{ "count" : 128221, "data" : [ { "id" : "6a305b03f292fd229cf585f6", "title" : "Third-Party Risk Officer", "company" : "Convera", "industry" : "FinTech", "salary" : { "min" : 85000.0, "max" : 125000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Third-Party Risk Officer in Luxembourg, Luxembourg, adjusted for the FinTech industry." }, "location" : "Luxembourg", "locations" : [ "Luxembourg" ], "timestamp" : "2026-06-16T09:21:28.486", "fingerprint" : "1f56117299d56a8d2d2695e0e897017ac7834cebedb3359aa2e09fb7269cccbd", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/convera/jobs/4879615101", "externalId" : "4879615101", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Luxembourg", "country" : "Luxembourg", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "49.6112768,6.1297990" } ], "locationText" : "Luxembourg, Luxembourg", "professionalSkills" : [ "Risk management", "Outsourcing management", "Regulatory alignment", "Oversight processes", "KPI reporting" ], "hardSkillsList" : [ "Risk assessment", "Regulatory notification", "Policy maintenance", "Procedure maintenance", "Methodology maintenance" ], "hardSkills" : [ { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Regulatory notification", "level" : "intermediate" }, { "name" : "Policy maintenance", "level" : "intermediate" }, { "name" : "Procedure maintenance", "level" : "intermediate" }, { "name" : "Methodology maintenance", "level" : "intermediate" } ], "majorSkills" : "Third-Party Risk Management, Outsourcing frameworks, Regulatory compliance", "majorSkillsList" : [ "Third-Party Risk Management", "Outsourcing frameworks", "Regulatory compliance" ], "coreResponsibilities" : "Maintain Third-Party Risk Management framework, Maintain outsourcing register, Ensure register completeness, Ensure register accuracy, Ensure regulatory alignment, Compile KPI reports, Analyze KPI deviations, Initiate sustainable remediation, Coordinate third-party risk assessments, Coordinate regulatory notifications of outsourcing, Identify weaknesses in oversight processes, Recommend improvements, Maintain underlying policies, Maintain procedures, Maintain methodologies, Collaborate with business units, Implement KPI reporting process, Act as subject matter expert, Support audits, Support regulatory assessments, Collaborate on Operational Resilience, Collaborate on ICT Risk management", "teamCollaboration" : "Cross functional forums; Diverse global risk team", "domainKnowledge" : "Third-Party Risk Management; Outsourcing arrangements; Operational Resilience; ICT Risk management; Payment services", "domainList" : [ "third-party-risk-management", "outsourcing-arrangements", "operational-resilience", "ict-risk-management", "payment-services" ], "domainSpecificKnowledge" : [ "Third-Party Risk Management", "Outsourcing arrangements", "Operational Resilience", "ICT Risk management", "Payment services" ], "communicationSkills" : "Risk communication; Stakeholder communication; Regulator communication", "qualificationsBasic" : "5+ years experience in Third-Party Risk Management, Experience in outsourcing lifecycle management", "qualificationsPreferred" : "Knowledge of specific outsourcing regulations, Experience with ICT services, Experience with payment services providers", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Third-Party Risk Officer – Luxembourg (hybrid) As a member of the Risk Function (second line of defence), you will be a key part of supporting Convera in its strategic objectives serving over 30,000 clients globally. As third-party risks are embedded within all aspects of the business, the Risk Function ensures adherence to the stated risk appetite whilst pro-actively implementing continuous improvements in third-party risk identification, capture, treatment and oversight. You will be responsible for: Maintaining the Third-Party Risk Management framework according to local regulations and contractual frameworks Maintaining the outsourcing register and ensuring completeness, accuracy, and regulatory alignment Compiling Key Performance Indictors (KPI) reports designed for the oversight of Third-Party Service Providers Analyzing KPI deviations and initiating sustainable remediation Coordinating comprehensive third-party risk assessments and regulatory notifications of outsourcing Identifying potential weaknesses in oversight processes and recommending improvements Maintaining underlying policies, procedures and methodologies Collaborating with business units to implement an effective KPI reporting process Acting as subject matter expert for the Third-Party Risk Management framework within cross functional forums, in support of audits reviews or regulatory assessments Collaborating on Operational Resilience and ICT Risk management matters In this role you will support the future of the global Risk function as Convera grows and evolves. The Risk team plays a fundamental part in protecting the firm and our customers whilst ensuring the risk service is efficient as possible. You should apply if you have: Strong, demonstrable experience in Third-Party Risk Management and Outsourcing frameworks, preferably within financial services Solid understanding of EBA Guidelines on Outsourcing Arrangements and related regulatory expectations Experience in outsourcing lifecycle management, including onboarding, monitoring, and exit planning A proactive mindset and a can-do attitude Demonstrable ability to be a team player, communicate effectively and work collaboratively across a diverse global risk team whilst helping to reinforce a strong risk culture Excellent written and verbal communication skills, and comfortable in communicating risk matters with a broad range of internal stakeholders (including senior management) and regulators Will be considered as advantages: knowledge of specific outsourcing regulations, experience with ICT services or payment services providers About Convera Convera is the largest non-bank B2B cross-border payments company in the world. We leverage decades of industry expertise and technology-led payment solutions to deliver smarter money movements to our customers – helping them capture more value with every transaction. Convera serves more than 30,000 customers ranging from small business owners to enterprise treasurers to educational institutions to financial institutions to law firms to NGOs. Our teams care deeply about the value we bring to our customers which makes Convera a rewarding place to work. This is an exciting time for our organization as we build our team with growth-minded, results-oriented people who are looking to move fast in an innovative environment. As a truly global company with employees in over 20 countries, we are passionate about diversity; we seek and celebrate people from different backgrounds, lifestyles, and unique points of view. We want to work with the best people and ensure we foster a culture of inclusion and belonging. We offer competitive benefits including: Competitive salary Additional rest days (wellness days, volunteering days) A flexible approach to work / hybrid working Opportunity to earn performance related bonus (dependent of level of seniority) Generous employee benefits (Meal Vouchers, Medical Care, and dependent of seniority Life Insurance, Pension Scheme) Great career growth and development opportunities in a global and fast-moving organization There are plenty of amazing opportunities at Convera for talented, creative problem solvers who never settle for good enough and are looking to transform Business to Business payments. Apply now! #LI-EW2", "summaryDescription" : "Third-Party Risk Officer at Convera. Skills: Third-Party Risk Management, Outsourcing frameworks, Regulatory compliance. Maintain Third-Party Risk Management framework. Maintain outsourcing register", "postedDate" : "2026-06-15T23:27:37.502", "createdAt" : "2026-06-15T23:27:37.502", "lastUpdated" : "2026-06-16T09:21:28.486", "ingestTimestamp" : "2026-06-15T23:27:37.502", "mongoId" : "6a305b03f292fd229cf585f6", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Risk assessment", "Regulatory notification", "Policy maintenance", "Procedure maintenance", "Methodology maintenance", "Third-Party Risk Management", "Outsourcing frameworks", "Regulatory compliance", "Risk management", "Outsourcing management", "Regulatory alignment", "Oversight processes", "KPI reporting", "Outsourcing arrangements", "Operational Resilience", "ICT Risk management", "Payment services" ], "skillCount" : 17, "jobCategory" : "finance", "jobSubcategory" : "accounting", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 1393.6857, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a307a7ef292fd229c03cb16", "title" : "Third Party Assurance (TPA) Analyst", "company" : "Domestic & General", "industry" : "Insurance", "salary" : { "min" : 45000.0, "max" : 65000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Third Party Assurance Analyst in Wimbledon, United Kingdom, adjusted for the financial services industry and company size." }, "location" : "Wimbledon, UK", "locations" : [ "Wimbledon, UK", "United Kingdom" ], "timestamp" : "2026-06-16T13:19:56.123", "fingerprint" : "1c98cb71b1079a5a7a2bb9be5dbfcfa7e4ae1a0691cbb56c887e450e906ce6d2", "source" : "workday", "language" : "en", "applyUrl" : "https://domesticandgeneral.wd3.myworkdayjobs.com/DeGCareers/job/Wimbledon-UK/Third-Party-Assurance--TPA--Analyst_JR101856", "externalId" : "JR101856", "industryFunction" : { }, "locationPoint" : "51.42212,-0.20805", "structuredLocations" : [ { "city" : "Wimbledon", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "51.4214787,-0.2064027" }, { "city" : "Nottingham", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "52.9534193,-1.1496461" } ], "locationText" : "Wimbledon, United Kingdom; Nottingham, United Kingdom", "employmentType" : "FULL_TIME", "professionalSkills" : [ "Risk assessment", "Due diligence", "IT Audit support", "Compliance adherence", "Regulatory adherence" ], "hardSkillsList" : [ "Risk assessment", "Due diligence", "IT Audit support", "Compliance adherence", "Regulatory adherence" ], "hardSkills" : [ { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Due diligence", "level" : "intermediate" }, { "name" : "IT Audit support", "level" : "intermediate" }, { "name" : "Compliance adherence", "level" : "intermediate" }, { "name" : "Regulatory adherence", "level" : "intermediate" } ], "majorSkills" : "Risk assessment, Compliance, Audit support", "majorSkillsList" : [ "Risk assessment", "Compliance", "Audit support" ], "coreResponsibilities" : "Coordinate 3rd party risk assessments, Track 3rd party risk assessments, Complete 3rd party risk assessments, Coordinate 4th party risk assessments, Track 4th party risk assessments, Complete 4th party risk assessments, Coordinate Client risk assessments, Track Client risk assessments, Complete Client risk assessments, Liaise with internal owners, Schedule assessments, Request documentation, Coordinate deliverables, Maintain assessment reports, Update internal CRM systems, Update reporting tools, Draft remediation plans, Document remediation plans, Draft follow-up actions, Document follow-up actions, Provide updates to committees, Provide reports to committees, Provide updates to governance forums, Provide reports to governance forums, Support TPA team, Assist in onboarding due diligence, Assist in inlife due diligence, Assist in exit due diligence, Involve in IT Audit planning, Support IT Audit, Ensure ISO27001 compliance, Conduct CIS Maturity assessment, Conduct controls assessment, Involve in Information Security initiatives", "teamCollaboration" : "Internal relationship owners; Senior stakeholders; Information Security Unit; Governance forums; Committees", "domainKnowledge" : "Financial services; Third Party Risk Management; Fourth Party Risk Management; Client Risk Management; Information Security; ISO27001 compliance; CIS Maturity; Business continuity; Regulatory adherence", "domainList" : [ "financial-services", "third-party-risk-management", "fourth-party-risk-management", "client-risk-management", "information-security", "iso27001-compliance", "cis-maturity", "business-continuity", "regulatory-adherence" ], "domainSpecificKnowledge" : [ "Financial services", "Third Party Risk Management", "Fourth Party Risk Management", "Client Risk Management", "Information Security", "ISO27001 compliance", "CIS Maturity", "Business continuity", "Regulatory adherence" ], "toolProficiency" : [ "Microsoft Excel", "Microsoft PowerPoint", "Microsoft Word", "CRM systems" ], "communicationSkills" : "Written communication; Verbal communication; Professional communication; Clear communication", "documentationSkills" : "Document remediation plans; Document follow-up actions", "specialRequirements" : "Monthly travel, Quarterly travel", "qualificationsBasic" : "Third Party Risk Management experience, Supply Chain Risk Management experience, Risk management experience, Compliance experience, Audit experience, Microsoft Excel proficiency, Microsoft PowerPoint proficiency, Microsoft Word proficiency, CRM systems proficiency, Liaise with senior stakeholders", "qualificationsPreferred" : "ISO standards knowledge, Risk management certifications, Auditing frameworks knowledge", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "**Third Party Assurance (TPA) Analyst Full Time, Permanent Position Hybrid with monthly/Quarterly travel to Wimbledon or Nottingham** Domestic & General is growing fast across 14 countries, protecting the appliances that keep households running and cutting waste by extending product life. Recognised by Great Place to Work and the Inclusive Employers Standard, we’re building a modern, inclusive engineering culture—and we’re looking for a Third Party Assurance Analyst to ensure we correctly manage the risks posed by our external suppliers. **About the Role** We are seeking a highly organised and proactive **Third Party Assurance (TPA) Analyst** to support our growing 3rd, 4th Party & Client Risk function. This is an excellent opportunity for a professional looking to gain experience in an evolving **financial services** environment with exposure to senior stakeholders and global operations. Reporting directly to the Group Third Party Assurance Manager, you will assist in all onboarding, inlife & exit due diligence across the UK, EU, US, and Australia. This is a pivotal role in ensuring our 3rd, 4th & Client relationships meet internal risk and compliance standards, supporting business continuity and regulatory adherence. Working within the Information Security Unit you will also be involved in IT Audit planning & support, ensuring adherence to ISO27001 compliance, CIS Maturity & controls assessment as well as a variety of Information Security initiatives **Key Responsibilities** * Support the TPA Team in coordinating, tracking, and completing 3rd party, 4th party, & Client risk assessments. * Liaise with internal relationship owners to schedule assessments, request documentation, and coordinate deliverables. * Maintain and update assessment reports, internal CRM systems, and reporting tools. * Assist in drafting and documenting **remediation plans** and **follow-up actions** resulting from supplier assessments or audits. * Provide regular updates and reports to relevant committees and governance forums. * Ensure clear and professional communication with stakeholders at all levels. **About You** We’re looking for a detail-oriented, self-motivated individual who thrives in a collaborative, deadline-driven environment. You’ll bring a can-do attitude, strong communication skills, and a natural ability to manage multiple priorities with confidence. **Essential Skills & Experience** * Previous experience in **Third Party Risk Management, Supply Chain Risk Management** , risk, compliance, or audit. * Excellent **written and verbal communication skills**. * Strong organisational skills, with the ability to manage multiple assessments and deadlines simultaneously. * Proficient in **Microsoft Excel, PowerPoint, and Word**. * Comfortable using **CRM systems**. * Confident liaising with and supporting senior stakeholders across departments. * Any relevant qualifications (e.g., **ISO standards** , **risk management certifications** , or **auditing frameworks**). **We offer lots of great benefits! Some of which include:** * Competitive salary and annual discretionary bonus * 25 days annual leave plus bank/public holidays, as well as an annual option to buy up to 5 additional days of annual leave * Life assurance – employer funded cover of 4x basic salary * Health cash plan – employer funded cover to enable you to claim money back on essential healthcare costs, including dental, optical, physiotherapy and many more. Cover also includes unlimited access to a 24/7 virtual GP service * Attractive company pension scheme * Car Leasing – access to a carbon neutral salary sacrifice car leasing scheme, with an all-inclusive monthly cost covering all charge, taxes, insurance, repairs and maintenance on a range of brand-new vehicles * Cycle to Work – tax efficient bike and cycling equipment worth up to £1,000 * Employee Assistance Programme – specialist advice and support on issues such as finance, relationships, illness and family issues * Free Domestic & General protection plan – one free plan each year with access to discounted rates of up to 50% on additional plans, including referrals for family and friends **Domestic & General are an equal opportunities employer which means we treat people fairly. We welcome applications from all suitably skilled persons regardless of their gender, age, race, disability, ethnic background, religion/belief, sexual orientation, gender reassignment or marital/family status.** **Please note that we have a thorough referencing process, which includes criminal record, credit and reference checks.** _At Domestic & General, we are proud of our 100-year legacy and excited about our future growth plans. We are expanding our horizons, entering new markets and territories internationally and we need your expertise to help us on the journey._", "summaryDescription" : "Third Party Assurance (TPA) Analyst at Domestic & General. Skills: Risk assessment, Compliance, Audit support. Coordinate 3rd party risk assessments. Track 3rd party risk assessments", "postedDate" : "2026-06-16T03:52:48.534", "createdAt" : "2026-06-16T03:52:48.520", "lastUpdated" : "2026-06-16T13:19:56.123", "ingestTimestamp" : "2026-06-16T03:52:48.520", "mongoId" : "6a307a7ef292fd229c03cb16", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://domesticandgeneral.wd3.myworkdayjobs.com/DeGCareers/job/Wimbledon-UK/Third-Party-Assurance--TPA--Analyst_JR101856", "salaryBand" : "30k-50k", "hasSalary" : false, "allSkills" : [ "Risk assessment", "Due diligence", "IT Audit support", "Compliance adherence", "Regulatory adherence", "Compliance", "Audit support", "Financial services", "Third Party Risk Management", "Fourth Party Risk Management", "Client Risk Management", "Information Security", "ISO27001 compliance", "CIS Maturity", "Business continuity", "Microsoft Excel", "Microsoft PowerPoint", "Microsoft Word", "CRM systems" ], "skillCount" : 19, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "mid", "dataQualityScore" : 0.8888889, "_score" : 1300.3286, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services", "llmIndustryConfidence" : 0.95 }, { "id" : "6a306b59f292fd229cfd01dc", "title" : "IT Third Party & Client Manager", "company" : "KPMG Nederland", "industry" : "Computer And Network Security", "salary" : { "min" : 4165.0, "max" : 6845.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : false }, "location" : "Amstelveen, NH, Netherlands", "locations" : [ "Amstelveen", "NH", "Netherlands" ], "certifications" : [ "ISO certifications" ], "timestamp" : "2026-06-16T08:35:58.692", "fingerprint" : "b5ad8e912698522b46b707a487325e0cd5afa8074f27c91bd6c59da0b6dfc2ad", "source" : "smartrecruiters", "language" : "nl", "applyUrl" : "https://jobs.smartrecruiters.com/KPMGNederland/744000132216155-it-third-party-client-manager", "externalId" : "744000132216155", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Amstelveen", "state" : "North Holland", "country" : "Netherlands", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "52.2862177,4.8526493" } ], "locationText" : "Amstelveen, North Holland, Netherlands", "employmentType" : "CONTRACT", "experienceLevel" : "not-applicable", "professionalSkills" : [ "Risk assessment", "Contract management", "Security requirements", "Due diligence", "Information security" ], "hardSkillsList" : [ "Security assessments", "Risk analysis", "Contract review", "Information gathering" ], "hardSkills" : [ { "name" : "Security assessments", "level" : "intermediate" }, { "name" : "Risk analysis", "level" : "intermediate" }, { "name" : "Contract review", "level" : "intermediate" }, { "name" : "Information gathering", "level" : "intermediate" } ], "majorSkills" : "Third-party risk management, Security documentation, Client audits", "majorSkillsList" : [ "Third-party risk management", "Security documentation", "Client audits" ], "coreResponsibilities" : "Assess external parties information security standards, Perform security assessments, Conduct due diligence, Validate relevant documentation, Translate risk outcomes to security requirements, Record security requirements in contracts, Ensure contractually agreed measures are implemented, Structure third-party risk management chain, Manage onboarding process, Manage risk classification, Manage contracting, Manage monitoring, Manage periodic reviews, Manage exit scenarios, Demonstrate information security to clients, Assemble assurance packages, Coordinate client audits, Coordinate information requests, Gather input from colleagues, Ensure timely answer delivery, Incorporate security requirements in projects, Monitor security measures, Control security measure implementation, Monitor external party risk analyses, Assess external party risk analyses, Sharpen external party risk analyses, Monitor analysis depth, Ensure security requirements in contracts, Ensure security requirements in SLAs, Ensure security requirements in documentation, Coordinate client information requests, Coordinate client audits, Gather necessary information, Align with subject matter experts, Deliver correct answers, Deliver complete answers, Deliver convincing answers, Assess client security requirements, Advise on feasibility, Advise on acceptance, Advise on mitigations, Ensure KPMG accepts executable obligations, Translate complexity into actions, Ensure chain participants fulfill roles, Communicate urgency, Motivate colleagues, Create buy-in, Ensure smooth processes, Ensure demonstrable security risk control", "teamCollaboration" : "Cross-departmental collaboration; Work with project teams; Align with subject matter experts", "domainKnowledge" : "Information security; Third-party risk management; ISO certifications; SOC reports; Pentest results; Due diligence questionnaires; DPA; SLA; Risk classification; Exit scenarios; Assurance packages; Client statements", "domainList" : [ "information-security", "third-party-risk-management", "iso-certifications", "soc-reports", "pentest-results", "due-diligence-questionnaires", "dpa", "sla", "risk-classification", "exit-scenarios", "assurance-packages", "client-statements" ], "domainSpecificKnowledge" : [ "Information security", "Third-party risk management", "ISO certifications", "SOC reports", "Pentest results", "Due diligence questionnaires", "DPA", "SLA", "Risk classification", "Exit scenarios", "Assurance packages", "Client statements" ], "communicationSkills" : "Explain complex matters; Convincing language", "documentationSkills" : "Contractual security provisions; Assurance packages", "continuousLearning" : "Training and development opportunities", "problemSolvingSkills" : "Risk analysis; Root cause analysis", "outcomesObjectives" : "Ensure security requirements are met; Ensure security risks are controlled", "qualificationsBasic" : "Five years work experience risk analysis external parties, Interpreting security documentation, Experience drafting contractual security provisions, Coordinating client audits, Coordinating information requests, Communicating in Dutch, Communicating in English, Understanding third-party risk management, Relevant HBO or WO education", "qualificationsPreferred" : "Affinity with generative AI, Motivated to apply AI", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "* Je beoordeelt of externe partijen waarmee KPMG samenwerkt, voldoen aan onze informatiebeveiligingsnormen, door middel van security‑assessments, due diligence en het opvragen/valideren van relevante documentatie (zoals ISO‑certificeringen, SOC‑rapportages of pentestresultaten) * Je vertaalt de uitkomsten van deze risico‑assessments naar concrete security‑eisen en zorgt dat deze eisen worden vastgelegd in contracten, DPA’s, SLA’s en andere verplichtende documenten (inclusief opvolging als maatregelen ontbreken) * Je brengt structuur aan in de keten van third‑party‑risicobeheersing, waaronder onboarding, risico‑classificatie, contractering, monitoring, periodieke reviews en exit‑scenario’s en zorgt dat deze stappen logisch op elkaar aansluiten, zonder overlap of hiaten * Je toont aan klanten en externe stakeholders dat KPMG haar informatiebeveiliging op orde heeft, bijvoorbeeld door het samenstellen van assurance‑pakketten (zoals ISO‑certificeringen, interne controles, client statement of vragenlijsten) die je passend maakt voor de vraag van de klant * Je coördineert klantaudits en informatie‑uitvragen, verzamelt input bij betrokken collega’s (zoals IT, Legal, Assurance, Procurement en Risk Management) en zorgt dat antwoorden volledig, consistent en tijdig worden aangeleverd * Je borgt dat security‑eisen worden opgenomen en geïmplementeerd in projecten door met projectteams mee te kijken, risico’s te signaleren, maatregelen te bewaken en te controleren of deze aantoonbaar zijn uitgevoerd en effectief zijn Het Security Office (RM/SO) maakt onderdeel uit van Risk Management en is verantwoordelijk voor het ontwikkelen van informatiebeveiligingsbeleid, het beoordelen van de implementatie daarvan binnen KPMG‑services, producten en interne processen en het adviseren van Assurance, Advisory en Central Services over de juiste toepassing ervan. RM/SO voert risicoanalyses uit om inzicht te krijgen in de belangrijkste risico’s en maatregelen die nodig zijn om deze binnen de risicobereidheid van KPMG te houden. Als IT Third Party & Client Manager zorg jij ervoor dat alle informatiebeveiligingsaspecten binnen het third‑party‑riskmanagementproces aantoonbaar worden nageleefd. De risicoanalyses van externe partijen en gebruikte applicaties worden uitgevoerd door de operationele securityteams; jouw rol is om deze analyses te monitoren, beoordelen en waar nodig aan te scherpen. Je bewaakt de diepgang van de analyses en zorgt dat de juiste security‑eisen worden opgenomen en geborgd in contracten, SLA’s en andere verplichtende documentatie. Daarnaast ben jij verantwoordelijk voor de coördinatie van informatie-uitvragen en audits van klanten. Waar KPMG leveranciers beoordeelt, doen klanten dat ook bij ons. Jij verzamelt de benodigde informatie, stemt af met inhoudsdeskundigen en zorgt dat antwoorden correct, volledig en overtuigend worden aangeleverd. Voordat contracten met klanten worden ondertekend, beoordeel je de security‑eisen die klanten aan KPMG willen opleggen en adviseer je over de haalbaarheid, acceptatie en eventuele mitigaties. Je bewaakt hiermee dat KPMG alleen verplichtingen accepteert die daadwerkelijk uitvoerbaar zijn. Je werkt nauw samen met collega’s uit diverse afdelingen met uiteenlopende expertise en verantwoordelijkheden. Je begrijpt snel wat er nodig is, kunt complexiteit vertalen naar begrijpelijke acties en zorgt dat iedereen in de keten zijn rol effectief vervult. Het overbrengen van urgentie, motiveren van collega’s en creëren van draagvlak zijn hierin essentieel — jij bent de verbindende schakel die ervoor zorgt dat processen soepel lopen en beveiligingsrisico’s aantoonbaar worden beheerst. ## Qualifications * Je hebt vijf jaar aantoonbare werkervaring met het uitvoeren, beoordelen en onderbouwen van risicoanalyses van externe partijen, inclusief het interpreteren van security‑documentatie zoals ISO‑certificeringen, SOC‑rapportages, pentestresultaten of due‑diligencevragenlijsten * Je hebt ervaring met het opstellen, beoordelen en aanscherpen van contractuele security‑bepalingen, zoals DPA’s, SLA’s, verwerkersovereenkomsten en security‑bijlagen en je weet deze af te stemmen op het risicoprofiel van de samenwerking * Je hebt ervaring met het coördineren van klant‑audits en informatie‑uitvragen, waarbij je informatie ophaalt bij IT, Legal, Procurement, Risk Management en andere teams en zorgt dat antwoorden volledig, tijdig en aantoonbaar correct zijn * Je bent communicatief sterk in zowel Nederlands en Engels en weet vanuit jouw vakgebied de brug te slaan naar collega’s in andere disciplines, waarbij je complexe materie in begrijpelijke en overtuigende taal kunt uitleggen * Je hebt goed inzicht in alle relevante onderdelen van third‑party‑riskmanagement, zoals onboarding, risico‑classificatie, security‑eisen, monitoring, jaarlijkse reviews, exit‑beheer en documentatieplicht * Je beschikt over een relevante afgeronde Hbo‑ of WO‑opleiding, zoals Riskmanagement, Cybersecurity, Cybercrime, Information Security Management of een vergelijkbaar domein * Je hebt affiniteit met (generatieve) AI en bent gemotiveerd om deze technologie actief toe te passen in je dagelijkse werk ## Additional Information * Brutomaandsalaris tussen € 4.165,- en € 6.845,- afhankelijk van je werkervaring, variabele prestatie beloning, een vaste onkostenvergoeding en een vaste thuiswerkvergoeding per gewerkte dag. * 30 vakantiedagen (op fulltime basis) en de mogelijkheid om meer dagen te kopen of je vakantiedagen te verkopen. * Bij KPMG werken we hybride, dus een combinatie van zowel thuis als op kantoor. * Een volledig ingerichte thuiswerkplek. * Vergoeding van je reiskosten met een NS business kaart of reiskostenvergoeding. * Een laptop en iPhone. * Een uitgebreid aanbod van trainingen en opleidingen die bijdragen aan jouw professionele en persoonlijke ontwikkeling. * Diversiteitsnetwerken op het gebied van pride, gender, ability, cultural diversity en generations die regelmatig verschillende activiteiten organiseren om verschil te vieren! * Aandacht voor vitaliteit! Sporten op het kantoor in Amstelveen of korting op een sportschool bij jou in de buurt én toegang tot coaching, gezondheids- en vitaliteitprogramma’s. * ‘Together’ is één van onze kernwaarden. Je kunt dus rekenen op verschillende sociale activiteiten zoals teamuitjes, borrels en evenementen samen met je collega’s.", "summaryDescription" : "IT Third Party & Client Manager at KPMG Nederland. Skills: Third-party risk management, Security documentation, Client audits. Assess external parties information security standards. Perform security assessments", "postedDate" : "2026-06-15T14:25:48.000", "createdAt" : "2026-06-16T00:27:59.944", "lastUpdated" : "2026-06-16T08:35:58.692", "ingestTimestamp" : "2026-06-16T00:27:59.944", "mongoId" : "6a306b59f292fd229cfd01dc", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "<30k", "hasSalary" : false, "allSkills" : [ "Security assessments", "Risk analysis", "Contract review", "Information gathering", "Third-party risk management", "Security documentation", "Client audits", "Risk assessment", "Contract management", "Security requirements", "Due diligence", "Information security", "ISO certifications", "SOC reports", "Pentest results", "Due diligence questionnaires", "DPA", "SLA", "Risk classification", "Exit scenarios", "Assurance packages", "Client statements" ], "skillCount" : 22, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1105.1213, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Consulting", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c6af174d8ee00a090f52c", "title" : "IT Third Party Outsourcing Specialist", "company" : "Bybit", "industry" : "FinTech", "salary" : { "min" : 60000.0, "max" : 85000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for IT roles in Vienna, Austria, adjusted for mid-seniority and the FinTech industry." }, "location" : "Vienna", "locations" : [ "Vienna" ], "timestamp" : "2026-06-15T06:46:06.976", "fingerprint" : "e99ff2e6353c21d6bca608829af9f8292c41933d2667f4e0ca5687735bf68476", "source" : "greenhouse", "language" : "de", "applyUrl" : "https://job-boards.eu.greenhouse.io/bybit/jobs/4878217101", "externalId" : "4878217101", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Vienna", "country" : "Austria", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "48.2083537,16.3725042" } ], "locationText" : "Vienna, Austria", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "professionalSkills" : [ "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement" ], "hardSkillsList" : [ "Risk management", "Outsourcing services management" ], "hardSkills" : [ { "name" : "Risk management", "level" : "intermediate" }, { "name" : "Outsourcing services management", "level" : "intermediate" } ], "majorSkills" : "Third-Party Risk Management, Outsourcing Services", "majorSkillsList" : [ "Third-Party Risk Management", "Outsourcing Services" ], "coreResponsibilities" : "Support implementation of risk management framework, Support maintenance of risk management framework, Support operation of risk management framework, Oversee third-party services, Monitor third-party services, Ensure agreements are in place, Ensure SLAs are in place, Ensure KPIs are in place, Review documentation, Analyse documentation, Prepare reports, Develop Management Information, Handle regulatory notifications, Support assessment of new services, Develop risk management framework, Provide first line review, Provide second line review, Implement SLAs, Implement KRIs, Maintain third-party portfolio, Update third-party registers, Ensure adherence to risk lifecycle, Support training for business partners", "teamCollaboration" : "Interact with internal stakeholders; Interact with external providers; Interact with Austrian regulator", "domainKnowledge" : "DORA; EBA Outsourcing guidelines; Austrian banking act; Third-Party Risk lifecycle; Digital finance", "domainList" : [ "dora", "eba-outsourcing-guidelines", "austrian-banking-act", "third-party-risk-lifecycle", "digital-finance" ], "domainSpecificKnowledge" : [ "DORA", "EBA Outsourcing guidelines", "Austrian banking act", "Third-Party Risk lifecycle", "Digital finance" ], "communicationSkills" : "Build credibility", "documentationSkills" : "Prepare reports; Develop Management Information", "continuousLearning" : "Study Growth Fund; Professional development support; Continuous learning support", "innovationCreativity" : "Innovation", "qualificationsBasic" : "Solid understanding of Third-Party Risk Management, Specific knowledge of DORA, EBA Outsourcing guidelines knowledge, Austrian banking act knowledge, Hands-on experience operating third-party risk frameworks, Experience managing third parties full lifecycle, SLA development experience, Fluent in German, Fluent in English, Stakeholder management skills, Communication skills", "qualificationsPreferred" : "Build credibility across internal and external audiences", "rawDescription" : "About Us Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance. Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution. Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services. Responsibilities Support the implementation, maintenance and operation of Bybit's third-party risk management framework Oversee and monitor third-party services and vendors in accordance with regulatory requirements across Bybit EU's regulated entities in Austria Ensure agreements, SLAs, KPIs and other metrics are in place to manage third parties against regulatory requirements Review and analyse documentation, prepare reports, develop Management Information, and handle regulatory notifications Support assessment of new third-party services Continuously develop the third-party risk management framework including documentation, assessments, systems and tools Provide first and second line review and challenge of third parties, helping implement SLAs, KRIs and other monitoring mechanisms Maintain and update the third-party portfolio and registers in alignment with regulatory requirements (e. g. DORA) Ensure adherence to the full Third-Party Risk lifecycle — from identification and assessment through to monitoring and exit planning Support training for business partners on TPRM framework, policies, standards and processes Interact with internal stakeholders (Legal, Compliance, Data Protection, Technology) and external providers and the Austrian regulator Requirements Solid understanding of Third-Party Risk Management, with specific knowledge of DORA, EBA Outsourcing guidelines, and the Austrian banking act Hands-on experience operating third-party risk frameworks Experience managing third parties across the full lifecycle, including SLA development Minimum 2 years of focused experience in Third-Party Risk or Outsourcing Services management Fluent in German and English Strong stakeholder management and communication skills, with the ability to build credibility across internal and external audiences Why Join Us At Bybit, we are committed to fostering a supportive and enriching work environment. Our benefits include: - Study Growth Fund: We support your professional development and continuous learning. - Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation. - Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world. - Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company. - Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.", "summaryDescription" : "IT Third Party Outsourcing Specialist at Bybit. Skills: Third-Party Risk Management, Outsourcing Services. Support implementation of risk management framework. Support maintenance of risk management framework", "postedDate" : "2026-06-13T20:41:46.836", "createdAt" : "2026-06-13T20:41:46.836", "lastUpdated" : "2026-06-15T06:46:06.976", "ingestTimestamp" : "2026-06-13T20:41:46.836", "mongoId" : "6a2c6af174d8ee00a090f52c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Risk management", "Outsourcing services management", "Third-Party Risk Management", "Outsourcing Services", "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement", "DORA", "EBA Outsourcing guidelines", "Austrian banking act", "Third-Party Risk lifecycle", "Digital finance" ], "skillCount" : 16, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 898.6927, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a307f1cf292fd229c05545f", "title" : "Technical Operations Manager, Third-Party Data Centers", "salary" : { "min" : 115000.0, "max" : 165000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager in the Technology industry in Michigan City, United States, adjusted for seniority and company size." }, "location" : "[Michigan City, IN, USA, [Michigan City, IN 46360, USA], Michigan City, 46360, IN, US]", "locations" : [ "[Michigan City, IN, USA, [Michigan City, IN 46360, USA], Michigan City, 46360, IN, US]" ], "timestamp" : "2026-06-16T11:30:57.634", "fingerprint" : "73fe2efdaf4fe16859bdc4b3ba8ef59548cddacc2173268f5eef767da4a782f0", "source" : "google", "language" : "en", "externalId" : "74704200184799942", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Michigan City", "state" : "Indiana", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "41.7075394,-86.8950297" } ], "locationText" : "Michigan City, Indiana, United States", "experienceLevel" : "Manager", "coreResponsibilities" : "Manage third-party data center operations, Oversee vendor performance, Ensure operational efficiency, Coordinate with internal teams, Manage data center infrastructure, Monitor system performance, Implement operational improvements, Maintain documentation", "teamCollaboration" : "Cross-functional teams; Vendor management", "domainKnowledge" : "Data center operations", "domainList" : [ "data-center-operations" ], "domainSpecificKnowledge" : [ "Data center operations" ], "documentationSkills" : "Maintain documentation", "workSiteFlexibility" : "Onsite", "summaryDescription" : "Technical Operations Manager, Third-Party Data Centers. Manage third-party data center operations. Oversee vendor performance", "postedDate" : "2026-06-16T01:50:55.203", "createdAt" : "2026-06-16T01:50:55.203", "lastUpdated" : "2026-06-16T11:30:57.634", "ingestTimestamp" : "2026-06-16T01:50:55.203", "mongoId" : "6a307f1cf292fd229c05545f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 115000, "salaryAnnualMax" : 165000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Data center operations" ], "skillCount" : 1, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Manager", "dataQualityScore" : 0.6666667, "_score" : 856.7199, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c8c8374d8ee00a0975b37", "title" : "GRC Analyst, Operations & Risk", "industry" : "Information Security", "salary" : { "min" : 75000.0, "max" : 95000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Junior GRC Analyst in Boston, adjusted for entry-level experience in the technology industry." }, "location" : "Boston, MA", "locations" : [ "Boston, MA" ], "certifications" : [ "CISA", "CRISC" ], "timestamp" : "2026-06-15T13:08:56.564", "fingerprint" : "ee5b4cbc9398942057ca5a128dc57ec9550bbc2c0a384d0103080760a1c675b6", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/whoop/c5280b0b-cc6e-4953-a0ed-ab4c9e1b646c/application", "externalId" : "c5280b0b-cc6e-4953-a0ed-ab4c9e1b646c", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Boston", "state" : "Massachusetts", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "42.3588336,-71.0578303" } ], "locationText" : "Boston, Massachusetts, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 2, "experienceMaxYears" : 2, "experienceLevel" : "Entry", "technicalSkills" : "Cybersecurity compliance", "professionalSkills" : [ "Risk management", "Process management", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement" ], "hardSkillsList" : [ "Third-party risk management", "Security compliance monitoring", "Audit readiness", "Risk assessment", "Control gap assessment" ], "softSkillsList" : [ "Critical thinking", "Interpersonal skills" ], "hardSkills" : [ { "name" : "Third-party risk management", "level" : "intermediate" }, { "name" : "Security compliance monitoring", "level" : "intermediate" }, { "name" : "Audit readiness", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Control gap assessment", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Critical thinking" }, { "name" : "Interpersonal skills" } ], "majorSkills" : "GRC program operations, Third-party risk management, Security compliance, Risk program management", "majorSkillsList" : [ "GRC program operations", "Third-party risk management", "Security compliance", "Risk program management" ], "coreResponsibilities" : "Support GRC program operations, Manage GRC intakes, Triage GRC intakes, Track GRC intakes, Perform third-party risk management, Support third-party risk management, Conduct vendor reviews, Perform vendor reassessments, Coordinate partners, Track remediation, Follow-up with Security, Follow-up with Legal, Follow-up with Privacy, Follow-up with Procurement, Follow-up with IT, Follow-up with Finance, Follow-up with business owners, Assist with risk program management, Support security compliance monitoring, Support audit readiness, Manage audit request lists, Gather security audit evidence, Coordinate security awareness training, Manage security awareness training", "teamCollaboration" : "Cross-functional follow-up; Work with management", "domainKnowledge" : "Cybersecurity compliance frameworks; ISO 27001; NIST CSF; COSO; SOC 2; PCI-DSS", "domainList" : [ "cybersecurity-compliance-frameworks", "iso-27001", "nist-csf", "coso", "soc-2", "pci-dss" ], "domainSpecificKnowledge" : [ "Cybersecurity compliance frameworks", "ISO 27001", "NIST CSF", "COSO", "SOC 2", "PCI-DSS" ], "communicationSkills" : "Verbal communication; Written communication", "continuousLearning" : "Leveraging AI tools", "problemSolvingSkills" : "Critical thinking; Assess complex issues", "qualificationsBasic" : "2+ years of experience, Bachelor's degree", "qualificationsPreferred" : "Computer science degree preferred, Cyber security degree preferred, Risk degree preferred, Technology degree preferred, CISA certification preferred, CRISC certification preferred", "workSiteFlexibility" : "Onsite", "rawDescription" : "RESPONSIBILITIES: - - Support day-to-day GRC program operations – manage and triage GRC intakes and accurate tracking through resolution - Perform and support third-party risk management activities, including vendor reviews, reassessments, partner coordination, remediation tracking, and cross-functional follow-up with Security, Legal, Privacy, Procurement, IT, Finance, and business owners - Assist with risk program management activities - Support security compliance monitoring and audit readiness activities, managing audit request lists and taking ownership of gathering security audit evidence to verify compliance with internal policies / regulations and industry best practices - Coordinate security awareness and training program management activities QUALIFICATIONS: - - 2+ years of experience in GRC, third-party risk management, security compliance, internal audit, risk management, or a related function - Deep understanding of Cybersecurity compliance frameworks and cybersecurity compliance controls – ISO 27001, NIST CSF, COSO, SOC 2, PDI-DSS - Possess a strong risk mindset, exceptional attention to detail, and the ability to apply critical thinking when assessing complex issues and control gaps - Highly organized and strong operational discipline ensuring clear and expedient escalations with informed recommendations to management - Superior interpersonal and communication skills – verbal and written - Being a team player and working to achieve common goal in a dynamic setting - Strong commitment to embracing and leveraging AI tools in day-to-day tasks, ensuring AI-assisted work aligns with the same high-quality standards as personal contributions. - A minimum bachelor’s degree in any discipline. Computer science, cyber security and risk or technology degrees preferred. CISA or CRISC certification preferred", "summaryDescription" : "GRC Analyst, Operations & Risk. Skills: GRC program operations, Third-party risk management, Security compliance, Risk program management. Support GRC program operations. Manage GRC intakes", "createdAt" : "2026-06-14T04:31:44.138", "lastUpdated" : "2026-06-15T13:08:56.564", "ingestTimestamp" : "2026-06-14T04:31:44.138", "mongoId" : "6a2c8c8374d8ee00a0975b37", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 75000, "salaryAnnualMax" : 95000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Third-party risk management", "Security compliance monitoring", "Audit readiness", "Risk assessment", "Control gap assessment", "Critical thinking", "Interpersonal skills", "GRC program operations", "Security compliance", "Risk program management", "Risk management", "Process management", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement", "Cybersecurity compliance frameworks", "ISO 27001", "NIST CSF", "COSO", "SOC 2", "PCI-DSS", "CISA", "CRISC" ], "skillCount" : 25, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Junior", "dataQualityScore" : 0.7777778, "_score" : 835.8455, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.92 }, { "id" : "6a307442f292fd229c005f33", "title" : "Manager, Risk & Governance", "company" : "Standard Bank Group", "industry" : "Financial Services", "salary" : { "min" : 750000.0, "max" : 1200000.0, "currency" : "ZAR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager, Risk & Governance in Roodepoort, South Africa, adjusted for the banking industry and Standard Bank Group's size and reputation." }, "location" : "Roodepoort, GP, ZA", "locations" : [ "Roodepoort", "GP", "ZA" ], "timestamp" : "2026-06-16T12:09:13.738", "fingerprint" : "8814f584ea19f612893c5b2c849abd7c27d8d80b4e748d2bd67da834e2ac6800", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/StandardBankGroup/744000132149485-manager-risk-governance", "externalId" : "744000132149485", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Roodepoort", "state" : "Gauteng", "country" : "South Africa", "continent" : "af", "source" : "llm", "workMode" : "onsite", "geo" : "-26.1563889,27.8858333" } ], "locationText" : "Roodepoort, Gauteng, South Africa", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "Risk Identification, Risk Management, Risk Measurement, Risk Response Strategy", "professionalSkills" : [ "Risk governance", "Third Party Risk", "Strategic Risks", "Financial Risk", "Governance processes", "Combined Assurance" ], "hardSkillsList" : [ "Risk governance", "Third Party Risk", "Strategic Risks", "Financial Risk", "Governance processes", "Combined Assurance", "Compliance monitoring", "Auditing", "Policy drafting", "Risk assessment", "Risk reporting" ], "softSkillsList" : [ "Challenging Ideas", "Convincing People", "Documenting Facts", "Embracing Change", "Following Procedures", "Interacting with People", "Providing Insights", "Resolving Conflict", "Taking Action", "Thinking Positively", "Upholding Standards" ], "hardSkills" : [ { "name" : "Risk governance", "level" : "intermediate" }, { "name" : "Third Party Risk", "level" : "intermediate" }, { "name" : "Strategic Risks", "level" : "intermediate" }, { "name" : "Financial Risk", "level" : "intermediate" }, { "name" : "Governance processes", "level" : "intermediate" }, { "name" : "Combined Assurance", "level" : "intermediate" }, { "name" : "Compliance monitoring", "level" : "intermediate" }, { "name" : "Auditing", "level" : "intermediate" }, { "name" : "Policy drafting", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Risk reporting", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Challenging Ideas" }, { "name" : "Convincing People" }, { "name" : "Documenting Facts" }, { "name" : "Embracing Change" }, { "name" : "Following Procedures" }, { "name" : "Interacting with People" }, { "name" : "Providing Insights" }, { "name" : "Resolving Conflict" }, { "name" : "Taking Action" }, { "name" : "Thinking Positively" }, { "name" : "Upholding Standards" } ], "majorSkills" : "Risk Governance, Third Party Risk, Strategic Risks, Financial Risk", "majorSkillsList" : [ "Risk Governance", "Third Party Risk", "Strategic Risks", "Financial Risk" ], "coreResponsibilities" : "Ensure sound governance in managing all risk types, Apply risk management in line with BU Risk, Apply risk management in line with Policies for, Apply risk management in line with Policies for, Focus on Third Party Risk, Monitor SIL’s third parties, Focus on Strategic Risks, Assist in SIL Own Risk and Solvency Assessment, Assist in various governance processes, Implement Combined Assurance", "teamCollaboration" : "Stakeholder engagement", "domainKnowledge" : "Insurance industry; SAM regulation; ORSA process; Risk management; Financial services sector; Banking sector; Governance processes; Codes of practice", "domainList" : [ "insurance-industry", "sam-regulation", "orsa-process", "risk-management", "financial-services-sector", "banking-sector", "governance-processes", "codes-of-practice" ], "domainSpecificKnowledge" : [ "Insurance industry", "SAM regulation", "ORSA process", "Risk management", "Financial services sector", "Banking sector", "Governance processes", "Codes of practice" ], "communicationSkills" : "Documenting Facts", "documentationSkills" : "Documenting Facts; Drafting policies; Drafting monitoring plans; Drafting working papers; Drafting monitoring reports", "problemSolvingSkills" : "Challenging Ideas; Resolving Conflict", "qualificationsBasic" : "B. Com Law/LLB or equivalent, Risk Management Degree or Internal Audit, 5-7 years compliance officer/auditor experience, 5-7 years business management/risk management experience, 5-7 years insurance industry experience, 5-7 years SAM regulation experience, 5-7 years ORSA process implementation experience, 5-7 years ORSA process reporting experience, 5-7 years policy drafting experience, 5-7 years risk management role experience, 5-7 years risk management supporting activities experience, 5-7 years periodic assessment of processes experience, 5-7 years maintenance of repositories of risk information experience, Governance processes of the bank requirements, Codes of practice requirements", "qualificationsPreferred" : "Experience with monitoring methodologies, Experience with end-to-end monitoring process, Experience with drafting monitoring plans, Experience with implementing monitoring plans, Experience with working papers, Experience with monitoring reports, Experience with tracking monitoring findings, Experience with closing monitoring findings, Experience in a financial services sector risk management role, Experience with risk management repositories", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Standard Bank Group is a leading Africa-focused financial services group, and an innovative player on the global stage, that offers a variety of career-enhancing opportunities – plus the chance to work alongside some of the sector’s most talented, motivated professionals. Our clients range from individuals, to businesses of all sizes, high net worth families and large multinational corporates and institutions. We’re passionate about creating growth in Africa. Bringing true, meaningful value to our clients and the communities we serve and creating a real sense of purpose for you. The purpose of this function is to ensure that sound governance is applied in managing all risk types within Standard Insurance Limited (SIL) in line with BU Risk Appetite and Policies for SIL and the Standard Bank Group, with specific focus Third Party Risk and monitoring of SIL’s third parties. This function will also require specific focus on Strategic Risks, including Financial Risk, assist in the SIL Own Risk and Solvency Assessment (ORSA) process and various governance processes including Combined Assurance. ## Qualifications Minimum Qualifications Type of Qualification: B.Com Law/LLB or equivalent, Risk Management Degree or Internal Audit Field of Study: Law, Business Commerce, Risk and Auditing Experience Required To facilitate the creation and adoption of appropriate risk governance, accountable to derive a standardised approach which enable principle based policies enabled by consistent guidelines for use by Stakeholders. 