Harvey: AI platform for legal research and document analysis.
3+ YOE3+ years information security compliance experience in SaaS/cloud; strong knowledge of government and industry frameworks; maintaining compliance documentation, evidence coordination, remediation tracking, and clear technical communication. U.S. citizenship required.
Senior Security Compliance Analyst - Global Security Organization
San Jose, California, United States
$112k-$162k/yrOnsiteFull Time
TikTok: Global short-form video hosting and social media platform.
5+ YOEExperience with GITC domains, system scoping, control testing, audit readiness, remediation, and technical configurations. Preferred: 5+ years, bachelor's degree, Python, SQL, regulatory knowledge, and relevant certifications.
Discord: A platform providing voice, video, and text communication services.
4+ YOE4+ years in security compliance/GRC or related fields; familiarity with ISO 27001/27002,SOC 2,PCI DSS,GDPR/CPRA; hands-on compliance processes; automation-first mindset; strong writing and cross-team collaboration skills.
ISO 27001, ISO 27002, SOC 2, PCI DSS, GDPR, CPRA, GRC platform, ticketing, docs and wikis
NavanNasdaq: NAVN: Integrated platform for corporate travel and expense management.
6+ YOE6+ years in security GRC/auditing, hands-on ISMS management, experience with PCI, SOX, ISO 27001/42001, SOC 1/2, control automation, auditor coordination, and cloud security.
RingCentralNYSE: RNG: Sells cloud-based business phone and video conferencing software.
2+ YOERequires 2–3 years in security, risk, or enablement focused on GRC, TPRM, or security trust; a technical bachelor's degree or equivalent experience; security, vendor risk, compliance, writing, and data analysis skills.
RobloxNYSE: RBLX: Platform for creating and playing user-generated 3D digital experiences.
4+ YOE4+ years GRC experience, risk assessment and policy development, ability to work with engineers, knowledge of compliance frameworks and security controls.
Factor Analysis of Information Risk (FAIR), Roblox Studio
New York City or Seattle or Raleigh or San Francisco or Washington or London or Amsterdam
$134k-$214k/yrHybridFull Time
Plaid: Provides financial data connectivity and payment infrastructure via APIs.
6+ YOE6+ years in security assurance/GRC with ownership of customer-facing security workflows; experience reviewing security contract provisions; familiarity with SOC 2, ISO 27001, NIST frameworks, PCI, GLBA, GDPR/CCPA; program design, metrics ownership, and AI-assisted workflow experience.
SENIOR TECHNOLOGY CONTROLS AND COMPLIANCE ANALYST- REMOTE (1545715)
Georgia or Washington or Maryland or Florida or Los Angeles or San Francisco or New York City or United States
$115k-$130k/yrRemoteFull Time
Compass GroupLondon Stock Exchange: CPG: Provides contract food and support services globally.
7+ YOE7+ years in information security and audit, experience designing and validating ITGCs, Python/data analytics experience, exposure to SOX/PCI-DSS/GDPR/UK CR desired, security certs (CISA, CISM, CISSP, GIAC) preferred, bachelor’s degree or equivalent experience.
Rippling: Unified platform managing workforce HR, IT, and finance operations
5+ YOE5+ years in security compliance, strong communication, experience with ISO 27001 and SOC 2, cloud security best practices, vendor due diligence, and information security policy development.
ServiceNowNYSE: NOW: Enterprise cloud platform for digital workflow automation.
3+ YOERequires 3–5+ years in information or application security, CSA certification, cloud and security-tool expertise, Java/JavaScript knowledge, web proxy experience, application security, risk, compliance, and AI skills.
ServiceNow, Azure AI, AWS, SIEM, WAF, IDS/IPS, Java, JavaScript, OWASP Top Ten, NIST, CIS, GDPR, HIPAA, PCI DSS, ISO
United States or San Francisco or New York City or Bengaluru
$150k-$200k/yrHybridFull Time
Mesh: Connecting digital wallets and exchanges for unified cryptocurrency payments.
5+ YOERequires 5+ years of hands-on GRC experience, compliance program management, major security framework familiarity, business continuity and disaster recovery experience, risk lifecycle expertise, and scalable process-building skills.
SalesforceNYSE: CRM: Sells cloud-based customer relationship management and business software solutions.
2+ YOE2–4 years GRC/compliance/audit or information security experience; working knowledge of at least two of SOC 2, HIPAA, ISO 27001, or GxP; proficiency with GRC/audit tools and Microsoft Office or Google Workspace; strong communication skills.
SOC 2, HIPAA, ISO 27001, GxP, Microsoft Office Suite, Google Workspace, Drata, Vanta, OneTrust, ServiceNow GRC
St. Petersburg or Rancho Cordova or Fort Lauderdale or New York or San Mateo
$116k-$158k/yrHybridFull Time
Franklin TempletonNYSE: BEN: Global investment firm providing asset and wealth management services.
3+ YOE3+ years industry experience supporting Microsoft 365 Purview and compliance archiving; PowerShell/automation experience; knowledge of FINRA/regulatory retention; strong communication and documentation skills.
Microsoft 365 Purview Compliance Portal, Microsoft 365, PowerShell, Azure Automation Runbook, Logic App, Outlook/Exchange Online, SharePoint, Microsoft Teams, ServiceNow, PowerPoint, Confluence, Microsoft Visio
AgoraNASDAQ: API: Provides APIs for real-time voice, video, and conversational AI.
5+ YOEBachelor's degree or equivalent, 5+ years privacy/compliance experience in SaaS/technology, hands-on DPIAs/DSRs/DPAs experience, strong GDPR/CCPA knowledge, ability to be in-office 3x/week.
Applications Analyst II – Epic Ambulatory & Community Connect - FT - Days - Ambulatory Tech Group @ MV
Mountain View, California, United States
$58-$87/hrOnsiteFull Time
El Camino Health: Provides acute care and specialized hospital medical services.
Journey-level applications analyst role focused on implementing, managing, and optimizing Epic clinical applications, integrations, interoperability, security, compliance, and system stability.
Milwaukee or Chicago or New York City or San Francisco or Phoenix or Austin or United States
$133k-$195k/yrRemoteFull Time
DoorDashNASDAQ: DASH: On-demand delivery platform connecting consumers with local merchants.
7+ YOE7+ years in security-focused TPRM, experience with vendor risk assessments, cloud/SaaS/AI security reviews, program building, audits, and remediation tracking; Bachelor's or Master's degree in related field.
CAIQ, SIG, SOC 2 Type 2, Penetration Test, NIST, ISO 27001, PCI-DSS, AWS, Azure, GCP, Covey Scout
United States or San Francisco or New York City or Washington
$245k-$285k/yrHybridFull Time
Anthropic: Developing safe and reliable artificial intelligence systems.
Experience in trust & safety, fraud, or security operations; subject-matter expertise in account takeover/credential abuse; experience building enforcement/remediation workflows; SQL/data proficiency; strong written communication; bachelor’s degree or equivalent.