TikTok: Global short-form video hosting and social media platform.
Technical security analyst for insider risk investigations; strong log and telemetry analysis, IAM and cloud familiarity, EDR and endpoint/cloud/identity investigations, reporting and stakeholder communication.
Okta, Active Directory (AD), GCP, AWS, Azure, Ali Cloud, EDR, VPN, Slack, Microsoft Teams, Git, Python
OpenAI: Develops artificial intelligence models and generative AI software services.
7+ YOE7+ years experience in trust & safety, security, intelligence, or related fields; strong understanding of agentic AI systems; analytical judgment, technical fluency; experience synthesizing investigations and telemetry; SQL/Python a plus.
ServiceNowNYSE: NOW: Enterprise cloud platform for digital workflow automation.
3+ YOERequires 3–5+ years in information or application security, CSA certification, cloud and security-tool expertise, Java/JavaScript knowledge, web proxy experience, application security, risk, compliance, and AI skills.
ServiceNow, Azure AI, AWS, SIEM, WAF, IDS/IPS, Java, JavaScript, OWASP Top Ten, NIST, CIS, GDPR, HIPAA, PCI DSS, ISO
RobloxNYSE: RBLX: Platform for creating and playing user-generated 3D digital experiences.
4+ YOE4+ years GRC experience, risk assessment and policy development, ability to work with engineers, knowledge of compliance frameworks and security controls.
Factor Analysis of Information Risk (FAIR), Roblox Studio
San Francisco or New York City or Los Angeles or Seattle
$175k-$230k/yrHybridFull Time
Whatnot: Social marketplace for buying and selling via live streams
8+ YOERequires 8+ years of security GRC experience, bachelor's degree in computer science or information security, audit experience, cloud compliance expertise, and knowledge of ISO 27001, SOC2, PCI, GDPR, and CCPA.
Milwaukee or Chicago or New York City or San Francisco or Phoenix or Austin or United States
$133k-$195k/yrRemoteFull Time
DoorDashNASDAQ: DASH: On-demand delivery platform connecting consumers with local merchants.
7+ YOE7+ years in security-focused TPRM, experience with vendor risk assessments, cloud/SaaS/AI security reviews, program building, audits, and remediation tracking; Bachelor's or Master's degree in related field.
CAIQ, SIG, SOC 2 Type 2, Penetration Test, NIST, ISO 27001, PCI-DSS, AWS, Azure, GCP, Covey Scout
Rippling: Unified platform managing workforce HR, IT, and finance operations
4+ YOE4+ years in security and compliance with vendor risk management experience; familiarity with ISO 27001, PCI DSS, SOC 2; cloud security best practices; strong communication skills.
Milwaukee or Chicago or New York City or San Francisco or Phoenix or Austin or United States
$133k-$195k/yrRemoteFull Time
DoorDashNYSE: DASH: Local food delivery and on-demand logistics platform.
7+ YOERequires 7+ years in security-focused TPRM, a bachelor's or master's degree, risk assessment and remediation experience, cloud and AI vendor expertise, GRC framework experience, and excellent communication skills.
Ross StoresNASDAQ: ROST: Operates an off-price retail chain selling clothing and home goods.
5+ YOEFive years of IT experience, including three in security or risk management; bachelor's degree preferred; security governance, compliance, risk management, analytical, communication, and project management skills required.
Microsoft Word, Microsoft Excel, Microsoft PowerPoint, UNIX, Windows, Firewalls, VPN, PKI, IPS, Oracle, MS SQL
Ross StoresNASDAQ: ROST: Discount retail chain selling brand-name apparel and home fashions
5+ YOE5+ years IT experience (minimum 3 in security/risk), strong security governance and risk management knowledge, proficient with Microsoft Word/Excel/PowerPoint, project management, analytical and communication skills; CISSP/CRISC preferred.
Microsoft Word, Microsoft Excel, Microsoft PowerPoint, UNIX, Windows, Firewalls, VPN, PKI, IPS, Oracle, MS SQL
Senior Information Security Analyst, GRC/Responsible AI
Irvine or Milpitas
$125k-$207k/yrOnsiteFull Time
SandiskNasdaq: SNDK: Designs and manufactures flash memory and data storage products.
6+ YOE6+ years information security experience with GRC and AI risk management, bachelor's or equivalent, technical proficiency in threat modeling and risk assessment, familiarity with NIST AI RMF and ISO/IEC 42001, and strong cross‑functional communication.
OWASP Top 10 for LLM Applications, NIST AI RMF, ISO/IEC 42001, STRIDE, PASTA, attack tree analysis, CI/CD
Wells FargoNYSE: WFC: Global provider of banking, investment, and mortgage financial services.
4+ YOERequires 4+ years in controls, operations, compliance, risk, governance, audit, technology operations, or project coordination, plus reporting, process management, analytical, organizational, and communication skills.
Cambridge or New York City or Washington or Atlanta or San Francisco
$119k-$193k/yrOnsiteFull Time
ForresterNASDAQ: FORR: Provides market research and business advisory services to global leaders.
5+ YOERequires 5+ years of security and risk experience, BA/BS or equivalent, strong research, critical thinking, writing, presentation, and business skills; must be a US citizen and travel 30%-50%.
Managed Detection and Response (MDR), Managed Security Services (MSS), Zero Trust
Zip: AI-powered intake-to-procure platform for enterprise spend management
2+ YOEBachelor's degree,2+ years GRC or security risk/audit experience,knowledge of SOC/ISO/PCI/FedRAMP/WCAG frameworks,strong written and verbal communication.
SOC 1, SOC 2, ISO 27001, ISO 42001, PCI DSS, WCAG, FedRAMP
TabaPay: Instant payment processing and money movement for fintech companies.
5+ YOEBachelor’s degree and 5–7 years in IT governance, risk, or compliance within US financial services; 3+ years with high-volume payment rails; at least two governance, risk, audit, or security certifications preferred.
Harmonic: Provides virtualized broadband and video delivery technology solutions.
Pursuing a degree in Cybersecurity/Information Systems/IT, familiarity with security and risk concepts, strong documentation and organizational skills, able to work remotely, and proficient with Microsoft 365 apps.
Microsoft 365, Microsoft Excel, Microsoft PowerPoint, Microsoft Word
4+ YOEBachelor's degree or equivalent experience; 4 years leading security intelligence analysis and risk mitigation plus 4 years in close protection operations. AI, investigative, and OSINT experience preferred.