls, Implement security controls, Draft information security policies, Maintain information security policies, Enforce information security policies, Lead regulatory framework implementation, Monitor emerging obligations, Oversee vendor risk reviews, Define vendor security requirements, Track remediation of gaps, Coordinate incident response, Ensure governance obligations met, Lead post-incident reviews, Produce board-ready reporting, Produce risk appetite dashboards, Produce briefing materials", "teamCollaboration" : "Across global footprint; With CISO function; With governance forums; With Technology teams; With senior management; With governance committees", "domainKnowledge" : "Financial services environment; Cross-border regulatory dynamics; Cybersecurity technologies; Cybersecurity architectures; Cybersecurity solutions; Digital tools; Workflow automation; Data governance obligations", "domainList" : [ "financial-services-environment", "cross-border-regulatory-dynamics", "cybersecurity-technologies", "cybersecurity-architectures", "cybersecurity-solutions", "digital-tools", "workflow-automation", "data-governance-obligations" ], "domainSpecificKnowledge" : [ "Financial services environment", "Cross-border regulatory dynamics", "Cybersecurity technologies", "Cybersecurity architectures", "Cybersecurity solutions", "Digital tools", "Workflow automation", "Data governance obligations" ], "toolProficiency" : [ "Bloomberg Terminal", "Reuters Eikon", "FactSet" ], "communicationSkills" : "Board-level reporting; Senior audience communication", "continuousLearning" : "Continuous professional development", "problemSolvingSkills" : "Risk reduction; Risk mitigation", "qualificationsBasic" : "10 years information security risk, 10 years cybersecurity governance, 10 years technology risk, Build security risk frameworks, Operate security risk frameworks, Implement regulatory frameworks, Lead third-party vendor risk assessments, Solid background incident response, Advise technology teams, Credibly challenge technology teams, Distil technical topics, Distil risk topics", "qualificationsPreferred" : "CISM, CRISC, CISSP, Experience international team, Experience matrix organisation, Familiarity digital tools, Familiarity workflow automation, Exposure data governance obligations, Contribute board reporting, Contribute senior governance reporting", "rawDescription" : "EQT is looking for an Associate Director, Information Security Risk to serve as the firm's subject matter expert on information security risk — translating complex cybersecurity and technology risk into clear governance frameworks and actionable business outcomes. This is a senior individual contributor role sitting within the CISO function, reporting directly to the CISO, and operating across a global, regulated financial services environment. About the Team Risk, Regulatory, Compliance identify, assess and track security risks across the firm and escalate material issues to the CISO and relevant governance forums. Design and implement pragmatic, proportionate security controls that balance risk reduction with business agility. Draft, maintain and enforce information security policies, standards and procedures aligned to regulatory requirements and industry best practice. Lead implementation of applicable regulatory frameworks across EQT's global footprint (including DORA, NIS2, ISO 27001 and NIST) and monitor the horizon for emerging obligations. Oversee the information security component of third-party vendor risk reviews, including critical outsourcing assessments; define vendor security requirements and track remediation of identified gaps. Play a central role in EQT's cyber incident response capability — coordinating response activities, ensuring governance obligations are met, and leading post-incident reviews. Produce high-quality, board-ready reporting, risk appetite dashboards and briefing materials for senior management and governance committees. About You You are a seasoned information security risk professional with a commercial mindset and a talent for making complex risk topics accessible to senior audiences. You build trust across functions naturally, hold your ground on risk positions constructively, and bring genuine intellectual rigour to governance and control design. What you'll bring (must-have): Around 10 years of experience in information security risk, cybersecurity governance, or technology risk within asset management, private equity, banking or financial services. Proven track record building and operating security risk and control frameworks in a regulated financial services environment. Hands-on experience implementing regulatory frameworks such as DORA, NIS2, ISO 27001 or NIST, with solid understanding of cross-border regulatory dynamics. Demonstrated experience leading third-party vendor risk assessments, including outsourcing and critical supplier reviews. Solid background in incident response, from operational coordination through to governance reporting and lessons learned. Deep working knowledge of cybersecurity technologies, architectures and solutions, sufficient to advise and credibly challenge Technology teams. Strong communication skills with the ability to distil complex technical and risk topics into concise, impactful materials for senior and board-level audiences. Nice to have: Relevant professional qualifications such as CISM, CRISC or CISSP. Experience working within an international team or matrix organisation. Familiarity with digital tools and workflow automation that enhance team efficiency and risk reporting. Exposure to data governance obligations and their intersection with information security risk. Prior experience contributing to board or senior governance committee reporting in a financial services context. What We Offer At EQT, you will join a global firm that operates at the intersection of technology, finance and impact. You will have direct access to senior leadership, meaningful scope to shape how information security risk is governed at a complex, internationally active firm, and the opportunity to work alongside colleagues who hold themselves and each other to a high standard. EQT supports continuous professional development and values diverse perspectives as a driver of better outcomes. Compensation We understand and believe that being a great place to work drives the best performance.At EQT, inclusion is a business imperative and it's embedded into our talent strategy, decision-making, and culture to ensure that every individual and team operates at their full potential. By doing so, we unlock better collaboration, stronger innovation, and superior investment outcomes. About EQT EQT is a purpose-driven global investment organization focused on active ownership strategies. With a Nordic heritage and a global mindset, EQT has a track record of over three decades of developing companies across multiple geographies, sectors and strategies. EQT has investment strategies covering all phases of a business’ development, from start-up to maturity. EQT has EUR ‌270 billion in total assets under management (EUR ‌‌141 billion in fee-generating assets under management), within two business segments – Private Capital and Real Assets. With its roots in the Wallenberg family’s entrepreneurial mindset and philosophy of long-term ownership, EQT is guided by a set of strong values and a distinct corporate culture. EQT manages and advises funds and vehicles that invest across the world with the mission to future-proof companies, generate attractive returns and make a positive impact with everything EQT does. EQT has offices in more than 25 countries across Europe, Asia and the Americas and has more than 1,900 employees. More info: www.eqtgroup.com Follow EQT on LinkedIn, X, YouTube and Instagram", "summaryDescription" : "Associate Director, Information Security Risk at EQT Group. Skills: Information security risk, Cybersecurity governance, Technology risk, Regulatory frameworks. Translate cybersecurity risk. Translate technology risk", "postedDate" : "2026-06-15T23:24:48.348", "createdAt" : "2026-06-15T23:24:48.348", "lastUpdated" : "2026-06-16T08:55:33.446", "ingestTimestamp" : "2026-06-15T23:24:48.348", "mongoId" : "6a305b76f292fd229cf5e05a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Information security risk", "Cybersecurity governance", "Technology risk", "Security controls", "Risk reporting", "Vendor security requirements", "Cyber incident response", "Board reporting", "Risk appetite dashboards", "Intellectual rigour", "Constructive challenge", "Regulatory frameworks", "Risk assessment", "Control design", "Governance design", "Incident response", "Vendor risk management", "Policy development", "Standards development", "Procedure development", "Financial services environment", "Cross-border regulatory dynamics", "Cybersecurity technologies", "Cybersecurity architectures", "Cybersecurity solutions", "Digital tools", "Workflow automation", "Data governance obligations", "CISM", "CRISC", "CISSP", "Bloomberg Terminal", "Reuters Eikon", "FactSet" ], "skillCount" : 34, "jobCategory" : "finance", "jobSubcategory" : "accounting", "seniorityLevel" : "Director", "dataQualityScore" : 0.8888889, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services", "llmIndustryConfidence" : 0.98 }, { "id" : "6a305b76f292fd229cf5e059", "title" : "Associate Director, Information Security Risk", "company" : "EQT Group", "industry" : "FinTech", "salary" : { "min" : 360000.0, "max" : 540000.0, "currency" : "PLN", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for an Associate Director, Information Security Risk in Financial Services in Warsaw, Poland, adjusted for director-level seniority and full-time employment." }, "location" : "Warszawa, Masovian Voivodeship, Poland", "locations" : [ "Warszawa", "Masovian Voivodeship", "Poland" ], "certifications" : [ "CISM", "CRISC", "CISSP" ], "timestamp" : "2026-06-16T08:06:33.159", "fingerprint" : "952a1d4d8a31c3e333437b382c388dfa4b1e6fbad80af07de3bcbf4abb568f95", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/eqtpartners/jobs/4897613101", "externalId" : "4897613101", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Warszawa", "state" : "Masovian Voivodeship", "country" : "Poland", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "52.2333742,21.0711489" } ], "locationText" : "Warszawa, Masovian Voivodeship, Poland", "experienceMinYears" : 10, "experienceLevel" : "Director", "technicalSkills" : "DORA, NIS2, ISO 27001, NIST", "professionalSkills" : [ "Risk assessment", "Control design", "Governance design" ], "hardSkillsList" : [ "Information security risk", "Cybersecurity governance", "Technology risk", "Security controls", "Vendor risk assessments", "Incident response", "Cybersecurity technologies", "Cybersecurity architectures", "Cybersecurity solutions" ], "hardSkills" : [ { "name" : "Information security risk", "level" : "intermediate" }, { "name" : "Cybersecurity governance", "level" : "intermediate" }, { "name" : "Technology risk", "level" : "intermediate" }, { "name" : "Security controls", "level" : "intermediate" }, { "name" : "Vendor risk assessments", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Cybersecurity technologies", "level" : "intermediate" }, { "name" : "Cybersecurity architectures", "level" : "intermediate" }, { "name" : "Cybersecurity solutions", "level" : "intermediate" } ], "majorSkills" : "Information security risk, Cybersecurity governance, Regulatory frameworks", "majorSkillsList" : [ "Information security risk", "Cybersecurity governance", "Regulatory frameworks" ], "coreResponsibilities" : "Identify security risks, Assess security risks, Track security risks, Escalate material issues, Design security controls, Implement security controls, Draft information security policies, Maintain information security policies, Enforce information security policies, Lead implementation regulatory frameworks, Monitor emerging obligations, Oversee information security component, Define vendor security requirements, Track remediation identified gaps, Coordinate response activities, Ensure governance obligations met, Lead post-incident reviews, Produce board-ready reporting, Produce risk appetite dashboards, Produce briefing materials", "teamCollaboration" : "Across global footprint; Across functions; With CISO; With governance forums; With Technology teams", "domainKnowledge" : "Regulated financial services; Cross-border regulatory dynamics; Third-party vendor risk; Critical outsourcing; Cyber incident response; Information security policies; Security risk frameworks; Technology risk; Asset management; Private equity; Banking; Financial services", "domainList" : [ "regulated-financial-services", "cross-border-regulatory-dynamics", "third-party-vendor-risk", "critical-outsourcing", "cyber-incident-response", "information-security-policies", "security-risk-frameworks", "technology-risk", "asset-management", "private-equity", "banking", "financial-services" ], "domainSpecificKnowledge" : [ "Regulated financial services", "Cross-border regulatory dynamics", "Third-party vendor risk", "Critical outsourcing", "Cyber incident response", "Information security policies", "Security risk frameworks", "Technology risk", "Asset management", "Private equity", "Banking", "Financial services" ], "communicationSkills" : "Board-ready reporting; Risk appetite dashboards; Briefing materials; Senior audiences; Board-level audiences", "qualificationsBasic" : "10 years information security risk, 10 years cybersecurity governance, 10 years technology risk, Build security risk frameworks, Operate security risk frameworks, Implement regulatory frameworks, Lead third-party vendor risk assessments, Solid background incident response, Advise technology teams, Credibly challenge technology teams, Distil technical topics, Distil risk topics", "qualificationsPreferred" : "CISM, CRISC, CISSP, Experience international team, Experience matrix organisation, Familiarity digital tools, Familiarity workflow automation, Exposure data governance obligations, Contribute board reporting, Contribute senior governance reporting", "rawDescription" : "EQT is looking for an Associate Director, Information Security Risk to serve as the firm's subject matter expert on information security risk — translating complex cybersecurity and technology risk into clear governance frameworks and actionable business outcomes. This is a senior individual contributor role sitting within the CISO function, reporting directly to the CISO, and operating across a global, regulated financial services environment. About the Team Risk, Regulatory, Compliance identify, assess and track security risks across the firm and escalate material issues to the CISO and relevant governance forums. Design and implement pragmatic, proportionate security controls that balance risk reduction with business agility. Draft, maintain and enforce information security policies, standards and procedures aligned to regulatory requirements and industry best practice. Lead implementation of applicable regulatory frameworks across EQT's global footprint (including DORA, NIS2, ISO 27001 and NIST) and monitor the horizon for emerging obligations. Oversee the information security component of third-party vendor risk reviews, including critical outsourcing assessments; define vendor security requirements and track remediation of identified gaps. Play a central role in EQT's cyber incident response capability — coordinating response activities, ensuring governance obligations are met, and leading post-incident reviews. Produce high-quality, board-ready reporting, risk appetite dashboards and briefing materials for senior management and governance committees. About You You are a seasoned information security risk professional with a commercial mindset and a talent for making complex risk topics accessible to senior audiences. You build trust across functions naturally, hold your ground on risk positions constructively, and bring genuine intellectual rigour to governance and control design. What you'll bring (must-have): Around 10 years of experience in information security risk, cybersecurity governance, or technology risk within asset management, private equity, banking or financial services. Proven track record building and operating security risk and control frameworks in a regulated financial services environment. Hands-on experience implementing regulatory frameworks such as DORA, NIS2, ISO 27001 or NIST, with solid understanding of cross-border regulatory dynamics. Demonstrated experience leading third-party vendor risk assessments, including outsourcing and critical supplier reviews. Solid background in incident response, from operational coordination through to governance reporting and lessons learned. Deep working knowledge of cybersecurity technologies, architectures and solutions, sufficient to advise and credibly challenge Technology teams. Strong communication skills with the ability to distil complex technical and risk topics into concise, impactful materials for senior and board-level audiences. Nice to have: Relevant professional qualifications such as CISM, CRISC or CISSP. Experience working within an international team or matrix organisation. Familiarity with digital tools and workflow automation that enhance team efficiency and risk reporting. Exposure to data governance obligations and their intersection with information security risk. Prior experience contributing to board or senior governance committee reporting in a financial services context. What We Offer At EQT, you will join a global firm that operates at the intersection of technology, finance and impact. You will have direct access to senior leadership, meaningful scope to shape how information security risk is governed at a complex, internationally active firm, and the opportunity to work alongside colleagues who hold themselves and each other to a high standard. EQT supports continuous professional development and values diverse perspectives as a driver of better outcomes. Compensation We understand and believe that being a great place to work drives the best performance.At EQT, inclusion is a business imperative and it's embedded into our talent strategy, decision-making, and culture to ensure that every individual and team operates at their full potential. By doing so, we unlock better collaboration, stronger innovation, and superior investment outcomes. About EQT EQT is a purpose-driven global investment organization focused on active ownership strategies. With a Nordic heritage and a global mindset, EQT has a track record of over three decades of developing companies across multiple geographies, sectors and strategies. EQT has investment strategies covering all phases of a business’ development, from start-up to maturity. EQT has EUR ‌270 billion in total assets under management (EUR ‌‌141 billion in fee-generating assets under management), within two business segments – Private Capital and Real Assets. With its roots in the Wallenberg family’s entrepreneurial mindset and philosophy of long-term ownership, EQT is guided by a set of strong values and a distinct corporate culture. EQT manages and advises funds and vehicles that invest across the world with the mission to future-proof companies, generate attractive returns and make a positive impact with everything EQT does. EQT has offices in more than 25 countries across Europe, Asia and the Americas and has more than 1,900 employees. More info: www.eqtgroup.com Follow EQT on LinkedIn, X, YouTube and Instagram", "summaryDescription" : "Associate Director, Information Security Risk at EQT Group. Skills: Information security risk, Cybersecurity governance, Regulatory frameworks. Identify security risks. Assess security risks", "postedDate" : "2026-06-15T23:23:26.048", "createdAt" : "2026-06-15T23:23:26.048", "lastUpdated" : "2026-06-16T08:06:33.159", "ingestTimestamp" : "2026-06-15T23:23:26.048", "mongoId" : "6a305b76f292fd229cf5e059", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Information security risk", "Cybersecurity governance", "Technology risk", "Security controls", "Vendor risk assessments", "Incident response", "Cybersecurity technologies", "Cybersecurity architectures", "Cybersecurity solutions", "Regulatory frameworks", "Risk assessment", "Control design", "Governance design", "Regulated financial services", "Cross-border regulatory dynamics", "Third-party vendor risk", "Critical outsourcing", "Cyber incident response", "Information security policies", "Security risk frameworks", "Asset management", "Private equity", "Banking", "Financial services", "CISM", "CRISC", "CISSP" ], "skillCount" : 27, "jobCategory" : "finance", "jobSubcategory" : "accounting", "seniorityLevel" : "Director", "dataQualityScore" : 0.8888889, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services", "llmIndustryConfidence" : 0.98 }, { "id" : "6a186a5b58b93c861e19a3e7", "title" : "Information Security Analyst", "company" : "Atlas Technica", "industry" : "Cybersecurity", "salary" : { "min" : 750000.0, "max" : 1200000.0, "currency" : "UAH", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Information Security Analyst in Ukraine, adjusted for mid-seniority and the technology industry." }, "location" : "Kyiv, UA", "locations" : [ "Kyiv", "UA" ], "timestamp" : "2026-06-16T00:31:55.002", "fingerprint" : "52cba4cb4f15e2d29f684e3375134effb5b7f002a312f984cd074a7cc489f42e", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://atlas-technica.breezy.hr/p/d65fc5dd4760-information-security-analyst", "externalId" : "d65fc5dd4760", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Ukraine", "continent" : "as", "workMode" : "remote" } ], "locationText" : "Ukraine", "employmentType" : "FULL_TIME", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Position Name: Information Security Analyst Reports to: Chief Information Security Officer Location/Type: Remote (UA Candidates only) Atlas Technica", "summaryDescription" : "Information Security Analyst at Atlas Technica", "createdAt" : "2026-06-14T18:41:47.041", "lastUpdated" : "2026-06-16T00:31:55.002", "ingestTimestamp" : "2026-06-14T18:41:47.041", "mongoId" : "6a186a5b58b93c861e19a3e7", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.6666667, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305739f292fd229cf35bd6", "title" : "Senior Director, Information Security & Compliance", "company" : "Beeline Medicines", "industry" : "Biotech", "salary" : { "min" : 245000.0, "max" : 355000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Director, Information Security & Compliance in the US Biotech industry, adjusted for seniority and company size." }, "location" : "United States", "locations" : [ "United States" ], "timestamp" : "2026-06-16T08:47:41.814", "fingerprint" : "013ea186fd91a044d78c3a5e6a4ef0ae9f4939348a09530c3f27db232071a1ad", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/beelinemedicines/jobs/4286176009", "externalId" : "4286176009", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "hybrid" } ], "locationText" : "United States", "experienceMinYears" : 12, "experienceLevel" : "Director", "remoteFriendly" : true, "rawDescription" : "About Beeline Medicines: Beeline Medicines is a clinical‑stage biotechnology company focused on developing and delivering category-leading precision therapies to transform the lives of people living with autoimmune and inflammatory diseases. With a portfolio of potential best-in-class and first-in-disease therapeutic candidates that directly target key pathways governing dysregulated immunological and inflammatory responses, the Company is developing medicines that have the opportunity to provide durable, life-changing impact. Led by an established executive team and backed by world-class life science investors, each day Beeline Medicines is determined to bring the scientific rigor and operational excellence to get to what matters for patients – realizing a world where people with immune-mediated diseases can live life fully. Job Summary: The Senior Director, Information Security the incumbent will be expected to travel to Beeline Medicines’ offices on a periodic basis to support in-person collaboration, team engagement, and business operations. The frequency and scheduling of such visits will be determined at the company's discretion based on business need. Essential Duties and Responsibilities: Security Governance equivalent professional experience accepted. 12+ years of progressive information security experience with at least 5 years in a security leadership role (Manager, Director, or equivalent) preferred. Demonstrated experience building or significantly maturing an information security program, including policy development, risk management, and compliance framework implementation. Experience with security frameworks: NIST CSF, NIST SP 800-53, ISO 27001, or equivalent. Direct experience with SOX IT General Controls — either implementing ITGCs for IPO readiness or supporting ongoing SOX compliance at a public company. Strong working knowledge of Microsoft 365 security controls, including Entra ID, Conditional Access, Defender, and Purview. Demonstrated experience building or significantly maturing an information security program, including policy development, risk management, and compliance framework implementation. Experience managing managed security service providers (MDR, MSSP, or similar) and coordinating external security assessments (penetration testing, controls testing, risk assessments). Demonstrated experience building or significantly maturing an information security program, including policy development, risk management, and compliance framework implementation Independent judgment and self-direction — this role operates as a solo security practitioner at a small company and must prioritize effectively without day-to-day supervision. Strong written and verbal communication with the ability to translate security risks into business terms for executive and non-technical audiences. Salary Range: The expected salary range for this position varies by location and will be communicated based on the country or region in which the selected candidate is hired. Actual pay will be determined based on experience, qualifications, location, and other job-related factors permitted by applicable local law. A discretionary annual bonus and long-term incentive award (e.g., equity) may be available based on individual and Company performance. Salary Range $264,000—$285,000 USD Benefits: We offer a comprehensive benefits package tailored to the country and region in which you are hired, in compliance with local laws and practices. Benefits may include, but are not limited to: Competitive health and wellness coverage (structure and premiums vary by country) Paid time off, public holidays, and additional leave entitlements in accordance with local requirements Flexible work arrangements / hybrid schedule Benefits vary by location and are subject to eligibility requirements, local regulations, and plan terms. Specific benefit details applicable to your country or region will be provided during the offer process. Equal Employment Opportunity: Beeline Medicines is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, disability, age, protected veteran status, or any other characteristic protected by applicable federal, state, or local law. Reasonable Accommodation: If you require a reasonable accommodation to participate in the application or interview process, please contact careers@beelinemedicines.com to request an accommodation. We are committed to providing equal access to all candidates. Privacy Upon submission of this form I understand that Beeline Medicines is based in the United States and personal data submitted in the form will be transferred and accessed in the U.S., Information about Beeline Medicines privacy practices can be found at Privacy Policy - Beeline Medicines", "summaryDescription" : "Senior Director, Information Security & Compliance at Beeline Medicines", "postedDate" : "2026-06-15T23:20:59.512", "createdAt" : "2026-06-15T23:20:59.512", "lastUpdated" : "2026-06-16T08:47:41.814", "ingestTimestamp" : "2026-06-15T23:20:59.512", "mongoId" : "6a305739f292fd229cf35bd6", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 245000, "salaryAnnualMax" : 355000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.7777778, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Biotech", "llmIndustryConfidence" : 0.98 }, { "id" : "6a25146374d8ee00a00bb735", "title" : "Security Industry Specialist, Subsidiary & Acquisition GRC", "company" : "Amazon.com Services LLC", "industry" : "Project/Program/Product Management--Technical, Security Industry Specialist, amazon security", "salary" : { "min" : 102000.0, "max" : 178400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Austin, Texas, USA", "locations" : [ "Austin, Texas, USA" ], "certifications" : [ "AWS Professional level certification" ], "timestamp" : "2026-06-15T05:33:18.260", "fingerprint" : "fd155158f7340dad9777e98187742cf3186c07c6b5c6f5dea9ebb51f20d95502", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10440335/apply", "externalId" : "eb884b59-d156-475c-89f5-ef2b34269921", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Cloud, Devices, AWS", "professionalSkills" : [ "Risk assessment", "Compliance programs", "Audit execution", "Data protection", "Insider threat", "Third party risk", "Information security", "Security risk metrics", "Cloud environment" ], "hardSkillsList" : [ "Regulatory requirements", "Data protection", "Insider threat", "Third party risk", "Access management", "Security controls", "Risk metrics", "Control libraries", "Compliance requirements", "Security standards", "Cloud security", "Privacy concepts" ], "softSkillsList" : [ "Innovative process changes" ], "hardSkills" : [ { "name" : "Regulatory requirements", "level" : "intermediate" }, { "name" : "Data protection", "level" : "intermediate" }, { "name" : "Insider threat", "level" : "intermediate" }, { "name" : "Third party risk", "level" : "intermediate" }, { "name" : "Access management", "level" : "intermediate" }, { "name" : "Security controls", "level" : "intermediate" }, { "name" : "Risk metrics", "level" : "intermediate" }, { "name" : "Control libraries", "level" : "intermediate" }, { "name" : "Compliance requirements", "level" : "intermediate" }, { "name" : "Security standards", "level" : "intermediate" }, { "name" : "Cloud security", "level" : "intermediate" }, { "name" : "Privacy concepts", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Innovative process changes" } ], "majorSkills" : "Security risk, Compliance, Audit", "majorSkillsList" : [ "Security risk", "Compliance", "Audit" ], "coreResponsibilities" : "Understand regulatory requirements, Assess compliance needs, Assess maturity of processes, Assess maturity of controls, Design security programs, Build security programs, Execute security programs, Design compliance programs, Build compliance programs, Execute compliance programs, Ensure successful audit executions, Identify compliance needs, Assess data protection issues, Develop data protection recommendations, Assess insider threat issues, Develop insider threat recommendations, Assess third party risk issues, Develop third party risk recommendations, Ensure compliance to policies, Review technical security controls, Develop security risk metrics, Maintain control libraries, Maintain compliance requirements, Provide business interpretations, Support automation opportunities, Liaise with auditors, Articulate control implementation, Articulate control impact, Establish security considerations, Establish privacy considerations, Establish compliance considerations", "teamCollaboration" : "Business teams; Security teams; Stakeholder teams; Privacy teams; Legal teams; HR teams; IT teams; Business and SMEs; Multiple organizations; Multiple teams", "domainKnowledge" : "Service security; Device security; Data protection; Insider threat; Third party risk; Access management; Security architecture; Cloud security; Privacy concepts; NIST; SOC 2; ISO 27001; PCI DSS; HIPAA", "domainList" : [ "service-security", "device-security", "data-protection", "insider-threat", "third-party-risk", "access-management", "security-architecture", "cloud-security", "privacy-concepts", "nist", "soc-2", "iso-27001", "pci-dss", "hipaa" ], "domainSpecificKnowledge" : [ "Service security", "Device security", "Data protection", "Insider threat", "Third party risk", "Access management", "Security architecture", "Cloud security", "Privacy concepts", "NIST", "SOC 2", "ISO 27001", "PCI DSS", "HIPAA" ], "communicationSkills" : "Communicate to customers; Communicate across audiences", "innovationCreativity" : "Drive innovative process changes", "problemSolvingSkills" : "Identify compliance needs; Assess issues; Develop recommendations; Review security controls; Troubleshoot vulnerabilities", "outcomesObjectives" : "Ensure successful audit executions; Promote transparency across measures", "qualificationsBasic" : "3+ years IT platform implementation, Bachelor's degree in computer science or equivalent, 5+ years IT Security experience, 3+ years performing technical assessments, Experience in security or compliance consulting", "qualificationsPreferred" : "Master's degree in technical or engineering field, 1+ years technical specialist experience, 1+ years design and architecture experience, AWS Professional level certification, Experience communicating across technical and non-technical audiences, Experience with compliance & security standards", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Blink (Amazon’s subsidiary) Security team is growing and looking for a highly motivated security risk & compliance specialist to join our team and drive regulatory compliance requirements for our products. In this role, you will work collaboratively with various business and security teams across Amazon to identify compliance needs, assess the maturity of processes and controls, design, build, and execute high-impact security or compliance programs to ensure successful audit executions. You should be a technically experienced and innovative security, risk, compliance, and audit professional who has the ability to understand systems, security, and privacy processes, communicate to customers, and to be able to drive innovative process changes through multiple organizations and teams. Key job responsibilities • Understand and rationalize regulatory requirements for service and device security • Proactively assess, identify and develop recommendations regarding data protection, insider threat, data sharing, identity and access management, and third party risk issues and vulnerabilities by working with multiple stakeholder teams, including Privacy, Legal, HR, IT, etc • Engage with the Business and SMEs to ensure compliance to information security policies • Review security controls that are technical in nature, such as access controls, data encryption in transit and at rest, and auditing and logging user activity • Develop and maintain relevant security risk metrics to promote transparency across the organization; measures, monitors and reports on information security risks to management • Maintain control libraries and compliance requirements and guidance materials for various security standards and regulations. • Provide business specific interpretations and support automation opportunities • Liaise with auditors, articulate control implementation and impact, and establish considerations for applying security, privacy and compliance concepts to a technical cloud environment A day in the life The Subsidiary & Acquisition Security team designs and engineers high-profile consumer devices, including the Ring, Blink, Amazon Keys, and Side walk family of products. The Subsidiary & Acquisition GRC team works to ensure that our services are designed and implemented to the high standards required to maintain and enhance customer trust. Security and Privacy are paramount to maintaining trust and we need to continue to build trusted products, maintain and operate trusted environments, and advocate trust to customers and stakeholders About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Experience in security or compliance consulting or advisory work in support of a highly technical environment - 3+ years of IT platform implementation in a technical and analytical role experience - Bachelor's degree in computer science or equivalent, or 5+ years of IT Security experience - 3+ years in performing and/or participating in technical assessments in direct support of a major compliance effort (e.g. NIST, SOC 2, or ISO) Preferred Qualifications: - Master's degree or above in a technical or engineering related field, such as Electrical Engineering, Computer Science, etc. - Knowledge of one or more of the following domains: access-control system and methodology, network security, application- and system-development security, security architecture and models, cryptography, and operations security - 1+ years of technical specialist, design and architecture experience, or AWS Professional level certification - Knowledge of professional software engineering & best practices for full software development life cycle, including coding standards, software architectures, code reviews, source control management, continuous deployments, testing, and operational excellence - Experience communicating across technical and non-technical audiences, including executive level stakeholders or clients - Experience with compliance & security standards including PCI DSS, ISO 27001, HIPAA, and NIST Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, CA, Hawthorne - 102,000.00 - 178,400.00 USD annually USA, TX, Austin - 102,000.00 - 178,400.00 USD annually", "summaryDescription" : "Security Industry Specialist, Subsidiary & Acquisition GRC at Amazon.com Services LLC. Skills: Security risk, Compliance, Audit. Understand regulatory requirements. Assess compliance needs", "postedDate" : "2026-06-13T15:59:56.263", "createdAt" : "2026-06-13T15:59:56.263", "lastUpdated" : "2026-06-15T05:33:18.260", "ingestTimestamp" : "2026-06-13T15:59:56.263", "mongoId" : "6a25146374d8ee00a00bb735", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10440335/apply", "salaryAnnualMin" : 102000, "salaryAnnualMax" : 178400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Regulatory requirements", "Data protection", "Insider threat", "Third party risk", "Access management", "Security controls", "Risk metrics", "Control libraries", "Compliance requirements", "Security standards", "Cloud security", "Privacy concepts", "Innovative process changes", "Security risk", "Compliance", "Audit", "Risk assessment", "Compliance programs", "Audit execution", "Information security", "Security risk metrics", "Cloud environment", "Service security", "Device security", "Security architecture", "NIST", "SOC 2", "ISO 27001", "PCI DSS", "HIPAA", "AWS Professional level certification" ], "skillCount" : 31, "jobCategory" : "project-management", "dataQualityScore" : 0.8888889, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a191e7758b93c861e39f6f5", "title" : "Application Security Engineer", "company" : "Mercedes-Benz", "salary" : { "min" : 2200000.0, "max" : 3500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Application Security Engineer in Bangalore, India, adjusted for mid-seniority, technology industry, and large company size." }, "location" : "India-Karnataka-Bangalore", "locations" : [ "India-Karnataka-Bangalore", "Brigade Tech Gardens, Katha No. 119, Kundalahalli Village, K.R. Puram Hobli, Ward No. 85, Bangalore" ], "timestamp" : "2026-06-16T00:44:32.317", "fingerprint" : "80177baefad31febb3fb931a065ecdbe813101a6cab2849afd794bcebb8e1aca", "source" : "taleo", "language" : "en", "applyUrl" : "https://tas-daimler.taleo.net/careersection/ex/jobdetail.ftl?job=889852", "externalId" : "889852", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bangalore", "state" : "Karnataka", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "12.9767936,77.5900820" } ], "locationText" : "Bangalore, Karnataka, India", "experienceMinYears" : 4, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "rawDescription" : "About MBRDI Mercedes-Benz Research and Development India (MBRDI), headquartered in Bengaluru with a satellite office in Pune, is the largest R&D center for Mercedes-Benz Group AG outside of Germany. Our mission is to drive innovation and excellence in automotive engineering, digitalization, and sustainable mobility solutions, shaping the future of mobility. Job Title: Application Security Engineer Job Overview We are seeking a highly motivated and experienced Application Security Engineer with 4+ years of hands-on technical experience to join our team and drive DevSecOps initiatives. In this role, you will be instrumental in embedding security throughout the software development lifecycle, from design to deployment and operations. You will leverage your expertise in application security, Azure cloud security , and DevSecOps practices to protect our applications and infrastructure. A strong understanding of cloud-native security principles, particularly within the Azure ecosystem, and experience with security tools like Coverity, Jfrog (Xray), BlackDuck, Polaris, and Wiz is essential. Familiarity with the security implications and best practices for Artificial Intelligence (AI) and Machine Learning (ML) systems is also highly valued. Key Responsibilities: Integrate security tools and processes into the CI/CD pipeline to automate security checks (SAST, DAST, SCA, IaC scanning) using tools like Coverity, Jfrog Xray, BlackDuck, and Polaris. Conduct security reviews, threat modeling, and risk assessments for new and existing applications and services, with a focus on Azure-based deployments and AI/ML components . Collaborate with development and operations teams to implement security best practices and remediate identified vulnerabilities. Utilize Wiz to monitor and improve the security posture of our Azure cloud environments and cloud-native applications. Develop and maintain secure coding guidelines, security standards, and DevSecOps best practices, including those specific to AI/ML systems . Provide security expertise and guidance to development teams throughout the software development lifecycle. Participate in security architecture reviews to ensure security by design for new systems and features, particularly those deployed in Azure and involving AI/ML technologies . Support vulnerability management efforts, including scanning, analysis, prioritization, and tracking of remediation activities. Assist in the evaluation and selection of new security technologies and tools to enhance our DevSecOps capabilities. Stay up-to-date with the latest security threats, vulnerabilities, and industry trends, including advancements in AI/ML security . Qualifications: 4+ years of experience in application security, DevSecOps, or a related field. Strong understanding of secure software development lifecycle (SSDLC) and integrating security into CI/CD pipelines. Proven experience with Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and Infrastructure as Code (IaC) security. Hands-on experience with security tools such as Coverity (SAST), Jfrog (specifically Xray for SCA and artifact security), BlackDuck (SCA), Polaris (for security orchestration/scanning), and Wiz (for cloud-native security and posture management). Solid understanding of cloud security principles and best practices, with significant experience in Azure . Familiarity with common application security vulnerabilities (e.g., OWASP Top 10) and mitigation strategies. Understanding of security challenges and best practices related to AI/ML models, data, and pipelines (e.g., adversarial attacks, data poisoning, model theft, privacy). Experience with scripting languages (e.g., Python, PowerShell, Bash) for automation of security tasks. Excellent problem-solving skills and meticulous attention to detail. Ability to work independently and collaboratively within a dynamic team environment. Must possess strong interpersonal skills, including effective communication, constructive feedback, decision-making, and a high sense of responsibility. Preferred Qualifications: Relevant security certifications such as CSSLP, Azure Security Engineer Associate , AWS Certified Security - Specialty, or equivalent DevSecOps certifications. Experience with threat modeling methodologies and tools. Knowledge of security frameworks and compliance standards (e.g., ISO 27001, NIST, SOC 2, GDPR) as they apply to application and Azure cloud security . Familiarity with container security (e.g., Docker, Kubernetes) and serverless security within Azure (e.g., Azure Kubernetes Service, Azure Functions) . Experience securing AI/ML development and deployment workflows (MLOps security). Experience with security incident response processes related to application vulnerabilities. Why Join Us? • Be part of a purpose-driven organization that is shaping the future of mobility • Work on cutting-edge technologies and global projects • Thrive in a collaborative, diverse, and inclusive environment • Access world-class infrastructure and continuous learning opportunities Equal Opportunity Statement At MBRDI, we are committed to diversity and inclusion. We welcome applications from all qualified individuals, regardless of gender, background, or ability. Mercedes-Benz Research and Development India Private Limited", "summaryDescription" : "Application Security Engineer at Mercedes-Benz", "createdAt" : "2026-06-14T19:42:38.139", "lastUpdated" : "2026-06-16T00:44:32.317", "ingestTimestamp" : "2026-06-14T19:42:38.139", "mongoId" : "6a191e7758b93c861e39f6f5", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.6666667, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c91ac74d8ee00a0983b95", "title" : "Application Support Lead", "company" : "Global Relay", "industry" : "SaaS", "salary" : { "min" : 75000.0, "max" : 105000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Lead Application Support role in London, UK, adjusted for the SaaS industry and company size." }, "location" : "London, England, United Kingdom", "locations" : [ "London", "England", "United Kingdom" ], "timestamp" : "2026-06-15T22:35:50.986", "fingerprint" : "a42a43d47df0e9de86d77d8ce49f12a0500cdba5dd0d39ed1c40e566c0fac4a9", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.globalrelay.com/careers/jobs?gh_jid=5748010004", "externalId" : "5748010004", "industryFunction" : { }, "structuredLocations" : [ { "city" : "London", "state" : "England", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "51.5074456,-0.1277653" } ], "locationText" : "London, England, United Kingdom", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "Networking, Firewalls, Protocols, Databases, Cloud technology", "professionalSkills" : [ "Technical management", "Team development", "Problem-solving", "Service management", "Business cases" ], "hardSkillsList" : [ "Root cause analysis" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Root cause analysis", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Application support, Team leadership", "majorSkillsList" : [ "Application support", "Team leadership" ], "coreResponsibilities" : "Ensure seamless operation and support, Drive efficiency, Mitigate risks, Elevate customer experience, Lead the application support team, Champion a culture of excellence, Safeguard infrastructure robustness and reliability, Develop intimate knowledge of GR Products, Develop advanced understanding of interdependencies, Develop broad knowledge of monitoring concepts, Develop broad knowledge of alerting concepts, Develop broad knowledge of service management concepts, Minimize impact to customers for major incidents, Improve efficiency and effectiveness of team, Ensure new products are supportable, Meet Application Support operability requirements, Improve the Application Support Operability framework, Build business cases for new tooling, Select and deliver new tooling, Manage team member time off requests, Ensure adequate coverage, Manage probationary periods, Conduct annual performance assessments, Solicit 360-degree feedback, Deliver annual performance reviews, Review past accomplishments, Agree to future SMART goals, Manage and forecast recruitment needs, Screen resumes, Shortlist eligible candidates, Interview candidates, Oversee probationary period of new hires, Represent team at Lead level, Ensure personal development plans are created, Ensure personal development plans are owned, Ensure personal development plans are delivered, Align personal development plans to company strategy, Communicate effectively with team, Communicate effectively with colleagues, Live GR's core values, Learn from everything done, Give timely feedback to peers, Give timely feedback to managers, Minimize need for rework, Find ways to improve, Contribute to knowledge sharing, Build relationships with peers, Build relationships with manager, Build relationships with other teams, Propose possible solutions, Provide constructive feedback on performance, Achieve required outcomes with minimal direction, Provide guidance to other team members, Place Customer experience at the heart of work", "teamCollaboration" : "Represent team at Lead level; Communicate with colleagues outside team; Build relationships with peers; Build relationships with manager; Build relationships with other teams", "projectManagementSkills" : [ "SMART goals" ], "domainKnowledge" : "Enterprise information archiving; Cloud archiving; Surveillance solutions; eDiscovery solutions; Analytics solutions; Compliance regulations", "domainList" : [ "enterprise-information-archiving", "cloud-archiving", "surveillance-solutions", "ediscovery-solutions", "analytics-solutions", "compliance-regulations" ], "domainSpecificKnowledge" : [ "Enterprise information archiving", "Cloud archiving", "Surveillance solutions", "eDiscovery solutions", "Analytics solutions", "Compliance regulations" ], "toolProficiency" : [ "Monitoring tools", "Alerting tools" ], "communicationSkills" : "Communicate impact to business; Communicate impact to customers; Communicate with team; Communicate with colleagues; Communicate assumptions; Get clarification on tasks", "continuousLearning" : "Learn from everything", "problemSolvingSkills" : "Proactive problem-solving; Technical root cause analysis; Identify risks; Propose solutions", "specialRequirements" : "Attend office 4 days per week, Right to work in UK", "outcomesObjectives" : "Drive efficiency; Mitigate risks; Elevate customer experience; Minimize impact to customers; Reduce risk of reoccurrence; Improve efficiency and effectiveness", "qualificationsBasic" : "Previous SAAS experience, Experience building and managing people, Experience developing teams of technical specialists, Able to remove roadblocks affecting team efficiency, Able to communicate impact to business and customers, Capable of leading technical recovery, Ensures team identify technical root cause, Tracks progress of actions to reduce risk, Identifies opportunities to improve efficiency, Ensures new products are