Harvey: Developing AI solutions for legal and professional services.
3+ YOE3+ years information security compliance experience in SaaS/cloud; strong knowledge of government and industry frameworks; maintaining compliance documentation, evidence coordination, remediation tracking, and clear technical communication. U.S. citizenship required.
San Francisco or New York City or Los Angeles or Seattle
$175k-$230k/yrHybridFull Time
Whatnot: Live shopping marketplace connecting buyers and sellers.
8+ YOERequires 8+ years of security GRC experience, bachelor's degree in computer science or information security, audit experience, cloud compliance expertise, and knowledge of ISO 27001, SOC2, PCI, GDPR, and CCPA.
El Segundo or Los Angeles or Washington or San Francisco or San Diego or Seattle or London
$120k-$150k/yrHybridFull Time
CHAOS Industries: Redefining modern defense with a multi-product portfolio.
5+ YOEBachelor's degree or equivalent experience, 5+ years of GRC or compliance experience, DoD or military experience, audit support, risk assessment, GRC tooling, and knowledge of major security frameworks.
NavanNasdaq: NAVN: Corporate travel and expense management platform.
6+ YOE6+ years in security GRC/auditing, hands-on ISMS management, experience with PCI, SOX, ISO 27001/42001, SOC 1/2, control automation, auditor coordination, and cloud security.
RingCentralNYSE: RNG: Sells cloud-based business phone and video conferencing software.
2+ YOERequires 2–3 years in security, risk, or enablement focused on GRC, TPRM, or security trust; a technical bachelor's degree or equivalent experience; security, vendor risk, compliance, writing, and data analysis skills.
RobloxNYSE: RBLX: Global platform for user-created immersive digital experiences.
4+ YOE4+ years GRC experience, risk assessment and policy development, ability to work with engineers, knowledge of compliance frameworks and security controls.
Factor Analysis of Information Risk (FAIR), Roblox Studio
Contra Costa County or Richmond or El Cerrito or Sacramento
$6k-$8k/moHybridFull Time
California Department of Public Health: California’s public health department protects residents through disease prevention, health regulation, laboratory services, and vital records.
Performs analytical, clerical, and technical work supporting security, facilities, emergency response, contracts, training, budgeting, compliance, and operational issue resolution.
SENIOR TECHNOLOGY CONTROLS AND COMPLIANCE ANALYST- REMOTE (1545715)
Georgia or Washington or Maryland or Florida or Los Angeles or San Francisco or New York City or United States
$115k-$130k/yrRemoteFull Time
Compass Group USALondon Stock Exchange: CPG: Leading provider of food and support services.
7+ YOE7+ years in information security and audit, experience designing and validating ITGCs, Python/data analytics experience, exposure to SOX/PCI-DSS/GDPR/UK CR desired, security certs (CISA, CISM, CISSP, GIAC) preferred, bachelor’s degree or equivalent experience.
Security Analyst - Must reside in CA, or be willing to relocate
San Francisco, California, United States
$130k-$134k/yrOnsiteFull Time
Institute on Aging: San Francis nonprofit providing home care, care management, and services to older adults and adults with disabilities.
4+ YOEAssociate degree or higher in a related field, 4+ years of IT security experience, 2+ years conducting compliance assessments and administering security controls, plus infrastructure, network, SIEM, IPS/IDS, and Windows experience.
Data Loss Prevention, Advanced Threat Detection, Identity Access Management, End-Point Security, Forensic Analysis, IPS/IDS, SIEM, Windows, Microsoft Office
Ross StoresNASDAQ: ROST: Off-price retailer of apparel and home fashion.
5+ YOEFive years of IT experience, including three in security or risk management; bachelor's degree preferred; security governance, compliance, risk management, analytical, communication, and project management skills required.
Microsoft Word, Microsoft Excel, Microsoft PowerPoint, UNIX, Windows, Firewalls, VPN, PKI, IPS, Oracle, MS SQL
SalesforceNYSE: CRM: Sells cloud-based customer relationship management and business software solutions.
2+ YOE2–4 years GRC/compliance/audit or information security experience; working knowledge of at least two of SOC 2, HIPAA, ISO 27001, or GxP; proficiency with GRC/audit tools and Microsoft Office or Google Workspace; strong communication skills.
SOC 2, HIPAA, ISO 27001, GxP, Microsoft Office Suite, Google Workspace, Drata, Vanta, OneTrust, ServiceNow GRC
St. Petersburg or Rancho Cordova or Fort Lauderdale or New York or San Mateo
$116k-$158k/yrHybridFull Time
Franklin TempletonNYSE: BEN: Global investment firm providing asset and wealth management services.
3+ YOE3+ years industry experience supporting Microsoft 365 Purview and compliance archiving; PowerShell/automation experience; knowledge of FINRA/regulatory retention; strong communication and documentation skills.
Microsoft 365 Purview Compliance Portal, Microsoft 365, PowerShell, Azure Automation Runbook, Logic App, Outlook/Exchange Online, SharePoint, Microsoft Teams, ServiceNow, PowerPoint, Confluence, Microsoft Visio
Fireworks AI: Private AI infrastructure serving developers and enterprises with model training and inference.
3+ YOERequires 3–5 years in GRC, IT audit, information security, or related work; security and privacy framework knowledge; GRC platform experience; access review and security awareness platform administration experience; cloud familiarity.
TabaPay: Private instant-money-movement platform serving fintechs and other regulated businesses.
5+ YOEBachelor’s degree and 5–7 years in IT governance, risk, or compliance within US financial services; 3+ years with high-volume payment rails; at least two governance, risk, audit, or security certifications preferred.
Anthropic: AI research developing safe and steerable AI systems.
Requires clear policy analysis, cybersecurity or AI usage-policy familiarity, technical security reading skills, cross-functional communication, and a relevant bachelor's degree or equivalent experience.
Applications Analyst II – Epic Ambulatory & Community Connect - FT - Days - Ambulatory Tech Group @ MV
Mountain View, California, United States
$58-$87/hrOnsiteFull Time
El Camino Health: Provides acute care and specialized hospital medical services.
Journey-level applications analyst role focused on implementing, managing, and optimizing Epic clinical applications, integrations, interoperability, security, compliance, and system stability.
Milwaukee or Chicago or New York City or San Francisco or Phoenix or Austin or United States
$133k-$195k/yrRemoteFull Time
DoorDashNYSE: DASH: Technology enabling local on-demand delivery and commerce.
7+ YOE7+ years in security-focused TPRM, experience with vendor risk assessments, cloud/SaaS/AI security reviews, program building, audits, and remediation tracking; Bachelor's or Master's degree in related field.
CAIQ, SIG, SOC 2 Type 2, Penetration Test, NIST, ISO 27001, PCI-DSS, AWS, Azure, GCP, Covey Scout