Brex: Corporate cards and spend management software for businesses.
5+ YOE5+ years in GRC or Security Engineering; strong automation; security frameworks SOC 2, PCI DSS, ISO 27001; Python and API integrations; cross-functional collaboration; cloud native; Terraform.
Legora: AI workspace for legal document research and drafting.
6+ YOE6+ years in GRC, security compliance, or IT audit in B2B SaaS; ownership of SOC 2/ISO 27001; AI governance and regulatory knowledge; risk and policy experience; ability to read code and verify controls.
GAF: Manufactures residential and commercial roofing and waterproofing products.
8+ YOE3+ MgmtBachelor's degree,8+ years SAP security/GRC experience with 3+ years leading; deep hands-on with SAP GRC Access Control and SAP IAG on BTP; experience with Ariba,SAC or IBP; strong SoD,SOX,access controls knowledge.
SAP GRC Access Control, SAP Identity Access Governance (IAG), SAP Ariba, SAP Analytics Cloud (SAC), SAP Integrated Business Planning (IBP), SAP BTP, XSUAA, SCIM API, ServiceNow, Jira, ABAP, CDS, SU53, ST01, SU24
Rokt: Provides AI-driven personalization for ecommerce transaction checkouts.
4+ YOE4+ years GRC/audit experience in tech, working knowledge of ISO/SOC/NIST/privacy frameworks, hands-on audit experience, experience designing agentic AI systems, familiarity with cloud (AWS), APIs, SQL, Git, and basic scripting (Python/TypeScript).
Claude Code, Cursor, Copilot, Google ADK, LangGraph, OpenAI Agents SDK, MCP, OWASP Agentic Top 10, NIST AI RMF, ISO 27001, SOC 1, SOC 2, NIST CSF, GDPR, CCPA, CPRA, PCI-DSS, CIS, SCF, ISO 42001, AWS, APIs, SQL, Git, GitHub, Python, TypeScript, Jira
Senior Lead, SAP Security, GRC & Compliance- - PVH Corp.
Bridgewater, New Jersey, United States
$105k-$141k/yrHybridFull Time
PVHNYSE: PVH: Designs and markets global apparel and lifestyle brands.
8+ YOEBachelor's in Computer Science, Accounting or related; 8+ years SAP Security and GRC experience; expertise with SAP roles/authorization, GRC modules, SoD analysis, compliance (SOX/GDPR/HIPAA/NIST); strong communication and problem-solving.
S/4HANA, EWM, FMS CAR, Fiori, BW, ECC, SAP GRC Access Control, SAP GRC Process Control, SAP GRC Risk Management, SU24, PFCG, SAP RISE
AdobeNASDAQ: ADBE: Provides software for digital media creation and marketing analytics
8+ YOE8–12+ years in strategy, business operations, risk management, or related fields; proven experience building metrics and executive reporting; able to engage and influence executives.
San Francisco or New York City or London or Sydney
$190k-$215k/yrOnsiteFull Time
Sigma Computing: Cloud-native analytics platform featuring a spreadsheet-style interface.
4+ YOE4+ years GRC experience in SaaS/tech, proven track record building GRC programs and leading SOC 2/ISO 27001/HIPAA audits, experience with ERM frameworks (COSO, ISO 31000, NIST RMF), data privacy (GDPR/CCPA), policy and control development, strong communication.
London or Los Angeles or New York City or Abu Dhabi or Amsterdam or Hong Kong or Madrid or Mexico City or Toronto or Paris or Sydney
OnsiteFull Time
Wasserman: Global agency representing sports, music, and entertainment talent.
3+ YOE3+ years in cybersecurity/GRC/security operations with experience running security awareness programs, familiarity with GDPR/ISO 27001/NIST CSF/CIS Controls, exposure to SOC/EDR/SIEM, KnowBe4 experience, and strong communication skills.
KnowBe4, GDPR, ISO 27001, NIST CSF, CIS Controls, SIEM, EDR
Guardian Life: Provides life, disability, dental, and vision insurance products.
3+ YOEBachelor's degree required; 3+ years operational risk/compliance/GRC experience in financial services or insurance; ServiceNow IRM experience; knowledge of RCSA/KRI frameworks; familiarity with NYDFS/NAIC/MAR/HIPAA; Microsoft Office proficiency.