supportable, Meets Application Support operability requirements, Continually improves Application Support Operability framework, Capable of building business cases for new tooling, Tool selection and delivery of new tooling, Mentors and manages Application Support Specialists, Manage team member vacation requests, Manage probationary period and annual assessments, Deliver annual performance reviews, Assist Manager to manage recruitment needs, Screen resumes and shortlist candidates, Interview candidates, Manage probationary period of new hires, Promotes team in all situations, Represents team at Lead level, Ensures team members create personal development plans, Effective communication with team and colleagues, Exhibits GR's core values, Accepts feedback graciously, Gives timely, helpful feedback, Communicates assumptions and gets clarification, Solicits feedback from others, Understands how work contributes value, Contributes to formal knowledge sharing, Builds relationships with peers and teams, Proactively identifies risks, Proposes possible solutions, Provides relevant feedback on performance, Able to work with minimal direction, Provides guidance to other team members, Has Customer experience at the heart of all work, Right to work in the UK", "qualificationsPreferred" : "Visa sponsorship not offered", "remoteFriendly" : false, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Who we are: For over 25 years, Global Relay has set the standard in enterprise information archiving with industry-leading cloud archiving, surveillance, eDiscovery, and analytics solutions. We securely capture and preserve the communications data of the world’s most highly regulated firms, giving them greater visibility and control over their information and ensuring compliance with stringent regulations. Though we offer competitive compensation and benefits and all the other perks one would expect from an established company, we are not your typical technology company. Global Relay is a career-building company. A place for big ideas. New challenges. Groundbreaking innovation. It’s a place where you can genuinely make an impact – and be recognized for it. We believe great businesses thrive on diversity, inclusion, and the contributions of all employees. To that end, we recruit candidates from different backgrounds and foster a work environment that encourages employees to collaborate and learn from each other, completely free of barriers. Your role: As the Application Support Lead at Global Relay in London, you'll be at the forefront of ensuring seamless operation and support for our suite of products and services. Your expertise in technical management, team development, and proactive problem-solving will drive efficiency, mitigate risks, and elevate the overall customer experience. Your job: You'll assume a pivotal role in leading the application support team, championing a culture of excellence, and safeguarding the robustness and reliability of our technical infrastructure. Expect to undertake the following key responsibilities: Technical Skills Develops Intimate knowledge of all GR Products and Services. Develops advanced understanding of interdependencies between Products and Services. Develops broad knowledge across monitoring, alerting and service management concepts. Good understanding of software systems concepts such as networking, firewalls, protocols, databases and cloud technology. Previous experience in a SAAS or enterprise grade organization. Has demonstrable experience in building and managing people along with further developing teams of technical specialists. Able to remove roadblocks affecting team efficiency. Understands and able to communicate at all levels, impact to business and customers from Service Incidents. Capable of leading technical recovery to mitigate and restore service, minimizing impact to customers for major incidents. Ensures team identify technical root cause of incidents and tracks progress of actions to reduce risk of reoccurrence of incident. Identifies opportunities to improve efficiency and effectiveness of team. Ensures new products, services, features are fully supportable and meet Application Support operability requirements. Continually improves the Application Support Operability framework. Capable of building business cases for new tooling, tool selection and delivery of new tooling. Communication and Values Mentors and manages Junior, Intermediate I & II, and Senior Application Support Specialists. Manage team member vacation and time off requests ensuring adequate coverage. Manage the probationary period and annual individual performance assessments of all direct reports including the solicitation of 360-degree feedback from appropriate stakeholders. Deliver comprehensive annual performance reviews (IPAs) for direct reports as scheduled by HR, specifically reviewing past accomplishments and agreeing to future SMART goals. Assist Manager to manage and forecast the Application Support recruitment needs. Screen resumes, shortlist eligible candidates for employment, and interview candidates (CV analysis, personality profiling, and skills assessment/ verification) via telephone, video conference or in-person as needed. Manage and oversee the probationary period of new hires. Promotes team in all situations and capable of representing team at Lead level across organization. Ensures all team members create, own and deliver on personal development plans, aligned to company strategy. Effective in communicating with team and colleagues outside of Application Support. Exhibits GR's core values, focuses on understanding and living these values. Accepts feedback graciously and learns from everything they do. Gives timely, helpful feedback to peers and managers. Communicates assumptions and gets clarification on tasks up front to minimize the need for rework. Solicits feedback from others and is eager to find ways to improve. Understands how their work contributes value to the company. Contributes frequently to formal knowledge sharing. Builds strong relationships with peers, manager and other teams. Proactively identifies risks and proposes possible solutions. Provides relevant feedback, including constructive feedback if appropriate, on team member’s performance. Able to work with minimal direction or supervision to achieve required outcomes and provide guidance to other team members. Has Customer experience at the heart of all work. Employees are required to attend the office 4 days per week in accordance with Global Relay’s hybrid working policy. Global Relay is unable to offer visa sponsorship for this position. Candidates must have the right to work in the UK at the time of application. What you can expect: At Global Relay, there’s no ceiling to what you can achieve. It’s the land of opportunity for the energetic, the intelligent, the driven. You’ll receive the mentoring, coaching, and support you need to reach your career goals. You’ll be part of a culture that breeds creativity and rewards perseverance and hard work. And you’ll be working alongside smart, talented individuals from diverse backgrounds, with complementary knowledge and skills. Global Relay is an equal-opportunity employer committed to diversity, equity, and inclusion. We seek to ensure reasonable adjustments, accommodations, and personal time are tailored to meet the unique needs of every individual. To learn more about our business, culture, and community involvement, visit www.globalrelay.com.", "summaryDescription" : "Application Support Lead at Global Relay. Skills: Application support, Team leadership. Ensure seamless operation and support. Drive efficiency", "postedDate" : "2026-06-14T20:05:29.945", "createdAt" : "2026-06-14T20:05:29.945", "lastUpdated" : "2026-06-15T22:35:50.986", "ingestTimestamp" : "2026-06-14T20:05:29.945", "mongoId" : "6a2c91ac74d8ee00a0983b95", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Root cause analysis", "Leadership", "Application support", "Team leadership", "Technical management", "Team development", "Problem-solving", "Service management", "Business cases", "SMART goals", "Enterprise information archiving", "Cloud archiving", "Surveillance solutions", "eDiscovery solutions", "Analytics solutions", "Compliance regulations", "Monitoring tools", "Alerting tools" ], "skillCount" : 18, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.8888889, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "SaaS", "llmIndustryConfidence" : 0.95 }, { "id" : "6a307f2df292fd229c055eaf", "title" : "Senior Information Security Engineer, Product Security Engineering", "industry" : "Cybersecurity", "salary" : { "min" : 165000.0, "max" : 235000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Information Security Engineer in Kirkland, United States, adjusted for seniority and industry." }, "location" : "[Kirkland, WA, USA, [Kirkland, WA, USA], Kirkland, null, WA, US]", "locations" : [ "[Kirkland, WA, USA, [Kirkland, WA, USA], Kirkland, null, WA, US]", "[New York, NY, USA, [New York, NY, USA], New York, null, NY, US]", "[Seattle, WA, USA, [Seattle, WA, USA], Seattle, null, WA, US]", "[Sunnyvale, CA, USA, [Sunnyvale, CA, USA], Sunnyvale, null, CA, US]" ], "timestamp" : "2026-06-16T11:50:28.658", "fingerprint" : "f57d4512af7f8cb0dc5df218e440476612d7d2c3c72cd8fd11d0343d88787a58", "source" : "google", "language" : "en", "externalId" : "86949748946150086", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Kirkland", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6765382,-122.2070775" } ], "locationText" : "Kirkland, Washington, United States", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "summaryDescription" : "Senior Information Security Engineer, Product Security Engineering", "postedDate" : "2026-06-16T01:51:13.433", "createdAt" : "2026-06-16T01:51:13.433", "lastUpdated" : "2026-06-16T11:50:28.658", "ingestTimestamp" : "2026-06-16T01:51:13.433", "mongoId" : "6a307f2df292fd229c055eaf", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 165000, "salaryAnnualMax" : 235000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.5555556, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2ca37374d8ee00a09abccb", "title" : "Information Security Systems Analyst", "company" : "Arrowhead Pharmaceuticals", "industry" : "Pharma", "salary" : { "min" : 85000.0, "max" : 100000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Madison, Wisconsin, United States", "locations" : [ "Madison", "Wisconsin", "United States" ], "certifications" : [ "SC-400" ], "timestamp" : "2026-06-15T21:16:53.144", "fingerprint" : "45a32f0296fdffdd4e9f8457d8f3846786e9bbc385f174ca30f6806f1f088423", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://arrowheadpharma.com/careers/?gh_jid=5163400007", "externalId" : "5163400007", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Madison", "state" : "Wisconsin", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "43.0746900,-89.3841663" } ], "locationText" : "Madison, Wisconsin, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Microsoft Purview, Data governance, Data loss prevention, Information protection, Microsoft 365, Intune, Exchange, SharePoint, OneDrive, Teams, Endpoints, SIEM tools, EDR platforms", "professionalSkills" : [ "Analytical skills", "Problem-solving skills", "Subject matter expert" ], "hardSkillsList" : [ "Data classification", "DLP policy tuning", "EDiscovery", "Insider Risk Management", "Audit log interpretation", "Compliance reporting", "Platform administration", "Health monitoring", "Change management" ], "hardSkills" : [ { "name" : "Data classification", "level" : "intermediate" }, { "name" : "DLP policy tuning", "level" : "intermediate" }, { "name" : "EDiscovery", "level" : "intermediate" }, { "name" : "Insider Risk Management", "level" : "intermediate" }, { "name" : "Audit log interpretation", "level" : "intermediate" }, { "name" : "Compliance reporting", "level" : "intermediate" }, { "name" : "Platform administration", "level" : "intermediate" }, { "name" : "Health monitoring", "level" : "intermediate" }, { "name" : "Change management", "level" : "intermediate" } ], "majorSkills" : "Microsoft Purview, Data Loss Prevention, Information Protection, Data Classification", "majorSkillsList" : [ "Microsoft Purview", "Data Loss Prevention", "Information Protection", "Data Classification" ], "coreResponsibilities" : "Administer Microsoft Purview platform, Serve as subject matter expert for data governance, Serve as subject matter expert for DLP, Serve as subject matter expert for information protection, Administer sensitivity labels, Maintain label policies, Configure auto-labeling, Develop classification taxonomies, Refine auto-classification rules, Build DLP policies, Maintain DLP policies, Tune DLP policies, Investigate DLP policy matches, Investigate DLP alerts, Refine DLP rules, Document DLP incidents, Escalate DLP violations, Support legal hold requests, Execute eDiscovery collections, Export content searches, Administer Insider Risk Management policies, Review insider risk alerts, Coordinate insider risk cases, Generate Purview audit logs, Generate compliance reports, Generate dashboard analytics, Report on DLP incidents, Report on label adoption rates, Report on policy effectiveness, Report on compliance posture, Identify trends, Recommend policy adjustments, Monitor Purview platform health, Monitor Purview platform performance, Apply configuration changes, Apply updates, Manage connector integrations, Maintain documentation, Contribute to knowledge base, Triage security alerts, Escalate security alerts", "teamCollaboration" : "Work with business stakeholders; Work with Legal; Work with HR; Work with Security leadership; Coordinate with functional teams", "domainKnowledge" : "Pharmaceutical data types; Regulatory submissions; Patient data; RNAi technologies", "domainList" : [ "pharmaceutical-data-types", "regulatory-submissions", "patient-data", "rnai-technologies" ], "domainSpecificKnowledge" : [ "Pharmaceutical data types", "Regulatory submissions", "Patient data", "RNAi technologies" ], "toolProficiency" : [ "Microsoft Purview", "Microsoft 365", "Intune" ], "communicationSkills" : "Explain technical concepts", "documentationSkills" : "Maintain documentation; Runbooks; Diagrams; Standards; Exceptions", "problemSolvingSkills" : "Investigate alerts; Interpret audit logs; Distinguish signal from noise", "specialRequirements" : "Valid authorization to work", "qualificationsBasic" : "Bachelor's degree in Information Security, IT, or Computer Science, 3+ years in Information Security, IT compliance, or data governance, Hands-on experience administering Microsoft Purview or M365 Compliance Center, Experience with sensitivity labels, DLP, retention policies, eDiscovery, or Insider Risk Management, Experience working within a regulated industry", "qualificationsPreferred" : "Microsoft certifications relevant to security and compliance, Experience with Microsoft Defender for Cloud Apps, Prior experience in pharmaceutical, biotech, or life sciences, Experience supporting eDiscovery or legal hold workflows, Exposure to SIEM tools, Exposure to EDR platforms, Exposure to identity and access management systems", "rawDescription" : "Arrowhead Pharmaceuticals, Inc. (Nasdaq ARWR) is a commercial stage biopharmaceutical company that develops medicines that treat intractable diseases by silencing the genes that cause them. Using a broad portfolio of RNA chemistries and efficient modes of delivery, Arrowhead therapies trigger the RNA interference mechanism to induce rapid, deep, and durable knockdown of target genes. RNA interference, or RNAi, is a mechanism present in living cells that inhibits the expression of a specific gene, thereby affecting the production of a specific protein. Arrowhead’s RNAi-based therapeutics leverage this natural pathway of gene silencing. Arrowhead is focused on developing innovative drugs for diseases with a genetic basis, typically characterized by the overproduction of one or more proteins that are involved with disease. The depth and versatility of our RNAi technologies enables us to potentially address conditions in virtually any therapeutic area and pursue disease targets that are not otherwise addressable by small molecules and biologics. Arrowhead is leading the field in bringing the promise of RNAi to address diseases outside of the liver, and our clinical pipeline includes disease targets in the liver and lung with a promising pipeline of preclinical candidates. Arrowhead’s corporate headquarters is in Pasadena, CA with research and development teams in Madison, WI & San Diego, CA, and a state of the art manufacturing facility in Verona, WI. Our employees are nimble, science-driven innovators who are collaborating to bring new therapies to patients in need. The Position The Information Security Systems Analyst is responsible for the day-to-day administration, operation, and continuous improvement of the organization's Microsoft Purview platform, serving as the primary subject matter expert for data governance, data loss prevention (DLP), and information protection. This role operates at the intersection of information security, data governance, and regulatory compliance, ensuring that sensitive data - including intellectual property, clinical trial data, and personally identifiable information - is properly classified, protected, and governed in accordance with applicable regulations and internal policies. In addition to Purview-focused responsibilities, this analyst contributes to broader information security operations including troubleshooting endpoints, working in Microsoft 365, and Intune. Responsibilities The analyst will serve as the hands-on operational owner of Microsoft Purview, managing the platform on a daily basis across its core functional areas: Information Protection & Data Classification - Administer and maintain Microsoft Purview sensitivity labels, label policies, and auto-labeling configurations. Develop and refine classification taxonomies appropriate to pharmaceutical data types, including research data, regulatory submissions, and patient data. Review and tune auto-classification rules to minimize false positives and ensure accurate labeling across Microsoft 365 and connected data sources. Data Loss Prevention - Build, maintain, and continuously tune DLP policies across Exchange, SharePoint, OneDrive, Teams, and endpoints. Investigate DLP policy matches and alerts, differentiate true policy violations from false positives, and work with business stakeholders to refine rules without disrupting legitimate business workflows. Document DLP incidents and escalate confirmed violations per the incident response process. eDiscovery & Content Search - Support legal hold requests and eDiscovery collections. Work with Legal and HR to scope, execute, and export content searches accurately and in accordance with chain-of-custody requirements. Insider Risk Management - Administer Purview Insider Risk Management policies, review alerts, and coordinate with HR, Legal, and Security leadership on confirmed or suspected insider risk cases. Maintain strict confidentiality in handling all insider risk data. Audit & Reporting - Generate and interpret Purview audit logs, compliance reports, and dashboard analytics. Provide regular reporting to management on DLP incidents, label adoption rates, policy effectiveness, and compliance posture. Identify trends and recommend adjustments to policies and configurations. Platform Administration & Health Monitoring - Monitor the health and performance of the Purview platform, apply configuration changes and updates in alignment with change management processes, and stay current on Microsoft feature releases relevant to Purview. Manage connector integrations with third-party data sources as required. Maintain clear documentation (runbooks, diagrams, standards, exceptions) and contribute to a knowledge base. Triage security alerts and escalate as necessary. Requirements Bachelor's degree in Information Security, Information Technology, Computer Science, or a related field, or equivalent practical experience 3+ years of experience in Information Security, IT compliance, or data governance role Demonstrated hands-on experience administering Microsoft Purview or its predecessor Microsoft 365 Compliance Center, including at least two of the following areas: sensitivity labels, DLP, retention policies, eDiscovery, or Insider Risk Management Experience working within or supporting a regulated industry environment Strong analytical and problem-solving skills with the ability to investigate alerts, interpret audit logs, and distinguish signal from noise Effective written and verbal communication skills, with the ability to explain technical concepts to non-technical stakeholders Preferred Microsoft certifications relevant to security and compliance, such as SC-401 Experience with Microsoft Defender for Cloud Apps (MCAS) and its integration with Purview Prior experience in the pharmaceutical, biotech, or life sciences sector Experience supporting eDiscovery or legal hold workflows in collaboration with Legal teams Exposure to SIEM tools, endpoint detection and response (EDR) platforms, or identity and access management systems Comfortable working across functional teams including Legal, Compliance, HR, and IT, and possesses the judgment to handle sensitive data and insider risk information with appropriate discretion. Wisconsin pay range $85,000—$100,000 USD Arrowhead provides competitive salaries and an excellent benefit package. Candidates must have current, valid authorization to work in the country where this role is located. California Applicant Privacy Policy", "summaryDescription" : "Information Security Systems Analyst at Arrowhead Pharmaceuticals. Skills: Microsoft Purview, Data Loss Prevention, Information Protection, Data Classification. Administer Microsoft Purview platform. Serve as subject matter expert for data governance", "postedDate" : "2026-06-14T19:24:05.102", "createdAt" : "2026-06-14T19:24:05.102", "lastUpdated" : "2026-06-15T21:16:53.144", "ingestTimestamp" : "2026-06-14T19:24:05.102", "mongoId" : "6a2ca37374d8ee00a09abccb", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 85000, "salaryAnnualMax" : 100000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Data classification", "DLP policy tuning", "EDiscovery", "Insider Risk Management", "Audit log interpretation", "Compliance reporting", "Platform administration", "Health monitoring", "Change management", "Microsoft Purview", "Data Loss Prevention", "Information Protection", "Data Classification", "Analytical skills", "Problem-solving skills", "Subject matter expert", "Pharmaceutical data types", "Regulatory submissions", "Patient data", "RNAi technologies", "SC-400", "Microsoft 365", "Intune" ], "skillCount" : 23, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Biotech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a191e7758b93c861e39f6dc", "title" : "Information Security Consultant", "company" : "Mercedes-Benz Group China Ltd.", "industry" : "Cybersecurity", "salary" : { "min" : 450000.0, "max" : 750000.0, "currency" : "CNY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Information Security Consultant in Beijing, China, adjusted for senior seniority and the technology industry." }, "location" : "China (Mainland)-Beijing-Beijing", "locations" : [ "China (Mainland)-Beijing-Beijing", "Daimler Tower 8, Wangjing Street Chaoyang District, , Beijing" ], "certifications" : [ "CISA", "CISSP" ], "timestamp" : "2026-06-15T09:53:12.916", "fingerprint" : "7e2caca3c00aa40e6265f8afe6cfca01e02ebb78252dfd0c2981b06992e945e7", "source" : "taleo", "language" : "en", "applyUrl" : "https://tas-daimler.taleo.net/careersection/ex/jobdetail.ftl?job=873158", "externalId" : "873158", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Beijing", "state" : "Beijing", "country" : "China", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "39.9011168,116.4210134" } ], "locationText" : "Beijing, Beijing, China", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Cloud Security, Network Security, Web Technologies, Database Security, IT Operations", "professionalSkills" : [ "Risk Management", "Compliance", "Security Standards", "Data Protection", "IT Operations" ], "hardSkillsList" : [ "Security governance", "Security operations" ], "hardSkills" : [ { "name" : "Security governance", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" } ], "majorSkills" : "Information Security, Risk Management, Compliance, Security Standards", "majorSkillsList" : [ "Information Security", "Risk Management", "Compliance", "Security Standards" ], "coreResponsibilities" : "Monitor vulnerabilities, Identify vulnerabilities, Document vulnerabilities, Track remediation, Develop cloud security strategies, Implement cloud security strategies, Govern compliance with policies, Govern compliance with processes, Protect confidentiality, Protect integrity, Protect availability, Support risk assessment, Support risk analysis, Monitor risk control implementation, Monitor risk minimization implementation, Identify vulnerabilities in services, Identify vulnerabilities in applications, Order penetration services, Order assessment services, Monitor penetration services, Monitor assessment services, Ensure mitigation, Ensure minimization, Assess threats, Develop security measures, Assess effectiveness of measures, Assist business partners, Classify information, Coordinate security incidents, Participate in incident response, Develop mitigation strategies, Develop remediation strategies, Maintain disaster recovery plans, Maintain application recovery plans, Develop awareness campaigns, Conduct awareness campaigns, Define security controls, Create security policies, Update security policies, Enforce security policies, Align policies with requirements, Ensure policies are communicated, Review policies, Ensure regulatory compliance, Implement controls for regulations, Plan internal security audits, Conduct internal security audits, Assess effectiveness of controls, Identify areas for improvement, Coordinate external audits, Coordinate external assessments, Respond to auditor requests, Identify information security risks, Assess information security risks, Manage information security risks, Conduct risk assessments, Develop risk mitigation strategies, Monitor control effectiveness, Contribute to governance framework, Prepare compliance reports, Submit compliance reports, Track security metrics, Document compliance activities, Communicate security risks, Communicate security issues, Enforce security policies consistently, Investigate security violations, Take corrective action, Assess supplier security practices, Monitor vendor compliance, Collaborate with IT teams, Collaborate with developers, Collaborate with business stakeholders, Provide security training, Provide security awareness, Communicate recommendations to management", "teamCollaboration" : "Collaborate with IT teams; Collaborate with developers; Collaborate with business stakeholders", "domainKnowledge" : "Information Security; Cloud Security; Network Security; Web Technologies; Database Security; IT Operations; ISO 27001; NIST", "domainList" : [ "information-security", "cloud-security", "network-security", "web-technologies", "database-security", "it-operations", "iso-27001", "nist" ], "domainSpecificKnowledge" : [ "Information Security", "Cloud Security", "Network Security", "Web Technologies", "Database Security", "IT Operations", "ISO 27001", "NIST" ], "qualificationsBasic" : "5+ years experience, Security governance experience, Security operations experience, Experience with NIST, Experience with ISO 27001, Knowledge of IT Security, Knowledge of Risk Management, Knowledge of Compliance, Knowledge of Security Standards, Knowledge of Operating Systems, Knowledge of Data Protection, Knowledge of Cloud Security, Knowledge of Network, Knowledge of Web Technologies, Knowledge of Database, Knowledge of IT operations", "qualificationsPreferred" : "CISA certification, CISSP certification", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Objective of job Ensure that the organization and IT assets follow the security standard and governance. You monitor and identify vulnerabilities in systems, threats and issues, document it and track the remediation. Develop and implement cloud security strategies. -Responsible for the governance of compliance with policies and processes to protect the confidentiality, integrity and availability of IT assets (information, data and IT services) within the organization. -Responsible for organizational and technical controls -Support in risk assessment and analysis and monitoring the implementation of risk control/minimization measures -Identification of possible vulnerabilities in services and applications. Ordering and monitoring of penetration and assessment services. Document the results and ensure mitigation/minimization -Assessing threats and developing appropriate security measures and assessing their effectiveness -Assist businesspartners in information classification -Coordination for security incidents and participation in incident response activities, including mitigation and remediation strategies [3] -Take care of actuality of disaster or application recovery plans -Develop and conduct target group orientated awareness campaigns -Define security controls derived from policies Job designation •Developing and Maintaining Security Policies and Standards Responsible for creating, updating, and enforcing information security policies, standards, and procedures that align with legal, regulatory, and contractual requirements. This includes ensuring that policies are comprehensive, clearly communicated, and regularly reviewed. •Ensuring Regulatory Compliance Ensure the organization complies with relevant laws, regulations, and industry standards such as ISO 27001, NIST, and others. This involves understanding the specific requirements of each regulation and implementing controls to meet them. •Security Audits and Assessments -Responsible for planning and conducting internal security audits to assess the effectiveness of security controls and identify areas for improvement. -Coordinate external audits and assessments, ensuring the organization is prepared and responsive to auditor requests. •Risk Management and Governance -Identifying, assessing, and managing information security risks across the organization. This includes conducting regular risk assessments, developing risk mitigation strategies, and monitoring the effectiveness of controls. -Contribute to the development of a strong governance framework for information security. •Compliance Reporting Responsible for preparing and submitting reports to management and regulatory bodies on the organization's security posture and compliance efforts. This includes tracking key security metrics, documenting compliance activities, and communicating security risks and issues to relevant stakeholders. •Policy Enforcement Responsible for ensuring that security policies are consistently enforced across the organization. This includes monitoring compliance with policies, investigating security violations, and taking corrective action when necessary •Supplier Risk Management Assesses the security practices of third-party suppliers and service providers to ensure they meet the organization's security requirements. This includes reviewing vendor contracts, conducting security assessments, and monitoring vendor compliance with security policies •Collaboration and Communication -Collaborating with other IT teams, developers, and business stakeholders. -Providing security training and awareness to employees. -Communicating security risks and recommendations to management. Qualification •Professional Skills: -Deep understanding and experience on: IT Security, Risk Management, Compliance & Security Standards, Knowledge in all relevant Operating Systems, Data Protection -Knowledge of: Cloud Security, Network, Web Technologies, Database, IT operations (ITIL) •Experience with security frameworks, such as NIST, and ISO 27001. •Relevant certifications, CISA, CISSP •> 5 years experience with focus in areas of security governance and security operations Education: Bachelor's degree and above in Computer Science encompassing Information Security Mercedes-Benz Group China Ltd.", "summaryDescription" : "Information Security Consultant at Mercedes-Benz Group China Ltd.. Skills: Information Security, Risk Management, Compliance, Security Standards. Monitor vulnerabilities. Identify vulnerabilities", "createdAt" : "2026-06-14T08:47:02.519", "lastUpdated" : "2026-06-15T09:53:12.916", "ingestTimestamp" : "2026-06-14T08:47:02.519", "mongoId" : "6a191e7758b93c861e39f6dc", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Security governance", "Security operations", "Information Security", "Risk Management", "Compliance", "Security Standards", "Data Protection", "IT Operations", "Cloud Security", "Network Security", "Web Technologies", "Database Security", "ISO 27001", "NIST", "CISA", "CISSP" ], "skillCount" : 16, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca3b474d8ee00a09acfed", "title" : "Information Security Governance, Risk and Compliance Specialist", "company" : "GWI", "industry" : "Technology", "salary" : { "min" : 65000.0, "max" : 95000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Information Security Governance, Risk and Compliance Specialist in London, UK, adjusted for mid-seniority level in the technology industry." }, "location" : "London, UK", "locations" : [ "London", "UK" ], "certifications" : [ "ISO 27001" ], "timestamp" : "2026-06-16T01:21:58.151", "fingerprint" : "cd07cf418edbf652c929a8e53d688e074fbcb54e0e59e9dd5d49e6244eee6ace", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/globalwebindex/jobs/8548407002", "externalId" : "8548407002", "industryFunction" : { }, "structuredLocations" : [ { "city" : "London", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "51.5074456,-0.1277653" } ], "locationText" : "London, United Kingdom", "employmentType" : "FULL_TIME", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Mid-Senior", "professionalSkills" : [ "Risk management", "Compliance oversight", "Legal analysis", "Vendor risk management", "Client security assessments", "Security awareness training" ], "hardSkillsList" : [ "ISO 27001", "NIST frameworks", "Security policies", "Security procedures", "Cloud security" ], "hardSkills" : [ { "name" : "ISO 27001", "level" : "intermediate" }, { "name" : "NIST frameworks", "level" : "intermediate" }, { "name" : "Security policies", "level" : "intermediate" }, { "name" : "Security procedures", "level" : "intermediate" }, { "name" : "Cloud security", "level" : "intermediate" } ], "majorSkills" : "Information Security GRC, Compliance posture, Vendor risk management, Client security", "majorSkillsList" : [ "Information Security GRC", "Compliance posture", "Vendor risk management", "Client security" ], "coreResponsibilities" : "Own and maintain ISO 27001 certification, Maintain compliance across security frameworks, Develop information security policies, Implement information security policies, Maintain information security policies, Develop security procedures, Implement security procedures, Maintain security procedures, Lead vendor risk management, Lead client security assessments, Respond to client security questionnaires, Manage client onboarding requirements, Build security trust portal, Maintain security trust portal, Drive security awareness, Promote GRC culture", "teamCollaboration" : "Information Security teams; Product teams; Technology teams; Legal team", "domainKnowledge" : "Information security frameworks; SaaS environments; AI environments; Cloud security best practices", "domainList" : [ "information-security-frameworks", "saas-environments", "ai-environments", "cloud-security-best-practices" ], "domainSpecificKnowledge" : [ "Information security frameworks", "SaaS environments", "AI environments", "Cloud security best practices" ], "toolProficiency" : [ "Drata", "Vanta" ], "communicationSkills" : "Translate GRC topics; Internal guidance; Keep business informed", "continuousLearning" : "Accredited learning; Leadership development", "qualificationsBasic" : "3-5 years in information security compliance role, Develop and maintain security policies, Conduct vendor security assessments, Manage client security onboarding requirements, Implement and manage cloud security best practices", "qualificationsPreferred" : "Familiarity with Drata or Vanta, ISO 27001 certification", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Location: London, UK Weekly office requirement: Hybrid – 2 days per week Employment type: Permanent Seniority level: Mid-Senior At GWI we're always looking for extraordinary people who thrive on making an extraordinary impact. Right now we're looking for an Information Security GRC Specialist to play a key role in our Legal team in London. If that's you, and making a difference gets you out of bed in the morning, keep reading. It could be the start of something, well, extraordinary. Sounds great, what will I be doing? \uD83E\uDD14 As our Information Security GRC Specialist you'll play a pivotal role in shaping the future of security compliance at GWI. Reporting into our General Counsel and working closely with our Information Security, Product, and Technology teams, you'll own our compliance posture across security frameworks, vendor risk, and client-facing security requirements — while building a security-conscious culture across the business. A few things you'll be responsible for: \uD83D\uDC49 Own and maintain GWI's ISO 27001 certification and compliance across relevant security frameworks, keeping our posture sharp as the threat landscape evolves. \uD83D\uDC49 Develop, implement, and maintain information security policies and procedures aligned with industry best practices. \uD83D\uDC49 Lead vendor risk management and client security assessments — including responding to client security questionnaires and onboarding requirements. \uD83D\uDC49 Build and maintain GWI's security trust portal, showcasing our credentials to clients and stakeholders using tools such as Drata or Vanta. \uD83D\uDC49 Drive security awareness across the business through training programmes and internal communications that promote a strong GRC culture. It's also fun; shaking things up is what working for GWI is all about. You'll need to be flexible, comfortable with continuous change, and working in a high-tempo environment. What do I need to bring with me? \uD83E\uDDF3 You'll need to be able to demonstrate the core skills this role requires. You don't have to tick all the boxes right away; the important thing is that you're willing to learn. Here's what the team will be looking for in you: \uD83D\uDC49 In-depth, practical experience obtaining and maintaining ISO 27001 certification, with solid knowledge of frameworks such as NIST — typically 3–5 years in an information security compliance role, though other experience levels will be considered. \uD83D\uDC49 Proven ability to develop and maintain security policies and procedures that align with industry best practice. \uD83D\uDC49 Experience conducting vendor security assessments and managing client security onboarding requirements, balancing risk against commercial objectives. \uD83D\uDC49 Hands-on experience building or maintaining a security trust portal; familiarity with tools such as Drata or Vanta is a plus. \uD83D\uDC49 Knowledge of SaaS and AI environments, with experience implementing and managing cloud security best practices. \uD83D\uDC49 Strong communication skills — able to translate complex GRC topics into clear internal guidance and keep the wider business informed and engaged on security matters. Equally important is attitude. We want people who think big (to make an impact), ask why (to find a better way), and show respect (to everyone, at every level, all the time). Those are our values, and they're a big part of what we're looking for in you. What We Offer \uD83E\uDDD8 At GWI, you’ll find meaningful work, visible impact, and a culture that empowers you to do your best. Our package includes: Time to recharge – 25 days’ annual leave, plus office closures over the holidays. Health & wellbeing – Health cash plan, enhanced family benefits, carer days, and mental health support. Financial benefits – Competitive salary, 4% pension matching, and recognition programs that celebrate success. Flexibility & balance – Flexitime, early Friday finishes, hybrid and remote options, plus a “work from home” budget. Career growth – Accredited learning, leadership development, and global career mobility. Community & impact – DE&I initiatives, volunteering opportunities, donation matching, and payroll giving. Put all that together and GWI is the friendliest, most fulfilling place any of us has ever worked. Diversity, Equity & Inclusion \uD83E\uDEF6 Diversity is fundamental to who we are—both as a data company and as a workplace. Our data reflects global realities, and so must our teams. We strive to ensure our workforce is as diverse and inclusive as the insights we provide to our clients. As a Disability Confident employer, we welcome applications from disabled candidates and are committed to providing all necessary adjustments during the hiring process. We also actively encourage applications from underrepresented and marginalized communities. At GWI, you will find a place where you can contribute meaningfully, grow professionally, and belong fully. #li-hybrid #LI-NIKOSSS1", "summaryDescription" : "Information Security Governance, Risk and Compliance Specialist at GWI. Skills: Information Security GRC, Compliance posture, Vendor risk management, Client security. Own and maintain ISO 27001 certification. Maintain compliance across security frameworks", "postedDate" : "2026-06-14T20:48:06.082", "createdAt" : "2026-06-14T20:48:06.082", "lastUpdated" : "2026-06-16T01:21:58.151", "ingestTimestamp" : "2026-06-14T20:48:06.082", "mongoId" : "6a2ca3b474d8ee00a09acfed", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "ISO 27001", "NIST frameworks", "Security policies", "Security procedures", "Cloud security", "Information Security GRC", "Compliance posture", "Vendor risk management", "Client security", "Risk management", "Compliance oversight", "Legal analysis", "Client security assessments", "Security awareness training", "Information security frameworks", "SaaS environments", "AI environments", "Cloud security best practices", "Drata", "Vanta" ], "skillCount" : 20, "jobCategory" : "operations", "jobSubcategory" : "legal", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2d41ea74d8ee00a0b3c42b", "title" : "Information Security Officer", "company" : "NECT GmbH", "industry" : "Cybersecurity", "salary" : { "min" : 135000.0, "max" : 195000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Director, Information Security Officer in Hamburg, Germany, adjusted for the technology industry." }, "location" : "Hamburg, Deutschland", "locations" : [ "Hamburg", "Deutschland" ], "timestamp" : "2026-06-15T22:44:56.993", "fingerprint" : "ab31e4ae8835c272ba436de6d624639ef68587de3d20d283163454ccf1380f8b", "source" : "softgarden_portal", "language" : "de", "applyUrl" : "https://nect.softgarden.io/job/63310079/Information-Security-Officer-all-genders-?jobDbPVId=275240653&l=en", "externalId" : "63310079_275240653", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Hamburg", "country" : "Germany", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "53.5501721,10.0013165" } ], "locationText" : "Hamburg, Germany", "summaryDescription" : "Information Security Officer at NECT GmbH", "createdAt" : "2026-06-14T21:55:52.797", "lastUpdated" : "2026-06-15T22:44:56.993", "ingestTimestamp" : "2026-06-14T21:55:52.797", "mongoId" : "6a2d41ea74d8ee00a0b3c42b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.44444445, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.92 }, { "id" : "6a2c692274d8ee00a09062b7", "title" : "Chief Information Security Officer", "company" : "Sarvam", "industry" : "Engineering", "salary" : { "min" : 7500000.0, "max" : 1.25E7, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an Executive Chief Information Security Officer in the Technology industry in Bengaluru, India, adjusted for seniority and company size." }, "location" : "Bengaluru", "locations" : [ "Bengaluru" ], "certifications" : [ "CISSP", "CISM" ], "timestamp" : "2026-06-16T00:41:38.759", "fingerprint" : "c5579bb11e7b1802741135aea9ae051716cafaf8003516a4eaad66af4031e0d6", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/sarvam/8b83a923-78ac-485d-a1b4-304ea526160c/application", "externalId" : "8b83a923-78ac-485d-a1b4-304ea526160c", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bengaluru", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "12.9767936,77.5900820" } ], "locationText" : "Bengaluru, India", "employmentType" : "FULL_TIME", "experienceMinYears" : 10, "experienceMaxYears" : 99, "experienceLevel" : "Executive", "professionalSkills" : [ "Risk mitigation", "Stakeholder management", "Problem solving" ], "hardSkillsList" : [ "Vulnerability management" ], "hardSkills" : [ { "name" : "Vulnerability management", "level" : "intermediate" } ], "majorSkills" : "Information security leadership, Security compliance, Risk management", "majorSkillsList" : [ "Information security leadership", "Security compliance", "Risk management" ], "coreResponsibilities" : "Oversee compliance with security standards, Identify and assess vulnerabilities, Manage vulnerabilities across systems, Establish security policies, Drive security procedures, Drive security best practices, Integrate security into development lifecycle, Lead risk assessments, Lead audits, Lead security reviews, Ensure timely remediation of security issues, Ensure remediation of compliance gaps, Act as primary point of contact, Build security-focused culture, Mentor security-focused culture", "teamCollaboration" : "Product teams; Engineering teams; Platform teams", "domainKnowledge" : "Security compliance frameworks; ISO 27001; SOC 2; GDPR", "domainList" : [ "security-compliance-frameworks", "iso-27001", "soc-2", "gdpr" ], "domainSpecificKnowledge" : [ "Security compliance frameworks", "ISO 27001", "SOC 2", "GDPR" ], "communicationSkills" : "Stakeholder management; Communication", "problemSolvingSkills" : "Problem solving; Analytical abilities", "qualificationsBasic" : "Proven experience in information security leadership roles, Hands-on experience in vulnerability management, Ability to work cross-functionally, Excellent stakeholder management skills, Excellent communication skills, Analytical and problem-solving abilities", "qualificationsPreferred" : "Relevant certifications such as CISSP, Relevant certifications such as CISM, Experience in scaling security practices", "rawDescription" : "About Sarvam Sarvam is building the bedrock of Sovereign AI for India. The company is developing India’s full-stack sovereign AI platform, building across research, models, infrastructure and applications with a singular focus on making AI genuinely work for India. Sarvam works with leading enterprises and public institutions and is backed by Lightspeed, Peak XV, and Khosla Ventures. Sarvam partners with India’s leading brands, including Tata Capital, SBI Life, CRED, IDFC, and LIC. About the Role We are looking for an experienced and strategic Chief Information Security Officer (CISO) to lead and strengthen our organization’s information security posture. The ideal candidate will be responsible for overseeing all security and compliance initiatives, managing vulnerabilities, and ensuring alignment of security practices across product and engineering teams. What You’ll Do - Oversee and ensure compliance with all relevant security standards, regulations, and frameworks applicable to the organization. - Identify, assess, and manage vulnerabilities across systems, applications, and infrastructure. - Establish and drive organization-wide security policies, procedures, and best practices. - Collaborate closely with product, engineering, and platform teams to integrate security into the development lifecycle. - Lead risk assessments, audits, and security reviews to proactively mitigate threats. - Ensure timely remediation of security issues and compliance gaps. - Act as the primary point of contact for all information security-related matters. - Build and mentor a security-focused culture across teams. What We're Looking For - Proven experience in information security leadership roles (preferably as a CISO or similar). - Strong understanding of security compliance frameworks (ISO 27001, SOC 2, GDPR, etc.). - Hands-on experience in vulnerability management and risk mitigation strategies. - Ability to work cross-functionally with product and engineering teams. - Excellent stakeholder management and communication skills. - Strong analytical and problem-solving abilities. Bonus Points - Relevant certifications such as CISSP, CISM, or equivalent. - Experience in scaling security practices in a fast-paced product/tech environment. Why Sarvam? Sarvam is a fast-moving, high talent-density team building full-stack AI for India, working on problems that push the frontiers of AI with real population-scale impact. - Work alongside researchers, engineers, builders, and business leaders who move fast and hold each other to a very high bar - High ownership and high impact, from day one - Everything we do is AI-first, from the way we build and ship to the way we think about problems - You can work on problems that could change how an entire country learns, works, and communicates If you want to work on problems at the frontier of AI in India, Sarvam is the place to be. ", "summaryDescription" : "Chief Information Security Officer at Sarvam. Skills: Information security leadership, Security compliance, Risk management. Oversee compliance with security standards. Identify and assess vulnerabilities", "createdAt" : "2026-06-14T19:27:09.187", "lastUpdated" : "2026-06-16T00:41:38.759", "ingestTimestamp" : "2026-06-14T19:27:09.187", "mongoId" : "6a2c692274d8ee00a09062b7", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Vulnerability management", "Information security leadership", "Security compliance", "Risk management", "Risk mitigation", "Stakeholder management", "Problem solving", "Security compliance frameworks", "ISO 27001", "SOC 2", "GDPR", "CISSP", "CISM" ], "skillCount" : 13, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Executive", "dataQualityScore" : 0.8888889, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "694ae6ce70f0b99d589b27ff", "title" : "Cybersecurity GRC Specialist", "company" : "Hyundai Capital America", "industry" : "Financial Services", "salary" : { "min" : 115500.0, "max" : 154000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity GRC Specialist in Irvine, CA, adjusted for the Financial Services industry and manager experience level." }, "location" : "United States-California-Irvine", "locations" : [ "United States-California-Irvine", "
Headquarters 1 (HCA_HQ1)
3161 Michelson Dr. Ste 1900
Irvine, 92612

