Ease: Mobile software for manufacturing plant floor audits and inspections.
3+ YOE3+ years in GRC/security compliance or IT audit; hands-on SOC 2/ISO 27001/HIPAA work; cloud (AWS/Azure/GCP) familiarity; vendor assessments; Jira; strong written communication; authorized to access CUI (US citizen or permanent resident).
SOC 2, CMMC, ISO 27001, HIPAA, NIST 800-171, DFARS 252.204-7012, FedRAMP, NIST AI RMF, System Security Plan (SSP), C3PAO, Drata, Vanta, Hyperproof, Secureframe, Jira, AWS, Azure, GCP, EASE
7+ YOE7+ years GRC or related experience, experience with HITRUST/ISO 27001/SOC 2/NIST, third-party risk assessments, strong documentation and stakeholder skills, bachelor's degree in related field required.
HITRUST, ISO 27001, SOC 2, NIST CSF, PCI DSS, UK Cyber Essentials, NIS2, HIPAA, FDA
Senior Information Security Analyst, GRC/Responsible AI
Irvine or Milpitas
$125k-$207k/yrOnsiteFull Time
SandiskNasdaq: SNDK: Designs and manufactures flash memory and data storage products.
6+ YOE6+ years information security experience with GRC and AI risk management, bachelor's or equivalent, technical proficiency in threat modeling and risk assessment, familiarity with NIST AI RMF and ISO/IEC 42001, and strong cross‑functional communication.
OWASP Top 10 for LLM Applications, NIST AI RMF, ISO/IEC 42001, STRIDE, PASTA, attack tree analysis, CI/CD
Yuhaaviatam of San Manuel Nation: Operates a luxury resort and casino in Southern California.
6+ YOEBachelor's in a related field, 6+ years in IT/security/privacy/risk, experience with PCI DSS, GRC platforms, vendor risk management, and privacy impact assessments.
Hyundai AutoEver AmericaKorea Exchange: 307950: Provides automotive software and IT services for mobility systems.
7+ YOE7+ years technology/cyber/GRC risk experience, bachelor\u0002s degree in related field, strong knowledge of control frameworks, GRC platform familiarity, analytics and dashboarding, excellent stakeholder and communication skills.
Hyundai AutoEver AmericaKorea Exchange: 307950: Provides automotive software and IT services for mobility systems.
6+ YOE6+ years in Technology Risk or IT Risk Management; experience with risk assessments, issue management, exception processes, and GRC platforms. Bachelor's in a related field. Strong communication and reporting skills.
Farmers and Merchants Bank of Long BeachOTCQX: FMBL: Local community bank providing commercial and personal banking services.
5+ YOEBachelor's degree in a related field, 5+ years banking or risk experience, strong analytics, ERM/GRC knowledge, advanced Excel and reporting skills, and ability to prepare executive/board reports.
Microsoft Excel, Microsoft Word, Microsoft PowerPoint, Microsoft Visio, GRC
Hyundai AutoEver AmericaKorea Exchange: 307950: Provides automotive software and IT services for mobility systems.
7+ YOE7+ years in technology/cyber/GRC risk with experience running risk assessments, issue/exception management, control libraries, GRC tooling, and executive reporting; Bachelor’s in related field required.
SpaceX: Designs and launches advanced rockets and satellite internet constellations.
1+ YOEBachelor's degree or 3+ years managing cyber assurance for classified systems; 1+ years cyber assurance; RMF A&A lifecycle experience; familiarity with Nessus, Splunk, Security Center, ServiceNow, eMASS, and GRC tools; active TS/SCI clearance and CI polygraph or ability to obtain.
RMF, Nessus, Splunk, Security Center, ServiceNow (SNOW), eMASS, GRC, NRO A&A, JSIG A&A
Senior Analyst, IT Internal Controls & SOX Compliance
San Francisco or Salt Lake City or Phoenix or Los Angeles or Chicago or Boston or Austin or New York City or Miami or Tampa or Atlanta or Columbus or Boise or San Diego or Minneapolis or Houston or Raleigh or Nashville or Kansas City or Charlotte or Portland or Philadelphia or Dallas or Washington D.C. or Seattle
$113k-$148k/yrRemoteFull Time
CircleNYSE: CRCL: Digital currency issuer and blockchain financial infrastructure provider.
4+ YOE4+ years Big 4 IT audit/controls experience, Bachelor's in related field, CPA/CISA/CIA/CISSP required; strong SOX/ITGC knowledge, cloud/SaaS/SDLC/IAM experience, ERP/GRC familiarity, and stakeholder communication skills.
Slack, Apple MacOS, Google Workspace, ERP, GRC, AI
True Anomaly: Develops autonomous spacecraft and software for space security missions.
5+ YOEEnterprise risk and third-party risk focus; knowledge of NIST RMF, CMMC; experience with risk quantification methods like FAIR/OCTAVE; collaboration across engineering, security, legal, and operations.