Information Security Governance, Risk, Compliance (GRC) Supervisor
Salt Lake City, Utah, United States
OnsiteFull Time
ARUP Laboratories: Provides national clinical and anatomic pathology reference laboratory services.
3+ YOEBachelor's in IT, CS, information security or related; 3-5 years in cybersecurity, risk management, and compliance; strong communication and leadership; certifications desirable.
Zions BancorporationNASDAQ: ZION: Provides banking, lending, and financial services to customers.
8+ YOEBachelor's degree and 8+ years in governance, risk, or compliance; experience with AI or technology policy preferred; familiarity with Microsoft Power Platform, GRC tooling, and ML concepts; strong communication and project management skills.
NIST AI Risk Management Framework (RMF), Microsoft Power Automate, Microsoft Power Apps, Microsoft Power BI
Austin or Denver or Indianapolis or Los Angeles or San Francisco or New York or Salt Lake City or Minneapolis or Seattle or Nashville
$135k-$150k/yrRemoteFull Time
Givebutter: Fundraising and CRM platform for nonprofit organizations.
5+ YOE5+ years IT experience; hands-on IT ops (MDM, device and SaaS administration, identity lifecycle), Notion administration, GRC project management with Vanta/Drata, familiarity with SOC 2/ISO 27001/PCI, remote/Mac environment experience.
Vanta, Drata, Notion, Google Workspace, Slack, 1Password, Mobile Device Management (MDM), Claude, Cursor, ChatGPT
BILLNYSE: BILL: Automated financial operations software for small and midsize businesses.
7+ YOEBachelor's in Accounting/Finance, 7+ years Big 4 public accounting experience (SOX 404/ICFR), CPA or CIA preferred, strong SOX/COSO/PCAOB knowledge, NetSuite/ERP familiarity, audit coordination and control remediation experience.
Lucid Software: Provides visual collaboration and diagramming software for teams.
3+ YOEBachelor's degree, 3+ years in third-party risk/GRC, knowledge of NIST/ISO/SOC frameworks, strong writing and interpersonal skills, ability to manage tasks independently.
GRC, NIST 800-53, ISO 27001, SOC 2, AWS, GCP, Azure, AI tools
Progressive LeasingNYSE: PRG: Provides lease-to-own financing at retail points of sale.
1+ YOEBachelor’s degree; 1-3 years in enterprise risk management in financial services; knowledge of ERM frameworks, risk taxonomies, regulatory expectations; data skills; experience with GRC systems a plus; ability to communicate clearly and influence stakeholders.
Filevine: Legal case management software and AI platform for lawyers.
10+ YOE10+ years in security/compliance/GRC with FedRAMP ownership, privacy and trust program leadership, ability to translate regulatory requirements into engineering work, and strong stakeholder and executive communication.
FedRAMP, NIST 800-53, SOC 2, ISO 27001, HIPAA, PCI-DSS, GRC
Autonomous Solutions: ASI develops autonomous vehicle systems and fleet management software.
7+ YOEBachelor's degree, 7+ years in security engineering or security/GRC roles, SOC 2/ISO 27001 audit ownership, SIEM/EDR and IAM expertise, incident command experience, and team leadership experience.
Splunk, Microsoft Sentinel, Sumo Logic, SIEM, EDR, SOC 2 Type II, ISO 27001, GRC, MFA, IAM
Indianapolis or Dayton or Arlington or Salt Lake City or Louisville
$83k-$99k/yrOnsiteFull Time
AESNYSE: AES: Provides global power generation and sustainable energy solutions.
3+ YOEBachelor’s in engineering or related field; 3–7+ years in inverter-based resources; NERC standards knowledge; analytical and organizational skills; strong communication and cross-functional collaboration; preferred certifications.
Program Lead Corporate Compliance Risk – Regulatory Change & Obligations
Sandy, Utah, United States
HybridFull Time
Mountain America Credit Union: Provides banking, lending, and financial guidance to its members.
8+ YOEBachelor's degree or equivalent experience, 8+ years in compliance/risk/audit or regulatory program leadership, experience with regulatory change management and obligations inventories, strong analytics and executive reporting, advanced Microsoft Office and SharePoint/Smartsheet proficiency.
Microsoft Outlook, Microsoft Word, Microsoft PowerPoint, Microsoft Excel, Microsoft SharePoint, Smartsheet, GRC platforms, workflow/case management tools
Austin or Chicago or New York City or Salt Lake City or San Francisco
$117k-$185k/yrOnsiteFull Time
Gong: AI platform analyzing customer interactions to improve sales performance.
7+ YOE7+ years in third‑party/vendor risk management or GRC; strong knowledge of security/privacy frameworks, vendor assessments, and TPRM tooling; excellent communication and risk translation skills.
Progressive LeasingNYSE: PRG: Provides lease-to-own financing at retail points of sale.
7+ YOE7+ years in SOX 404/internal controls/audit, strong control documentation and project management, experience with ERP/HCM implementations, GRC tools, and leveraging automation or analytics to improve controls.
Stamford or Chicago or Costa Mesa or Kansas City or Draper or New York City or Phoenix or West Chester or St. Paul or Orlando or Alpharetta or Charlotte or Canton
5+ YOE3+ MgmtBroad-based risk knowledge; 3+ years risk management experience in consumer financial services; bachelor's degree plus 5+ years (or 10+ years without degree); strong stakeholder, reporting, and analytical skills.
Workiva, Tableau, Power BI, GRC tools, Microsoft Word, Microsoft Excel, Microsoft PowerPoint
Merit Medical SystemsNASDAQ: MMSI: Develops and manufactures proprietary disposable medical devices for clinicians.
8+ YOE8+ years audit/systems experience, expertise in IT audit, risk management and governance, advanced computer and data analytics skills, ability to assess cybersecurity/privacy/AI risks, travel up to 10-20%, CIA/CISA/CISSP preferred.