5-7 years experience on the following would represent an advantage to the role: * Experience as a compliance officer / auditor * Experience in business management / risk management * Insurance industry experience * Experience with SAM regulation and ORSA process implementation and reporting. Compliance monitoring / auditing experience, development or sound monitoring methodologies and owning the end-to-end monitoring process: drafting and implementing monitoring plans, working papers, monitoring reports and tracking and closing of monitoring findings until resolution. * Drafting and maintaining of policies, experience in a risk management role in the banking and/or financial services sector, risk management supporting activities, periodic assessment of processes to manage risk and the maintenance of repositories of risk information for knowledge management for reference purposes. Have in place the requirements of governance processes of the bank and the codes of practice which determine risk governance. ## Additional Information Behavioural Competencies: * Adopting Practical Approaches * Challenging Ideas * Convincing People * Documenting Facts * Embracing Change * Following Procedures * Interacting with People * Providing Insights * Resolving Conflict * Taking Action * Thinking Positively * Upholding Standards Technical Competencies: * Financial Industry Regulatory Framework * Risk Identification * Risk Management * Risk Measurement * Risk Response Strategy * Risk/ Reward Thinking", "summaryDescription" : "Manager, Risk & Governance at Standard Bank Group. Skills: Risk Governance, Third Party Risk, Strategic Risks, Financial Risk. Ensure sound governance in managing all risk types. Apply risk management in line with BU Risk", "postedDate" : "2026-06-15T09:06:15.000", "createdAt" : "2026-06-16T01:38:41.016", "lastUpdated" : "2026-06-16T12:09:13.738", "ingestTimestamp" : "2026-06-16T01:38:41.016", "mongoId" : "6a307442f292fd229c005f33", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Risk governance", "Third Party Risk", "Strategic Risks", "Financial Risk", "Governance processes", "Combined Assurance", "Compliance monitoring", "Auditing", "Policy drafting", "Risk assessment", "Risk reporting", "Challenging Ideas", "Convincing People", "Documenting Facts", "Embracing Change", "Following Procedures", "Interacting with People", "Providing Insights", "Resolving Conflict", "Taking Action", "Thinking Positively", "Upholding Standards", "Risk Governance", "Insurance industry", "SAM regulation", "ORSA process", "Risk management", "Financial services sector", "Banking sector", "Codes of practice" ], "skillCount" : 30, "jobCategory" : "finance", "jobSubcategory" : "accounting", "seniorityLevel" : "Manager", "dataQualityScore" : 1.0, "_score" : 811.15826, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Banking", "llmIndustryConfidence" : 0.95 }, { "id" : "6a307962f292fd229c031df7", "title" : "Cybersecurity Risk Analyst", "company" : "Creative Artists Agency", "industry" : "Media", "salary" : { "min" : 87000.0, "max" : 104000.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "Nashville, TN", "locations" : [ "Nashville, TN", "United States of America" ], "timestamp" : "2026-06-16T12:55:55.344", "fingerprint" : "0dafd0b944144f4385f400d40b1f09fa7918648878e2580865a55fbc67fe73e5", "source" : "workday", "language" : "en", "applyUrl" : "https://caa.wd1.myworkdayjobs.com/Careers/job/Nashville-TN/Cybersecurity-Risk-Analyst_JR8926", "externalId" : "JR8926", "industryFunction" : { }, "locationPoint" : "42.60281,-85.09305", "structuredLocations" : [ { "city" : "Nashville", "state" : "Tennessee", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "36.1622767,-86.7742984" } ], "locationText" : "Nashville, Tennessee, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "NIST CSF, CIS, ITIL, ISO 270001, SSO, GDPR, CCPA, SOC, ISO, PCIDSS, FedRAMP", "professionalSkills" : [ "Vendor management", "Risk reviews", "Security assessments", "Workflow review", "Security integrations", "Security metrics", "Due diligence" ], "hardSkillsList" : [ "Threat detection", "Risk mitigation", "Threat response", "Security controls" ], "hardSkills" : [ { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Risk mitigation", "level" : "intermediate" }, { "name" : "Threat response", "level" : "intermediate" }, { "name" : "Security controls", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity risk management, Information security frameworks, Data privacy regulations, Security analytics", "majorSkillsList" : [ "Cybersecurity risk management", "Information security frameworks", "Data privacy regulations", "Security analytics" ], "coreResponsibilities" : "Support Technology Vendor Management program, Ensure technology risk reviews, Monitor for renewals, Monitor for savings opportunities, Participate in risk reviews of IT control framework, Conduct vendor security assessments, Conduct product security assessments, Conduct applications security assessments, Integrate security early during project lifecycle, Review workflows, Produce output to enhance security processes, Coordinate implementation of core security integrations, Ensure security considerations are implemented, Configure solutions securely, Develop key security metrics, Deliver key security metrics, Ensure technical security controls are meeting desired, Ensure measurable effectiveness of technical controls", "teamCollaboration" : "Partnering with systems owners; Partner with business groups; Coordinate across service owners", "domainKnowledge" : "Information security frameworks; Data privacy regulations; Information security certifications; Servers; Operating systems; Cloud applications; Infrastructure", "domainList" : [ "information-security-frameworks", "data-privacy-regulations", "information-security-certifications", "servers", "operating-systems", "cloud-applications", "infrastructure" ], "domainSpecificKnowledge" : [ "Information security frameworks", "Data privacy regulations", "Information security certifications", "Servers", "Operating systems", "Cloud applications", "Infrastructure" ], "toolProficiency" : [ "OneTrust" ], "communicationSkills" : "Written security assessment", "documentationSkills" : "Written security assessment", "problemSolvingSkills" : "Analytical skills", "outcomesObjectives" : "Ensure enterprise systems are protected; Ensure enterprise data are protected; Meet policy requirements; Meet compliance requirements; Support business needs; Enable business needs", "qualificationsBasic" : "3-4 years in Information Technology, 2 years' experience in cybersecurity risk management, Bachelor's or Master's Degree in a relevant field, Analytical skills in conducting due diligence, Experience coordinating technical integrations, Ability to review complex systems architectures, Produce a comprehensive, written, security assessment, Experience using security analytics tooling, Understanding of fundamental operations of servers, Understanding of operating systems, Understanding of cloud applications, Understanding of infrastructure", "qualificationsPreferred" : "Core skills in Cybersecurity fundamentals, Core skills in Third Party Risk Management, Familiarity with Third Party Risk Management tools/processes", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## **Job Description** **Who We Are** Creative Artists Agency (CAA) is the leading entertainment and sports agency, with global expertise in filmed and live entertainment, digital media, publishing, sponsorship sales and endorsements, media finance, consumer investing, fashion, trademark licensing, and philanthropy. Distinguished by its culture of collaboration and exceptional client service, CAA’s diverse workforce identifies, innovates, and amplifies opportunities for the people and organizations that shape culture and inspire the world. The trailblazer of the agency business, CAA was the first to build a sports business, create an investment bank, launch a venture fund, found technology start-up companies, establish a philanthropic arm, build a business in China, and form a brand marketing services division, among other innovations. Named Most Valuable Sports Agency by Forbes for eight consecutive years, CAA represents more than 2,000 of the world’s top athletes in football, baseball, basketball, hockey, soccer, in addition to coaches, on-air broadcasters, and sports personalities and works in the areas of broadcast rights, corporate marketing initiatives, social impact, and sports properties for sales and sponsorship opportunities. Founded in 1975, CAA is headquartered in Los Angeles, and has offices in New York, Nashville, Memphis, Chicago, Miami, London, Munich, Geneva, Stockholm, Shanghai, and Beijing, among other locations globally. **The Role** This is a hands-on security position working within the Information Security group and with the internal IT department at large. This position’s core focus is to ensure consistent, measurable end to end delivery of security services. The successful candidate will work to develop and deploy capabilities ensuring enterprise systems and data are protected with the security controls and tools required to meet policy and compliance requirements. We are looking for candidates who have a passion for cybersecurity, threat detection, risk mitigation and response. You will be a key part of our efforts to build and support a defensible environment where we are able to detect, contain and respond quickly to threats and compromises in ways that serve to enable the business needs of a highly collaborative organization. The environment is fast-paced and commonly on the leading edge of technology, including early adoption of various cloud services along with the challenges of integrating those services into our security practice. **Responsibilities** Support a Technology Vendor Management program, ensuring technology risk reviews across multiple disciplines, and monitoring for renewals and savings opportunities ⁠Participate in risk reviews of the IT control framework (NIST CSF, CIS, ITIL, ISO 270001, etc.) Conduct thorough vendor, product and applications security assessments partnering with systems owners to integrate security early during the project lifecycle. Partner with business groups to review workflows, producing output to enhance security processes in support of those workflows. Coordinate, across service owners, the implementation of core security integrations (SSO, Event Logs, Secrets, Alerting, Threat Model and Backup/Recovery) with applications developed in-house and externally/SaaS hosted environments. Ensure the security considerations identified are implemented and the solutions are configured securely. Coordinate with IRM leadership to develop and deliver key security metrics to ensure technical security controls are meeting desired objectives; ensuring the measurable effectiveness of CAA’s technical controls. **Qualifications** * A minimum of 3-4 years in Information Technology * A minimum of 2 years’ experience in cybersecurity risk management * A Bachelor’s or Master’s Degree in a relevant field of work * Strong analytical skills in conducting due diligence to identify, assess and prioritize vendor risks * Familiarity with information security frameworks (NIST, ISO27001), data privacy regulations (GDPR, CCPA), and information security certifications/attestations (SOC, ISO, PCIDSS, FedRAMP) * Experience in coordinating technical integrations for security tooling and processes. * Ability to review complex systems architectures to identify key security integration opportunities * Produce a comprehensive, written, security assessment of vendors security posture * Experience using security analytics tooling to produce operational metrics and dashboards * A strong understanding of the fundamental operations of servers, operating systems, cloud applications, and infrastructure **Preferred****Qualifications** * Core skills in Cybersecurity fundamentals and Third Party Risk Management * Familiarity with using Third Party Risk Management tools/processes such as OneTrust, SIG or similar GRC platforms. * Hands-on experience in Azure, AWS Cloud environments and familiarity with core Cloud services and Cloud architecture * Familiarity with core security concepts of Single Sign-on (e.g PingFed, SAML), Identity and Access Administration (Active Directory, Azure AD, AWS IAM), Event Management (Splunk), * Expert skills in using Microsoft Office suite, JIRA. **Location** This role is hybrid, based in our Nashville office. **Compensation** The annual base salary for this position is in the range of $87,000 - $104,000 in Nashville. This position is also eligible for benefits and a discretionary bonus. Ultimately, the salary may vary based upon, but not limited to, relevant experience, time in the role, business sector, and geographic location, among other criteria. Please talk with a CAA Recruiter to learn more. Creative Artists Agency, LLC (the “Company”) is committed to a policy of Equal Employment Opportunity and will not discriminate on the basis of race (inclusive of traits historically associated with race, including hair texture and protective hairstyles), color, religion, creed, gender or sex (including pregnancy, childbirth, breastfeeding or related medical conditions), national origin, ancestry, age, physical disability, mental disability, medical condition, genetic information, family and medical care leave status, military or veteran status, marital status, family status, sexual orientation, gender identity, gender expression, political affiliation, an employee’s or their dependent’s reproductive health decision making (e.g., the decision to use or access a particular drug, device or medical service), or any other characteristic protected by applicable law. The absence of a permanent address is not a bar to employment. The Company does not discriminate against individuals based on housing status, including the absence of a fixed address. The Company also complies with the Americans with Disabilities Act and applicable state and local laws with regard to providing reasonable accommodation for qualified individuals with disabilities. CAA does not accept unsolicited resumes from third-party recruiters unless they were contractually engaged by CAA to provide candidates for a specified opening. Any such employment agency, person or entity that submits an unsolicited resume does so with the acknowledgement and agreement that CAA will have the right to hire that applicant at its discretion without any fee owed to the submitting employment agency, person or entity.", "summaryDescription" : "Cybersecurity Risk Analyst at Creative Artists Agency. Skills: Cybersecurity risk management, Information security frameworks, Data privacy regulations, Security analytics. Support Technology Vendor Management program. Ensure technology risk reviews", "postedDate" : "2026-06-13T04:11:26.306", "createdAt" : "2026-06-16T04:11:26.294", "lastUpdated" : "2026-06-16T12:55:55.344", "ingestTimestamp" : "2026-06-16T04:11:26.294", "mongoId" : "6a307962f292fd229c031df7", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://caa.wd1.myworkdayjobs.com/Careers/job/Nashville-TN/Cybersecurity-Risk-Analyst_JR8926", "salaryAnnualMin" : 87000, "salaryAnnualMax" : 104000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Threat detection", "Risk mitigation", "Threat response", "Security controls", "Cybersecurity risk management", "Information security frameworks", "Data privacy regulations", "Security analytics", "Vendor management", "Risk reviews", "Security assessments", "Workflow review", "Security integrations", "Security metrics", "Due diligence", "Information security certifications", "Servers", "Operating systems", "Cloud applications", "Infrastructure", "OneTrust" ], "skillCount" : 21, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "mid", "dataQualityScore" : 0.8888889, "_score" : 794.7087, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Media", "llmIndustryConfidence" : 0.95 }, { "id" : "6a30575af292fd229cf385ff", "title" : "Vendor Risk Management Analyst", "company" : "GoDaddy", "salary" : { "min" : 1500000.0, "max" : 2500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Vendor Risk Management Analyst in the Technology industry in India, adjusted for remote work and company size." }, "location" : "India", "locations" : [ "India" ], "timestamp" : "2026-06-16T08:07:35.197", "fingerprint" : "57772d8e09572dcc78b6868a129a223cde731f16bb1416fb1792d3651e65db54", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://careers.godaddy/jobs?gh_jid=7753842003", "externalId" : "7753842003", "industryFunction" : { }, "structuredLocations" : [ { "country" : "India", "continent" : "as", "workMode" : "remote" } ], "locationText" : "India", "employmentType" : "FULL_TIME", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Location Details: India, Remote At GoDaddy the future of work looks different for each team. Some teams work in the office full-time, others have a hybrid arrangement (they work remotely some days and in the office some days) and some work entirely remotely. This is a remote position, so you’ll be working remotely from your home. You may occasionally visit a GoDaddy office to meet with your team for events or meetings. Join our Team The Vendor Risk Management (VRM) Analyst assists with the daily activities of GoDaddy’s third-party risk programme within the Data Governance bring up delays to the VRM Manager Your experience should include... 3+ years of experience in running vendor risk, handling third-party risk, compliance operations, or a similar administrative or operational position Familiarity with VRM or GRC concepts and common frameworks such as SIG, CAIQ, NIST, and SOC 2 is important. You don’t need to be a technical expert. However, you should understand the basics of how vendor assessments work. Strong organizational skills and attention to detail; comfortable managing a high volume of concurrent requests without dropping the ball Clear, professional communication and collaboration skills — you’ll regularly interact with company founders, outside vendors, and cross-functional collaborators Proficiency with Microsoft 365; experience with GRC or VRM platforms (e.g., OneTrust, ServiceNow) a plus Comfortable working in a distributed environment across time zones You might also have... Exposure to data privacy concepts and how they intersect with vendor due diligence (GDPR, CCPA, etc.) Experience with third-party incident notification workflows Familiarity with AI or emerging technology vendor considerations We encourage you to apply even if your experience or skillset doesn’t align perfectly with every requirement. We value a wide range of backgrounds and transferable skills, and we are excited to support learning and growth. We've got your back...  We offer a range of total rewards that may include paid time off, retirement savings (e.g., 401k, pension schemes), bonus/incentive eligibility, equity grants, participation in our employee stock purchase plan, competitive health benefits, and other family-friendly benefits including parental leave. GoDaddy’s benefits vary based on individual role and location and can be reviewed in more detail during the interview process. About us... GoDaddy is empowering everyday entrepreneurs around the world by providing the help and tools to succeed online, making opportunity more inclusive for all. GoDaddy is the place people come to name their idea, build a professional website, attract customers, sell their products and services, and manage their work. Our mission is to give our customers the tools, insights, and people to transform their ideas and personal initiative into success. To learn more about the company, visit About Us. At GoDaddy, we know diverse teams build better products—period. Our people and culture reflect and celebrate that sense of diversity and inclusion in ideas, experiences and perspectives. But we also know that’s not enough to build true equity and belonging in our communities. That’s why we prioritize integrating diversity, equity, inclusion and belonging principles into the core of how we work every day—focusing not only on our employee experience, but also our customer experience and operations. It’s the best way to serve our mission of empowering entrepreneurs everywhere, and making opportunity more inclusive for all. To read more about these commitments, as well as our representation and pay equity data, check out our Diversity and Pay Parity annual report which can be found on our Diversity Careers page. We also embrace our diverse culture and offer a range of Employee Resource Groups (Culture). Have a side hustle? No problem. We love entrepreneurs! Most importantly, come as you are and make your own way. GoDaddy is proud to be an equal opportunity employer. GoDaddy will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements. Refer to our full EEO policy. Our recruiting team is available to assist you in completing your application. If they could be helpful, please reach out to myrecruiter@godaddy.com. GoDaddy doesn’t accept unsolicited resumes from recruiters or employment agencies.", "summaryDescription" : "Vendor Risk Management Analyst at GoDaddy", "postedDate" : "2026-06-15T23:24:22.434", "createdAt" : "2026-06-15T23:24:22.434", "lastUpdated" : "2026-06-16T08:07:35.197", "ingestTimestamp" : "2026-06-15T23:24:22.434", "mongoId" : "6a30575af292fd229cf385ff", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 783.56506, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a307f37f292fd229c0564dc", "title" : "Staff Security Engineer, Third Party Security Diligence", "industry" : "Cybersecurity", "salary" : { "min" : 185000.0, "max" : 275000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Lead Staff Security Engineer in Singapore's technology sector, adjusted for seniority and experience." }, "location" : "[Singapore, [Singapore], null, null, null, SG]", "locations" : [ "[Singapore, [Singapore], null, null, null, SG]" ], "timestamp" : "2026-06-16T11:04:46.615", "fingerprint" : "2f77972d1f61b313996c54573996f5c938028115a4444a39963fb0fc9eb141c8", "source" : "google", "language" : "en", "externalId" : "116762272293888710", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Staff", "remoteFriendly" : false, "summaryDescription" : "Staff Security Engineer, Third Party Security Diligence", "postedDate" : "2026-06-16T01:51:37.760", "createdAt" : "2026-06-16T01:51:37.760", "lastUpdated" : "2026-06-16T11:04:46.615", "ingestTimestamp" : "2026-06-16T01:51:37.760", "mongoId" : "6a307f37f292fd229c0564dc", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "150k-200k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.5555556, "_score" : 781.96814, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a30511af292fd229cefa6cb", "title" : "Sr. Cyber Security Analyst", "industry" : "IT", "salary" : { "min" : 1800000.0, "max" : 3000000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cyber Security Analyst in India, adjusted for the FinTech industry and remote work." }, "location" : "India", "locations" : [ "India" ], "certifications" : [ "CISA", "ISO 27001 Lead Auditor", "ISO 27001 Implementer", "PCI ISA" ], "timestamp" : "2026-06-16T12:54:17.107", "fingerprint" : "8e47cd7978429c52ff8190deff291fbe639b25861b51f43683e36bb215ee5153", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/jobgether/6e827605-2db0-4b5a-8fed-13a674c6e33b/apply", "externalId" : "6e827605-2db0-4b5a-8fed-13a674c6e33b", "industryFunction" : { }, "structuredLocations" : [ { "country" : "India", "continent" : "as", "workMode" : "remote" } ], "locationText" : "India", "employmentType" : "FULL_TIME", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Senior", "technicalSkills" : "SOC 2, PCI-DSS, ISO 27001, NIST CSF, IAM", "professionalSkills" : [ "Risk assessment", "Vendor risk assessment", "Access governance", "Due diligence" ], "hardSkillsList" : [ "Third-party audits", "Security policies", "Security standards", "Security controls", "Risk registers", "Mitigation plans", "Access reviews", "Least privilege", "Incident response", "Disaster recovery", "Security awareness" ], "hardSkills" : [ { "name" : "Third-party audits", "level" : "intermediate" }, { "name" : "Security policies", "level" : "intermediate" }, { "name" : "Security standards", "level" : "intermediate" }, { "name" : "Security controls", "level" : "intermediate" }, { "name" : "Risk registers", "level" : "intermediate" }, { "name" : "Mitigation plans", "level" : "intermediate" }, { "name" : "Access reviews", "level" : "intermediate" }, { "name" : "Least privilege", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Disaster recovery", "level" : "intermediate" }, { "name" : "Security awareness", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity, GRC, Risk management, Compliance", "majorSkillsList" : [ "Cybersecurity", "GRC", "Risk management", "Compliance" ], "coreResponsibilities" : "Support third-party audits, Coordinate third-party audits, Support certifications, Coordinate certifications, Support regulatory assessments, Coordinate regulatory assessments, Maintain GRC framework, Enhance GRC framework, Develop security policies, Review security policies, Update security policies, Develop security standards, Review security standards, Update security standards, Develop security controls, Review security controls, Update security controls, Manage security questionnaires, Manage customer due diligence, Respond to requests, Conduct vendor risk assessments, Track third-party compliance, Maintain risk registers, Maintain mitigation plans, Perform enterprise-wide risk assessments, Document risk assessments, Track risk remediation, Support access governance, Conduct access reviews, Manage identity lifecycle, Enforce least privilege, Contribute to incident response, Contribute to disaster recovery, Contribute to security awareness, Monitor evolving threats, Monitor compliance requirements, Monitor industry best practices, Strengthen security posture", "teamCollaboration" : "Collaborative work culture; Involving security teams; Involving engineering teams; Involving legal teams; Involving product teams", "domainKnowledge" : "SaaS; FinTech; Regulated environments", "domainList" : [ "saas", "fintech", "regulated-environments" ], "domainSpecificKnowledge" : [ "SaaS", "FinTech", "Regulated environments" ], "toolProficiency" : [ "Vanta", "Drata" ], "communicationSkills" : "Stakeholder coordination", "documentationSkills" : "Documentation practices", "continuousLearning" : "Learning opportunities; Growth opportunities", "qualificationsBasic" : "3-5 years cybersecurity experience, 3-5 years IT risk experience, 3-5 years GRC experience, Understanding compliance frameworks, Hands-on audit support, Hands-on certification support, Hands-on regulatory assessment support, Knowledge of risk management, Knowledge of control design, Knowledge of compliance documentation, Experience handling security questionnaires, Translate technical controls, Familiarity with IAM, Familiarity with access governance", "qualificationsPreferred" : "GRC platforms experience, SaaS environment exposure, FinTech environment exposure, Regulated environment exposure, CISA certification preferred, ISO 27001 Lead Auditor preferred, ISO 27001 Implementer preferred, PCI ISA certification preferred", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "## Accountabilities Support the execution and coordination of third-party audits and certifications, including SOC 2, PCI-DSS, ISO 27001, and NIST CSF. Maintain and enhance the organization’s GRC framework by developing, reviewing, and updating security policies, standards, and controls. Manage security questionnaires and customer due diligence requests, ensuring accurate and timely responses. Conduct vendor risk assessments, track third-party compliance, and maintain risk registers and mitigation plans. Perform enterprise-wide risk assessments across systems, processes, and tools, ensuring proper documentation and remediation tracking. Support access governance activities, including periodic access reviews, identity lifecycle management, and least privilege enforcement. Contribute to incident response planning, disaster recovery readiness, and security awareness initiatives. Monitor evolving threats, compliance requirements, and industry best practices to continuously strengthen the security posture. Requirements: 3–5 years of experience in cybersecurity, IT risk, or GRC-focused roles. Strong understanding of compliance frameworks such as SOC 2, ISO 27001, PCI-DSS, and NIST CSF. Hands-on experience supporting audits, certifications, or regulatory assessments. Knowledge of risk management methodologies, control design, and compliance documentation practices. Experience handling security questionnaires and translating technical controls for business stakeholders. Familiarity with identity and access management (IAM) and access governance processes. Strong communication, documentation, and stakeholder coordination skills. Experience with GRC platforms such as Vanta, Drata, or similar tools is a plus. Exposure to SaaS, FinTech, or regulated environments is highly desirable. Certifications such as CISA, ISO 27001 Lead Auditor/Implementer, or PCI ISA are preferred but not mandatory. Benefits: Opportunity to work in a high-impact cybersecurity and compliance function within a fast-growing digital environment. Exposure to global security frameworks and enterprise-grade audit and risk management programs. Collaborative work culture involving security, engineering, legal, and product teams. Strong learning and growth opportunities in governance, risk, compliance, and security operations. Flexible and remote-friendly work setup supporting work-life balance. Chance to contribute directly to strengthening security posture for financial institutions and regulated clients. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Sr. Cyber Security Analyst. Skills: Cybersecurity, GRC, Risk management, Compliance. Support third-party audits. Coordinate third-party audits", "postedDate" : "2026-06-15T12:02:21.089", "createdAt" : "2026-06-15T12:02:21.089", "lastUpdated" : "2026-06-16T12:54:17.107", "ingestTimestamp" : "2026-06-16T03:21:22.504", "mongoId" : "6a30511af292fd229cefa6cb", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Third-party audits", "Security policies", "Security standards", "Security controls", "Risk registers", "Mitigation plans", "Access reviews", "Least privilege", "Incident response", "Disaster recovery", "Security awareness", "Cybersecurity", "GRC", "Risk management", "Compliance", "Risk assessment", "Vendor risk assessment", "Access governance", "Due diligence", "SaaS", "FinTech", "Regulated environments", "CISA", "ISO 27001 Lead Auditor", "ISO 27001 Implementer", "PCI ISA", "Vanta", "Drata" ], "skillCount" : 28, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 773.2117, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305a90f292fd229cf52a62", "title" : "Junior Analyst, Risk Management", "company" : "Razorpay Software Private Limited", "industry" : "FinTech", "salary" : { "min" : 750000.0, "max" : 1200000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Junior Analyst in the FinTech industry in India, adjusted for seniority and company size." }, "location" : "Payments", "locations" : [ "Payments" ], "timestamp" : "2026-06-16T09:03:04.936", "fingerprint" : "e1572a786f078277fa4be4c1b0f3c5718c73b20487602d4322db70115e382386", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/razorpaysoftwareprivatelimited/jobs/4703413005", "externalId" : "4703413005", "industryFunction" : { }, "structuredLocations" : [ { "country" : "India", "continent" : "as", "workMode" : "onsite" } ], "locationText" : "India", "experienceMinYears" : 0, "experienceMaxYears" : 2, "experienceLevel" : "Junior", "technicalSkills" : "MS Excel, Google Sheets", "professionalSkills" : [ "Chargeback operations", "Dispute management", "Data reconciliation", "MIS reporting" ], "hardSkillsList" : [ "Fraud dispute", "Transaction logs", "Settlement records", "Representment cases", "MIS reporting" ], "softSkillsList" : [ "Problem-solving" ], "hardSkills" : [ { "name" : "Fraud dispute", "level" : "intermediate" }, { "name" : "Transaction logs", "level" : "intermediate" }, { "name" : "Settlement records", "level" : "intermediate" }, { "name" : "Representment cases", "level" : "intermediate" }, { "name" : "MIS reporting", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Problem-solving" } ], "majorSkills" : "UPI chargeback operations, URGCS portal, Dispute resolution", "majorSkillsList" : [ "UPI chargeback operations", "URGCS portal", "Dispute resolution" ], "coreResponsibilities" : "Maintain a daily tracker for open, pending, and, Validate and compile fraud dispute evidence packets, Gather transaction logs and switch-level confirmations, Coordinate with merchant for proof of fulfilment, Verify refund status, settlement records, Communicate resolution to the issuer, Prepare case files, Coordinate with acquiring bank and NPCI, Collect, review, and compile evidence, Build representment cases, Ensure all supporting documents meet NPCI guidelines, Maintain a structured repository of case files, Reach out to merchants proactively to obtain dispute, Liaise with acquiring bank’s chargeback desk, Update merchants and internal stakeholders on case progress, Prepare daily, weekly, and monthly MIS reports, Identify trends in dispute reasons, Flag recurring issues to the team lead, Contribute data for monthly business reviews, Follow all NPCI chargeback operating procedures, Follow Razorpay internal SOPs, Flag process gaps or portal issues, Propose solutions to improve efficiency, Support UAT and onboarding activities", "teamCollaboration" : "Merchants; Acquiring bank; Internal stakeholders; Cross-functional internal teams", "domainKnowledge" : "UPI ecosystem; NPCI rules; Chargeback reason codes; Dispute TATs; Representment guidelines; Acquiring bank processes; NPCI circulars; PCI-DSS; RBI guidelines; Payment aggregators; NPCI operating guidelines", "domainList" : [ "upi-ecosystem", "npci-rules", "chargeback-reason-codes", "dispute-tats", "representment-guidelines", "acquiring-bank-processes", "npci-circulars", "pci-dss", "rbi-guidelines", "payment-aggregators", "npci-operating-guidelines" ], "domainSpecificKnowledge" : [ "UPI ecosystem", "NPCI rules", "Chargeback reason codes", "Dispute TATs", "Representment guidelines", "Acquiring bank processes", "NPCI circulars", "PCI-DSS", "RBI guidelines", "Payment aggregators", "NPCI operating guidelines" ], "toolProficiency" : [ "URGCS portal", "MS Excel", "Google Sheets", "Freshdesk", "Jira Service Desk" ], "communicationSkills" : "Written communication", "documentationSkills" : "Evidence documentation", "problemSolvingSkills" : "Problem-solving mindset", "outcomesObjectives" : "Meet strict portal deadlines", "qualificationsBasic" : "Bachelor's degree in Commerce, Finance, Business Administration, or related field, 1–3 years of hands-on experience in UPI chargeback operations, Working knowledge of the URGCS portal, Understanding of the UPI ecosystem, Proficiency in MS Excel / Google Sheets, Ability to read and interpret transaction logs, settlement files, and switch reports, Familiarity with acquiring bank processes and NPCI circulars", "qualificationsPreferred" : "Prior experience working on the URGCS - UPI portal, Exposure to other payment dispute platforms, Knowledge of PCI-DSS, RBI guidelines on payment aggregators, or NPCI operating guidelines, Experience with ticketing or case management tools", "rawDescription" : "Razorpay is one of India’s leading full-stack financial technology companies, powering the way businesses move, manage, and grow money. Founded in 2014 by Harshil Mathur and Shashank Kumar with a simple vision - to simplify payments for Indian businesses - we’ve since grown into a fintech powerhouse driving India’s digital payment revolution. Razorpay powers millions of businesses with a smarter, scalable stack that goes beyond transactions to help them truly build and grow. From building AI-native agentic payments, to AI-assisted fraud detection and real-time risk intelligence to automated reconciliation, smart payouts, and predictive financial insights, we are embedding intelligence across our stack to make money movement faster, safer, and more efficient. In close collaboration with ecosystem partners - including banks, networks, regulators - we are pioneering industry-first solutions that are shaping the next era of fintech Across India, Singapore and Malaysia, our products span everything from seamless checkouts to payroll automation - powering a fintech ecosystem that’s redefining how money moves across Asia. Today, that ecosystem supports everyone from early-stage startups to some of India’s largest enterprises, enabling them to accept, process, and disburse payments at scale while expanding into new ways of managing money more efficiently. Our scale speaks volumes: Razorpay processes $180+ billion in annualized transactions, powering leading businesses like Airbnb, Facebook, WhatsApp, Airtel, CRED, BookmyShow, Zomato, Swiggy, Lenskart, Mirae Asset Capital markets, Indian Oil, National Pension Scheme - and over 100 of India’s unicorns. With strong roots in India and growing operations in Southeast Asia, we are shaping the next chapter of financial technology across the region. We are backed by global investors including GIC, Peak XV Partners (formerly Sequoia Capital India maintain a daily tracker for open, pending, and closed cases. 2. Chargeback Types Handled Fraudulent / Unauthorised Transactions — validate and compile fraud dispute evidence packets. Technical Disputes (duplicate charges, incorrect amounts, processing errors) — gather transaction logs and switch-level confirmations. Merchant Disputes (non-delivery, service/quality issues) — coordinate with merchant for proof of fulfilment. Consumer Disputes — verify refund status, settlement records, and communicate resolution to the issuer. Pre-arbitration & Arbitration — prepare case files and coordinate with the acquiring bank and NPCI. 3. Evidence & Documentation Collect, review, and compile evidence (transaction receipts, screenshots, settlement data, merchant responses) to build strong representment cases. Ensure all supporting documents meet NPCI format and content guidelines before portal submission. Maintain a structured repository of case files for audit readiness. 4. Merchant & Stakeholder Coordination Reach out to merchants proactively to obtain dispute documentation within internal SLAs. Liaise with the acquiring bank’s chargeback desk for portal escalations or technical issues. Update merchants and internal stakeholders on case progress and outcomes. 5. MIS & Reporting Prepare daily, weekly, and monthly MIS reports on chargeback volumes, win rates, recovery amounts, and TAT adherence. Identify trends in dispute reasons and flag recurring issues to the team lead. Contribute data for monthly business reviews and NPCI compliance reporting. 6. Process Adherence & Improvement Follow all NPCI chargeback operating procedures and Razorpay internal SOPs. Flag process gaps or portal issues and propose solutions to improve efficiency or win rates. Support UAT and onboarding activities whenever URGCS portal features are updated. Required Qualifications & Skills Education Bachelor’s degree in Commerce, Finance, Business Administration, or a related field. Experience Analyst: 1–3 years of hands-on experience in UPI chargeback operations, preferably on the acquiring side. Technical & Domain Skills Working knowledge of the URGCS portal or willingness to learn it immediately upon joining. Understanding of the UPI ecosystem — NPCI rules, chargeback reason codes, dispute TATs, and representment guidelines. Proficiency in MS Excel / Google Sheets for MIS, data reconciliation, and tracker management. Ability to read and interpret transaction logs, settlement files, and switch reports. Familiarity with acquiring bank processes and NPCI circulars related to dispute management. Soft Skills High attention to detail — accuracy in case data and documentation is non-negotiable. Strong written communication for drafting representment narratives and merchant correspondence. Time management — ability to prioritise a high-volume queue and meet strict portal deadlines. Problem-solving mindset with a proactive approach to dispute resolution. Ability to collaborate effectively with merchants, banks, and cross-functional internal teams. Good to Have Prior experience working on the URGCS - UPI portal. Exposure to other payment dispute platforms (Visa VROL, Mastercard MATCH, RuPay dispute system). Knowledge of PCI-DSS, RBI guidelines on payment aggregators, or NPCI operating guidelines. Experience with ticketing or case management tools (Freshdesk, Jira Service Desk). Razorpay believes in and follows an equal employment opportunity policy that doesn't discriminate on gender, religion, sexual orientation, colour, nationality, age, etc. We welcome interests and applications from all groups and communities across the globe. Follow us on LinkedIn & Twitter", "summaryDescription" : "Junior Analyst, Risk Management at Razorpay Software Private Limited. Skills: UPI chargeback operations, URGCS portal, Dispute resolution. Maintain a daily tracker for open, pending, and. Validate and compile fraud dispute evidence packets", "postedDate" : "2026-06-15T23:24:28.413", "createdAt" : "2026-06-15T23:24:28.413", "lastUpdated" : "2026-06-16T09:03:04.936", "ingestTimestamp" : "2026-06-15T23:24:28.413", "mongoId" : "6a305a90f292fd229cf52a62", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Fraud dispute", "Transaction logs", "Settlement records", "Representment cases", "MIS reporting", "Problem-solving", "UPI chargeback operations", "URGCS portal", "Dispute resolution", "Chargeback operations", "Dispute management", "Data reconciliation", "UPI ecosystem", "NPCI rules", "Chargeback reason codes", "Dispute TATs", "Representment guidelines", "Acquiring bank processes", "NPCI circulars", "PCI-DSS", "RBI guidelines", "Payment aggregators", "NPCI operating guidelines", "MS Excel", "Google Sheets", "Freshdesk", "Jira Service Desk" ], "skillCount" : 27, "jobCategory" : "finance", "jobSubcategory" : "accounting", "seniorityLevel" : "Junior", "dataQualityScore" : 0.8888889, "_score" : 760.1778, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.98 }, { "id" : "6a307f1ff292fd229c0556d0", "title" : "Third Party Data Center Technical Operations Manager, Facilities/Maintenance", "salary" : { "min" : 750000.0, "max" : 1100000.0, "currency" : "SEK", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager in the Technology industry in Stockholm, Sweden, adjusted for seniority and full-time employment." }, "location" : "[Stockholm, Sweden, [Stockholm, Sweden], Stockholm, null, Stockholm County, SE]", "locations" : [ "[Stockholm, Sweden, [Stockholm, Sweden], Stockholm, null, Stockholm County, SE]" ], "timestamp" : "2026-06-16T10:49:16.568", "fingerprint" : "698874d7c231b538f6ecb60d7b5f43c9f4e4ecac33d4e6bc4913444593df6d9a", "source" : "google", "language" : "en", "externalId" : "95179537645478598", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Stockholm", "country" : "Sweden", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "59.3251172,18.0710935" } ], "locationText" : "Stockholm, Sweden", "experienceLevel" : "Manager", "coreResponsibilities" : "Manage third-party data center operations, Oversee facilities maintenance", "domainKnowledge" : "Data center operations; Facilities maintenance", "domainList" : [ "data-center-operations", "facilities-maintenance" ], "domainSpecificKnowledge" : [ "Data center operations", "Facilities maintenance" ], "workSiteFlexibility" : "Onsite", "summaryDescription" : "Third Party Data Center Technical Operations Manager, Facilities/Maintenance. Manage third-party data center operations. Oversee facilities maintenance", "postedDate" : "2026-06-16T01:50:58.088", "createdAt" : "2026-06-16T01:50:58.088", "lastUpdated" : "2026-06-16T10:49:16.568", "ingestTimestamp" : "2026-06-16T01:50:58.088", "mongoId" : "6a307f1ff292fd229c0556d0", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Data center operations", "Facilities maintenance" ], "skillCount" : 2, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Manager", "dataQualityScore" : 0.6666667, "_score" : 755.4744, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a210e6374d8ee00a0af7406", "title" : "Software Engineering Manager, Cloud and Third-Party Platform Security", "industry" : "Cybersecurity", "salary" : { "min" : 185000.0, "max" : 275000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Software Engineering Manager in Singapore, adjusted for the technology industry and manager seniority." }, "location" : "[Singapore, [Singapore], null, null, null, SG]", "locations" : [ "[Singapore, [Singapore], null, null, null, SG]" ], "timestamp" : "2026-06-16T12:20:31.704", "fingerprint" : "1d208c91b95067779139d160362a996ae3e9045c074dc0418caafae3a2e98466", "source" : "google", "language" : "en", "externalId" : "132224051379610310", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "experienceLevel" : "Manager", "remoteFriendly" : false, "summaryDescription" : "Software Engineering Manager, Cloud and Third-Party Platform Security", "postedDate" : "2026-06-16T01:48:58.224", "createdAt" : "2026-06-16T01:48:58.224", "lastUpdated" : "2026-06-16T12:20:31.704", "ingestTimestamp" : "2026-06-16T01:48:58.224", "mongoId" : "6a210e6374d8ee00a0af7406", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "150k-200k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.5555556, "_score" : 754.2919, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "69f8950e4c40e2acd1fa4a70", "title" : "Cybersecurity Analyst", "company" : "Texas Workforce Commission", "industry" : "Government", "salary" : { "max" : 6982.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "826970", "locations" : [ "826970", "
Austin:1117 Trinity St (320TX-4002)
1117 Trinity St
Austin, 78701-1919

