TikTok: Global short-form video hosting and social media platform.
Technical security analyst for insider risk investigations; strong log and telemetry analysis, IAM and cloud familiarity, EDR and endpoint/cloud/identity investigations, reporting and stakeholder communication.
Okta, Active Directory (AD), GCP, AWS, Azure, Ali Cloud, EDR, VPN, Slack, Microsoft Teams, Git, Python
OpenAI: Develops artificial intelligence models and generative AI software services.
7+ YOE7+ years experience in trust & safety, security, intelligence, or related fields; strong understanding of agentic AI systems; analytical judgment, technical fluency; experience synthesizing investigations and telemetry; SQL/Python a plus.
Global Security Risk Intelligence Lead (GSOC) (GRS)
San Mateo, California, United States
$70k/yrOnsiteFull Time
ProsegurBolsa de Madrid: PSG: Global provider of physical security, cash logistics, and technology.
Prior GSOC, security operations, intelligence analysis, or risk monitoring experience; knowledge of global threats; Microsoft Office proficiency; strong communication and customer service skills.
Microsoft Outlook, Microsoft Teams, Microsoft Excel, Microsoft SharePoint, Ontic, OSINT
San Francisco or New York City or Los Angeles or Seattle
$175k-$230k/yrHybridFull Time
Whatnot: Social marketplace for buying and selling via live streams
8+ YOERequires 8+ years of security GRC experience, bachelor's degree in computer science or information security, audit experience, cloud compliance expertise, and knowledge of ISO 27001, SOC2, PCI, GDPR, and CCPA.
RobloxNYSE: RBLX: Platform for creating and playing user-generated 3D digital experiences.
4+ YOE4+ years GRC experience, risk assessment and policy development, ability to work with engineers, knowledge of compliance frameworks and security controls.
Factor Analysis of Information Risk (FAIR), Roblox Studio
Milwaukee or Chicago or New York City or San Francisco or Phoenix or Austin or United States
$133k-$195k/yrRemoteFull Time
DoorDashNASDAQ: DASH: On-demand delivery platform connecting consumers with local merchants.
7+ YOE7+ years in security-focused TPRM, experience with vendor risk assessments, cloud/SaaS/AI security reviews, program building, audits, and remediation tracking; Bachelor's or Master's degree in related field.
CAIQ, SIG, SOC 2 Type 2, Penetration Test, NIST, ISO 27001, PCI-DSS, AWS, Azure, GCP, Covey Scout
Milwaukee or Chicago or New York City or San Francisco or Phoenix or Austin or United States
$133k-$195k/yrRemoteFull Time
DoorDashNYSE: DASH: Local food delivery and on-demand logistics platform.
7+ YOERequires 7+ years in security-focused TPRM, a bachelor's or master's degree, risk assessment and remediation experience, cloud and AI vendor expertise, GRC framework experience, and excellent communication skills.
Senior Information Security Analyst, GRC/Responsible AI
Irvine or Milpitas
$125k-$207k/yrOnsiteFull Time
SandiskNasdaq: SNDK: Designs and manufactures flash memory and data storage products.
6+ YOE6+ years information security experience with GRC and AI risk management, bachelor's or equivalent, technical proficiency in threat modeling and risk assessment, familiarity with NIST AI RMF and ISO/IEC 42001, and strong cross‑functional communication.
OWASP Top 10 for LLM Applications, NIST AI RMF, ISO/IEC 42001, STRIDE, PASTA, attack tree analysis, CI/CD
Ross StoresNASDAQ: ROST: Discount retail chain selling brand-name apparel and home fashions
5+ YOE5+ years IT experience (minimum 3 in security/risk), strong security governance and risk management knowledge, proficient with Microsoft Word/Excel/PowerPoint, project management, analytical and communication skills; CISSP/CRISC preferred.
Microsoft Word, Microsoft Excel, Microsoft PowerPoint, UNIX, Windows, Firewalls, VPN, PKI, IPS, Oracle, MS SQL
Cambridge or New York City or Washington or Atlanta or San Francisco
$119k-$193k/yrOnsiteFull Time
ForresterNASDAQ: FORR: Provides market research and business advisory services to global leaders.
5+ YOERequires 5+ years of security and risk experience, BA/BS or equivalent, strong research, critical thinking, writing, presentation, and business skills; must be a US citizen and travel 30%-50%.
Managed Detection and Response (MDR), Managed Security Services (MSS), Zero Trust
Zip: AI-powered intake-to-procure platform for enterprise spend management
2+ YOEBachelor's degree,2+ years GRC or security risk/audit experience,knowledge of SOC/ISO/PCI/FedRAMP/WCAG frameworks,strong written and verbal communication.
SOC 1, SOC 2, ISO 27001, ISO 42001, PCI DSS, WCAG, FedRAMP
TabaPay: Instant payment processing and money movement for fintech companies.
5+ YOEBachelor’s degree and 5–7 years in IT governance, risk, or compliance within US financial services; 3+ years with high-volume payment rails; at least two governance, risk, audit, or security certifications preferred.
Carlsbad or San Jose or North America or New York City
$147k-$232k/yrOnsiteFull Time
ViasatNASDAQ: VSAT: Provider of global satellite-based connectivity and secure communication solutions.
8+ YOERequires 8+ years in risk and compliance and working with ISO27001:2022, ISMS Lead Auditor or Lead Implementor certification, GRC tool experience, security knowledge, and strong analytical, communication, and project skills.
ISO27001:2022, GRC, ISO27001 ISMS, ISO27001 Annex A, PCI DSS, NIST SP 800-171, CMMC, IT SOX
Harmonic: Provides virtualized broadband and video delivery technology solutions.
Pursuing a degree in Cybersecurity/Information Systems/IT, familiarity with security and risk concepts, strong documentation and organizational skills, able to work remotely, and proficient with Microsoft 365 apps.
Microsoft 365, Microsoft Excel, Microsoft PowerPoint, Microsoft Word
4+ YOEBachelor's degree or equivalent experience; 4 years leading security intelligence analysis and risk mitigation plus 4 years in close protection operations. AI, investigative, and OSINT experience preferred.