Lendistry: Technology-enabled lender providing capital to small businesses.
3+ YOE3-5 years in GRC, data privacy, risk management; SOC 2 and GLBA; cloud experience (AWS/Azure); privacy engineering; CIPT/CDPSE required; CIPM/CISSP preferred; B.S. in CS/Info Security or equivalent.
SHEIN: Global online retailer selling affordable fashion and lifestyle products.
7+ YOE7+ years in information security risk management; bachelor’s degree; CISSP/CISM/CISA or ISO 27001 Lead Auditor desirable; strong standards knowledge; team leadership experience.
Los Angeles or Chicago or Nashville or New York or Seattle
$100k-$135k/yrHybridFull Time
Metropolis: Computer vision technology for checkout-free parking and retail payments.
3+ YOE3+ years in information security GRC or technology compliance; experience managing security awareness programs; knowledge of SOC 2 and PCI-DSS; familiarity with AI/data security and training platforms; bachelor\u0002s degree required.
Panda Restaurant Group: Operator of American Chinese fast-casual restaurant chains.
7+ YOEBachelor's degree, 7+ years GRC/privacy/security/technology risk experience, knowledge of AI governance and cybersecurity frameworks, policy and program design, and strong advisory skills.
NIST AI RMF, EU AI Act, ISO 42001, NIST CSF, NIST 800-53, ISO 27001, ISO 27002, CIS
Risk Consulting - Risk Technology - Oracle GRC - Manager (New York, NY, US, 10001-8604)
New York or Atlanta or Boston or Chicago or Cleveland or Dallas or Detroit or Pittsburgh or Hoboken or Houston or Los Angeles or McLean or Miami or Minneapolis or North Carolina or Philadelphia or Portland or San Francisco or Seattle or Tampa
$150k-$260k/yrHybridFull Time
EY: Global firm providing audit, tax, and professional consulting services.
5+ YOEBachelor's or master's degree with ~5 years related experience; Oracle security/controls and controls testing experience; strong project management, client service, leadership, communication, analytical skills; valid US driver’s license and passport; willing to travel.
Northwood Space: Manufacturing ground stations and providing satellite communication infrastructure.
5+ YOE5+ years in GRC with ownership of enterprise compliance programs; deep knowledge of CMMC, NIST SP 800-171/800-53, FedRAMP, SOC 2, ITAR; ability to obtain TS/SCI; U.S. citizen or lawful permanent resident required.
Austin or Tampa or Chicago or Cleveland or Miami or Los Angeles or Boston or New York City or Florham Park or San Diego or San Francisco or Philadelphia or Houston
$99k-$232k/yrOnsiteFull Time
PwC: Providing audit, tax, and management consulting services to businesses.
5+ YOEBachelor's degree,5+ years relevant experience,proficiency with GRC solutions and ServiceNow,knowledge of ISO/IEC 27001 and NIST CSF,team leadership and client-facing skills.
Miratech: Provides digital engineering and IT consulting for global enterprises
7+ YOE7+ years project/program management in compliance/security/IT, experience with SOC 2/ISO 27001/GDPR audit-readiness, RAID and remediation tracking, cross-functional coordination, and stakeholder reporting.
Latham & Watkins: Global law firm providing legal counsel to businesses.
10+ YOE2+ Mgmt10+ years in GRC/technology risk/compliance/audit/cybersecurity with 2+ years leadership, experience with client security questionnaires, ISO 27001 certification experience, strong communication and project management skills.
Latham & Watkins: Global law firm providing legal services for complex corporate matters.
10+ YOE2+ Mgmt10+ years in GRC/technology risk/compliance or related fields, 2+ years leadership, bachelor’s or equivalent experience preferred, security audit and ISO27001 experience, CISA/CISSP/CISM preferred, project management experience, strong communication skills.
Austin or Denver or Indianapolis or Los Angeles or San Francisco or New York or Salt Lake City or Minneapolis or Seattle or Nashville
$135k-$150k/yrRemoteFull Time
Givebutter: Fundraising and CRM platform for nonprofit organizations.
