GAF: Manufactures residential and commercial roofing and waterproofing products.
8+ YOE3+ MgmtBachelor's degree,8+ years SAP security/GRC experience with 3+ years leading; deep hands-on with SAP GRC Access Control and SAP IAG on BTP; experience with Ariba,SAC or IBP; strong SoD,SOX,access controls knowledge.
SAP GRC Access Control, SAP Identity Access Governance (IAG), SAP Ariba, SAP Analytics Cloud (SAC), SAP Integrated Business Planning (IBP), SAP BTP, XSUAA, SCIM API, ServiceNow, Jira, ABAP, CDS, SU53, ST01, SU24
Essential UtilitiesNYSE: WTRG: Provides regulated water, wastewater, and natural gas utility services.
3+ YOE3+ years GRC or information security experience; bachelor’s in IT-related field; risk, vulnerability, and compliance assessment experience; familiarity with ISO/NIST/COBIT/CIS; must obtain one listed security certification within 12 months.
Qualys Policy Compliance, CIS-CAT, Qualys, RSA Archer, Microsoft Active Directory, Microsoft Office 365, Microsoft Azure
Bachelor's degree or equivalent experience in cybersecurity, information systems, computer science, or risk management; experience with automated controls, GRC platforms, integrations, monitoring, and regulated environments.
Azure DevOps, Jira, GitHub, Jenkins, Microsoft Power Automate, ServiceNow, ServiceNow IRM, Governance, Risk, and Compliance (GRC), APIs, CMDB, CI/CD
Senior Lead, SAP Security, GRC & Compliance- - PVH Corp.
Bridgewater, New Jersey, United States
$105k-$141k/yrHybridFull Time
PVHNYSE: PVH: Designs and markets global apparel and lifestyle brands.
8+ YOEBachelor's in Computer Science, Accounting or related; 8+ years SAP Security and GRC experience; expertise with SAP roles/authorization, GRC modules, SoD analysis, compliance (SOX/GDPR/HIPAA/NIST); strong communication and problem-solving.
S/4HANA, EWM, FMS CAR, Fiori, BW, ECC, SAP GRC Access Control, SAP GRC Process Control, SAP GRC Risk Management, SU24, PFCG, SAP RISE
New York or Atlanta or Boston or Chicago or Cleveland or Dallas or Detroit or Pittsburgh or Hoboken or Houston or Los Angeles or McLean or Miami or Minneapolis or Charlotte or Philadelphia or Portland or San Francisco or Seattle or North America
$123k-$213k/yrHybridFull Time
EY: Global firm providing audit, tax, and professional consulting services.
3+ YOERequires 3–5+ years of SAP Security/GRC experience, bachelor's degree preferred, SAP implementation expertise, GRC Access Control and IAM experience, U.S. driver's license, passport, and willingness to travel up to 80%.
SAP Application Security, SAP GRC Access Control, S/4HANA, SAP ECC, FIORI, ARIBA, HCM, SuccessFactors, Saviynt, SailPoint, SAP IAG, ServiceNow, HP ALM, BTP, SAC, AI, RPA
Selective InsuranceNASDAQ: SIGI: Provider of commercial and personal property and casualty insurance.
3+ YOEWorking knowledge of cybersecurity, GRC, risk, compliance, audit, or third-party risk; strong documentation and communication skills; Microsoft Office proficiency; 3–5 years of relevant experience preferred.
Microsoft Office, NIST CSF, NIST 800-53, NYDFS, GLBA, SOX, SOC, ISO 27001
SHI International: Global provider of IT solutions, hardware, and software services.
8+ YOE8+ years in risk, compliance, cybersecurity or security operations; 3+ years with ServiceNow IRM/GRC or SecOps product ownership; bachelor's degree or equivalent experience; strong stakeholder, governance, and data-driven skills.
Chicago or Miami or Tampa or Los Angeles or Boston or Cleveland or New York City or Florham Park or San Diego or San Francisco or Philadelphia or Houston
$124k-$280k/yrFieldFull Time
PwC: Providing audit, tax, and management consulting services to businesses.
7+ YOEBachelor’s degree and 7+ years of experience; GRC technology proficiency, ISO/IEC 27001, NIST CSF, compliance programs, risk assessments, data analysis, and team leadership.
Mitsubishi UFJ Financial GroupNew York Stock Exchange: MUFG: Global financial group providing diverse banking and investment services.
4+ YOEMinimum 4-7 years in risk management, information security, and IT with cloud security expertise; strong regulatory knowledge; certifications such as CISA, CRISC, CISM, CISSP; bachelor’s degree in IT or information security.