" ], "timestamp" : "2026-06-15T09:42:30.940", "fingerprint" : "79d57d066c1e9f1688bb80c121b3a094589b0455ca67250a444d6c53761b762b", "source" : "taleo", "language" : "en", "applyUrl" : "https://aa270.taleo.net/careersection/ex/jobdetail.ftl?job=34795", "externalId" : "34795", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Cybersecurity analysis, Information security analysis, Digital forensics, Vulnerability scanning, Forensic analysis, Data recovery, System monitoring", "professionalSkills" : [ "Risk assessment", "Independent judgment" ], "hardSkillsList" : [ "Account permissions review", "Security violation review", "Incident detection", "Incident analysis", "Incident prevention", "Network vulnerability scans", "Application vulnerability scans", "System monitoring", "Cybersecurity alert analysis" ], "softSkillsList" : [ "Critical thinking" ], "hardSkills" : [ { "name" : "Account permissions review", "level" : "intermediate" }, { "name" : "Security violation review", "level" : "intermediate" }, { "name" : "Incident detection", "level" : "intermediate" }, { "name" : "Incident analysis", "level" : "intermediate" }, { "name" : "Incident prevention", "level" : "intermediate" }, { "name" : "Network vulnerability scans", "level" : "intermediate" }, { "name" : "Application vulnerability scans", "level" : "intermediate" }, { "name" : "System monitoring", "level" : "intermediate" }, { "name" : "Cybersecurity alert analysis", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Critical thinking" } ], "majorSkills" : "Cybersecurity analysis, Information security, Digital forensics", "majorSkillsList" : [ "Cybersecurity analysis", "Information security", "Digital forensics" ], "coreResponsibilities" : "Perform technical risk assessments, Review account permissions, Review security violations, Conduct cybersecurity incident detection, Conduct cybersecurity incident analysis, Conduct cybersecurity incident prevention, Perform vulnerability scans, Identify network weaknesses, Identify application weaknesses, Execute forensic analysis, Recover data using tools, Monitor systems, Monitor procedures, Protect data systems, Analyze cybersecurity alerts", "domainKnowledge" : "Information security; Cybersecurity", "domainList" : [ "information-security", "cybersecurity" ], "domainSpecificKnowledge" : [ "Information security", "Cybersecurity" ], "toolProficiency" : [ "Assessment tools" ], "continuousLearning" : "Training opportunities; Development opportunities", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Must be Texas resident, Willing to relocate to Texas", "qualificationsBasic" : "Four years cybersecurity analysis experience, Four years information security analysis experience, Four years digital forensics experience, Relevant academic credits may apply, Acceptance into TWC Internship, Acceptance into TWC Apprenticeship", "qualificationsPreferred" : "High interest in cybersecurity", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "WHO WE ARE: Texas Workforce Commission connects people with careers across the state. While we are based in Austin on the north lawn of the Texas State Capitol, we have offices statewide. We're a Family Friendly Certified Workplace with great work-life balance, competitive salaries, extensive opportunities for training and development, and fantastic benefits. This position is located at 1117 Trinity Street, Austin, Texas in the Chief Info Security Officer department. TWC is not considering applications from individuals who require sponsorship for an employment visa, including those currently on student or postgraduate visas. You must be a Texas resident to work for the Texas Workforce Commission or willing to relocate to Texas. WHO YOU ARE: A person with technical experience and experience or a high interest in cybersecurity WHAT YOU WILL DO: The Cybersecurity Analyst I performs moderately complex (journey-level) information security and cybersecurity analysis work. Works under general supervision, with moderate latitude for the use of initiative and independent judgment. YOU WILL BE TRUSTED TO: -Perform technical risk assessments and reviews of account permissions and security violations. -Conduct cybersecurity incident detection, analysis, and prevention. -Perform vulnerability scans of networks and applications to identify weaknesses. -Execute forensic analysis and recovery of data using assessment tools. -Monitor systems and procedures to protect data systems from unauthorized access. -Analyze cybersecurity alerts from tools, network devices, and information systems. - Perform other duties as assigned. YOU QUALIFY WITH: -Four years of full-time experience in cybersecurity analysis, information security analysis, or digital forensics. -Relevant academic credits may be applied toward experience qualifications for this position. -Acceptance into a TWC Internship or TWC Apprenticeship will satisfy the minimum qualifications. YOU ARE A GREAT FIT WITH: You are ready to learn and use critical thinking skills to succeed. YOU GAIN: - A Family Friendly Certified Workplace. - Competitive salary: $6,982.50/month - Defined Retirement Benefit Plan - Optional 401(k) and 457 accounts - Medical Insurance - Paid time off, including time for vacation, sick and family care leave - Additional benefits for active employees can be found at https://www.ers.texas.gov/Active-Employees/Health-Benefits. VETERANS: Use your military skills to qualify for this position or other jobs! Go to www.texasskillstowork.com to translate your military work experience and training courses into civilian job terms, qualifications, and skill sets. Also, you can compare this position to military occupations (MOS) at the Texas State Auditor's Office by pasting this link into your browser: https://hr.sao.texas.gov/Compensation/MilitaryCrosswalk/MOSC_InformationTechnology.pdf HOW TO APPLY: To be considered, please complete a State of Texas Application for Employment and apply online at www.workintexas.com or on Taleo ( Job Search ). TWC is not considering applications from individuals who require sponsorship for an employment visa, including those currently on student or postgraduate visas. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire. A position utilizing this classification will be designated as security sensitive according to the Texas Labor Code, Section 301.042. United States-Texas-Austin", "summaryDescription" : "Cybersecurity Analyst at Texas Workforce Commission. Skills: Cybersecurity analysis, Information security, Digital forensics. Perform technical risk assessments. Review account permissions", "createdAt" : "2026-06-14T07:31:02.477", "lastUpdated" : "2026-06-15T09:42:30.940", "ingestTimestamp" : "2026-06-14T07:31:02.477", "mongoId" : "69f8950e4c40e2acd1fa4a70", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMax" : 83784, "hasSalary" : false, "allSkills" : [ "Account permissions review", "Security violation review", "Incident detection", "Incident analysis", "Incident prevention", "Network vulnerability scans", "Application vulnerability scans", "System monitoring", "Cybersecurity alert analysis", "Critical thinking", "Cybersecurity analysis", "Information security", "Digital forensics", "Risk assessment", "Independent judgment", "Cybersecurity", "Assessment tools" ], "skillCount" : 17, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 734.64264, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca2e374d8ee00a09a9a04", "title" : "Cybersecurity Analyst", "company" : "Teal", "industry" : "Technology", "salary" : { "min" : 85000.0, "max" : 115000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Analyst in Minneapolis, adjusted for the technology industry and company size." }, "location" : "Minneapolis, MN", "locations" : [ "Minneapolis", "MN" ], "timestamp" : "2026-06-16T04:21:23.693", "fingerprint" : "853d0f753d05faf012dc74d9778dba2382c7bdade43a981f8f08a22818956966", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://teal.breezy.hr/p/edbfcb760892-cybersecurity-analyst", "externalId" : "edbfcb760892", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Minneapolis", "state" : "Minnesota", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "44.9772995,-93.2654692" } ], "locationText" : "Minneapolis, Minnesota, United States", "employmentType" : "FULL_TIME", "remoteFriendly" : false, "rawDescription" : "In 2023, TechGen and Aligned Technology Solutions, both award-winning Managed IT Service Providers, merged – forming the premier company of Teal. Teal is an advanced IT services that assists small- to medium-sized organizations in strategically leveraging their technology. With roots dating back to", "summaryDescription" : "Cybersecurity Analyst at Teal", "createdAt" : "2026-06-14T21:48:16.617", "lastUpdated" : "2026-06-16T04:21:23.693", "ingestTimestamp" : "2026-06-14T21:48:16.617", "mongoId" : "6a2ca2e374d8ee00a09a9a04", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 85000, "salaryAnnualMax" : 115000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.6666667, "_score" : 723.6245, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a25145374d8ee00a00bb35f", "title" : "Security Engineer, Secure Third Party Tools", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 159300.0, "max" : 202400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-14T23:46:49.577", "fingerprint" : "a9ac6e291a75ef5a77c23a36f9fe3c4b0a036e400f2dfa59592c0e2cac817b72", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10441246/apply", "externalId" : "d2e9ba5f-4517-4a66-a477-3700165a65d3", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Python, Ruby, Go, Swift, Java, .Net, C++, AWS, HTTP, DNS, TCP/IP", "professionalSkills" : [ "Risk assessment", "Security reviews", "Threat modeling", "Security controls", "Risk reduction" ], "hardSkillsList" : [ "Security code review", "Systems troubleshooting", "Log analysis", "Automating tasks", "Networking protocols", "Security vulnerabilities", "Remediation techniques" ], "softSkillsList" : [ "Leadership", "Influence", "Critical thinking" ], "hardSkills" : [ { "name" : "Security code review", "level" : "intermediate" }, { "name" : "Systems troubleshooting", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Automating tasks", "level" : "intermediate" }, { "name" : "Networking protocols", "level" : "intermediate" }, { "name" : "Security vulnerabilities", "level" : "intermediate" }, { "name" : "Remediation techniques", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Influence" }, { "name" : "Critical thinking" } ], "majorSkills" : "Security engineering, Third party risk, Security controls", "majorSkillsList" : [ "Security engineering", "Third party risk", "Security controls" ], "coreResponsibilities" : "Solve security problems, Lead security projects, Conduct security reviews, Develop security tools, Create security practices, Update threat models, Act as technical security specialist, Conduct security deep-dive reviews, Develop security guardrails, Secure third party integrations, Advise on security configurations, Build tools to assess 3Ps, Monitor security posture of 3Ps, Identify and monitor 3P usage, Improve S3T capabilities, Collect and review data", "teamCollaboration" : "Collaborate with business teams; Collaborate with science teams; Collaborate with product teams; Collaborate with software development teams; Collaborate with security engineers; Collaborate with third parties", "projectManagementSkills" : [ "End-to-end ownership" ], "domainKnowledge" : "Third party risk management; Customer data protection; Security landscape; Product security review; Security configurations; Security posture monitoring", "domainList" : [ "third-party-risk-management", "customer-data-protection", "security-landscape", "product-security-review", "security-configurations", "security-posture-monitoring" ], "domainSpecificKnowledge" : [ "Third party risk management", "Customer data protection", "Security landscape", "Product security review", "Security configurations", "Security posture monitoring" ], "toolProficiency" : [ "Command line tools" ], "communicationSkills" : "Communicate clearly", "continuousLearning" : "Knowledge sharing; Training resources; Career development", "innovationCreativity" : "Novel methods or approaches", "problemSolvingSkills" : "Solving evolving security problems; Troubleshooting systems issues; Analyzing logs", "outcomesObjectives" : "Identify security risks; Remediate security risks; Meet security bar; Remediate gaps; Security risk reduction", "qualificationsBasic" : "3+ years programming Python, Ruby, Go, Swift, Java, .Net, C++, 2+ years scripting, programming, security code review, 2+ years troubleshooting systems issues, analyzing logs, Bachelor's degree in computer science or equivalent, Bachelor's degree in STEM field or 2+ years IT Security experience, Knowledge of networking protocols (HTTP, DNS, TCP/IP), Knowledge of security vulnerabilities and remediation", "qualificationsPreferred" : "2+ years threat modeling, secure coding, identity management, 2+ years scripting, programming, security code review in Python, Java, C++, Knowledge of command line tools for troubleshooting, Experience with AWS products and services, Experience performing security activities across SDLC phases", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Secure Third Party Tools (S3T) is looking for a Security Engineer to aid on our issue to identify, measure and remediate security risks of engagement with 3Ps and their products that get access to Amazon’s data. S3T conducts assessments to determine if third party usage meets Amazon’s security bar and the security measures required to remediate gaps to meet the security Bar. We help with security risk reduction, by identifying required security measures, helping determine acceptable methods of meeting security control objectives including application of compensating controls or other risk-reduction activities. If you enjoy working at scale in a rapidly changing environment and influencing the protection of our customers within a large global organization, this position will provide you with a challenging opportunity. As a Security Engineer, you will collaborate with teams across business, science, product, software development, other security engineers and 3Ps to identify security risks and remediate them. You will also collaborate in defining the right security controls in the evolving security landscape to safeguard our customer's data. In You will conduct security deep-dive reviews (e.g. product security review and testing), developing security guardrails and baselines for partner teams to securely use third party products and services, collaborate on securing integrations of third party products with Amazon services, advising on security configurations, building tools to help assess and monitor security posture of 3Ps building mechanisms to identify and monitor usage of 3Ps and improving existing capabilities of S3T. The ideal candidate combines technical acumen with an ability to lead by influence and communicate clearly. Key job responsibilities - Solving evolving security problems that require novel methods or approaches - Leading security projects (including security reviews, tool development, and creation of new security practices) with end-to-end ownership - Creating, updating, and maintaining threat models for a wide variety of use cases - Acting as technical security specialist on risk-based security reviews and assessments - Collecting/reviewing data from multiple sources to conduct a security review About the team About Amazon Security Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience - 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience - 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience - Bachelor's degree in computer science or equivalent - Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or experience in IT Security - Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 2+ years of IT Security experience - Knowledge of networking protocols such as HTTP, DNS and TCP/IP - Knowledge of industry-based security vulnerabilities and remediation techniques - Experience in scripting, programming, and security code reviewing in a common programming language (non-internship) - Experience in troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship experience) Preferred Qualifications: - 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - 2+ years of scripting, programming, or security code review in a common language, such as Python, Java or C++ experience - Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks - Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP - Knowledge of networking protocols, to include HTTP(S), DNS, and TCP/IP - Experience with AWS products and services - Experience with programming languages such as Python, Java, C++ - Experience in scripting, programming, or security code reviewing in a common language, such as Python, Java, or C++ - Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 159,300.00 - 202,400.00 USD annually", "summaryDescription" : "Security Engineer, Secure Third Party Tools at Amazon.com Services LLC. Skills: Security engineering, Third party risk, Security controls. Solve security problems. Lead security projects", "postedDate" : "2026-06-13T07:14:40.994", "createdAt" : "2026-06-13T07:14:40.994", "lastUpdated" : "2026-06-14T23:46:49.577", "ingestTimestamp" : "2026-06-13T07:14:40.994", "mongoId" : "6a25145374d8ee00a00bb35f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10441246/apply", "salaryAnnualMin" : 159300, "salaryAnnualMax" : 202400, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Security code review", "Systems troubleshooting", "Log analysis", "Automating tasks", "Networking protocols", "Security vulnerabilities", "Remediation techniques", "Leadership", "Influence", "Critical thinking", "Security engineering", "Third party risk", "Security controls", "Risk assessment", "Security reviews", "Threat modeling", "Risk reduction", "End-to-end ownership", "Third party risk management", "Customer data protection", "Security landscape", "Product security review", "Security configurations", "Security posture monitoring", "Command line tools" ], "skillCount" : 25, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 723.1515, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a306d74f292fd229cfd89bc", "title" : "Risk Analyst", "company" : "Xplor", "industry" : "Computer Software", "salary" : { "min" : 60000.0, "max" : 95000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Bulgaria, adjusted for mid-seniority and FinTech industry for a remote role." }, "location" : "Atlanta, GA, United States", "locations" : [ "Atlanta", "GA", "United States" ], "timestamp" : "2026-06-16T09:00:03.761", "fingerprint" : "e4a8f9dea4be7e44d0dd3d3ab6cc22488297aa949998fed7f2bab1bd6a88821f", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Xplor/744000132215679-risk-analyst-remote", "externalId" : "744000132215679", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Bulgaria", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "Bulgaria", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "mid", "technicalSkills" : "Python, R, SQL, Bloomberg Terminal, Reuters Eikon, FactSet, Murex, Calypso", "professionalSkills" : [ "Risk assessment", "Process improvement" ], "hardSkillsList" : [ "Financial analysis", "Data analysis", "Fraud detection" ], "hardSkills" : [ { "name" : "Financial analysis", "level" : "intermediate" }, { "name" : "Data analysis", "level" : "intermediate" }, { "name" : "Fraud detection", "level" : "intermediate" } ], "majorSkills" : "Risk management, Fraud detection", "majorSkillsList" : [ "Risk management", "Fraud detection" ], "coreResponsibilities" : "Monitor merchant processing activity, Investigate suspicious merchant activity, Evaluate processing activity patterns, Research internal and external sources, Identify suspicious merchant issues, Identify card holder issues, Review system generated reporting, Review department generated reporting, Mitigate potential company losses, Answer customer inquiries, Make customer calls, Log customer follow-up, Review faxed requests, Review emailed requests, Interpret business documents, Interpret financial documents, Analyze trends, Detect potential fraud, Assess risk, Conduct verbal communication with merchants, Conduct written communication with merchants, Conduct verbal communication with issuing banks, Conduct written communication with issuing banks, Handle escalated issues, Gather information, Manage actions to resolve risk, Develop Standard Operating Procedures, Maintain Standard Operating Procedures, Ensure effective risk management, Perform related duties", "teamCollaboration" : "Cross-functional teams", "domainKnowledge" : "Merchant processing; Payment industry trends; Financial documents", "domainList" : [ "merchant-processing", "payment-industry-trends", "financial-documents" ], "domainSpecificKnowledge" : [ "Merchant processing", "Payment industry trends", "Financial documents" ], "toolProficiency" : [ "Bloomberg Terminal", "Reuters Eikon", "FactSet", "Murex", "Calypso" ], "communicationSkills" : "Verbal communication; Written communication", "documentationSkills" : "Standard Operating Procedures", "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Mitigate potential company losses", "qualificationsBasic" : "Three years related experience", "qualificationsPreferred" : "Bachelor’s degree in relevant field, Previous risk experience", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "At Xplor, we believe that helping people make the most of each day is the most rewarding way to spend ours. We give small and medium-sized businesses cloud-based, intuitive technology solutions that enable them to manage all the hassles of running and growing a business, so business owners can get back to doing what they love. With Xplor Pay, we help businesses get paid quickly and securely – without hidden fees. We built the tech ourselves, and our platform delivers secure, transparent, fast, and accurate payments. We are unified by our purpose of helping people to succeed. So, when you become part of our team, you also become part of the personal connection that strengthens the relationship people have with Xplor products. Join our XplorPay vertical as a Risk Analyst to make a real impact every day. We say that because we know that every conversation we have, every code line we write and every interface we design is another opportunity for us to enrich our customers’ experiences. Reporting into the Director of Risk, you will help us with the daily monitoring of merchant processing activity, as well as, conducting investigations of suspicious merchant activity that may be related to merchant(s) processing outside of or not as approved parameters. Analyst is responsible for evaluating patterns in merchant processing activity and researching against internal and external information sources that help in evaluating and identifying potentially suspicious merchant or card holder issues. Review system and department generated reporting that support in identifying potential processing issues to help mitigate potential company losses. Analyst will be responsible for answering incoming and making outgoing calls to customer base in a professional courteous manner; log and notate customer interaction; follow-up on customer inquiries and research; review faxed and emailed request and inquiries; read and interpret business and financial documents; ability to multi-task, handle escalated calls and negotiate a resolution; recommend process improvements and work on special projects. Some of the other responsibilities include: * Analyze merchant account activity alerts generated by automated monitoring systems in order to identify suspicious transaction or processing issues * Review system and department generated reporting that support in identifying potential processing issues to help mitigate potential company losses * Collaborate with cross-functional teams to design, communicate, and implement risk mitigation strategies, ensuring compliance with industry standards and regulations * Monitor emerging trends and threats in the payments industry, adapting risk assessment methodologies accordingly * Read and interpret business and financial documents to analyze trends, detect potential fraud, and assess risk * Conduct verbal and written communication with merchants and issuing banks, including handling escalated issues, gathering information, and managing appropriate actions to resolve risk concerns * Develop and maintain Standard Operating Procedures (SOP) and efficient processes to ensure consistent and effective risk management practices * Perform other related duties as assigned by management * Location: You can work fully remote in this position, provided you have eligible working rights in the United States, and you are in a time zone with enough overlap to collaborate with your team. #LI-Remote ## Qualifications What would make me a good candidate? We are looking for curious and empathetic people. We also love to hear from people who are motivated by meaningful work, resonate with our four core values, have a positive outlook, are comfortable with ambiguity and thrive working in an ever-evolving and complex environment. We are inspired by meeting big picture thinkers and doers, people who can be both tactical and strategic, aim high and put people first in everything they do. To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skills, and abilities required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. * Bachelor’s degree in relevant field preferred, or at least three years related experience and/or training. Equivalent combination of education and experience will be considered. Previous risk experience is preferred * Ability to read and interpret documents such as credit reports, billing statements, contracts, sales agreements, memos, letters, and process and procedure documentation * Demonstrated history of identifying and implementing process improvements to enhance risk management efficiency and effectiveness * Strong curiosity and proactive approach to problem-solving, with a continuous desire to learn and adapt in a dynamic environment * Proficiency in using risk management tools and software, with a strong aptitude for learning new technologies * Familiarity with fraud detection and payment methodologies, including transaction monitoring, chargeback management, and risk scoring systems * Strong analytical skills, with the ability to interpret data sets and identify patterns or anomalies indicative of risk * Ability to understand and explain merchant contract terms and conditions, as well as Visa/Mastercard operating policies and regulations At Xplor, we believe that the best innovation and ideas happen at the intersections of our differences - people of diverse cultures, generations, disciplines, and lived experiences. So even if you think you do not tick all the boxes, we still encourage you to apply. ## Additional Information At Xplor, we believe that the best innovation and ideas happen at the intersections of our differences - people of diverse cultures, generations, disciplines, and lived experiences. So even if you think you do not tick all the boxes, we still encourage you to apply. Values and Life at Xplor Our four core values guide us from how we hire and recognize our team members to how we interact with our customers day to day: * Make life simple * Build for people * Move with purpose * Create lasting communities. If these values sound like you, and describe people you want to work with, you will thrive at Xplor. As an Xplorer, you will be part of a global network of talented colleagues who will support your success. We look for commonalities and shared passions and give people the tools they need to deliver great work and grow at speed. Some of our perks and benefits are: * Gender Neutral Paid Parental Leave * #GiveBackDays/Commitment to social impact – 3 extra days off to volunteer and give back to your local community * Ongoing dedication to Diversity & Inclusion initiatives such as D&I Council * Access to free mental health support * Flexible working arrangements More about us More than 130,000 businesses in 72+ countries rely on Xplor to run their day and get paid, processing over $47 billion in payments annually. Our connected ecosystem helps operators spend less time managing complexity and more time delivering the experiences that matter most. Xplor is backed by world-class investors Advent International, Battery Ventures, and Silver Lake. Good to know To be considered for employment, you must be legally authorized to work in the country you're applying for. Xplor does not sponsor visas, either at the time of hire or at any later time. We kindly ask you to apply through our careers portal or external job boards only. Please don't send your application via email. To learn more about us and our products, please visit [xplor.com/careers/](https://xplor.com/careers/). We also invite you to check out our Candidate FAQs for more information about our recruitment process [xplor.com/recruitment-faqs/](https://xplor.com/recruitment-faqs/). EEO and Artificial Intelligence We believe in transparent hiring. We use an applicant tracking system that includes artificial intelligence-enabled features to assist with the screening and assessment of job applications, such as candidate scoring or ranking. These tools support our recruitment process, but all hiring decisions are made by our recruitment team following human review. We do not rely on artificial intelligence to make final hiring decisions. Find our Candidate AI Usage guidelines [here](https://c.smartrecruiters.com/sr-company-attachments-prod-aws-dc5/5fa0335de18b196e197e4ed6/d33b5e4f-a1fa-449c-b070-12fd577319aa?r=s3-eu-central-1). Xplor is proud to be an Equal Employment Opportunity employer. We're dedicated to attracting, retaining and developing our people regardless of gender identity, ethnicity, sexual orientation, disability, veteran status and age. Applications are encouraged from all sectors of the community. All Information will be kept confidential according to EEO guidelines. Xplor is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Xplor will take steps to ensure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact us via talent@xplortechnologies.com. We make it a priority to respond to every applicant.", "summaryDescription" : "Risk Analyst at Xplor. Skills: Risk management, Fraud detection. Monitor merchant processing activity. Investigate suspicious merchant activity", "postedDate" : "2026-06-15T14:19:29.000", "createdAt" : "2026-06-16T00:08:16.408", "lastUpdated" : "2026-06-16T09:00:03.761", "ingestTimestamp" : "2026-06-16T00:08:16.408", "mongoId" : "6a306d74f292fd229cfd89bc", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Financial analysis", "Data analysis", "Fraud detection", "Risk management", "Risk assessment", "Process improvement", "Merchant processing", "Payment industry trends", "Financial documents", "Bloomberg Terminal", "Reuters Eikon", "FactSet", "Murex", "Calypso" ], "skillCount" : 14, "jobCategory" : "finance", "jobSubcategory" : "accounting", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 714.98285, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a307f8df292fd229c05a9e8", "title" : "Software Engineer III, Cloud and Third-Party Platform Security", "industry" : "Cybersecurity", "salary" : { "min" : 105000.0, "max" : 155000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a mid-level Software Engineer III in Singapore, adjusted for the technology industry and onsite work mode." }, "location" : "[Singapore, [Singapore], null, null, null, SG]", "locations" : [ "[Singapore, [Singapore], null, null, null, SG]" ], "timestamp" : "2026-06-16T13:42:28.689", "fingerprint" : "198bb0b8aa38d64b72901b5483c7efdf3b1b2bf12bb0d20355b2e9fbaeb04523", "source" : "google", "language" : "en", "externalId" : "132791773142360774", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "remoteFriendly" : false, "summaryDescription" : "Software Engineer III, Cloud and Third-Party Platform Security", "postedDate" : "2026-06-16T01:52:05.198", "createdAt" : "2026-06-16T01:52:05.198", "lastUpdated" : "2026-06-16T13:42:28.689", "ingestTimestamp" : "2026-06-16T01:52:05.198", "mongoId" : "6a307f8df292fd229c05a9e8", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.5555556, "_score" : 709.92773, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a210e8d74d8ee00a0af82db", "title" : "Staff Software Engineer, Cloud and Third-Party Platform Security", "salary" : { "min" : 220000.0, "max" : 320000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for Staff Software Engineer, Cloud and Third-Party Platform Security in Singapore, adjusted for lead seniority and full-time onsite employment in the technology industry." }, "location" : "[Singapore, [Singapore], null, null, null, SG]", "locations" : [ "[Singapore, [Singapore], null, null, null, SG]" ], "timestamp" : "2026-06-16T14:36:24.608", "fingerprint" : "768a3f27fe89917f1e1bd26af8b14dbca38ddb23532eb47cef74b778c5407cc2", "source" : "google", "language" : "en", "externalId" : "131237390017536710", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Staff", "remoteFriendly" : false, "summaryDescription" : "Staff Software Engineer, Cloud and Third-Party Platform Security", "postedDate" : "2026-06-16T01:50:30.635", "createdAt" : "2026-06-16T01:50:30.635", "lastUpdated" : "2026-06-16T14:36:24.608", "ingestTimestamp" : "2026-06-16T01:50:30.635", "mongoId" : "6a210e8d74d8ee00a0af82db", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.5555556, "_score" : 709.83325, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a307f92f292fd229c05ad46", "title" : "Senior Software Engineer, Cloud and Third Party Platform Security", "industry" : "Technology", "salary" : { "min" : 130000.0, "max" : 195000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Software Engineer in Singapore, adjusted for the technology industry and seniority level." }, "location" : "[Singapore, [Singapore], null, null, null, SG]", "locations" : [ "[Singapore, [Singapore], null, null, null, SG]" ], "timestamp" : "2026-06-16T11:37:53.350", "fingerprint" : "bf7e3873a0116d2fe82b743db72c6e23d448888a62479aa1dda0708811ff412e", "source" : "google", "language" : "en", "externalId" : "95653551711101638", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "summaryDescription" : "Senior Software Engineer, Cloud and Third Party Platform Security", "postedDate" : "2026-06-16T01:49:38.694", "createdAt" : "2026-06-16T01:49:38.694", "lastUpdated" : "2026-06-16T11:37:53.350", "ingestTimestamp" : "2026-06-16T01:49:38.694", "mongoId" : "6a307f92f292fd229c05ad46", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.5555556, "_score" : 709.7813, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a0b08221663d49372ecddb4", "title" : "IT - Vendor Analyst - II", "company" : "The Cincinnati Insurance Companies", "industry" : "Insurance", "salary" : { "min" : 65000.0, "max" : 95000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Bulgaria, adjusted for mid-seniority and the IT industry." }, "location" : "IT - Vendor Analyst I - II (Remote)", "locations" : [ "IT - Vendor Analyst I - II (Remote)", "164972", "false, 164972, false" ], "timestamp" : "2026-06-16T00:20:54.999", "fingerprint" : "e5cb3fab1c7486cada87d68182b04584d00a988aff5e4b36994d3308eb7b1a99", "source" : "taleo", "language" : "en", "applyUrl" : "https://cinfin.taleo.net/careersection/ex/jobdetail.ftl?job=164972", "externalId" : "164972", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Bulgaria", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "Bulgaria", "professionalSkills" : [ "Risk assessment", "Vendor management", "Product ownership", "License management", "Audit facilitation", "Scorecard administration", "User administration" ], "hardSkillsList" : [ "Vendor risk assessment", "Disaster recovery", "Business continuity", "Data management" ], "hardSkills" : [ { "name" : "Vendor risk assessment", "level" : "intermediate" }, { "name" : "Disaster recovery", "level" : "intermediate" }, { "name" : "Business continuity", "level" : "intermediate" }, { "name" : "Data management", "level" : "intermediate" } ], "majorSkills" : "Vendor risk management, Information security, Third party risk", "majorSkillsList" : [ "Vendor risk management", "Information security", "Third party risk" ], "coreResponsibilities" : "Analyze information security risks, Own third party risk requests, Investigate third party incidents, Analyze third party questionnaire responses, Create assessment artifacts for vendor categories, Scrutinize vendor practices, Support IT management, Track/reconcile vendor product license usage, Facilitate vendor audits, Administer vendor scorecard process, Administer product user, Follow vendor governance policies, Support business partners, Interpret gathered requirements, Build internal relationships, Fulfill identified business needs, Create documentation, Maintain documentation", "teamCollaboration" : "Cross-functional teams; Business partners; IT service areas", "domainKnowledge" : "Information security; Disaster recovery; Business continuity; Data management; Vendor risk management; Third party risk management", "domainList" : [ "information-security", "disaster-recovery", "business-continuity", "data-management", "vendor-risk-management", "third-party-risk-management" ], "domainSpecificKnowledge" : [ "Information security", "Disaster recovery", "Business continuity", "Data management", "Vendor risk management", "Third party risk management" ], "toolProficiency" : [ "Assessment tools", "TPRM monitoring tools" ], "communicationSkills" : "Explain vendor risks", "documentationSkills" : "Create documentation; Maintain documentation", "continuousLearning" : "Lifelong learning approach; Tools and training", "problemSolvingSkills" : "Analyze situations; Make decisions", "specialRequirements" : "Occasional travel to Fairfield, OH, Cameras on for interactions", "qualificationsBasic" : "Analyze information security risks, Manage vendor relationships, Analyze vendor software risks, Investigate third party incidents, Analyze third party responses, Create assessment artifacts, Follow risk management procedures, Track/reconcile vendor license usage, Facilitate vendor audits, Administer vendor scorecard process, Follow vendor governance policies, Map business needs to vendor portfolio, Build internal relationships, Fulfill business needs, Maintain documentation", "qualificationsPreferred" : "Experience with assessment and TPRM monitoring tools", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "Make a difference with a career in insurance At The Cincinnati Insurance Companies, we put people first and apply the Golden Rule to our daily operations. To put this into action, we’re looking for extraordinary people to join our talented team. Our service-oriented, ethical, knowledgeable, caring associates are the heart of our vision to be the best company serving independent agents. We help protect families and businesses as they work to prevent or recover from a loss. Share your talents to help us reach for continued success as we bring value to the communities we serve and demonstrate that Actions Speak Louder in Person®. If you’re ready to build productive relationships, collaborate within a diverse team, embrace challenges and develop your skills, then Cincinnati may be the place for you. We offer career opportunities where you can contribute and grow. Build your future with us Our IT department is currently seeking an IT Vendor Analyst. The primary role of the IT Vendor Analyst is to support Third Party Risk Managers with analyzing information security risks associated with the company’s vendors. This role also helps Third Party Risk Managers manage the relationships with vendors. Work location and flexibility are subject to change based on evolving business needs, but generally, selected candidates who reside: within 50 miles of Headquarters may be expected to work in a hybrid capacity, combining remote and onsite work when business needs necessitate. more than 50 miles from Headquarters must be flexible and available to travel to Fairfield, OH, on an occasional basis for special events, training sessions, or key meetings. To ensure active engagement in meetings, it is mandatory for all IT associates to have cameras turned on for all interactions with other associates, customers, and stakeholders. Your camera must be on and positioned correctly to clearly show your face. This practice is crucial for maintaining connection and engagement, as non-verbal cues are essential for effective communication. Be ready to: Risk Management analyze information gathered for security risk assessments of vendors and vendor software of low to moderate complexity and risk own low complexity third party risk requests investigate third party incidents analyze third party responses to questionnaires be adept with assessment and TPRM monitoring tools create assessment artifacts for vendor categories use project documentation, system design documents, vendor security policies and other vendor security references (i.e., SOC II type 2, SIG, AUP, PCI ROC, TPRM Monitoring Reports, etc.) follow procedures of the risk management process with guidance scrutinize vendor practices in key areas: security, disaster recovery/business continuity, and data management processes support IT management relative to product ownership responsibility assist in tracking/reconciling vendor product license usage/entitlements assist in facilitation of vendor audits assist in administration of vendor scorecard process assist in product user administration follow vendor governance policies and procedures with guidance work with Third Party Risk Managers in supporting business partners and other IT service areas in the interpretation of gathered requirements build internal relationships through communication and collaboration fulfill identified business needs with the consultation of Third Party Risk Managers create and maintain documentation to map business needs to vendor product/service portfolio and or product/service roadmap Vendor Relationship support IT management relative to product ownership responsibility assist in tracking/reconciling vendor product license usage/entitlements assist in facilitation of vendor audits assist in administration of vendor scorecard process assist in product user administration follow vendor governance policies and procedures with guidance work with Third Party Risk Managers in supporting business partners and other IT service areas in the interpretation of gathered requirements build internal relationships through communication and collaboration fulfill identified business needs with the consultation of Third Party Risk Managers create and maintain documentation to map business needs to vendor product/service portfolio and or product/service roadmap Be equipped with: the ability to analyze situations and make decisions the ability to clearly explain vendor risks to stakeholders a willingness to learn IT VMO standard forms, processes, and procedures as well as the company’s risk appetite attention to detail and the ability to work autonomously Enhance your talents Providing outstanding service and developing strong relationships with our independent agents are hallmarks of our company. Whether you have experience from another carrier or you’re new to the insurance industry, we promote a lifelong learning approach. Cincinnati provides you with the tools and training to be successful and to become a trusted, respected insurance professional – all while enjoying a meaningful career. Enjoy benefits and amenities Your commitment to providing strong service, sharing best practices and creating solutions that impact lives is appreciated. To increase the well-being and satisfaction of our associates, we offer a variety of benefits and amenities. Learn more about our benefits and amenities packages. Embrace a diverse team As a relationship-based organization, we welcome and value a diverse workforce. We grant equal employment opportunity to all qualified persons without regard to race; creed; color; sex, including sexual orientation; religion; national origin; age; disability; or any other basis prohibited by law. Learn more about the Federal Employment Notices . 164972", "summaryDescription" : "IT - Vendor Analyst - II at The Cincinnati Insurance Companies. Skills: Vendor risk management, Information security, Third party risk. Analyze information security risks. Own third party risk requests", "createdAt" : "2026-06-14T20:43:13.900", "lastUpdated" : "2026-06-16T00:20:54.999", "ingestTimestamp" : "2026-06-14T20:43:13.900", "mongoId" : "6a0b08221663d49372ecddb4", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Vendor risk assessment", "Disaster recovery", "Business continuity", "Data management", "Vendor risk management", "Information security", "Third party risk", "Risk assessment", "Vendor management", "Product ownership", "License management", "Audit facilitation", "Scorecard administration", "User administration", "Third party risk management", "Assessment tools", "TPRM monitoring tools" ], "skillCount" : 17, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Mid", "dataQualityScore" : 0.6666667, "_score" : 709.2164, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Insurance", "llmIndustryConfidence" : 0.95 }, { "id" : "69ce5e3b9bc74574cb6779aa", "title" : "IT Risk Management Analyst", "company" : "Mercedes-Benz Research and Development India", "industry" : "Technology", "salary" : { "min" : 1200000.0, "max" : 1800000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for IT Risk Management Analyst in Bangalore, India, adjusted for mid-seniority level and the automotive industry." }, "location" : "India-Karnataka-Bangalore", "locations" : [ "India-Karnataka-Bangalore", "Brigade Tech Gardens, Katha No. 119, Kundalahalli Village, K.R. Puram Hobli, Ward No. 85, Bangalore" ], "certifications" : [ "ISO 31000", "CRISC" ], "timestamp" : "2026-06-15T22:43:27.223", "fingerprint" : "a3862fec58c6b678af5751800a9453fd5ed997bfe50df26ba7ef63812634b900", "source" : "taleo", "language" : "en", "applyUrl" : "https://daimler.taleo.net/careersection/ex/jobdetail.ftl?job=888721", "externalId" : "888721", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bangalore", "state" : "Karnataka", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "12.9767936,77.5900820" } ], "locationText" : "Bangalore, Karnataka, India", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "technicalSkills" : "Python, R, MATLAB, SQL, Bloomberg Terminal, Reuters Eikon, FactSet, Murex, Calypso", "professionalSkills" : [ "Risk assessment", "Quantitative analysis", "Qualitative analysis", "Internal controls evaluation", "Operational risk management", "Audit" ], "hardSkillsList" : [ "Risk mitigation planning", "Risk monitoring", "Risk remediation", "Threat identification", "Vulnerability identification", "Control effectiveness assessment", "Risk indicator monitoring", "Risk treatment strategy" ], "hardSkills" : [ { "name" : "Risk mitigation planning", "level" : "intermediate" }, { "name" : "Risk monitoring", "level" : "intermediate" }, { "name" : "Risk remediation", "level" : "intermediate" }, { "name" : "Threat identification", "level" : "intermediate" }, { "name" : "Vulnerability identification", "level" : "intermediate" }, { "name" : "Control effectiveness assessment", "level" : "intermediate" }, { "name" : "Risk indicator monitoring", "level" : "intermediate" }, { "name" : "Risk treatment strategy", "level" : "intermediate" } ], "majorSkills" : "Risk management, IT risk, Compliance, Regulatory areas", "majorSkillsList" : [ "Risk management", "IT risk", "Compliance", "Regulatory areas" ], "coreResponsibilities" : "Perform qualitative risk assessments, Perform quantitative risk assessments, Maintain risk register, Monitor risks, Manage risks, Communicate risk mitigation plans, Visualize risks identified, Visualize progress made, Prioritize risks, Remediate risks, Conduct periodic assessments, Identify threats, Identify vulnerabilities, Assess control effectiveness, Tweak risk assessment process, Incorporate lessons learnt, Improve risk assessment process, Define key risk indicators, Monitor key risk indicators, Monitor high risk areas, Assist stakeholders with risk treatment, Implement risk reduction measures, Reduce risk exposure, Train team members, Mentor team members", "teamCollaboration" : "Communicate with stakeholders", "domainKnowledge" : "Banking; Financial industries; Information security; GDPR; NIST risk management Framework; Risk register; Risk exposure; Risk reporting; Risk events", "domainList" : [ "banking", "financial-industries", "information-security", "gdpr", "nist-risk-management-framework", "risk-register", "risk-exposure", "risk-reporting", "risk-events" ], "domainSpecificKnowledge" : [ "Banking", "Financial industries", "Information security", "GDPR", "NIST risk management Framework", "Risk register", "Risk exposure", "Risk reporting", "Risk events" ], "toolProficiency" : [ "GRC tools" ], "communicationSkills" : "Stakeholder communication", "continuousLearning" : "Continuous learning opportunities", "problemSolvingSkills" : "Analytical skills", "qualificationsBasic" : "Evaluation of internal controls, Operational risk management, IT Processes and General Controls, Understanding of compliance and regulatory areas, GDPR knowledge, NIST risk management Framework knowledge, Risk register knowledge, Risk exposure knowledge, Risk reporting knowledge, Handling of risk events knowledge, Information security related training, Information security related certifications", "qualificationsPreferred" : "Master's degree in Information Security, Master's degree in Risk Management, Master's degree in Business Administration, Master's degree in Finance, Experience in banking industries, Experience in financial industries, Working experience on GRC tools", "remoteFriendly" : false, "rawDescription" : "About MBRDI Mercedes-Benz Research and Development India (MBRDI), headquartered in Bengaluru with a satellite office in Pune, is the largest R&D center for Mercedes-Benz Group AG outside of Germany. Our mission is to drive innovation and excellence in automotive engineering, digitalization, and sustainable mobility solutions, shaping the future of mobility. Knowledge of performing qualitative/quantitative risk assessments Maintain risk register and ensure risks are monitored and managed Effectively communicate with key stakeholders to risk mitigation plans Visual representation of the risks identified and progress made for the key stakeholders Ability to prioritize and remediate risks according to the business priorities Strong analytical skills Conduct periodic assessments to identify threats, vulnerabilities, control effectiveness Tweak the existing risk assessment process whenever necessary to incorporate the lessons learnt and constantly improve Define and monitor key risk indicators to monitor high risk areas Contribute effectively and assist the stakeholders with risk treatment strategy Experience in highly regulated environments such as banking, financial industries would be an added advantage Implement measures to reduce the risk exposure Train and mentor the team members on risk management Working experience on any of the GRC tools would be desirable Mandatory Requirements : · Experience with an emphasis on evaluation of internal controls or operational risk in one or more of the following areas IT Processes and General Controls, operational/enterprise risk management & audit · Ability to demonstrate a strong understanding of various compliance and regulatory areas (e. g. GDPR, NIST risk management Framework) or the risk register, risk exposure, risk reporting and handling of risk events. · Information security related training or certifications such as ISO 31000 or CRISC a { text-decoration: none; color: #464feb; } tr th, tr td { border: 1px solid #e6e6e6; } tr th { background-color: #f5f5f5; } a { text-decoration: none; color: #464feb; } tr th, tr td { border: 1px solid #e6e6e6; } tr th { background-color: #f5f5f5; } Educational Qualifications Bachelor’s degree in Information Technology, Computer Science, Engineering, Information Security, Risk Management, Finance, Business Administration, or a related discipline. Master’s degree in Information Security, Risk Management, Business Administration (MBA), or Finance will be an added advantage. Why Join Us? • Be part of a purpose-driven organization that is shaping the future of mobility • Work on cutting-edge technologies and global projects • Thrive in a collaborative, diverse, and inclusive environment • Access world-class infrastructure and continuous learning opportunities Equal Opportunity Statement At MBRDI, we are committed to diversity and inclusion. We welcome applications from all qualified individuals, regardless of gender, background, or ability. Mercedes-Benz Research and Development India Private Limited", "summaryDescription" : "IT Risk Management Analyst at Mercedes-Benz Research and Development India. Skills: Risk management, IT risk, Compliance, Regulatory areas. Perform qualitative risk assessments. Perform quantitative risk assessments", "createdAt" : "2026-06-14T21:56:37.113", "lastUpdated" : "2026-06-15T22:43:27.223", "ingestTimestamp" : "2026-06-14T21:56:37.113", "mongoId" : "69ce5e3b9bc74574cb6779aa", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Risk mitigation planning", "Risk monitoring", "Risk remediation", "Threat identification", "Vulnerability identification", "Control effectiveness assessment", "Risk indicator monitoring", "Risk treatment strategy", "Risk management", "IT risk", "Compliance", "Regulatory areas", "Risk assessment", "Quantitative analysis", "Qualitative analysis", "Internal controls evaluation", "Operational risk management", "Audit", "Banking", "Financial industries", "Information security", "GDPR", "NIST risk management Framework", "Risk register", "Risk exposure", "Risk reporting", "Risk events", "ISO 31000", "CRISC", "GRC tools" ], "skillCount" : 30, "jobCategory" : "finance", "jobSubcategory" : "accounting", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 700.6775, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Automotive", "llmIndustryConfidence" : 0.92 }, { "id" : "6a308ef6f292fd229c0a6e5c", "title" : "Risk Analyst", "company" : "Xplor", "industry" : "Computer Software", "salary" : { "min" : 57500.0, "max" : 86500.