Los Angeles or Chicago or Nashville or New York or Seattle
$100k-$135k/yrHybridFull Time
Metropolis: Computer vision technology for checkout-free parking and retail payments.
3+ YOE3+ years in information security GRC or technology compliance; experience managing security awareness programs; knowledge of SOC 2 and PCI-DSS; familiarity with AI/data security and training platforms; bachelor\u0002s degree required.
New York City or Chicago or Austin or Dallas or Denver or Miami or San Francisco or Seattle
$270k-$290k/yrHybridFull Time
DriveWealth: Provides API-based brokerage infrastructure for fractional stock trading.
15+ YOE15+ years in information security/GRC in regulated financial services; deep SEC/FINRA and global privacy knowledge; hands-on GRC, audit, TPRM, incident response, and executive/board reporting; relevant certifications preferred.
Blue Origin: Develops reusable rockets and systems for human spaceflight.
10+ YOE10+ years in information security risk management; experience with NIST, ISO 27001/28000, SOC, CMMC; cloud-native, IT and OT security experience; ability to automate compliance and build GRC dashboards.
Milliman: Global provider of actuarial and risk management consulting services.
7+ YOEMinimum 7 years IT cybersecurity or risk management experience; bachelor\u0002s degree or equivalent; familiarity with HIPAA, GDPR, CCPA; experience with GRC/VRM tools and vendor risk management; supervisory experience; SharePoint exposure.
Risk Consulting - Risk Technology - Oracle GRC - Manager (New York, NY, US, 10001-8604)
New York or Atlanta or Boston or Chicago or Cleveland or Dallas or Detroit or Pittsburgh or Hoboken or Houston or Los Angeles or McLean or Miami or Minneapolis or North Carolina or Philadelphia or Portland or San Francisco or Seattle or Tampa
$150k-$260k/yrHybridFull Time
EY: Global firm providing audit, tax, and professional consulting services.
5+ YOEBachelor's or master's degree with ~5 years related experience; Oracle security/controls and controls testing experience; strong project management, client service, leadership, communication, analytical skills; valid US driver’s license and passport; willing to travel.
AdobeNASDAQ: ADBE: Provides software for digital media creation and marketing analytics
8+ YOE8–12+ years in strategy, business operations, risk management, or related fields; proven experience building metrics and executive reporting; able to engage and influence executives.
Billings or Sioux Falls or Des Moines or Bend or Denver or Boise or Omaha or Spokane
$98k-$162k/yrOnsiteFull Time
First Interstate BankNasdaq: FIBK: Provides community-focused commercial, retail, and mortgage banking services.
7+ YOE7+ years risk management experience (banking preferred), experience with business continuity, incident management, vendor risk, GRC tools, leadership experience; Bachelor’s preferred; able to lead crisis response and exercises.
Pune or Milpitas or Seattle or Princeton or Cape Town or London or Zurich or Singapore or Mexico City
RemoteFull Time
ZensarNational Stock Exchange of India: ZENSARTECH: Global technology firm providing digital transformation and infrastructure services.
10+ YOEBachelor's degree, 10+ years in information security, knowledge of ISO 27000/NIST/COSO/COBIT, hands-on with DLP, SIEM, NAC, A/V, EDR, experience performing risk assessments, audits, controls testing, and developing remediation plans.
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
5+ YOE5+ years compliance, audit, or risk management experience; Bachelor’s degree or equivalent required; deep knowledge of COSO 2013, SEC/PCAOB, ITGCs, SOX scoping, control design, testing, remediation, and GRC platforms.
Alabama or California or Colorado or Georgia or Iowa or Maryland or Michigan or Minnesota or Mississippi or Missouri or New Jersey or New York or North Carolina or Oregon or Pennsylvania or South Carolina or Texas or Utah or Virginia or Washington
$95k-$105k/yrRemoteFull Time
Prowess Consulting: Technical services and software engineering for technology enterprises.