" ], "certifications" : [ "CISSP", "CISM", "CRISC", "CGEIT", "CISA", "ITIL" ], "timestamp" : "2026-06-15T07:26:07.663", "fingerprint" : "028859dc321449421afae6164280d515a7620332b2573dec7f41455905f5c6bc", "source" : "taleo", "language" : "en", "applyUrl" : "https://hyundaicapital.taleo.net/careersection/ex/jobdetail.ftl?job=104123", "externalId" : "104123", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Irvine", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.6856969,-117.8259810" } ], "locationText" : "Irvine, California, United States", "experienceLevel" : "Manager", "technicalSkills" : "Cybersecurity governance, Risk management, Compliance, IT systems", "professionalSkills" : [ "Risk assessments", "Impact analyses", "Remediations", "IT general controls", "Vulnerability analysis", "Threat analysis", "Risk treatment", "Audit controls", "Vendor risk management", "IT risk management", "Reporting" ], "hardSkillsList" : [ "Policy enforcement", "Risk Register management", "ISO 27001 standards", "ISO 27001", "ISO 31000:2009", "ISO 27005:2008", "NIST Special Publications", "NIST Methodologies", "SP800-12", "SP800-30", "SP800-37", "SP800-39", "SP800-53", "SP800-150", "SP800-161", "Gramm-Leach-Bliley Act", "NYDFS Cybersecurity Regulation", "PCI-DSS", "FFIEC", "SOX" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Policy enforcement", "level" : "intermediate" }, { "name" : "Risk Register management", "level" : "intermediate" }, { "name" : "ISO 27001 standards", "level" : "intermediate" }, { "name" : "ISO 27001", "level" : "intermediate" }, { "name" : "ISO 31000:2009", "level" : "intermediate" }, { "name" : "ISO 27005:2008", "level" : "intermediate" }, { "name" : "NIST Special Publications", "level" : "intermediate" }, { "name" : "NIST Methodologies", "level" : "intermediate" }, { "name" : "SP800-12", "level" : "intermediate" }, { "name" : "SP800-30", "level" : "intermediate" }, { "name" : "SP800-37", "level" : "intermediate" }, { "name" : "SP800-39", "level" : "intermediate" }, { "name" : "SP800-53", "level" : "intermediate" }, { "name" : "SP800-150", "level" : "intermediate" }, { "name" : "SP800-161", "level" : "intermediate" }, { "name" : "Gramm-Leach-Bliley Act", "level" : "intermediate" }, { "name" : "NYDFS Cybersecurity Regulation", "level" : "intermediate" }, { "name" : "PCI-DSS", "level" : "intermediate" }, { "name" : "FFIEC", "level" : "intermediate" }, { "name" : "SOX", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Cybersecurity governance, Risk management, Compliance", "majorSkillsList" : [ "Cybersecurity governance", "Risk management", "Compliance" ], "coreResponsibilities" : "Manage security policies, Maintain security policies, Enforce security policies, Develop Risk Register, Implement Risk Register, Maintain Risk Register, Execute Risk Register, Develop Policy Risk Exception Process, Implement Policy Risk Exception Process, Maintain Policy Risk Exception Process, Execute Policy Risk Exception Process, Conduct risk assessments, Conduct impact analyses, Identify risks, Manage remediations, Ensure compliance, Perform GSIF assessments, Monitor GSIF assessments, Ensure remediations follow GSIF ISO 27001 standards, Collaborate with Cybersecurity Risk Management, Collaborate with Cybersecurity Engineering Operations, Collaborate with IT, Ensure security best practices are integrated, Develop metrics for senior management, Develop reporting for senior management, Develop metrics for stakeholders, Develop reporting for stakeholders, Identify security risks, Provide actionable insights, Address gaps, Develop governance mechanisms, Maintain governance mechanisms, Develop automation tools, Maintain automation tools, Track Risk Register, Track compliance status, Develop dashboards, Maintain dashboards, Develop regular reporting, Manage management performance metrics, Manage risk metrics", "teamCollaboration" : "Cross-functional departments; Cybersecurity Risk Management; Cybersecurity Engineering Operations; IT; Senior management; Stakeholders", "domainKnowledge" : "Financial services; IT systems; Cybersecurity risk management frameworks; IT general controls; ISO 27001/2; ISO 31000:2009; ISO 27005:2008; NIST Special Publications; NIST Methodologies; California Consumer Privacy Act; Gramm-Leach-Bliley Act; NYDFS Cybersecurity Regulation; PCI-DSS; FFIEC; SOX; Financial regulatory frameworks; Cybersecurity best practices", "domainList" : [ "financial-services", "it-systems", "cybersecurity-risk-management-frameworks", "it-general-controls", "iso-27001-2", "iso-31000-2009", "iso-27005-2008", "nist-special-publications", "nist-methodologies", "california-consumer-privacy-act", "gramm-leach-bliley-act", "nydfs-cybersecurity-regulation", "pci-dss", "ffiec", "sox", "financial-regulatory-frameworks", "cybersecurity-best-practices" ], "domainSpecificKnowledge" : [ "Financial services", "IT systems", "Cybersecurity risk management frameworks", "IT general controls", "ISO 27001/2", "ISO 31000:2009", "ISO 27005:2008", "NIST Special Publications", "NIST Methodologies", "California Consumer Privacy Act", "Gramm-Leach-Bliley Act", "NYDFS Cybersecurity Regulation", "PCI-DSS", "FFIEC", "SOX", "Financial regulatory frameworks", "Cybersecurity best practices" ], "toolProficiency" : [ "Governance automation tools" ], "communicationSkills" : "Communicate complex security concepts", "continuousLearning" : "Tuition reimbursement", "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "5-7 years progressive experience, Bachelor's degree in Cybersecurity, Working knowledge of Cybersecurity risk management frameworks, Working knowledge of Information Security & Risk Frameworks, Working knowledge of CCPA, Working knowledge of GLBA, Working knowledge of NYDFS Cybersecurity Regulation, Working knowledge of PCI-DSS, Working knowledge of FFIEC, Working knowledge of SOX", "qualificationsPreferred" : "Master's degree a plus, CISSP certification highly desirable, CISM certification highly desirable, CRISC certification highly desirable, CGEIT certification highly desirable, CISA certification highly desirable, ITIL certification highly desirable, Basic understanding of financial regulatory frameworks", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Who We Are Through our service brands Hyundai Motor Finance, Genesis Finance, and Kia Finance, Hyundai Capital America offers a wide range of financial products tailored to meet the needs of Hyundai, Genesis, and Kia customers and dealerships. We provide vehicle financing, leasing, subscription, and insurance solutions to over 2 million consumers and businesses. Embodying our commitment to grow, innovate, and diversify, we strive to reimagine the customer and dealer experience and launch innovative new products that broaden our market reach. We believe that success comes from within and are proud to support our team members through skill development and career advancement. Hyundai Capital America is an Equal Opportunity Employer committed to creating a diverse and inclusive culture for our workforce. We are a values-driven company dedicated to supporting both internal and external communities through volunteering, philanthropy, and the empowerment of our Employee Resource Groups. Together, we strive to be the leader in financing freedom of movement. We Take Care of Our People Along with competitive pay, as an employee of HCA, you are eligible for the following benefits: · Medical, Dental and Vision plans that include no-cost and low-cost plan options · Immediate 401(k) matching and vesting · Vehicle purchase and lease discounts plus monthly vehicle allowances · Paid Volunteer Time Off with company donation to a charity of your choice · Tuition reimbursement What to Expect The Cybersecurity Governance Manager plays a critical role in the organization's second line of defense, ensuring policies, governance frameworks, and regulatory adherence in cybersecurity governance, risk and compliance across the organization. This role establishes oversight mechanisms, monitors compliance with industry regulations, and ensures access-related risks are effectively managed. In addition, this role ensures governance and compliance strategies are aligned with business objectives and security standards. What You Will Do 1. Cybersecurity Governance and Risk Management · Manage, maintain and enforce security policies, standards and guidelines related to Cybersecurity governance processes. · Develop, implement, maintain and execute a Cybersecurity Risk Register, Policy Risk Exception Process, and Procedures. · Conduct risk assessments and impact analyses to identify risks, manage remediations, to ensure compliance across business systems, IT Infrastructure, and network operating environments. 2. Cybersecurity Risk Assessment · Perform Global Integrated Security Framework (GSIF) assessments, monitor and ensure remediations are following GSIF ISO 27001 standards across cross-functional departments. · Collaborate with Cybersecurity Risk Management, Cybersecurity Engineering Operations, and IT to ensure security best practices are integrated within each project and system deployment. 3. Cybersecurity Governance and Risk Reporting · Develop metrics and reporting for senior management and stakeholders that identify security risks and provide actionable insights to address gaps. · Develop and maintain the governance mechanisms and automation tools track the Risk Register, and compliance status across the organization. · Develop and maintain dashboards and regular reporting to manage management performance metrics, risk metrics. What You Will Bring · Minimum 5-7 years progressive experience in cybersecurity governance, risk management, or compliance within financial services with a deep understanding of the IT systems. · Bachelor’s degree in Cybersecurity, Information Security, Risk Management or a related field · Master’s degree a plus. · Certifications such as CISSP, CISM, CRISC, CGEIT, CISA, and ITIL are highly desirable. · Working knowledge of Cybersecurity risk management frameworks, Governance, Risk, and Compliance process, IT general controls (e.g. asset classification, risk assessments, vulnerability and threat analysis, risk treatment, audit controls and remediation, vendor risk management, and IT risk management & reporting). · Working knowledge of Information Security & Risk Frameworks including ISO 27001/2, ISO 31000:2009, ISO 27005:2008; NIST Special Publications and Methodologies (e.g. SP800-12, 30, 37, 39, 53,150, 161). · Working knowledge of California Consumer Privacy Act (CCPA), Gramm-Leach-Bliley Act (GLBA), NYDFS Cybersecurity Regulation, PCI-DSS, FFIEC, SOX, and other relevant laws and regulations. · Basic understanding of financial regulatory frameworks and cybersecurity best practices. · Ability to communicate complex security concepts to business leaders and technical teams. Work Environment Employees in this class are subject to extended periods of sitting, standing and walking, and using a computer. Work is performed in an office environment. The posted salary range for this job takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; geographic location, and other business and organizational needs. Successful candidates may be hired anywhere in the salary range based on these factors. It is uncommon to hire candidates at or near the top of the range. California Privacy Notice This notice only applies to our applicants who reside in the State of California. The latest version of our Privacy Policy can be found here . This Privacy Policy provides you with notice, at or before the point of collection, about the categories of personal information to be collected from you, the purposes for which your personal information is collected or used, and whether that information is sold or shared, so that you can exercise meaningful control over our use of your personal information. We are providing this notice to comply with the California Consumer Privacy Act of 2018, as amended as amended by the California Privacy Rights Act of 2020 (“CCPA”). If you have any questions about CCPA regarding California residents or HCA team members, please contact the Privacy Team at Privacy2@hcs.com . United States-California-Irvine", "summaryDescription" : "Cybersecurity GRC Specialist at Hyundai Capital America. Skills: Cybersecurity governance, Risk management, Compliance. Manage security policies. Maintain security policies", "createdAt" : "2026-06-14T02:33:22.264", "lastUpdated" : "2026-06-15T07:26:07.663", "ingestTimestamp" : "2026-06-14T02:33:22.264", "mongoId" : "694ae6ce70f0b99d589b27ff", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 115500, "salaryAnnualMax" : 154000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Policy enforcement", "Risk Register management", "ISO 27001 standards", "ISO 27001", "ISO 31000:2009", "ISO 27005:2008", "NIST Special Publications", "NIST Methodologies", "SP800-12", "SP800-30", "SP800-37", "SP800-39", "SP800-53", "SP800-150", "SP800-161", "Gramm-Leach-Bliley Act", "NYDFS Cybersecurity Regulation", "PCI-DSS", "FFIEC", "SOX", "Leadership", "Cybersecurity governance", "Risk management", "Compliance", "Risk assessments", "Impact analyses", "Remediations", "IT general controls", "Vulnerability analysis", "Threat analysis", "Risk treatment", "Audit controls", "Vendor risk management", "IT risk management", "Reporting", "Financial services", "IT systems", "Cybersecurity risk management frameworks", "ISO 27001/2", "California Consumer Privacy Act", "Financial regulatory frameworks", "Cybersecurity best practices", "CISSP", "CISM", "CRISC", "CGEIT", "CISA", "ITIL", "Governance automation tools" ], "skillCount" : 49, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c8cef74d8ee00a0977ae0", "title" : "Security Officer - Classified Information", "company" : "ICEYE Germany", "industry" : "Operations", "salary" : { "min" : 85000.0, "max" : 120000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager Security Officer in Berlin, Germany, adjusted for the defense industry and company size." }, "location" : "Berlin", "locations" : [ "Berlin" ], "timestamp" : "2026-06-16T03:19:34.454", "fingerprint" : "84d321020f97cdc967dd255ef42822ef3315ea75327eb774610b2ead5e22cb2c", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/iceye/b2cdf1d7-086c-4ea6-a76c-388c871a6148/application", "externalId" : "b2cdf1d7-086c-4ea6-a76c-388c871a6148", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Berlin", "country" : "Germany", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "52.5173885,13.3951309" } ], "locationText" : "Berlin, Germany", "employmentType" : "FULL_TIME", "professionalSkills" : [ "Risk management", "Regulatory compliance", "Legal analysis" ], "hardSkillsList" : [ "Classified information security", "Security framework design", "Personnel security clearances", "IT accreditation", "Secure area design", "Audit trail implementation", "Incident response procedures" ], "hardSkills" : [ { "name" : "Classified information security", "level" : "intermediate" }, { "name" : "Security framework design", "level" : "intermediate" }, { "name" : "Personnel security clearances", "level" : "intermediate" }, { "name" : "IT accreditation", "level" : "intermediate" }, { "name" : "Secure area design", "level" : "intermediate" }, { "name" : "Audit trail implementation", "level" : "intermediate" }, { "name" : "Incident response procedures", "level" : "intermediate" } ], "majorSkills" : "Classified information security, Security framework design, Regulatory compliance", "majorSkillsList" : [ "Classified information security", "Security framework design", "Regulatory compliance" ], "coreResponsibilities" : "Define and execute security roadmap, Build classified information security posture, Design security framework, Run security framework, Represent security framework to authorities, Advise partners on security posture, Act as company's official security officer, Lead interactions with authorities, Represent ICEYE Germany to regulators, Design and implement policies, Design and implement SOPs, Design and implement registries, Design and implement secure areas, Design and implement VS-NfD-konforme IT, Design and implement accreditation pathways, Design and implement audit trail, Drive personnel security clearances, Coordinate personnel clearances, Translate security requirements for business, Unblock bids and customer engagements, Lead partner ecosystem security, Help partners implement security posture, Assess partner security posture, Certify partner security posture, Grow security function team", "teamCollaboration" : "Cross-functional teams; Work with People Operations; Collaborate with sales; Collaborate with product; Collaborate with engineering; Work with industry partners; Work with supply chain", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "German classified information regime; SÜG; VSA; Geheimschutzhandbuch; Geheimschutzbetreuung by BMWi; NATO classification; EU classification; National security; Defence technology; Earth observation; Sovereign intelligence; SAR satellite constellation; VS-NfD; VS-VERTRAULICH; GEHEIM; NATO SECRET; EU SECRET; Facility security clearance; Personnel clearances; IT accreditation; VS-Verwahrgelass; Sicherheitsbereich; Ü1; Ü2; Ü3; Sicherheitsüberprüfung", "domainList" : [ "german-classified-information-regime", "sug", "vsa", "geheimschutzhandbuch", "geheimschutzbetreuung-by-bmwi", "nato-classification", "eu-classification", "national-security", "defence-technology", "earth-observation", "sovereign-intelligence", "sar-satellite-constellation", "vs-nfd", "vs-vertraulich", "geheim", "nato-secret", "eu-secret", "facility-security-clearance", "personnel-clearances", "it-accreditation", "vs-verwahrgelass", "sicherheitsbereich", "u1", "u2", "u3", "sicherheitsuberprufung" ], "domainSpecificKnowledge" : [ "German classified information regime", "SÜG", "VSA", "Geheimschutzhandbuch", "Geheimschutzbetreuung by BMWi", "NATO classification", "EU classification", "National security", "Defence technology", "Earth observation", "Sovereign intelligence", "SAR satellite constellation", "VS-NfD", "VS-VERTRAULICH", "GEHEIM", "NATO SECRET", "EU SECRET", "Facility security clearance", "Personnel clearances", "IT accreditation", "VS-Verwahrgelass", "Sicherheitsbereich", "Ü1", "Ü2", "Ü3", "Sicherheitsüberprüfung" ], "communicationSkills" : "Represent to authorities; Translate requirements", "documentationSkills" : "Audit-ready documentation", "continuousLearning" : "Training opportunities; Professional development; Certification schemes", "specialRequirements" : "Security screening, German security clearance", "outcomesObjectives" : "Operate at every classification level; Build defensible security framework; Achieve facility security clearance; Achieve accredited environments; Achieve path to GEHEIM; Obtain required personnel clearances; Participate in classified procurements; Partners reach required posture; Implement audit-ready documentation; Implement exercises; Implement incident-response procedures", "qualificationsBasic" : "Deep knowledge of German classified information regime, Track record as Sicherheitsbevollmächtigter, Working fluency in NATO and EU classification frameworks", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "- Job Title: Security Officer – Classified Information - Department: ICEYE Germany - Location: Germany (Berlin) - Reports to: CEO, ICEYE Germany - Employment type: Permanent - Working type: On-Site - Employment is subject to applicable security screening (incl. SUPO, where required) THE MISSION OF THE SECURITY OFFICER Build and own the classified information security posture that lets ICEYE Germany operate at every classification level our customers require — from VS-NfD through VS-VERTRAULICH, GEHEIM, and beyond, including the corresponding NATO and EU equivalents. You are the person who turns a blank page into a defensible, audit-ready security framework. You will design it, run it, and represent it to the German authorities who decide whether we can sit at the table on the most sensitive national security work in Europe. You are also the trusted advisor who helps our German industry partners reach the posture they need to deliver alongside us. This is a foundational role. You will not inherit a finished framework — you will build it, and you will be measured on outcomes twelve months from your start date. WHO WE ARE ICEYE is the world leader in sovereign intelligence from space. We deliver persistent monitoring capabilities to detect and respond to changes in any location on Earth. ICEYE owns the world's largest and most advanced SAR (synthetic aperture radar) satellite constellation. To our customers we provide intelligence with unmatched quality, latency and revisit times, in any weather, day or night. To governments who choose to operate their own constellation we provide this proven capability as a sovereign system. ICEYE-built constellations serve customers in defence and intelligence, environmental monitoring, insurance and emergency management. We enable fast decisions that contribute to a safer future. Founded and headquartered in Finland, ICEYE operates globally with over 1000 employees across Europe, North America, the Middle East, and Asia-Pacific. WHAT YOU'LL DO - Own the roadmap. Define and execute the twelve-month plan to take ICEYE Germany from current state to fully cleared operations at VS-NfD, VS-VERTRAULICH, and GEHEIM — including facility security clearance (Sicherheitsbescheid), personnel clearances, IT accreditation, and the operational processes that sit underneath. - Be the Sicherheitsbevollmächtigter. Act as the company's official security officer towards BMWi, BfV, BSI, BAAINBw and other relevant authorities. Lead all interactions with the Geheimschutzbetreuende Stelle and represent ICEYE Germany in front of regulators with credibility and precision. - Build the framework. Design and implement policies, SOPs, registries, secure areas (VS-Verwahrgelass / Sicherheitsbereich), VS-NfD-konforme IT, accreditation pathways toward higher classifications, and the audit trail that makes the whole framework defensible. - Run the clearance pipeline. Drive personnel security clearances (Ü1, Ü2, Ü3) across the German organisation in close coordination with People Operations, candidates, and authorities — keeping timelines tight without compromising rigour. - Enable the business. Translate security requirements into language sales, product, and engineering can act on. Unblock bids and customer engagements rather than slow them down. - Lead the partner ecosystem. Serve as the lead figure helping ICEYE Germany's partners and supply chain implement the equivalent posture on their side — from initial assessment through to certification. - Grow the function. Start as an individual contributor with executive backing; scale the team as workload and classification scope demand it. WHAT WE MEASURE AFTER TWELVE MONTHS - ICEYE Germany holds a valid facility security clearance and operates accredited environments at VS-NfD and VS-VERTRAULICH, with a credible, authority-aligned path to GEHEIM. - The core German team holds the personnel clearances required for our priority programmes. - We are able to participate in classified procurements we could not have addressed without this work. - Key industry partners have reached the posture needed for joint delivery. - Audit-ready documentation, exercises, and incident-response procedures are in place and proven. WHAT WE ARE LOOKING FOR - Deep, hands-on knowledge of the German classified information regime: SÜG, VSA, Geheimschutzhandbuch, and the practical workings of Geheimschutzbetreuung by BMWi. - Track record as Sicherheitsbevollmächtigter (or directly equivalent) inside a German defence, intelligence, aerospace, or critical-infrastructure organisation — ideally one that scaled its classification level during your tenure. - Working fluency in NATO and EU classification frameworks (NATO SECRET, EU SECRET) and how they interlock with German national levels. - Credibility with German federal authorities. You have sat across the table from BMWi, BfV, BSI, BAAINBw or equivalents and know how they think and decide. - Strong grasp of IT security accreditation paths for classified systems — BSI Grundschutz, VS-NfD-konforme IT, and Zulassung for higher classifications. - Builder's mindset. You are energised by a blank page, fast-moving environments, and the responsibility of being the accountable owner. - Fluent German and English, with the ability to brief at executive, authority, and working level. APPLICATION PROCESS 1. Intro conversation with Talent Acquisition (30 min) 2. Hiring manager interview with the CEO, ICEYE Germany (60 min) 3. Technical case: a take-home roadmap exercise — staged plan from current state to GEHEIM, including facility, personnel, and IT accreditation — presented and defended live to a panel (90 min) 4. Cross-functional interviews with Operations, Legal/Compliance, and a senior ICEYE leader (3 × 45 min) 5. Final conversation with the CEO of ICEYE WHAT WE OFFER AT ICEYE At ICEYE, you will join a diverse and highly engaged team united by the ambition to make the impossible possible. We know that we will succeed only through exceptional people in our team — which is why your growth, wellbeing, and success are a priority. As a global scale-up, we combine speed and ambition with the opportunity to take real ownership from day one. You will benefit from continuous professional development, training opportunities, and a culture that values collaboration, curiosity, and integrity. ICEYE is a place where your contributions have a visible impact, and where we celebrate success together. BENEFITS - A job that matters in a dynamic Defence Technology and Earth Observation environment with a scale-up approach - An independent role with a supportive and diverse work environment - Time for self-development, research, training, conferences, or certification schemes Employment is subject to applicable security screening, including German Sicherheitsüberprüfung (Ü1/Ü2/Ü3 as required by the role). OUR COMMITMENT TO DIVERSITY, EQUITY, AND INCLUSION At ICEYE, we believe that diversity isn't just a buzzword – it's our greatest asset. We're committed to fostering an inclusive environment where every voice is not only heard but celebrated. We know that diverse perspectives breed innovation and creativity, which is why we actively seek out individuals from all walks of life, backgrounds, and experiences. Whatever your background, we want you to bring your authentic self to the table. Join us and be part of a team where differences are not only embraced but cherished, because together, we're stronger. We welcome applications from people of all backgrounds, including those who may need workplace adjustments. If you require any specific accommodations or assistance during the recruitment process for any reason, please let us know. Apply now to start your ICEYE journey, and help us continue to make the impossible possible together. Read more about ICEYE and working with us at iceye.com http://iceye.com.", "summaryDescription" : "Security Officer - Classified Information at ICEYE Germany. Skills: Classified information security, Security framework design, Regulatory compliance. Define and execute security roadmap. Build classified information security posture", "createdAt" : "2026-06-14T20:12:32.492", "lastUpdated" : "2026-06-16T03:19:34.454", "ingestTimestamp" : "2026-06-14T20:12:32.492", "mongoId" : "6a2c8cef74d8ee00a0977ae0", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Classified information security", "Security framework design", "Personnel security clearances", "IT accreditation", "Secure area design", "Audit trail implementation", "Incident response procedures", "Regulatory compliance", "Risk management", "Legal analysis", "Roadmap planning", "German classified information regime", "SÜG", "VSA", "Geheimschutzhandbuch", "Geheimschutzbetreuung by BMWi", "NATO classification", "EU classification", "National security", "Defence technology", "Earth observation", "Sovereign intelligence", "SAR satellite constellation", "VS-NfD", "VS-VERTRAULICH", "GEHEIM", "NATO SECRET", "EU SECRET", "Facility security clearance", "Personnel clearances", "VS-Verwahrgelass", "Sicherheitsbereich", "Ü1", "Ü2", "Ü3", "Sicherheitsüberprüfung" ], "skillCount" : 36, "jobCategory" : "operations", "jobSubcategory" : "legal", "seniorityLevel" : "Manager", "dataQualityScore" : 0.7777778, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Defense", "llmIndustryConfidence" : 0.95 }, { "id" : "6a191e7758b93c861e39f752", "title" : "Information Security Consultant", "company" : "Mercedes-Benz Group China Ltd.", "industry" : "Cybersecurity", "salary" : { "min" : 450000.0, "max" : 750000.0, "currency" : "CNY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Information Security Consultant in Beijing, China, adjusted for the technology industry and a large company size." }, "location" : "China (Mainland)-Beijing-Beijing", "locations" : [ "China (Mainland)-Beijing-Beijing", "Daimler Tower 8, Wangjing Street Chaoyang District, , Beijing" ], "certifications" : [ "CISA", "CISSP" ], "timestamp" : "2026-06-15T05:20:15.262", "fingerprint" : "dd6f7339502853ec618745bbfa408f63ca1130a2e121db46e809cf8d32e85f9f", "source" : "taleo", "language" : "en", "applyUrl" : "https://tas-daimler.taleo.net/careersection/ex/jobdetail.ftl?job=873138", "externalId" : "873138", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Beijing", "state" : "Beijing", "country" : "China", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "39.9011168,116.4210134" } ], "locationText" : "Beijing, Beijing, China", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "IT Security, Cloud Security, Network, Web Technologies, Database, Operating Systems", "professionalSkills" : [ "Risk Management", "Compliance", "Security Standards", "Data Protection", "IT operations" ], "hardSkillsList" : [ "Penetration testing", "Vulnerability assessment" ], "hardSkills" : [ { "name" : "Penetration testing", "level" : "intermediate" }, { "name" : "Vulnerability assessment", "level" : "intermediate" } ], "majorSkills" : "Security governance, Security operations, Cloud security", "majorSkillsList" : [ "Security governance", "Security operations", "Cloud security" ], "coreResponsibilities" : "Monitor vulnerabilities, Identify vulnerabilities, Document vulnerabilities, Track remediation, Develop cloud security strategies, Implement cloud security strategies, Govern compliance, Protect confidentiality, Protect integrity, Protect availability, Support risk assessment, Support risk analysis, Monitor risk control implementation, Monitor risk minimization implementation, Identify vulnerabilities in services, Identify vulnerabilities in applications, Order penetration services, Order assessment services, Monitor penetration services, Monitor assessment services, Document assessment results, Ensure mitigation, Ensure minimization, Assess threats, Develop security measures, Assess measure effectiveness, Assist business partners, Classify information, Coordinate security incidents, Participate in incident response, Develop mitigation strategies, Develop remediation strategies, Maintain disaster recovery plans, Maintain application recovery plans, Conduct awareness campaigns, Define security controls, Create security policies, Update security policies, Enforce security policies, Align policies with requirements, Communicate policies, Review policies, Ensure regulatory compliance, Implement controls for regulations, Plan internal security audits, Conduct internal security audits, Assess control effectiveness, Identify improvement areas, Coordinate external audits, Coordinate external assessments, Prepare for audits, Respond to auditor requests, Identify information security risks, Assess information security risks, Manage information security risks, Conduct risk assessments, Develop risk mitigation strategies, Monitor control effectiveness, Develop governance framework, Prepare compliance reports, Submit compliance reports, Track security metrics, Document compliance activities, Communicate security risks, Communicate security issues, Enforce security policies consistently, Monitor policy compliance, Investigate security violations, Take corrective action, Assess supplier security practices, Review vendor contracts, Conduct vendor security assessments, Monitor vendor compliance, Collaborate with IT teams, Collaborate with developers, Collaborate with business stakeholders, Provide security training, Provide security awareness", "teamCollaboration" : "Cross-functional teams; Business stakeholders", "domainKnowledge" : "Information Security; ISO 27001; NIST; Cloud Security", "domainList" : [ "information-security", "iso-27001", "nist", "cloud-security" ], "domainSpecificKnowledge" : [ "Information Security", "ISO 27001", "NIST", "Cloud Security" ], "communicationSkills" : "Awareness campaigns", "documentationSkills" : "Document results", "problemSolvingSkills" : "Vulnerability identification; Threat assessment; Risk assessment", "qualificationsBasic" : "5+ years experience, Security governance experience, Security operations experience, Experience with NIST, Experience with ISO 27001", "qualificationsPreferred" : "CISA certification, CISSP certification", "remoteFriendly" : false, "rawDescription" : "Objective of job Ensure that the organization and IT assets follow the security standard and governance. You monitor and identify vulnerabilities in systems, threats and issues, document it and track the remediation. Develop and implement cloud security strategies. -Responsible for the governance of compliance with policies and processes to protect the confidentiality, integrity and availability of IT assets (information, data and IT services) within the organization. -Responsible for organizational and technical controls -Support in risk assessment and analysis and monitoring the implementation of risk control/minimization measures -Identification of possible vulnerabilities in services and applications. Ordering and monitoring of penetration and assessment services. Document the results and ensure mitigation/minimization -Assessing threats and developing appropriate security measures and assessing their effectiveness -Assist business partners in information classification -Coordination for security incidents and participation in incident response activities, including mitigation and remediation strategies [3] -Take care of actuality of disaster or application recovery plans -Develop and conduct target group orientated awareness campaigns -Define security controls derived from policies Job designation •Developing and Maintaining Security Policies and Standards Responsible for creating, updating, and enforcing information security policies, standards, and procedures that align with legal, regulatory, and contractual requirements. This includes ensuring that policies are comprehensive, clearly communicated, and regularly reviewed. •Ensuring Regulatory Compliance Ensure the organization complies with relevant laws, regulations, and industry standards such as ISO 27001, NIST, and others. This involves understanding the specific requirements of each regulation and implementing controls to meet them. •Security Audits and Assessments -Responsible for planning and conducting internal security audits to assess the