New York City or Chicago or Austin or Dallas or Denver or Miami or San Francisco or Seattle
$270k-$290k/yrHybridFull Time
DriveWealth: Provides API-based brokerage infrastructure for fractional stock trading.
15+ YOE15+ years in information security/GRC in regulated financial services; deep SEC/FINRA and global privacy knowledge; hands-on GRC, audit, TPRM, incident response, and executive/board reporting; relevant certifications preferred.
CloudflareNYSE: NET: Provides security and performance services for internet properties.
Knowledge of security frameworks (NIST/ISO/SOC2), risk management, basic Python scripting, automation logic, AI model instruction, technical writing, observability, familiarity with Cloudflare products; ability to commit 12–16 weeks and be in-office 3–5 days/week.
Austin or Tampa or Chicago or Cleveland or Miami or Los Angeles or Boston or New York City or Florham Park or San Diego or San Francisco or Philadelphia or Houston
$99k-$232k/yrOnsiteFull Time
PwC: Providing audit, tax, and management consulting services to businesses.
5+ YOEBachelor's degree,5+ years relevant experience,proficiency with GRC solutions and ServiceNow,knowledge of ISO/IEC 27001 and NIST CSF,team leadership and client-facing skills.
Tata Consultancy ServicesNational Stock Exchange of India: TCS: Global provider of IT services, consulting, and business solutions.
5+ years in cybersecurity/TPRM/GRC with hands-on experience running vendor assessments, managing CAPs, stakeholder escalation, and producing leadership reports.
United States or Canada or Columbus or Austin or San Francisco or New York City
$172k-$238k/yrRemoteFull Time
UpstartNasdaq: UPST: AI-powered lending marketplace for consumer and automotive loans.
8+ YOE3+ MgmtBachelor's or equivalent, 8+ years technology risk/information security/IT audit experience in banking, 3+ years people management, FFIEC/OCC regulatory experience, regulator engagement, and GRC program experience; professional certs preferred.
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
5+ YOE5+ years compliance, audit, or risk management experience; Bachelor’s degree or equivalent required; deep knowledge of COSO 2013, SEC/PCAOB, ITGCs, SOX scoping, control design, testing, remediation, and GRC platforms.
Applied MaterialsNASDAQ: AMAT: Produces equipment and services for chip and display manufacturing.
3+ YOEBachelor's degree and 3–5+ years in product management, procurement technology, or risk/compliance systems; experience with OneTrust or similar GRC platforms; experience configuring enterprise SaaS and integrations/APIs.
Applied MaterialsNASDAQ: AMAT: Manufacturers of equipment for semiconductor and display production.
3+ YOEBachelor's degree and 3–5+ years in product management or procurement/risk systems; experience with OneTrust or similar GRC platforms, configuring enterprise SaaS, integrations/APIs, and strong stakeholder and analytical skills.
Sawdey Solution Services: Provides engineering and technical services to government and defense agencies.
10+ YOE5+ Mgmt10+ years program/project management, 5+ years leading service transitions, experience with security services (SIEM, SOC, vulnerability management, GRC, forensics), CJIS-compliant background check, U.S. citizenship, travel 25–50%, Microsoft Office proficiency; bachelor’s degree preferred.
Microsoft Word, Microsoft PowerPoint, Microsoft Excel, Microsoft Outlook, SIEM, SOC, GRC
WiseLondon Stock Exchange: WISE: Online platform for sending and managing money internationally.
2+ YOE2+ years operational risk or issues management experience, strong analytical and Excel skills, familiarity with KRIs, risk assessments and executive reporting, experience with GRC tools and SQL/visualization tools preferred.
AuditBoard, Optro, ServiceNow, Archer, LogicGate, SQL, Tableau, Power BI, Superset, ChatGPT, Claude, Microsoft Excel
Austin or Denver or Indianapolis or Los Angeles or San Francisco or New York or Salt Lake City or Minneapolis or Seattle or Nashville
$135k-$150k/yrRemoteFull Time
Givebutter: Fundraising and CRM platform for nonprofit organizations.
5+ YOE5+ years IT experience; hands-on IT ops (MDM, device and SaaS administration, identity lifecycle), Notion administration, GRC project management with Vanta/Drata, familiarity with SOC 2/ISO 27001/PCI, remote/Mac environment experience.
Vanta, Drata, Notion, Google Workspace, Slack, 1Password, Mobile Device Management (MDM), Claude, Cursor, ChatGPT
ArmNASDAQ: ARM: Designs and licenses processor architectures and semiconductor intellectual property.
Enterprise security leader with deep semiconductor engineering knowledge, security architecture, GRC, IAM, data protection, secure development, and ability to influence engineering and business stakeholders.
EDA, ISO 27001, NIST CSF, NIST 800-53, NIST 800-171, SOC 2, AI
Ireland or Seattle or Vancouver or Austin or Boulder or Ankeny or Reading or Ho Chi Minh City
OnsiteFull Time
Absolute Security: Provides self-healing endpoint security and zero trust networking solutions.
3+ YOE3–5 years GRC/audit/compliance or trust operations experience, familiarity with SOC 2/ISO 27001, GDPR, customer security questionnaires, risk and third-party assessments, strong communication and audit support skills.
eBayNASDAQ: EBAY: Global online marketplace for buying and selling diverse products.
10+ YOE10+ years in governance, risk, internal audit, or risk operations; experience with enterprise risk registers, policy and GRC lifecycle, audit/second-line engagements, BRDs, workflow documentation, stakeholder influence, and AI/automation initiatives.
Curative: Provides employer-sponsored health insurance with zero out-of-pocket costs.
10+ YOE5+ MgmtLead information security and IT strategy, GRC, risk management, security operations, and vendor management; 10+ years in info security with leadership.
Brivo: Cloud-native platform for physical security and video surveillance management.
6+ YOE6+ years in GRC/IT audit/infosec, experience managing full audit cycles and internal risk assessments, strong written/verbal communication, mentoring ability, high accountability.
San Francisco or New York City or Seattle or Austin or United States
$97k-$190k/yrRemoteFull Time
Rippling: Unified platform managing workforce HR, IT, and finance operations
7+ YOE7+ years managing regulatory examinations, audits, or partner due diligence; strong AML/CFT/BSA/OFAC knowledge; experience with regulators; strong communication, multi-engagement management, and GRC tooling familiarity.
Austin or Chicago or New York City or Salt Lake City or San Francisco
$117k-$185k/yrOnsiteFull Time
Gong: AI platform analyzing customer interactions to improve sales performance.
7+ YOE7+ years in third‑party/vendor risk management or GRC; strong knowledge of security/privacy frameworks, vendor assessments, and TPRM tooling; excellent communication and risk translation skills.
HippoNYSE: HIPO: Provides homeowners insurance integrated with smart home monitoring technology.
10+ YOE5+ Mgmt10+ years in cybersecurity with 5+ years in senior security leadership; experience at a regulated, publicly traded company; SOC 2 and SOX experience; GRC, incident response, identity governance, and third-party risk management skills; board-level communication.