Hillsboro or Irvine or Phoenix or Tacoma or Utah or San Diego or Denver or Liberty Lake or Los Angeles or Las Vegas or Seattle
$80k-$165k/yrOnsiteFull Time
Columbia BankNASDAQ: COLB: Commercial and consumer banking services in the Western United States.
7+ YOE7+ years in information security/IT audit/operations; ServiceNow IRM/GRC experience; knowledge of NIST, FFIEC, CIS, ITIL, COBIT; familiarity with PCI DSS, GLBA, HIPAA; bachelor’s preferred.
AdobeNASDAQ: ADBE: Provides software for digital media creation and marketing analytics
5+ YOE5+ years GRC/InfoSec experience, knowledge of SOC/ISO/HIPAA/FedRAMP/NIST frameworks, program and audit leadership, strong communication and analytical skills.
AWS, Azure, GCP, Adobe Common Controls Framework (CCF)
Information Security Governance, Risk, Compliance (GRC) Supervisor
Salt Lake City, Utah, United States
OnsiteFull Time
ARUP Laboratories: Provides national clinical and anatomic pathology reference laboratory services.
3+ YOEBachelor's in IT, CS, information security or related; 3-5 years in cybersecurity, risk management, and compliance; strong communication and leadership; certifications desirable.
MX: Provides financial data connectivity and open banking API solutions.
10+ YOEBachelor's degree,10+ years leading information security GRC/privacy programs,experience with compliance frameworks,GRC platforms,privacy regs (GDPR,CCPA,HIPAA),and people leadership.
GRC, SOC 2, ISO 27001, PCI DSS, Web Application Firewalls (WAFs), Content Delivery Networks (CDNs)
Filevine: Legal case management software and AI platform for lawyers.
10+ YOE10+ years in security/compliance/GRC with FedRAMP ownership, privacy and trust program leadership, ability to translate regulatory requirements into engineering work, and strong stakeholder and executive communication.
FedRAMP, NIST 800-53, SOC 2, ISO 27001, HIPAA, PCI-DSS, GRC
Lucid Software: Provides visual collaboration and diagramming software for teams.
3+ YOEBachelor's degree, 3+ years in third-party risk/GRC, knowledge of NIST/ISO/SOC frameworks, strong writing and interpersonal skills, ability to manage tasks independently.
GRC, NIST 800-53, ISO 27001, SOC 2, AWS, GCP, Azure, AI tools
LendingClubNYSE: LC: Digital marketplace bank providing personal loans and banking services.
4+ YOE4+ years in financial services risk or operational risk; strong RCSA and control testing experience; familiarity with GRC platforms; excellent communication, facilitation, and project discipline; Bachelor's degree or equivalent.
InComm Payments: Provider of global prepaid products and payment technology solutions.
2+ YOE2+ years assisting with audit planning, execution and reporting; knowledge of COSO, SOX, COBIT, NIST, PCI and GRC; bachelor’s in accounting/finance; CPA, CISA or CIA preferred or in-progress; experience with AuditBoard.
Staff Technology & Cyber Governance - AI Governance
Columbus or Chadds Ford or Frisco or Draper or New York or Wilmington
$108k-$196k/yrHybridFull Time
Bread FinancialNYSE: BFH: Provides credit cards, consumer loans, and personal savings accounts.
8+ YOEBachelor's in IT/Cyber/Data or equivalent, 8+ years in technology risk/cyber/data governance, experience designing governance frameworks and enterprise GRC processes, familiarity with AI/ML model lifecycle and regulatory frameworks.
GRC platforms, model registries, monitoring tools, NIST AI RMF, NIST CSF, OWASP, ISO 27001, ISO 42001
Autonomous Solutions: ASI develops autonomous vehicle systems and fleet management software.
7+ YOEBachelor's degree, 7+ years in security engineering or security/GRC roles, SOC 2/ISO 27001 audit ownership, SIEM/EDR and IAM expertise, incident command experience, and team leadership experience.