5+ YOE5+ years program management experience, strong communication, cybersecurity/risk/audit knowledge, experience with security assessments, risk scoring, and compliance frameworks.
Power BI, ADO, Jira, CI/CD, SPDX, CycloneDX, SBOM, Active Directory, CVSS, GRC
Chicago or Denver or Phoenix or Chandler or Arizona or Colorado or District of Columbia or Illinois or Maryland or Texas or Virginia or California or Florida or Massachusetts or New York or Oregon or Washington or Wisconsin or United States
$171k-$214k/yrHybridFull Time
Caribou: Connects car owners with lenders to refinance auto loans.
Owner of security and IT programs with proven SOC 2 Type II delivery, SIEM/EDR incident response, GRC controls, SaaS and identity management, vendor management, and people leadership.
Overland Park or Bellevue or United States or India
$99k-$179k/yrOnsiteFull Time
T-MobileNASDAQ: TMUS: Provides wireless network services and mobile communication devices.
4+ YOE2+ MgmtExperience designing and maturing TPRM programs, 4+ years corporate risk/operations/finance/legal/audit experience, people management experience, GRC/TPRM tooling and AI tool experience, familiarity with CCPA/SOX/NIST, relevant certifications preferred.
Technology Director - Governance, Risk, and Compliance (GRC)
Seattle, Washington, United States
$206k-$270k/yrHybridFull Time
lululemonNASDAQ: LULU: Designs and retails technical athletic apparel and lifestyle products.
12+ YOE4+ Mgmt12–15+ years in cybersecurity/technology risk with 4+ years senior leadership; bachelor’s in STEM (advanced degree/certifications preferred); deep knowledge of security frameworks and regulatory requirements; program, risk, and people leadership.
Austin or Denver or Indianapolis or Los Angeles or San Francisco or New York or Salt Lake City or Minneapolis or Seattle or Nashville
$135k-$150k/yrRemoteFull Time
Givebutter: Fundraising and CRM platform for nonprofit organizations.
5+ YOE5+ years IT experience; hands-on IT ops (MDM, device and SaaS administration, identity lifecycle), Notion administration, GRC project management with Vanta/Drata, familiarity with SOC 2/ISO 27001/PCI, remote/Mac environment experience.
Vanta, Drata, Notion, Google Workspace, Slack, 1Password, Mobile Device Management (MDM), Claude, Cursor, ChatGPT
Ireland or Seattle or Vancouver or Austin or Boulder or Ankeny or Reading or Ho Chi Minh City
OnsiteFull Time
Absolute Security: Provides self-healing endpoint security and zero trust networking solutions.
3+ YOE3–5 years GRC/audit/compliance or trust operations experience, familiarity with SOC 2/ISO 27001, GDPR, customer security questionnaires, risk and third-party assessments, strong communication and audit support skills.
United States or San Francisco or Dublin or Montreal or Seattle or Singapore or Manila or Gurgaon or Alaska or Indiana or Nebraska or North Dakota or Ohio or South Dakota or Wisconsin or Alabama or Mississippi or Oklahoma or Delaware or Rhode Island
$156k-$193k/yrRemoteFull Time
AirbnbNASDAQ: ABNB: Online marketplace for vacation rentals and travel experiences.
10+ YOE10+ years in risk, compliance, or operational risk; program management for cross-functional remediation; experience governing AI/ML systems; investigations partnership; expertise in risk frameworks, registries, and executive reporting.
NIST AI RMF, ISO 42001, EU AI Act, AI/ML, GRC platforms, case management systems, investigation ticketing platforms
Qualtrics: Software for managing customer, employee, and product experiences.
8+ YOEBachelor's degree, 8+ years IT SOX/IT internal audit or risk advisory experience, deep knowledge of SOX/COSO/PCAOB, cloud/SaaS audit experience, experience with AuditBoard/Optro, Claude, Jira, ServiceNow, GitHub/GitLab, and CI/CD; CISA/CIA/CISSP (one required).