Kokosing: Provides heavy civil, industrial, and marine construction services.
5+ YOE5+ years GRC/cybersecurity experience; knowledge of CMMC and NIST 800-171; strong risk management, policy and vendor risk experience; ability to influence stakeholders and support audits and data governance.
Columbus or Chicago or Detroit or Tupelo or Charlotte or Dallas or Atlanta or Houston or Birmingham
$70k-$140k/yrOnsiteFull Time
HuntingtonNASDAQ: HBAN: Provides regional commercial, consumer, and mortgage banking services.
5+ YOEBachelor's degree or 4+ years equivalent experience, 5+ years software development, and preferably 5+ years in GRC systems. Requires analytical, troubleshooting, communication, and programming skills.
Archer, OpenPages, ProcessUnity, ServiceNow IRM, AWS, Apigee, Linux OS, OpenShift, .NET, C#, Python, Java, Microsoft Office
FiservNew York Stock Exchange: FI: Provides financial technology and payment processing services to institutions.
8+ YOE8+ years in GRC/cybersecurity/governance roles,5+ years enterprise architecture experience,OneTrust/Archer and API integration expertise,Python/JavaScript,REST/OAuth,ability to translate policy into technical controls.
OneTrust, Archer, REST APIs, OAuth, Python, JavaScript, Power BI
Westfield: Provides property, casualty, and specialty insurance and surety solutions.
7+ YOE7+ years in IT GRC, information security, or IT audit; Bachelor's in IT/cybersecurity or related; CISSP/CISA/CRISC/CISM/CGEIT preferred; subject-matter expertise in IT governance, controls, risk assessment, and compliance; must be authorized to work in the U.S. without sponsorship.
New York or Atlanta or Boston or Chicago or Cleveland or Dallas or Detroit or Pittsburgh or Hoboken or Houston or Los Angeles or McLean or Miami or Minneapolis or Charlotte or Philadelphia or Portland or San Francisco or Seattle or North America
$123k-$213k/yrHybridFull Time
EY: Global firm providing audit, tax, and professional consulting services.
3+ YOERequires 3–5+ years of SAP Security/GRC experience, bachelor's degree preferred, SAP implementation expertise, GRC Access Control and IAM experience, U.S. driver's license, passport, and willingness to travel up to 80%.
SAP Application Security, SAP GRC Access Control, S/4HANA, SAP ECC, FIORI, ARIBA, HCM, SuccessFactors, Saviynt, SailPoint, SAP IAG, ServiceNow, HP ALM, BTP, SAC, AI, RPA
Minneapolis or Knoxville or Charlotte or Cincinnati or Milwaukee or Saint Paul
$105k-$124k/yrHybridFull Time
U.S. BankNYSE: USB: Provider of personal, business, and institutional financial services.
7+ YOEBachelor's degree or equivalent experience, 6+ years risk/compliance/audit experience, GRC transformation and coordination skills, strong communication and analytical abilities, proficiency with eGRC and Microsoft Office.
Riverside Research: Conducts independent scientific research for US national security.
12+ YOE3+ Mgmt12+ years in cybersecurity/GRC with 3+ years leading teams, bachelor’s in relevant field, knowledge of CMMC/NIST SP 800-171/FAR/DFARS, experience with enterprise governance, risk management, and regulatory assessments.
CMMC, NIST SP 800-171, Microsoft 365, Microsoft Entra ID, Microsoft Azure, Amazon Web Services (AWS), DLP
Austin or Tampa or Chicago or Cleveland or Miami or Los Angeles or Boston or New York City or Florham Park or San Diego or San Francisco or Philadelphia or Houston
$99k-$232k/yrOnsiteFull Time
PwC: Providing audit, tax, and management consulting services to businesses.
5+ YOEBachelor's degree,5+ years relevant experience,proficiency with GRC solutions and ServiceNow,knowledge of ISO/IEC 27001 and NIST CSF,team leadership and client-facing skills.
Open Practice Solutions: Provides cloud-based revenue cycle and practice management software.
