4+ YOE4+ years GRC or information security governance experience; hands-on change management, risk assessment, policy management; familiarity with ISO 27001/SOC 2/NIST CSF; stakeholder engagement and strong written communication.
New York City or Chicago or Austin or Dallas or Denver or Miami or San Francisco or Seattle
$270k-$290k/yrHybridFull Time
DriveWealth: Provides API-based brokerage infrastructure for fractional stock trading.
15+ YOE15+ years in information security/GRC in regulated financial services; deep SEC/FINRA and global privacy knowledge; hands-on GRC, audit, TPRM, incident response, and executive/board reporting; relevant certifications preferred.
NTT DATA: Global provider of IT and business consulting services.
10+ YOE10 years of security experience; hands-on GRC, control assessments, compliance monitoring, audit support, risk management, and systems/network administration; preferred CISSP, GIAC, SSCP, or CEH.
Columbus or Chicago or Detroit or Tupelo or Charlotte or Dallas or Atlanta or Houston or Birmingham
$57k-$113k/yrOnsiteFull Time
HuntingtonNASDAQ: HBAN: Provides regional commercial, consumer, and mortgage banking services.
3+ YOEBachelor's degree or equivalent experience, plus 3+ years in software development. Preferred: GRC systems, cloud and hosted platforms, object-oriented programming, agile, multi-platform support, troubleshooting, and communication skills.
Archer, OpenPages, ProcessUnity, ServiceNow IRM, AWS, Apigee, Linux OS, OpenShift, .NET, C#, Python, Java, Microsoft Office
McKessonNew York Stock Exchange: MCK: Distributes pharmaceuticals and provides healthcare information technology solutions.
5+ YOEDegree or equivalent, typically 5+ years relevant experience, 3+ years SOX/SOC hands-on experience, combined business and technology experience, strong analysis, stakeholder management, and presentation skills.
Caris Life SciencesNASDAQ: CAI: Provides molecular profiling and AI-driven precision medicine diagnostics.
4+ YOEBachelor's or equivalent experience, 4+ years in information security risk management or third‑party risk, knowledge of HIPAA/SOX/GDPR and NIST/ISO/CIS frameworks, strong communication, analytical skills, and proficiency with Excel/PowerPoint.
Microsoft Excel, Microsoft PowerPoint, Compyl, AuditBoard, RSA Archer, LogicGate, AWS, Azure, GCP
Risk Consulting - Risk Technology - Oracle GRC - Manager (New York, NY, US, 10001-8604)
New York or Atlanta or Boston or Chicago or Cleveland or Dallas or Detroit or Pittsburgh or Hoboken or Houston or Los Angeles or McLean or Miami or Minneapolis or North Carolina or Philadelphia or Portland or San Francisco or Seattle or Tampa
$150k-$260k/yrHybridFull Time
EY: Global firm providing audit, tax, and professional consulting services.
5+ YOEBachelor's or master's degree with ~5 years related experience; Oracle security/controls and controls testing experience; strong project management, client service, leadership, communication, analytical skills; valid US driver’s license and passport; willing to travel.
Infor: Provides industry-specific cloud enterprise software for global businesses.
Proven leadership of enterprise cybersecurity GRC programs across multi-cloud SaaS environments, expertise in regulatory frameworks, AI governance, third-party risk, audits, and board-level risk reporting.
Azure, AWS, GCP, ServiceNow IRM, Archer, OneTrust, Drata, Vanta, NIST CSF 2.0, NIST 800-53, ISO 27001, ISO 27701, ISO 42001, SOC 2, PCI DSS, FedRAMP, HIPAA, GDPR, NIST AI RMF, FAIR, SBOM
Clearsulting: Provides management consulting and digital finance transformation services.
6+ YOE1+ Mgmt6+ years controls/integration/audit experience with major ERPs (SAP, Oracle, D365), 1+ year people management, AI familiarity, strong project management and communication, US work authorization.
