Fidelity Investments: Provides investment management, retirement planning, and brokerage services.
8+ YOE8+ years developing and supporting Archer 6.x GRC applications, 9+ years in information security/IT/GRC, expert risk and compliance knowledge, hands-on Python and SQL, web tech (CSS, JavaScript, jQuery, XML), RESTful API integration, and stakeholder collaboration.
Archer 6.x, CSS, JavaScript, jQuery, XML, Python, SQL, JavaScript Transformer, RESTful APIs, Snowflake, Power BI
Senior Analyst, IT Internal Controls & SOX Compliance
San Francisco or Salt Lake City or Phoenix or Los Angeles or Chicago or Boston or Austin or New York City or Miami or Tampa or Atlanta or Columbus or Boise or San Diego or Minneapolis or Houston or Raleigh or Nashville or Kansas City or Charlotte or Portland or Philadelphia or Dallas or Washington D.C. or Seattle
$113k-$148k/yrRemoteFull Time
CircleNYSE: CRCL: Digital currency issuer and blockchain financial infrastructure provider.
4+ YOE4+ years Big 4 IT audit/controls experience, Bachelor's in related field, CPA/CISA/CIA/CISSP required; strong SOX/ITGC knowledge, cloud/SaaS/SDLC/IAM experience, ERP/GRC familiarity, and stakeholder communication skills.
Slack, Apple MacOS, Google Workspace, ERP, GRC, AI
Lucid Software: Provides visual collaboration and diagramming software for teams.
3+ YOE3+ years in third-party risk management/GRC, bachelor\u0002s degree, strong written/verbal communication, familiarity with security frameworks and cross-functional collaboration.
15+ YOE15+ years in technology risk management and internal controls, SOX/ITGC experience, familiarity with NIST CSF/ISO 27001/COBIT, GRC platform experience preferred, strong stakeholder and communication skills, must be local to an office and on-site at least 2 days/week.
NIST CSF, ISO 27001, COBIT, SOX IT General Controls, ServiceNow GRC, Archer, Microsoft Copilot, Claude, ChatGPT
XylemNYSE: XYL: Manufacturer of water transport, treatment, and testing technologies.
5+ YOEBachelor's degree required; 5+ years in compliance, audit, or GRC project/program roles; direct ISO certification audit experience (ISO 27001/27017/27701/20000); strong control and evidence management skills; Microsoft Office proficiency; Atlassian or Smartsheet preferred.
15+ YOE15+ years in technology risk management with people management; experience with SOX ITGC, NIST CSF, ISO 27001, COBIT; GRC tooling experience preferred; familiarity with AI/ML, cloud, and data privacy; must be local to an office and able to be onsite 2+ days/week.
ServiceNow GRC, Archer, Microsoft Copilot, Claude, ChatGPT
New York City or Seattle or Raleigh or San Francisco or Washington or London or Amsterdam
$134k-$214k/yrHybridFull Time
Plaid: Provides financial data connectivity and payment infrastructure via APIs.
6+ YOE6+ years in security assurance/GRC with ownership of customer-facing security workflows; experience reviewing security contract provisions; familiarity with SOC 2, ISO 27001, NIST frameworks, PCI, GLBA, GDPR/CCPA; program design, metrics ownership, and AI-assisted workflow experience.
Beachwood or Galesburg or Houston or Menomonee Falls or Moon Township or Raleigh
$130k-$190k/yrOnsiteFull Time
EatonNYSE: ETN: Manages electrical, hydraulic, and mechanical power systems globally.
10+ YOEBachelor's degree or equivalent,10+ years program management experience leading cybersecurity compliance (CMMC 2.0, SOC 2, ISO 27001, CE+, TISAX),strong stakeholder, risk, budget and governance skills,US person required,within 50 miles of listed locations.
CMMC 2.0, SOC 2, ISO 27001, Cyber Essentials Plus (CE+), TISAX, NIST SP 800-171, GRC