Oscar HealthNYSE: OSCR: Provides tech-enabled health insurance plans and telemedicine services.
7+ YOERequires 7+ years in GRC, cloud security, security engineering, audit, or regulated technology; expertise in CMS EDE, NIST SP 800-53, AWS control implementation, compliance automation, audits, and risk management.
AWS, Azure, NIST SP 800-53, infrastructure as code, policy as code, GRC platforms, SIEM
5+ YOE5+ years in SaaS GRC or information security; GCP, AI architectures, data governance, model validation, NIST, PCI, ISO, SOC 2, communication, and process improvement experience.
Berlin or Iași or London or New York City or São Paulo
HybridFull Time
Taktile: Platform for automated financial risk and credit decisioning.
4+ YOE4+ years GRC or security compliance at a SaaS company; owned SOC 2 program; Vanta/Drata/Secureframe experience; hands-on scripting against AWS for automated evidence; strong written communication.
New York City or Maryland or Massachusetts or Virginia or Georgia or New York
$97k-$184k/yrOnsiteFull Time
Chainalysis: Blockchain data platform for cryptocurrency investigation and compliance.
Experience implementing and operating security and compliance controls in cloud/SaaS environments; built evidence collection, control testing, or remediation workflows; supported SOC 2/ISO 27001 or similar; strong written/verbal communication; US citizenship required.
Hospital for Special Surgery: Provides specialized orthopedic, rheumatologic healthcare and medical research.
Translate security and regulatory requirements into technical control objectives, implement automated control testing and evidence collection, perform technical risk assessments, support audits, and develop policy-as-code and tooling for continuous compliance.
FiservNew York Stock Exchange: FI: Provides financial technology and payment processing services to institutions.
8+ YOERequires 8+ years in governance, risk, compliance, cybersecurity, or related disciplines; 5+ years in enterprise architecture or senior engineering; AI governance, REST APIs, OAuth, scripting, and GRC platform expertise.
OneTrust, Archer, REST APIs, OAuth, Python, JavaScript, Power BI
xAI: Develops advanced artificial intelligence systems to understand the universe.
8+ YOE8+ years GRC/security compliance experience in fintech or financial services; hands-on PCI/NYDFS/FFIEC experience; Compliance-as-Code and GRC automation; technical fluency with cloud and security architecture.
Anthropic: Developing safe and reliable artificial intelligence systems.
8+ YOE8+ years building backend systems, data pipelines, or internal platforms; proficiency in Python or Go; experience with cloud platforms and infrastructure-as-code; strong systems thinking and experience with integrations or data infrastructure.
Python, Go, AWS, GCP, Azure, Claude, ServiceNow, Vanta, Drata, OneTrust, REST APIs, webhooks, CI/CD, ELT, ETL, infrastructure-as-code, version control
Compyl: A venture-backed building an automated GRC and security compliance platform for security practitioners.
4+ YOE4+ years in sales engineering or technical consulting, cloud infrastructure knowledge (Azure preferred), familiarity with GRC domains and regulatory frameworks, strong communication and collaboration skills.
Omnea: AI platform for automating enterprise procurement and supplier risk.
3+ YOE3+ years in sales/solutions engineering or technical consulting, experience with ERPs/CLMs/GRC or procurement stack, comfortable directing AI for demos/PoCs, strong communicator, able to own RFPs/RFIs/security questionnaires.
3+ YOEBachelor's in Computer Science/Engineering with 3+ years experience (or HS +5 yrs), 2+ years process optimization or software development, proficiency in SQL and Python, cloud (AWS) and GRC/tooling experience, and ability to travel as required.
DatadogNASDAQ: DDOG: Observability and security platform for cloud applications and infrastructure.
Experience leading security/GRC engineering teams, building automation and tooling for compliance, strong technical background (code review, cloud, Kubernetes), and excellent communication and leadership skills.
Forus: A building an AI-powered platform that connects doctors, pharmacies, payers, and biopharma to accelerate patient access to therapies.
4+ YOE4+ years in GRC/security compliance with hands-on SOC 2 and HIPAA experience, HITRUST a plus; experience with compliance automation, vendor risk, audits, and working with engineering and enterprise buyers.
Teachers Federal Credit Union: Member-owned credit union providing diverse banking and lending services.
8+ YOEEight+ years in IT with enterprise/solution architecture; Bachelor’s degree in CS/IS/Engineering or related field; experience with financial services gRC or regulated environments preferred; cloud, SaaS, data, security knowledge.
CompassNYSE: COMP: Technology-enabled residential real estate brokerage and agent software platform.
12+ YOE10+ Mgmt12+ years technical experience, 10+ years senior security leadership, deep expertise across AppSec, cloud security, identity, GRC, incident response; hands-on engineering background preferred; experience with SOX and CPRA.