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Risk Analyst in Bulgaria, adjusted for the FinTech industry and remote work." }, "location" : "Atlanta, GA, United States", "locations" : [ "Atlanta", "GA", "United States" ], "timestamp" : "2026-06-16T12:41:47.095", "fingerprint" : "55c8a416d4d547ab759531004e7de9b11d01b541e7da546526c56fd97513441a", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Xplor/744000132215679-risk-analyst-remote", "externalId" : "744000132215679", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Bulgaria", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "Bulgaria", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "mid", "professionalSkills" : [ "Risk management" ], "hardSkillsList" : [ "Financial analysis", "Fraud detection" ], "hardSkills" : [ { "name" : "Financial analysis", "level" : "intermediate" }, { "name" : "Fraud detection", "level" : "intermediate" } ], "majorSkills" : "Risk analysis, Merchant monitoring", "majorSkillsList" : [ "Risk analysis", "Merchant monitoring" ], "coreResponsibilities" : "Monitor merchant processing activity, Investigate suspicious merchant activity, Evaluate processing activity patterns, Research internal and external sources, Review system generated reporting, Review department generated reporting, Analyze merchant account alerts, Identify suspicious transactions, Identify processing issues, Mitigate company losses, Collaborate with cross-functional teams, Design risk mitigation strategies, Communicate risk mitigation strategies, Implement risk mitigation strategies, Monitor emerging trends, Monitor threats in payments industry, Adapt risk assessment methodologies, Read business documents, Interpret business documents, Read financial documents, Interpret financial documents, Analyze trends, Detect potential fraud, Assess risk, Conduct verbal communication with merchants, Conduct written communication with merchants, Conduct verbal communication with issuing banks, Conduct written communication with issuing banks, Handle escalated issues, Gather information, Manage actions to resolve risk concerns, Develop Standard Operating Procedures, Maintain Standard Operating Procedures, Develop efficient processes, Maintain efficient processes, Perform related duties", "teamCollaboration" : "Cross-functional teams", "domainKnowledge" : "Merchant processing; Payments industry; Card holder issues", "domainList" : [ "merchant-processing", "payments-industry", "card-holder-issues" ], "domainSpecificKnowledge" : [ "Merchant processing", "Payments industry", "Card holder issues" ], "toolProficiency" : [ "Bloomberg Terminal", "Reuters Eikon", "FactSet" ], "communicationSkills" : "Verbal communication; Written communication", "documentationSkills" : "Standard Operating Procedures", "problemSolvingSkills" : "Process improvements", "qualificationsBasic" : "Three years related experience", "qualificationsPreferred" : "Bachelor’s degree in relevant field, Previous risk experience", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "At Xplor, we believe that helping people make the most of each day is the most rewarding way to spend ours. We give small and medium-sized businesses cloud-based, intuitive technology solutions that enable them to manage all the hassles of running and growing a business, so business owners can get back to doing what they love. With Xplor Pay, we help businesses get paid quickly and securely – without hidden fees. We built the tech ourselves, and our platform delivers secure, transparent, fast, and accurate payments. We are unified by our purpose of helping people to succeed. So, when you become part of our team, you also become part of the personal connection that strengthens the relationship people have with Xplor products. Join our XplorPay vertical as a Risk Analyst to make a real impact every day. We say that because we know that every conversation we have, every code line we write and every interface we design is another opportunity for us to enrich our customers’ experiences. Reporting into the Director of Risk, you will help us with the daily monitoring of merchant processing activity, as well as, conducting investigations of suspicious merchant activity that may be related to merchant(s) processing outside of or not as approved parameters. Analyst is responsible for evaluating patterns in merchant processing activity and researching against internal and external information sources that help in evaluating and identifying potentially suspicious merchant or card holder issues. Review system and department generated reporting that support in identifying potential processing issues to help mitigate potential company losses. Analyst will be responsible for answering incoming and making outgoing calls to customer base in a professional courteous manner; log and notate customer interaction; follow-up on customer inquiries and research; review faxed and emailed request and inquiries; read and interpret business and financial documents; ability to multi-task, handle escalated calls and negotiate a resolution; recommend process improvements and work on special projects. Some of the other responsibilities include: * Analyze merchant account activity alerts generated by automated monitoring systems in order to identify suspicious transaction or processing issues * Review system and department generated reporting that support in identifying potential processing issues to help mitigate potential company losses * Collaborate with cross-functional teams to design, communicate, and implement risk mitigation strategies, ensuring compliance with industry standards and regulations * Monitor emerging trends and threats in the payments industry, adapting risk assessment methodologies accordingly * Read and interpret business and financial documents to analyze trends, detect potential fraud, and assess risk * Conduct verbal and written communication with merchants and issuing banks, including handling escalated issues, gathering information, and managing appropriate actions to resolve risk concerns * Develop and maintain Standard Operating Procedures (SOP) and efficient processes to ensure consistent and effective risk management practices * Perform other related duties as assigned by management * Location: You can work fully remote in this position, provided you have eligible working rights in the United States, and you are in a time zone with enough overlap to collaborate with your team. #LI-Remote ## Qualifications What would make me a good candidate? We are looking for curious and empathetic people. We also love to hear from people who are motivated by meaningful work, resonate with our four core values, have a positive outlook, are comfortable with ambiguity and thrive working in an ever-evolving and complex environment. We are inspired by meeting big picture thinkers and doers, people who can be both tactical and strategic, aim high and put people first in everything they do. To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skills, and abilities required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. * Bachelor’s degree in relevant field preferred, or at least three years related experience and/or training. Equivalent combination of education and experience will be considered. Previous risk experience is preferred * Ability to read and interpret documents such as credit reports, billing statements, contracts, sales agreements, memos, letters, and process and procedure documentation * Demonstrated history of identifying and implementing process improvements to enhance risk management efficiency and effectiveness * Strong curiosity and proactive approach to problem-solving, with a continuous desire to learn and adapt in a dynamic environment * Proficiency in using risk management tools and software, with a strong aptitude for learning new technologies * Familiarity with fraud detection and payment methodologies, including transaction monitoring, chargeback management, and risk scoring systems * Strong analytical skills, with the ability to interpret data sets and identify patterns or anomalies indicative of risk * Ability to understand and explain merchant contract terms and conditions, as well as Visa/Mastercard operating policies and regulations At Xplor, we believe that the best innovation and ideas happen at the intersections of our differences - people of diverse cultures, generations, disciplines, and lived experiences. So even if you think you do not tick all the boxes, we still encourage you to apply. ## Additional Information At Xplor, we believe that the best innovation and ideas happen at the intersections of our differences - people of diverse cultures, generations, disciplines, and lived experiences. So even if you think you do not tick all the boxes, we still encourage you to apply. Values and Life at Xplor Our four core values guide us from how we hire and recognize our team members to how we interact with our customers day to day: * Make life simple * Build for people * Move with purpose * Create lasting communities. If these values sound like you, and describe people you want to work with, you will thrive at Xplor. As an Xplorer, you will be part of a global network of talented colleagues who will support your success. We look for commonalities and shared passions and give people the tools they need to deliver great work and grow at speed. Some of our perks and benefits are: * Gender Neutral Paid Parental Leave * #GiveBackDays/Commitment to social impact – 3 extra days off to volunteer and give back to your local community * Ongoing dedication to Diversity & Inclusion initiatives such as D&I Council * Access to free mental health support * Flexible working arrangements More about us More than 130,000 businesses in 72+ countries rely on Xplor to run their day and get paid, processing over $47 billion in payments annually. Our connected ecosystem helps operators spend less time managing complexity and more time delivering the experiences that matter most. Xplor is backed by world-class investors Advent International, Battery Ventures, and Silver Lake. Good to know To be considered for employment, you must be legally authorized to work in the country you're applying for. Xplor does not sponsor visas, either at the time of hire or at any later time. We kindly ask you to apply through our careers portal or external job boards only. Please don't send your application via email. To learn more about us and our products, please visit [xplor.com/careers/](https://xplor.com/careers/). We also invite you to check out our Candidate FAQs for more information about our recruitment process [xplor.com/recruitment-faqs/](https://xplor.com/recruitment-faqs/). EEO and Artificial Intelligence We believe in transparent hiring. We use an applicant tracking system that includes artificial intelligence-enabled features to assist with the screening and assessment of job applications, such as candidate scoring or ranking. These tools support our recruitment process, but all hiring decisions are made by our recruitment team following human review. We do not rely on artificial intelligence to make final hiring decisions. Find our Candidate AI Usage guidelines [here](https://c.smartrecruiters.com/sr-company-attachments-prod-aws-dc5/5fa0335de18b196e197e4ed6/d33b5e4f-a1fa-449c-b070-12fd577319aa?r=s3-eu-central-1). Xplor is proud to be an Equal Employment Opportunity employer. We're dedicated to attracting, retaining and developing our people regardless of gender identity, ethnicity, sexual orientation, disability, veteran status and age. Applications are encouraged from all sectors of the community. All Information will be kept confidential according to EEO guidelines. Xplor is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Xplor will take steps to ensure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact us via talent@xplortechnologies.com. We make it a priority to respond to every applicant.", "summaryDescription" : "Risk Analyst at Xplor. Skills: Risk analysis, Merchant monitoring. Monitor merchant processing activity. Investigate suspicious merchant activity", "postedDate" : "2026-06-15T14:19:29.000", "createdAt" : "2026-06-16T03:36:52.347", "lastUpdated" : "2026-06-16T12:41:47.095", "ingestTimestamp" : "2026-06-16T03:36:52.347", "mongoId" : "6a308ef6f292fd229c0a6e5c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Financial analysis", "Fraud detection", "Risk analysis", "Merchant monitoring", "Risk management", "Merchant processing", "Payments industry", "Card holder issues", "Bloomberg Terminal", "Reuters Eikon", "FactSet" ], "skillCount" : 11, "jobCategory" : "finance", "jobSubcategory" : "accounting", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 689.58765, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a308362f292fd229c070af0", "title" : "Risk Analyst", "company" : "BHFT", "industry" : "Information Technology And Services", "salary" : { "min" : 52000.0, "max" : 78000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Mid-level Risk Analyst in the FinTech industry in Bulgaria, adjusted for remote work and company size." }, "location" : "London, England, United Kingdom", "locations" : [ "London", "England", "United Kingdom" ], "certifications" : [ "CFA", "FRM" ], "timestamp" : "2026-06-16T10:55:55.520", "fingerprint" : "4541af83e9a79452c691c1eb77a44b95846acdf0122dde7ff385d00cf0c1fe24", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/BHFT/744000132130654-risk-analyst", "externalId" : "744000132130654", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Bulgaria", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "Bulgaria", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 15, "experienceMaxYears" : 99, "experienceLevel" : "executive", "technicalSkills" : "Python, SQL", "professionalSkills" : [ "Risk management", "P&L attribution", "Liquidity reserve modeling", "Margin reconciliation", "Scenario analysis" ], "hardSkillsList" : [ "Futures margining", "Listed options Greeks", "Equity portfolio risk" ], "hardSkills" : [ { "name" : "Futures margining", "level" : "intermediate" }, { "name" : "Listed options Greeks", "level" : "intermediate" }, { "name" : "Equity portfolio risk", "level" : "intermediate" } ], "majorSkills" : "Risk management, VaR methodologies, Futures margining", "majorSkillsList" : [ "Risk management", "VaR methodologies", "Futures margining" ], "coreResponsibilities" : "Operate and maintain VaR systems daily, Capture positions and strategies, Price positions and strategies, Reflect positions in risk engine, Monitor trading exposures, Monitor against risk limits, Identify potential breaches, Escalate potential breaches, Reconcile daily margin requirements, Run what-if scenarios, Optimize margin usage, Reduce capital requirements, Identify margin efficiencies, Execute daily stress tests, Execute scenario analyses, Identify outliers, Investigate data issues, Investigate spikes in VaR, Own resolution of technical problems, Own resolution of pricing problems, Escalate persistent issues, Maintain understanding of daily P&L, Contextualize risk exposures, Identify unusual risk/return relationships, Review P&L attribution outputs, Validate P&L attribution, Flag P&L anomalies, Flag P&L discrepancies, Run daily liquidity reserve model, Assess bid/ask costs, Apply liquidity reserves to valuations, Produce realistic P&L figures, Prepare daily risk reports, Distribute daily risk reports, Conduct regular reviews with traders, Discuss stress test results, Discuss margin optimization opportunities", "teamCollaboration" : "Reviews with traders; Discuss with traders", "domainKnowledge" : "Algorithmic trading; High-Frequency Trading; Medium-Frequency Trading; Asset classes; Equities; Equity derivatives; Options; Commodity futures; Rates futures; Futures markets; Spreads trading; Basis trading; Listed options Greeks; Equity portfolio risk; P&L attribution concepts; Risk monitoring; Liquidity reserves; FCM statements; SPAN margining", "domainList" : [ "algorithmic-trading", "high-frequency-trading", "medium-frequency-trading", "asset-classes", "equities", "equity-derivatives", "options", "commodity-futures", "rates-futures", "futures-markets", "spreads-trading", "basis-trading", "listed-options-greeks", "equity-portfolio-risk", "p-l-attribution-concepts", "risk-monitoring", "liquidity-reserves", "fcm-statements", "span-margining" ], "domainSpecificKnowledge" : [ "Algorithmic trading", "High-Frequency Trading", "Medium-Frequency Trading", "Asset classes", "Equities", "Equity derivatives", "Options", "Commodity futures", "Rates futures", "Futures markets", "Spreads trading", "Basis trading", "Listed options Greeks", "Equity portfolio risk", "P&L attribution concepts", "Risk monitoring", "Liquidity reserves", "FCM statements", "SPAN margining" ], "toolProficiency" : [ "Bloomberg Terminal", "Reuters Eikon", "FactSet", "Murex", "Calypso" ], "communicationSkills" : "Clear daily risk reports", "continuousLearning" : "Professional growth opportunities; Self-realization opportunities", "problemSolvingSkills" : "Anomaly detection; Outlier investigation; Data issue investigation; Technical problem resolution; Pricing problem resolution", "qualificationsBasic" : "2–5 years of relevant experience, Bachelor's degree or higher", "qualificationsPreferred" : "CFA or FRM preferred, Advanced Excel Python or SQL experience is a plus", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "BHFT is a proprietary algorithmic trading firm. Our team manages the full trading cycle, from software development to creating and coding strategies and algorithms. Our trading operations cover key exchanges. The firm trades across a broad range of asset classes, including equities, equity derivatives, options, commodity futures, rates futures, etc. We employ a diverse and growing array of algorithmic trading strategies, utilizing both High-Frequency Trading (HFT) and Medium-Frequency Trading (MFT) approaches. Looking ahead, we are expanding into new markets and products. As a dynamic company, we continuously experiment with new markets, tools, and technologies. We’ve got a team of 200+ professionals, with a strong emphasis on technology—70% are technical specialists in development, infrastructure, testing, and analytics spheres. The remaining part of the team supports our business operations, such as Risks, Compliance, Legal, Operations and more. Our employees are located all around the world, from the United States to Hong Kong. Although we maintain office spaces, we currently operate as a 100% remote organization. At BHFT, clarity and transparency are at the core of our culture: we value open communication, ensuring that our processes are straightforward. Responsibilities: 1. Risk Management Tasks * Risk System Operation: Run and maintain the firm’s VaR and risk systems daily. Ensure all positions and strategies are accurately captured, priced, and reflected in the risk engine. * Intraday Limit Monitoring: Monitor trading exposures in real time against the firm’s risk limits (position size, margin, and concentration). Identify and escalate potential breaches promptly. * Margin Tool Operation: Reconcile daily margin requirements against FCM statements and calls. Run what-if scenarios across exchanges and FCMs to optimize margin usage, reduce capital requirements, and identify efficiencies. * Stress Testing: Execute daily stress tests and scenario analyses. * Anomaly Detection & Tool Ownership: Identify and investigate outliers, data issues, or unexpected spikes in VaR or risk metrics. Own the resolution of technical or pricing problems within the risk and margin systems and escalate persistent issues. 2. P&L Awareness * Maintain a working understanding of daily P&L by strategy to contextualize risk exposures and identify unusual risk/return relationships. * Review P&L attribution outputs produced by the P&L Analyst to validate consistency with observed position changes and market moves. * Flag P&L anomalies or discrepancies that may indicate data, pricing, or position capture issues in the risk system. 3. Liquidity & Valuation Tasks * Run the daily liquidity reserve model to assess bid/ask costs for exiting positions. * Apply liquidity reserves to valuations to produce realistic P&L figures. 4. Reporting & Communication * Prepare and distribute clear daily risk reports to the senior management, covering VaR, key exposures, margin utilization, and limit status. * Conduct regular reviews with traders on risk positioning, proactively flag elevated risks or limit concerns, and discuss stress test results and margin optimization opportunities. ## Qualifications * Strong proficiency in Value at Risk (VaR) methodologies and risk system management. * Hands-on experience with futures margining (especially SPAN), FCM reconciliation, and margin optimization tools. * Practical understanding of futures markets, including spreads and basis trading. * Solid knowledge of listed options Greeks and equity portfolio risk. * Familiarity with P&L attribution concepts and how they relate to risk monitoring. * 2–5 years of relevant experience in risk at a prop trading firm, hedge fund, or futures clearing organization. * Advanced Excel skills; Python or SQL experience is a plus. * Bachelor's degree or higher in Finance, Mathematics, Statistics, Engineering, or a related quantitative field. CFA or FRM is preferred but not required. ## Additional Information What we offer: * Experience a modern international technology company without the burden of bureaucracy. * Collaborate with industry-leading professionals, including former employees of Tower, DRW, Broadridge, Credit Suisse, and more. * Enjoy excellent opportunities for professional growth and self-realization. * Work remotely from anywhere in the world with a flexible schedule. * Receive compensation for health insurance, sports activities, and non-professional training.", "summaryDescription" : "Risk Analyst at BHFT. Skills: Risk management, VaR methodologies, Futures margining. Operate and maintain VaR systems daily. Capture positions and strategies", "postedDate" : "2026-06-15T07:38:31.000", "createdAt" : "2026-06-16T01:40:07.503", "lastUpdated" : "2026-06-16T10:55:55.520", "ingestTimestamp" : "2026-06-16T01:40:07.503", "mongoId" : "6a308362f292fd229c070af0", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Futures margining", "Listed options Greeks", "Equity portfolio risk", "Risk management", "VaR methodologies", "P&L attribution", "Liquidity reserve modeling", "Margin reconciliation", "Scenario analysis", "Algorithmic trading", "High-Frequency Trading", "Medium-Frequency Trading", "Asset classes", "Equities", "Equity derivatives", "Options", "Commodity futures", "Rates futures", "Futures markets", "Spreads trading", "Basis trading", "P&L attribution concepts", "Risk monitoring", "Liquidity reserves", "FCM statements", "SPAN margining", "CFA", "FRM", "Bloomberg Terminal", "Reuters Eikon", "FactSet", "Murex", "Calypso" ], "skillCount" : 33, "jobCategory" : "finance", "jobSubcategory" : "accounting", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 687.2177, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.98 }, { "id" : "6a304f0df292fd229cee4ad6", "title" : "Risk Analyst", "company" : "BHFT", "industry" : "Information Technology And Services", "salary" : { "min" : 52000.0, "max" : 78000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Mid-level Risk Analyst in the FinTech industry in Bulgaria, adjusted for remote work and 2-5 years of experience." }, "location" : "London, England, United Kingdom", "locations" : [ "London", "England", "United Kingdom" ], "certifications" : [ "CFA", "FRM" ], "timestamp" : "2026-06-16T02:36:53.987", "fingerprint" : "f0eb8e4748d28aa19d186eb964ff44b623453ac90b64174d0913668e4026f7a4", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/BHFT/744000132130654-risk-analyst", "externalId" : "744000132130654", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Bulgaria", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "Bulgaria", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 15, "experienceMaxYears" : 99, "experienceLevel" : "executive", "technicalSkills" : "Python, SQL", "professionalSkills" : [ "Risk management", "P&L attribution", "Liquidity reserve modeling", "Margin reconciliation", "Scenario analysis" ], "hardSkillsList" : [ "Futures margining", "Listed options Greeks", "Equity portfolio risk" ], "hardSkills" : [ { "name" : "Futures margining", "level" : "intermediate" }, { "name" : "Listed options Greeks", "level" : "intermediate" }, { "name" : "Equity portfolio risk", "level" : "intermediate" } ], "majorSkills" : "Risk management, VaR methodologies, Futures margining", "majorSkillsList" : [ "Risk management", "VaR methodologies", "Futures margining" ], "coreResponsibilities" : "Operate and maintain VaR systems daily, Capture positions and strategies, Price positions and strategies, Reflect positions in risk engine, Monitor trading exposures in real time, Monitor against firm's risk limits, Identify potential breaches, Escalate potential breaches promptly, Reconcile daily margin requirements, Run what-if scenarios, Optimize margin usage, Reduce capital requirements, Identify margin efficiencies, Execute daily stress tests, Execute scenario analyses, Identify outliers, Investigate data issues, Investigate spikes in VaR, Own resolution of technical problems, Own resolution of pricing problems, Escalate persistent issues, Maintain understanding of daily P&L, Contextualize risk exposures, Identify unusual risk/return relationships, Review P&L attribution outputs, Validate P&L attribution consistency, Flag P&L anomalies, Flag P&L discrepancies, Run daily liquidity reserve model, Assess bid/ask costs, Apply liquidity reserves to valuations, Produce realistic P&L figures, Prepare daily risk reports, Distribute daily risk reports, Conduct regular reviews with traders, Discuss stress test results, Discuss margin optimization opportunities", "teamCollaboration" : "Reviews with traders", "domainKnowledge" : "Algorithmic trading; Proprietary trading; Futures markets; Listed options; Equity portfolio risk; FCM reconciliation", "domainList" : [ "algorithmic-trading", "proprietary-trading", "futures-markets", "listed-options", "equity-portfolio-risk", "fcm-reconciliation" ], "domainSpecificKnowledge" : [ "Algorithmic trading", "Proprietary trading", "Futures markets", "Listed options", "Equity portfolio risk", "FCM reconciliation" ], "toolProficiency" : [ "Risk systems", "Margin tools", "Excel", "Python", "SQL" ], "communicationSkills" : "Risk reporting", "problemSolvingSkills" : "Anomaly detection; Outlier investigation", "qualificationsBasic" : "2–5 years of relevant experience, Bachelor's degree or higher", "qualificationsPreferred" : "CFA or FRM preferred, Advanced Excel Python or SQL experience is a plus", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "BHFT is a proprietary algorithmic trading firm. Our team manages the full trading cycle, from software development to creating and coding strategies and algorithms. Our trading operations cover key exchanges. The firm trades across a broad range of asset classes, including equities, equity derivatives, options, commodity futures, rates futures, etc. We employ a diverse and growing array of algorithmic trading strategies, utilizing both High-Frequency Trading (HFT) and Medium-Frequency Trading (MFT) approaches. Looking ahead, we are expanding into new markets and products. As a dynamic company, we continuously experiment with new markets, tools, and technologies. We’ve got a team of 200+ professionals, with a strong emphasis on technology—70% are technical specialists in development, infrastructure, testing, and analytics spheres. The remaining part of the team supports our business operations, such as Risks, Compliance, Legal, Operations and more. Our employees are located all around the world, from the United States to Hong Kong. Although we maintain office spaces, we currently operate as a 100% remote organization. At BHFT, clarity and transparency are at the core of our culture: we value open communication, ensuring that our processes are straightforward. Responsibilities: 1. Risk Management Tasks * Risk System Operation: Run and maintain the firm’s VaR and risk systems daily. Ensure all positions and strategies are accurately captured, priced, and reflected in the risk engine. * Intraday Limit Monitoring: Monitor trading exposures in real time against the firm’s risk limits (position size, margin, and concentration). Identify and escalate potential breaches promptly. * Margin Tool Operation: Reconcile daily margin requirements against FCM statements and calls. Run what-if scenarios across exchanges and FCMs to optimize margin usage, reduce capital requirements, and identify efficiencies. * Stress Testing: Execute daily stress tests and scenario analyses. * Anomaly Detection & Tool Ownership: Identify and investigate outliers, data issues, or unexpected spikes in VaR or risk metrics. Own the resolution of technical or pricing problems within the risk and margin systems and escalate persistent issues. 2. P&L Awareness * Maintain a working understanding of daily P&L by strategy to contextualize risk exposures and identify unusual risk/return relationships. * Review P&L attribution outputs produced by the P&L Analyst to validate consistency with observed position changes and market moves. * Flag P&L anomalies or discrepancies that may indicate data, pricing, or position capture issues in the risk system. 3. Liquidity & Valuation Tasks * Run the daily liquidity reserve model to assess bid/ask costs for exiting positions. * Apply liquidity reserves to valuations to produce realistic P&L figures. 4. Reporting & Communication * Prepare and distribute clear daily risk reports to the senior management, covering VaR, key exposures, margin utilization, and limit status. * Conduct regular reviews with traders on risk positioning, proactively flag elevated risks or limit concerns, and discuss stress test results and margin optimization opportunities. ## Qualifications * Strong proficiency in Value at Risk (VaR) methodologies and risk system management. * Hands-on experience with futures margining (especially SPAN), FCM reconciliation, and margin optimization tools. * Practical understanding of futures markets, including spreads and basis trading. * Solid knowledge of listed options Greeks and equity portfolio risk. * Familiarity with P&L attribution concepts and how they relate to risk monitoring. * 2–5 years of relevant experience in risk at a prop trading firm, hedge fund, or futures clearing organization. * Advanced Excel skills; Python or SQL experience is a plus. * Bachelor's degree or higher in Finance, Mathematics, Statistics, Engineering, or a related quantitative field. CFA or FRM is preferred but not required. ## Additional Information What we offer: * Experience a modern international technology company without the burden of bureaucracy. * Collaborate with industry-leading professionals, including former employees of Tower, DRW, Broadridge, Credit Suisse, and more. * Enjoy excellent opportunities for professional growth and self-realization. * Work remotely from anywhere in the world with a flexible schedule. * Receive compensation for health insurance, sports activities, and non-professional training.", "summaryDescription" : "Risk Analyst at BHFT. Skills: Risk management, VaR methodologies, Futures margining. Operate and maintain VaR systems daily. Capture positions and strategies", "postedDate" : "2026-06-15T07:38:31.000", "createdAt" : "2026-06-15T21:32:17.448", "lastUpdated" : "2026-06-16T02:36:53.987", "ingestTimestamp" : "2026-06-15T21:32:17.448", "mongoId" : "6a304f0df292fd229cee4ad6", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Futures margining", "Listed options Greeks", "Equity portfolio risk", "Risk management", "VaR methodologies", "P&L attribution", "Liquidity reserve modeling", "Margin reconciliation", "Scenario analysis", "Algorithmic trading", "Proprietary trading", "Futures markets", "Listed options", "FCM reconciliation", "CFA", "FRM", "Risk systems", "Margin tools", "Excel", "Python", "SQL" ], "skillCount" : 21, "jobCategory" : "finance", "jobSubcategory" : "accounting", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 687.2177, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.98 }, { "id" : "6a307f51f292fd229c057e83", "title" : "Agency and Third Party Ecosystem Strategy Lead, Product GTM, EMEA", "salary" : { "min" : 115000.0, "max" : 175000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Lead Agency and Third Party Ecosystem Strategy Lead in London, UK, adjusted for seniority and industry." }, "location" : "[London, UK, [123 Buckingham Palace Rd, London SW1W 9SH, UK], London, SW1W 9SH, England, GB]", "locations" : [ "[London, UK, [123 Buckingham Palace Rd, London SW1W 9SH, UK], London, SW1W 9SH, England, GB]" ], "timestamp" : "2026-06-16T10:10:57.129", "fingerprint" : "2dc65f08b18215b2ddeb7495d80c568c9184a257a1bfac41da2fca737f453af3", "source" : "google", "language" : "en", "externalId" : "114546460011176646", "industryFunction" : { }, "structuredLocations" : [ { "city" : "London", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "51.5074456,-0.1277653" } ], "locationText" : "London, United Kingdom", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "coreResponsibilities" : "Develop product strategy, Define product roadmap, Write user stories, Collaborate cross-functionally", "teamCollaboration" : "Cross-functional teams", "remoteFriendly" : false, "summaryDescription" : "Agency and Third Party Ecosystem Strategy Lead, Product GTM, EMEA. Develop product strategy. Define product roadmap", "postedDate" : "2026-06-16T01:49:37.533", "createdAt" : "2026-06-16T01:49:37.533", "lastUpdated" : "2026-06-16T10:10:57.129", "ingestTimestamp" : "2026-06-16T01:49:37.533", "mongoId" : "6a307f51f292fd229c057e83", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "product", "jobSubcategory" : "product_management", "seniorityLevel" : "Lead", "dataQualityScore" : 0.5555556, "_score" : 659.3134, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca13274d8ee00a09a4b5f", "title" : "Cybersecurity Analyst", "company" : "Level", "industry" : "Corporate", "salary" : { "min" : 85000.0, "max" : 115000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Analyst in Austin, United States, adjusted for the Education industry and company size." }, "location" : "Austin", "locations" : [ "Austin" ], "certifications" : [ "CompTIA Security+", "CySA+", "Microsoft Certified: Security Operations Analyst Associate", "Azure Security Engineer Associate", "CEH", "GIAC GSEC", "GIAC GCIA", "GIAC GCIH" ], "timestamp" : "2026-06-15T05:23:45.000", "fingerprint" : "c34b92369538dc90b549740abdc4c0b596f06d245e039dd634669205c40fec2e", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/level/b19529e9-60a7-4e0d-83cd-5ceb5aa2e1a9/application", "externalId" : "b19529e9-60a7-4e0d-83cd-5ceb5aa2e1a9", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 3, "experienceMaxYears" : 5, "technicalSkills" : "SIEM, EDR, Network monitoring, TCP/IP, Firewalls, DNS, VPNs, IDS/IPS, MDM, RBAC, IAM, Zero Trust, Azure, AWS, GCP, DevSecOps, CI/CD", "professionalSkills" : [ "Threat hunting", "Incident response", "Vulnerability management", "Compliance assessment", "Risk management", "Security audits" ], "hardSkillsList" : [ "Security monitoring", "Log analysis", "Threat detection", "Endpoint security", "Network traffic analysis", "Cloud security monitoring", "Vulnerability scanning", "Remediation tracking" ], "hardSkills" : [ { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Endpoint security", "level" : "intermediate" }, { "name" : "Network traffic analysis", "level" : "intermediate" }, { "name" : "Cloud security monitoring", "level" : "intermediate" }, { "name" : "Vulnerability scanning", "level" : "intermediate" }, { "name" : "Remediation tracking", "level" : "intermediate" } ], "majorSkills" : "Security monitoring, Threat detection, Incident response, Endpoint security", "majorSkillsList" : [ "Security monitoring", "Threat detection", "Incident response", "Endpoint security" ], "coreResponsibilities" : "Monitor security alerts, Analyze security events, Investigate security incidents, Investigate anomalies, Investigate potential threats, Tune detection rules, Maintain detection rules, Tune alerts, Maintain alerts, Tune dashboards, Maintain dashboards, Conduct threat hunting, Identify indicators of compromise, Identify attacker TTPs, Participate incident response, Contain incidents, Eradicate incidents, Document timelines, Document remediation actions, Administer endpoint security tools, Support MDM operations, Manage identity controls, Manage access controls, Enforce RBAC policies, Conduct access reviews, Monitor network traffic, Monitor logs, Assist maintaining firewall rules, Assist maintaining network segmentation, Support Zero Trust implementation, Support least-privilege enforcement, Monitor cloud environments, Identify misconfigurations, Identify policy violations, Assist vulnerability scans, Assist remediation tracking, Assist compliance assessments, Collaborate development teams, Collaborate IT ops teams, Integrate security CI/CD pipelines", "teamCollaboration" : "Security team; Development teams; IT ops teams", "domainKnowledge" : "Network security fundamentals; Zero Trust concepts; DevSecOps principles; NIST CSF; SOC 2; CIS Controls", "domainList" : [ "network-security-fundamentals", "zero-trust-concepts", "devsecops-principles", "nist-csf", "soc-2", "cis-controls" ], "domainSpecificKnowledge" : [ "Network security fundamentals", "Zero Trust concepts", "DevSecOps principles", "NIST CSF", "SOC 2", "CIS Controls" ], "toolProficiency" : [ "SIEM platforms", "EDR platforms", "Antivirus platforms", "MDM platforms", "Firewall rules" ], "documentationSkills" : "IR playbooks; Runbooks; Escalation procedures", "problemSolvingSkills" : "Problem-solving skills", "specialRequirements" : "Based in Austin, TX, Willing to relocate", "qualificationsBasic" : "3-5 years cybersecurity analyst experience, Solid security monitoring knowledge, Solid log analysis knowledge, Solid SIEM platforms knowledge, Experience incident response, Working knowledge network security, Hands-on endpoint security experience, Hands-on EDR tools experience, Experience MDM platforms, Understanding RBAC principles, Understanding IAM principles, Familiarity Zero Trust concepts, Basic cloud security knowledge, Familiarity DevSecOps principles, Familiarity secure SDLC practices, Analytical skills, Problem-solving skills, Exceptional attention to detail", "qualificationsPreferred" : "CompTIA Security+ certification, CySA+ certification, Microsoft Certified: Security Operations Analyst Associate, Azure Security Engineer Associate, CEH certification, GIAC GSEC certification, GIAC GCIA certification, GIAC GCIH certification", "workSiteFlexibility" : "Onsite", "rawDescription" : "Level is a learning technology company dedicated to helping students build real academic and life skills with confidence and joy. We combine proven curriculum principles with world class interactive design to make meaningful practice something students want to come back to, not something they struggle through. We support what teachers, schools, and parents are already doing by increasing student engagement with high quality, standards aligned practice that reinforces classroom learning. That's why we're building: For students: Rewarding and motivating learning experiences that meet students where they are to build real academic proficiency. For educators: Tools that fit naturally into instruction and help students stay engaged while reducing teacher workload. For parents: Activities that help your kid catch up or get ahead, build confidence, and minimize homework battles, whether learning at school or at home. We are committed to helping every person maximize their potential and live a life of meaning. It's a difficult problem that requires brilliant people and tremendous effort over time. Level is looking for a skilled and motivated Cybersecurity Analyst to join our security team and help protect the organization's systems, networks, and data from evolving cyber threats. This is a hands-on technical role that requires a strong foundation in security monitoring, threat detection, incident response, and endpoint security. Reporting to the Director of Cybersecurity, this analyst will be a key contributor to day-to-day security operations, working across network security, cloud environments, and endpoint management tools to identify risks, respond to incidents, and continuously improve the organization's security posture. What You Will Do: - Monitor and analyze security alerts and events across SIEM, EDR, and network monitoring platforms - Investigate security incidents, anomalies, and potential threats to determine scope and impact - Tune and maintain detection rules, alerts, and dashboards to reduce noise and improve fidelity - Conduct threat hunting to proactively identify indicators of compromise (IOCs) and attacker TTPs - Participate in incident response including containment, eradication, and recovery; document timelines and remediation actions - Assist in developing and maintaining IR playbooks, runbooks, and escalation procedures - Administer endpoint security tools including EDR/antivirus platforms and support MDM operations - Manage identity and access controls, enforce RBAC policies, and conduct access reviews - Monitor network traffic and logs for suspicious activity; assist in maintaining firewall rules and network segmentation - Support Zero Trust implementation efforts and least-privilege enforcement - Monitor cloud environments (Azure, AWS, or GCP) for misconfigurations and policy violations - Assist with vulnerability scans, remediation tracking, and compliance assessments (NIST CSF, SOC 2, CIS Controls) - Collaborate with development and IT ops teams to integrate security into CI/CD pipelines (DevSecOps) - Assist with third-party risk management and security audits Qualifications Need to Have: - 3-5 years of hands-on experience in a cybersecurity analyst, SOC analyst, or related technical security role - Solid understanding of security monitoring, log analysis, and SIEM platforms - Experience participating in incident response activities, including investigation and remediation - Working knowledge of network security fundamentals: TCP/IP, firewalls, DNS, VPNs, IDS/IPS - Hands-on experience with endpoint security platforms and EDR tools - Experience with MDM platforms for device management and policy enforcement - Understanding of RBAC and IAM principles in enterprise environments - Familiarity with Zero Trust concepts and practical enterprise application - Basic cloud security knowledge in at least one of Azure, AWS, or GCP - Familiarity with DevSecOps principles and secure SDLC practices - Strong analytical and problem-solving skills with exceptional attention to detail - Based in Austin, TX or willing to relocate prior to start date Nice to Have: - CompTIA Security+ (strongly preferred), CySA+, or equivalent certification - Microsoft Certified: Security Operations Analyst Associate (SC-200) or Azure Security Engineer Associate (AZ-500) - CEH, GIAC GSEC, GCIA, or GCIH", "summaryDescription" : "Cybersecurity Analyst at Level. Skills: Security monitoring, Threat detection, Incident response, Endpoint security. Monitor security alerts. Analyze security events", "createdAt" : "2026-06-14T04:08:21.356", "lastUpdated" : "2026-06-15T05:23:45.000", "ingestTimestamp" : "2026-06-14T04:08:21.356", "mongoId" : "6a2ca13274d8ee00a09a4b5f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 85000, "salaryAnnualMax" : 115000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Security monitoring", "Log analysis", "Threat detection", "Endpoint security", "Network traffic analysis", "Cloud security monitoring", "Vulnerability scanning", "Remediation tracking", "Incident response", "Threat hunting", "Vulnerability management", "Compliance assessment", "Risk management", "Security audits", "Network security fundamentals", "Zero Trust concepts", "DevSecOps principles", "NIST CSF", "SOC 2", "CIS Controls", "CompTIA Security+", "CySA+", "Microsoft Certified: Security Operations Analyst Associate", "Azure Security Engineer Associate", "CEH", "GIAC GSEC", "GIAC GCIA", "GIAC GCIH", "SIEM platforms", "EDR platforms", "Antivirus platforms", "MDM platforms", "Firewall rules" ], "skillCount" : 33, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 652.8516, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Education", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c7f5174d8ee00a0955241", "title" : "Staff Product Manager, AI Governance & Supply Chain Integration Risk", "company" : "Obsidian Security", "industry" : "Cybersecurity", "salary" : { "min" : 105000.0, "max" : 150000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Staff Product Manager in the UK SaaS industry, adjusted for remote work and company size." }, "location" : "United Kingdom remote ", "locations" : [ "United Kingdom remote" ], "timestamp" : "2026-06-16T05:22:11.197", "fingerprint" : "bc05896ddc668a13f767a679b5572238d6ea8d103794614be1ae67df9b6251e1", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/obsidiansecurity/jobs/5253216008", "externalId" : "5253216008", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United Kingdom", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "United Kingdom", "employmentType" : "FULL_TIME", "experienceMinYears" : 7, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "APIs, Data models, Integrations, Identity/access systems, Event data, Permissions, Enterprise architecture", "professionalSkills" : [ "Product strategy", "Roadmap planning", "Risk assessment", "Data analysis", "Prioritization", "Tradeoff analysis" ], "hardSkillsList" : [ "Risk scoring", "Product requirements" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Risk scoring", "level" : "intermediate" }, { "name" : "Product requirements", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "AI Governance, SaaS Risk, Supply Chain Risk, Third-party risk", "majorSkillsList" : [ "AI Governance", "SaaS Risk", "Supply Chain Risk", "Third-party risk" ], "coreResponsibilities" : "Own product strategy and roadmap for Supply Chain, Focus on customer outcomes and business impact, Identify customer problems related to SaaS supply chain, Identify third-party access problems, Identify AI enablement problems, Identify agentic capabilities problems, Identify data exposure problems, Identify governance gaps, Define success in terms of outcomes, Translate customer problems into product requirements, Translate desired outcomes into product requirements, Translate customer problems into roadmap priorities, Translate desired outcomes into roadmap priorities, Translate customer problems into success metrics, Translate desired outcomes into success metrics, Partner with Engineering on solution direction, Partner with Engineering on technical tradeoffs, Partner with Engineering on sequencing, Partner with Engineering on data models, Partner with Engineering on integrations, Partner with Engineering on risk scoring, Partner with Engineering on workflows, Work with Design to create understandable experiences, Work with Design to create actionable experiences, Partner with Product Marketing on positioning, Partner with Sales on positioning, Partner with Solutions Engineering on positioning, Partner with Customer Success on positioning, Partner with Support on positioning, Partner with Product Marketing on launch readiness, Partner with Sales on launch readiness, Partner with Solutions Engineering on launch readiness, Partner with Customer Success on launch readiness, Partner with Support on launch readiness, Partner with Product Marketing on field enablement, Partner with Sales on field enablement, Partner with Solutions Engineering on field enablement, Partner with Customer Success on field enablement, Partner with Support on field enablement, Partner with Product Marketing on adoption, Partner with Sales on adoption, Partner with Solutions Engineering on adoption, Partner with Customer Success on adoption, Partner with Support on adoption, Partner with Product Marketing on feedback loops, Partner with Sales on feedback loops, Partner with Solutions Engineering on feedback loops, Partner with Customer Success on feedback loops, Partner with Support on feedback loops, Stay close to customer signals around SaaS AI, Stay close to customer signals around AI governance, Stay close to customer signals around agentic workflows, Stay close to customer signals around third-party risk, Stay close to customer signals around identity risk, Stay close to customer signals around data exposure, Stay close to market signals around SaaS AI, Stay close to market signals around AI governance, Stay close to market signals around agentic workflows, Stay close to market signals around third-party risk, Stay close to market signals around identity risk, Stay close to market signals around data exposure, Drive cross-functional alignment, Make tradeoffs visible, Push decisions forward in ambiguous situations, Own outcomes beyond launch, Measure whether work is landing, Learn from customer feedback, Adjust based on results", "teamCollaboration" : "Cross-functional teams; Engineering; Design; Product Marketing; Sales; Solutions Engineering; Customer Success; Support; Leadership", "projectManagementSkills" : [ "Roadmap planning", "Prioritization" ], "domainKnowledge" : "SaaS security; AI governance; Supply chain risk; Third-party risk; Agentic workflows; Data exposure; Identity risk; SaaS AI adoption", "domainList" : [ "saas-security", "ai-governance", "supply-chain-risk", "third-party-risk", "agentic-workflows", "data-exposure", "identity-risk", "saas-ai-adoption" ], "domainSpecificKnowledge" : [ "SaaS security", "AI governance", "Supply chain risk", "Third-party risk", "Agentic workflows", "Data exposure", "Identity risk", "SaaS AI adoption" ], "communicationSkills" : "Written communication; Verbal communication", "specialRequirements" : "Collaborate across time zones", "outcomesObjectives" : "Reduce unknown third-party risk; Understand where AI capabilities are enabled; Understand where agentic capabilities are enabled; Prioritize what matters; Make risk explainable; Help teams take action; Risk reduction; Prioritization quality; Adoption; Remediation progress; Customer value; Revenue impact", "qualificationsBasic" : "7+ years Product Management experience, B2B SaaS, cybersecurity, risk, compliance, data, platform, or enterprise software experience, Track record of defining customer problems, desired outcomes, success metrics, and product strategies, Experience owning a product area from strategy through execution, launch, adoption, and iteration, Technical fluency with Engineering on APIs, data models, integrations, identity/access systems, event data, permissions, and enterprise architecture, Customer and business judgment, Ability to understand emerging customer problems in AI governance, SaaS risk, data access, and agentic workflows, Proven ability to lead cross-functional teams without formal authority, Excellent written and verbal communication skills, Based in the United Kingdom, Ability to collaborate across UK, European, and US time zones", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Obsidian Security is the leading SaaS security platform, trusted by global enterprises like Snowflake, T-Mobile, and Algolia. We protect 200+ organizations across North America, Europe, the Middle East, Southeast Asia, Australia, and New Zealand, including many of the world’s largest Fortune 1000 and Global 2000 companies. Founded in 2017 and backed by top investors like Greylock, Obsidian was built to close a critical gap: securing SaaS apps where business happens—Microsoft 365, Salesforce, and hundreds more. The company does this by offering a complete SaaS security platform to reduce risk, detect and respond to threats, and prevent breaches at the source. Obsidian was built by leaders who redefined endpoint and identity security at CrowdStrike, Okta, Cylance, and Carbon Black. Now, they’re transforming how SaaS is secured. With AI driving rapid SaaS growth and complexity, agentic AI tools gain privileged access to sensitive data through integrations, creating new risks most security tools miss. Obsidian uniquely detects anomalous OAuth token activity and manages integration risks. Major announcements are on the horizon. Recognizing that SaaS security needs to evolve, Obsidian enables growing organizations to start with a lightweight, prevention-focused browser extension and expand coverage over time. With global momentum, a growing partner ecosystem including SentinelOne, Databricks, and Google Cloud, and a major fundraise ahead, Obsidian is scaling rapidly toward long-term growth and IPO readiness. Obsidian Security is looking for a Staff Product Manager, AI Governance & Supply Chain Integration Risk to lead product strategy and execution for how customers understand, prioritize, and reduce risk across their SaaS and third-party ecosystem. We’re looking for a PM who thinks beyond product features and focuses on the key outcomes customers care about most: reducing unknown third-party risk, understanding where AI and agentic capabilities are enabled, prioritizing what matters, making risk explainable, and helping teams take action. As SaaS vendors rapidly add AI and agentic capabilities into their applications, enterprises are struggling to answer basic but critical questions: Is AI enabled in our tenants? What does it do? What data can it access? Who can use it? Which agents, apps, or integrations can act on behalf of users? Is any of this governed consistently? This role is not about managing a feature backlog. It is about identifying the most important customer and business problems, defining the outcomes we need to drive, and partnering with Engineering, Design, Product Marketing, Sales, Solutions Engineering, Customer Success, and leadership to deliver measurable customer value. This role is based in the United Kingdom. Responsibilities Own the product strategy and roadmap for Supply Chain Risk & AI Governance, with a clear focus on customer outcomes and business impact. Identify the most important customer problems related to SaaS supply chain risk, third-party access, AI enablement, agentic capabilities, data exposure, and governance gaps. Define success in terms of outcomes such as risk reduction, prioritization quality, adoption, remediation progress, customer value, and revenue impact. Translate customer problems and desired outcomes into clear product requirements, roadmap priorities, and success metrics. Partner deeply with Engineering on solution direction, technical tradeoffs, sequencing, data models, integrations, risk scoring, and workflows. Work with Design to create experiences that make complex SaaS, identity, AI, agent, data access, and third-party risk relationships understandable and actionable. Partner with Product Marketing, Sales, Solutions Engineering, Customer Success, and Support on positioning, launch readiness, field enablement, adoption, and feedback loops. Stay close to customer and market signals around SaaS AI adoption, AI governance, agentic workflows, third-party risk, identity risk, and data exposure. Drive cross-functional alignment, make tradeoffs visible, and push decisions forward in ambiguous situations. Own outcomes beyond launch by measuring whether the work is landing, learning from customer feedback, and adjusting based on results. Required qualifications 7+ years of Product Management experience, ideally in B2B SaaS, cybersecurity, risk, compliance, data, platform, or enterprise software. Strong track record of thinking beyond features to define customer problems, desired outcomes, success metrics, and product strategies that drive measurable impact. Experience owning a product area from strategy through execution, launch, adoption, and iteration. Strong technical fluency, including comfort working with Engineering on APIs, data models, integrations, identity/access systems, event data, permissions, and enterprise architecture. Strong customer and business judgment, with the ability to prioritize high-impact work and make clear tradeoffs. Ability to understand emerging customer problems in AI governance, SaaS risk, data access, and agentic workflows. Proven ability to lead cross-functional teams without formal authority. Excellent written and verbal communication skills. Based in the United Kingdom, with ability to collaborate across UK, European, and US time zones.", "summaryDescription" : "Staff Product Manager, AI Governance & Supply Chain Integration Risk at Obsidian Security. Skills: AI Governance, SaaS Risk, Supply Chain Risk, Third-party risk. Own product strategy and roadmap for Supply Chain. Focus on customer outcomes and business impact", "postedDate" : "2026-06-14T19:20:43.988", "createdAt" : "2026-06-14T19:20:43.988", "lastUpdated" : "2026-06-16T05:22:11.197", "ingestTimestamp" : "2026-06-14T19:20:43.988", "mongoId" : "6a2c7f5174d8ee00a0955241", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Risk scoring", "Product requirements", "Leadership", "AI Governance", "SaaS Risk", "Supply Chain Risk", "Third-party risk", "Product strategy", "Roadmap planning", "Risk assessment", "Data analysis", "Prioritization", "Tradeoff analysis", "SaaS security", "AI governance", "Supply chain risk", "Agentic workflows", "Data exposure", "Identity risk", "SaaS AI adoption" ], "skillCount" : 20, "jobCategory" : "product", "jobSubcategory" : "product_management", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 651.8182, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "SaaS", "llmIndustryConfidence" : 0.97 }, { "id" : "6a305191f292fd229cf0245a", "title" : "Cybersecurity Policy Developer", "company" : "GovTech", "industry" : "Government", "salary" : { "min" : 85000.0, "max" : 130000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Policy Developer in Singapore, adjusted for the government industry." }, "location" : "PPS Policy, Plans and Strategy Cluster", "locations" : [ "PPS Policy", "Plans and Strategy Cluster" ], "certifications" : [ "CISSP", "CISA" ], "timestamp" : "2026-06-16T08:37:51.072", "fingerprint" : "d9ba5b201cb970ca566d20fe6d2bff294a0b7b765a0244293d4cacfd5b17eaff", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://jobs.careers.gov.sg/jobs/greenhouse/4004295201?gh_jid=4004295201", "externalId" : "4004295201", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "minimumEducation" : "Bachelor's", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "AWS, Azure, Google, DevSecOps", "professionalSkills" : [ "Policy compliance", "Governance", "Risk assessment", "Solutioning", "Network design", "Application development", "Project management", "IT audit" ], "hardSkillsList" : [ "Information security", "Cryptography" ], "hardSkills" : [ { "name" : "Information security", "level" : "intermediate" }, { "name" : "Cryptography", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity policy, Risk management, Policy development", "majorSkillsList" : [ "Cybersecurity policy", "Risk management", "Policy development" ], "coreResponsibilities" : "Lead formulation of ICT Security policies, Support formulation of ICT Security policies, Develop policies, Assess policies, Review policies, Govern cyber activities, Promote awareness of security issues, Communicate security principles, Address policy queries, Assess exemption requests, Identify mitigation plans, Qualify mitigation plans, Quantify mitigation plans, Agree mitigation plans, Measure security health posture, Provide analytical studies, Provide trending of key risk indicators, Support security projects, Support system vulnerability assessments, Support audits of cyber programs, Find creative ways to address challenges", "teamCollaboration" : "Collaboration with stakeholders; Work with operational teams; Work with implementation teams", "projectManagementSkills" : [ "Project management" ], "domainKnowledge" : "Internet of Things; Hardware design protection; Mobile application management; Device management; Cloud hosting design; Cloud hosting implementation; CI/CD pipelines", "domainList" : [ "internet-of-things", "hardware-design-protection", "mobile-application-management", "device-management", "cloud-hosting-design", "cloud-hosting-implementation", "ci-cd-pipelines" ], "domainSpecificKnowledge" : [ "Internet of Things", "Hardware design protection", "Mobile application management", "Device management", "Cloud hosting design", "Cloud hosting implementation", "CI/CD pipelines" ], "communicationSkills" : "Communicate security principles", "innovationCreativity" : "Find creative ways", "problemSolvingSkills" : "Address complex challenges", "qualificationsBasic" : "3 years of relevant IT or infocomm security consulting, 3 years of project management, 3 years of IT audit and governance, Knowledge of IT security management principles and practices, Knowledge and experience of IM8/NIST/IS0 27001/2 policies /standards, Singapore Citizen only", "qualificationsPreferred" : "CISSP certification, CISA certification", "remoteFriendly" : false, "rawDescription" : "The Government Technology Agency (GovTech) aims to transform the delivery of Government digital services and products by taking an \"outside-in\" view, putting citizens and businesses at the heart of everything we do. We also develop the Smart Nation infrastructure and applications and facilitate collaboration with citizens and businesses to co-develop technologies. Join us as we support Singapore’s vision of building a Smart Nation - a nation of possibilities empowered through info-communications technology and related engineering. Do you want to apply your skills, knowledge and energy to implement cutting-edge infocomm technology and digital solutions that will change the lives of Singaporeans and the public? In GovTech, you can! The Cyber Security Group (CSG) is the cybersecurity arm of GovTech, committed to creating a safe and secure digital government. You will be part of the Policy Development team to formulate cybersecurity policy standards and guidelines. Job Description: Lead or Support the formulation of progressive ICT Security policies to ensure continuous and relevant protection of Government ICT assets Develop, assess and review existing and proposed policies in collaboration with stakeholders to govern cyber activities Promote awareness of security issues and communicate security principles among management and stakeholders Address policy queries, and assess exemption requests to ascertain relevance of preventive and detective controls to reduce risk of exposure Work with the operational and implementation teams to identify, qualify, quantify and agree proposed mitigation plans against any identified risks and that those risks have been captured with mitigation plans. Conduct the measurement of security health posture of Agencies and provide analytical studies and trending of key risk indicators Support limited scale security projects, system vulnerability assessments or audits of cyber programs if required Find creative ways to take on and address complex information security challenges across a variety of existing and emerging technologies and digital environments. Requirements: Degree in Infocomm Security, Computer Science, Computer/Electronics Engineering or Information Technology Possess CISSP and/or CISA certifications would be an advantage At least 3 years’ of relevant IT or inforcomm security consulting, project management, and/or IT audit and governance Knowledge of IT security management principles and practices Experience in one or more of the following areas will be an advantage; policy compliance and governance, risk assessment, solutioning, network design, application development, Internet of Things, cryptography, hardware design protection, mobile application/device management, cloud hosting design and implementation in AWS/Azure/Google, DevSecOps consulting, design and implementation of CI/CD pipelines, etc. Knowledge and experience of IM8/NIST/IS0 27001/2 policies /standards Singapore Citizen only", "summaryDescription" : "Cybersecurity Policy Developer at GovTech. Skills: Cybersecurity policy, Risk management, Policy development. Lead formulation of ICT Security policies. Support formulation of ICT Security policies", "postedDate" : "2026-06-15T23:17:53.254", "createdAt" : "2026-06-15T23:17:53.254", "lastUpdated" : "2026-06-16T08:37:51.072", "ingestTimestamp" : "2026-06-15T23:17:53.254", "mongoId" : "6a305191f292fd229cf0245a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Information security", "Cryptography", "Cybersecurity policy", "Risk management", "Policy development", "Policy compliance", "Governance", "Risk assessment", "Solutioning", "Network design", "Application development", "Project management", "IT audit", "Internet of Things", "Hardware design protection", "Mobile application management", "Device management", "Cloud hosting design", "Cloud hosting implementation", "CI/CD pipelines", "CISSP", "CISA" ], "skillCount" : 22, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 642.37897, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca18874d8ee00a09a5cad", "title" : "Cybersecurity / Network Analyst", "company" : "Nexxis Solutions", "location" : "Annapolis Junction, MD", "locations" : [ "Annapolis Junction", "MD" ], "timestamp" : "2026-06-15T06:47:27.981", "fingerprint" : "a7421207a5114f60aec4e848fe483d001ef28985bdadeb0329993cdefb6e9855", "source" : "breezyhr", "applyUrl" : "https://nexxis-solutions.breezy.hr/p/a6d7fe471958-cybersecurity-network-analyst-general-application-clearance-required", "externalId" : "a6d7fe471958", "industryFunction" : { }, "structuredLocations" : [ { "city" : "annapolis", "state" : "maryland", "country" : "United States", "continent" : "north america", "source" : "locations-index", "geo" : "38.97859,-76.49184" } ], "locationText" : "Annapolis Junction, MD", "employmentType" : "FULL_TIME", "technicalSkills" : "Cybersecurity, Data analysis, Network analysis", "hardSkillsList" : [ "Clearance Required" ], "hardSkills" : [ { "name" : "Clearance Required", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity, Network Analysis, Vulnerability Analysis", "majorSkillsList" : [ "Cybersecurity, Network Analysis, Vulnerability Analysis" ], "coreResponsibilities" : "Provide cybersecurity, data and network analysis expertise to mission.", "specialRequirements" : "Clearance Required", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Nexxis Solutions is supporting current and near-term efforts to provide cybersecurity, data and network analysis expertise to mission. We are currently looking for cleared professionals in the following areas: Network Analysts (Cyber, Forensic, Signals, Exploitation etc) Vulnerability Analysts Da", "summaryDescription" : "Cybersecurity / Network Analyst at Nexxis Solutions. Skills: Cybersecurity, Network Analysis, Vulnerability Analysis. Provide cybersecurity, data and network analysis expertise to mission.", "createdAt" : "2026-06-14T18:55:45.224", "lastUpdated" : "2026-06-15T06:47:27.981", "ingestTimestamp" : "2026-06-14T18:55:45.224", "mongoId" : "6a2ca18874d8ee00a09a5cad", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "hasSalary" : false, "allSkills" : [ "Clearance Required", "Cybersecurity, Network Analysis, Vulnerability Analysis" ], "skillCount" : 2, "jobCategory" : "engineering", "jobSubcategory" : "infrastructure", "seniorityLevel" : "Mid", "dataQualityScore" : 0.6666667, "_score" : 637.8282, "hasLocation" : true, "hasGeo" : true, "llmIndustryConfidence" : 0.0 }, { "id" : "6a25b38a74d8ee00a01bcfba", "title" : "VP2 Technology Risk Governance & Third Party, TOGA", "company" : "United Overseas Bank Ltd", "industry" : "Financial Services", "salary" : { "min" : 220000.0, "max" : 350000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a VP-level Technology Risk Governance & Third Party role in Singapore's banking industry, adjusted for executive seniority and company size." }, "location" : "Singapore", "locations" : [ "Singapore" ], "certifications" : [ "CRISC", "FRM", "CA", "CISA", "CISM", "CISSP" ], "timestamp" : "2026-06-12T03:23:59.766", "fingerprint" : "1120d86ef7e4643b5a72ddec2299d53a9edb4775a7e2d60cabb13db1d83dc03a", "source" : "workday", "language" : "en", "applyUrl" : "https://uobgroup.wd3.myworkdayjobs.com/UOBExternal/job/Central-Region-City-Area/VP2-Technology-Risk-Governance---Third-Party--TOGA_JR85522-1", "externalId" : "JR85522", "industryFunction" : { }, "locationPoint" : "1.3521,103.8198", "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 10, "experienceMaxYears" : 99, "experienceLevel" : "Executive", "technicalSkills" : "MS Word, MS Excel, PowerPoint", "professionalSkills" : [ "Risk governance", "Third-party risk", "Technology risk", "Risk management", "Control assessment", "Regulatory requirements" ], "hardSkillsList" : [ "Risk analysis", "Reporting", "Action plans" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Risk analysis", "level" : "intermediate" }, { "name" : "Reporting", "level" : "intermediate" }, { "name" : "Action plans", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Technology risk governance, Third-party risk management, Risk oversight", "majorSkillsList" : [ "Technology risk governance", "Third-party risk management", "Risk oversight" ], "coreResponsibilities" : "Drive first-line Technology risk governance, Provide governance oversight on T&O third-party risks, Drive adherence to risk management framework, Drive adherence to third-party risk framework, Strengthen risk management capabilities, Strengthen governance oversight capabilities, Challenge teams on risk matters, Advise teams on risk matters, Ensure adequate resolution of risk issues, Support senior management in risk oversight, Support senior management in governance, Analyze key risk issues, Report key risk issues, Facilitate discussions during governance committee meetings, Ensure timely escalation of risk issues, Ensure timely escalation of incidents, Develop action plans for risks, Report to Second Line, Ensure timely closure of actions, Review artefacts for issue resolution, Function as liaison with regulators, Respond to regulator queries, Operationalize regulatory requirements, Provide support to foster risk culture, Provide training to foster risk culture, Develop collaborative relationships, Foster open communication on risk governance, Lead team effectively, Mentor team effectively, Achieve outcomes, Build high-performing team, Build motivated team", "teamCollaboration" : "Technology and Operations teams; Senior management; Regulators; Cross-functional teams", "domainKnowledge" : "Technology risk management; Third-party risk management; Banking operations; Regulatory developments", "domainList" : [ "technology-risk-management", "third-party-risk-management", "banking-operations", "regulatory-developments" ], "domainSpecificKnowledge" : [ "Technology risk management", "Third-party risk management", "Banking operations", "Regulatory developments" ], "communicationSkills" : "Presentation skills; Influencing skills", "outcomesObjectives" : "Achieve outcomes; Build high-performing team; Build motivated team", "qualificationsBasic" : "13 years working experience, 7 years technology risk management, 7 years information risk management, 7 years audit, 7 years compliance, 7 years third-party risk management, University degree in IT, University degree in computing, University degree in Information Systems, University degree in data analytics, University degree in artificial intelligence, University degree in risk management, Experience managing technology controls, Experience assessing technology controls, Experience managing third-party risks, Experience assessing third-party risks, Experience in banking environment", "qualificationsPreferred" : "CRISC certification, FRM certification, CA certification, CISA certification, CISM certification, CISSP certification", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Company: 1011 United Overseas Bank Ltd **About UOB** United Overseas Bank Limited (UOB) is a leading bank in Asia with a global network of more than 500 branches and offices in 19 countries and territories in Asia Pacific, Europe and North America. In Asia, we operate through our head office in Singapore and banking subsidiaries in China, Indonesia, Malaysia and Thailand, as well as branches and offices. Our history spans more than 80 years. Over this time, we have been guided by our values – Honorable, Enterprising, United and Committed. This means we always strive to do what is right, build for the future, work as one team and pursue long-term success. It is how we work, consistently, be it towards the company, our colleagues or our customers. **Job Description** The Group Technology and Operations (T&O) Risk Governance & Assurance (TOGA) function, as a first line of defense, works closely with T&O leadership to identify, assess, mitigate and manage risks and ensure the existence of appropriate controls. This team works across the T&O functions across the Group to ensure transparency and understanding of operating issues, risks and opportunities, including the sound risk governance and risk oversight of T&O activities. Also, the function monitors the industry, market and regulatory developments to anticipate changes and help ensure appropriate alignment of banking operations and technology risk management strategies and policies with potential impact assessment. Additionally, the team conducts independent assurance reviews across the T&O functions across the Group to ensure that key controls are adequately designed and are operating effectively. **Job Responsibilities** Collaborating closely with the Technology and Operations teams across the Group, the successful candidate will support the Group Head of Technology & Operations Risk Governance, to drive first-line Technology risk governance activities, including providing effective governance oversight on T&O third-party risks . This will include, but not be limited to the following: * Drive adherence by Group Technology & Operations, to the Bank’s Technology risk management and third- party risk management framework, policies & guidelines. * Strengthen risk management and governance oversight capabilities across Technology and Operations teams. Challenge and advise teams on technology and third-party risk matters, to ensure adequate resolution of risk issues, including incidents and complaints. * Support senior management in risk oversight and governance, through analysis and reporting of key risk issues/ trends, key risk indicators, and facilitate discussions during the regular governance committee meetings. * Ensure timely escalation of risk issues and incidents across the Group, for management awareness and development of action plans, and timely reporting to Second Line as required by Bank’s policies, and regulators as required by applicable regulations. Ensure timely closure of key actions set out to address risk issues, with review of artefacts to ensure issues are addressed adequately. * Function as the key liaison party with regulators on responses to queries. Ensure timely and effective operationalization of new/ existing regulatory requirements. * Provide support and training to foster strong risk culture and risk awareness within the Group. Develop effective and collaborative relationships and foster ongoing open lines of communication regarding IT and third-party risk governance across the Group. * Lead and mentor team effectively to achieve outcomes, and build a high-performing and motivated team. **Job Requirements** * Minimum of 13 years working experience with at least 7 years in any of these disciplines: technology and information risk management, audit, compliance, third-party risk management, preferably in a banking environment. Broad and deep experience in managing and/or assessing the adequacy of controls over technology system and controls in a bank. * A university degree in IT, computing, Information Systems, data analytics/ artificial intelligence, or any risk management related domain. Professional certifications like CRISC, FRM, CA, CISA, CISM, CISSP will be advantageous. * Strong leadership skills to sustain a high-performing and motivated team. * Good communication, presentation and influencing skills and able to manage stakeholders across multiple disciplines. * Excellent use of MS Word, MS Excel, PowerPoint. This is necessary for the creation of engaging reports and presentations, for senior management, executives, and stakeholders. ## **Additional Requirements** Be a Part of the UOB Family UOB is an equal opportunity employer. UOB does not discriminate on the basis of a candidate's age, race, gender, color, religion, sexual orientation, physical or mental disability, or other non-merit factors. All employment decisions at UOB are based on business needs, job requirements and qualifications. If you require any assistance or accommodations to be made for the recruitment process, please inform us when you submit your online application. Apply now and make a Difference", "summaryDescription" : "VP2 Technology Risk Governance & Third Party, TOGA at United Overseas Bank Ltd. Skills: Technology risk governance, Third-party risk management, Risk oversight. Drive first-line Technology risk governance. Provide governance oversight on T&O third-party risks", "postedDate" : "2026-06-11T09:30:01.568", "createdAt" : "2026-06-11T09:30:01.547", "lastUpdated" : "2026-06-12T03:23:59.766", "ingestTimestamp" : "2026-06-11T09:30:01.547", "mongoId" : "6a25b38a74d8ee00a01bcfba", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://uobgroup.wd3.myworkdayjobs.com/UOBExternal/job/Central-Region-City-Area/VP2-Technology-Risk-Governance---Third-Party--TOGA_JR85522-1", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Risk analysis", "Reporting", "Action plans", "Leadership", "Mentoring", "Technology risk governance", "Third-party risk management", "Risk oversight", "Risk governance", "Third-party risk", "Technology risk", "Risk management", "Control assessment", "Regulatory requirements", "Technology risk management", "Banking operations", "Regulatory developments", "CRISC", "FRM", "CA", "CISA", "CISM", "CISSP" ], "skillCount" : 23, "jobCategory" : "engineering", "seniorityLevel" : "executive", "dataQualityScore" : 1.0, "_score" : 637.72125, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services" }, { "id" : "6a2c6b2d74d8ee00a0910939", "title" : "Risk & Fund Reporting Manager", "company" : "Moonfare", "industry" : "FinTech", "salary" : { "min" : 95000.0, "max" : 135000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Manager in Financial Services in Luxembourg, Luxembourg, adjusted for seniority and industry." }, "location" : "Luxembourg, Luxembourg", "locations" : [ "Luxembourg", "Luxembourg" ], "certifications" : [ "ACCA", "CPA", "IRE", "FRM", "PRM" ], "timestamp" : "2026-06-15T04:45:42.773", "fingerprint" : "15a1fea429e30c0d5d0352caa5cc2069a116bdf27c2da9b7b9149515d5d71eac", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.moonfare.com/open-position/?gh_jid=7732176003", "externalId" : "7732176003", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Luxembourg", "country" : "Luxembourg", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "49.6112768,6.1297990" } ], "locationText" : "Luxembourg, Luxembourg", "experienceLevel" : "Manager", "technicalSkills" : "Python, R, SQL, Bloomberg Terminal, Reuters Eikon, FactSet", "professionalSkills" : [ "Risk Management", "Fund Accounting Oversight", "Fund Audit", "Technical control", "Regulatory reporting", "Audit process leadership", "Second-level controls", "Third-party oversight", "SME leadership", "Control framework maintenance", "AI-augmented fund controlling", "AI-augmented reporting", "Service Level Agreements", "Oversight framework" ], "hardSkillsList" : [ "Liquidity risk", "Stress testing", "Fund accounting", "Fee accruals", "Valuation principles", "NAV verification", "Distribution reconciliation", "Oversight log maintenance", "Data flow control", "Technical discrepancy resolution", "Internal control", "SOP maintenance", "Risk reporting", "Financial oversight" ], "hardSkills" : [ { "name" : "Liquidity risk", "level" : "intermediate" }, { "name" : "Stress testing", "level" : "intermediate" }, { "name" : "Fund accounting", "level" : "intermediate" }, { "name" : "Fee accruals", "level" : "intermediate" }, { "name" : "Valuation principles", "level" : "intermediate" }, { "name" : "NAV verification", "level" : "intermediate" }, { "name" : "Distribution reconciliation", "level" : "intermediate" }, { "name" : "Oversight log maintenance", "level" : "intermediate" }, { "name" : "Data flow control", "level" : "intermediate" }, { "name" : "Technical discrepancy resolution", "level" : "intermediate" }, { "name" : "Internal control", "level" : "intermediate" }, { "name" : "SOP maintenance", "level" : "intermediate" }, { "name" : "Risk reporting", "level" : "intermediate" }, { "name" : "Financial oversight", "level" : "intermediate" } ], "majorSkills" : "Risk Management, Fund Reporting, Regulatory Compliance, Third-Party Oversight", "majorSkillsList" : [ "Risk Management", "Fund Reporting", "Regulatory Compliance", "Third-Party Oversight" ], "coreResponsibilities" : "Maintain Risk Management Policy, Maintain risk limits, Maintain risk register, Monitor overcommitment ratios, Conduct periodic stress tests, Escalate breaches to Board, Act as AIFM's technical risk voice, Provide regular risk reporting, Escalate breaches and emerging risks, Maintain functional reporting line, Ensure Luxembourg AIFM risk framework alignment, Lead end-to-end production of AIFMD reporting, Lead end-to-end production of CSSF reporting, Lead end-to-end production of investor reporting, Lead end-to-end production of fund-level reporting, Monitor changes in regulatory standards, Monitor changes in accounting standards, Drive annual audit process, Lead relationship with external auditors, Provide technical sign-off on accounting treatments, Provide technical sign-off on fee accruals, Provide technical sign-off on valuation methodologies, Perform second-level controls over Fund Administrator, Shadow NAV, Verify management fee, Verify waterfall, Reconcile distributions, Maintain Oversight Log, Function as part of Four Eyes team, Provide independent challenge to third-party providers, Manage Service Level Agreements, Manage oversight framework with Fund Administrator, Control daily data flows, Resolve technical discrepancies, Maintain internal Control Framework, Update internal Control Framework, Partner with AI teams, Partner with R&D teams, Govern AI-augmented fund controlling tools, Govern AI-augmented fund reporting tools, Ensure AI tools grounded in regulatory reality, Ensure human-in-the-loop checkpoints for regulated outputs", "teamCollaboration" : "Working with Portfolio Manager; Coordination with Senior Risk Officer; Partner with AI teams; Partner with R&D teams; Work with engineering teams; Work with AI teams", "domainKnowledge" : "Private markets; AIFMD risk management; AIFMD reporting; CSSF reporting; SFDR disclosures; Lux GAAP; IFRS; Fund waterfall mechanics; PE valuation principles; Private Equity; Real Estate", "domainList" : [ "private-markets", "aifmd-risk-management", "aifmd-reporting", "cssf-reporting", "sfdr-disclosures", "lux-gaap", "ifrs", "fund-waterfall-mechanics", "pe-valuation-principles", "private-equity", "real-estate" ], "domainSpecificKnowledge" : [ "Private markets", "AIFMD risk management", "AIFMD reporting", "CSSF reporting", "SFDR disclosures", "Lux GAAP", "IFRS", "Fund waterfall mechanics", "PE valuation principles", "Private Equity", "Real Estate" ], "toolProficiency" : [ "Bloomberg Terminal", "Reuters Eikon", "FactSet" ], "communicationSkills" : "Board deliberations; Risk reporting; Technical sign-off; Investor communications", "documentationSkills" : "Risk Management Policy; Internal Control Framework; SOPs", "problemSolvingSkills" : "Resolve technical discrepancies; Challenge fund administrator NAV", "qualificationsBasic" : "5+ years Risk Management, Master's degree, Professionally qualified accountant, Working knowledge AIFMD risk management, Hands-on experience stress testing, Hands-on experience liquidity risk, Expert knowledge Lux GAAP, Expert knowledge IFRS, Expert knowledge fund waterfall, Expert knowledge fee accruals, Expert knowledge PE valuation, Designed or run Risk framework, Designed or run Oversight framework, Proven track record holding fund administrators, Experience working with engineering teams, Experience working with AI teams", "qualificationsPreferred" : "Risk management certifications, AI-native mindset", "rawDescription" : "Join the team rewriting the rules in private markets. Moonfare delivers what few others can: the highly sought-after funds and hidden-gem investments that go beyond what most private banks offer. Every opportunity is subjected to a ruthless vetting process; the bar is unforgivingly high. The result? Institutional-quality portfolios for investors who demand more. Our team combines finance veterans with talent from tech, consulting, law and industries you'd never expect. Headquartered in Berlin, we operate from eight offices across Europe, the US and Asia. If you're ready to build what's next in private markets, let's talk. Risk maintain the Risk Management Policy, risk limits, and risk register Monitor overcommitment ratios as a liquidity risk exposure against the limits set by the Investment Committee, conduct periodic stress tests including call coverage scenarios, escalate breaches to the Board, and act as the AIFM's technical risk voice in board deliberations, working in close coordination with the Portfolio Manager Provide regular risk reporting to the Managing Director and Board, with clear escalation of breaches and emerging risks, and maintain a functional reporting line to the Senior Risk Officer at Berlin HQ with direct escalation rights for material risk breaches, ensuring the Luxembourg AIFM's risk framework is aligned with, and where appropriate contributes to, Moonfare's Risk Management Framework, risk appetite, and consolidated risk reporting Fund Reporting & Audit Leadership Lead the end-to-end production of AIFMD, CSSF, investor, and fund-level regulatory reporting cycles, owning the accuracy of every submission before the Managing Director signs, and monitoring changes in Luxembourgish and European regulatory and accounting standards Drive the annual audit process for the Luxembourg fund range: lead the relationship with our external auditors and provide technical sign-off on accounting treatments, fee accruals, and valuation methodologies Perform rigorous second-level controls over our Fund Administrator: NAV shadowing, management fee and waterfall verification, distribution reconciliation, and maintenance of the Oversight Log of challenges and corrections Third-Party Oversight & SME Leadership Function as part of the Four Eyes team that provides the mandatory independent challenge to third-party providers, ensuring no material output from a delegate is accepted without independent verification, and manage the Service Level Agreements (SLAs) and oversight framework with the Fund Administrator, controlling daily data flows and resolving technical discrepancies Maintain and update the internal Control Framework (SOPs) for risk and financial oversight Partner with AI and R&D as the SME for risk and reporting, governing AI-augmented fund controlling and reporting tools built by the Fund Operations Services team and ensuring they are grounded in regulatory reality, with clear human-in-the-loop checkpoints for regulated outputs The Next Moonfarian: Experience: 5+ years in Risk Management within an AIFM/ManCo, Fund Accounting Oversight, Fund Audit (Big 4), or a similar technical control role within the Luxembourg Private Equity or Real Estate sector Education: Master's degree in Accounting, Finance, Risk Management, or a related field Qualifications: Professionally qualified accountant (ACCA, CPA, IRE, or equivalent). Risk management certifications (FRM, PRM) are a plus Regulatory fluency: Working knowledge of AIFMD risk management requirements (Articles 14-16 and the equivalent expectations applied at sub-threshold), AIFMD/CSSF reporting cycles (Annex IV, SFDR disclosures), and hands-on experience with stress testing and liquidity risk frameworks Technical depth: Expert knowledge of Lux GAAP, IFRS, fund waterfall mechanics, fee accruals, and PE valuation principles. You can challenge a fund administrator's NAV pack line by line Control function ownership: You have designed or run a Risk or Oversight framework, not just operated within one, and you instinctively protect the functional separation between Risk Management and Portfolio Management in every interaction Vendor and delegate oversight: Proven track record holding fund administrators to high operational standards through SLAs, oversight logs, and structured governance, without paralysing the engine Compliant creativity: You treat regulation as a design constraint to engineer around, not a wall to hide behind. You find efficient paths to regulatory accuracy at scale and earn the trust of the Fund Operations Services team by enabling what they build, not blocking it AI-native mindset: You evaluate every recurring control through the lens of \"should a human still be doing this?\" You have hands-on experience working with engineering and AI teams to translate risk and reporting logic into automated controls in a regulated context If you feel you do not meet all of the requirements, we still encourage you to apply! Invest in Yourself: Ownership and Impact: you are empowered to bring ideas, make decisions, and see your work directly contribute to Moonfare's success. Transparent Environment: we believe in open communication. You will receive regular updates on company strategy, performance against our KPIs, and key business decisions. Personal Growth: we support your development with an individual growth budget of €1,500 or 2% of your base salary (whichever is higher). Relax and Recharge: you start with 26 vacation days and receive one additional day for each year of tenure, up to a maximum of 30 days. Daily Lunch: enjoy a free lunch every day in our Luxembourg office, using our Sodexo Vouchers A Culture of Excellence: join a team of ambitious, smart, and committed professionals who are passionate about revolutionising private market investing. Our Values: Client-Centric Focus: our clients come first, Moonfare comes second, and we prioritise ourselves third. Putting clients first means creating value for them is essential. Placing Moonfare second signifies that our individual professional future at Moonfare depends on the company's commercial success. Prioritising ourselves third reflects our humility in putting clients and Moonfare before personal interests. Commitment to Excellence: we pursue excellence and honour our promises. We hold ourselves to the highest standards, taking responsibility for our failures, and celebrating our successes. We commit to deadlines and stick to them, and we learn from our mistakes. Win together: we are here to win and to celebrate our collective achievements. We are mission-focused and think and act like owners. We exemplify the attitude we expect, and each of us commits to do what it takes to succeed. Growth and Merit: we foster personal growth, but each of us earns our place as a Moonfarian through merit. We hire, retain, and develop exceptional people and invest in empowering them to excel. We must all earn our place at the table every day. We understand the important role that diversity plays in our success. Different backgrounds, experiences and ideas push us further and raise the bar. We're committed to developing an inclusive and safe culture where everyone — regardless of colour, race, religion, sex, origin, sexuality, disability, marital status, citizenship or gender identity — knows that they are an integral part of the team and can bring their full potential to their work. *Minimum investments vary according to jurisdiction.", "summaryDescription" : "Risk & Fund Reporting Manager at Moonfare. Skills: Risk Management, Fund Reporting, Regulatory Compliance, Third-Party Oversight. Maintain Risk Management Policy. Maintain risk limits", "postedDate" : "2026-06-13T20:14:43.253", "createdAt" : "2026-06-13T20:14:43.253", "lastUpdated" : "2026-06-15T04:45:42.773", "ingestTimestamp" : "2026-06-13T20:14:43.253", "mongoId" : "6a2c6b2d74d8ee00a0910939", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Liquidity risk", "Stress testing", "Fund accounting", "Fee accruals", "Valuation principles", "NAV verification", "Distribution reconciliation", "Oversight log maintenance", "Data flow control", "Technical discrepancy resolution", "Internal control", "SOP maintenance", "Risk reporting", "Financial oversight", "Risk Management", "Fund Reporting", "Regulatory Compliance", "Third-Party Oversight", "Fund Accounting Oversight", "Fund Audit", "Technical control", "Regulatory reporting", "Audit process leadership", "Second-level controls", "Third-party oversight", "SME leadership", "Control framework maintenance", "AI-augmented fund controlling", "AI-augmented reporting", "Service Level Agreements", "Oversight framework", "Private markets", "AIFMD risk management", "AIFMD reporting", "CSSF reporting", "SFDR disclosures", "Lux GAAP", "IFRS", "Fund waterfall mechanics", "PE valuation principles", "Private Equity", "Real Estate", "ACCA", "CPA", "IRE", "FRM", "PRM", "Bloomberg Terminal", "Reuters Eikon", "FactSet" ], "skillCount" : 50, "jobCategory" : "finance", "jobSubcategory" : "accounting", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "_score" : 619.5387, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services", "llmIndustryConfidence" : 0.98 }, { "id" : "6a3067a0f292fd229cfbfcc0", "title" : "CDD Risk Analyst", "company" : "Adyen", "industry" : "FinTech", "salary" : { "min" : 85000.0, "max" : 125000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Mid-level CDD Risk Analyst in Singapore's FinTech industry, adjusted for company size and industry." }, "location" : "Singapore", "locations" : [ "Singapore" ], "timestamp" : "2026-06-16T07:20:17.919", "fingerprint" : "a314c2d8e6864d11a164d9805c6cfddfa7bf5b9ac7619ab0add55fc33a94dd32", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/adyen/jobs/7985498", "externalId" : "7985498", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "coreResponsibilities" : "Seek answers to unknowns", "teamCollaboration" : "Cross-functionally across operations; Cross-functionally across commercial; Cross-functionally across product; Cross-functionally across compliance; Across global teams", "qualificationsPreferred" : "Knowledge of Payments environment", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "This is Adyen Adyen provides payments, data, and financial products in a single solution for customers like Meta, Uber, H you will also actively seek the answers of what you don’t know You have good communication and relationship-building skills, and can work cross-functionally across operations, commercial, product and compliance teams, including across global teams Knowledge of the Payments environment is a plus but not strictly required Our Diversity, Equity and Inclusion commitments Our unique approach is a product of our diverse perspectives. This diversity of backgrounds and cultures is essential in helping us maintain our momentum. Our business and technical challenges are unique, and we need as many different voices as possible to join us in solving them - voices like yours. No matter who you are or where you’re from, we welcome you to be your true self at Adyen. Studies show that women and members of underrepresented communities apply for jobs only if they meet 100% of the qualifications. Does this sound like you? If so, Adyen encourages you to reconsider and apply. We look forward to your application! What’s next? Ensuring a smooth and enjoyable candidate experience is critical for us. We aim to get back to you regarding your application within 5 business days. Our interview process tends to take about 4 weeks to complete, but may fluctuate depending on the role. Learn more about our hiring process here. Don’t be afraid to let us know if you need more flexibility. This role is based out of our Singapore office. We are an office-first company and value in-person collaboration; we do not offer remote-only roles.", "summaryDescription" : "CDD Risk Analyst at Adyen. Seek answers to unknowns", "postedDate" : "2026-06-15T23:29:21.793", "createdAt" : "2026-06-15T23:29:21.793", "lastUpdated" : "2026-06-16T07:20:17.919", "ingestTimestamp" : "2026-06-15T23:29:21.793", "mongoId" : "6a3067a0f292fd229cfbfcc0", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "finance", "jobSubcategory" : "accounting", "seniorityLevel" : "Mid", "dataQualityScore" : 0.6666667, "_score" : 613.564, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a308ec6f292fd229c0a5232", "title" : "Senior Risk Analyst", "company" : "Western Digital", "industry" : "Computer Hardware", "salary" : { "min" : 115000.0, "max" : 175000.0, "currency" : "MYR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Risk Analyst in Petaling Jaya, Malaysia, adjusted for seniority and the technology industry." }, "location" : "Petaling Jaya, Selangor, MY", "locations" : [ "Petaling Jaya", "Selangor", "MY" ], "timestamp" : "2026-06-16T11:15:01.469", "fingerprint" : "19031d4fd60ab3f757059d250a30041624320f9e09aa888febae69c02ec2ab07", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/WesternDigital/744000132106385-senior-risk-analyst", "externalId" : "744000132106385", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Petaling Jaya", "state" : "Selangor", "country" : "Malaysia", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "3.0988792,101.6454202" } ], "locationText" : "Petaling Jaya, Selangor, Malaysia", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "professionalSkills" : [ "Risk management", "Loss prevention", "Business continuity", "Crisis management", "Property risk improvement" ], "hardSkillsList" : [ "Risk assessment", "Loss control", "Insurance underwriting" ], "hardSkills" : [ { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Loss control", "level" : "intermediate" }, { "name" : "Insurance underwriting", "level" : "intermediate" } ], "majorSkills" : "Business continuity, Crisis management, Risk management, Property loss prevention", "majorSkillsList" : [ "Business continuity", "Crisis management", "Risk management", "Property loss prevention" ], "coreResponsibilities" : "Design resilience program, Implement resilience program, Maintain resilience program, Improve resilience program, Develop enterprise-wide training, Deliver enterprise-wide training, Conduct tabletop exercises, Conduct functional exercises, Conduct full-scale exercises, Develop post-exercise improvement plans, Develop post-incident improvement plans, Serve as central coordinator, Act as primary point of contact, Lead as Incident Commander, Lead as Deputy Incident Commander, Establish command structure, Direct cross-functional response teams, Manage internal communications, Manage external communications, Maintain situational awareness, Lead after-action reviews, Drive lessons-learned into enhancements, Monitor resilience KPIs, Report on resilience KPIs, Monitor resilience KRIs, Report on resilience KRIs, Maintain alignment with ISO 22301, Identify risk-improvement recommendations, Prioritize risk-improvement recommendations, Execute risk-improvement recommendations, Coordinate site risk assessments, Track completion of recommendations, Support insurance underwriting outcomes, Recommend protective equipment investments, Approve protective equipment investments, Recommend loss-control investments, Approve loss-control investments, Support data collection for renewals, Support data validation for renewals, Support property claims, Support casualty claims, Review contracts for insurance, Review leases for insurance, Review agreements for insurance, Review contracts for indemnification, Review leases for indemnification, Review agreements for indemnification, Maintain awareness of global risk conditions, Maintain awareness of emerging risks, Provide risk management guidance", "teamCollaboration" : "Cross-functional response teams; Executive leadership; Operations; External risk engineers; Insurance carriers; Corporate risk management team", "domainKnowledge" : "Business continuity; Crisis management; Organizational resilience; Property risk; Loss prevention; ISO 22301; Safety engineering; Environmental engineering; Construction practices; OSHA rulings; Labor law; Fire codes", "domainList" : [ "business-continuity", "crisis-management", "organizational-resilience", "property-risk", "loss-prevention", "iso-22301", "safety-engineering", "environmental-engineering", "construction-practices", "osha-rulings", "labor-law", "fire-codes" ], "domainSpecificKnowledge" : [ "Business continuity", "Crisis management", "Organizational resilience", "Property risk", "Loss prevention", "ISO 22301", "Safety engineering", "Environmental engineering", "Construction practices", "OSHA rulings", "Labor law", "Fire codes" ], "toolProficiency" : [ "Everbridge", "Crisis24", "Alert Media" ], "communicationSkills" : "Internal communications; External communications", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Domestic travel 15-25%, International travel 15-25%", "outcomesObjectives" : "Reduce impact to people; Reduce impact to operations; Reduce impact to reputation; Reduce impact to financial performance", "qualificationsBasic" : "7+ years experience in business continuity, 7+ years experience in crisis management, 7+ years experience in risk management, 7+ years experience in property loss prevention", "qualificationsPreferred" : "Experience in manufacturing environment, Experience serving in an Incident Command role, Experience serving in a Crisis Leadership role, Familiarity with resilience platforms", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "At WD, our vision is to power global innovation and push the boundaries of technology to make what you thought was once impossible, possible. At our core, WD is a company of problem solvers. People achieve extraordinary things given the right technology. For decades, we’ve been doing just that—our technology helped people put a man on the moon and capture the first-ever picture of a black hole. We offer an expansive portfolio of technologies, HDDs, and platforms for business, creative professionals, and consumers alike under our Western Digital®, WD®, and WD_BLACK™. We are a key partner to some of the largest and highest-growth organizations in the world. From enabling systems to make cities safer and more connected, to powering the data centers behind many of the world’s biggest companies and hyperscale cloud providers, to meeting the massive and ever-growing data storage needs of the AI era, WD is fueling a brighter, smarter future. Today’s exceptional challenges require your unique skills. Together, we can build the future of data storage. This role can be based in Malaysia/ Thailand/Singapore/Philippines. Summary Enterprise Resilience & Business Continuity manager serves as the company’s central coordinator and subject-matter expert for all aspects of business continuity, crisis management, and organizational resilience. This enterprise-wide role is responsible for designing, implementing, maintaining, and continuously improving a robust, integrated resilience program that enables the organization to prepare for, respond to, and recover from disruptive events with minimal impact to people, operations, reputation, and financial performance. In business-as-usual state, the role functions as a lead global Business Continuity Program Owner. During major incidents or crises, the incumbent serves as Incident Commander (or Deputy) within the enterprise crisis management framework, providing unified command, coordination, and communication across all affected functions. Because major incident response is not full-time, the position also performs other risk and insurance duties including property risk improvement and loss prevention for the company’s global manufacturing and operational assets in close partnership with operations, external risk engineers, and insurance carriers. Essential Duties and Responsibilities * Consultation and support for the Business Continuity, including business impact analyses (BIAs), recovery strategies, crisis management plans, and supporting policies/tools. * Develop and deliver enterprise-wide training, tabletop/functional/full-scale exercises, and post-exercise or post-incident improvement plans. * Serve as central coordinator and primary point of contact for resilience-related activities across business units, regions, and corporate functions. * During disruptions, activate and lead as Incident Commander (or Deputy), establishing command structure, directing cross-functional response teams, managing internal/external communications, and maintaining situational awareness in collaboration with executive leadership. * Lead after-action reviews and drive lessons-learned into program enhancements * Monitor and report on resilience KPIs/KRIs; maintain alignment with standards such as ISO 22301, and applicable regulatory requirements Property and Risk Engineering Duties * Partner with manufacturing sites, external risk engineers, and insurance partners to identify, prioritize, and execute risk-improvement recommendations that reduce property and casualty exposures. * Coordinate site risk assessments, track completion of recommendations, and support favorable insurance underwriting outcomes. * Recommend and approve major protective equipment and loss-control investments. General Risk Management Support * Support collection and validation of data for annual insurance renewals in collaboration with the corporate risk management team. * Support property and casualty claims as needed. * Review contracts, leases, and agreements for appropriate insurance and indemnification provisions. * Maintain awareness of global risk conditions and emerging risks that could impact the corporation. * Provide risk management guidance to subsidiaries and international offices. Other Duties * Domestic and international travel 15-25% (site visits, exercises, insurance meetings, incident response). * Perform other related duties as assigned. ## Qualifications To perform this job satisfactorily, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill and/or abilities required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Required * Bachelor’s Degree in Risk Management, Business Continuity, Emergency Management, Insurance, Engineering, or related field Preferred * Experience with resilience platforms like Everbridge, Crisis24, Alert Media etc. preferred * 7+ years of progressive experience in business continuity, crisis management, risk management, or property loss prevention (manufacturing environment strongly preferred) * Experience serving in an Incident Command / Crisis Leadership role highly desirable. Skills * Insurance terminology * Regulatory Compliance and Standards as it relates to Business Continuity and Crisis Response * Familiarity with safety and environmental engineering, construction practices, OSHA rulings, labor law, building costs and fire codes. * Ability to leverage AI enabled applications to improve efficiency, decision making, and workflow automation ## Additional Information #LI-MC1 WD thrives on the power and potential of diversity. As a global company, we believe the most effective way to embrace the diversity of our customers and communities is to mirror it from within. We believe the fusion of various perspectives results in the best outcomes for our employees, our company, our customers, and the world around us. We are committed to an inclusive environment where every individual can thrive through a sense of belonging, respect and contribution. WD is committed to offering opportunities to applicants with disabilities and ensuring all candidates can successfully navigate our careers website and our hiring process. Please contact us at [jobs.accommodations@wdc.com](mailto:staffingsupport@wdc.com) to advise us of your accommodation request. In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying. Notice To Candidates: Please be aware that WD and its subsidiaries will never request payment as a condition for applying for a position or receiving an offer of employment. Should you encounter any such requests, please report it immediately to [WD Ethics Helpline](https://secure.ethicspoint.com/domain/media/en/gui/48999/index.html) or email [compliance@wdc.com](mailto:compliance@wdc.com).", "summaryDescription" : "Senior Risk Analyst at Western Digital. Skills: Business continuity, Crisis management, Risk management, Property loss prevention. Design resilience program. Implement resilience program", "postedDate" : "2026-06-15T02:53:44.000", "createdAt" : "2026-06-16T03:32:32.951", "lastUpdated" : "2026-06-16T11:15:01.469", "ingestTimestamp" : "2026-06-16T03:32:32.951", "mongoId" : "6a308ec6f292fd229c0a5232", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Risk assessment", "Loss control", "Insurance underwriting", "Business continuity", "Crisis management", "Risk management", "Property loss prevention", "Loss prevention", "Property risk improvement", "Organizational resilience", "Property risk", "ISO 22301", "Safety engineering", "Environmental engineering", "Construction practices", "OSHA rulings", "Labor law", "Fire codes", "Everbridge", "Crisis24", "Alert Media" ], "skillCount" : 21, "jobCategory" : "finance", "jobSubcategory" : "accounting", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 611.14166, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "69fe47284c40e2acd1f59727", "title" : "Senior Security Risk Specialist", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Security Industry Specialist, amazonian experience and tech", "salary" : { "min" : 119300.0, "max" : 208900.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "certifications" : [ "CISSP", "CISA", "CISM" ], "timestamp" : "2026-06-15T03:31:32.795", "fingerprint" : "f489e2feeebbc7b9592f59b7628690f42f4b0162514adf9449ff469918c07b73", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10415257/apply", "externalId" : "99ceaf08-dd0c-49ec-a527-ba856049100b", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "professionalSkills" : [ "Risk management", "Compliance oversight", "Legal analysis", "Third-party risk assessment", "Vendor risk management", "Risk mitigation", "Regulatory compliance", "Process improvement", "Stakeholder management", "Business strategy", "Risk quantification", "Control design", "Control testing", "Issue management", "Risk training" ], "hardSkillsList" : [ "Risk assessment methodologies", "Risk frameworks", "Quantitative risk models", "Vendor risk questionnaires", "Continuous monitoring approaches", "Remediation plans", "Process paths", "Workflows", "Risk management outcomes", "Security control design", "Security control testing", "Security control implementation", "Security control validation", "Security controls evaluation", "Negotiate remediation timelines", "Evaluate security controls", "Risk posture communication", "Compliance gaps communication", "Strategic recommendations communication" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Risk assessment methodologies", "level" : "intermediate" }, { "name" : "Risk frameworks", "level" : "intermediate" }, { "name" : "Quantitative risk models", "level" : "intermediate" }, { "name" : "Vendor risk questionnaires", "level" : "intermediate" }, { "name" : "Continuous monitoring approaches", "level" : "intermediate" }, { "name" : "Remediation plans", "level" : "intermediate" }, { "name" : "Process paths", "level" : "intermediate" }, { "name" : "Workflows", "level" : "intermediate" }, { "name" : "Risk management outcomes", "level" : "intermediate" }, { "name" : "Security control design", "level" : "intermediate" }, { "name" : "Security control testing", "level" : "intermediate" }, { "name" : "Security control implementation", "level" : "intermediate" }, { "name" : "Security control validation", "level" : "intermediate" }, { "name" : "Security controls evaluation", "level" : "intermediate" }, { "name" : "Negotiate remediation timelines", "level" : "intermediate" }, { "name" : "Evaluate security controls", "level" : "intermediate" }, { "name" : "Risk posture communication", "level" : "intermediate" }, { "name" : "Compliance gaps communication", "level" : "intermediate" }, { "name" : "Strategic recommendations communication", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Security risk management, Third-party risk, Benefits compliance, Regulatory requirements", "majorSkillsList" : [ "Security risk management", "Third-party risk", "Benefits compliance", "Regulatory requirements" ], "coreResponsibilities" : "Lead third-party vendor risk assessments, Evaluate security posture, Evaluate privacy posture, Evaluate compliance posture, Define risk assessment methodologies, Iterate on risk assessment frameworks, Scale risk management capabilities, Identify long-term risks, Influence business strategy, Make independent decisions, Engage vendors on risk matters, Engage auditors on risk matters, Engage regulators on risk matters, Drive benefits compliance management, Ensure adherence to regulations, Lead risk assessments of vendor processes, Lead control assessments of vendor processes, Determine state of compliance, Analyze risk exposure, Author reports, Own third-party risk review programs, Drive third-party risk review programs, Create predictable process paths, Create repeatable mechanisms, Simplify approaches, Decouple project dependencies, Prevent duplicate effort, Prevent wasted effort, Define business problems, Set objectives, Analyze data, Drive improvements, Influence resource allocation, Develop mechanisms to inspect risk delivery, Develop mechanisms to monitor risk delivery, Develop mechanisms to improve risk delivery, Hold team to high standard, Escalate risks, Escalate blockers, Propose recommendations, Identify correct owners, Track issues to resolution, Develop deep understanding of benefits solutions, Develop deep understanding of third-party vendors, Drive business requirements, Lead collaboration with vendors, Lead collaboration with external teams, Ensure employee-centered experiences, Understand builder experience, Understand stakeholder experience, Align third-party risk processes, Author written narratives, Recommend solutions on third-party risk, Influence the organization, Influence external partners, Drive business discussions, Drive technical discussions, Make decisions on alignment, Advise managers on risk matters, Advise directors on risk matters, Communicate risk posture to leaders, Communicate compliance gaps to leaders, Communicate strategic recommendations to leaders, Write with stakeholders, Speak with stakeholders, Network with stakeholders, Broaden influence on risk management, Develop manager communications, Develop employee communications, Develop FAQs, Develop policy positions, Develop standard operating procedures, Develop strategic narratives, Mentor junior team members, Develop junior team members", "teamCollaboration" : "Across the organization; With US benefits owners; With diverse stakeholders; With vendors; With external teams; With managers and directors; With key internal stakeholders; With key external stakeholders", "projectManagementSkills" : [ "Agile" ], "domainKnowledge" : "Employee benefits; Third-party risk; HIPAA; ERISA; ACA; COBRA; Federal regulations; State regulations; Local regulations; Security compliance regimes; Security compliance frameworks", "domainList" : [ "employee-benefits", "third-party-risk", "hipaa", "erisa", "aca", "cobra", "federal-regulations", "state-regulations", "local-regulations", "security-compliance-regimes", "security-compliance-frameworks" ], "domainSpecificKnowledge" : [ "Employee benefits", "Third-party risk", "HIPAA", "ERISA", "ACA", "COBRA", "Federal regulations", "State regulations", "Local regulations", "Security compliance regimes", "Security compliance frameworks" ], "toolProficiency" : [ "JIRA" ], "communicationSkills" : "Written narratives; Verbal communication; Written communication", "documentationSkills" : "Author reports; Written narratives; Manager communications; Employee communications; FAQs; Policy positions; Standard operating procedures; Strategic narratives", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Data analysis", "outcomesObjectives" : "Mitigate risks; Drive scalable solutions; Achieve risk management outcomes; Resolve issues", "qualificationsBasic" : "Bachelor's degree or equivalent, 7+ years risk management experience, 7+ years audit experience, 7+ years legal experience, 7+ years compliance experience, Engaging with external stakeholders experience, Experience with IT compliance, Experience with risk management requirements", "qualificationsPreferred" : "CISSP certification, CISA certification, CISM certification, Other security certification, Advanced degree in related area, Deep knowledge of federal benefits regulations, Knowledge of state regulations, Knowledge of local regulations, Experience influencing vendor security strategies, Experience influencing vendor compliance strategies, Negotiating remediation timelines, Shaping vendor contractual obligations, Proficiency across security compliance regimes, Proficiency across security compliance frameworks", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Benefits Experience and Technology Risk team (BXT Risk) is responsible for managing employee benefits risk activities in countries where we do business. As a Senior Security Risk Specialist on the BXT Risk team, you will serve as a subject matter expert and strategic contributor to our benefits third-party risk ecosystem, working across the organization with US benefits policy, process, and system owners to define strategies, evaluate complex risks, and drive scalable solutions that mitigate risks introduced by third-party vendors and service providers supporting the organization's US health and financial employee benefit programs. This role requires both tactical execution and strategic thinking. You will independently lead complex third-party risk assessments, influence vendor security and compliance strategies across the organization, shape how the team scales its risk management capabilities, and drive alignment across diverse stakeholders with potentially conflicting priorities. You will create predictable process paths and repeatable mechanisms that multiple teams utilize, mentor junior team members, and advise managers and directors on third-party risk matters affecting employee benefits programs. Key job responsibilities Third-Party Risk Strategy and Assessment: - Lead complex third-party vendor risk assessments across multiple benefits programs and vendor relationships, evaluating security, privacy, and compliance posture against federal, state, and local regulatory requirements - Define and iterate on risk assessment methodologies, frameworks, and mechanisms to scale for diverse vendor requirements and evolving regulatory expectations (e.g., quantitative risk models, vendor risk questionnaires, continuous monitoring approaches) - Identify long-term risks associated with third-party vendors and influence business strategy to proactively mitigate them before they materialize into risk events - Make diligent, independent decisions on how to engage vendors, auditors, and regulators on third-party risk matters with minimal oversight - Drive comprehensive benefits compliance management related to third-party service delivery, ensuring adherence to federal, state, and local regulatory requirements including HIPAA, ERISA, ACA, and COBRA - Lead risk and control assessments of vendor-managed processes, determine state of compliance, analyze risk exposure, and author reports detailing methodology, results, and remediation plans Program Leadership and Scalable Solutions: - Own and drive third-party risk review programs associated with benefits program launches, modifications, vendor onboarding, and transitions across the organization - Create predictable process paths, workflows, and repeatable mechanisms (e.g., for vendor security control design, testing, implementation, and validation) that multiple teams utilize to deliver consistent risk management outcomes - Identify opportunities to simplify approaches throughout the organization and across project boundaries; decouple dependencies and prevent duplicate or wasted effort - Define business problems, set objectives, analyze data, drive improvements, and influence resource allocation for third-party risk initiatives - Develop mechanisms to inspect, monitor, and improve third-party risk delivery over time; hold the team to a high standard for both solutions and practices - Escalate when risks or blockers emerge, propose viable recommendations to resolve them, identify the correct owners, and track issues to resolution Vendor Systems, Process, and Compliance Oversight: - Develop deep understanding of the employee benefits solutions utilized by Amazon and the third-party vendors that support them; drive business requirements for vendor system implementations and enhancements - Lead collaboration with vendors and external teams to evaluate security controls, negotiate remediation timelines, and ensure employee-centered benefits experiences are delivered securely - Understand the builder and stakeholder experience with security compliance and proactively seek to align third-party risk processes with existing workflows - Author written narratives to define strategy, evaluate trade-offs, anticipate risks, and recommend solutions on third-party risk that influence the organization and external partners Stakeholder Engagement, Influence, and Communication: - Drive business and technical discussions across the organization to make decisions on how to align with diverse, potentially conflicting, third-party risk and compliance expectations - Advise managers and directors on third-party risk matters; communicate effectively with leaders up to three levels above on risk posture, compliance gaps, and strategic recommendations - Write, speak, and network with key internal and external stakeholders to broaden influence on third-party risk management practices - Develop and deliver documentation such as manager and employee communications, FAQs, policy positions, standard operating procedures, and strategic narratives related to third-party risk - Mentor and develop junior team members in third-party risk assessment methodologies, compliance frameworks, and stakeholder engagement About the team The BXT Risk team is made up of lawyers, risk specialists, data security specialists, automation experts, and privacy specialists with global HR and benefits backgrounds. We are a dedicated collective committed to creating supportive, comprehensive benefits solutions. We provide our benefits stakeholders guidance to help them identify and manage potential risks and improve their team's risk management strategies and compliance posture. The team proactively scans the horizon for new and emerging risks not yet fully developed or understood, and performs inspections to identify compliance gaps and control weaknesses before they materialize into risk events. We provide end-to-end risk management oversight, including risk identification, risk assessments, risk quantification, compliance advisory services, inspection services, control design and testing, compliance solutions, risk monitoring and reporting, issue management, and risk training. We cultivate an environment where every team member feels valued, empowered, and equipped to thrive both professionally and personally. Our work goes beyond benefits operations - we're building experiences that genuinely care for our employees. Basic Qualifications: - Bachelor's degree or equivalent in Information Security, Computer Science, Risk Management, Engineering, Math, Statistics, or a related discipline, or equivalent technology experience - 7+ years of risk management, audit, legal, compliance or related field work including engaging with external stakeholders experience - Experience with IT compliance and risk management requirements (e.g. security, privacy, SOX, HIPAA etc.) Preferred Qualifications: - CISSP, CISA, CISM or other security certification - Advanced degree in a related area (Information Security, Risk Management, MSHR, MBA, JD) - Deep knowledge of federal benefits regulations including ACA, COBRA, ERISA, and HIPAA, as well as state and local regulations including Massachusetts, Vermont, Hawaii, and San Francisco - Experience influencing vendor security and compliance strategies across an organization, including negotiating remediation timelines and shaping vendor contractual obligations - Proficiency across multiple widely adopted security compliance regimes and frameworks (SOC, PCI, NIST, ISO) with ability to apply expertise across diverse regulatory environments Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 119,300.00 - 208,900.00 USD annually", "summaryDescription" : "Senior Security Risk Specialist at Amazon.com Services LLC. Skills: Security risk management, Third-party risk, Benefits compliance, Regulatory requirements. Lead third-party vendor risk assessments. Evaluate security posture", "postedDate" : "2026-06-13T08:17:41.380", "createdAt" : "2026-06-13T08:17:41.380", "lastUpdated" : "2026-06-15T03:31:32.795", "ingestTimestamp" : "2026-06-13T08:17:41.380", "mongoId" : "69fe47284c40e2acd1f59727", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10415257/apply", "salaryAnnualMin" : 119300, "salaryAnnualMax" : 208900, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Risk assessment methodologies", "Risk frameworks", "Quantitative risk models", "Vendor risk questionnaires", "Continuous monitoring approaches", "Remediation plans", "Process paths", "Workflows", "Risk management outcomes", "Security control design", "Security control testing", "Security control implementation", "Security control validation", "Security controls evaluation", "Negotiate remediation timelines", "Evaluate security controls", "Risk posture communication", "Compliance gaps communication", "Strategic recommendations communication", "Leadership", "Mentoring", "Security risk management", "Third-party risk", "Benefits compliance", "Regulatory requirements", "Risk management", "Compliance oversight", "Legal analysis", "Third-party risk assessment", "Vendor risk management", "Risk mitigation", "Regulatory compliance", "Process improvement", "Stakeholder management", "Business strategy", "Risk quantification", "Control design", "Control testing", "Issue management", "Risk training", "Agile", "Employee benefits", "HIPAA", "ERISA", "ACA", "COBRA", "Federal regulations", "State regulations", "Local regulations", "Security compliance regimes", "Security compliance frameworks", "CISSP", "CISA", "CISM", "JIRA" ], "skillCount" : 55, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 610.52277, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2a649f74d8ee00a0626e1b", "title" : "Change Oversight & Third Party Operations Manager", "company" : "Payward", "industry" : "Regional Operations", "salary" : { "min" : 75000.0, "max" : 105000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager in FinTech in Ireland, adjusted for seniority and company size." }, "location" : "Ireland", "locations" : [ "Ireland" ], "timestamp" : "2026-06-14T22:08:11.536", "fingerprint" : "b4c4e20a0e25ac55cb5d8d8afebd779260a67fc754f5b8107e448f3635d91b33", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/kraken.com/155ad131-d77a-4d79-b99d-772df57eff14/application", "externalId" : "155ad131-d77a-4d79-b99d-772df57eff14", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Ireland", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "Ireland", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "professionalSkills" : [ "IT General Control", "Technology governance", "Operational risk management", "Vendor management", "Contract negotiation", "Spend analysis", "Financial modeling", "Process improvement", "Data governance", "Technology risk", "Operational risk" ], "hardSkillsList" : [ "ITGC oversight", "Technology governance", "Operational risk management", "Vendor management", "Contract negotiation", "Spend analysis", "Financial modeling", "Process improvement", "Data governance", "Technology risk", "Operational risk" ], "softSkillsList" : [ "Negotiation", "Critical thinking" ], "hardSkills" : [ { "name" : "ITGC oversight", "level" : "intermediate" }, { "name" : "Technology governance", "level" : "intermediate" }, { "name" : "Operational risk management", "level" : "intermediate" }, { "name" : "Vendor management", "level" : "intermediate" }, { "name" : "Contract negotiation", "level" : "intermediate" }, { "name" : "Spend analysis", "level" : "intermediate" }, { "name" : "Financial modeling", "level" : "intermediate" }, { "name" : "Process improvement", "level" : "intermediate" }, { "name" : "Data governance", "level" : "intermediate" }, { "name" : "Technology risk", "level" : "intermediate" }, { "name" : "Operational risk", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Negotiation" }, { "name" : "Critical thinking" } ], "majorSkills" : "Change Oversight, Third Party Operations, Risk Management, Governance", "majorSkillsList" : [ "Change Oversight", "Third Party Operations", "Risk Management", "Governance" ], "coreResponsibilities" : "Support ITGC oversight development, Support ITGC oversight implementation, Support ITGC oversight operation, Support technology governance framework development, Support technology governance framework implementation, Support technology governance framework operation, Partner with teams to identify risks, Partner with teams to assess risks, Partner with teams to manage risks, Support governance processes operation, Support governance processes enhancement, Assist in policy development, Assist in procedure development, Assist in workflow development, Assist in standards development, Assist in governance documentation development, Support critical systems inventories maintenance, Support regulatory-critical datasets maintenance, Support data dependencies maintenance, Support governance artefacts maintenance, Review IT general controls effectiveness, Review testing standards effectiveness, Review implementation readiness controls effectiveness, Review post-implementation validation processes effectiveness, Support post-implementation validation execution, Support post-implementation validation review, Assist in control issues investigation, Assist in operational incidents investigation, Assist in reconciliation variances investigation, Assist in control issues escalation, Assist in operational incidents escalation, Assist in reconciliation variances escalation, Assist in control issues remediation, Assist in operational incidents remediation, Assist in reconciliation variances remediation, Assist in workflow tooling development, Assist in data governance controls development, Assist in technology-enabled oversight processes development, Help develop performance metrics, Help implement performance metrics, Support risk framework development, Support risk framework maintenance, Support risk culture embedding, Work with teams for reviews, Support periodic reviews, Support testing activities, Support validation activities, Support evidence gathering, Support reporting activities, Assist in governance reporting preparation, Assist in management information preparation, Assist in committee materials preparation, Assist in audit evidence preparation, Assist in regulatory submissions preparation, Support liaison between entities and functions, Support co-ordination between entities and functions, Support adherence to risk management frameworks, Support adherence to IT policies, Support adherence to IT standards, Support adherence to IT procedures, Partner with stakeholders throughout negotiations, Develop negotiation strategies, Develop fallback positions, Develop acceptable commercial terms, Establish key performance benchmarks, Lead contract review process, Coordinate contract review process, Engage legal as needed, Engage subject matter experts as needed, Support supplier rationalization initiatives, Drive cost savings, Drive supply continuity, Drive quality improvements, Drive innovation, Drive increased vendor value, Analyze business requirements, Develop vendor management guidelines, Develop vendor management policies, Develop standardized contracting protocols, Establish vendor lifecycle strategy, Manage vendor lifecycle strategy, Identify risks associated with suppliers, Mitigate risks associated with suppliers, Monitor vendor performance against SLAs, Monitor vendor performance against MSAs, Perform spend analysis, Perform financial modeling, Create purchase requisitions, Manage purchase requisitions, Create purchase orders, Manage purchase orders, Ensure accuracy of accounting classifications, Ensure accuracy of coding, Partner to drive digital transformation, Champion continuous improvement efforts, Identify process enhancement opportunities, Implement automation solutions, Test new workflows", "teamCollaboration" : "Partner with Product teams; Partner with Engineering teams; Partner with Data teams; Partner with Finance teams; Partner with Compliance teams; Partner with operational teams; Work with second line of defence; Work with Internal Audit; Work with external assurance providers; Work with Accounts Payable; Work with FP&A; Work with IT; Work with business stakeholders; Liaise between entities and functions; Co-ordinate between entities and functions; Partner with business stakeholders; Partner with suppliers; Engage internal stakeholders; Engage legal; Engage subject matter experts", "projectManagementSkills" : [ "Manage workstreams", "Manage stakeholders", "Manage governance activities" ], "domainKnowledge" : "IT General Controls; Technology governance; Operational risk; Technology risk; Vendor management; Digital assets regulation", "domainList" : [ "it-general-controls", "technology-governance", "operational-risk", "technology-risk", "vendor-management", "digital-assets-regulation" ], "domainSpecificKnowledge" : [ "IT General Controls", "Technology governance", "Operational risk", "Technology risk", "Vendor management", "Digital assets regulation" ], "toolProficiency" : [ "Workflow tooling" ], "communicationSkills" : "Governance reporting; Management information; Committee materials; Audit evidence; Regulatory submissions; Written communication; Verbal communication", "documentationSkills" : "Policies; Procedures; Workflows; Standards; Governance documentation", "innovationCreativity" : "Drive innovation", "problemSolvingSkills" : "Risk assessment; Risk mitigation; Root cause analysis; Investigate issues; Investigate incidents; Investigate variances", "outcomesObjectives" : "Optimize vendor portfolio; Drive cost savings; Drive supply continuity; Drive quality improvements; Drive increased vendor value; Support scalable governance; Support operational risk management; Monitor vendor performance; Support continuous improvement", "qualificationsBasic" : "5+ years experience, Experience with IT General Controls, Experience with technology governance framework, Experience with regulated entities, Experience with operational environments, Experience with system changes, Experience with infrastructure changes, Experience with process changes, Experience with data changes, Experience with governance processes, Experience with IT general governance, Experience with technology change governance, Experience with operational governance, Experience with implementation governance, Experience with testing governance, Experience with post-implementation oversight, Experience with policies, Experience with procedures, Experience with workflows, Experience with standards, Experience with governance documentation, Experience with operational risk management, Experience with technology governance, Experience with critical systems inventories, Experience with regulatory-critical datasets, Experience with data dependencies, Experience with governance artefacts, Experience with IT general controls effectiveness, Experience with testing standards effectiveness, Experience with implementation readiness controls effectiveness, Experience with post-implementation validation processes effectiveness, Experience with post-implementation validation activities, Experience with control issues, Experience with operational incidents, Experience with reconciliation variances, Experience with workflow tooling, Experience with data governance controls, Experience with technology-enabled oversight processes, Experience with scalable governance, Experience with operational risk management, Experience with performance metrics, Experience with technology risks, Experience with operational risks, Experience with second line of defence teams, Experience with risk management framework, Experience with technology risk management, Experience with operational risk management, Experience with risk culture, Experience with Internal Audit, Experience with Compliance, Experience with Risk, Experience with Finance, Experience with Engineering, Experience with Data, Experience with external assurance providers, Experience with operational processes reviews, Experience with IT general controls reviews, Experience with testing reviews, Experience with validation reviews, Experience with evidence gathering, Experience with reporting activities, Experience with governance reporting, Experience with management information, Experience with committee materials, Experience with audit evidence, Experience with regulatory submissions, Experience with technology governance reporting, Experience with operational control frameworks reporting, Experience with Kraken's regulated entities, Experience with Group functions, Experience with technology change coordination, Experience with operational dependencies coordination, Experience with governance processes coordination, Experience with audit activities coordination, Experience with remediation initiatives coordination, Experience with enterprise risk management frameworks, Experience with IT-related policies, Experience with IT-related standards, Experience with IT-related procedures, Experience with business stakeholders, Experience with suppliers, Experience with contract negotiations, Experience with negotiation strategies, Experience with fallback positions, Experience with commercial terms, Experience with key performance benchmarks, Experience with contractual success measurement, Experience with contract review process, Experience with internal stakeholders, Experience with legal engagement, Experience with subject matter experts, Experience with timely execution, Experience with compliance, Experience with supplier rationalization, Experience with vendor portfolio optimization, Experience with cost savings, Experience with supply continuity, Experience with quality improvements, Experience with vendor innovation, Experience with increased vendor value, Experience with business requirements analysis, Experience with vendor management guidelines, Experience with vendor management policies, Experience with standardized contracting protocols, Experience with vendor lifecycle strategy, Experience with vendor planning, Experience with vendor sourcing, Experience with vendor selection, Experience with vendor performance management, Experience with vendor offboarding, Experience with vendor transition, Experience with strategic suppliers, Experience with vendor performance monitoring, Experience with negotiated Service Level Agreements, Experience with Master Service Agreements, Experience with spend analysis, Experience with financial modeling, Experience with commercial negotiations, Experience with vendor performance reviews, Experience with executive reporting, Experience with data-driven dashboards, Experience with metrics, Experience with purchase requisitions, Experience with purchase orders, Experience with accounting classifications, Experience with coding, Experience with Accounts Payable, Experience with FP&A, Experience with IT, Experience with business stakeholders, Experience with digital transformation initiatives, Experience with Procure-to-Pay process, Experience with process enhancement opportunities, Experience with automation solutions, Experience with new workflows, Experience with risk assessment, Experience with risk mitigation, Experience with vendor risk, Experience with vendor performance, Experience with SLA monitoring, Experience with MSA monitoring, Experience with financial analysis, Experience with data analysis, Experience with data visualization, Experience with reporting, Experience with metrics development, Experience with process improvement, Experience with automation, Experience with workflow design, Experience with data governance, Experience with technology risk, Experience with operational risk, Experience with cross-functional teams, Experience with Engineering teams, Experience with Product teams, Experience with Risk teams, Experience with Compliance teams, Experience with Finance teams, Experience with Data teams, Experience with operational teams, Experience with fast-moving environments, Experience with evolving priorities, Experience with regulatory requirements, Experience with systems thinking, Experience with technology leverage, Experience with workflow tooling, Experience with automation, Experience with data-driven approaches, Experience with scalable governance, Experience with oversight processes, Experience with organizational skills, Experience with coordination skills, Experience with managing workstreams, Experience with managing stakeholders, Experience with managing governance activities", "qualificationsPreferred" : "Familiarity with governance frameworks, Familiarity with regulatory expectations, Familiarity with operational resilience, Familiarity with outsourcing, Familiarity with technology risk, Familiarity with digital asset regulation, Familiarity with MiCAR, Familiarity with DORA, Familiarity with PSD2, Familiarity with E-Money Regulations", "remoteFriendly" : false, "rawDescription" : "BUILDING THE FUTURE OF OPEN FINANCE Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system. Before you apply, we encourage you to explore our culture page https://www.kraken.com/culture to understand what drives us and how we work. THE TEAM Founded in 2011, Kraken is one of the world's longest-standing crypto platforms, trusted by over 10 million individuals and institutions across the globe. It offers spot trading, margin, futures, staking, and OTC services, with products built for both individual investors and institutional clients. As the global crypto market transforms under the Markets in Crypto-Assets Regulation (MiCAR) and many more regulatory frameworks, Kraken is building the blueprint for how a global exchange scales compliantly — while unlocking new growth across products, markets, and partnerships. THE OPPORTUNITY Change Oversight and Change Management - Support the ongoing development, implementation, and operation of Kraken’s IT General Control (“ITGC”) oversight and technology governance framework across regulated entities and core operational environments. - Partner with Product, Engineering, Data, Finance, Compliance, and operational teams to identify, assess, and manage risks arising from system, infrastructure, process, or data changes impacting regulatory or operational control environments. - Support the operation and continuous enhancement of governance processes relating to: - IT general controls; - technology change management; - operational resilience; - implementation readiness; - testing and validation; - and post-implementation oversight. - Assist in the development and maintenance of policies, procedures, workflows, standards, and governance documentation supporting operational risk management and technology governance activities. - Support the maintenance and refinement of critical systems inventories, regulatory-critical datasets, data dependencies, and associated governance artefacts. - Review and analyse the effectiveness of IT general controls, testing standards, implementation readiness controls, and post-implementation validation processes across operational and regulatory control environments. - Support the execution and review of post-implementation validation activities and assist in the investigation, escalation, and remediation of identified control issues, operational incidents, or reconciliation variances. - Assist in the development and operationalisation of workflow tooling, data governance controls, and technology-enabled oversight processes designed to support scalable governance and operational risk management. - Help develop and implement performance metrics supporting the monitoring, reporting, escalation, and management of technology and operational risks. - Work with second line of defence teams to support the development and maintenance of a consistent framework for identifying, measuring, mitigating, monitoring, and managing technology and operational risks. - Support the embedding of a strong risk culture across operational and technology functions, where effective risk management forms part of day-to-day decision making and operational processes. - Work with Internal Audit, Compliance, Risk, Finance, Engineering, Data, and external assurance providers to support periodic reviews of operational processes and IT general controls, including testing, validation, evidence gathering, and reporting activities. - Assist in the preparation of governance reporting, management information, committee materials, audit evidence, and regulatory submissions relating to technology governance and operational control frameworks. - Support liaison and co-ordination between Kraken’s regulated entities and Group functions in relation to technology change, operational dependencies, governance processes, audit activities, and remediation initiatives. - Support adherence to enterprise risk management frameworks and IT-related policies, standards, and procedures. Third Party Management - Proactively partner with business stakeholders and suppliers throughout contract negotiations, developing negotiation strategies, fallback positions, and acceptable commercial terms while establishing key performance benchmarks to measure contractual success. - Lead and coordinate the contract review process across internal stakeholders, engaging legal and subject matter experts as needed to ensure timely execution and compliance. - Support supplier rationalization initiatives to optimize the vendor portfolio, driving cost savings, supply continuity, quality improvements, innovation, and increased vendor value. - Analyze business requirements and develop vendor management guidelines, policies, and standardized contracting protocols. - Establish and manage the vendor lifecycle strategy, including vendor planning, sourcing, selection, performance management, and offboarding/transition activities. - Identify and mitigate risks associated with strategic suppliers while monitoring vendor performance against negotiated Service Level Agreements (SLAs) and Master Service Agreements (MSAs). - Perform spend analysis and financial modeling to support commercial negotiations, vendor performance reviews, and executive reporting through data-driven dashboards and metrics. - Create and manage purchase requisitions (PRs) and purchase orders (POs) for a wide range of goods and services, ensuring accuracy of accounting classifications and coding. - Partner with Accounts Payable, FP&A, IT, and business stakeholders to drive digital transformation initiatives across the Procure-to-Pay (P2P) process. - Champion continuous improvement efforts by identifying process enhancement opportunities, implementing automation solutions, testing new workflows, and driving operational efficiencies. - Manage the full purchase order lifecycle, ensuring timely processing, approvals, receipt validation, and issue resolution. - Analyze purchasing and procurement data to ensure compliance with policies and procedures, validate data integrity, and identify discrepancies, trends, and improvement opportunities. WHAT YOU BRING - 5+ years of experience in IT risk management, operational risk, IT audit, technology governance, operational resilience, procurement, or a related discipline, ideally within a financial services, fintech, or crypto organisation, or a consulting/audit environment. - Strong understanding of IT general controls, change management processes, testing and validation standards, and operational risk management frameworks. - Experience supporting or assessing operational control environments relating to technology governance, regulatory compliance, or operational resilience. - Strong analytical and problem-solving skills, with the ability to assess complex operational or technology risks and translate findings into practical recommendations. - Excellent written and verbal communication skills, including the ability to prepare clear governance reporting and engage effectively with senior stakeholders across business, technology, and control functions. - Experience working cross-functionally with Engineering, Product, Risk, Compliance, Finance, Data, and operational teams. - Comfortable operating in a fast-moving environment with evolving priorities and regulatory requirements. - Systems thinker with an interest in leveraging technology, workflow tooling, automation, and data-driven approaches to support scalable governance and oversight processes. - Strong organisational and coordination skills, with the ability to manage multiple workstreams, stakeholders, and governance activities simultaneously. NICE TO HAVES - Familiarity with governance frameworks and regulatory expectations relating to operational resilience, outsourcing, technology risk, or digital asset regulation (e.g. MiCAR, DORA, PSD2, E-Money Regulations). Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis. Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution. We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance. Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto. We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision. As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws. Stay in the know Follow us on Twitter https://twitter.com/krakenfx Learn on the Kraken Blog https://blog.kraken.com/#:~:text=Enter%20your%20email%20address Connect on LinkedIn https://www.linkedin.com/company/kraken-exchange/ Candidate Privacy Notice https://www.kraken.com/legal/candidate-privacy-notice", "summaryDescription" : "Change Oversight & Third Party Operations Manager at Payward. Skills: Change Oversight, Third Party Operations, Risk Management, Governance. Support ITGC oversight development. Support ITGC oversight implementation", "postedDate" : "2026-06-11T20:23:37.113", "createdAt" : "2026-06-11T20:23:37.113", "lastUpdated" : "2026-06-14T22:08:11.536", "ingestTimestamp" : "2026-06-11T20:23:37.113", "mongoId" : "6a2a649f74d8ee00a0626e1b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "ITGC oversight", "Technology governance", "Operational risk management", "Vendor management", "Contract negotiation", "Spend analysis", "Financial modeling", "Process improvement", "Data governance", "Technology risk", "Operational risk", "Negotiation", "Critical thinking", "Change Oversight", "Third Party Operations", "Risk Management", "Governance", "IT General Control", "Manage workstreams", "Manage stakeholders", "Manage governance activities", "IT General Controls", "Digital assets regulation", "Workflow tooling" ], "skillCount" : 24, "jobCategory" : "operations", "jobSubcategory" : "european-operations", "dataQualityScore" : 1.0, "_score" : 606.82947, "daysOld" : 3, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Financial Services" }, { "id" : "6a304f24f292fd229cee57d9", "title" : "Senior Risk Analyst", "company" : "Western Digital", "industry" : "Computer Hardware", "salary" : { "min" : 115000.0, "max" : 175000.0, "currency" : "MYR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Risk Analyst in Petaling Jaya, Malaysia, adjusted for seniority and technology industry." }, "location" : "Petaling Jaya, Selangor, MY", "locations" : [ "Petaling Jaya", "Selangor", "MY" ], "timestamp" : "2026-06-16T04:37:15.596", "fingerprint" : "70327231ed7fde01047a99c50a4b350253742df4452cf3f3dceda0f6e34b2bc0", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/WesternDigital/744000132106385-senior-risk-analyst", "externalId" : "744000132106385", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Petaling Jaya", "state" : "Selangor", "country" : "Malaysia", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "3.0988792,101.6454202" } ], "locationText" : "Petaling Jaya, Selangor, Malaysia", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "professionalSkills" : [ "Risk engineering", "Loss prevention" ], "hardSkillsList" : [ "Business impact analyses", "Recovery strategies", "Crisis management plans", "Risk improvement recommendations", "Site risk assessments", "Insurance underwriting", "Loss-control investments", "Data validation", "Contract review", "Lease review", "Indemnification provisions" ], "hardSkills" : [ { "name" : "Business impact analyses", "level" : "intermediate" }, { "name" : "Recovery strategies", "level" : "intermediate" }, { "name" : "Crisis management plans", "level" : "intermediate" }, { "name" : "Risk improvement recommendations", "level" : "intermediate" }, { "name" : "Site risk assessments", "level" : "intermediate" }, { "name" : "Insurance underwriting", "level" : "intermediate" }, { "name" : "Loss-control investments", "level" : "intermediate" }, { "name" : "Data validation", "level" : "intermediate" }, { "name" : "Contract review", "level" : "intermediate" }, { "name" : "Lease review", "level" : "intermediate" }, { "name" : "Indemnification provisions", "level" : "intermediate" } ], "majorSkills" : "Business continuity, Crisis management, Organizational resilience, Property risk", "majorSkillsList" : [ "Business continuity", "Crisis management", "Organizational resilience", "Property risk" ], "coreResponsibilities" : "Consult and support business continuity, Develop enterprise-wide training, Deliver tabletop exercises, Deliver functional exercises, Deliver full-scale exercises, Develop post-exercise improvement plans, Develop post-incident improvement plans, Serve as central coordinator for resilience, Act as primary point of contact for resilience, Lead as Incident Commander during disruptions, Lead as Deputy Incident Commander during disruptions, Establish command structure during disruptions, Direct cross-functional response teams, Manage internal communications during disruptions, Manage external communications during disruptions, Maintain situational awareness during disruptions, Lead after-action reviews, Drive lessons-learned into program enhancements, Monitor resilience KPIs, Report on resilience KPIs, Monitor resilience KRIs, Report on resilience KRIs, Maintain alignment with ISO 22301, Identify risk-improvement recommendations, Prioritize risk-improvement recommendations, Execute risk-improvement recommendations, Coordinate site risk assessments, Track completion of recommendations, Support favorable insurance underwriting, Recommend protective equipment investments, Approve protective equipment investments, Recommend loss-control investments, Approve loss-control investments, Support data collection for insurance renewals, Support data validation for insurance renewals, Support property claims, Support casualty claims, Review contracts for insurance provisions, Review contracts for indemnification provisions, Review leases for insurance provisions, Review leases for indemnification provisions, Review agreements for insurance provisions, Review agreements for indemnification provisions, Maintain awareness of global risk conditions, Maintain awareness of emerging risks, Provide risk management guidance to subsidiaries, Provide risk management guidance to international offices", "teamCollaboration" : "Partner with manufacturing sites; Partner with external risk engineers; Partner with insurance carriers; Collaborate with corporate risk management; Collaborate with executive leadership", "domainKnowledge" : "Business continuity; Crisis response; Property risk; Casualty exposure; Loss prevention; ISO 22301", "domainList" : [ "business-continuity", "crisis-response", "property-risk", "casualty-exposure", "loss-prevention", "iso-22301" ], "domainSpecificKnowledge" : [ "Business continuity", "Crisis response", "Property risk", "Casualty exposure", "Loss prevention", "ISO 22301" ], "specialRequirements" : "15-25% travel", "qualificationsBasic" : "7+ years experience in business continuity, 7+ years experience in crisis management, 7+ years experience in risk management, 7+ years experience in property loss prevention", "qualificationsPreferred" : "Experience in manufacturing environment, Experience serving in an Incident Command role, Experience serving in a Crisis Leadership role, Familiarity with resilience platforms like Everbridge, Familiarity with resilience platforms like Crisis24, Familiarity with resilience platforms like Alert Media", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "At WD, our vision is to power global innovation and push the boundaries of technology to make what you thought was once impossible, possible. At our core, WD is a company of problem solvers. People achieve extraordinary things given the right technology. For decades, we’ve been doing just that—our technology helped people put a man on the moon and capture the first-ever picture of a black hole. We offer an expansive portfolio of technologies, HDDs, and platforms for business, creative professionals, and consumers alike under our Western Digital®, WD®, and WD_BLACK™. We are a key partner to some of the largest and highest-growth organizations in the world. From enabling systems to make cities safer and more connected, to powering the data centers behind many of the world’s biggest companies and hyperscale cloud providers, to meeting the massive and ever-growing data storage needs of the AI era, WD is fueling a brighter, smarter future. Today’s exceptional challenges require your unique skills. Together, we can build the future of data storage. This role can be based in Malaysia/ Thailand/Singapore/Philippines. Summary Enterprise Resilience & Business Continuity manager serves as the company’s central coordinator and subject-matter expert for all aspects of business continuity, crisis management, and organizational resilience. This enterprise-wide role is responsible for designing, implementing, maintaining, and continuously improving a robust, integrated resilience program that enables the organization to prepare for, respond to, and recover from disruptive events with minimal impact to people, operations, reputation, and financial performance. In business-as-usual state, the role functions as a lead global Business Continuity Program Owner. During major incidents or crises, the incumbent serves as Incident Commander (or Deputy) within the enterprise crisis management framework, providing unified command, coordination, and communication across all affected functions. Because major incident response is not full-time, the position also performs other risk and insurance duties including property risk improvement and loss prevention for the company’s global manufacturing and operational assets in close partnership with operations, external risk engineers, and insurance carriers. Essential Duties and Responsibilities * Consultation and support for the Business Continuity, including business impact analyses (BIAs), recovery strategies, crisis management plans, and supporting policies/tools. * Develop and deliver enterprise-wide training, tabletop/functional/full-scale exercises, and post-exercise or post-incident improvement plans. * Serve as central coordinator and primary point of contact for resilience-related activities across business units, regions, and corporate functions. * During disruptions, activate and lead as Incident Commander (or Deputy), establishing command structure, directing cross-functional response teams, managing internal/external communications, and maintaining situational awareness in collaboration with executive leadership. * Lead after-action reviews and drive lessons-learned into program enhancements * Monitor and report on resilience KPIs/KRIs; maintain alignment with standards such as ISO 22301, and applicable regulatory requirements Property and Risk Engineering Duties * Partner with manufacturing sites, external risk engineers, and insurance partners to identify, prioritize, and execute risk-improvement recommendations that reduce property and casualty exposures. * Coordinate site risk assessments, track completion of recommendations, and support favorable insurance underwriting outcomes. * Recommend and approve major protective equipment and loss-control investments. General Risk Management Support * Support collection and validation of data for annual insurance renewals in collaboration with the corporate risk management team. * Support property and casualty claims as needed. * Review contracts, leases, and agreements for appropriate insurance and indemnification provisions. * Maintain awareness of global risk conditions and emerging risks that could impact the corporation. * Provide risk management guidance to subsidiaries and international offices. Other Duties * Domestic and international travel 15-25% (site visits, exercises, insurance meetings, incident response). * Perform other related duties as assigned. ## Qualifications To perform this job satisfactorily, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill and/or abilities required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Required * Bachelor’s Degree in Risk Management, Business Continuity, Emergency Management, Insurance, Engineering, or related field Preferred * Experience with resilience platforms like Everbridge, Crisis24, Alert Media etc. preferred * 7+ years of progressive experience in business continuity, crisis management, risk management, or property loss prevention (manufacturing environment strongly preferred) * Experience serving in an Incident Command / Crisis Leadership role highly desirable. Skills * Insurance terminology * Regulatory Compliance and Standards as it relates to Business Continuity and Crisis Response * Familiarity with safety and environmental engineering, construction practices, OSHA rulings, labor law, building costs and fire codes. * Ability to leverage AI enabled applications to improve efficiency, decision making, and workflow automation ## Additional Information #LI-MC1 WD thrives on the power and potential of diversity. As a global company, we believe the most effective way to embrace the diversity of our customers and communities is to mirror it from within. We believe the fusion of various perspectives results in the best outcomes for our employees, our company, our customers, and the world around us. We are committed to an inclusive environment where every individual can thrive through a sense of belonging, respect and contribution. WD is committed to offering opportunities to applicants with disabilities and ensuring all candidates can successfully navigate our careers website and our hiring process. Please contact us at [jobs.accommodations@wdc.com](mailto:staffingsupport@wdc.com) to advise us of your accommodation request. In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying. Notice To Candidates: Please be aware that WD and its subsidiaries will never request payment as a condition for applying for a position or receiving an offer of employment. Should you encounter any such requests, please report it immediately to [WD Ethics Helpline](https://secure.ethicspoint.com/domain/media/en/gui/48999/index.html) or email [compliance@wdc.com](mailto:compliance@wdc.com).", "summaryDescription" : "Senior Risk Analyst at Western Digital. Skills: Business continuity, Crisis management, Organizational resilience, Property risk. Consult and support business continuity. Develop enterprise-wide training", "postedDate" : "2026-06-15T02:53:44.000", "createdAt" : "2026-06-15T21:32:44.501", "lastUpdated" : "2026-06-16T04:37:15.596", "ingestTimestamp" : "2026-06-15T21:32:44.501", "mongoId" : "6a304f24f292fd229cee57d9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Business impact analyses", "Recovery strategies", "Crisis management plans", "Risk improvement recommendations", "Site risk assessments", "Insurance underwriting", "Loss-control investments", "Data validation", "Contract review", "Lease review", "Indemnification provisions", "Business continuity", "Crisis management", "Organizational resilience", "Property risk", "Risk engineering", "Loss prevention", "Crisis response", "Casualty exposure", "ISO 22301" ], "skillCount" : 20, "jobCategory" : "finance", "jobSubcategory" : "accounting", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 602.02496, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c6ac174d8ee00a090db9b", "title" : "Sr. Cybersecurity Operations Analyst", "company" : "Atlas Air", "salary" : { "min" : 135000.0, "max" : 185000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Operations Analyst in White Plains, NY, adjusted for industry and company size." }, "location" : "White Plains, NY, USA", "locations" : [ "White Plains", "NY", "USA" ], "timestamp" : "2026-06-15T22:36:57.018", "fingerprint" : "b22b12aba85b1209b9458c38499c58725ca1486cec8d9c90b54b808147e3e7ca", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.atlasairworldwide.com/careers/job-board/?gh_jid=4267649009", "externalId" : "4267649009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "White Plains", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "41.0339862,-73.7629097" } ], "locationText" : "White Plains, New York, United States", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "rawDescription" : "Join Atlas Air Worldwide. Move the World with Us! At Atlas Air Worldwide, we’re not just an airline, we’re a global engine powering cargo, passenger, and leasing operations across more than 70 countries. As a leader in outsourced aviation logistics, we’re built on a foundation of safety, service excellence, integrity, innovation, teamwork, and responsibility. With over 30 years of history, a modern all-Boeing fleet, and nearly 5,000 teammates collaborating across operations, technical, and corporate functions, we’re driven by purpose. If you're ready to grow, innovate, and help us deliver excellence every single day, you belong here. This position is responsible for cybersecurity operations and defense including threat assessment, incident handling, and managing vulnerabilities against Atlas Air Global Technology environment. Values and Behavioral Standards: To ensure the effective communication and application of company values and behavioral standards, as stated in our company “Code of Conduct” policy, and to respond appropriately in the event of any known departure. Major Job Responsibilities: This position will be responsible for security event monitoring, vulnerability assessments, web application penetration tests, integrity checking, and maintaining necessary standards we lift ambition.", "summaryDescription" : "Sr. Cybersecurity Operations Analyst at Atlas Air", "postedDate" : "2026-06-14T19:15:37.345", "createdAt" : "2026-06-14T19:15:37.345", "lastUpdated" : "2026-06-15T22:36:57.018", "ingestTimestamp" : "2026-06-14T19:15:37.345", "mongoId" : "6a2c6ac174d8ee00a090db9b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 135000, "salaryAnnualMax" : 185000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 596.05597, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Logistics", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c941a74d8ee00a0989af9", "title" : "Cybersecurity Risk Advisor (Mid Level)", "company" : "ASSYST, Inc.", "industry" : "Government", "salary" : { "min" : 115000.0, "max" : 155000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-Level Cybersecurity Risk Advisor in the United States, adjusted for remote work and the cybersecurity industry." }, "location" : "Remote, United States", "locations" : [ "Remote", "United States" ], "timestamp" : "2026-06-15T11:40:14.986", "fingerprint" : "5b33bd4b59a298ffaf9af91731917ecb33c59919f95d7254d1399d1a2c080e6e", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/assystinc/jobs/4192705009", "externalId" : "4192705009", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "minimumEducation" : "Bachelor's", "experienceMinYears" : 6, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Information security, Privacy testing, SDLC", "professionalSkills" : [ "Risk assessment", "Risk management" ], "hardSkillsList" : [ "Security frameworks", "Security policies", "Security processes", "Security procedures" ], "hardSkills" : [ { "name" : "Security frameworks", "level" : "intermediate" }, { "name" : "Security policies", "level" : "intermediate" }, { "name" : "Security processes", "level" : "intermediate" }, { "name" : "Security procedures", "level" : "intermediate" } ], "majorSkills" : "Risk Management Framework, FISMA systems, NIST SP 800", "majorSkillsList" : [ "Risk Management Framework", "FISMA systems", "NIST SP 800" ], "coreResponsibilities" : "Evaluate risk posture, Maintain risk posture, Communicate risk posture, Make risk-based recommendations, Act as subject matter expert, Provide guidance to stakeholders, Support stakeholders, Implement requirements, Enforce procedures, Ensure security testing, Consider testing results, Monitor system security, Review security artifacts, Provide recommendations to ISSO, Approve configuration deviations, Coordinate with ISSO, Identify information types, Assign security categorizations, Ensure legal authority, Determine privacy impacts, Manage information risk", "teamCollaboration" : "Coordinate with ISSO; Coordinate with POC", "domainKnowledge" : "FISMA; HIPAA; Privacy Act of 1974; NIST SP 800 series; FIPS 140; FIPS 199; FIPS 200; FIPS 201; NIST 800-53; PII protection; PIA concepts", "domainList" : [ "fisma", "hipaa", "privacy-act-of-1974", "nist-sp-800-series", "fips-140", "fips-199", "fips-200", "fips-201", "nist-800-53", "pii-protection", "pia-concepts" ], "domainSpecificKnowledge" : [ "FISMA", "HIPAA", "Privacy Act of 1974", "NIST SP 800 series", "FIPS 140", "FIPS 199", "FIPS 200", "FIPS 201", "NIST 800-53", "PII protection", "PIA concepts" ], "toolProficiency" : [ "MS Office" ], "communicationSkills" : "Communicate risk posture", "qualificationsBasic" : "6+ years experience, Bachelor's degree", "qualificationsPreferred" : "CISSP certification preferred, CISM certification preferred, Other relevant certifications preferred", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "ASSYST is seeking a Cybersecurity Risk Advisor to support federal Cybersecurity program. The Cybersecurity Risk Advisor will be responsible for evaluating, maintaining, and communicating the risk posture of each FISMA system to executive leadership and making risk-based recommendations. They will act as the subject matter expert in all areas of the Risk Management Framework (RMF) and provide guidance to stakeholders on required actions, strategies, and best practices for closure of identified weaknesses. Responsibilities: Support stakeholders in ensuring that all requirements specified by the Acceptable Risk Safeguards and the procedures and standards of the risk management framework are implemented and enforced Ensure information security and privacy testing is performed throughout the SDLC as appropriate, and results are considered during the development phase of the SDLC Monitor system security posture by reviewing all proposed information security and privacy artifacts to provide recommendations to the ISSO Provide guidance to stakeholders on required actions, strategies, and best practices for closure of identified weaknesses Serve as the authority to approve selected system configuration deviations from the required baseline Coordinate with the point of contact, including ISSO, for each FISMA system or collection of Personally Identifiable Information (PII)/Protected Health Information (PHI) to identify the types of information processed, assign appropriate security categorizations to information systems, ensure legal authority for activities involving PII/PHI. Determine privacy impacts and manage information security and privacy risk Job Requirements Bachelor's degree in Computer Science, Information Technology, Cyber Security, or related field CISSP, CISM, or other relevant certifications preferred 6+ years of professional experience developing and implementing information security/assurance programs, policies, processes, and procedures per various security frameworks/laws/standards/directives, e. g. FISMA; OMB directives; Presidential Directives; NIST (SP-800 series; FIPS); HIPAA of 1996; Privacy Act Comprehensive knowledge of the FISMA, HIPAA laws and Privacy Act of 1974 In-depth knowledge of the NIST SP 800 series documents, especially 800-34, 37,39 47, 53, 53A, 60, 63, 64, 137 and FIPS 140, 199, 200 and 201 In-depth knowledge of the 800-53 security control requirements and standard methods for implementing them Practical knowledge of IT System contingency planning Understanding of risk assessment and risk management concepts Good understanding of continuous monitoring and continuous authorization concepts Good understanding of the protection of PII and PIA concepts Expert use of MS Office, especially Word, PowerPoint, and Outlook ASSYST Benefits: We are proud to offer a robust benefits package including medical, dental, vision, 401(k) retirement plan, disability insurance, flexible spending accounts and more in order for our employees to maintain a secure work/life balance. ASSYST is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, disability, military status, national origin or any other characteristic protected under federal, state, or applicable local law", "summaryDescription" : "Cybersecurity Risk Advisor (Mid Level) at ASSYST, Inc.. Skills: Risk Management Framework, FISMA systems, NIST SP 800. Evaluate risk posture. Maintain risk posture", "postedDate" : "2026-06-14T03:49:12.214", "createdAt" : "2026-06-14T03:49:12.214", "lastUpdated" : "2026-06-15T11:40:14.986", "ingestTimestamp" : "2026-06-14T03:49:12.214", "mongoId" : "6a2c941a74d8ee00a0989af9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 115000, "salaryAnnualMax" : 155000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security frameworks", "Security policies", "Security processes", "Security procedures", "Risk Management Framework", "FISMA systems", "NIST SP 800", "Risk assessment", "Risk management", "FISMA", "HIPAA", "Privacy Act of 1974", "NIST SP 800 series", "FIPS 140", "FIPS 199", "FIPS 200", "FIPS 201", "NIST 800-53", "PII protection", "PIA concepts", "MS Office" ], "skillCount" : 21, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 594.8397, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.95 }, { "id" : "6a307962f292fd229c031df6", "title" : "Cybersecurity IAM Analyst", "company" : "Creative Artists Agency", "industry" : "Media", "salary" : { "min" : 95000.0, "max" : 115000.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "New York, NY", "locations" : [ "New York, NY", "United States of America" ], "timestamp" : "2026-06-16T11:27:59.401", "fingerprint" : "659aaeded6f247d5fdd7943aba955cf256e49e02b5f5c84ae05442001830ea43", "source" : "workday", "language" : "en", "applyUrl" : "https://caa.wd1.myworkdayjobs.com/Careers/job/New-York-NY/Cybersecurity-IAM-Analyst_JR8925", "externalId" : "JR8925", "industryFunction" : { }, "locationPoint" : "43.10535,-75.29128", "structuredLocations" : [ { "city" : "New York", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "40.7127281,-74.0060152" } ], "locationText" : "New York, New York, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "PowerShell, Python, JavaScript", "professionalSkills" : [ "Identity management", "Access management", "Lifecycle management", "Governance", "Auditing", "Reporting", "Automation", "Runbook development" ], "hardSkillsList" : [ "Identity lifecycle management", "Access control", "Provisioning", "De-provisioning", "Access reviews", "Entitlement management", "Role-based access control", "Privileged access management", "Just-in-time provisioning", "Least privilege", "Multi-factor authentication" ], "hardSkills" : [ { "name" : "Identity lifecycle management", "level" : "intermediate" }, { "name" : "Access control", "level" : "intermediate" }, { "name" : "Provisioning", "level" : "intermediate" }, { "name" : "De-provisioning", "level" : "intermediate" }, { "name" : "Access reviews", "level" : "intermediate" }, { "name" : "Entitlement management", "level" : "intermediate" }, { "name" : "Role-based access control", "level" : "intermediate" }, { "name" : "Privileged access management", "level" : "intermediate" }, { "name" : "Just-in-time provisioning", "level" : "intermediate" }, { "name" : "Least privilege", "level" : "intermediate" }, { "name" : "Multi-factor authentication", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity, Risk mitigation", "majorSkillsList" : [ "Cybersecurity", "Risk mitigation" ], "coreResponsibilities" : "Manage identity and access management operations, Provision and de-provision users, Process access requests, Perform user entitlement audits, Validate user access, Design identity and access management programs, Evaluate identity and access management programs, Analyze identity and access management programs, Test identity and access management programs, Debug identity and access management programs, Implement identity and access management programs, Maintain access management standards, Troubleshoot identity workflows, Fulfill identity workflows, Automate identity workflows, Automate identity processes, Execute periodic access reviews, Certify user access, Track remediation activities, Maintain role-based access control models, Maintain entitlement catalogs, Contribute to audit readiness, Collect evidence for IAM controls, Improve operational efficiency, Standardize operations, Develop runbooks, Participate in cross-functional initiatives, Integrate systems during M&A, Migrate systems", "teamCollaboration" : "HRIS; IT service owners; Service desk; Cross-functional initiatives", "domainKnowledge" : "Identity lifecycle management; Access management; Privileged access management; Least privilege principle; Cloud services", "domainList" : [ "identity-lifecycle-management", "access-management", "privileged-access-management", "least-privilege-principle", "cloud-services" ], "domainSpecificKnowledge" : [ "Identity lifecycle management", "Access management", "Privileged access management", "Least privilege principle", "Cloud services" ], "problemSolvingSkills" : "Troubleshoot identity workflows; Root cause analysis", "qualificationsBasic" : "2-3 years in Information Technology, 2 years' experience in Identity Management, Experience in lifecycle management, Experience in provisioning and de-provisioning, Knowledge of different MFA, Knowledge of compensating controls for identity, Knowledge of privilege identity management, Knowledge of privileged access management, Knowledge of just in time provisioning, Knowledge of just enough access, Knowledge of principal of least privilege, Familiarity with scripting in PowerShell, Familiarity with scripting in Python, Familiarity with scripting in JavaScript, Understanding of server operations, Understanding of operating systems, Understanding of cloud applications, Understanding of infrastructure, Deep understanding of user lifecycle, Deep understanding of provisioning/de-provisioning, Deep understanding of access requests, Deep understanding of user entitlements, Deep understanding of audit & validations", "qualificationsPreferred" : "MFA knowledge preferred, Privileged access management knowledge preferred, Just in time provisioning knowledge preferred, Just enough access knowledge preferred, Least privilege knowledge preferred", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## **Job Description** **Who We Are** Creative Artists Agency (CAA) is the leading entertainment and sports agency, with global expertise in filmed and live entertainment, digital media, publishing, sponsorship sales and endorsements, media finance, consumer investing, fashion, trademark licensing, and philanthropy. Distinguished by its culture of collaboration and exceptional client service, CAA’s diverse workforce identifies, innovates, and amplifies opportunities for the people and organizations that shape culture and inspire the world. The trailblazer of the agency business, CAA was the first to build a sports business, create an investment bank, launch a venture fund, found technology start-up companies, establish a philanthropic arm, build a business in China, and form a brand marketing services division, among other innovations. Named Most Valuable Sports Agency by Forbes for eight consecutive years, CAA represents more than 2,000 of the world’s top athletes in football, baseball, basketball, hockey, soccer, in addition to coaches, on-air broadcasters, and sports personalities and works in the areas of broadcast rights, corporate marketing initiatives, social impact, and sports properties for sales and sponsorship opportunities. Founded in 1975, CAA is headquartered in Los Angeles, and has offices in New York, Nashville, Memphis, Chicago, Miami, London, Munich, Geneva, Stockholm, Shanghai, and Beijing, among other locations globally. **The Role** This is a hands-on security position working within the Information Security group and with the internal IT department at large. This position’s core focus is to manage and coordinate the day-to-day functions of identity and access management operations. This role plays a critical part in protecting enterprise assets by ensuring that the right individuals have appropriate access to systems, applications, and data—aligned with business needs and risk tolerance. The IAM Analyst supports both operational execution (provisioning, access changes, incident response) and governance functions (access reviews, policy enforcement, identity lifecycle management), contributing to a scalable and auditable IAM program. We are looking for candidates who have a passion for cybersecurity, threat detection, risk mitigation, and response. You will be a key part of our efforts to build and support a defensible environment where we are able to detect, contain and respond quickly to threats and compromises in ways that serve to enable the business needs of a highly collaborative organization. The environment is fast-paced and commonly on the leading edge of technology, including early adoption of various cloud services along with the challenges of integrating those services into our security practice. **Responsibilities** * Have a deep understanding of user lifecycle management; including provisioning/de-provisioning, access requests, user entitlements and audit & validations * Provide design, evaluation, analysis, testing, debugging and implementation of identity and access management programs to support the company’s strategy * Maintain standards for access management across the company and department * Collaborate with HRIS, IT service owners, and service desk to troubleshoot and fulfill identity related workflows * Knowledge of identity governance workflows with the concepts of attestation and auditing. * Assist in automating identity workflows and processes for lifecycle management, auditing, reporting, governance and self-service * Execute periodic access reviews/certifications and track remediation activities * Maintain role-based access control (RBAC) models and entitlement catalogs * Contribute to audit readiness and evidence collection for IAM controls * Improve operational efficiency through standardization and runbook development * Participate in cross-functional initiatives, including M&A integrations and system migrations **Qualifications** * A minimum of 2-3 years in Information Technology * A minimum of 2 years’ experience in Identity Management * Experience in lifecycle management and provisioning and de-provisioning * Knowledge of different MFA and compensating controls for identity * Knowledge of privilege identity management, privileged access management, and concepts of just in time provisioning, just enough access, and principal of least privilege * Familiarity with scripting in at least one of the following languages: PowerShell, Python, JavaScript * A strong understanding of the fundamental operations of servers, operating systems, cloud applications, and infrastructure * Have a deep understanding of user lifecycle management; including provisioning/de-provisioning, access requests, user entitlements and audit & validations **Preferred Qualifications** * A minimum of 2 years’ experience in information security * A Bachelor’s or Master’s Degree in a relevant field of work * Account set-up and access management * Worked closely with human resources and help desk support staff * Demonstrated an organized and methodical approach to making improvements on past organizations technology projects * Experience in automation and integration with SaaS applications * Understanding of OAuth, SAML and OpenID frameworks * Building and using REST APIs * Knowledge and experience of SCIM provisioning and integration * Experience creating and supporting fully identity framework or IDaaS * An understanding of the NIST framework and using a continuous improvement loop * A familiarity with vulnerability assessment and network scanning tools * Knowledgeable in Identity governance frameworks **Desired Skills** Azure AD, Active Directory, AD Connect, Azure Automation, Power Automate, SAML, OpenID, WS-Fed, SSO, SCIM, OAuth, Programming (java, python), PowerShell, RESTful APIs, MSSQL, OGNL, GraphQL, Workday, SailPoint, Okta, Ping Federate, PingID, Splunk, RBAC **Location** This role is hybrid, based in our New York City office. **Compensation** The annual base salary for this position is in the range of $95,000 - $115,000 in New York, NY. This position is also eligible for benefits and a discretionary bonus. Ultimately, the salary may vary based upon, but not limited to, relevant experience, time in the role, business sector, and geographic location, among other criteria. Please talk with a CAA Recruiter to learn more. Creative Artists Agency, LLC (the “Company”) is committed to a policy of Equal Employment Opportunity and will not discriminate on the basis of race (inclusive of traits historically associated with race, including hair texture and protective hairstyles), color, religion, creed, gender or sex (including pregnancy, childbirth, breastfeeding or related medical conditions), national origin, ancestry, age, physical disability, mental disability, medical condition, genetic information, family and medical care leave status, military or veteran status, marital status, family status, sexual orientation, gender identity, gender expression, political affiliation, an employee’s or their dependent’s reproductive health decision making (e.g., the decision to use or access a particular drug, device or medical service), or any other characteristic protected by applicable law. The absence of a permanent address is not a bar to employment. The Company does not discriminate against individuals based on housing status, including the absence of a fixed address. The Company also complies with the Americans with Disabilities Act and applicable state and local laws with regard to providing reasonable accommodation for qualified individuals with disabilities. CAA does not accept unsolicited resumes from third-party recruiters unless they were contractually engaged by CAA to provide candidates for a specified opening. Any such employment agency, person or entity that submits an unsolicited resume does so with the acknowledgement and agreement that CAA will have the right to hire that applicant at its discretion without any fee owed to the submitting employment agency, person or entity.", "summaryDescription" : "Cybersecurity IAM Analyst at Creative Artists Agency. Skills: Cybersecurity, Risk mitigation. Manage identity and access management operations. Provision and de-provision users", "postedDate" : "2026-06-13T04:04:34.765", "createdAt" : "2026-06-16T04:04:34.752", "lastUpdated" : "2026-06-16T11:27:59.401", "ingestTimestamp" : "2026-06-16T04:04:34.752", "mongoId" : "6a307962f292fd229c031df6", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://caa.wd1.myworkdayjobs.com/Careers/job/New-York-NY/Cybersecurity-IAM-Analyst_JR8925", "salaryAnnualMin" : 95000, "salaryAnnualMax" : 115000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Identity lifecycle management", "Access control", "Provisioning", "De-provisioning", "Access reviews", "Entitlement management", "Role-based access control", "Privileged access management", "Just-in-time provisioning", "Least privilege", "Multi-factor authentication", "Cybersecurity", "Risk mitigation", "Identity management", "Access management", "Lifecycle management", "Governance", "Auditing", "Reporting", "Automation", "Runbook development", "Least privilege principle", "Cloud services" ], "skillCount" : 23, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "mid", "dataQualityScore" : 0.8888889, "_score" : 594.1988, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Media", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ec02074d8ee00a0e9d50c", "title" : "Technology Operations & Cybersecurity Analyst", "company" : "Gap International", "salary" : { "min" : 85000.0, "max" : 125000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for Technology Operations & Cybersecurity Analyst in Springfield, United States, adjusted for mid-seniority and full-time employment." }, "location" : "Springfield, Pennsylvania, United States", "locations" : [ "Springfield", "Pennsylvania", "United States" ], "timestamp" : "2026-06-16T03:49:12.895", "fingerprint" : "92e0559efb8376bffed4005889dceb687f20ea2d415667580f3406edc230fcba", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/gapinternational/jobs/6029338004", "externalId" : "6029338004", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Springfield", "state" : "Pennsylvania", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.9306677,-75.3201879" } ], "locationText" : "Springfield, Pennsylvania, United States", "experienceMinYears" : 3, "experienceMaxYears" : 6, "rawDescription" : "The Opportunity Gap International is seeking