Fluidstack: Provides high-performance cloud GPU infrastructure for AI development.
Experienced in operating compliance controls and audits across SOC 2, ISO 27001, NIST 800-53 or FedRAMP; owning policy sets, evidence collection, and audit readiness on GRC platforms.
Compyl: A provider of a platform to help companies understand and manage risk, security, and compliance.
5+ YOE5+ years GRC experience with audits, risk assessments, and policy/control rollouts; familiarity with SOC 2/ISO 27001/HIPAA/PCI-DSS/NIST; strong consultative communication and judgment.
Los Angeles or Chicago or Nashville or New York or Seattle
$100k-$135k/yrHybridFull Time
Metropolis: Computer vision technology for checkout-free parking and retail payments.
3+ YOE3+ years in information security GRC or technology compliance; experience managing security awareness programs; knowledge of SOC 2 and PCI-DSS; familiarity with AI/data security and training platforms; bachelor\u0002s degree required.
PSEGNYSE: PEG: Investor-owned electric and gas utility.
4+ YOEBachelor's in related field or 8+ years' equivalent; 4+ years cybersecurity GRC/IT audit experience; proficiency with Cyber GRC tools; experience with risk and control assessments, audit coordination, and remediation tracking; DOE 10 CFR 810 eligibility.
AdobeNASDAQ: ADBE: Provides software for digital media creation and marketing analytics
5+ YOE5+ years GRC/InfoSec experience, knowledge of SOC/ISO/HIPAA/FedRAMP/NIST frameworks, program and audit leadership, strong communication and analytical skills.
AWS, Azure, GCP, Adobe Common Controls Framework (CCF)
InfosysNYSE: INFY: Provides IT consulting, software development, and business outsourcing services.
Experience in financial services GRC/risk/regulatory domains, requirement gathering, process mapping, BRD/FRD creation, SQL and Agile familiarity, knowledge of GRC tools (Archer, IBM OpenPages), bachelor\u0002s degree or equivalent, U.S. work authorization required.
The Estée Lauder CompaniesNYSE: EL: Manufactures and markets prestige skincare, makeup, and fragrance products.
Experienced application security professional versed in SDLC/DevSecOps, vulnerability assessment (SAST/DAST/IAST), threat modeling, CI/CD and cloud/container security; strong programming/scripting skills and ability to mentor teams.
Estée Lauder CompaniesNYSE: EL: Manufacturer and marketer of prestige beauty and skincare products.
Experience in application security, secure SDLC, vulnerability assessment (SAST/DAST/IAST), threat modeling, CI/CD and cloud/container security, strong programming/scripting skills, and ability to consult across technical teams.
Rutgers University: Providing higher education degrees and conducting academic research.
5+ YOEBachelor's in a related field and 5+ years information security experience; knowledge of HIPAA, GLBA, PCI DSS, NIST CSF; experience with GRC/VRM; strong communication and risk assessment skills.
HIPAA, GLBA, PCI DSS, NIST CSF, NIST 800-171, ISO 27001, ISO 27002, GRC, VRM
Bengaluru or Pune or New York City or United Kingdom or Finland or Singapore or Canada or Ireland
OnsiteFull Time
AlphaSense: AI-powered market intelligence and enterprise search platform.
2+ YOEIAPP AIGP certified; 2+ years in risk/GRC/compliance or audit with exposure to AI governance; familiarity with EU AI Act, NIST AI RMF, ISO standards; experience with GRC tooling; strong written/verbal English.
EU AI Act, NIST AI RMF, ISO/IEC 42001, ISO/IEC 27001
The Mutual Group: Provides capital and operational technology for mutual insurance companies.
3+ YOE3+ years in risk, compliance, IT, security, or vendor risk management; experience with TPRM and GRC tools; knowledge of AI governance and regulatory frameworks.
Advance Local: Provides local news coverage and digital marketing services.
5+ YOEBachelor's degree, 5+ years in GRC/data governance or related role, experience leading cross-discipline teams, proficiency in SQL, data analysis and reporting, strong communication, metadata and privacy knowledge.
Senior Analyst, IT Internal Controls & SOX Compliance
San Francisco or Salt Lake City or Phoenix or Los Angeles or Chicago or Boston or Austin or New York City or Miami or Tampa or Atlanta or Columbus or Boise or San Diego or Minneapolis or Houston or Raleigh or Nashville or Kansas City or Charlotte or Portland or Philadelphia or Dallas or Washington D.C. or Seattle
$113k-$148k/yrRemoteFull Time
CircleNYSE: CRCL: Digital currency issuer and blockchain financial infrastructure provider.
4+ YOE4+ years Big 4 IT audit/controls experience, Bachelor's in related field, CPA/CISA/CIA/CISSP required; strong SOX/ITGC knowledge, cloud/SaaS/SDLC/IAM experience, ERP/GRC familiarity, and stakeholder communication skills.
Slack, Apple MacOS, Google Workspace, ERP, GRC, AI
New York City or Seattle or Raleigh or San Francisco or Washington or London or Amsterdam
$134k-$214k/yrHybridFull Time
Plaid: Provides financial data connectivity and payment infrastructure via APIs.
6+ YOE6+ years in security assurance/GRC with ownership of customer-facing security workflows; experience reviewing security contract provisions; familiarity with SOC 2, ISO 27001, NIST frameworks, PCI, GLBA, GDPR/CCPA; program design, metrics ownership, and AI-assisted workflow experience.
CLEARNYSE: YOU: Secure biometric identity platform for travel and venue access
4+ YOE4+ years in cybersecurity/GRC, 2+ years creating SSPs/policies/risk assessments, experience with NIST SP 800-53/RMF/FedRAMP/FISMA, code and configuration review, strong communication and project skills.
The Trade DeskNASDAQ: TTD: Cloud-based programmatic advertising platform for data-driven media buying.
4+ YOEBS/BA in relevant field,4+ years technology risk/governance/compliance experience,knowledge of SOX/SOC/NIST/ISO,ability to design ITGCs,experience with GRC platforms,preferred certifications (CISSP,CISM,CISA,CIA,CIPP),light coding (Python,SQL).
FlagstarNYSE: FLG: Provides personal banking, mortgage lending, and commercial financial services.
6+ YOE Undergraduate degree in Computer Science, Information Technology, Cybersecurity or related field; 6+ years in IT/cyber/risk/compliance; strong risk management and communication skills.
OceanFirst BankNASDAQ: OCFC: Regional bank offering commercial, retail, and wealth management services.
5+ YOEBachelor's degree in Statistics, Mathematics, Finance, Economics, Engineering, Computer Science, Information Security, or related field; minimum 5 years in banking/financial services with experience in operational and model risk management; IT risk management or data analysis preferred.