Cloud Platforms, Identity and Access Management, Security Testing Tools, Configuration and Compliance Tools
Governance, Risk and Compliance (GRC) Specialist, North America (Parsippany, NJ, US)
Parsippany or North America
$123k-$164k/yrHybridFull Time
Ferrero: Manufactures and distributes global chocolate and confectionery products.
6+ YOEBachelor's degree in Accounting or related, 6+ years' work experience with 3+ years in internal/external audit, strong finance and operational process knowledge, risk assessment and internal control experience, excellent communication and presentation skills.
Vanguard: Global investment management and financial services provider.
5+ YOEFive years of information security or fraud experience, undergraduate degree or equivalent, expertise in NIST, CIS Controls, ISO 27002, GRC platforms, automation, and financial services cyber regulations.
Deloitte: Global provider of audit, consulting, tax, and advisory services.
2+ YOEBachelor's degree in engineering or related field and 2 years experience; experience with ServiceNow, ITSM/ITOM, MS Office, SAFe Agile, GRC; requirements analysis, user stories, UAT, testing, and production incident triage.
Microsoft Office, Microsoft Excel, Microsoft PowerPoint, Microsoft Word, ServiceNow, ServiceNow ITSM, ServiceNow Agile, ITSM, ITOM, GRC, Safe agile
Wedbush Securities: Full-service investment firm and financial services provider.
10+ YOEBachelor’s degree; 10+ years risk management experience in financial services; FINRA Series 27 required or willing to obtain; strong Excel, Bloomberg, and data analysis skills; experience with risk frameworks, VaR, and GRC tools.
Philadelphia or Delaware or New Jersey or Pennsylvania
HybridFull Time
Independence Blue Cross: Provides health insurance plans and managed care services.
3+ YOEBachelor's in accounting or equivalent experience, 3+ years audit experience (≥1 year senior), strong knowledge of NAIC MAR, SOX, COSO and ICFR; familiarity with GAAP, STAT, ITGC; experience with audit/GRC tools; CPA or CIA preferred.
Workiva, AuditBoard, Microsoft Authenticator, Android, iOS, SOX, COSO, GRC
Bridgewater or New York City or New Jersey or New York or United States
$117k-$148k/yrOnsiteFull Time
InfosysNYSE: INFY: Provides IT consulting, software development, and business outsourcing services.
10+ YOE10+ years in product management or business analysis within financial services with hands-on GRC delivery; 5+ years in regulatory stress testing (CCAR/DFAST/CECL); Bachelor's required (Master's preferred); Power BI/Tableau experience; travel willingness.
Power BI, Tableau, AI-assisted tools, GRC platforms, data warehousing platforms, NIST CSF, NIST 800-53, ISO 27001, SOC 2, SOX 404, GLBA, NYDFS 500, FFIEC, PCI DSS, SWIFT CSCF, CCAR, DFAST, CECL
Senior Analyst, IT Internal Controls & SOX Compliance
San Francisco or Salt Lake City or Phoenix or Los Angeles or Chicago or Boston or Austin or New York City or Miami or Tampa or Atlanta or Columbus or Boise or San Diego or Minneapolis or Houston or Raleigh or Nashville or Kansas City or Charlotte or Portland or Philadelphia or Dallas or Washington D.C. or Seattle
$113k-$148k/yrRemoteFull Time
CircleNYSE: CRCL: Digital currency issuer and blockchain financial infrastructure provider.
4+ YOE4+ years Big 4 IT audit/controls experience, Bachelor's in related field, CPA/CISA/CIA/CISSP required; strong SOX/ITGC knowledge, cloud/SaaS/SDLC/IAM experience, ERP/GRC familiarity, and stakeholder communication skills.
Slack, Apple MacOS, Google Workspace, ERP, GRC, AI
Denver or Stamford or Washington or Orlando or Tampa or Atlanta or Chicago or Boston or Minneapolis or Charlotte or Short Hills or New York City or Philadelphia or Dallas or Houston or McLean
FieldFull Time
KPMG: Global professional services network providing audit, tax, and advisory.
3+ YOERequires 3+ years in SAP audit, controls, security, GRC, ERP implementation, or transformation; bachelor's degree; SAP GRC and security experience; and strong communication skills.
Bristol Myers SquibbNew York Stock Exchange: BMY: Develops and distributes innovative medicines for serious diseases.
8+ YOEDegree in CS/IS or equivalent experience, 8+ years in IT risk/GRC/SecOps/compliance, ServiceNow platform expertise (GRC/SecOps/Privacy/Legal), Agile story writing, stakeholder management, platform migration experience, familiarity with OneTrust, Qualys, Wiz, and relevant certifications (CSA, CRISC, CISA, CISM).