effectiveness of security controls and identify areas for improvement. -Coordinate external audits and assessments, ensuring the organization is prepared and responsive to auditor requests. •Risk Management and Governance -Identifying, assessing, and managing information security risks across the organization. This includes conducting regular risk assessments, developing risk mitigation strategies, and monitoring the effectiveness of controls. -Contribute to the development of a strong governance framework for information security. •Compliance Reporting Responsible for preparing and submitting reports to management and regulatory bodies on the organization's security posture and compliance efforts. This includes tracking key security metrics, documenting compliance activities, and communicating security risks and issues to relevant stakeholders. •Policy Enforcement Responsible for ensuring that security policies are consistently enforced across the organization. This includes monitoring compliance with policies, investigating security violations, and taking corrective action when necessary •Supplier Risk Management Assesses the security practices of third-party suppliers and service providers to ensure they meet the organization's security requirements. This includes reviewing vendor contracts, conducting security assessments, and monitoring vendor compliance with security policies •Collaboration and Communication Collaborating with other IT teams, developers, and business stakeholders. Providing security training and awareness to employees. Communicating security risks and recommendations to management. Qualification •Professional Skills: -Deep understanding and experience on: IT Security, Risk Management, Compliance & Security Standards, Knowledge in all relevant Operating Systems, Data Protection -Knowledge of: Cloud Security, Network, Web Technologies, Database, IT operations (ITIL) •Experience with security frameworks, such as NIST, and ISO 27001. •Relevant certifications, CISA, CISSP •> 5 years experience with focus in areas of security governance and security operations Education: Bachelor's degree and above in Computer Science encompassing Information Security Mercedes-Benz Group China Ltd.", "summaryDescription" : "Information Security Consultant at Mercedes-Benz Group China Ltd.. Skills: Security governance, Security operations, Cloud security. Monitor vulnerabilities. Identify vulnerabilities", "createdAt" : "2026-06-14T03:04:11.949", "lastUpdated" : "2026-06-15T05:20:15.262", "ingestTimestamp" : "2026-06-14T03:04:11.949", "mongoId" : "6a191e7758b93c861e39f752", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Penetration testing", "Vulnerability assessment", "Security governance", "Security operations", "Cloud security", "Risk Management", "Compliance", "Security Standards", "Data Protection", "IT operations", "Information Security", "ISO 27001", "NIST", "Cloud Security", "CISA", "CISSP" ], "skillCount" : 16, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca05874d8ee00a09a1fa1", "title" : "Application Security Engineer | Senior", "company" : "Nord Security", "industry" : "NordVPN", "salary" : { "min" : 23000.0, "max" : 30000.0, "currency" : "PLN", "frequency" : "Yearly" }, "location" : "Poland", "locations" : [ "Poland" ], "timestamp" : "2026-06-16T02:09:34.478", "fingerprint" : "856bdcaa0bd58b79ed0d8827c6821d37ca620b93f281885e565c9c0887f7568a", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/nord-security/0a801592-39cd-4feb-8b5b-7b2cff303cc4/application", "externalId" : "0a801592-39cd-4feb-8b5b-7b2cff303cc4", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Poland", "continent" : "eu", "workMode" : "hybrid" } ], "locationText" : "Poland", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SAST, DAST, SCA", "professionalSkills" : [ "Problem-solving", "Investigation" ], "hardSkillsList" : [ "Security assessment", "Network protocols", "Secure coding", "OS security" ], "softSkillsList" : [ "Assertiveness", "Compromise" ], "hardSkills" : [ { "name" : "Security assessment", "level" : "intermediate" }, { "name" : "Network protocols", "level" : "intermediate" }, { "name" : "Secure coding", "level" : "intermediate" }, { "name" : "OS security", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Assertiveness" }, { "name" : "Compromise" } ], "majorSkills" : "Application security, Security assessment, Secure implementation", "majorSkillsList" : [ "Application security", "Security assessment", "Secure implementation" ], "coreResponsibilities" : "Ensure software design security, Define secure implementation practices, Sync with product development teams, Ensure security communication between teams, Act as glue between teams, Plan security tool development, Manage security tool development, Create security review tasks, Cooperate with product teams, Learn about product changes, Make educated security decisions, Ensure mobile/desktop apps tested, Ensure browser extensions tested, Design security training, Deliver security training, Look for internal security gaps, Address security questions, Give advice on product security direction", "teamCollaboration" : "Syncing with teams; Communication between technical teams; Cooperate with product teams", "domainKnowledge" : "VPN; Cybersecurity tools; Online security; Online privacy; Data control; OSI model; TCP/IP models; Mobile applications security; Desktop applications security; Browser extensions security; Linux security; Android security; iOS security; macOS security; Windows security", "domainList" : [ "vpn", "cybersecurity-tools", "online-security", "online-privacy", "data-control", "osi-model", "tcp-ip-models", "mobile-applications-security", "desktop-applications-security", "browser-extensions-security", "linux-security", "android-security", "ios-security", "macos-security", "windows-security" ], "domainSpecificKnowledge" : [ "VPN", "Cybersecurity tools", "Online security", "Online privacy", "Data control", "OSI model", "TCP/IP models", "Mobile applications security", "Desktop applications security", "Browser extensions security", "Linux security", "Android security", "iOS security", "macOS security", "Windows security" ], "continuousLearning" : "Training programs; Mentorship; Career-switch opportunities", "problemSolvingSkills" : "Problem-solving; Investigation", "qualificationsBasic" : "Mobile/desktop applications security assessment experience, Network understanding (OSI, TCP/IP), Experience defining security test scope, Secure coding knowledge, Problem-solving and investigation skills, Experience with different OS security, Ability to build relationships, Ability to make product-related business decisions, Assertiveness and ability to compromise", "qualificationsPreferred" : "SAST/DAST/SCA results experience, Application security testing experience, Mentorship and career-switch opportunities", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "The world’s most advanced VPN, and a whole lot more. If you’re a curious problem-solver who carves their own path, join the team behind Threat Protection Pro, the NordLynx protocol, and the fastest VPN on the planet—tools that put privacy, security, and control back in people’s hands. Your impact? Helping millions take back control of their online security, privacy, and data. Main Responsibilities - Ensure software design security and define secure implementation practices by syncing with teams responsible for the actual product development. - Ensure that security-related communication between technical teams involved in releasing the product is smooth (act as a “glue” between all teams so everyone’s on the same page); - Plan and manage development of security tools within the team; - Create tasks for the product's security reviews (SAST/DAST/SCA results, application security testing, etc.). - Cooperate with product teams to learn about changes introduced into the product early to make educated security decisions. - Ensure mobile/desktop applications and browser extensions are sufficiently tested. - Support internal and external audits; - Design and deliver training for security engineering awareness & adoption. - Actively look for internal security gaps within the product or organization overall. - Address security questions and give advice regarding the direction of the product's security. Core Requirements - Proven experience in mobile/desktop applications security assessment: planning, testing, methodologies, and vulnerability reporting; - Good understanding of how networks work (OSI and TCP/IP models) with a particular focus on VPNs; - Experience working with stakeholders to define the scope of security tests and identify remediation actions to address any vulnerabilities identified; - Knowledge of secure coding practices; - Sense of ownership with strong problem-solving and investigation skills; - Experience with different OS (Linux, Android, iOS, macOS, Windows) security topics; - Ability to build and maintain relationships, influence key stakeholders across the business; - Ability to make product-related business decisions based on threats and vulnerabilities affecting it; - A healthy dose of assertiveness combined with an ability to compromise. WHAT WE OFFER Innovate with industry leaders Work alongside global experts to build world-leading cybersecurity tools, impacting millions of users around the world. Learn & grow Boost your skills via our extensive training programs (online and offline) & other resources. Benefit from mentorship and career-switch opportunities to grow within the company. Hybrid work Enjoy the flexibility with 3 office days and working from home for the remaining 2. Work from anywhere Recharge with a change of scenery – choose work from any location when you feel a need to power your creativity and drive. Physical well-being Fuel your active lifestyle with online workouts led by our Physical Well-Being experts. Unlock a variety of sports and wellness facilities, like gyms, swimming pools, and fitness classes, with the Multisport card. Mental & emotional health Nurture your mind with free psychologist consultations, dedicated mental health events, and premium access to top-rated wellness apps like Calm, Headspace, and Mindletic. Premium healthcare Receive private health insurance giving you peace of mind for your health needs. Joyful moments – special treats Celebrate life’s big moments with special gifts from us on your birthday, anniversary, and other major events, such as weddings or the arrival of a new family member. Company events & team-building Experience iconic Nord Security celebrations, team-buildings, and knowledge-sharing events, nurturing bonds that fuel our success. Workation Embark on a legendary company getaway abroad, filled with exciting activities, live concerts, engaging workshops, and epic time together. Kindly refer to our Privacy Notice for Recruitment Candidates https://drive.google.com/file/d/1b2tV684_SYV1jQ4kuf91cnzrRBk3ef-5/view for comprehensive information regarding our data handling procedures throughout recruitment processes. We expect all candidates to provide accurate and complete information during the recruitment process. While limited use of AI tools to refine application materials is acceptable, candidates remain fully responsible for ensuring that their submissions reflect their own qualifications, skills, and experience. Any failure to do so may negatively affect participation in the recruitment process. If broader AI assistance is allowed for a particular role or stage, we’ll let you know in advance. By submitting your application, you acknowledge that it may be processed using automated tools for evaluation purposes. As part of our recruitment process, we may use an AI-based application review tool to help assess applications based on skills and experience relevant to the role. This technology is used to support - not replace - human decision-making, and every application is ultimately reviewed by a recruiter. If you would like more information about how AI is used in this process or wish to exercise your rights under applicable data privacy laws, please contact us at privacy@nordaccount.com. Should you prefer to opt out of the automated evaluation, please submit your application directly to career@nordsec.com.", "summaryDescription" : "Application Security Engineer | Senior at Nord Security. Skills: Application security, Security assessment, Secure implementation. Ensure software design security. Define secure implementation practices", "createdAt" : "2026-06-14T19:30:33.809", "lastUpdated" : "2026-06-16T02:09:34.478", "ingestTimestamp" : "2026-06-14T19:30:33.809", "mongoId" : "6a2ca05874d8ee00a09a1fa1", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "<30k", "hasSalary" : false, "allSkills" : [ "Security assessment", "Network protocols", "Secure coding", "OS security", "Assertiveness", "Compromise", "Application security", "Secure implementation", "Problem-solving", "Investigation", "VPN", "Cybersecurity tools", "Online security", "Online privacy", "Data control", "OSI model", "TCP/IP models", "Mobile applications security", "Desktop applications security", "Browser extensions security", "Linux security", "Android security", "iOS security", "macOS security", "Windows security" ], "skillCount" : 25, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a306035f292fd229cf882ff", "title" : "Lead Information Systems Security Officer (ISSO)", "company" : "Excella", "salary" : { "min" : 127944.0, "max" : 186600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Arlington, Virginia, United States", "locations" : [ "Arlington", "Virginia", "United States", "Remote Flexible" ], "timestamp" : "2026-06-16T09:12:04.501", "fingerprint" : "d9d23dc8d3f15a73607c57112e43d8a38254b050e707b428c71aaf1681a518b8", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/excella/jobs/4706164005", "externalId" : "4706164005", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" } ], "locationText" : "Arlington, Virginia, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Excella is a transformative technology firm that helps organizations unlock new possibilities. We believe the key to helping clients challenge the status quo and reach new heights lies in our talented people. That’s why we’re committed to developing talent and providing opportunities for career growth at every stage. Join our collaborative team dedicated to solving complex problems with sustainable solutions while building your future as a leader. At Excella, you’re empowered to make lasting impact, turning today’s challenges into tomorrow’s mission successes. Workplace locations look different for everyone. Excellians are a distributed workforce and whether you're working from your home office or a client site, we support a flexible work/life integration regardless of your location. We offer top of industry medical, dental, and vision benefits with multiple options to choose from such as an employer-contributed health savings account, infertility coverage, and orthodontia so you can select the plan that works best for you. Regardless of what stage of life you’re in, Excella wants to support you. We provide 8 weeks of Parental Leave, discounted pet insurance, and a Care.com membership with 3 back-up emergency child or elder care days annually – all available to you on your first day. Starting day one, every employee is bonus eligible and receives 15 days of paid vacation, 6 federal holidays, and 4 floating holidays. Doing your best work means having the best tools! Excella’s TechEleX program provides you with multiple options to suit your technology needs. Choose between a variety of Mac or PC devices, and to ensure your hardware remains current, at the end of a 3-year period Excella will replace your existing computer with a new model from the program. Plus, we’ll even give you the original device to keep for your personal use! With Excella’s Annual Internet Reimbursement benefit, all employees receive an additional $25 per month to help offset the cost of internet access. This initiative reflects our commitment to supporting you in staying connected and productive, no matter where you work. We'll invest in your career by providing 3 days of paid professional development every year, including an allowance for registration fees to attend classes, conferences, or obtain professional certifications. We encourage mindfulness and overall well-being through employee wellness events, a HeadSpace membership, as well as access to TalkSpace and mental health coverage through our medical plans. Overview Excella is seeking an Information Systems Security Officer (ISSO) to support a federal government customer. In this role, you will lead efforts to gather and organize technical information about the program’s security posture and collaborate across teams to support ongoing security authorization activities. This position requires someone who can communicate effectively at all levels of the organization, exercise sound judgment with sensitive information, and proactively manage security documentation and compliance activities in a dynamic federal environment. The ability to hold and maintain a DHS Public Trust is required. Responsibilities Lead efforts to gather and organize technical information about the program’s security posture and collaborate across teams to support ongoing security authorization. Proactively create, monitor, and update the status of POA&Ms to ensure weaknesses are resolved in accordance with their scheduled completion dates. Create Waivers or Risk Acceptance Memos to support effective management of system risks. Conduct annual assessments in accordance with DHS Information Security Performance Plan guidance. Review and update security authorization documents as needed, at minimum annually. Coordinate with Privacy, Records, and Information Governance Divisions on compliance documentation and requirements. Conduct Contingency Plan tests at least annually and update the plan accordingly. Perform system self-assessments as part of the customer’s Ongoing Authorization program. Monitor and respond to Information Security Vulnerability Management (ISVM) and Patch Management requirements. Provide audit support (Financial, A-123, FISMA, internal, DHS, etc.) through all phases — Pre, During, and Post Audit. Maintain current knowledge of inventory within the accreditation boundary. Proactively ensure security requirements are incorporated into the development cycle (Waterfall, Agile, DevSecOps). Ensure configuration management processes are followed to prevent the introduction of new security risks. Respond to emerging requirements driven by legislation, regulation, or policy changes. Support annual independent assessments per DHS Information Security Performance Plan guidance. Qualifications 8+ years of experience in information security. Expertise in cybersecurity best practices, vulnerability management, and cybersecurity scanning tools. Expertise in Federal data privacy requirements and cloud-hosted cybersecurity management practices. One or more of the following certifications: CompTIA Security+ or equivalent Cloud Security certification (e.g., CCSP, AWS Security Specialty, Google Professional Cloud Security Engineer) Information Systems Security certification (e.g., CISSP, SSCP) Information Systems Security Management certification (e.g., CISM, CISSP-ISSMP) Ability to hold and maintain a DHS Public Trust. This range represents the minimum and maximum base salary that Excella reasonably and in good faith expects to pay for this role. Actual compensation within the range will depend on factors such as skills, experience, training, certifications, and organizational needs. It is not typical for an individual to be hired at or near the top or bottom of the range. Your pay also includes the opportunity for an annual bonus in addition to the base salary. This variable pay opportunity is dependent upon the attainment of shared firmwide goals and objectives as determined by Excella’s Executive Team. Certain eligibility and pro-ration rules apply. Should your experience and knowledge qualify you for a different position or title within Excella, we may consider you for positions that better align with your qualifications. In that case, we will provide the range for those positions as well. Pay Range $127,944—$186,600 USD Excella is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law. Excella is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application or interview process, contact Recruiting@excella.com or 703-840-8600. KNOW YOUR RIGHTS", "summaryDescription" : "Lead Information Systems Security Officer (ISSO) at Excella", "postedDate" : "2026-06-15T23:24:50.546", "createdAt" : "2026-06-15T23:24:50.546", "lastUpdated" : "2026-06-16T09:12:04.501", "ingestTimestamp" : "2026-06-15T23:24:50.546", "mongoId" : "6a306035f292fd229cf882ff", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 127944, "salaryAnnualMax" : 186600, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.8888889, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a180e6658b93c861e0862a1", "title" : "Application Support Specialist (Information Security GRC Tool)", "company" : "Deutsche Telekom IT Solutions", "industry" : "Information Technology And Services", "location" : "Budapest,Szeged, Debrecen, Pécs, HU", "locations" : [ "Budapest,Szeged, Debrecen, Pécs", "HU" ], "timestamp" : "2026-05-28T13:09:39.957", "fingerprint" : "d9d197687f9866a5a3f53f04bf1e5f7531d38b1deb064baefab9e475bf112633", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/DeutscheTelekomITSolutions/744000128885379-application-support-specialist-information-security-grc-tool-", "externalId" : "744000128885379", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Budapest", "country" : "Hungary", "continent" : "eu", "source" : "llm", "workMode" : "onsite" }, { "city" : "Szeged", "country" : "Hungary", "continent" : "eu", "source" : "llm", "workMode" : "onsite" }, { "city" : "Debrecen", "country" : "Hungary", "continent" : "eu", "source" : "llm", "workMode" : "onsite" }, { "city" : "Pécs", "country" : "Hungary", "continent" : "eu", "source" : "llm", "workMode" : "onsite" } ], "locationText" : "Budapest, Hungary; Szeged, Hungary; Debrecen, Hungary; Pécs, Hungary", "employmentType" : "FULL_TIME", "minimumEducation" : "Degree in IT, Engineering, or related field", "experienceMinYears" : 0, "experienceMaxYears" : 2, "experienceLevel" : "entry", "technicalSkills" : "Python, XML, Excel, SQL, Jira, ServiceNow, MS PowerAutomate", "professionalSkills" : [ "Information Security", "GRC", "Risk Management", "Privacy Mgmt", "Vendor coordination", "Product support", "Application support" ], "hardSkillsList" : [ "Python scripting", "automation experience", "Basic SQL knowledge", "Advanced Excel skills", "data modelling" ], "softSkillsList" : [ "analytical and structured thinking", "Customer-oriented", "user-centric mindset" ], "hardSkills" : [ { "name" : "Python scripting", "level" : "intermediate" }, { "name" : "automation experience", "level" : "intermediate" }, { "name" : "Basic SQL knowledge", "level" : "intermediate" }, { "name" : "Advanced Excel skills", "level" : "intermediate" }, { "name" : "data modelling", "level" : "intermediate" } ], "softSkills" : [ { "name" : "analytical and structured thinking" }, { "name" : "Customer-oriented" }, { "name" : "user-centric mindset" } ], "majorSkills" : "GRC Tool, Information Security, Python, SQL", "majorSkillsList" : [ "GRC Tool", "Information Security", "Python", "SQL" ], "coreResponsibilities" : "Provide direct support, Develop and automate workflow, Gather and structure business/user requirements, Operate and continuously improve GRC application, Define use cases, Translate into technical specifications, Manage and prioritize change requests, Develop/automate workflows & reporting, Perform testing and validation, Improve user experience and usability", "teamCollaboration" : "act as a bridge between business stakeholders and the development vendor; ensuring effective collaboration with the company developing the tool; work in an international environment", "projectManagementSkills" : [ "Manage and prioritize change requests" ], "domainKnowledge" : "GRC; Risk Management; Information Security; Privacy Mgmt", "domainList" : [ "grc", "risk-management", "information-security", "privacy-mgmt" ], "domainSpecificKnowledge" : [ "GRC", "Risk Management", "Information Security", "Privacy Mgmt" ], "toolProficiency" : [ "Excel", "Jira", "ServiceNow" ], "communicationSkills" : "Excellent communication skills; communication skills across both technical and business audiences", "problemSolvingSkills" : "analytical and structured thinking", "qualificationsBasic" : "Degree in IT, Engineering, or related field, Fluent English", "qualificationsPreferred" : "Advanced Excel skills (e. g. Power Query, advanced formulas, data modelling is a plus), German language skills are a big plus", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "As Hungary’s most attractive employer in 2025 (according to Randstad’s representative survey), Deutsche Telekom IT Solutions is a subsidiary of the Deutsche Telekom Group. The company provides a wide portfolio of IT and telecommunications services with more than 5300 employees. We have hundreds of large customers, corporations in Germany and in other European countries. DT-ITS recieved the Best in Educational Cooperation award from HIPA in 2019, acknowledged as the the Most Ethical Multinational Company in 2019. The company continuously develops its four sites in Budapest, Debrecen, Pécs and Szeged and is looking for skilled IT professionals to join its team. We are looking for a colleague who can act both as a power user supporting expert users directly, and as a bridge between business stakeholders and the development vendor. In this role, you will be responsible for understanding user needs, structuring them, translating them into technical requirements, and ensuring effective collaboration with the company developing the tool by: * Providing direct support to develop and automate workflow to our international security/privacy community * Gather and structure business/user requirements * Operate and continuously improve the internal GRC application * Define use cases and translate them into clear technical specifications * Manage and prioritize change requests with our internal/external vendors * Develop/automate workflows & reporting (Python / XML / Excel / SQL) * Perform testing and validation (User Acceptance Test) for new features and releases * Improve user experience and usability of the tool ## Qualifications * Degree in IT, Engineering, or related field * Advanced Excel skills (e.g. Power Query, advanced formulas, data modelling is a plus) * Python scripting or general automation experience * Basic SQL knowledge * Strong analytical and structured thinking * Fluent English (daily working language, spoken and written) * Excellent communication skills across both technical and business audiences * Customer-oriented, user-centric mindset * Ability and willingness to work in an international environment ## Additional Information * Experience in GRC, Risk Management, Information Security or Privacy Mgmt * Familiarity with ticketing or backlog management tools (e.g. Jira, ServiceNow) * Knowledge of data visualization / e.g. MS PowerAutomate * Experience with vendor coordination or product/application support * German language skills are a big plus *Please be informed that our remote working possibility is only available within Hungary due to European taxation regulation. * Please be informed that our remote working possibility is only available within Hungary due to European taxation regulation.", "summaryDescription" : "Application Support Specialist (Information Security GRC Tool) at Deutsche Telekom IT Solutions. Skills: GRC Tool, Information Security, Python, SQL. Provide direct support. Develop and automate workflow", "postedDate" : "2026-05-28T08:09:19.000", "createdAt" : "2026-05-28T13:09:06.025", "lastUpdated" : "2026-05-28T13:09:39.957", "ingestTimestamp" : "2026-05-28T13:09:06.025", "mongoId" : "6a180e6658b93c861e0862a1", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "hasSalary" : false, "allSkills" : [ "Python scripting", "automation experience", "Basic SQL knowledge", "Advanced Excel skills", "data modelling", "analytical and structured thinking", "Customer-oriented", "user-centric mindset", "GRC Tool", "Information Security", "Python", "SQL", "GRC", "Risk Management", "Privacy Mgmt", "Vendor coordination", "Product support", "Application support", "Manage and prioritize change requests", "Excel", "Jira", "ServiceNow" ], "skillCount" : 22, "jobCategory" : "engineering", "jobSubcategory" : "Telekom Security", "dataQualityScore" : 0.8888889, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "IT and telecommunications" }, { "id" : "6a0d73f058b93c861e8e3e36", "title" : "Application Support Specialist (Information Security GRC Tool)", "company" : "Deutsche Telekom IT Solutions", "industry" : "Information Technology And Services", "location" : "Budapest,Szeged, Debrecen, Pécs, HU", "locations" : [ "Budapest,Szeged, Debrecen, Pécs", "HU" ], "timestamp" : "2026-05-20T11:25:00.656", "fingerprint" : "d222e4cf6dc01e6a5a7e27010a527ebfbcf9efc3fc09817db0d669275ce773e0", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/DeutscheTelekomITSolutions/744000127030564-application-support-specialist-information-security-grc-tool-", "externalId" : "744000127030564", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Budapest", "country" : "Hungary", "continent" : "eu", "source" : "llm", "workMode" : "onsite" }, { "city" : "Szeged", "country" : "Hungary", "continent" : "eu", "source" : "llm", "workMode" : "onsite" }, { "city" : "Debrecen", "country" : "Hungary", "continent" : "eu", "source" : "llm", "workMode" : "onsite" }, { "city" : "Pécs", "country" : "Hungary", "continent" : "eu", "source" : "llm", "workMode" : "onsite" } ], "locationText" : "Budapest, Hungary; Szeged, Hungary; Debrecen, Hungary; Pécs, Hungary", "employmentType" : "FULL_TIME", "minimumEducation" : "Degree in IT, Engineering, or related field", "experienceMinYears" : 0, "experienceMaxYears" : 2, "experienceLevel" : "entry", "technicalSkills" : "Excel, Power Query, SQL, VBA, scripting, automation, data visualization, BI tools", "professionalSkills" : [ "Information Security GRC Tool", "GRC", "Risk Management", "ISMS", "Risk Management processes", "vendor coordination", "product/application support" ], "hardSkillsList" : [ "Advanced Excel skills", "Basic SQL knowledge", "Fluent English", "VBA / scripting or general automation experience", "data visualization / BI tools" ], "softSkillsList" : [ "analytical and structured thinking", "Customer-oriented", "user-centric mindset", "Supportive", "bondable team", "Helpful colleagues" ], "hardSkills" : [ { "name" : "Advanced Excel skills", "level" : "intermediate" }, { "name" : "Basic SQL knowledge", "level" : "intermediate" }, { "name" : "Fluent English", "level" : "intermediate" }, { "name" : "VBA / scripting or general automation experience", "level" : "intermediate" }, { "name" : "data visualization / BI tools", "level" : "intermediate" } ], "softSkills" : [ { "name" : "analytical and structured thinking" }, { "name" : "Customer-oriented" }, { "name" : "user-centric mindset" }, { "name" : "Supportive" }, { "name" : "bondable team" }, { "name" : "Helpful colleagues" } ], "majorSkills" : "Application Support, Information Security GRC Tool, user needs understanding, technical requirements translation, collaboration with development vendor, GRC application operation and improvement, report and data processing automation", "majorSkillsList" : [ "Application Support", "Information Security GRC Tool", "user needs understanding", "technical requirements translation", "collaboration with development vendor", "GRC application operation and improvement", "report and data processing automation" ], "coreResponsibilities" : "Providing direct support to an international community of expert users (risk, security, compliance), Gather and structure business/user requirements, Define use cases and translate them into clear technical specifications, Maintain and refine backlog items, Manage and prioritize change requests with our vendors, Align on developments and track releases, Operate and continuously improve the internal GRC application, Develop and automate reports and data processing, Perform testing and validation (UAT mindset) for new features and releases, Support ISMS and Risk Management processes in an international environment, Improve user experience and usability of the tool", "teamCollaboration" : "act as a bridge between business stakeholders and the development vendor; ensuring effective collaboration with the company developing the tool; Supportive, bondable team; Helpful colleagues in Germany (as your future direct contacts)", "projectManagementSkills" : [ "Maintain and refine backlog items", "Manage and prioritize change requests" ], "domainKnowledge" : "Information Security GRC Tool; GRC; Risk Management; Information Security; ISMS", "domainList" : [ "information-security-grc-tool", "grc", "risk-management", "information-security", "isms" ], "domainSpecificKnowledge" : [ "Information Security GRC Tool", "GRC", "Risk Management", "Information Security", "ISMS" ], "toolProficiency" : [ "Excel", "Power Query", "SQL", "Jira", "ServiceNow" ], "communicationSkills" : "Excellent communication skills across both technical and business audiences; Fluent English (daily working language, spoken and written)", "innovationCreativity" : "Improve user experience and usability of the tool", "problemSolvingSkills" : "analytical and structured thinking", "specialRequirements" : "Ability and willingness to work in an international environment", "outcomesObjectives" : "Operate and continuously improve the internal GRC application; Develop and automate reports and data processing; Improve user experience and usability of the tool", "qualificationsBasic" : "Degree in IT, Engineering, or related field, Advanced Excel skills, Basic SQL knowledge, analytical and structured thinking, Excellent communication skills across both technical and business audiences, Customer-oriented, user-centric mindset, Fluent English (daily working language, spoken and written), Ability and willingness to work in an international environment", "qualificationsPreferred" : "Power Query, advanced formulas, data modelling is a plus, VBA / scripting or general automation experience, Experience in GRC, Risk Management, or Information Security, Familiarity with ticketing or backlog management tools (e.g. Jira, ServiceNow), Knowledge of data visualization / BI tools, German language skills, Experience with vendor coordination or product/application support", "remoteFriendly" : false, "workSiteFlexibility" : "Remote working possibility is only available within Hungary due to European taxation regulation.", "rawDescription" : "As Hungary’s most attractive employer in 2025 (according to Randstad’s representative survey), Deutsche Telekom IT Solutions is a subsidiary of the Deutsche Telekom Group. The company provides a wide portfolio of IT and telecommunications services with more than 5300 employees. We have hundreds of large customers, corporations in Germany and in other European countries. DT-ITS recieved the Best in Educational