a Technology Operations & Cybersecurity Analyst to help power a high-performing, secure, and forward-looking technology environment. This is a hands-on, high-exposure role across IT operations, cybersecurity, and emerging technologies. You’ll keep the business running smoothly while helping us evolve how we leverage technology, especially through automation and AI. It’s ideal for someone who enjoys solving complex problems, takes ownership, and wants to build broad capability across systems, security, and innovation. RESPONSIBILITIES Technology Operations Support day-to-day performance of networks, systems, and endpoints Troubleshoot issues and escalate when needed Configure and maintain Windows and macOS devices Manage identity and access (Entra ID, Active Directory) Maintain documentation, inventory, and asset lifecycle End-User Experience Provide responsive, high-quality support to employees Support core tools (Microsoft 365, Zoom, VPN, endpoint/security platforms) Own onboarding/offboarding setup and readiness Help employees get the most out of workplace technologies, including AI tools Cybersecurity Monitor and respond to security alerts across systems and endpoints Investigate incidents (phishing, suspicious activity) Support patching, vulnerability management, and system hardening Maintain access controls and identity security practices Contribute to improving security operations and response readiness Automation, AI & Improvement Identify and implement opportunities to automate repetitive work Leverage AI to improve troubleshooting, response, and efficiency Stay current on emerging tech and bring forward practical ideas Contribute to improving overall performance, scalability, and user experience What We're Looking For 3–6 years of experience in IT operations, systems, or cybersecurity Strong troubleshooting and hands-on problem-solving ability Working knowledge of networking fundamentals (TCP/IP, DNS, VPNs, etc.) Experience with Windows and/or macOS environments Familiarity with Microsoft 365, Entra ID (Azure AD), and identity management Foundational understanding of cybersecurity principles and tools Strong communication skills and a service-oriented mindset Curiosity and interest in automation, AI, and improving how things work Why This Role Broad exposure across IT, security, and emerging tech Opportunity to build capability, not just maintain systems Real ownership in a high-performing environment Direct impact on how the company operates and evolves LOCATION Gap International associates are based out of our corporate office in the Philadelphia metropolitan area. In order to be considered for this role, applicants should be legally authorized to work in the US. Gap International is an equal opportunity employer and values diversity. All employment is decided on the basis of qualifications, merit and business need, and all qualified candidates will receive consideration.", "summaryDescription" : "Technology Operations & Cybersecurity Analyst at Gap International", "postedDate" : "2026-06-14T20:04:04.627", "createdAt" : "2026-06-14T20:04:04.627", "lastUpdated" : "2026-06-16T03:49:12.895", "ingestTimestamp" : "2026-06-14T20:04:04.627", "mongoId" : "6a2ec02074d8ee00a0e9d50c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 85000, "salaryAnnualMax" : 125000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Mid", "dataQualityScore" : 0.6666667, "_score" : 584.63403, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustryConfidence" : 0.92 }, { "id" : "6a26123574d8ee00a01f48fa", "title" : "Associate, Third Party Risk Management", "company" : "Pfizer", "industry" : "Information & Business Tech", "salary" : { "min" : 26000.0, "max" : 35000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Junior Associate, Third Party Risk Management in Pharma in Greece, adjusted for city tier and company size." }, "location" : "Greece", "locations" : [ "Greece" ], "certifications" : [ "CISSP", "CISM", "CRISC", "CISA", "PMP" ], "timestamp" : "2026-06-12T16:15:37.470", "fingerprint" : "a4803a0d3ee5d91981feb77fcfbe4667512fc4820dd8846599f773167268e10b", "source" : "workday", "language" : "en", "applyUrl" : "https://pfizer.wd1.myworkdayjobs.com/PfizerCareers/job/Greece-Thessaloniki-Chortiatis/Associate--Third-Party-Risk-Management_4958260", "externalId" : "4958260", "industryFunction" : { }, "locationPoint" : "39.0742,21.8243", "structuredLocations" : [ { "country" : "Greece", "continent" : "eu", "workMode" : "hybrid" } ], "locationText" : "Greece", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 1, "experienceMaxYears" : 2, "professionalSkills" : [ "Risk management", "Compliance", "Information protection" ], "hardSkillsList" : [ "Due-diligence reviews", "Risk assessments", "Audit support", "Vendor risk records", "Evidence collection", "Remediation tracking", "Operational metrics" ], "softSkillsList" : [ "Interpersonal skills", "Business communication", "Organizational skills", "Adaptability", "Problem-solving" ], "hardSkills" : [ { "name" : "Due-diligence reviews", "level" : "intermediate" }, { "name" : "Risk assessments", "level" : "intermediate" }, { "name" : "Audit support", "level" : "intermediate" }, { "name" : "Vendor risk records", "level" : "intermediate" }, { "name" : "Evidence collection", "level" : "intermediate" }, { "name" : "Remediation tracking", "level" : "intermediate" }, { "name" : "Operational metrics", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Interpersonal skills" }, { "name" : "Business communication" }, { "name" : "Organizational skills" }, { "name" : "Adaptability" }, { "name" : "Problem-solving" } ], "majorSkills" : "Cybersecurity, Risk assessment", "majorSkillsList" : [ "Cybersecurity", "Risk assessment" ], "coreResponsibilities" : "Support the end-to-end lifecycle of cyber TPRM assessments, Assist in maintaining TPRM documentation, templates, and processes, Support vendor assessments by gathering security documents, Review information and highlight gaps, Assist with due-diligence activities by sending questionnaires, Track responses and ensure information is complete, Assist and track remediation plans and due dates, Track open items through to closure, Ensure evidence meets documentation standards, Assist with periodic reassessments and continuous monitoring activities, Produce and maintain TPRM operational metrics and dashboards", "teamCollaboration" : "Work effectively across levels and functions; Collaborative mindset", "domainKnowledge" : "Cyber TPRM; Vendor risk", "domainList" : [ "cyber-tprm", "vendor-risk" ], "domainSpecificKnowledge" : [ "Cyber TPRM", "Vendor risk" ], "toolProficiency" : [ "GRC/TPRM tools" ], "communicationSkills" : "Business communication", "documentationSkills" : "Documentation standards", "problemSolvingSkills" : "Problem-solving", "specialRequirements" : "Travel as required, Work in assigned Pfizer office 2-3 days per week", "qualificationsBasic" : "Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field OR equivalent practical experience, 1-2 years of experience in information security, risk, compliance, information protection, or related disciplines, Experience with audits, assessments or compliance reviews, Experience reviewing documents, questionnaires, or technical evidence with attention to detail", "qualificationsPreferred" : "Experience working in pharmaceuticals industry, Experience with GRC/TPRM tools, Demonstrated experience in an agile work environment", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "## **ROLE SUMMARY** Our Global Governance, Risk, and Compliance (GRC) team provides comprehensive blueprints for cybersecurity excellence by embedding governance, risk management, and compliance into every layer. The team is responsible for ensuring risk-based decision-making is used and that security, privacy, and regulatory compliance is integrated seamlessly with Pfizer’s organization. We are looking for an Associate to join our Third-Party Risk Management team, supporting key activities such as due‑diligence reviews, audit support, and maintaining accurate vendor risk records. This role involves engaging with third parties to complete risk assessments, collecting required evidence, ensuring updates are captured, and maintaining visibility into third‑party risks. ## **ROLE RESPONSIBILITIES** * Support the end‑to‑end lifecycle of cyber TPRM assessments: intake, scoping, due diligence, risk evaluation, documentation, remediation tracking, and closure. * Assist in maintaining TPRM documentation, templates, and processes to support a consistent approach across vendors. * Support vendor assessments by gathering security documents, reviewing information, and highlighting gaps that differ from the policies. * Assist with due‑diligence activities by sending questionnaires, tracking responses, and ensuring information is complete. * Assist and track remediation plans and due dates with vendors and internal stakeholders for identified gaps. * Track open items through to closure, ensuring evidence meets documentation standards. * Assist with periodic reassessments and continuous monitoring activities for higher‑risk vendors, including change‑triggered reviews (e.g., new data types, expanded scope, incidents, acquisitions). * Produce and maintain TPRM operational metrics and dashboards. ## **BASIC QUALIFICATIONS** * Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field **OR** equivalent practical experience. * 1-2 years of experience in information security, risk, compliance, information protection, or related disciplines. * Experience with audits, assessments or compliance reviews. * Excellent collaboration and interpersonal skills, with the ability to work effectively across levels and functions to support program objectives. * Experience reviewing documents, questionnaires, or technical evidence with attention to detail. * Strong business communication skills and organizational skills with the ability to manage multiple assessments/tasks in parallel. ## **PREFERRED QUALIFICATIONS** * Experience working in pharmaceuticals industry. * Professional certifications such as CISSP, CISM, CRISC, CISA, PMP, or similar. * Experience with GRC/TPRM tools (e.g., Archer). * Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset, adaptability to change, and a proactive problem-solving approach. **** ## **NON-STANDARD WORK SCHEDULE, TRAVEL OR ENVIRONMENT REQUIREMENTS** * Travel as required by the business (less than 20% domestic and/or international) * Work Location Assignment: Must be able to work in assigned Pfizer office 2-3 days per week, or as needed by the business _Please apply by sending your CV in English._ Work Location Assignment: Hybrid _Purpose_ **Breakthroughs that change patients ' lives**... At Pfizer we are a patient centric company, guided by our four values: courage, joy, equity and excellence. Our breakthrough culture lends itself to our dedication to transforming millions of lives. _Digital Transformation Strategy_ One bold way we are achieving our purpose is through our company wide digital transformation strategy. We are leading the way in adopting new data, modelling and automated solutions to further digitize and accelerate drug discovery and development with the aim of enhancing health outcomes and the patient experience. _Flexibility_ We aim to create a trusting, flexible workplace culture which encourages employees to achieve work life harmony, attracts talent and enables everyone to be their best working self. Let’s start the conversation! _Equal Employment Opportunity_ We believe that a diverse and inclusive workforce is crucial to building a successful business. As an employer, Pfizer is committed to celebrating this, in all its forms – allowing for us to be as diverse as the patients and communities we serve. Together, we continue to build a culture that encourages, supports and empowers our employees. _Disability Inclusion_ Our mission is unleashing the power of all our people and we are proud to be a disability inclusive employer, ensuring equal employment opportunities for all candidates. We encourage you to put your best self forward with the knowledge and trust that we will make any reasonable adjustments to support your application and future career. Your journey with Pfizer starts here! Pfizer endeavors to make www.pfizer.com/careers accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process and/or interviewing, please email disabilityrecruitment@pfizer.com. This is to be used solely for accommodation requests with respect to the accessibility of our website, online application process and/or interviewing. Requests for any other reason will not be returned. To learn more about acceptable and prohibited uses of AI during the recruitment process, please review our candidate AI-use guidelines available on [ _Pfizer Careers_](https://www.pfizer.com/about/careers/ai-use-guidelines). Information & Business Tech", "summaryDescription" : "Associate, Third Party Risk Management at Pfizer. Skills: Cybersecurity, Risk assessment. Support the end-to-end lifecycle of cyber TPRM assessments. Assist in maintaining TPRM documentation, templates, and processes", "postedDate" : "2026-06-09T11:43:27.688", "createdAt" : "2026-06-11T11:43:27.646", "lastUpdated" : "2026-06-12T16:15:37.470", "ingestTimestamp" : "2026-06-11T11:43:27.646", "mongoId" : "6a26123574d8ee00a01f48fa", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://pfizer.wd1.myworkdayjobs.com/PfizerCareers/job/Greece-Thessaloniki-Chortiatis/Associate--Third-Party-Risk-Management_4958260", "salaryBand" : "<30k", "hasSalary" : false, "allSkills" : [ "Due-diligence reviews", "Risk assessments", "Audit support", "Vendor risk records", "Evidence collection", "Remediation tracking", "Operational metrics", "Interpersonal skills", "Business communication", "Organizational skills", "Adaptability", "Problem-solving", "Cybersecurity", "Risk assessment", "Risk management", "Compliance", "Information protection", "Cyber TPRM", "Vendor risk", "CISSP", "CISM", "CRISC", "CISA", "PMP", "GRC/TPRM tools" ], "skillCount" : 25, "jobCategory" : "other", "seniorityLevel" : "mid", "dataQualityScore" : 0.8888889, "_score" : 576.10254, "daysOld" : 3, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Information & Business Tech" }, { "id" : "6a2c8c8274d8ee00a0975b05", "title" : "Senior Risk & Compliance Analyst", "company" : "WHOOP", "industry" : "Information Security", "salary" : { "min" : 130000.0, "max" : 170000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Boston, MA", "locations" : [ "Boston, MA" ], "certifications" : [ "CRISC", "CISSP", "CISM", "CISA", "CGRC" ], "timestamp" : "2026-06-15T06:47:53.325", "fingerprint" : "b932282e697676ad4a9e91be23a720f1f76a035aeb8442a7053a168c6de4f917", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/whoop/c93d1e01-6276-4cb1-af80-bfebb318c11b/application", "externalId" : "c93d1e01-6276-4cb1-af80-bfebb318c11b", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Boston", "state" : "Massachusetts", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "42.3588336,-71.0578303" } ], "locationText" : "Boston, Massachusetts, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 6, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Cloud environments, Identity models, Data flows, Artificial intelligence, Machine learning", "professionalSkills" : [ "Risk assessments", "Control effectiveness", "Risk register", "Risk scenarios", "Risk analysis", "Risk reporting", "System designs", "Cloud architecture", "Platform changes", "Third-party integrations", "Model behavior", "Data usage", "Security implications", "Prompt manipulation", "External dependencies", "Risk treatment", "Governance practices" ], "hardSkillsList" : [ "Cyber risk management", "Information security", "Technology risk", "Quantitative risk analysis", "Risk measurement", "Risk communication", "Security architecture", "Security engineering", "Product security", "Emerging technologies", "AI governance" ], "hardSkills" : [ { "name" : "Cyber risk management", "level" : "intermediate" }, { "name" : "Information security", "level" : "intermediate" }, { "name" : "Technology risk", "level" : "intermediate" }, { "name" : "Quantitative risk analysis", "level" : "intermediate" }, { "name" : "Risk measurement", "level" : "intermediate" }, { "name" : "Risk communication", "level" : "intermediate" }, { "name" : "Security architecture", "level" : "intermediate" }, { "name" : "Security engineering", "level" : "intermediate" }, { "name" : "Product security", "level" : "intermediate" }, { "name" : "Emerging technologies", "level" : "intermediate" }, { "name" : "AI governance", "level" : "intermediate" } ], "majorSkills" : "Risk management, Compliance, Cybersecurity, AI risk", "majorSkillsList" : [ "Risk management", "Compliance", "Cybersecurity", "AI risk" ], "coreResponsibilities" : "Lead cyber and technology risk assessments, Evaluate threats, vulnerabilities, control effectiveness, Maintain enterprise cyber risk register, Draft risk statements, Track mitigation plans, Support governance and reporting, Translate technical findings into business risk, Support quantitative cyber risk analysis, Prepare risk committee materials, Support executive risk reporting, Partner with Security Architecture, Assess risk in system designs, Assess risk in cloud architecture, Assess risk in identity models, Assess risk in data flows, Assess risk in platform changes, Collaborate with Security Engineering, Collaborate with Product Security, Collaborate with Legal, Collaborate with IT, Collaborate with business teams, Evaluate new initiatives, Evaluate technology changes, Evaluate AI use cases, Evaluate third-party integrations, Conduct risk assessments for emerging technologies, Evaluate data usage, Evaluate model behavior, Evaluate external dependencies, Evaluate security implications, Evaluate risks associated with AI, Evaluate risks associated with model behavior, Evaluate risks associated with data exposure, Evaluate risks associated with prompt manipulation, Evaluate risks associated with external model dependencies, Develop dashboards and reporting, Provide leadership visibility, Track mitigation progress, Track risk treatment activities, Ensure accountability, Document outcomes, Contribute to cyber risk management processes, Contribute to methodologies, Contribute to governance practices", "teamCollaboration" : "Cross-functional teams; Engineering, architecture, legal, compliance, business stakeholders", "domainKnowledge" : "NIST CSF; ISO 27001; PCI DSS; GDPR; HIPAA; NIST AI RMF; ISO/IEC 42001", "domainList" : [ "nist-csf", "iso-27001", "pci-dss", "gdpr", "hipaa", "nist-ai-rmf", "iso-iec-42001" ], "domainSpecificKnowledge" : [ "NIST CSF", "ISO 27001", "PCI DSS", "GDPR", "HIPAA", "NIST AI RMF", "ISO/IEC 42001" ], "communicationSkills" : "Executive risk reporting; Presenting findings", "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "6+ years cybersecurity risk management, Demonstrated experience conducting risk assessments, Experience maintaining risk registers, Familiarity with regulatory environments, Ability to translate technical findings, Written and verbal communication skills, Experience working with stakeholders, Experience assessing AI risks", "qualificationsPreferred" : "Professional certifications a plus", "workSiteFlexibility" : "Onsite", "rawDescription" : "RESPONSIBILITIES: - - Lead cyber and technology risk assessments across systems, cloud environments, business processes, and major initiatives, evaluating threats, vulnerabilities, control effectiveness, and residual risk. - Maintain and operate the enterprise cyber risk register, including drafting risk statements, tracking mitigation plans, and supporting governance and reporting processes. - Translate technical findings, architectural concerns, and control gaps into clear business risk scenarios that support prioritization and decision-making. - Support and help mature quantitative cyber risk analysis approaches such as FAIR to improve how risk is measured and communicated. - Prepare materials and analysis to support the Cyber Risk Committee and executive risk reporting. - Partner with Security Architecture to assess risk in system designs, cloud architecture, identity models, data flows, and platform changes. - Collaborate with Security Engineering, Product Security, Legal, IT, and business teams to evaluate new initiatives, technology changes, artificial intelligence use cases, and third-party integrations through a risk lens. - Conduct risk assessments for emerging technologies including artificial intelligence and machine learning systems, evaluating data usage, model behavior, external dependencies, and security implications. - Evaluate risks associated with the use of artificial intelligence technologies, including model behavior, data exposure, prompt or input manipulation, and external model dependencies. - Develop dashboards and reporting that provide leadership with visibility into key cybersecurity risks and trends. - Track mitigation progress and risk treatment activities to ensure accountability and clear documentation of outcomes. - Contribute to the continued development of cyber risk management processes, methodologies, and governance practices across the GRC program. QUALIFICATIONS: - - 6+ years of experience in cybersecurity risk management, information security, technology risk, or a related field. - Demonstrated experience conducting structured cybersecurity or IT risk assessments. - Experience maintaining risk registers and tracking risk mitigation or treatment activities. - Strong understanding of security frameworks such as NIST CSF, ISO 27001, or PCI DSS, and familiarity with regulatory environments such as GDPR, HIPAA or other privacy and data protection requirements. - Ability to translate technical findings into clear business risk for non-technical stakeholders. - Strong written and verbal communication skills with experience presenting findings to cross-functional teams. - Experience working with engineering, architecture, legal, compliance, and business stakeholders. - Experience assessing risks related to artificial intelligence, machine learning systems, or emerging technologies, including familiarity with emerging AI governance frameworks such as NIST AI RMF, ISO/IEC 42001, or similar standards. - Professional certifications such as CRISC, CISSP, CISM, CISA, or CGRC are a plus. This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office. Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply. WHOOP is an Equal Opportunity Employer and participates in E-verify https://www.e-verify.gov/to determine employment eligibility The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values. At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success. The U.S. base salary range for this full-time position is $130,000 - $170,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training. In addition to the base salary, the successful candidate will also receive benefits and a generous equity package. These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements. ", "summaryDescription" : "Senior Risk & Compliance Analyst at WHOOP. Skills: Risk management, Compliance, Cybersecurity, AI risk. Lead cyber and technology risk assessments. Evaluate threats, vulnerabilities, control effectiveness", "createdAt" : "2026-06-14T02:10:24.065", "lastUpdated" : "2026-06-15T06:47:53.325", "ingestTimestamp" : "2026-06-14T02:10:24.065", "mongoId" : "6a2c8c8274d8ee00a0975b05", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 130000, "salaryAnnualMax" : 170000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Cyber risk management", "Information security", "Technology risk", "Quantitative risk analysis", "Risk measurement", "Risk communication", "Security architecture", "Security engineering", "Product security", "Emerging technologies", "AI governance", "Risk management", "Compliance", "Cybersecurity", "AI risk", "Risk assessments", "Control effectiveness", "Risk register", "Risk scenarios", "Risk analysis", "Risk reporting", "System designs", "Cloud architecture", "Platform changes", "Third-party integrations", "Model behavior", "Data usage", "Security implications", "Prompt manipulation", "External dependencies", "Risk treatment", "Governance practices", "NIST CSF", "ISO 27001", "PCI DSS", "GDPR", "HIPAA", "NIST AI RMF", "ISO/IEC 42001", "CRISC", "CISSP", "CISM", "CISA", "CGRC" ], "skillCount" : 44, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 573.8257, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2d149174d8ee00a0ae7b6b", "title" : "Cybersecurity Analyst, IT Operations", "company" : "Fors Marsh", "industry" : "Cybersecurity", "salary" : { "min" : 85000.0, "max" : 125000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Analyst in the Technology industry in the United States, adjusted for remote work and company size." }, "location" : "United States", "locations" : [ "Arlington", "VA", "United States" ], "timestamp" : "2026-06-15T08:39:13.122", "fingerprint" : "a6836faf2cfae74b0ac49670ad0ff5e634257163183beb15a764ef30b890be9a", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://fors-marsh-group.breezy.hr/p/3f533063ebac-cybersecurity-analyst-it-operations", "externalId" : "3f533063ebac", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "employmentType" : "FULL_TIME", "remoteFriendly" : true, "rawDescription" : "WHO WE ARE: At Fors Marsh, we take on issues that matter. We are a team of researchers, strategists, and communicators working together to drive lasting change. We look at human behavior from all angles with a deep understanding of people and context to design solutions that influence decision-mak", "summaryDescription" : "Cybersecurity Analyst, IT Operations at Fors Marsh", "createdAt" : "2026-06-14T07:04:33.457", "lastUpdated" : "2026-06-15T08:39:13.122", "ingestTimestamp" : "2026-06-14T07:04:33.457", "mongoId" : "6a2d149174d8ee00a0ae7b6b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 85000, "salaryAnnualMax" : 125000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.6666667, "_score" : 569.04486, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a25145474d8ee00a00bb3a9", "title" : "UX Designer, Secure Third Party Tools", "company" : "Amazon.com Services LLC", "industry" : "Software Development, Design, amazon security", "salary" : { "min" : 117800.0, "max" : 160000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-14T22:28:07.768", "fingerprint" : "47bc058ac477bacdfc5c6bcd21406365be84b56bb32a823afb3eca389b8a1829", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10441385/apply", "externalId" : "e292c0ee-25b1-429b-b441-738e8c907de4", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Figma, Adobe Creative Cloud", "professionalSkills" : [ "Security workflows", "User experience design", "Interaction design" ], "hardSkillsList" : [ "Usability principles", "Prototyping", "Wireframing", "High-fidelity mockups" ], "hardSkills" : [ { "name" : "Usability principles", "level" : "intermediate" }, { "name" : "Prototyping", "level" : "intermediate" }, { "name" : "Wireframing", "level" : "intermediate" }, { "name" : "High-fidelity mockups", "level" : "intermediate" } ], "majorSkills" : "UX design, Interface design, Visual design, Design systems", "majorSkillsList" : [ "UX design", "Interface design", "Visual design", "Design systems" ], "coreResponsibilities" : "Design end-to-end process for complex security workflow features, Develop wireframes, interactive prototypes, and high-fidelity mockups, Create and extend design systems, Communicate design strategy, rationale, and outcomes", "teamCollaboration" : "Partner closely with PMT, engineering, UX Research and security teams; Collaborate with Product Managers, Security Engineers, Software Development Engineers, and Applied Scientists; Cross-functional team", "domainKnowledge" : "Third-party security; Security workflows", "domainList" : [ "third-party-security", "security-workflows" ], "domainSpecificKnowledge" : [ "Third-party security", "Security workflows" ], "toolProficiency" : [ "Figma", "Adobe Creative Cloud" ], "communicationSkills" : "Compelling storytelling; Clear documentation", "documentationSkills" : "Clear documentation", "innovationCreativity" : "Sketching early concepts", "problemSolvingSkills" : "Translate complex security workflows into intuitive, efficient experiences", "outcomesObjectives" : "Reduce friction; Improve assessment accuracy; Drive adoption", "qualificationsBasic" : "Bachelor's degree in design or equivalent, 3+ years of design experience, Experience designing and prototyping with tools such as Figma, Adobe Creative Cloud, or similar, Knowledge of usability principles and techniques", "qualificationsPreferred" : "Experience in delivering design solutions as a UX designer or interaction designer, Experience working in a collaborative team, Working directly with developers for implementation of designs", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "We're seeking a customer-obsessed UX Designer to join the Secure Third-Party Tools (S3T) organization within Amazon Security. S3T builds the tools and processes that maintain Amazon's security bar when interacting with 3P. In this role, you'll help transform and design the end-to-end user experience for S3T's suite of tools. Your customers will be varied, from Amazon builders who work with 3P, security engineers who evaluate risk, and partner teams who rely on our data to make informed decisions. You'll translate complex security workflows into intuitive, efficient experiences that help users move faster while maintaining the Amazon security bar. This is a high-impact role where your design decisions directly affect the speed and quality of security outcomes across Amazon. You'll work with Product Managers, Security Engineers, Software Development Engineers, and Applied Scientists to deliver experiences that reduce friction, improve assessment accuracy, and drive adoption. Key job responsibilities - Design end-to-end process for complex security workflow features—from discovery and concept development through prototyping, testing, and delivery. - Partner closely with PMT, engineering, UX Research and security teams to understand customer pain points, define problem statements, and design solutions that balance user needs, technical feasibility, and security requirements. - Develop wireframes, interactive prototypes, and high-fidelity mockups to clearly communicate design intent to engineering partners and stakeholders. - Create and extend design systems, component libraries, and interaction patterns that ensure consistency and scalability across the S3T product suite. - Communicate design strategy, rationale, and outcomes to stakeholders and senior leadership through compelling storytelling and clear documentation. A day in the life In this role, you'll design experiences that make complex security workflows feel simple and efficient. One week you might collaborate with research on findings from a recent study, translating insights into a more seamless workflow. The next week, you might be iterating on a dashboard with your Product partner, designing how professionals review AI-generated outputs and provide feedback. You'll operate with enough autonomy to define the design direction for your product areas while being supported by a collaborative cross-functional team. You'll regularly present your work to leadership, influence product strategy through design insights, and help shape the future of how Amazon manages third-party security at scale. No two days are the same—you might be sketching early concepts for a new monitoring experience in the morning, reviewing prototypes with researchers in the afternoon, and syncing with your engineering partner on implementation constraints before end of day. About the team About Amazon Security Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Bachelor's degree in in graphic design, industrial design, digital communications design, visual arts, mass communications, art, or equivalent - 3+ years of design experience - Experience designing and prototyping with tools such as Figma, Adobe Creative Cloud, or similar - Knowledge of usability principles and techniques Preferred Qualifications: - Experience in delivering design solutions as a UX designer or interaction designer - Experience working in a collaborative team and working directly with developers for implementation of designs Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, TX, Austin - 117,800.00 - 160,000.00 USD annually USA, VA, Arlington - 117,800.00 - 160,000.00 USD annually USA, WA, Seattle - 117,800.00 - 160,000.00 USD annually", "summaryDescription" : "UX Designer, Secure Third Party Tools at Amazon.com Services LLC. Skills: UX design, Interface design, Visual design, Design systems. Design end-to-end process for complex security workflow features. Develop wireframes, interactive prototypes, and high-fidelity mockups", "postedDate" : "2026-06-13T02:45:32.842", "createdAt" : "2026-06-13T02:45:32.842", "lastUpdated" : "2026-06-14T22:28:07.768", "ingestTimestamp" : "2026-06-13T02:45:32.842", "mongoId" : "6a25145474d8ee00a00bb3a9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10441385/apply", "salaryAnnualMin" : 117800, "salaryAnnualMax" : 160000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Usability principles", "Prototyping", "Wireframing", "High-fidelity mockups", "UX design", "Interface design", "Visual design", "Design systems", "Security workflows", "User experience design", "Interaction design", "Third-party security", "Figma", "Adobe Creative Cloud" ], "skillCount" : 14, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 567.5827, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "69d5e4952beec4dd3d931802", "title" : "Sr. Product Manager - Tech, Secure Third Party Tools", "company" : "Amazon.com Services LLC", "industry" : "Project/Program/Product Management--Technical, Product Management - Technical, amazon security", "salary" : { "min" : 151000.0, "max" : 204600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T05:53:48.500", "fingerprint" : "b85b346a124dccff544ef7d4c0e23d881cf39a8f52ab8423a54c2e2420eda264", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10385417/apply", "externalId" : "d60a3785-de00-49e6-96d7-357d144176b0", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "professionalSkills" : [ "Product strategy", "Roadmap planning", "User stories", "Technical solutions" ], "hardSkillsList" : [ "Roadmap strategy", "Feature delivery", "Tradeoff analysis" ], "softSkillsList" : [ "Curiosity", "Decisiveness", "Influencing stakeholders" ], "hardSkills" : [ { "name" : "Roadmap strategy", "level" : "intermediate" }, { "name" : "Feature delivery", "level" : "intermediate" }, { "name" : "Tradeoff analysis", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Curiosity" }, { "name" : "Decisiveness" }, { "name" : "Influencing stakeholders" } ], "majorSkills" : "Product management, Technical leadership, Security products", "majorSkillsList" : [ "Product management", "Technical leadership", "Security products" ], "coreResponsibilities" : "Optimize product solutions and investments, Balance near term value delivery, Drive release schedules, Track progress with clarity, Raise the security bar, Own product/solution portfolio, Escalate as required, Utilize feedback, Facilitate continuous improvement, Make plans, Stay two steps ahead, Identify and clarify requirements, Map needs to metrics, Create plans to solve problems, Deliver results, Manage the schedule, Optimize solution scope, Account for challenges, Focus on solutions, Make trade-off decisions, Uphold quality", "teamCollaboration" : "Cross-functional collaboration; Engage development team; Work with customers; Engage stakeholders", "projectManagementSkills" : [ "Roadmap planning", "Schedule management" ], "domainKnowledge" : "Third party tools; Security products; Amazon security", "domainList" : [ "third-party-tools", "security-products", "amazon-security" ], "domainSpecificKnowledge" : [ "Third party tools", "Security products", "Amazon security" ], "toolProficiency" : [ "Tableau", "Qlikview", "QuickSight" ], "communicationSkills" : "Written communication; Verbal communication", "continuousLearning" : "Learning experiences; Training resources", "innovationCreativity" : "Experimentation; Build automation; Re-imagine security products", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Data analysis", "outcomesObjectives" : "Drive results; Deliver recognized benefits", "qualificationsBasic" : "Bachelor's degree, Experience owning/driving roadmap strategy, Experience with feature delivery, Experience contributing to engineering discussions", "qualificationsPreferred" : "Experience in using analytical tools, Experience in building and driving adoption, Experience managing technical products, Experience in representing and advocating for customers", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon Security is seeking a curious PM-T who is driven by experimentation and motivated to build automation. The Secure Third Party Tools team has bold ambitions to re-imagine security products that serve Amazon's pace of innovation at our global scale. Technical Product Managers are integral to own roadmap planning through single-threaded-leadership to efficiently engage the development team and customers. They will work backwards from multiple customer sets to proactively learn, research, benchmark, document opportunities for technical solutions will drive results. Key job responsibilities Continually optimizing product solutions and investments while balancing near term value delivery with long term customer needs. Systematically driving release schedules and tracking progress with clarity of communication (written and verbal), so that customers receive recognized benefits early and often. Assist on scaling other PMTs through the organization with mechanisms that focus on: - Raising the security bar to value customers first - Owning product/solution portfolio - Properly escalating as required - Humbly utilizing feedback - Facilitating continuous improvement - Making plans, and staying two steps ahead of organizational, customer and security needs A day in the life PMTs work backwards from Customer needs to identify and clarify requirements, map needs to key business metrics and goals, and create plans to solve business problems using technology solutions. While others may become distracted with competing objectives or motivations, the PMT delivers results, manages the schedule, and optimizes solution scope at the earliest feasible time frame. When barriers, surprises and constraints threaten delivery, the successful PMT accounts for challenges by focusing on solutions to optimize results, making the right trade-off decisions. How the accomplish this is command of data, customer need awareness, decisiveness, influencing stakeholders, collaborating but doing their own homework. Creating/scaling quality results that address constraints and uphold quality. About the team Security is central to maintaining customer trust and delivering delightful customer experiences. At Amazon, our Security organization is designed to drive bar-raising security engagements. Our vision is that our customers are Amazon builders that raise the Amazon security bar when they use our recommended tools and processes, with no overhead to their business. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, Security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Bachelor's degree - Experience owning/driving roadmap strategy and definition - Experience with feature delivery and tradeoffs of a product - Experience contributing to engineering discussions around technology decisions and strategy related to a product Preferred Qualifications: - Experience in using analytical tools, such as Tableau, Qlikview, QuickSight - Experience in building and driving adoption of new tools - Experience managing technical products or online services - Experience in representing and advocating for a variety of critical customers and stakeholders during executive-level prioritization and planning Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 151,200.00 - 204,600.00 USD annually", "summaryDescription" : "Sr. Product Manager - Tech, Secure Third Party Tools at Amazon.com Services LLC. Skills: Product management, Technical leadership, Security products. Optimize product solutions and investments. Balance near term value delivery", "postedDate" : "2026-06-13T06:54:14.611", "createdAt" : "2026-06-13T06:54:14.611", "lastUpdated" : "2026-06-15T05:53:48.500", "ingestTimestamp" : "2026-06-13T06:54:14.611", "mongoId" : "69d5e4952beec4dd3d931802", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10385417/apply", "salaryAnnualMin" : 151000, "salaryAnnualMax" : 204600, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Roadmap strategy", "Feature delivery", "Tradeoff analysis", "Curiosity", "Decisiveness", "Influencing stakeholders", "Product management", "Technical leadership", "Security products", "Product strategy", "Roadmap planning", "User stories", "Technical solutions", "Schedule management", "Third party tools", "Amazon security", "Tableau", "Qlikview", "QuickSight" ], "skillCount" : 19, "jobCategory" : "project-management", "dataQualityScore" : 1.0, "_score" : 562.85565, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2c5dc974d8ee00a08de8b8", "title" : "Cybersecurity Analyst", "company" : "SkyePoint Decisions", "industry" : "IT service provider", "salary" : { "min" : 95000.0, "max" : 135000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Analyst in Arlington, United States, adjusted for industry and contract employment type." }, "location" : "1801 North Lynn St, Arlington, VA 22209", "locations" : [ "1801 North Lynn St", "Arlington", "VA 22209" ], "certifications" : [ "CISSP-ISSAP", "CISSP-ISSEP", "CISSP", "Security+ CE", "CySA+", "PPDA", "Agile IC", "SNOW App Dev" ], "timestamp" : "2026-06-15T00:47:32.599", "fingerprint" : "ac1a419fb03473c9fa3f06eee0d53bbb3539addd4fcad99688fd84023b604265", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/skyepointdecisionsinc/jobs/4273942009", "externalId" : "4273942009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" } ], "locationText" : "Arlington, Virginia, United States", "employmentType" : "CONTRACT", "minimumEducation" : "Bachelor's", "technicalSkills" : "Windows Server, Active Directory, SQL, Oracle, Azure AD", "professionalSkills" : [ "Cybersecurity Architecture", "Critical Infrastructure", "Applications Development", "Business processes", "Enterprise application security", "Customer service excellence", "Business acumen" ], "hardSkillsList" : [ "FISMA compliance", "NIST SP 800-53", "CIS Benchmarks", "DISA STIGs", "Research plans execution" ], "hardSkills" : [ { "name" : "FISMA compliance", "level" : "intermediate" }, { "name" : "NIST SP 800-53", "level" : "intermediate" }, { "name" : "CIS Benchmarks", "level" : "intermediate" }, { "name" : "DISA STIGs", "level" : "intermediate" }, { "name" : "Research plans execution", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity, NIST SP 800-53, FISMA compliance", "majorSkillsList" : [ "Cybersecurity", "NIST SP 800-53", "FISMA compliance" ], "coreResponsibilities" : "Support Security Standards HS, Provide cyber and technology security experience, Enable innovative business processes, Enable effective business processes, Enable secure business processes, Develop research plans, Execute research plans, Work with Windows Server, Manage Active Directory, Work with enterprise application virtualization, Work with server virtualization", "projectManagementSkills" : [ "Agile IC" ], "domainKnowledge" : "Cybersecurity domains; Enterprise application security; CIS Benchmarks; DISA STIGs; Cloud identity services", "domainList" : [ "cybersecurity-domains", "enterprise-application-security", "cis-benchmarks", "disa-stigs", "cloud-identity-services" ], "domainSpecificKnowledge" : [ "Cybersecurity domains", "Enterprise application security", "CIS Benchmarks", "DISA STIGs", "Cloud identity services" ], "documentationSkills" : "Technical writing skills", "continuousLearning" : "Certification incentive program", "specialRequirements" : "U. S. citizenship required, Onsite 5 days a week", "qualificationsBasic" : "4 years experience in lieu of degree, Active Secret clearance, Ability to obtain Top Secret clearance", "qualificationsPreferred" : "Process automation experience, AI tools and automation platforms, Virtualized IT systems development, Enterprise mobile device deployments, Red Hat Enterprise Linux systems, Networking technologies expertise", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U. S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively – anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results. This is a contingent position based upon customer approval. SkyePoint Decisions is seeking a Cybersecurity Analyst to support the Diplomatic Security Cyber Mission (DSCM) program providing leading cyber and technology security experience to enable innovative, effective, and secure business processes. This position is located in Arlington, VA and will be onsite 5 days a week. No hybrid/telework allowed. Responsibilities: Support the Security Standards HS and an additional 4 years may be considered in lieu of bachelors degree. Must possess, or obtain prior to start date, at least one of the following certifications (continued certification is required as a condition of employment): CISSP-ISSAP, CISSP-ISSEP, CISSP, Security+ CE, CySA+, PPDA, Agile IC, SNOW App Dev. Experience and expertise across multiple cybersecurity domains, including FISMA compliance, NIST SP 800‑53 Revision 5 security controls, enterprise application security configuration, CIS Benchmarks, and DISA STIGs. Experience developing and executing research plans. Experience working with Windows Server in an enterprise environment. Experience managing Active Directory in a multi-domain environment. Experience with enterprise application or server virtualization. Demonstrated customer service excellence and strong business acumen. U. S. citizenship required. Active Secret clearance with the ability to obtain a final Top Secret security clearance. Preferred Qualifications: Experience with process automation - strongly desired. Demonstrated use of AI tools and automation platforms to enhance workflows, analysis, and documentation efficiency. Strong technical writing skills. Experience engineering or maintaining database infrastructure (SQL, Oracle). Experience with Active Directory Federation Services (ADFS), Azure AD, or cloud identity services. Experience developing or managing virtualized IT systems. Networking technologies expertise. Experience configuring or administering enterprise mobile device deployments. Experience working with Red Hat Enterprise Linux systems in an enterprise environment. Compensation: Salary Range: $90,000-$103,000 The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package. Salary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate’s combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, market data and business considerations. In addition to a competitive salary, SkyePoint offers benefits including a certification incentive program, PTO, floating federal holiday options, several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, Vision, ST/LT Disability, Life Insurance, and 401k matched. What We Can Offer You: At SkyePoint, we go B.I. G. (beginning in GRATITUDE) by recognizing all we have and giving back to our employees, families, and communities. It instills a positive mindset that permeates all we do. By beginning in gratitude, SkyePoint can continue to spread living in gratitude each day. Great Benefits: Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, ST/LT Disability, Life Insurance, floating federal holiday options, and 401k matched Certificate Incentive Program: To promote professional development, we recognize and reward employees who obtain new certifications aligned with business needs. Flexible Work Environment SkyePoint Decisions is an established ISO 9001:2015 and ISO/IEC 27001:2013 certified small business and appraised at CMMI Level 3 for Services and Development. We possess a common vision of excellence and foster a collaborative team culture built upon individual performance and accountability. We invest in our people and systems to create value for our clients. It is the SkyePoint Way. We are grateful for the opportunity to work with exceptional people and give back to the communities we serve. Our employees value the flexibility at SkyePoint that allows them to balance quality work and their personal lives. SkyePoint Decisions is a participating E-Verify Employer. U. S. Citizenship is required for most positions. Equal Opportunity Employer/Veterans/Disabled. CCPA Disclosure Notice Here", "summaryDescription" : "Cybersecurity Analyst at SkyePoint Decisions. Skills: Cybersecurity, NIST SP 800-53, FISMA compliance. Support Security Standards HS. Provide cyber and technology security experience", "postedDate" : "2026-06-12T21:39:27.187", "createdAt" : "2026-06-12T21:39:27.187", "lastUpdated" : "2026-06-15T00:47:32.599", "ingestTimestamp" : "2026-06-12T21:39:27.187", "mongoId" : "6a2c5dc974d8ee00a08de8b8", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 95000, "salaryAnnualMax" : 135000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "FISMA compliance", "NIST SP 800-53", "CIS Benchmarks", "DISA STIGs", "Research plans execution", "Cybersecurity", "Cybersecurity Architecture", "Critical Infrastructure", "Applications Development", "Business processes", "Enterprise application security", "Customer service excellence", "Business acumen", "Agile IC", "Cybersecurity domains", "Cloud identity services", "CISSP-ISSAP", "CISSP-ISSEP", "CISSP", "Security+ CE", "CySA+", "PPDA", "SNOW App Dev" ], "skillCount" : 23, "jobCategory" : "other", "jobSubcategory" : "billable-", "dataQualityScore" : 0.8888889, "_score" : 556.01996, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "IT service provider" }, { "id" : "6a2ca53574d8ee00a09b52be", "title" : "Cybersecurity Policy Developer", "company" : "GovTech", "industry" : "Government", "salary" : { "min" : 85000.0, "max" : 130000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Policy Developer in Singapore, adjusted for the government industry." }, "location" : "PPS Policy, Plans and Strategy Cluster", "locations" : [ "PPS Policy", "Plans and Strategy Cluster" ], "timestamp" : "2026-06-16T06:17:33.955", "fingerprint" : "d7e8f8996b72d8af5755c60da3850ad4cd18f41ad8281ddcedaa20f13a3a29cc", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://jobs.careers.gov.sg/jobs/greenhouse/4004224201?gh_jid=4004224201", "externalId" : "4004224201", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "professionalSkills" : [ "Policy development" ], "hardSkillsList" : [ "Risk management", "Legal analysis", "Compliance oversight" ], "softSkillsList" : [ "Leadership", "Negotiation" ], "hardSkills" : [ { "name" : "Risk management", "level" : "intermediate" }, { "name" : "Legal analysis", "level" : "intermediate" }, { "name" : "Compliance oversight", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Negotiation" } ], "majorSkills" : "Cybersecurity policy, Regulatory compliance, Risk management", "majorSkillsList" : [ "Cybersecurity policy", "Regulatory compliance", "Risk management" ], "coreResponsibilities" : "Develop cybersecurity policies, Ensure regulatory compliance, Manage cybersecurity risks, Provide legal analysis, Oversee compliance activities", "teamCollaboration" : "Cross-functional teams", "domainKnowledge" : "Cybersecurity; Government technology", "domainList" : [ "cybersecurity", "government-technology" ], "domainSpecificKnowledge" : [ "Cybersecurity", "Government technology" ], "communicationSkills" : "Clear communication", "problemSolvingSkills" : "Problem solving", "qualificationsBasic" : "Singapore Citizen only", "remoteFriendly" : false, "rawDescription" : "The Government Technology Agency (GovTech) aims to transform the delivery of Government digital services by taking an \"outside-in\" view, putting citizens and businesses at the heart of everything we do. We also develop the Smart Nation infrastructure and applications and facilitate collaboration with citizens and business to co-develop technologies. Join us as we support Singapore’s vision of building a Smart Nation – a nation of possibilities empowered through info-communications technology and related engineering. The Cybersecurity Group (CSG) is the cybersecurity arm of GovTech that is committed to creating a trusted digital Government for Singapore. You will be joining the Plans, Policy ability to grasp complex topics and distill into clear and easy-to-understand concepts; ability to develop creative solutions; ability to form logical, coherent reasoning. Ability to work collaboratively in a cross-functional team environment. Able to work independently and persevering attitude. Singapore Citizen only.", "summaryDescription" : "Cybersecurity Policy Developer at GovTech. Skills: Cybersecurity policy, Regulatory compliance, Risk management. Develop cybersecurity policies. Ensure regulatory compliance", "postedDate" : "2026-06-14T20:10:51.107", "createdAt" : "2026-06-14T20:10:51.107", "lastUpdated" : "2026-06-16T06:17:33.955", "ingestTimestamp" : "2026-06-14T20:10:51.107", "mongoId" : "6a2ca53574d8ee00a09b52be", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Risk management", "Legal analysis", "Compliance oversight", "Leadership", "Negotiation", "Cybersecurity policy", "Regulatory compliance", "Policy development", "Cybersecurity", "Government technology" ], "skillCount" : 10, "jobCategory" : "operations", "jobSubcategory" : "legal", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 554.1543, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.92 }, { "id" : "69cf3f042beec4dd3d934010", "title" : "Sr. Product Manager - Tech, Secure Third Party Tools", "company" : "Amazon.com Services LLC", "industry" : "Project/Program/Product Management--Technical, Product Management - Technical, amazon security", "salary" : { "min" : 151000.0, "max" : 204600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-14T22:26:22.906", "fingerprint" : "8257446c184d80c98955bab8585a3e0143a41725fd23806f05d3b238c4a3da8c", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10381883/apply", "externalId" : "21c66c9c-7142-4306-94ee-c63e28e9204c", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "professionalSkills" : [ "Product strategy", "Roadmap planning", "User stories", "Technical solutions" ], "hardSkillsList" : [ "Roadmap strategy", "Feature delivery", "Tradeoffs analysis" ], "softSkillsList" : [ "Decisiveness", "Influencing stakeholders" ], "hardSkills" : [ { "name" : "Roadmap strategy", "level" : "intermediate" }, { "name" : "Feature delivery", "level" : "intermediate" }, { "name" : "Tradeoffs analysis", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Decisiveness" }, { "name" : "Influencing stakeholders" } ], "majorSkills" : "Product management, Technical products, Security products", "majorSkillsList" : [ "Product management", "Technical products", "Security products" ], "coreResponsibilities" : "Optimize product solutions, Drive release schedules, Track progress, Raise security bar, Own product portfolio, Escalate issues, Utilize feedback, Facilitate improvement, Make plans, Stay ahead of needs, Identify requirements, Clarify requirements, Map needs to metrics, Create plans, Solve business problems, Deliver results, Manage schedule, Optimize solution scope, Account for challenges, Focus on solutions, Make trade-off decisions, Command data, Be aware of customer need, Create quality results, Uphold quality", "teamCollaboration" : "Cross-functional collaboration; Engage development team; Work with customers", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Security products; Third party tools", "domainList" : [ "security-products", "third-party-tools" ], "domainSpecificKnowledge" : [ "Security products", "Third party tools" ], "toolProficiency" : [ "Tableau", "Qlikview", "QuickSight" ], "communicationSkills" : "Clarity of communication; Written communication; Verbal communication", "continuousLearning" : "Ongoing DEI events; Learning experiences; Training resources; Career-advancing resources", "innovationCreativity" : "Experimentation; Build automation", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Data-driven decisions", "outcomesObjectives" : "Deliver near term value; Deliver long term value; Provide recognized benefits", "qualificationsBasic" : "Bachelor's degree, Own/drive roadmap strategy, Feature delivery and tradeoffs, Contribute to engineering discussions", "qualificationsPreferred" : "Use analytical tools, Build and drive adoption, Manage technical products, Represent and advocate customers", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon Security is seeking a curious PM-T who is driven by experimentation and motivated to build automation. The Secure Third Party Tools team has bold ambitions to re-imagine security products that serve Amazon's pace of innovation at our global scale. Technical Product Managers are integral to own roadmap planning through single-threaded-leadership to efficiently engage the development team and customers. They will work backwards from multiple customer sets to proactively learn, research, benchmark, document opportunities for technical solutions will drive results. Key job responsibilities Continually optimizing product solutions and investments while balancing near term value delivery with long term customer needs. Systematically driving release schedules and tracking progress with clarity of communication (written and verbal), so that customers receive recognized benefits early and often. Assist on scaling other PMTs through the organization with mechanisms that focus on: - Raising the security bar to value customers first - Owning product/solution portfolio - Properly escalating as required - Humbly utilizing feedback - Facilitating continuous improvement - Making plans, and staying two steps ahead of organizational, customer and security needs A day in the life PMTs work backwards from Customer needs to identify and clarify requirements, map needs to key business metrics and goals, and create plans to solve business problems using technology solutions. While others may become distracted with competing objectives or motivations, the PMT delivers results, manages the schedule, and optimizes solution scope at the earliest feasible time frame. When barriers, surprises and constraints threaten delivery, the successful PMT accounts for challenges by focusing on solutions to optimize results, making the right trade-off decisions. How the accomplish this is command of data, customer need awareness, decisiveness, influencing stakeholders, collaborating but doing their own homework. Creating/scaling quality results that address constraints and uphold quality. About the team Security is central to maintaining customer trust and delivering delightful customer experiences. At Amazon, our Security organization is designed to drive bar-raising security engagements. Our vision is that our customers are Amazon builders that raise the Amazon security bar when they use our recommended tools and processes, with no overhead to their business. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, Security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Bachelor's degree - Experience owning/driving roadmap strategy and definition - Experience with feature delivery and tradeoffs of a product - Experience contributing to engineering discussions around technology decisions and strategy related to a product Preferred Qualifications: - Experience in using analytical tools, such as Tableau, Qlikview, QuickSight - Experience in building and driving adoption of new tools - Experience managing technical products or online services - Experience in representing and advocating for a variety of critical customers and stakeholders during executive-level prioritization and planning Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 151,200.00 - 204,600.00 USD annually", "summaryDescription" : "Sr. Product Manager - Tech, Secure Third Party Tools at Amazon.com Services LLC. Skills: Product management, Technical products, Security products. Optimize product solutions. Drive release schedules", "postedDate" : "2026-06-13T02:19:22.368", "createdAt" : "2026-06-13T02:19:22.368", "lastUpdated" : "2026-06-14T22:26:22.906", "ingestTimestamp" : "2026-06-13T02:19:22.368", "mongoId" : "69cf3f042beec4dd3d934010", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10381883/apply", "salaryAnnualMin" : 151000, "salaryAnnualMax" : 204600, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Roadmap strategy", "Feature delivery", "Tradeoffs analysis", "Decisiveness", "Influencing stakeholders", "Product management", "Technical products", "Security products", "Product strategy", "Roadmap planning", "User stories", "Technical solutions", "Third party tools", "Tableau", "Qlikview", "QuickSight" ], "skillCount" : 16, "jobCategory" : "project-management", "dataQualityScore" : 1.0, "_score" : 549.84717, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true } ], "status" : 200, "message" : "OK", "pagination" : { "page" : 0, "limit" : 50, "totalCount" : 128221, "totalPages" : 2565, "hasNext" : true, "hasPrevious" : false } }