ServiceNow Integrated Risk Management (IRM), ServiceNow, Microsoft Excel, Microsoft PowerPoint, Microsoft Word, Power BI, Tableau
Risk Consulting - Risk Technology - GRC/IRM Platforms - Manager (New York, NY, US, 10001-8604)
New York or Atlanta or Boston or Chicago or Cleveland or Dallas or Detroit or Pittsburgh or Hoboken or Houston or Los Angeles or McLean or Miami or Minneapolis or North Carolina or Philadelphia or Portland or San Francisco or Seattle or Tampa
$150k-$260k/yrHybridFull Time
EY: Global firm providing audit, tax, and professional consulting services.
4+ YOEBachelor's + 5 yrs (or Master's + 4 yrs) implementing ServiceNow IRM/TPRM/BCM; ServiceNow CSA and GRC certifications; experience leading implementations, integrations, and client engagements; Microsoft Office proficiency.
ServiceNow IRM, Archer, AuditBoard, OneTrust, Spotfire, PowerBI, Tableau, Microsoft PowerPoint, Microsoft Word, Microsoft Excel, Vision, Integration Hub, REST, SOAP
National GridLondon Stock Exchange: NG: Operates electricity and natural gas transmission and distribution networks.
5+ YOE5+ years in risk management; experience across 3 Lines Model; ERM initiatives; leadership reporting; bachelor’s in risk/finance/business; professional certifications listed
GovSignals: AI platform for government contracting and proposal automation.
3+ YOE3+ years leading compliance/security programs; experience achieving FedRAMP High or equivalent; deep fluency with IL5, CMMC Level 2, SOC 2, NIST 800-171; automated evidence collection and vulnerability workflows; strong communication skills.
Director, Third-Party Risk Management and Technical Information Security Lead
New York City or Thessaloniki
$177k-$294k/yrHybridFull Time
PfizerNYSE: PFE: Develops and manufactures vaccines and medicines for global healthcare
8+ YOEBachelor’s degree with 8+ years, master’s with 7+ years, or Ph.D. with 5+ years; 8+ years in cybersecurity, cyber risk, GRC, TPRM, security architecture, IT risk, or audit; team leadership required.
Application Security & Access Control Operations Lead - Finance & Administration
New York, New York, United States
$200k-$240k/yrOnsiteFull Time
Bloomberg: Delivers financial data, news, and software to global markets.
10+ YOE10+ years in IAM/Application Security/ERP security, strong SAP/Oracle security experience, hands-on SAP GRC Access Control, RBAC and role provisioning expertise, cloud provisioning, SOX compliance and risk remediation skills.
SAP, Oracle EPM, SAP GRC Access Control, SAP BDC, Pathlock, Saviynt, RBAC
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
7+ YOE7+ years finance/accounting experience with process improvement and automation; 5+ years financial analysis and cross-functional leadership; bachelor’s in accounting or related field (or equivalent); strong knowledge of assurance standards and sustainability reporting.
DatadogNASDAQ: DDOG: Observability and security platform for cloud applications and infrastructure.
Experience leading security/GRC engineering teams, building automation and tooling for compliance, strong technical background (code review, cloud, Kubernetes), and excellent communication and leadership skills.
London or Washington or Galway or Budapest or Vancouver or Bengaluru or Munich or Singapore or Sydney or New York City
HybridFull Time
Diligent: Provides software for corporate governance, risk, and compliance management.
Experience in GRC or related field, experience engaging C-level personas, strong outbound sales skills, familiarity with lead generation tools and CRMs, excellent communication and presentation skills.
Chicago or Tampa or Charlotte or Atlanta or Austin or Washington or Dallas or Los Angeles or Boston or Florham Park or New York or San Francisco or San Jose or Philadelphia or Houston
$99k-$232k/yrOnsiteFull Time
PwC: Providing audit, tax, and management consulting services to businesses.
4+ YOEBachelor's degree, 4+ years delivering SAP compliance, security, and governance solutions; proficiency with SAP GRC and SAP BW/4HANA; experience leading teams, implementing compliance programs, and audit processes.
SAP, SAP Governance, Risk and Compliance (GRC), SAP BW/4HANA