Cooperation award from HIPA in 2019, acknowledged as the the Most Ethical Multinational Company in 2019. The company continuously develops its four sites in Budapest, Debrecen, Pécs and Szeged and is looking for skilled IT professionals to join its team. We are looking for a colleague who can act both as a power user supporting expert users directly, and as a bridge between business stakeholders and the development vendor. In this role, you will be responsible for understanding user needs, structuring them, translating them into technical requirements, and ensuring effective collaboration with the company developing the tool by: * Providing direct support to an international community of expert users (risk, security, compliance) * Gather and structure business/user requirements * Define use cases and translate them into clear technical specifications * Maintain and refine backlog items * Manage and prioritize change requests with our vendors * Align on developments and track releases * Operate and continuously improve the internal GRC application * Develop and automate reports and data processing (Excel / SQL / other tools) * Perform testing and validation (UAT mindset) for new features and releases * Support ISMS and Risk Management processes in an international environment * Improve user experience and usability of the tool ## Qualifications * Degree in IT, Engineering, or related field * Advanced Excel skills (e.g. Power Query, advanced formulas, data modelling is a plus) * Basic SQL knowledge * Strong analytical and structured thinking * Excellent communication skills across both technical and business audiences * Customer-oriented, user-centric mindset * Fluent English (daily working language, spoken and written) * Ability and willingness to work in an international environment ## Additional Information * VBA / scripting or general automation experience * Experience in GRC, Risk Management, or Information Security * Familiarity with ticketing or backlog management tools (e.g. Jira, ServiceNow) * Knowledge of data visualization / BI tools * German language skills * Experience with vendor coordination or product/application support What our team can offer: * Supportive, bondable team * Helpful colleagues in Germany (as your future direct contacts) *Please be informed that our remote working possibility is only available within Hungary due to European taxation regulation. * Please be informed that our remote working possibility is only available within Hungary due to European taxation regulation.", "summaryDescription" : "Application Support Specialist (Information Security GRC Tool) at Deutsche Telekom IT Solutions. Skills: Application Support, Information Security GRC Tool, user needs understanding, technical requirements translation, collaboration with development vendor, GRC application operation and improvement, report and data processing automation. Providing direct support to an international community of expert users (risk, security, compliance). Gather and structure business/user requirements", "postedDate" : "2026-05-18T15:47:08.000", "createdAt" : "2026-05-20T11:18:23.558", "lastUpdated" : "2026-05-20T11:25:00.656", "ingestTimestamp" : "2026-05-20T11:18:23.558", "mongoId" : "6a0d73f058b93c861e8e3e36", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "hasSalary" : false, "allSkills" : [ "Advanced Excel skills", "Basic SQL knowledge", "Fluent English", "VBA / scripting or general automation experience", "data visualization / BI tools", "analytical and structured thinking", "Customer-oriented", "user-centric mindset", "Supportive", "bondable team", "Helpful colleagues", "Application Support", "Information Security GRC Tool", "user needs understanding", "technical requirements translation", "collaboration with development vendor", "GRC application operation and improvement", "report and data processing automation", "GRC", "Risk Management", "ISMS", "Risk Management processes", "vendor coordination", "product/application support", "Maintain and refine backlog items", "Manage and prioritize change requests", "Information Security", "Excel", "Power Query", "SQL", "Jira", "ServiceNow" ], "skillCount" : 32, "jobCategory" : "engineering", "jobSubcategory" : "Telekom Security", "dataQualityScore" : 0.8888889, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "IT and telecommunications" }, { "id" : "6a305b5ff292fd229cf5cfa2", "title" : "Information System Security Officer (ISSO)", "industry" : "Government", "salary" : { "min" : 95000.0, "max" : 135000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an Information System Security Officer in the United States, adjusted for mid-seniority and government industry in the Wright Patterson Air Force Base area." }, "location" : "Wright Patterson Air Force Base, OH", "locations" : [ "Wright Patterson Air Force Base, OH" ], "certifications" : [ "DoD 8570.01-M IAM Level II or III", "CISSP" ], "timestamp" : "2026-06-16T05:21:20.586", "fingerprint" : "baef343129e02bf44b7e8af56e282c0f7f9b2e0a17dd10febc2179967883b57a", "source" : "jazzhr", "language" : "en", "externalId" : "IUvLm6nPQp", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Wright Patterson Air Force Base", "state" : "Ohio", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.8219053,-84.0495886" } ], "locationText" : "Wright Patterson Air Force Base, Ohio, United States", "technicalSkills" : "RMF, DIACAP, NIST", "majorSkills" : "Information Security, Risk Management, Cybersecurity", "majorSkillsList" : [ "Information Security", "Risk Management", "Cybersecurity" ], "coreResponsibilities" : "Develop and maintain security documentation, Conduct security assessments, Implement security controls, Monitor system security, Respond to security incidents, Provide security training, Ensure compliance with regulations", "teamCollaboration" : "System administrators; Developers; Security team", "domainKnowledge" : "DoD security requirements; RMF framework; DIACAP framework; NIST guidelines", "domainList" : [ "dod-security-requirements", "rmf-framework", "diacap-framework", "nist-guidelines" ], "domainSpecificKnowledge" : [ "DoD security requirements", "RMF framework", "DIACAP framework", "NIST guidelines" ], "communicationSkills" : "Security briefings", "documentationSkills" : "Security documentation", "problemSolvingSkills" : "Risk analysis", "specialRequirements" : "Security clearance", "qualificationsBasic" : "5+ years ISSO experience, Bachelor's degree, DoD 8570.01-M IAM Level II or III certification", "qualificationsPreferred" : "Master's degree, CISSP certification", "workSiteFlexibility" : "Onsite", "summaryDescription" : "Information System Security Officer (ISSO). Skills: Information Security, Risk Management, Cybersecurity. Develop and maintain security documentation. Conduct security assessments", "createdAt" : "2026-06-15T22:22:43.417", "lastUpdated" : "2026-06-16T05:21:20.586", "ingestTimestamp" : "2026-06-15T22:22:43.417", "mongoId" : "6a305b5ff292fd229cf5cfa2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 95000, "salaryAnnualMax" : 135000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Information Security", "Risk Management", "Cybersecurity", "DoD security requirements", "RMF framework", "DIACAP framework", "NIST guidelines", "DoD 8570.01-M IAM Level II or III", "CISSP" ], "skillCount" : 9, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.44444445, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c6c3174d8ee00a09176d2", "title" : "Information Security & Compliance Officer", "company" : "Herotel", "industry" : "Cybersecurity", "salary" : { "min" : 550000.0, "max" : 850000.0, "currency" : "ZAR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Mid-level Information Security & Compliance Officer in the Technology industry in Plattekloof, South Africa, adjusted for company size and full-time employment." }, "location" : "Plattekloof, ZA", "locations" : [ "Plattekloof", "ZA" ], "timestamp" : "2026-06-16T02:25:52.431", "fingerprint" : "d132db59283ed0e6b6644dbc877ef8326399220a31df34044b874d29a3f4c08a", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://herotel-5f74feffb7e1.breezy.hr/p/8fdeb6bfb377-information-security-compliance-officer", "externalId" : "8fdeb6bfb377", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Plattekloof", "country" : "South Africa", "continent" : "af", "source" : "llm", "workMode" : "onsite", "geo" : "-33.8775000,18.5855556" } ], "locationText" : "Plattekloof, South Africa", "employmentType" : "FULL_TIME", "coreResponsibilities" : "Take ownership of safeguarding Herotel’s digital environment", "rawDescription" : "Are you passionate about cybersecurity, threat detection, and protecting critical business systems? Join our IT team as an Information Security & Compliance Officer in Plattekloof and take ownership of safeguarding Herotel’s digital environment across our national footprint. The key purpose of", "summaryDescription" : "Information Security & Compliance Officer at Herotel. Take ownership of safeguarding Herotel’s digital environment", "createdAt" : "2026-06-14T18:55:42.519", "lastUpdated" : "2026-06-16T02:25:52.431", "ingestTimestamp" : "2026-06-14T18:55:42.519", "mongoId" : "6a2c6c3174d8ee00a09176d2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.6666667, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a30519bf292fd229cf0320a", "title" : "Financial Data Application Specialist", "company" : "AlphaSense", "industry" : "SaaS", "salary" : { "min" : 110000.0, "max" : 150000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Financial Data Application Specialist in the US SaaS industry, adjusted for company size and remote work." }, "location" : "Remote - United States", "locations" : [ "Remote - United States" ], "timestamp" : "2026-06-16T08:22:27.217", "fingerprint" : "72716064eef54cded556ee70f4b8b3fb77c76aa7573f8d9d04aecaecd04b37e5", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/alphasense/jobs/8584930002", "externalId" : "8584930002", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "employmentType" : "FULL_TIME", "technicalSkills" : "AI", "professionalSkills" : [ "Financial data analysis", "Quantitative analysis", "Valuation decisions", "Sales enablement", "Product marketing", "Support articles" ], "hardSkillsList" : [ "Financial modeling" ], "softSkillsList" : [ "Entrepreneurial minded", "Teaching", "Enablement" ], "hardSkills" : [ { "name" : "Financial modeling", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Entrepreneurial minded" }, { "name" : "Teaching" }, { "name" : "Enablement" } ], "majorSkills" : "Financial data, Sales, Customer success, Technical implementation", "majorSkillsList" : [ "Financial data", "Sales", "Customer success", "Technical implementation" ], "coreResponsibilities" : "Assist sales in demos, Assist sales in strategic trials, Run trial training calls, Overcome common objections, Communicate value proposition, Speak with users, Visit users, Provide advanced training, Provide customizations, Provide product consultations, Build custom templates, Build bespoke modeling tools, Package use cases for sales, Package use cases for account management, Create how-to videos, Create enablement materials, Create support articles, Field feedback, Identify product opportunities, Relay product information, Act as escalation point, Resolve challenges, Integrate modeling solutions", "teamCollaboration" : "Partner with sales; Partner with product; Partner with marketing; Partner with leadership; Work with account management", "domainKnowledge" : "Financial data; Investment decisions; Valuation decisions; Capital markets", "domainList" : [ "financial-data", "investment-decisions", "valuation-decisions", "capital-markets" ], "domainSpecificKnowledge" : [ "Financial data", "Investment decisions", "Valuation decisions", "Capital markets" ], "toolProficiency" : [ "Excel Add-ins" ], "communicationSkills" : "Distill complex issues; Explain complex issues", "qualificationsBasic" : "Client-facing professional, Develop rapport with people, Maintain relationships, Speak the language of finance, Analyze company financial data, Benchmark financial data, Understand quantitative tools, Become SME for financial data", "qualificationsPreferred" : "New York City strongly preferred", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "About AlphaSense: The world’s most sophisticated companies rely on AlphaSense to remove uncertainty from decision-making. With market intelligence and search built on proven AI, AlphaSense delivers insights that matter from content you can trust. Our universe of public and private content includes equity research, company filings, event transcripts, expert calls, news, trade journals, and clients’ own research content. The acquisition of Tegus by AlphaSense in 2024 advances our shared mission to empower professionals to make smarter decisions through AI-driven market intelligence. Together, AlphaSense and Tegus will accelerate growth, innovation, and content expansion, with complementary product and content capabilities that enable users to unearth even more comprehensive insights from thousands of content sets. Our platform is trusted by over 6,000 enterprise customers, including a majority of the S&P 500. Founded in 2011, AlphaSense is headquartered in New York City with more than 2,000 employees across the globe and offices in the U.S., U.K., Finland, India, Singapore, Canada, and Ireland. Come join us! Location: New York City strongly preferred, Remote considered Reports To: Manager, Financial Data Application Specialists About the Role The Financial Data Application Specialist role at AlphaSense lives at the intersection of sales, customer success, and technical implementation for AlphaSense’s financial data products. This is a new team at AlphaSense supporting a strategic area of investment for the business, so we are looking for entrepreneurial minded people that can use learnings from client discussions to help optimize both our go-to-market and product strategies. Specialists add value across our revenue organization by building relationships with prospects and clients, providing deep technical knowledge to demonstrate the value of AlphaSense’s financial data while helping to drive adoption. Due to the extensive exposure that Specialists have with clients, they’re also in a prime location to partner with our sales, product, marketing and leadership teams in determining future product developments that will resonate with the market. What You’ll Do Growth Initiatives: Assist sales in demos and strategic trials of AlphaSense’s financial data solutions. The team also runs trial training calls, making the ability to overcome common objections and communicate our value proposition essential to success. Customer Health: The team works hand in hand with account management, speaking with and visiting users to provide advanced training, customizations, and product consultations. Specialists often drive adoption by building custom templates or other bespoke modeling tools for our customers. Subject Matter Expert: Specialists have expertise in quantitative analysis for investment and valuation decisions. They know the use cases that our customers are likely to care about, and package it for utilization by sales and account management. This can come in the form of how-to videos, enablement, product marketing, support articles and others that can be used for meetings or email distribution. Product Direction: Because of our Specialists’ deep understanding of both our financial data products and customers, they are in a position to field feedback and identify product opportunities, and relay that information across the organization (account management, account executives, product, management). Consultative Support: Act as an escalation point for our product and support teams on difficult scenarios our customers may face with our solutions, particularly when leveraging Excel Add-ins. Manage and resolve challenges related to the full integration of our modeling solutions into our clients’ workflows. Who You Are A client-facing professional with a superior ability to develop rapport with new people, and to maintain relationships, combined with a positive and proactive personality. Someone who has worked with external stakeholders — whether senior investment professionals, corporate development and M&A teams, investor relations, corporate strategy, or competitive intelligence functions — and wants to spend their time client-facing and actively engaged with them. Someone who can speak the language of finance and knows how to analyze a company’s financial data, benchmark it against its peers, and understand how professionals in these roles use quantitative tools to make decisions. Committed to becoming a SME for financial data across all industries, personas, and verticals. A passion for technology, AI, and the capital markets. Excellent in 360 degree communication and collaboration. Able to distill and explain complex issues in simple terms — this is a teaching and enablement role, helping clients learn to do things with our product rather than doing the work for them. Genuine interest to learn how the different tools we’ve built contribute to our clients’ processes, to help identify when a particular client should be using them, and to identify solutions that solve for a client’s needs. Intrinsically motivated and a self-starter, with the ability to stay energized in repetitive client conversations and contribute to a dynamic and entrepreneurial team culture. Strong time management, organization, and task prioritization skills, with comfort juggling many moving pieces across a fast-moving, high-growth team. An independent problem-solver, making multiple efforts to solve problems on your own before escalating. Comfortable working in ambiguity, and flexible enough to adapt as needed to drive customer happiness, ideally with experience operating in a smaller, high-growth team environment. Familiar with the institutional investor landscape, financial markets, and investment research — or with the corporate finance landscape (corporate development, M&A, FP&A, IR, strategy) and the quantitative tools those teams rely on. Minimum Qualifications A foundation in finance or corporate finance — for example, progress toward a CFA or a bachelor’s degree in Economics/Finance/Accounting, OR equivalent hands-on exposure to financial analysis through a corporate development, M&A, investor relations, corporate strategy, or competitive intelligence function. 2-4 years of relevant experience in equity research, investment management, private equity, accounting, consulting, corporate development/M&A, investor relations, or a comparable client- or stakeholder-facing role, with a strong desire to move toward client-facing positions. Demonstrated ability to work with financial data in some form — for example, building or interpreting a comparable company's analysis, benchmarking a company against its peers, or understanding how you would approach that work. You do not need to have built three-statement models yourself, but you must be able to speak the language of finance and do benchmarking. Strong Excel abilities (nice to have: familiarity with AI powered spreadsheet tools and/or experience leveraging generative AI tools within productivity software). Excellent communication skills, as you must manage relationships with high-profile fund managers, corporate finance leaders, and junior analysts alike. For base compensation, we set standard ranges for all roles based on function and level benchmarked against similar stage growth companies and internal comparables. In order to be compliant with local legislation, as well as to provide greater transparency to candidates, we share salary ranges on all job postings regardless of desired hiring location. Final offer amounts are determined by multiple factors including candidate experience/expertise and may vary from the amounts listed below. You may also be offered a performance-based bonus, equity, and a generous benefits program. Base Compensation Range $100,000—$125,000 USD AlphaSense is an equal-opportunity employer. We are committed to a work environment that supports, inspires, and respects all individuals. All employees share in the responsibility for fulfilling AlphaSense’s commitment to equal employment opportunity. AlphaSense does not discriminate against any employee or applicant on the basis of race, color, sex (including pregnancy), national origin, age, religion, marital status, sexual orientation, gender identity, gender expression, military or veteran status, disability, or any other non-merit factor. This policy applies to every aspect of employment at AlphaSense, including recruitment, hiring, training, advancement, and termination. In addition, it is the policy of AlphaSense to provide reasonable accommodation to qualified employees who have protected disabilities to the extent required by applicable laws, regulations, and ordinances where a particular employee works. Recruiting Scams and Fraud We at AlphaSense have been made aware of fraudulent job postings and individuals impersonating AlphaSense recruiters. These scams may involve fake job offers, requests for sensitive personal information, or demands for payment. Please note: AlphaSense never asks candidates to pay for job applications, equipment, or training. All official communications will come from an @alpha-sense.com email address. If you’re unsure about a job posting or recruiter, verify it on our Careers page. If you believe you’ve been targeted by a scam or have any doubts regarding the authenticity of any job listing purportedly from or on behalf of AlphaSense please contact us. Your security and trust matter to us.", "summaryDescription" : "Financial Data Application Specialist at AlphaSense. Skills: Financial data, Sales, Customer success, Technical implementation. Assist sales in demos. Assist sales in strategic trials", "postedDate" : "2026-06-15T23:21:59.739", "createdAt" : "2026-06-15T23:21:59.739", "lastUpdated" : "2026-06-16T08:22:27.217", "ingestTimestamp" : "2026-06-15T23:21:59.739", "mongoId" : "6a30519bf292fd229cf0320a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 110000, "salaryAnnualMax" : 150000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Financial modeling", "Entrepreneurial minded", "Teaching", "Enablement", "Financial data", "Sales", "Customer success", "Technical implementation", "Financial data analysis", "Quantitative analysis", "Valuation decisions", "Sales enablement", "Product marketing", "Support articles", "Investment decisions", "Capital markets", "Excel Add-ins" ], "skillCount" : 17, "jobCategory" : "sales", "jobSubcategory" : "revenue", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "SaaS", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca05874d8ee00a09a1f9f", "title" : "Application Security Engineer | Senior", "industry" : "NordVPN", "salary" : { "min" : 3200.0, "max" : 6300.0, "currency" : "EUR", "frequency" : "Yearly" }, "location" : "Vilnius", "locations" : [ "Vilnius", "Kaunas" ], "timestamp" : "2026-06-16T02:15:55.209", "fingerprint" : "0869b89c01fbefa00412f1b0893729e8014e453bb677f7456e884fbb99d23f1b", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/nord-security/877a42a7-db71-4bdf-b4d2-74b7a3392be8/application", "externalId" : "877a42a7-db71-4bdf-b4d2-74b7a3392be8", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Vilnius", "country" : "Lithuania", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "54.6870458,25.2829111" } ], "locationText" : "Vilnius, Lithuania", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SAST, DAST, SCA", "professionalSkills" : [ "Problem-solving", "Investigation", "Business decisions" ], "hardSkillsList" : [ "Application security assessment", "Secure coding", "Network protocols" ], "softSkillsList" : [ "Problem-solving", "Investigation" ], "hardSkills" : [ { "name" : "Application security assessment", "level" : "intermediate" }, { "name" : "Secure coding", "level" : "intermediate" }, { "name" : "Network protocols", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Problem-solving" }, { "name" : "Investigation" } ], "coreResponsibilities" : "Ensure software design security, Define secure implementation practices, Sync with development teams, Ensure smooth security communication, Act as security glue, Plan security tool development, Manage security tool development, Create security review tasks, Cooperate with product teams, Learn product changes early, Make educated security decisions, Ensure mobile app testing, Ensure desktop app testing, Ensure browser extension testing, Design security training, Deliver security training, Look for security gaps, Address security questions, Give security advice", "teamCollaboration" : "Syncing with teams; Cooperate with product teams", "domainKnowledge" : "OSI model; TCP/IP models; Mobile applications security; Desktop applications security", "domainList" : [ "osi-model", "tcp-ip-models", "mobile-applications-security", "desktop-applications-security" ], "domainSpecificKnowledge" : [ "OSI model", "TCP/IP models", "Mobile applications security", "Desktop applications security" ], "communicationSkills" : "Security-related communication", "continuousLearning" : "Training programs", "problemSolvingSkills" : "Problem-solving; Investigation", "qualificationsBasic" : "Proven experience mobile/desktop security assessment, Good understanding networks, Experience working with stakeholders, Knowledge of secure coding, Sense of ownership, Experience with different OS security, Ability to build relationships, Ability to influence stakeholders, Ability to make business decisions, Assertiveness, Ability to compromise", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "THE WORLD’S MOST ADVANCED VPN, AND A WHOLE LOT MORE. If you’re a curious problem-solver who carves their own path, join the team behind Threat Protection Pro, the NordLynx protocol, and the fastest VPN on the planet—tools that put privacy, security, and control back in people’s hands. Your impact? Helping millions take back control of their online security, privacy, and data. MAIN RESPONSIBILITIES - Ensure software design security and define secure implementation practices by syncing with teams responsible for the actual product development. - Ensure that security-related communication between technical teams involved in releasing the product is smooth (act as a “glue” between all teams so everyone’s on the same page); - Plan and manage development of security tools within the team; - Create tasks for the product's security reviews (SAST/DAST/SCA results, application security testing, etc.). - Cooperate with product teams to learn about changes introduced into the product early to make educated security decisions. - Ensure mobile/desktop applications and browser extensions are sufficiently tested. - Support internal and external audits; - Design and deliver training for security engineering awareness & adoption. - Actively look for internal security gaps within the product or organization overall. - Address security questions and give advice regarding the direction of the product's security. CORE REQUIREMENTS - Proven experience in mobile/desktop applications security assessment: planning, testing, methodologies, and vulnerability reporting; - Good understanding of how networks work (OSI and TCP/IP models) with a particular focus on VPNs; - Experience working with stakeholders to define the scope of security tests and identify remediation actions to address any vulnerabilities identified; - Knowledge of secure coding practices; - Sense of ownership with strong problem-solving and investigation skills; - Experience with different OS (Linux, Android, iOS, macOS, Windows) security topics; - Ability to build and maintain relationships, influence key stakeholders across the business; - Ability to make product-related business decisions based on threats and vulnerabilities affecting it; - A healthy dose of assertiveness combined with an ability to compromise. WHAT WE OFFER Innovate with industry leaders Work alongside global experts to build world-leading cybersecurity tools, impacting millions of users around the world. Learn & grow Boost your skills via our extensive training programs (online and offline) & other resources. Benefit from mentorship and career-switch opportunities to grow within the company. Work in a next-gen Cyber City office Thrive in our bustling office, featuring ergonomic workspaces, modern meeting rooms, engaging events, and specialty coffee to fuel your day. Hybrid work Enjoy the flexibility with 3 office days and working from home for the remaining 2. Work from anywhere Recharge with a change of scenery – choose work from any location when you feel a need to power your creativity and drive. Physical well-being Boost your health with free-of-charge 24/7 gym access, onsite and online workouts, and consultations led by in-house Physical Well-Being experts. Mental & emotional health Nurture your mind with free psychologist consultations, dedicated mental health events, and premium access to top-rated wellness apps like Calm, Headspace, and Mindletic. Premium healthcare Receive private health insurance giving you peace of mind for your health needs. Extra days off Enjoy additional vacation days off as you grow with us. Plus, get extra days for sick leave, special occasions, or parenting needs. Joyful moments – special treats Celebrate life’s big moments with special gifts from us on your birthday, anniversary, and other major events, such as weddings or the arrival of a new family member. Company events & team-building Experience iconic Nord Security celebrations, team-buildings, and knowledge-sharing events, nurturing bonds that fuel our success. Workation Embark on a legendary company getaway abroad, filled with exciting activities, live concerts, engaging workshops, and epic time together. Kindly refer to our Privacy Notice for Recruitment Candidates https://drive.google.com/file/d/1b2tV684_SYV1jQ4kuf91cnzrRBk3ef-5/view for comprehensive information regarding our data handling procedures throughout recruitment processes. We expect all candidates to provide accurate and complete information during the recruitment process. While limited use of AI tools to refine application materials is acceptable, candidates remain fully responsible for ensuring that their submissions reflect their own qualifications, skills, and experience. Any failure to do so may negatively affect participation in the recruitment process. If broader AI assistance is allowed for a particular role or stage, we’ll let you know in advance. By submitting your application, you acknowledge that it may be processed using automated tools for evaluation purposes. As part of our recruitment process, we may use an AI-based application review tool to help assess applications based on skills and experience relevant to the role. This technology is used to support - not replace - human decision-making, and every application is ultimately reviewed by a recruiter. If you would like more information about how AI is used in this process or wish to exercise your rights under applicable data privacy laws, please contact us at privacy@nordaccount.com. Should you prefer to opt out of the automated evaluation, please submit your application directly to career@nordsec.com.", "summaryDescription" : "Application Security Engineer | Senior. Ensure software design security. Define secure implementation practices", "createdAt" : "2026-06-14T18:39:42.217", "lastUpdated" : "2026-06-16T02:15:55.209", "ingestTimestamp" : "2026-06-14T18:39:42.217", "mongoId" : "6a2ca05874d8ee00a09a1f9f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "<30k", "hasSalary" : false, "allSkills" : [ "Application security assessment", "Secure coding", "Network protocols", "Problem-solving", "Investigation", "Business decisions", "OSI model", "TCP/IP models", "Mobile applications security", "Desktop applications security" ], "skillCount" : 10, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c9ff474d8ee00a09a0ea9", "title" : "Cloud Application Security Engineer", "company" : "Trulioo", "industry" : "Engineering", "salary" : { "min" : 80000.0, "max" : 100000.0, "currency" : "CAD", "frequency" : "Yearly" }, "location" : "Vancouver", "locations" : [ "Vancouver" ], "timestamp" : "2026-06-16T01:13:27.473", "fingerprint" : "450a276986bd182cd720828a4c34c02fc8edefa1bf7c911e19830bdd4308ed62", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/trulioo/84ffcdae-09d6-403f-899a-0440c06de24f/application", "externalId" : "84ffcdae-09d6-403f-899a-0440c06de24f", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Vancouver", "state" : "British Columbia", "country" : "Canada", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "49.2608724,-123.1139520" } ], "locationText" : "Vancouver, British Columbia, Canada", "employmentType" : "FULL_TIME", "technicalSkills" : "AWS, Kubernetes, CI/CD, Terraform, Docker, Cloud security", "professionalSkills" : [ "System design", "Threat modeling", "Vulnerability management", "Automation" ], "hardSkillsList" : [ "Application security reviews", "Static testing", "Dynamic testing", "Security guardrails", "Container security", "Runtime considerations", "Incident response" ], "hardSkills" : [ { "name" : "Application security reviews", "level" : "intermediate" }, { "name" : "Static testing", "level" : "intermediate" }, { "name" : "Dynamic testing", "level" : "intermediate" }, { "name" : "Security guardrails", "level" : "intermediate" }, { "name" : "Container security", "level" : "intermediate" }, { "name" : "Runtime considerations", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" } ], "majorSkills" : "Cloud security, Application security, AWS, Kubernetes", "majorSkillsList" : [ "Cloud security", "Application security", "AWS", "Kubernetes" ], "coreResponsibilities" : "Collaborate to design security capabilities, Implement security capabilities, Operate security capabilities, Support application security reviews, Support threat modeling, Support vulnerability management processes, Assist in implementing AWS security guardrails, Assist in maintaining AWS security guardrails, Support Kubernetes security controls, Support container security controls, Contribute to automation of security workflows, Support Infrastructure as Code security practices, Monitor systems for irregular behavior, Improve detection capabilities, Assist in incident response", "teamCollaboration" : "DevOps; Engineering; Stakeholders", "domainKnowledge" : "Cloud application security; Digital identity verification; Cloud infrastructure; Container security; CI/CD security", "domainList" : [ "cloud-application-security", "digital-identity-verification", "cloud-infrastructure", "container-security", "ci-cd-security" ], "domainSpecificKnowledge" : [ "Cloud application security", "Digital identity verification", "Cloud infrastructure", "Container security", "CI/CD security" ], "toolProficiency" : [ "Terraform" ], "continuousLearning" : "Annual education stipend", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "On-call escalation coverage", "qualificationsBasic" : "5+ years cloud application security, Experience in AWS, Experience with Kubernetes, Experience with CI/CD security", "qualificationsPreferred" : "Kubernetes experience a plus, CI/CD security experience a plus", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Are