Third Party Cybersecurity Risk Management Analyst Jobs in Austin

Third-Party Risk Officer

Third Party Assurance (TPA) Analyst

IT Third Party & Client Manager

IT Third Party Outsourcing Specialist

Technical Operations Manager, Third-Party Data Centers

GRC Analyst, Operations & Risk

Manager, Risk & Governance

Cybersecurity Risk Analyst

Vendor Risk Management Analyst

Staff Security Engineer, Third Party Security Diligence

Sr. Cyber Security Analyst

Junior Analyst, Risk Management

Third Party Data Center Technical Operations Manager, Facilities/Maintenance

Software Engineering Manager, Cloud and Third-Party Platform Security

Cybersecurity Analyst

Cybersecurity Analyst

Security Engineer, Secure Third Party Tools

Risk Analyst

Software Engineer III, Cloud and Third-Party Platform Security

Staff Software Engineer, Cloud and Third-Party Platform Security

Senior Software Engineer, Cloud and Third Party Platform Security

IT - Vendor Analyst - II

IT Risk Management Analyst

Risk Analyst

Risk Analyst

Risk Analyst

Agency and Third Party Ecosystem Strategy Lead, Product GTM, EMEA

Cybersecurity Analyst

Staff Product Manager, AI Governance & Supply Chain Integration Risk

Cybersecurity Policy Developer

Cybersecurity / Network Analyst

VP2 Technology Risk Governance & Third Party, TOGA

Risk & Fund Reporting Manager

CDD Risk Analyst

Senior Risk Analyst

Senior Security Risk Specialist

Change Oversight & Third Party Operations Manager

Senior Risk Analyst

Sr. Cybersecurity Operations Analyst

Cybersecurity Risk Advisor (Mid Level)

Cybersecurity IAM Analyst

Technology Operations & Cybersecurity Analyst

Associate, Third Party Risk Management

Senior Risk & Compliance Analyst

Cybersecurity Analyst, IT Operations

UX Designer, Secure Third Party Tools

Sr. Product Manager - Tech, Secure Third Party Tools

Cybersecurity Analyst

Cybersecurity Policy Developer

Sr. Product Manager - Tech, Secure Third Party Tools

Common Questions