Splunk, Microsoft Sentinel, Sumo Logic, SIEM, EDR, SOC 2 Type II, ISO 27001, GRC, MFA, IAM
Progressive LeasingNYSE: PRG: Provides lease-to-own financing at retail points of sale.
1+ YOEBachelor’s degree; 1-3 years in enterprise risk management in financial services; knowledge of ERM frameworks, risk taxonomies, regulatory expectations; data skills; experience with GRC systems a plus; ability to communicate clearly and influence stakeholders.
Senior Analyst, IT Internal Controls & SOX Compliance
San Francisco or Salt Lake City or Phoenix or Los Angeles or Chicago or Boston or Austin or New York City or Miami or Tampa or Atlanta or Columbus or Boise or San Diego or Minneapolis or Houston or Raleigh or Nashville or Kansas City or Charlotte or Portland or Philadelphia or Dallas or Washington D.C. or Seattle
$113k-$148k/yrRemoteFull Time
CircleNYSE: CRCL: Digital currency issuer and blockchain financial infrastructure provider.
4+ YOE4+ years Big 4 IT audit/controls experience, Bachelor's in related field, CPA/CISA/CIA/CISSP required; strong SOX/ITGC knowledge, cloud/SaaS/SDLC/IAM experience, ERP/GRC familiarity, and stakeholder communication skills.
Slack, Apple MacOS, Google Workspace, ERP, GRC, AI
Brooklyn or Chicago or Buffalo or Albany or Salt Lake City or Cincinnati or Charlotte or Denver or Columbus or Atlanta
$71k-$125k/yrHybridFull Time
KeyBankNYSE: KEY: Provides retail, commercial, and investment banking products and services.
3+ YOEBachelor's degree,3+ years in compliance/risk/internal audit or related area; experience with GRC, analytics, reporting, and strong communication; relevant compliance/risk certifications preferred.
Archer, RSA, ServiceNow GRC, Tableau, Power BI, SQL, Microsoft SQL Server, Python, Alteryx, SAS, BigQuery, GCP, Gemini CLI, GitHub, Copilot, Microsoft Excel
Zions BancorporationNASDAQ: ZION: Provides banking, lending, and financial services to customers.
8+ YOEBachelor's degree and 8+ years in governance, risk, or compliance; experience with AI or technology policy preferred; familiarity with Microsoft Power Platform, GRC tooling, and ML concepts; strong communication and project management skills.
NIST AI Risk Management Framework (RMF), Microsoft Power Automate, Microsoft Power Apps, Microsoft Power BI
Austin or Denver or Indianapolis or Los Angeles or San Francisco or New York or Salt Lake City or Minneapolis or Seattle or Nashville
$135k-$150k/yrRemoteFull Time
Givebutter: Fundraising and CRM platform for nonprofit organizations.
5+ YOE5+ years IT experience; hands-on IT ops (MDM, device and SaaS administration, identity lifecycle), Notion administration, GRC project management with Vanta/Drata, familiarity with SOC 2/ISO 27001/PCI, remote/Mac environment experience.
Vanta, Drata, Notion, Google Workspace, Slack, 1Password, Mobile Device Management (MDM), Claude, Cursor, ChatGPT
Merit Medical SystemsNASDAQ: MMSI: Develops and manufactures proprietary disposable medical devices for clinicians.
8+ YOE8+ years audit/systems experience, expertise in IT audit, risk management and governance, advanced computer and data analytics skills, ability to assess cybersecurity/privacy/AI risks, travel up to 10-20%, CIA/CISA/CISSP preferred.
Western Governors University: Offers accredited online competency-based bachelor's and master's degrees.
3+ YOEBachelor's degree or equivalent experience with 3+ years relevant experience (alternatively 7+ years info sec or 6+ years with relevant certification). Knowledge of NIST, FERPA/GLBA/GDPR/HIPAA, TPRM, OSINT, AI tools, and vendor security assessments.