you ready to embark on a career that truly affects people around the world? Trulioo invites you to be a catalyst for change in the dynamic realm of digital identity verification. As the global front-runner in our industry, we are redefining how businesses grow, innovate and comply online. Picture yourself at the forefront of innovation, contributing to our award-winning platform that enables organizations worldwide to quickly onboard customers, optimize costs and combat fraud. Fueled by Silicon Valley support, Trulioo stands as the trusted platform that can verify more than 5 billion people and 700 million business entities spanning 195 countries. But Trulioo is more than a tech company. We are a united force of dedicated experts committed to establishing trust online - and we’re proud to be recognized as a BC Top Employer for the second consecutive year, reflecting our commitment to an inclusive, collaborative, and people-first workplace. Headquartered in Vancouver and with strategic hubs in San Diego and Dublin, we foster a culture of collaboration and open communication. Our offices support a hybrid model and staff typically work three days per week at a hub location. Join us where excitement meets innovation and contribute to a world where trust and technology unite. What We Offer - Comprehensive Benefits: We provide a robust benefits package for full-time, permanent employees, including health, dental, and vision coverage, retirement plans with company match, paid time off, parental leave, and an annual education & training stipend (equivalent to $1,000 in local currency). Specific benefits may vary by location and will be discussed further during the interview process. - Flexible Hybrid Working Environment: Our offices are designed to support both collaboration and flexibility. Enjoy weekly lunches, quality coffee, and regular social events. Many locations also feature parent rooms, on-site gyms, comfortable lounges, and adaptable workstations to support your comfort and productivity. - Wellness: We care about your well-being. Team members have access to wellness workshops and events, as well as a complimentary Headspace subscription to help you stay focused, grounded, and energized. - Employee Resource Groups: Belonging is an important part of doing your best work. Our ERGs provide an inclusive space, support and community for employees of diverse backgrounds and allies. We host informative, fun sessions and celebrations that are often open to the entire organization. Position Summary: We are seeking a Cloud Application Security Engineer to join our ISC team and support the continued improvement of the cloud application security posture for Trulioo’s SaaS platform. Reporting to the Senior Director, Technology Infrastructure and Security, you will contribute to securing applications and infrastructure hosted in AWS. This role focuses on supporting scalable, automated security solutions that balance strong protection with developer productivity. This is a hands-on role within a 24/7 environment that includes participation in on-call escalation coverage for security incidents. This role is ideal for someone looking to deepen their experience in cloud, Kubernetes, and CI/CD security within a collaborative engineering environment. This will be a full-time, permanent position working out of the Vancouver office on a hybrid model (3 days per week in the office). What You'll Be Doing: You will be a key resource within the Trulioo security team, supporting security capabilities across our cloud platform and application environment. The ideal candidate is a self-starter with strong experience in cloud and platform security, and a focus on building scalable, automated security solutions in AWS. - Collaborate with DevOps, Engineering, and other stakeholders to design, implement, and operate cloud and application security capabilities across CI/CD pipelines and production environments - Support application security reviews and threat modeling, including code review, static and dynamic testing - Support vulnerability management processes across application and infrastructure layers, including CI/CD-integrated workflows - Assist in implementing and maintaining AWS security guardrails, ensuring services are properly configured with effective monitoring, visibility, and alerting - Support Kubernetes and container security controls, including configuration standards, access controls, and runtime considerations - Contribute to automation of security workflows to reduce manual effort and improve response times - Support Infrastructure as Code (IaC) security practices, including Terraform-based deployments - Monitor systems for irregular behavior, improve detection capabilities, and assist in incident response and investigation - Support reporting and continuous improvement of security controls and operational security processes - Support the evaluation and adoption of AI-assisted security and operational workflows - Work closely with senior engineers and cross-functional teams to support secure platform operations and continuous improvement initiatives You Will Bring: - 2-5 years of experience in cloud, application, or platform security, with demonstrated depth in AWS and modern cloud-native environments - Bachelor’s degree in computer science, engineering, or equivalent experience - Experience working with cloud security technologies, preferably AWS, including implementation of security controls and guardrails - Experience securing containerized environments and Kubernetes platforms (RBAC, network policies, workload security), including implementing controls in production environments - Experience implementing security controls within CI/CD pipelines and supporting developer workflows - Experience with vulnerability management across application and infrastructure layers, including prioritization and remediation workflows - Hands-on experience with AWS security services such as SecurityHub, GuardDuty, IAM, Config, Control Tower, CloudWatch, and related tooling - Experience working within DevSecOps environments and CI/CD workflows, ideally in AWS-based infrastructure (bonus points for AWS certifications) - Strong scripting and automation experience (Python, Terraform, or similar), with a focus on reducing manual operational work - Experience with monitoring and logging platforms (e.g., Sumo Logic or equivalent) - Knowledge of security frameworks and standards (e.g., OWASP Top 10, ISO 27001, SOC 2) - Strong technical background in Linux and cloud-based systems - Ability to manage competing priorities and operate effectively within a collaborative team environment - Strong problem-solving and critical thinking skills, with a focus on practical, scalable solutions - Excellent communication and collaboration skills across engineering and security teams Thriving at Trulioo At Trulioo, you’re not just an employee. You’re a valued member of our Trulicrew on a journey of professional and personal growth with a world-class organization. With Trulioo, you have the power to revolutionize the intersection of technology, digital trust and online identity to open the global economy to everyone. Together, we can shape the digital future. We’re on the lookout for exceptional people to empower with trust, autonomy and the freedom to cultivate their potential. Your curiosity, meticulous attention to detail and passion to contribute are highly valued. If that resonates with you, apply today to become a part of our team. Join us in shaping a future where your career isn’t just a journey but also a boundless exploration into the possibilities of technology and digital identity verification. Get an inside look at life at Trulioo by following us on LinkedIn https://ca.linkedin.com/company/trulioo, or learn more about us at www.trulioo.com http://www.trulioo.com If you don’t see yourself fully reflected in every job requirement listed on the posting above, we still encourage you to reach out and apply. Research has shown that minorities and underrepresented groups often only apply when they feel 100% qualified. We are committed to creating a more equitable, inclusive and diverse company and we strongly encourage applicants of all genders, ages, ethnicities, cultures, abilities, sexual orientations, and life experiences to apply. Trulioo welcomes applications from people with disabilities. Support is available upon request for candidates taking part in all aspects of the selection process. Finally, we know from time-to-time emergencies happen and you may need to reschedule an interview - we understand and encourage you to be in communication without worrying about losing the opportunity or your credibility. Privacy Notice As part of our job application process, Trulioo collects, processes, and discloses personal data for the purpose of identifying suitable candidates for our job openings. For more detail, please visit Trulioo’s Website Privacy Policy https://www.trulioo.com/website-privacy-policy in the section “When you apply for a job”.", "summaryDescription" : "Cloud Application Security Engineer at Trulioo. Skills: Cloud security, Application security, AWS, Kubernetes. Collaborate to design security capabilities. Implement security capabilities", "createdAt" : "2026-06-14T18:14:12.400", "lastUpdated" : "2026-06-16T01:13:27.473", "ingestTimestamp" : "2026-06-14T18:14:12.400", "mongoId" : "6a2c9ff474d8ee00a09a0ea9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Application security reviews", "Static testing", "Dynamic testing", "Security guardrails", "Container security", "Runtime considerations", "Incident response", "Cloud security", "Application security", "AWS", "Kubernetes", "System design", "Threat modeling", "Vulnerability management", "Automation", "Cloud application security", "Digital identity verification", "Cloud infrastructure", "CI/CD security", "Terraform" ], "skillCount" : 20, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.97 }, { "id" : "6a2c6a8074d8ee00a090c3f1", "title" : "Health Information Specialist", "company" : "Datavant", "salary" : { "min" : 55000.0, "max" : 75000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "USD market baseline for an Entry-level Health Information Specialist in the Healthcare industry, adjusted for remote work in the United States." }, "location" : "Remote - United States", "locations" : [ "Remote - United States" ], "timestamp" : "2026-06-15T21:24:26.399", "fingerprint" : "78f732d66df0f98b54f5fd58b3243d14adca71485338a34dab5a97fe13205a68", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.datavant.com/about/careers/open-roles/job?gh_jid=5224076008", "externalId" : "5224076008", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 0, "experienceMaxYears" : 2, "experienceLevel" : "Entry", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Datavant is the data collaboration platform trusted for healthcare. Guided by our mission to make the world’s health data secure, accessible and actionable, we provide critical data solutions for organizations across the healthcare ecosystem - including providers, health plans, researchers, and life sciences companies. From fulfilling a single patient’s request for their medical records to powering the AI revolution in healthcare, Datavanters are building the future of how data is connected and used to improve health. By joining Datavant today, you’re stepping onto a driven and highly collaborative team that is passionate about creating transformative change in healthcare. Datavant is a data platform company for healthcare whose products and solutions enable organizations to move and connect data securely. Datavant has a network of networks consisting of thousands of organizations, more than 70,000 hospitals and clinics, 70% of the 100 largest health systems, and an ecosystem of 500+ real-world data partners. By joining Datavant today, you’re stepping onto a highly collaborative, remote-first team that is passionate about creating transformative change in healthcare. We invest in our people and believe in hiring for high-potential and humble individuals who can rapidly grow their responsibilities as the company scales. Datavant is a distributed, remote-first team, and we empower Datavanters to shape their working environment in a way that suits their needs. This is an entry level position responsible for processing all release of information (ROI), specifically medical record requests, in a timely and efficient manner ensuring accuracy and providing customers with the highest quality product and customer service. Associate must at all times safeguard and protect the patient’s right to privacy by ensuring that only authorized individuals have access to the patient’s medical information and that all releases of information are in compliance with the request, authorization, company policy and HIPAA regulations. Position Highlights: Full-Time: Monday- Friday 8-4:30 CST Location: This role will be performed Remote - WFH Processing medical records along with by taking calls from patients, insurance companies, and attorneys to provide medical records status Documenting information on multiple platforms using two computer monitors. Preferred Customer Service and Data Entry and Release of Information experience Full Benefits: PTO, Health, Vision, and Dental Insurance and 401k Savings Plan with matching contributions & Tuition Reimbursement You will: Receive and process requests for patient health information in accordance with Company and Facility policies and procedures. Maintain confidentiality and security with all privileged information. Maintain working knowledge of Company and facility software. Adhere to the Company's and Customer facilities Code of Conduct and policies. Inform manager of work, site difficulties, and/or fluctuating volumes. Assist with additional work duties or responsibilities as evident or required. Consistent application of medical privacy regulations to guard against unauthorized disclosure. Responsible for managing patient health records. Responsible for safeguarding patient records and ensuring compliance with HIPAA standards. Prepares new patient charts, gathering documents and information from paper sources and/or electronic health record. Ensures medical records are assembled in standard order and are accurate and complete. Creates digital images of paperwork to be stored in the electronic medical record. Responds to requests for patient records, both within the facility and by external sources, retrieving them and transmitting them appropriately. Answering of inbound/outbound calls. May assist with patient walk-ins. May assist with administrative duties such as handling faxes, opening mail, and data entry. Must meet productivity expectations as outlined at specific site. May schedules pick-ups. Other duties as assigned. What you will bring to the table: High School Diploma or GED Must be at least 18 years old. Ability to commute between locations as needed. Able to work overtime during peak seasons when required. Basic computer proficiency. Comfortable utilizing phones, fax machine, printers, and other general office equipment on a regular basis. Professional verbal and written communication skills in the English language. Bonus points if: Experience in a healthcare environment. Previous production/metric-based work experience. In-person customer service experience. Ability to build relationships with on-site clients and customers. Comfortable bringing new ideas, process improvement suggestions, and feedback to internal stakeholders. To ensure the safety of patients and staff, many of our clients require post-offer health screenings and proof and/or completion of various vaccinations such as the flu shot, Tdap, COVID-19, etc. Any requests to be exempted from these requirements will be reviewed by Datavant Human Resources and determined on a case-by-case basis. Depending on the state in which you will be working, exemptions may be available on the basis of disability, medical contraindications to the vaccine or any of its components, pregnancy or pregnancy-related medical conditions, and/or religion. This job is not eligible for employment sponsorship. Datavant is committed to a work environment free from job discrimination. We are proud to be an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status. To learn more about our commitment, please review our EEO Commitment Statement here. Know Your Rights, explore the resources available through the EEOC for more information regarding your legal rights and protections. In addition, Datavant does not and will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay. At the end of this application, you will find a set of voluntary demographic questions. If you choose to respond, your answers will be anonymous and will help us identify areas for improvement in our recruitment process. (We can only see aggregate responses, not individual ones. In fact, we aren’t even able to see whether you’ve responded.) Responding is entirely optional and will not affect your application or hiring process in any way. Datavant is committed to working with and providing reasonable accommodations to individuals with physical and mental disabilities. If you need an accommodation while seeking employment, please request it here, by selecting the ‘Interview Accommodation Request’ category. You will need your requisition ID when submitting your request, you can find instructions for locating it here. Requests for reasonable accommodations will be reviewed on a case-by-case basis. For more information about how we collect and use your data, please review our Privacy Policy.", "summaryDescription" : "Health Information Specialist at Datavant", "postedDate" : "2026-06-14T19:07:22.598", "createdAt" : "2026-06-14T19:07:22.598", "lastUpdated" : "2026-06-15T21:24:26.399", "ingestTimestamp" : "2026-06-14T19:07:22.598", "mongoId" : "6a2c6a8074d8ee00a090c3f1", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 55000, "salaryAnnualMax" : 75000, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Entry", "dataQualityScore" : 0.8888889, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Healthcare", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2d1a7a74d8ee00a0aef133", "title" : "Information Security Officer", "company" : "Marex", "industry" : "FinTech", "salary" : { "min" : 145000.0, "max" : 210000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Director, Information Security Officer in London, United Kingdom, adjusted for the FinTech industry." }, "location" : "London, GB", "locations" : [ "London", "GB" ], "timestamp" : "2026-06-15T05:26:11.721", "fingerprint" : "5c6eb92246e9a8636dcc1006b0947e66b9c5778958c45926eee68425150896d8", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://marex.breezy.hr/p/259f35f4852e01-information-security-officer", "externalId" : "259f35f4852e01", "industryFunction" : { }, "structuredLocations" : [ { "city" : "London", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "51.5074456,-0.1277653" } ], "locationText" : "London, United Kingdom", "employmentType" : "FULL_TIME", "rawDescription" : "About Marex Marex Group plc (NASDAQ: MRX) is a diversified global financial services platform providing essential liquidity, market access and infrastructure services to clients across energy, commodities and financial markets. The group provides comprehensive breadth and depth of coverage across", "summaryDescription" : "Information Security Officer at Marex", "createdAt" : "2026-06-13T23:47:35.514", "lastUpdated" : "2026-06-15T05:26:11.721", "ingestTimestamp" : "2026-06-13T23:47:35.514", "mongoId" : "6a2d1a7a74d8ee00a0aef133", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.6666667, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.92 }, { "id" : "6a2c7ecc74d8ee00a0953abd", "title" : "Senior Information Security Engineer, Offensive Security", "company" : "GRVTY", "industry" : "Cybersecurity", "salary" : { "min" : 145000.0, "max" : 205000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Information Security Engineer, Offensive Security in San Antonio, United States, adjusted for industry and seniority." }, "location" : "San Antonio, Texas, United States", "locations" : [ "San Antonio", "Texas", "United States" ], "certifications" : [ "OSCP", "GXPN" ], "timestamp" : "2026-06-15T09:25:56.286", "fingerprint" : "7487bf9525ccff18188807f59ce14d998d386e4c9c57a6ac9829c604a548adc2", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/grvty/jobs/4282091009", "externalId" : "4282091009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Antonio", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "29.4246002,-98.4951405" } ], "locationText" : "San Antonio, Texas, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 3, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "UNIX/Linux, Windows, Network protocols, Packet analysis", "professionalSkills" : [ "Security assessments", "Red team operations", "Network exploitation", "Malware analysis", "Security tools evaluation" ], "hardSkillsList" : [ "Offensive cyber operations", "Penetration testing" ], "hardSkills" : [ { "name" : "Offensive cyber operations", "level" : "intermediate" }, { "name" : "Penetration testing", "level" : "intermediate" } ], "majorSkills" : "Offensive Security, Network Exploitation, Red Teaming", "majorSkillsList" : [ "Offensive Security", "Network Exploitation", "Red Teaming" ], "coreResponsibilities" : "Execute offensive cyber operations, Assess client networks, Identify vulnerabilities, Analyze computer networks, Analyze systems, Assess security weaknesses, Perform analysis of malware, Evaluate capabilities of security tools, Provide written briefings, Provide oral briefings, Train junior operators, Mentor junior operators, Develop scripts, Develop tools", "domainKnowledge" : "Offensive cyber operations", "domainList" : [ "offensive-cyber-operations" ], "domainSpecificKnowledge" : [ "Offensive cyber operations" ], "communicationSkills" : "Written briefings; Oral briefings", "specialRequirements" : "Active TS/SCI with poly, US citizenship required", "qualificationsBasic" : "Active TS/SCI with poly, US citizenship required, Bachelor Degree in Computer Science or related field or 5 years of direct work experience, Minimum of 3 years of related work experience, Completion of formal offensive cyber operations training, Experience conducting network exploitation, penetration testing, or red team operations, Proficiency with UNIX/Linux and Windows operating systems, Understanding of network protocols and packet analysis", "qualificationsPreferred" : "Active TS/SCI with poly, Advanced operator certifications or specialized training, OSCP, GXPN, or similar offensive security certifications, Experience with reverse engineering and exploit development, Background in offensive cyber operations or advanced red teaming", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "What Impact You'll Have Seeking experienced offensive security professionals to conduct security assessments, red team operations, and network exploitation activities in support of client security requirements. What You'll be Owning Execute offensive cyber operations to assess client networks and identify vulnerabilities Analyze computer networks and systems to identify and assess security weaknesses Perform analysis of malware and security tools to evaluate capabilities Provide written and oral briefings on assessment results to clients and management Train and mentor junior operators on tools, techniques, and tradecraft Develop scripts and tools to improve operational efficiency What You Must Have Must be able to obtain and maintain an Active TS/SCI with poly, US citizenship required Bachelor Degree in Computer Science or related field is required or 5 years of direct work experience Minimum of 3 years of related work experience is required Completion of formal offensive cyber operations training Experience conducting network exploitation, penetration testing, or red team operations Proficiency with UNIX/Linux and Windows operating systems Strong understanding of network protocols and packet analysis What Would be Nice to Have Active TS/SCI with poly Advanced operator certifications or specialized training OSCP, GXPN, or similar offensive security certifications Experience with reverse engineering and exploit development Background in offensive cyber operations or advanced red teaming Why Choose GRVTY The toughest national security challenges demand vision and ingenuity, not just resources. We deliver mission and technical expertise to outpace our adversaries. We’re purpose-built to tackle the most entrenched, systemic national security issues around the world. We partner with our customers to help them overcome challenges in every corner of technology and defense—including the ones still being explored. Our growing capabilities create complementary advantages, giving on-the-ground operations the edge they need to succeed. We muster everything we have to answer every challenge presented, every day of our lives. At GRVTY, we believe that when our employees thrive, our company thrives. That’s why we offer a comprehensive and competitive benefits package designed to support your well-being, growth, and work-life balance. • Robust health plan including medical, dental, and vision • Health Savings Account with company contribution • Annual Paid Time Off and Paid Holidays • Paid Parental Leave • 401k with generous company match • Training and Development Opportunities • Award Programs • Variety of Company Sponsored Events EEO Statement GRVTY, is an Equal Opportunity Employer.  All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran and will not be discriminated against on the basis of disability. Anyone requiring reasonable accommodations should email recruiting@grvty.com or call 703-544-7930 with requested details.  A member of the HR team will respond to your request within 2 business days.  Know Your Rights: Workplace Discrimination is Illegal (eeoc.gov)  Please review our current job openings and apply for the positions you believe may be a fit. If you are not an immediate fit, we will also keep your resume in our database for future opportunities.", "summaryDescription" : "Senior Information Security Engineer, Offensive Security at GRVTY. Skills: Offensive Security, Network Exploitation, Red Teaming. Execute offensive cyber operations. Assess client networks", "postedDate" : "2026-06-14T05:42:02.489", "createdAt" : "2026-06-14T05:42:02.489", "lastUpdated" : "2026-06-15T09:25:56.286", "ingestTimestamp" : "2026-06-14T05:42:02.489", "mongoId" : "6a2c7ecc74d8ee00a0953abd", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 145000, "salaryAnnualMax" : 205000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Offensive cyber operations", "Penetration testing", "Offensive Security", "Network Exploitation", "Red Teaming", "Security assessments", "Red team operations", "Network exploitation", "Malware analysis", "Security tools evaluation", "OSCP", "GXPN" ], "skillCount" : 12, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "6a305a87f292fd229cf52344", "title" : "Enterprise Application Specialist, IT", "company" : "Scopely", "industry" : "Technology", "salary" : { "min" : 65000.0, "max" : 90000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Enterprise Application Specialist in Dublin, Ireland, adjusted for the technology industry and remote work." }, "location" : "Dublin", "locations" : [ "Dublin" ], "timestamp" : "2026-06-16T08:59:19.933", "fingerprint" : "df4493af193bf0a925074359611c46be183575706f6c090056c379cb7c8404cc", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/scopely/jobs/5262676008?gh_jid=5262676008", "externalId" : "5262676008", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Dublin", "country" : "Ireland", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "53.3493795,-6.2605593" }, { "city" : "Barcelona", "country" : "Spain", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "41.3825802,2.1770730" }, { "country" : "Portugal", "continent" : "eu", "workMode" : "remote" }, { "country" : "United Kingdom", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "Dublin, Ireland; Barcelona, Spain; Portugal; United Kingdom", "technicalSkills" : "Google Workspace, Slack, Atlassian, Jira, Confluence, Zoom, Okta, Gemini, Slack AI, Zoom AI Companion, Atlassian Rovo", "professionalSkills" : [ "Systems Administration", "Enterprise Applications Administration", "SaaS Platform Management", "Platform strategy", "Platform roadmaps", "Platform governance", "Lifecycle management", "Vendor relationships", "Platform optimization", "Organizational enablement", "Change management", "Stakeholder management", "Workflow automation", "Operational improvements", "Project management", "Prioritization" ], "hardSkillsList" : [ "Platform administration", "Integration management", "Lifecycle management", "Licensing management", "Operational excellence", "AI enablement", "Workflow automation", "Scripting" ], "hardSkills" : [ { "name" : "Platform administration", "level" : "intermediate" }, { "name" : "Integration management", "level" : "intermediate" }, { "name" : "Lifecycle management", "level" : "intermediate" }, { "name" : "Licensing management", "level" : "intermediate" }, { "name" : "Operational excellence", "level" : "intermediate" }, { "name" : "AI enablement", "level" : "intermediate" }, { "name" : "Workflow automation", "level" : "intermediate" }, { "name" : "Scripting", "level" : "intermediate" } ], "majorSkills" : "Enterprise Application Management, Collaboration Platforms, AI Workplace Technologies", "majorSkillsList" : [ "Enterprise Application Management", "Collaboration Platforms", "AI Workplace Technologies" ], "coreResponsibilities" : "Serve as technical owner for enterprise platforms, Serve as subject matter expert for enterprise platforms, Develop platform roadmaps, Communicate platform roadmaps, Develop governance standards, Communicate governance standards, Develop long-term strategies, Communicate long-term strategies, Own platform health, Own platform integrations, Own platform lifecycle management, Own platform licensing, Own operational excellence, Stay current on vendor releases, Stay current on AI enhancements, Stay current on security updates, Continuously improve employee experience, Lead rollout of AI technologies, Lead adoption of AI technologies, Lead organizational training of AI technologies, Create technical documentation, Maintain technical documentation, Create user training materials, Maintain user training materials, Create best practices, Maintain best practices, Partner with Security, Partner with HR, Partner with Engineering, Partner with Procurement, Partner with Legal, Partner with business stakeholders, Deliver scalable solutions, Deliver secure solutions, Act as escalation point for issues, Act as escalation point for integrations, Act as escalation point for automation, Act as escalation point for optimization, Drive workflow automation, Drive operational improvements, Manage enterprise application projects, Communicate platform updates, Communicate platform enhancements, Communicate platform changes", "teamCollaboration" : "Cross-functional teams; Partner with Security; Partner with HR; Partner with Engineering; Partner with Procurement; Partner with Legal; Partner with business stakeholders", "projectManagementSkills" : [ "Project management", "Prioritization", "Roadmap planning" ], "domainKnowledge" : "Collaboration platforms; Productivity platforms; AI-driven workflows; Workplace technologies", "domainList" : [ "collaboration-platforms", "productivity-platforms", "ai-driven-workflows", "workplace-technologies" ], "domainSpecificKnowledge" : [ "Collaboration platforms", "Productivity platforms", "AI-driven workflows", "Workplace technologies" ], "toolProficiency" : [ "Google Workspace", "Slack", "Atlassian", "Jira", "Confluence", "Zoom", "Okta", "Gemini", "Slack AI", "Zoom AI Companion", "Atlassian Rovo" ], "communicationSkills" : "Communicate technical concepts; Communicate roadmaps; Communicate platform changes", "documentationSkills" : "Technical documentation; User training materials; Best practices; SOPs; Knowledge base articles; Architecture diagrams; Workflow diagrams", "continuousLearning" : "Stay current on vendor releases; Stay current on AI enhancements; Stay current on security updates", "innovationCreativity" : "Proactively driving innovation; Drive innovation; Continuous improvement", "problemSolvingSkills" : "Escalation point for complex issues; Escalation point for integrations; Escalation point for automation; Escalation point for optimization", "outcomesObjectives" : "Improve employee productivity; Improve employee experience; Deliver scalable solutions; Deliver secure solutions", "qualificationsBasic" : "3-5+ years Systems Administration, 3-5+ years Enterprise Applications Administration, 3-5+ years SaaS Platform Management, Deep hands-on experience administering Google Workspace, Deep hands-on experience administering Slack, Deep hands-on experience administering Atlassian, Deep hands-on experience administering Zoom, Experience owning enterprise application strategy, Experience owning enterprise application roadmaps, Experience owning enterprise application governance, Experience owning enterprise application lifecycle management, Experience owning enterprise application vendor relationships, Experience owning enterprise application licensing, Experience owning enterprise application platform optimization, Experience implementing AI-powered workplace technologies, Experience managing AI-powered workplace technologies, Proven ability to lead organizational AI enablement, Experience creating technical documentation, Experience maintaining technical documentation, Experience creating SOPs, Experience maintaining SOPs, Experience creating knowledge base articles, Experience maintaining knowledge base articles, Experience creating architecture diagrams, Experience creating workflow diagrams, Experience creating end-user training materials, Project management skills, Prioritization skills, Experience partnering with Security, Experience partnering with HR, Experience partnering with Engineering, Experience partnering with Legal, Experience partnering with Procurement, Experience partnering with business stakeholders", "qualificationsPreferred" : "Experience with Google Workspace AI, Experience with Slack AI, Experience with Zoom AI Companion, Experience with Atlassian Rovo, Experience with Gemini, Experience with related productivity platforms, Experience with related automation platforms", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Scopely is looking for an Enterprise Application Specialist, IT to join our IT team in Dublin, Ireland or Barcelona Spain on a hybrid basis or Portugal or the UK on a remote basis. At Scopely, we care deeply about what we do and want to inspire play, every day - whether in our work environments alongside our talented colleagues, or through our deep connections with our communities of players. We are a global team of game lovers who are developing, publishing and innovating the mobile games industry, connecting millions of people around the world daily. The IT/Ops team keeps everything behind the scenes running smoothly and we make sure all teams are equipped and connected - whether across the office or halfway around the world. AV