Kleinfelder: Professional engineering, design, and construction management services.
7+ YOECalifornia PE license required or obtainable within six months, PCI Level II/III certification, and 7–10 years of precast/prestressed concrete QA/QC or inspection experience on major infrastructure projects.
Zip: AI-powered intake-to-procure platform for enterprise spend management
2+ YOEBachelor's degree,2+ years GRC or security risk/audit experience,knowledge of SOC/ISO/PCI/FedRAMP/WCAG frameworks,strong written and verbal communication.
SOC 1, SOC 2, ISO 27001, ISO 42001, PCI DSS, WCAG, FedRAMP
5+ YOE5+ years in SaaS GRC or information security; GCP, AI architectures, data governance, model validation, NIST, PCI, ISO, SOC 2, communication, and process improvement experience.
retailcloud: Provides cloud-based point-of-sale and retail management software solutions.
Technical and architectural leadership for Android-based mobile POS platforms, system-level architecture, cloud/connectivity design, security/compliance (PCI/EMV), and collaboration with product and engineering stakeholders.
Treasury Prime: Provides an API platform connecting fintechs to bank partners.
3+ MgmtHands-on DevOps/platform experience, production reliability and on-call ownership, 3+ years managing engineers, CI/CD and infra-as-code experience, familiarity with compliance (SOC 2, PCI).
CI/CD, cloud services, infrastructure-as-code, containerization, monitoring, data pipelines, data warehouse, DNS, SLO, SOC 2, PCI
Imprint: Provides-branded credit cards and loyalty platforms for consumer brands.
8+ YOERequires 8+ years in security engineering, security function-building, production code review, SIEM or SOAR pipeline development, deep AWS security expertise, and PCI DSS audit experience.
NVIDIANASDAQ: NVDA: Designs GPU-accelerated computing and artificial intelligence hardware.
5+ YOE5+ years experience in digital/ASIC design, degree in EE/CE or equivalent, experience with high-speed protocols (NVLink, PCI-Express, Ethernet, UCIE), RTL implementation, and ASIC design flows.
Mountain View or Colorado or North Carolina or New Jersey or Nevada or Texas
$170k-$215k/yrRemoteFull Time
Credit Sesame: Financial wellness platform for credit monitoring and cash management.
7+ YOERequires 7+ years of security engineering experience across application, cloud, and network security; AWS expertise; automation and security tooling experience; PCI DSS, SOC 2, and ISO 27001 knowledge.
FigmaNew York Stock Exchange: FIG: Collaborative interface design and prototyping software for teams.
4+ YOE4+ years in information security, compliance, or risk; hands-on experience with SOC 2, ISO 27001, FedRAMP, PCI-DSS, or SOX ITGC; audit experience; strong communication and cross-functional collaboration skills.
Discord: A platform providing voice, video, and text communication services.
4+ YOE4+ years in security compliance/GRC or related fields; familiarity with ISO 27001/27002,SOC 2,PCI DSS,GDPR/CPRA; hands-on compliance processes; automation-first mindset; strong writing and cross-team collaboration skills.
ISO 27001, ISO 27002, SOC 2, PCI DSS, GDPR, CPRA, GRC platform, ticketing, docs and wikis
NVIDIANASDAQ: NVDA: Designs graphics processing units and artificial intelligence hardware.
5+ YOEBachelors or Master's in EE/CE or equivalent experience, 5+ years relevant experience, experience with high-speed protocols (NVLink, PCI-Express, Ethernet, UCIE), delivering high-bandwidth datapath blocks, deep ASIC design flow knowledge.
Airwallex: Global financial platform for business payments and money management.
5+ YOE5-7 years cybersecurity experience, Mexican Tax ID (RFC) or dual Mexican citizenship required, fluent English and Spanish, knowledge of PCI-DSS/ISO 27001/SOC2, fintech and cloud compliance experience, CISSP/CEH/CISA strong advantage.
New York City or Seattle or Raleigh or San Francisco or Washington or London or Amsterdam
$134k-$214k/yrHybridFull Time
Plaid: Provides financial data connectivity and payment infrastructure via APIs.
6+ YOE6+ years in security assurance/GRC with ownership of customer-facing security workflows; experience reviewing security contract provisions; familiarity with SOC 2, ISO 27001, NIST frameworks, PCI, GLBA, GDPR/CCPA; program design, metrics ownership, and AI-assisted workflow experience.
Rippling: Unified platform managing workforce HR, IT, and finance operations
4+ YOE4+ years in security and compliance with vendor risk management experience; familiarity with ISO 27001, PCI DSS, SOC 2; cloud security best practices; strong communication skills.
Everfit: All-in-one platform for fitness coaches to manage and scale businesses.
3+ YOERequires 3–5+ years owning payments, billing, payouts, or fraud systems as a product manager, plus payment infrastructure, disputes, reconciliation, PCI, KYC, metrics, and marketplace experience.
Stripe, Adyen, Braintree, Figma, Jira, Confluence, QA, AI
NavanNasdaq: NAVN: Integrated platform for corporate travel and expense management.
6+ YOE6+ years in security GRC/auditing, hands-on ISMS management, experience with PCI, SOX, ISO 27001/42001, SOC 1/2, control automation, auditor coordination, and cloud security.