New York City or Chicago or Austin or Dallas or Denver or Miami or San Francisco or Seattle
$270k-$290k/yrHybridFull Time
DriveWealth: Provides API-based brokerage infrastructure for fractional stock trading.
15+ YOE15+ years in information security/GRC in regulated financial services; deep SEC/FINRA and global privacy knowledge; hands-on GRC, audit, TPRM, incident response, and executive/board reporting; relevant certifications preferred.
Brex: Corporate cards and spend management software for businesses.
5+ YOE5+ years in GRC/IT governance or security engineering; deep SOC 2, PCI DSS, ISO 27001, NIST CSF; Python and API integrations; automation and scalable security metrics.
Los Angeles or Chicago or Nashville or New York or Seattle
$100k-$135k/yrHybridFull Time
Metropolis: Computer vision technology for checkout-free parking and retail payments.
3+ YOE3+ years in information security GRC or technology compliance; experience managing security awareness programs; knowledge of SOC 2 and PCI-DSS; familiarity with AI/data security and training platforms; bachelor\u0002s degree required.
Hillsboro or Irvine or Phoenix or Tacoma or Utah or San Diego or Denver or Liberty Lake or Los Angeles or Las Vegas or Seattle
$80k-$165k/yrOnsiteFull Time
Columbia BankNASDAQ: COLB: Commercial and consumer banking services in the Western United States.
7+ YOE7+ years in information security/IT audit/operations; ServiceNow IRM/GRC experience; knowledge of NIST, FFIEC, CIS, ITIL, COBIT; familiarity with PCI DSS, GLBA, HIPAA; bachelor’s preferred.
Blue Origin: Develops reusable rockets and systems for human spaceflight.
10+ YOE10+ years in information security risk management; experience with NIST, ISO 27001/28000, SOC, CMMC; cloud-native, IT and OT security experience; ability to automate compliance and build GRC dashboards.
AdobeNASDAQ: ADBE: Provides software for digital media creation and marketing analytics
5+ YOE5+ years GRC/InfoSec experience, knowledge of SOC/ISO/HIPAA/FedRAMP/NIST frameworks, program and audit leadership, strong communication and analytical skills.
AWS, Azure, GCP, Adobe Common Controls Framework (CCF)
New York City or San Francisco or Seattle or United States
$150k-$210k/yrRemoteFull Time
Runway: Develops generative AI software for creative video production.
7+ YOE7+ years in information security, risk or compliance; deep knowledge of NIST/SOC 2/ISO frameworks; hands-on SOC 2 Type II and ISO 27001 audits; GDPR/CCPA operational experience; cloud security and ML/AI understanding.
NIST, SOC 2, ISO 27001, ISO 27701, ISO 42001, FedRAMP, GDPR, CCPA
F5NASDAQ: FFIV: Provides application delivery networking and multi-cloud security solutions.
10+ YOEBachelor's degree required; 10+ years in cybersecurity/GRC with 3–5 years hands-on engineering; Python, API, and systems-integration experience; ServiceNow IRM and Agentic/LLM framework familiarity; professional certs preferred.
New York or Atlanta or Boston or Chicago or Cleveland or Dallas or Detroit or Pittsburgh or Hoboken or Houston or Los Angeles or McLean or Miami or Minneapolis or Charlotte or Philadelphia or Portland or San Francisco or Seattle or North America
$123k-$213k/yrHybridFull Time
EY: Global firm providing audit, tax, and professional consulting services.
3+ YOERequires 3–5+ years of SAP Security/GRC experience, bachelor's degree preferred, SAP implementation expertise, GRC Access Control and IAM experience, U.S. driver's license, passport, and willingness to travel up to 80%.
SAP Application Security, SAP GRC Access Control, S/4HANA, SAP ECC, FIORI, ARIBA, HCM, SuccessFactors, Saviynt, SailPoint, SAP IAG, ServiceNow, HP ALM, BTP, SAC, AI, RPA
New York or Atlanta or Boston or Chicago or Cleveland or Dallas or Detroit or Pittsburgh or Hoboken or Houston or Los Angeles or McLean or Miami or Minneapolis or North Carolina or Philadelphia or Portland or San Francisco or Seattle or Tampa
$150k-$260k/yrHybridFull Time
EY: Provides audit, tax, consulting, and strategy services globally.
4+ YOEBachelor's degree plus 5 years or master's degree plus 4 years implementing ServiceNow IRM, TPRM, or BCM solutions; ServiceNow CSA and GRC certification required; project leadership and client-facing consulting experience.
ServiceNow IRM, Archer, AuditBoard, Microsoft PowerPoint, Microsoft Word, Microsoft Excel, Microsoft Visio, Integration Hub, API, Waterfall, Agile, REST, SOAP, Spotfire, PowerBI, Tableau, OneTrust, AI
Technology Director - Governance, Risk, and Compliance (GRC)
Seattle, Washington, United States
$206k-$270k/yrHybridFull Time
lululemonNASDAQ: LULU: Designs and retails technical athletic apparel and lifestyle products.
12+ YOE4+ Mgmt12–15+ years in cybersecurity/technology risk with 4+ years senior leadership; bachelor’s in STEM (advanced degree/certifications preferred); deep knowledge of security frameworks and regulatory requirements; program, risk, and people leadership.
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
5+ YOE5+ years compliance, audit, or risk management experience; Bachelor’s degree or equivalent required; deep knowledge of COSO 2013, SEC/PCAOB, ITGCs, SOX scoping, control design, testing, remediation, and GRC platforms.
Senior Analyst, IT Internal Controls & SOX Compliance
San Francisco or Salt Lake City or Phoenix or Los Angeles or Chicago or Boston or Austin or New York City or Miami or Tampa or Atlanta or Columbus or Boise or San Diego or Minneapolis or Houston or Raleigh or Nashville or Kansas City or Charlotte or Portland or Philadelphia or Dallas or Washington D.C. or Seattle
$113k-$148k/yrRemoteFull Time
CircleNYSE: CRCL: Digital currency issuer and blockchain financial infrastructure provider.
4+ YOE4+ years Big 4 IT audit/controls experience, Bachelor's in related field, CPA/CISA/CIA/CISSP required; strong SOX/ITGC knowledge, cloud/SaaS/SDLC/IAM experience, ERP/GRC familiarity, and stakeholder communication skills.
Slack, Apple MacOS, Google Workspace, ERP, GRC, AI
Clearly AI: Automates enterprise security and privacy reviews using AI.
2+ YOE2+ years in GRC, privacy, or security engineering; hands-on threat modeling, vendor risk, and security tool integrations; strong project management and customer debugging skills.
MicrosoftNASDAQ: MSFT: Develops software, services, devices, and cloud computing solutions.
4+ YOEBachelor's degree and 4+ years program/process management experience or equivalent; privacy or finance GRC experience preferred; CIPM/CIPP preferred; knowledge of privacy regulations and ability to scale processes.