struggles? Don’t worry, we’ve got this. What You Will Do We are seeking a highly experienced Enterprise Application Specialist who will serve as the owner and strategic lead for our core collaboration and productivity platforms. This individual will be responsible for the architecture, integrations, security, roadmap, operational excellence, and AI enablement of platforms including Google Workspace, Slack, Atlassian, and Zoom. The ideal candidate is both deeply technical and highly collaborative, with a passion for improving employee productivity through modern enterprise tooling, automation, and AI-driven workflows. This person should be a true expert in these platforms, proactively driving innovation, adoption, governance, and organizational enablement across the company. Serve as the technical owner and subject matter expert for enterprise collaboration and productivity platforms including Google Workspace, Slack, Atlassian (Jira/Confluence), Zoom, Okta, and associated AI capabilities Develop and communicate platform roadmaps, governance standards, and long-term strategies for supported applications Own platform health, integrations, lifecycle management, licensing, and operational excellence Stay current on vendor releases, AI enhancements, security updates, and industry best practices to continuously improve the employee experience Lead the rollout, adoption, and organizational training of AI-powered workplace technologies including Gemini, Slack AI, Zoom AI Companion, Atlassian Rovo, and related tools Create and maintain technical documentation, user training materials, and best practices for supported platforms Partner cross-functionally with Security, HR, Engineering, Procurement, Legal, and business stakeholders to deliver scalable and secure solutions Act as the escalation point for complex platform issues, integrations, automation opportunities, and optimization efforts Drive workflow automation and operational improvements through integrations, scripting, and AI-driven solutions Manage enterprise application projects and communicate platform updates, enhancements, and changes to technical and non-technical audiences What We’re Looking For 3-5+ years of experience in Systems Administration, Enterprise Applications Administration or SaaS Platform Management Deep hands-on experience administering and supporting enterprise collaboration platforms including Google Workspace, Slack, Atlassian (Jira/Confluence), Zoom and related SaaS applications Experience owning enterprise application strategy, roadmaps, governance, lifecycle management, vendor relationships, licensing, and platform optimization initiatives Experience implementing and managing AI-powered workplace technologies such as Gemini, Slack AI, Zoom AI Companion, Atlassian Rovo, or similar productivity and automation platforms Proven ability to lead organizational AI enablement initiatives including user training, adoption programs, documentation, and change management efforts Strong understanding of emerging technologies, vendor feature releases, and industry best practices with the ability to proactively drive innovation and continuous improvement Strong organizational, communication, and stakeholder management skills with the ability to communicate technical concepts, roadmaps, and platform changes to both technical and non-technical audiences Experience creating and maintaining technical documentation including SOPs, knowledge base articles, architecture diagrams, workflow diagrams, and end-user training materials Strong project management and prioritization skills with the ability to independently own and execute multiple initiatives in fast-paced, high-growth environments supporting global teams Experience partnering cross-functionally with Security, HR, Engineering, Legal, Procurement, and business stakeholders to deliver scalable technology solutions Passion for improving employee productivity, collaboration, and user experience through technology, automation, and AI-driven solutions Please submit your CV in English. At Scopely, we create games for everyone - and want to ensure that the people behind our games reflect that! We are committed to creating a diverse, supportive work environment where everyone is treated with respect. We are committed to providing equal employment opportunities and welcome individuals from all backgrounds to join us & embrace the adventure! Employment at Scopely is based solely on a person's merit and qualifications. Scopely does not discriminate against any employee or applicant because of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), or any other basis protected by law. We also consider qualified applicants with arrest or conviction records, consistent with applicable federal, state and local law. This role will have access to sensitive and/or confidential employee or customer personally identifiable information (PII) and/or Company financial information, and therefore will be subject to background checks upon receiving a conditional offer of employment. About Scopely Scopely is a leading video game and global interactive entertainment company, home to many of the world’s most beloved and enduring experiences, including two of the most successful mobile games of all-time “MONOPOLY GO!” and “Pokémon GO,” along with “Stumble Guys,” “Star Trek™ Fleet Command,” “MARVEL Strike Force,” “WWE Champions,” the Scrabble® franchise, “Yahtzee® With Buddies,” and many others. Across mobile, web, PC, and console, Scopely creates, develops, publishes, and live-operates one of the most diversified and award-winning portfolios in the games industry — bringing hundreds of millions of players together through a shared love of play. Founded in 2011, Scopely is powered by its exceptional team — including thousands of world-class gamemakers around the globe, a distinctive tenet-driven culture, and its proprietary technology platform, Playgami. Together, these strengths have fueled Scopely’s position as the #1 mobile games company in the U. S. and #2 globally, generating more than $10 billion in lifetime revenue. Whether building global sensations like “MONOPOLY GO!” from the ground up, or expanding through strategic acquisitions, including the FoxNext, GSN, and Niantic games businesses — Scopely consistently delivers experiences players love today and return to for years to come. Recognized multiple times as one of the \"100 Most Influential Companies in the World\" by TIME magazine and one of Fast Company's \"World's Most Innovative Companies\" and “Best Workplaces for Innovators,” Scopely believes that video games can be a force for good — creating meaningful connections, vibrant communities, and making life better through play. Scopely has global operations and partners across four continents in more than a dozen countries worldwide. For more information, visit: https://www.scopely.com/. Notice to Candidates: Scopely will never request payment or financial information during the application or hiring process. Please apply only through our official website and verify that all Talent Partner communications come from an email address ending in @scopely.com. Should you have any questions or encounter any fraudulent requests/emails/websites, please immediately contact recruiting@scopely.com. Our job applicant privacy policies are available here: California Privacy Notice and EEA/UK Privacy Notice. Employment at Scopely is based solely on a person's merit and qualifications. Scopely does not discriminate against any employee or applicant because of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), or any other basis protected by law. We also consider qualified applicants with arrest or conviction records, consistent with applicable federal, state and local law.", "summaryDescription" : "Enterprise Application Specialist, IT at Scopely. Skills: Enterprise Application Management, Collaboration Platforms, AI Workplace Technologies. Serve as technical owner for enterprise platforms. Serve as subject matter expert for enterprise platforms", "postedDate" : "2026-06-15T23:25:53.254", "createdAt" : "2026-06-15T23:25:53.254", "lastUpdated" : "2026-06-16T08:59:19.933", "ingestTimestamp" : "2026-06-15T23:25:53.254", "mongoId" : "6a305a87f292fd229cf52344", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Platform administration", "Integration management", "Lifecycle management", "Licensing management", "Operational excellence", "AI enablement", "Workflow automation", "Scripting", "Enterprise Application Management", "Collaboration Platforms", "AI Workplace Technologies", "Systems Administration", "Enterprise Applications Administration", "SaaS Platform Management", "Platform strategy", "Platform roadmaps", "Platform governance", "Vendor relationships", "Platform optimization", "Organizational enablement", "Change management", "Stakeholder management", "Operational improvements", "Project management", "Prioritization", "Roadmap planning", "Collaboration platforms", "Productivity platforms", "AI-driven workflows", "Workplace technologies", "Google Workspace", "Slack", "Atlassian", "Jira", "Confluence", "Zoom", "Okta", "Gemini", "Slack AI", "Zoom AI Companion", "Atlassian Rovo" ], "skillCount" : 41, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c95e974d8ee00a098e2f1", "title" : "Senior Application Security Engineer", "company" : "Apollo. io", "industry" : "SaaS", "salary" : { "min" : 190000.0, "max" : 273000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "United States", "locations" : [ "United States" ], "timestamp" : "2026-06-15T10:02:56.077", "fingerprint" : "7eee11ebb0b5d554a962a8905ff3967ddb3c08481edac878d6dd9c335dee768d", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/apolloio/jobs/6020809004", "externalId" : "6020809004", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Application security, AI, SAST, SCA, OAuth, CSRF, SSRF, Cryptography, API", "professionalSkills" : [ "Code analysis", "Risk assessment", "Security architecture", "Vulnerability management", "Offensive security", "Exploit development", "Adversarial thinking", "Red-team exercises", "Severity decisions", "Workflow enrichment", "AI security", "Secure coding", "Remediation guidance" ], "hardSkillsList" : [ "Threat modeling", "Code reviews", "Penetration testing", "Dependency analysis", "Runtime analysis", "Input handling", "Output handling", "Prompt engineering" ], "hardSkills" : [ { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Code reviews", "level" : "intermediate" }, { "name" : "Penetration testing", "level" : "intermediate" }, { "name" : "Dependency analysis", "level" : "intermediate" }, { "name" : "Runtime analysis", "level" : "intermediate" }, { "name" : "Input handling", "level" : "intermediate" }, { "name" : "Output handling", "level" : "intermediate" }, { "name" : "Prompt engineering", "level" : "intermediate" } ], "majorSkills" : "Application security, Secure SDLC, Threat modeling, Vulnerability management", "majorSkillsList" : [ "Application security", "Secure SDLC", "Threat modeling", "Vulnerability management" ], "coreResponsibilities" : "Own secure SDLC, Improve secure SDLC, Embed security into design, Embed security into implementation, Embed security into deployment, Perform security reviews, Perform threat modeling, Analyze code, Provide security architecture guidance, Define security guardrails, Maintain risk models, Drive vulnerability management, Validate findings, Prioritize findings, Route findings, Track remediation, Verify remediations, Implement fixes, Support remediation, Perform offensive testing, Test applications, Test fixes, Apply severity decisions, Configure AppSec tooling, Improve AppSec tooling, Select security tooling, Build security tooling, Refine security tooling, Build automations, Refine workflow enrichments, Use AI to automate, Use AI to transform, Use AI to scale, Embed AI security checks, Partner on AI security requirements, Partner on AI security controls, Support security enablement, Scale security enablement, Provide remediation guidance, Provide secure patterns, Provide secure examples", "teamCollaboration" : "Cross-functional partnership; Engineering teams; Product teams; IT teams; Security champions", "domainKnowledge" : "Modern SaaS environments; AI-powered features; AI systems", "domainList" : [ "modern-saas-environments", "ai-powered-features", "ai-systems" ], "domainSpecificKnowledge" : [ "Modern SaaS environments", "AI-powered features", "AI systems" ], "toolProficiency" : [ "SAST tooling", "Bug bounty", "SCA tooling" ], "continuousLearning" : "Continuous improvement", "innovationCreativity" : "AI and automation", "problemSolvingSkills" : "Root cause analysis; Sound judgment", "qualificationsBasic" : "Senior individual contributor, Semi-annual or annual goals, Solve ambiguous problems, Improve operational processes, Drive cross-team collaboration", "qualificationsPreferred" : "L6 senior-IC level", "remoteFriendly" : true, "rawDescription" : "Apollo.io is the leading go-to-market solution for revenue teams, trusted by over 500,000 companies and millions of users globally, from rapidly growing startups to some of the world's largest enterprises. Founded in 2015, the company is one of the fastest growing companies in SaaS, raising approximately $250 million to date and valued at $1.6 billion. Apollo.io provides sales and marketing teams with easy access to verified contact data for over 210 million B2B contacts and 35 million companies worldwide, along with tools to engage and convert these contacts in one unified platform. By helping revenue professionals find the most accurate contact information and automating the outreach process, Apollo.io turns prospects into customers. Apollo raised a series D in 2023 and is backed by top-tier investors, including Sequoia Capital, Bain Capital Ventures, and more, and counts the former President and COO of Hubspot, JD Sherman, among its board members. Role Overview The Senior Application Security Engineer II is a senior individual contributor responsible for strengthening Apollo’s secure software development lifecycle and reducing application risk across product, platform, and AI-powered features. This role blends deep code-level application security work with strong cross-functional partnership. It includes application security reviews, threat modeling, AppSec tooling, findings triage and remediation follow-through, external testing intake, and developer enablement. This role is calibrated at the L6 senior-IC level: owning semi-annual or annual goals, solving ambiguous problems with sound judgment, improving operational processes, and driving meaningful cross-team collaboration and influence. Key Responsibilities Secure SDLC, design review, and threat modeling Own and continuously improve the secure software development lifecycle for Apollo applications so security is embedded into design, implementation, and deployment. Perform application security reviews, threat modeling, and deep code-level analysis for high-impact product, platform, and AI features before launch. Provide practical security architecture guidance to Engineering, Product, and IT teams. Help define and maintain application-security guardrails, secure design expectations, code review standards, and risk models for new and existing systems. Vulnerability management and hands-on remediation Drive execution-heavy vulnerability management across internal reviews, bug bounty, pentests, SCA/runtime findings, and other research signals, ensuring findings are validated, prioritized, routed clearly, and tracked through remediation and verification within SLAs. Go beyond identifying issues: read the code, explain root cause, propose the safest fix, and directly implement or support remediation when needed for complex vulnerabilities. Perform hands-on validation and offensive security testing of applications and fixes, including exploit development, bypass testing, adversarial thinking, and focused red-team-style exercises, to confirm remediations address the underlying issue rather than only the initial symptom. Work across the kinds of application security issues common in modern SaaS environments, including authentication and authorization weaknesses, access control risks, OAuth and CSRF design flaws, SSRF, cryptographic and verification issues, information disclosure and data exposure risks, unsafe execution and deserialization patterns, and dependency or runtime vulnerabilities. Apply clear, risk-based severity decisions using exploitability, data sensitivity, customer impact, and blast radius. Tooling, automation, and AI Configure and improve AppSec tooling and integrations, including SAST configuration, ignore lists, dashboards, and other controls that maintain useful coverage without excessive noise. Select, build, or refine security tooling, small automations, and workflow enrichments that reduce manual effort and scale AppSec operations responsibly. Use AI to automate, transform, and scale security and engineering-adjacent processes where it materially improves speed, consistency, or signal quality, while still validating outputs with strong engineering judgment. Embed AI-specific security checks into SSDLC reviews and code analysis, including input and output handling, AI-exposed APIs, prompt and response guardrails, and abuse or data-exfiltration paths. Partner cross-functionally on AI security requirements and controls so AI systems and AI-powered features are designed, deployed, and operated securely. Engineering enablement and partnership Support and scale security enablement for engineers and security champions, including secure coding, AppSec, and AI-safety content. Provide actionable remediation guidance, secure patterns, and examples that help engineering teams fix issues quickly and correctly. Partner closely with Engineering, Product, Platform, Data, Legal, and other security teams to keep AppSec priorities aligned with business risk and product velocity. Produce clear documentation, metrics, and written narratives that improve AppSec visibility, observability, and decision-making. What Good Looks Like at L6 Owns meaningful AppSec goals over a semi-annual or annual horizon and independently identifies the right solutions to ambiguous, open-ended problems. Drives cross-team collaboration and operational improvements beyond isolated tickets or one-off reviews. Makes informed decisions by balancing technical detail, business context, customer trust, and long-term risk. Sets a high bar for ownership, communication, mentoring, and technical judgment, and helps raise the effectiveness of peers and partner teams. Required Skills Ruby experience is highly valuable, and Python or similar scripting ability is a plus. Strong Linux and cloud fundamentals, ideally with experience in GCP-backed environments. Deep familiarity with common AppSec issues, secure design, secure authentication and authorization patterns, vulnerability management, and developer security tooling. Demonstrated ability to perform deep code review, penetration testing, and exploit-oriented validation, and to either fix vulnerabilities directly or work closely with engineers to land durable remediations that hold up against bypass attempts and variant analysis. Experience handling findings from bug bounty, pentests, internal reviews, or automated security tooling through closure and verification. Experience using AI-assisted tools, automations, APIs, or structured workflows to improve engineering or security processes at scale. Experience securing AI-powered systems or features, including AI API exposure, prompt and response handling, data protection, misuse scenarios, and monitoring expectations. Strong written and verbal communication, stakeholder management, and influencing skills across technical and non-technical partners. Preferred Qualifications Experience supporting or leading security reviews for AI-native products, internal agents, or AI-assisted engineering workflows. Experience improving secure-by-design practices and AppSec observability in a fast-moving engineering organization. Experience with security training, developer enablement, or security champions programs. Relevant security certifications are a plus. Example Success Outcomes Improve the health and flow of AppSec findings by keeping prioritization, remediation, and verification moving within defined SLAs. Complete recurring application reviews or threat models for important systems and features. Increase engineering adoption of secure patterns, AppSec tooling, and security training. Reduce manual toil and improve AppSec signal quality through targeted automation and responsible use of AI-assisted workflows. The listed Pay Range reflects the total cash compensation inclusive of annual base salary and annual bonus as applicable. For sales roles, the range provided is the role’s On Target Earnings (\"OTE\") range, meaning that the range includes both the sales commissions/sales bonus target and annual base salary for the role. This salary range may be inclusive of several career levels at Apollo and will be narrowed during the interview process based on a number of factors, including the candidate’s experience, qualifications, and location. Applicants interested in this role who are not located in the US may request the annual salary range for their location during the interview process. Additional benefits for this role may include: equity; company bonus or sales commissions/bonuses; 401(k) plan; at least 10 paid holidays per year, flex PTO, and parental leave; employee assistance program and wellbeing benefits; global travel coverage; life/AD FSA/HSA and medical, dental, and vision benefits. Tier 1 Pay Range (San Francisco, New York City, Seattle) $218,000—$273,000 USD Tier 2 Pay Range (All other US Locations) $190,000—$237,000 USD We are AI Native Apollo.io is an AI-native company built on a culture of continuous improvement. We’re on the front lines of driving productivity for our customers—and we expect the same mindset from our team. If you're energized by finding smarter, faster ways to get things done using AI and automation, you'll thrive here. Why You’ll Love Working at Apollo At Apollo, we’re driven by a shared mission: to help our customers unlock their full revenue potential. That’s why we take extreme ownership of our work, move with focus and urgency, and learn voraciously to stay ahead. We invest deeply in your growth, ensuring you have the resources, support, and autonomy to own your role and make a real impact. Collaboration is at our core—we’re all for one, meaning you’ll have a team across departments ready to help you succeed. We encourage bold ideas and courageous action, giving you the freedom to experiment, take smart risks, and drive big wins. If you’re looking for a place where your work matters, where you can push boundaries, and where your career can thrive—Apollo is the place for you. Learn more here!", "summaryDescription" : "Senior Application Security Engineer at Apollo. io. Skills: Application security, Secure SDLC, Threat modeling, Vulnerability management. Own secure SDLC. Improve secure SDLC", "postedDate" : "2026-06-14T08:50:18.480", "createdAt" : "2026-06-14T08:50:18.480", "lastUpdated" : "2026-06-15T10:02:56.077", "ingestTimestamp" : "2026-06-14T08:50:18.480", "mongoId" : "6a2c95e974d8ee00a098e2f1", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 190000, "salaryAnnualMax" : 273000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Threat modeling", "Code reviews", "Penetration testing", "Dependency analysis", "Runtime analysis", "Input handling", "Output handling", "Prompt engineering", "Application security", "Secure SDLC", "Vulnerability management", "Code analysis", "Risk assessment", "Security architecture", "Offensive security", "Exploit development", "Adversarial thinking", "Red-team exercises", "Severity decisions", "Workflow enrichment", "AI security", "Secure coding", "Remediation guidance", "Modern SaaS environments", "AI-powered features", "AI systems", "SAST tooling", "Bug bounty", "SCA tooling" ], "skillCount" : 29, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "SaaS", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c8d8a74d8ee00a09794c1", "title" : "Application Security Engineer", "company" : "Sequoia", "industry" : "Scalability-Defense", "salary" : { "min" : 145000.0, "max" : 205000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Application Security Engineer in Tempe, United States, adjusted for the technology industry and company size." }, "location" : "Tempe", "locations" : [ "Tempe" ], "timestamp" : "2026-06-15T07:59:14.818", "fingerprint" : "3039912f04cdf3a4488a38f076613815c1d1efdb9660a49c75f50fbd0b0ee13c", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/sequoia/d4ce8c14-ff6a-4bf6-8e34-b1d0f630c14e/application", "externalId" : "d4ce8c14-ff6a-4bf6-8e34-b1d0f630c14e", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Tempe", "state" : "Arizona", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.4255117,-111.9400160" } ], "locationText" : "Tempe, Arizona, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Python, Ruby, Go, Swift, Java, Net, C++, AWS", "professionalSkills" : [ "Application development", "Application security", "Secure architecture design", "Identity management", "Authentication", "Cryptography", "System administration", "Network security", "Software vulnerability assessments" ], "hardSkillsList" : [ "Secure coding", "Penetration testing", "Threat modeling", "Attack surface analysis" ], "hardSkills" : [ { "name" : "Secure coding", "level" : "intermediate" }, { "name" : "Penetration testing", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Attack surface analysis", "level" : "intermediate" } ], "majorSkills" : "Application security, Threat modeling, Penetration testing, Secure coding", "majorSkillsList" : [ "Application security", "Threat modeling", "Penetration testing", "Secure coding" ], "coreResponsibilities" : "Provide application security expertise, Manage application security analytics, Validate web applications, Test web applications, Undertake threat modelling, Conduct penetration testing, Maintain documentation, Conduct application security reviews, Perform penetration testing, Provide training, Provide outreach, Develop security guidance documentation, Develop security tools, Deliver security metrics, Improve security posture, Perform application security reviews, Perform mobile security reviews, Design secure architecture, Conduct threat modeling, Perform projects and research, Provide security training, Provide security outreach, Develop security guidance, Develop security tools, Deliver security metrics", "teamCollaboration" : "Internal development teams", "domainKnowledge" : "OWASP Top 10 vulnerabilities; Software Development LifeCycle; Cloud-native architecture; Identity and authentication; System administration; Network security; Component Analysis; SQL Injection; Cross-site Scripting; Cross-Site Request Forgery; PASTA methodology; STRIDE methodology; OWASP Best practices; OWASP Testing Guide; OWASP Code Review Guide", "domainList" : [ "owasp-top-10-vulnerabilities", "software-development-lifecycle", "cloud-native-architecture", "identity-and-authentication", "system-administration", "network-security", "component-analysis", "sql-injection", "cross-site-scripting", "cross-site-request-forgery", "pasta-methodology", "stride-methodology", "owasp-best-practices", "owasp-testing-guide", "owasp-code-review-guide" ], "domainSpecificKnowledge" : [ "OWASP Top 10 vulnerabilities", "Software Development LifeCycle", "Cloud-native architecture", "Identity and authentication", "System administration", "Network security", "Component Analysis", "SQL Injection", "Cross-site Scripting", "Cross-Site Request Forgery", "PASTA methodology", "STRIDE methodology", "OWASP Best practices", "OWASP Testing Guide", "OWASP Code Review Guide" ], "toolProficiency" : [ "OWASP Dependency-Check", "Bytesafe Dependency Checker", "Patton", "PHP Security Checker", "Nmap", "NetCat", "Spiders", "Burp Suite", "MetaSploit", "AppScan", "WebInspect" ], "documentationSkills" : "Security guidance documentation", "problemSolvingSkills" : "Identify vulnerabilities; Assess security controls; Identify potential weaknesses", "outcomesObjectives" : "Improve overall security posture", "qualificationsBasic" : "5+ years experience, 3+ years programming, 2+ years threat modeling, 3+ years application security technologies, Bachelor's degree in computer science", "qualificationsPreferred" : "Application security engineer experience, Experience with Recon tools, Experience with Mapping tools, Experience with Exploitation tools, Knowledge of Threat modeling methodologies, Knowledge of OWASP Best practices, Knowledge of OWASP Testing Guide, Knowledge of OWASP Code Review Guide", "remoteFriendly" : true, "rawDescription" : "Who We Are: Sequoia is the strategic partner helping investor-backed companies of all sizes achieve their business goals through smarter people spend. For 24 years, we’ve guided the most innovative employers to navigate growth and get the most out of their global people investment. With our expert advisory team and integrated platform, we help clients drive business impact through their total comp and benefits, improving executive decision making, controlling costs, protecting the business, and elevating the employee experience. Visit Sequoia.com http://Sequoia.com or follow us on LinkedIn https://www.linkedin.com/company/sequoia-tpi/%22%20/t%20%22_blank to learn more. As an Application Security Engineer, you will be providing application security expertise throughout the Software Development LifeCycle (SDLC) as well as being responsible for managing and driving forward the Application Security Analytics practices. A key part of your role will also involve validating and testing web applications in order to ensure applications meet the requirements of the SDLC Policy and industry best practices. In addition, undertaking threat modelling and conducting periodic penetration testing using best of breed tools, a good understanding of the OWASP Top 10 vulnerabilities and maintaining documentation. You'll perform various day-to-day activities related to ensuring the security of Sequoias application environment. These tasks may include conducting application security reviews to identify vulnerabilities in software applications that could be exploited by attackers, performing penetration testing to assess the effectiveness of existing security controls and identify potential weaknesses, providing training and outreach to internal development teams to improve their understanding of security best practices, developing security guidance documentation to help others understand how to implement secure systems and applications, developing security tools to automate or streamline security processes, delivering security metrics to stakeholders and working on improving the overall security posture of your organization. What You Get to Do: - Application security reviews - Mobile security reviews - Secure architecture design - Threat modeling - Projects and research work as needed - Security training and outreach to internal development teams - Security guidance documentation - Security tool development - Security metrics delivery and improvements - Assistance with recruiting activities and administrative work What You Bring: -  5+ years' experience with emphasis on application development, application security or related fields. -  3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object-oriented language experience -  2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience -  3+ years' experience in application security technologies with knowledge of application security threats. Experience with threat modeling, attack surface analysis, penetration testing, software vulnerability assessments, and understanding of software security threat vectors. -  Knowledge of Component Analysis using tools such as OWASP Dependency-Check, Bytesafe Dependency Checker, Patton, PHP Security Checker, etc. -  Experience with static and dynamic application security testing. -  Experience with AWS products and services -  Bachelor's degree in computer science or equivalent  Preferences: -  Experience as an application security engineer using a suite of tools used for the following: -  Recon and Information Gathering (e.g. Nmap, NetCat, Spiders, OWASP Zed Attack Proxy). -  Mapping and Discovery (e.g. Burp Suite with plug-ins) -  Exploitation of top OWASP vulnerabilities such as SQL Injection, Cross-site Scripting (XSS), Cross-Site Request Forgery (CSRF) attacks, etc. Experience with tools such as MetaSploit, AppScan or WebInspect. -  Knowledge of Threat modeling using PASTA and STRIDE methodology. -  Knowledge of OWASP Best practices -  Knowledge of OWASP Testing Guide 4.0 -  Knowledge of OWASP Code Review 2.0 -  Knowledge of Software Component Verification Sequoia’s Culture – Our most important asset - Integrity - Passion for service - Innovative - Growth oriented - Caring for others - Promise-centric - Focused on relationship building Sequoia provides equal opportunity to all applicants without regard to race, color, creed, religion, citizenship, national origin, age, sex, sexual orientation, gender identity, pregnancy, marital status, military or veteran status, disability, or any other basis prohibited by applicable law. Compensation & Benefits Sequoia provides competitive compensation including base salary, performance-based bonus programs, and comprehensive benefits package. Sequoia’s Candidate Privacy Policy https://www.sequoia.com/legal/candidate-privacy-policy/ ", "summaryDescription" : "Application Security Engineer at Sequoia. Skills: Application security, Threat modeling, Penetration testing, Secure coding. Provide application security expertise. Manage application security analytics", "createdAt" : "2026-06-13T23:08:27.717", "lastUpdated" : "2026-06-15T07:59:14.818", "ingestTimestamp" : "2026-06-13T23:08:27.717", "mongoId" : "6a2c8d8a74d8ee00a09794c1", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 145000, "salaryAnnualMax" : 205000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Secure coding", "Penetration testing", "Threat modeling", "Attack surface analysis", "Application security", "Application development", "Secure architecture design", "Identity management", "Authentication", "Cryptography", "System administration", "Network security", "Software vulnerability assessments", "OWASP Top 10 vulnerabilities", "Software Development LifeCycle", "Cloud-native architecture", "Identity and authentication", "Component Analysis", "SQL Injection", "Cross-site Scripting", "Cross-Site Request Forgery", "PASTA methodology", "STRIDE methodology", "OWASP Best practices", "OWASP Testing Guide", "OWASP Code Review Guide", "OWASP Dependency-Check", "Bytesafe Dependency Checker", "Patton", "PHP Security Checker", "Nmap", "NetCat", "Spiders", "Burp Suite", "MetaSploit", "AppScan", "WebInspect" ], "skillCount" : 37, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 } ], "status" : 200, "message" : "application support specialist information security grc tool jobs", "metadata" : { "title" : "application support specialist information security grc tool" }, "pagination" : { "page" : 0, "limit" : 50, "totalCount" : 58890, "totalPages" : 1178, "hasNext" : true, "hasPrevious" : false } }