5+ YOE5+ years IT experience; hands-on IT ops (MDM, device and SaaS administration, identity lifecycle), Notion administration, GRC project management with Vanta/Drata, familiarity with SOC 2/ISO 27001/PCI, remote/Mac environment experience.
Vanta, Drata, Notion, Google Workspace, Slack, 1Password, Mobile Device Management (MDM), Claude, Cursor, ChatGPT
Distribution/Vegetation Management Asset Strategy, Advisor (Pomona, CA, US, 91768)
Pomona or California
HybridFull Time
Edison InternationalNYSE: EIX: Generating and distributing electricity to customers in Southern California.
7+ YOESeven+ years in strategic planning at department/organization level; experience in utility asset/vegetation management, geospatial and data analysis, regulatory filings (GRC/WMP/RAMP), stakeholder coordination, and communication materials.
Southern California EdisonNYSE: EIX: Electric utility providing electricity transmission and distribution services.
7+ YOESeven+ years in strategic planning at department/organization level; bachelor’s preferred; experience with utility asset or vegetation management, geospatial data analysis, regulatory filings (GRC/WMP), AI integration, and executive communications.
Advisor Enterprise Compliance (Los Angeles, CA, US, 90017)
Los Angeles, California, United States
$110k-$182k/yrOnsiteFull Time
L.A. Care Health Plan: Public health plan providing coverage to Los Angeles residents.
5+ YOE5+ years designing or monitoring regulatory requirements, policies, or practices in healthcare; bachelor\u0002s required (healthcare administration or related), master\u0002s preferred; GRC administration, policy management, reporting, analysis, and strong communication skills.
SpaceX: Designs and launches advanced rockets and satellite internet constellations.
1+ YOEBachelor's degree or 3+ years managing cyber assurance for classified systems; 1+ years cyber assurance; RMF A&A lifecycle experience; familiarity with Nessus, Splunk, Security Center, ServiceNow, eMASS, and GRC tools; active TS/SCI clearance and CI polygraph or ability to obtain.
RMF, Nessus, Splunk, Security Center, ServiceNow (SNOW), eMASS, GRC, NRO A&A, JSIG A&A
Charlotte or New York or Los Angeles or Irvine or Long Beach
$90k-$160k/yrOnsiteFull Time
City National BankNYSE: RY: Provider of commercial banking, wealth management, and investment services.
10+ YOEBachelor's degree, 10+ years BC/DR/CM experience, 10+ years data center/technical recovery experience, 5+ years risk and controls experience, 5+ years financial services experience, project management experience, MS Office and GRC systems proficiency.
Microsoft Word, Microsoft Excel, Microsoft Visio, Microsoft PowerPoint, Governance, Risk and Compliance (GRC) systems
Ruggable: Manufacturer of patented machine-washable rugs and home decor.
Experience managing infrastructure and security organizations, building standards and roadmaps, presenting to executives, network design, Kubernetes, cloud cost and contract negotiation, and building InfoSec/GRC practices preferred.
Jersey City or Santa Ana or New Jersey or Texas or Florida or Japan or Shanghai or Hong Kong or Canada or Mexico or Germany or France
$212k-$312k/yrHybridFull Time
Collectors: Providing authentication and grading services for high-value collectibles.
10+ YOE5+ Mgmt10+ years in information security with 5+ years leading security teams and 2+ years managing managers; deep experience across AppSec, CloudSec, SecOps/IR, and GRC; cloud and incident response expertise; strong communication and metrics orientation.
Cathay BankNASDAQ: CATY: Provides commercial and consumer financial services and banking solutions.
3+ YOE3+ Mgmt3-5 years risk or banking experience, bachelor's degree required (master's preferred), leadership experience, advanced Microsoft Office skills, experience with risk/GRC platforms and KRIs/RCSAs.
Microsoft Excel, Power BI, Tableau, Microsoft PowerPoint, Microsoft Visio