2+ YOEBS degree, 2+ years application development, proficiency in one or more major languages (JavaScript/TypeScript, Python, C#, Java), web/API/DB experience, familiarity with cloud (AWS/Azure) and secure coding.
CintasNasdaq: CTAS: Provides managed uniform programs and facility services to businesses.
3+ YOE3+ years SAP security experience, 1+ year GRC, bachelor\u0002s degree or equivalent, SAP S/4HANA and Fiori exposure, cloud security experience, technical leadership and communication skills.
United States or Canada or Columbus or Austin or San Francisco or New York City
$172k-$238k/yrRemoteFull Time
UpstartNasdaq: UPST: AI-powered lending marketplace for consumer and automotive loans.
8+ YOE3+ MgmtBachelor's or equivalent, 8+ years technology risk/information security/IT audit experience in banking, 3+ years people management, FFIEC/OCC regulatory experience, regulator engagement, and GRC program experience; professional certs preferred.
BlinkOps: Agentic security automation platform for enterprise workflows.
3+ YOE3+ years in sales/solutions engineering in cybersecurity, strong security operations knowledge, hands-on with APIs, JSON/YAML and jq, experience with SIEM/SOAR/EDR/IAM/GRC integrations, demo/POC and customer-facing skills.
Stamford or Chicago or Costa Mesa or Kansas City or Draper or New York City or Phoenix or Cincinnati or Saint Paul or Orlando or Alpharetta or Charlotte or Canton
5+ YOEBachelor's degree plus 5+ years financial services experience (or 10+ years without degree), 3+ years ERM exposure, strong risk analytics and reporting skills, experience with Workiva/Tableau/Power BI/GRC, excellent communication.
Workiva, Tableau, Power BI, GRC tools, Microsoft Word, Microsoft Excel, Microsoft PowerPoint
Senior Analyst, IT Internal Controls & SOX Compliance
San Francisco or Salt Lake City or Phoenix or Los Angeles or Chicago or Boston or Austin or New York City or Miami or Tampa or Atlanta or Columbus or Boise or San Diego or Minneapolis or Houston or Raleigh or Nashville or Kansas City or Charlotte or Portland or Philadelphia or Dallas or Washington D.C. or Seattle
$113k-$148k/yrRemoteFull Time
CircleNYSE: CRCL: Digital currency issuer and blockchain financial infrastructure provider.
4+ YOE4+ years Big 4 IT audit/controls experience, Bachelor's in related field, CPA/CISA/CIA/CISSP required; strong SOX/ITGC knowledge, cloud/SaaS/SDLC/IAM experience, ERP/GRC familiarity, and stakeholder communication skills.
Slack, Apple MacOS, Google Workspace, ERP, GRC, AI
Denver or Stamford or Washington or Orlando or Tampa or Atlanta or Chicago or Boston or Minneapolis or Charlotte or Short Hills or Columbus or Philadelphia or Dallas or Houston or McLean
OnsiteFull Time
KPMG: Global professional services network providing audit, tax, and advisory.
5+ YOERequires 5+ years of SAP audit, controls, security, GRC, ERP implementation, transformation, or analytics experience; bachelor's degree; SAP GRC and security expertise; and strong communication skills.
First Financial BankNASDAQ: FFBC: Provides retail and commercial banking and wealth management services.
Experience with vendor management, due diligence, artifact review, regulatory compliance, and familiarity with Archer GRC and LogicManager; strong written/oral communication and Excel skills.
Archer GRC, LogicManager, Microsoft Word, Microsoft Excel
Great American Insurance GroupNYSE: AFG: Provides specialty property and casualty insurance for businesses.
6+ YOEBachelor's degree, 6+ years IT governance/risk/compliance or audit experience, familiarity with SOX/GDPR, proficiency with GRC tools, and strong communication and analytical skills.
CognizantNASDAQ: CTSH: Provides IT consulting and technology services to global enterprises.
3+ YOE3+ years GRC or information security experience with NIST SP 800-171/CMMC support, risk assessments, remediation tracking, audit support, and stakeholder communication.