Harvey: AI platform for legal research and document analysis.
3+ YOE3+ years information security compliance experience in SaaS/cloud; strong knowledge of government and industry frameworks; maintaining compliance documentation, evidence coordination, remediation tracking, and clear technical communication. U.S. citizenship required.
San Francisco or New York City or Los Angeles or Seattle
$175k-$230k/yrHybridFull Time
Whatnot: Social marketplace for buying and selling via live streams
8+ YOERequires 8+ years of security GRC experience, bachelor's degree in computer science or information security, audit experience, cloud compliance expertise, and knowledge of ISO 27001, SOC2, PCI, GDPR, and CCPA.
NavanNasdaq: NAVN: Integrated platform for corporate travel and expense management.
6+ YOE6+ years in security GRC/auditing, hands-on ISMS management, experience with PCI, SOX, ISO 27001/42001, SOC 1/2, control automation, auditor coordination, and cloud security.
RobloxNYSE: RBLX: Platform for creating and playing user-generated 3D digital experiences.
4+ YOE4+ years GRC experience, risk assessment and policy development, ability to work with engineers, knowledge of compliance frameworks and security controls.
Factor Analysis of Information Risk (FAIR), Roblox Studio
New York City or Seattle or Raleigh or San Francisco or Washington or London or Amsterdam
$134k-$214k/yrHybridFull Time
Plaid: Provides financial data connectivity and payment infrastructure via APIs.
6+ YOE6+ years in security assurance/GRC with ownership of customer-facing security workflows; experience reviewing security contract provisions; familiarity with SOC 2, ISO 27001, NIST frameworks, PCI, GLBA, GDPR/CCPA; program design, metrics ownership, and AI-assisted workflow experience.
SENIOR TECHNOLOGY CONTROLS AND COMPLIANCE ANALYST- REMOTE (1545715)
Georgia or Washington or Maryland or Florida or Los Angeles or San Francisco or New York City or United States
$115k-$130k/yrRemoteFull Time
Compass GroupLondon Stock Exchange: CPG: Provides contract food and support services globally.
7+ YOE7+ years in information security and audit, experience designing and validating ITGCs, Python/data analytics experience, exposure to SOX/PCI-DSS/GDPR/UK CR desired, security certs (CISA, CISM, CISSP, GIAC) preferred, bachelor’s degree or equivalent experience.
Rippling: Unified platform managing workforce HR, IT, and finance operations
5+ YOE5+ years in security compliance, strong communication, experience with ISO 27001 and SOC 2, cloud security best practices, vendor due diligence, and information security policy development.
Wells FargoNYSE: WFC: Global provider of banking, investment, and mortgage financial services.
4+ YOERequires 4+ years in controls, operations, compliance, risk, governance, audit, technology operations, or project coordination, plus reporting, process management, analytical, organizational, and communication skills.
Ross StoresNASDAQ: ROST: Operates an off-price retail chain selling clothing and home goods.
5+ YOEFive years of IT experience, including three in security or risk management; bachelor's degree preferred; security governance, compliance, risk management, analytical, communication, and project management skills required.
Microsoft Word, Microsoft Excel, Microsoft PowerPoint, UNIX, Windows, Firewalls, VPN, PKI, IPS, Oracle, MS SQL
SalesforceNYSE: CRM: Sells cloud-based customer relationship management and business software solutions.
2+ YOE2–4 years GRC/compliance/audit or information security experience; working knowledge of at least two of SOC 2, HIPAA, ISO 27001, or GxP; proficiency with GRC/audit tools and Microsoft Office or Google Workspace; strong communication skills.
SOC 2, HIPAA, ISO 27001, GxP, Microsoft Office Suite, Google Workspace, Drata, Vanta, OneTrust, ServiceNow GRC
St. Petersburg or Rancho Cordova or Fort Lauderdale or New York or San Mateo
$116k-$158k/yrHybridFull Time
Franklin TempletonNYSE: BEN: Global investment firm providing asset and wealth management services.
3+ YOE3+ years industry experience supporting Microsoft 365 Purview and compliance archiving; PowerShell/automation experience; knowledge of FINRA/regulatory retention; strong communication and documentation skills.
Microsoft 365 Purview Compliance Portal, Microsoft 365, PowerShell, Azure Automation Runbook, Logic App, Outlook/Exchange Online, SharePoint, Microsoft Teams, ServiceNow, PowerPoint, Confluence, Microsoft Visio
Fireworks AI: Provides high-performance generative AI model inference and deployment infrastructure.
3+ YOERequires 3–5 years in GRC, IT audit, information security, or related work; security and privacy framework knowledge; GRC platform experience; access review and security awareness platform administration experience; cloud familiarity.
TabaPay: Instant payment processing and money movement for fintech companies.
5+ YOEBachelor’s degree and 5–7 years in IT governance, risk, or compliance within US financial services; 3+ years with high-volume payment rails; at least two governance, risk, audit, or security certifications preferred.
Anthropic: Developing safe and reliable artificial intelligence systems.
Requires clear policy analysis, cybersecurity or AI usage-policy familiarity, technical security reading skills, cross-functional communication, and a relevant bachelor's degree or equivalent experience.
Applications Analyst II – Epic Ambulatory & Community Connect - FT - Days - Ambulatory Tech Group @ MV
Mountain View, California, United States
$58-$87/hrOnsiteFull Time
El Camino Health: Provides acute care and specialized hospital medical services.
Journey-level applications analyst role focused on implementing, managing, and optimizing Epic clinical applications, integrations, interoperability, security, compliance, and system stability.
Milwaukee or Chicago or New York City or San Francisco or Phoenix or Austin or United States
$133k-$195k/yrRemoteFull Time
DoorDashNASDAQ: DASH: On-demand delivery platform connecting consumers with local merchants.
7+ YOE7+ years in security-focused TPRM, experience with vendor risk assessments, cloud/SaaS/AI security reviews, program building, audits, and remediation tracking; Bachelor's or Master's degree in related field.
CAIQ, SIG, SOC 2 Type 2, Penetration Test, NIST, ISO 27001, PCI-DSS, AWS, Azure, GCP, Covey Scout
Milwaukee or Chicago or New York City or San Francisco or Phoenix or Austin or United States
$133k-$195k/yrRemoteFull Time
DoorDashNYSE: DASH: Local food delivery and on-demand logistics platform.
7+ YOERequires 7+ years in security-focused TPRM, a bachelor's or master's degree, risk assessment and remediation experience, cloud and AI vendor expertise, GRC framework experience, and excellent communication skills.