Reco: AI-native platform for SaaS security and identity governance.
5+ YOERequires 5+ years in security trust, GRC, compliance, or customer-facing security; knowledge of SOC 2, ISO 27001, HIPAA, IAM, cloud and application security; experience with questionnaires, audits, and GRC tools.
SOC 2, ISO 27001, NIST CSF, HIPAA, GDPR, ISO 42001, EU AI Act, SSO, Okta, Azure AD, SCIM, AWS, GCP, Azure, Vanta, Drata, SafeBase, Conveyor, MDM
Denver or Stamford or Washington or Orlando or Tampa or Atlanta or Chicago or Boston or Minneapolis or Charlotte or Short Hills or Columbus or Philadelphia or Dallas or Houston or McLean
OnsiteFull Time
KPMG: Global professional services network providing audit, tax, and advisory.
5+ YOERequires 5+ years of SAP audit, controls, security, GRC, ERP implementation, transformation, or analytics experience; bachelor's degree; SAP GRC and security expertise; and strong communication skills.
Chicago or Tampa or Charlotte or Atlanta or Austin or Washington or Dallas or Los Angeles or Boston or Florham Park or New York or San Francisco or Philadelphia or Houston
$99k-$232k/yrOnsiteFull Time
PwC: Providing audit, tax, and management consulting services to businesses.
5+ YOEBachelor's degree and 5+ years delivering SAP compliance, security, and governance solutions across auditing, advisory, and implementation engagements; SAP GRC proficiency required.
SAP, SAP Governance, Risk, and Compliance (GRC), SAP BW/4HANA
Hartford or Irving or Scottsdale or Woonsocket or Northbrook
$66k-$146k/yrHybridFull Time
CVS HealthNYSE: CVS: Provides retail pharmacy, health insurance, and pharmacy benefit management services.
5+ YOE5+ years in SOX, internal audit, finance, risk or program management; advanced Excel and PowerPoint; strong analytics and reporting; ability to build dashboards, KPIs, and executive-level presentations; bachelor’s degree or equivalent.
Microsoft PowerPoint, Microsoft Excel, Optro, GRC, Microsoft Power BI, Tableau, Alteryx
LennarNYSE: LEN: Builds and sells quality residential homes across the United States.
7+ YOEBachelor's degree in computer science, information security, or related field; 7+ years cybersecurity experience; leadership, GRC, vulnerability management, incident response, and advanced certifications required.
GRC, PCI, FFIEC, Sarbanes-Oxley Act (SOX), HIPAA, GDPR, GLBA, ISO 17799, ITIL, NIST, Factor Analysis of Information Risk (FAIR)
Freeman: Design and production of live events and exhibitions.
1+ YOEBachelor's degree in risk/finance/business/economics,1+ years risk/insurance/finance/audit/analytics experience preferred,advanced Excel,Power BI,strong analytical and communication skills.
Microsoft Excel, Microsoft Office, Power BI, RMIS, GRC
Boingo Wireless: Designs and manages wireless networks for large public venues.
15+ YOE8+ Mgmt15+ years IT/security leadership with 8+ years people management and experience across Microsoft 365/Entra ID, Google Workspace, Mac/Windows endpoints, NIST/GRC/SOC 2, SIEM/EDR, and vendor/GRC program management.
Microsoft 365, Entra ID, Intune, Conditional Access, Google Workspace, Google Admin, Jamf, NIST, SOC 2, SIEM, EDR, IAM, PAM, ZenGRC
The Mutual Group: Provides capital and operational technology for mutual insurance companies.
3+ YOE3+ years in risk, compliance, IT, security, or vendor risk management; experience with TPRM and GRC tools; knowledge of AI governance and regulatory frameworks.
RobinhoodNASDAQ: HOOD: Provides a commission-free platform for investing and financial services.
4+ YOE4+ years in risk management, financial services, or crypto operations; experience with RCSAs, KRIs, governance reporting, and GRC tools; strong written/verbal communication and analytical skills.