Remote Application Support Specialist Information Security Grc Tool Jobs

Top Skills

Senior Information Security Analyst, GRC and Responsible AI

Senior Information Security Analyst, GRC and Responsible AI

Information Security Analyst

Information Security Administrator

Application Support Specialist

Manager, Information Security GRC

GRC Specialist, Automation & Technology

Senior Manager, Information Security

Senior Information Security Engineer

Senior Security Analyst- Application Security & DevSecOps

Senior Security Analyst- Application Security & DevSecOps

Information Security Officer

Health Information Specialist

Principal Application Security Consultant, National Security

Application Support Specialist (m/w/d)

Information Security Consultant

Application Security Engineer

Sr. Security Engineer - GRC

Application Security Engineer

Associate Director, Information Security Risk

Associate Director, Information Security Risk

Information Security Analyst

Senior Director, Information Security & Compliance

Security Industry Specialist, Subsidiary & Acquisition GRC

Application Security Engineer

Application Support Lead

Senior Information Security Engineer, Product Security Engineering

Information Security Systems Analyst

Information Security Consultant

Information Security Governance, Risk and Compliance Specialist

Information Security Officer

Chief Information Security Officer

Cybersecurity GRC Specialist

Security Officer - Classified Information

Information Security Consultant

Application Security Engineer | Senior

Lead Information Systems Security Officer (ISSO)

Application Support Specialist (Information Security GRC Tool)

Application Support Specialist (Information Security GRC Tool)

Information System Security Officer (ISSO)

Information Security & Compliance Officer

Financial Data Application Specialist

Application Security Engineer | Senior

Cloud Application Security Engineer

Health Information Specialist

Information Security Officer

Senior Information Security Engineer, Offensive Security

Enterprise Application Specialist, IT

Senior Application Security Engineer

Application Security Engineer

Related Searches

All Application Support Specialist Information Security Grc Tool Jobs by City

More Remote Jobs

Common Questions