American TowerNYSE: AMT: Leases space on wireless and broadcast towers for communications.
2+ YOERequires 2+ years in GRC or information security, strong project management and communication skills, Microsoft Office and Oracle proficiency, and knowledge of security standards and privacy regulations.
Microsoft Office, Oracle, ISO 27001, ISO 27002, ITIL, Identity and Access Management (IAM)
ezCater: Online marketplace for business catering and food for work
8+ YOE8+ years in security GRC or compliance for SaaS/cloud; deep knowledge of ISO-27001, NIST CSF, SOC 2, ITGC, PCI; experience automating control testing and evidence collection; familiarity with Policy-as-Code (Terraform), AWS, GitHub; strong communication.
HubSpotNYSE: HUBS: Provides a customer platform for marketing, sales, and service.
Experience in Security GRC/IT Compliance or IT Audit, people management plus hands-on IC work, deep control design (SOX 404), risk-based scoping/testing, AWS/microservices/CI/CD familiarity, strong communication.
AWS, CI/CD, IAM, ISO 27001, SOC 1, SOC 2, NIST, ISO 42001
New York City or Maryland or Massachusetts or Virginia or Georgia or New York
$97k-$184k/yrOnsiteFull Time
Chainalysis: Blockchain data platform for cryptocurrency investigation and compliance.
Experience implementing and operating security and compliance controls in cloud/SaaS environments; built evidence collection, control testing, or remediation workflows; supported SOC 2/ISO 27001 or similar; strong written/verbal communication; US citizenship required.
New York or Atlanta or Boston or Chicago or Cleveland or Dallas or Detroit or Pittsburgh or Hoboken or Houston or Los Angeles or McLean or Miami or Minneapolis or Charlotte or Philadelphia or Portland or San Francisco or Seattle or North America
$123k-$213k/yrHybridFull Time
EY: Global firm providing audit, tax, and professional consulting services.
3+ YOERequires 3–5+ years of SAP Security/GRC experience, bachelor's degree preferred, SAP implementation expertise, GRC Access Control and IAM experience, U.S. driver's license, passport, and willingness to travel up to 80%.
SAP Application Security, SAP GRC Access Control, S/4HANA, SAP ECC, FIORI, ARIBA, HCM, SuccessFactors, Saviynt, SailPoint, SAP IAG, ServiceNow, HP ALM, BTP, SAC, AI, RPA
Blitzy: Autonomous AI platform for enterprise software development.
Hands-on ownership of SOC 2 Type II or ISO 27001:2022 audits, Vanta or equivalent GRC platform experience, auditor/vendor management, FedRAMP exposure preferred, strong written and judgment skills.
United States or Illinois or Colorado or Hawaii or District of Columbia or Maryland or Minnesota or New York or Washington or New Jersey or Vermont or Massachusetts or California or Kansas
$97k-$227k/yrRemoteFull Time
ComcastNASDAQ: CMCSA: Provides global telecommunications, media content, and entertainment services.
5+ YOE5+ years enterprise sales engineering experience in B2B SaaS, GRC/cyber risk expertise, data fluency including SQL, strong PoV/demo/communication skills, ability to travel and influence product direction.
DataBee, SQL, Business Intelligence (BI) Reporting Tools
Chicago or Miami or Tampa or Los Angeles or Boston or Cleveland or New York City or Florham Park or San Diego or San Francisco or Philadelphia or Houston
$124k-$280k/yrFieldFull Time
PwC: Providing audit, tax, and management consulting services to businesses.
7+ YOEBachelor’s degree and 7+ years of experience; GRC technology proficiency, ISO/IEC 27001, NIST CSF, compliance programs, risk assessments, data analysis, and team leadership.
New York or Atlanta or Boston or Chicago or Cleveland or Dallas or Detroit or Pittsburgh or Hoboken or Houston or Los Angeles or McLean or Miami or Minneapolis or North Carolina or Philadelphia or Portland or San Francisco or Seattle or Tampa
$150k-$260k/yrHybridFull Time
EY: Provides audit, tax, consulting, and strategy services globally.
4+ YOEBachelor's degree plus 5 years or master's degree plus 4 years implementing ServiceNow IRM, TPRM, or BCM solutions; ServiceNow CSA and GRC certification required; project leadership and client-facing consulting experience.
ServiceNow IRM, Archer, AuditBoard, Microsoft PowerPoint, Microsoft Word, Microsoft Excel, Microsoft Visio, Integration Hub, API, Waterfall, Agile, REST, SOAP, Spotfire, PowerBI, Tableau, OneTrust, AI
Mintz: Full-service law firm providing legal and regulatory counsel.
3+ YOE3-5 years experience in information security/compliance/audit or related discipline, Bachelor's degree or equivalent experience, strong organizational and communication skills, Microsoft 365 proficiency, experience with compliance frameworks.
Senior Analyst, IT Internal Controls & SOX Compliance
San Francisco or Salt Lake City or Phoenix or Los Angeles or Chicago or Boston or Austin or New York City or Miami or Tampa or Atlanta or Columbus or Boise or San Diego or Minneapolis or Houston or Raleigh or Nashville or Kansas City or Charlotte or Portland or Philadelphia or Dallas or Washington D.C. or Seattle
$113k-$148k/yrRemoteFull Time
CircleNYSE: CRCL: Digital currency issuer and blockchain financial infrastructure provider.
4+ YOE4+ years Big 4 IT audit/controls experience, Bachelor's in related field, CPA/CISA/CIA/CISSP required; strong SOX/ITGC knowledge, cloud/SaaS/SDLC/IAM experience, ERP/GRC familiarity, and stakeholder communication skills.
Slack, Apple MacOS, Google Workspace, ERP, GRC, AI
Denver or Stamford or Washington or Orlando or Tampa or Atlanta or Chicago or Boston or Minneapolis or Charlotte or Short Hills or New York City or Philadelphia or Dallas or Houston or McLean
FieldFull Time
KPMG: Global professional services network providing audit, tax, and advisory.
3+ YOERequires 3+ years in SAP audit, controls, security, GRC, ERP implementation, or transformation; bachelor's degree; SAP GRC and security experience; and strong communication skills.
Watts Water TechnologiesNYSE: WTS: Manufactures water flow control and water quality products.
3+ YOEBachelor's or equivalent; 3+ years IT compliance/internal audit/GRC experience; working knowledge of ITGCs and SOX; experience with GRC/audit platforms; strong communication and organizational skills.
Optro (AuditBoard), ServiceNow GRC, Archer, MetricStream, Jira, Microsoft Power Automate, SQL, Python, APIs
Assoc Dir, Information Security Governance Risk & Compliance
Boston, Massachusetts, United States
$179k-$212k/yrHybridFull Time
Servier: Independent global pharmaceutical group developing innovative treatments for patients.
8+ YOE3+ Mgmt8+ years in information security GRC or related discipline, 3+ years leadership, expertise with risk frameworks, audit readiness, third-party risk, and strong executive communication.