Controls Specialist, Security GRC

About the Team DoorDash’s Global Governance, Risk and Compliance (GRC) team helps the business scale securely through practical risk-based decisions, reliable controls and clear accountability. Our third-party risk program protects the systems and data behind our marketplace across DoorDash, Wolt, and Deliveroo. About the Role We're hiring a Security Risk Specialist, who will help run and shape our risk management program and treatment plans, enabling risk and control owners and security teams to keep risk at an acceptable level as the business grows. You will work cross-functionally to achieve business goals by running risk assessments and reporting, supporting exception requests when a policy can't be met, and helping automate the tooling and processes that keep our risk register accurate and trustworthy. You'll also help us build a more proactive risk function — going into specific areas of the business to deep-dive their controls, surface where things have gone wrong, and get ahead of issues before they surface. You will report into the Senior Security Risk Manager on our GRC team in our Security organization. You’re excited about this opportunity because you will… Lead our global risk management process (assessing risk, negotiating treatment plans with owners, turning regulatory and framework changes into real, working controls) Get into the detail of how controls operate day-to-day, factoring in threat intelligence to make sure we stay ahead of new threat actors and attack vectors Manage policy exceptions by building compensatory controls or a case for risk acceptance instead Own risk reporting for key areas like security or engineering, becoming the go-to risk contact for at least one and helping reduce risk there in a measurable way Collaborate and report widely within our GRC and security teams and across the business Help shape our team’s strategy and tooling as we grow by building your own automations rather than waiting on an engineer to build them for y

About the Team OpenAI’s mission is to ensure that general-purpose artificial intelligence benefits all of humanity. We believe that achieving our goal requires effective engagement with public policy stakeholders and the broader community impacted by AI. Accordingly, our Global Affairs team builds authentic, collaborative relationships with public officials and the broader AI policymaking community to inform and support our shared work in these domains. We ensure that insights from policymakers inform our work and – in collaboration with our colleagues and external stakeholders – seek to shape policy so that it aligns with and supports our mission. About the Role As AI agents move from answering questions to taking action across the internet, the standards that govern identity, delegated authority, discovery, communications, agentic-commerce and payment interfaces, agent-facing web access, agent-specific provenance, and auditability will determine whether agents can operate safely, interoperably, and with clear accountability. OpenAI is looking for an Agent Standards Manager to lead execution of our external technical standards strategy for a defined set of agent standards workstreams. This role will work closely with Agent Security, Applied and Platform teams, Product, Legal, GRC, Global Affairs, and GTM to turn OpenAI’s technical architecture and controls into credible specifications, protocol profiles, assurance criteria, and implementation guidance—and to bring emerging external requirements back into product and security roadmaps before they become blockers. The positions developed here are technical standards positions, not broad public-policy positions. This is a builder’s role as much as an external-facing role. You will execute a prioritized standards plan, author and negotiate protocols, build coalitions, secure the right internal approvals, and represent OpenAI in assigned technical forums. You will also help create repeatable processes that let the compa

WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Why we're hiring: This role is pivotal in supporting WPP’s large-scale ERP transformation programmes by embedding robust SDLC and transformation controls, driving compliance with our data and security requirements, and ensuring audit readiness for obligations such as SOX 404 IO. As a key member of the central assurance team, you will deliver control assurance and actively coach project teams, while also playing a strategic role in shaping the group’s compliance and controls posture to be more consistent, standardised, and repeatable. You will support the Transformations Lead in delivering judgement led, risk based assurance across ERP migrations and SDLC controls. The role focuses on strengthening first line capability, uplifting evidence quality, and ensuring controls are executed and documented to audit standards. You will work closely with Financial Risk & Controls colleagues to ensure transformation controls are aligned and integrated with financial controls. While accountability for operating SDLC controls and producing complete, accurate evidence sits with project and&nbs

WHO WE ARE: Zinnia is the leading technology platform for accelerating life and annuities growth. With innovative enterprise solutions and data insights, Zinnia simplifies the experience of buying, selling, and administering insurance products. All of which enables more people to protect their financial futures. Our success is driven by a commitment to three core values: be bold, team up, deliver value – and that we do. Zinnia has over $180 billion in assets under administration, serves 100+ carrier clients, 2500 distributors and partners, and over 2 million policyholders. WHO YOU ARE: Zinnia is seeking a Financial Systems Internal Controls Specialist to help strengthen the internal control environment across our financial systems and related business processes. In this role, you will partner with Finance, Accounting, Financial Systems, Information Technology, Information Security, and Audit teams to document processes, assess risks, test controls, and support the remediation of identified issues. You will develop clear, audit-ready documentation and help ensure that controls remain effective as systems, integrations, and business processes evolve. This position is ideal for an internal controls, audit, or financial systems professional who enjoys understanding how systems and processes work, identifying risks, and developing practical solutions that improve control effectiveness and operational efficiency. WHAT YOU’LL DO: Lead process walkthroughs with accounting, finance, technology, and business stakeholders. Develop and maintain process narratives, flowcharts, standard operating procedures, data-flow diagrams, and risk and control matrices. Evaluate whether controls are appropriately designed to prevent or detect errors, unauthorized activity, and incomplete or inaccurate financial processing. Perform tests of control design and operating effectiveness. Develop test procedures, validate testing populations, select samples, inspect evidence, document exceptions,

APPLICATION AND WEB SECURITY SPECIALIST THE OPPORTUNITY The Application and Web Security Specialist will serve as a security consultant to Web and Application Developers. You will work with developers on identifying security risks within their applications and validating remediation. This role offers the opportunity to build solid relationships throughout the enterprise, with developers and vendors, while learning about the various technologies employed within our organization. There are other opportunities to serve included with this role that relate to other Security disciplines such as Threat Security, Vulnerability Management, and Event Correlation. THE TEAM The Information Security Team is responsible for the confidentiality of customer and employee information, ensuring the data stored and shared maintains integrity, all while making sure that all of this does not impact the availability of the entire Dillard’s enterprise. This team is expected to be high-performing. To meet this expectation, the team members are communicative and collaborative, always sharing knowledge and research. Members of this team should be able to understand what is expected of them and adjust on the fly, as priorities may change depending on the company's needs. If you are someone who sets a standard of excellence for yourself and you enjoy working alongside others who set the same standard and who genuinely want each of their peers to succeed, you may be the perfect addition to this team. WHAT YOU WILL DO Inspect and assess current solutions for Web and Application Security risks Architect and implement security controls within the Software Development Lifecycle (SDLC) Hold recurring cadences with development and security leadership to discuss findings and future paths for the company regarding application security posture Participate in vulnerability verification and assist development teams in remediation based on reports from scanners, along with manual application sec

WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Why we're hiring: The Threat Hunter is responsible for proactively identifying advanced threats that evade traditional security controls. This role involves hypothesis-driven investigations, leveraging threat intelligence, and analyzing telemetry across endpoints, networks, and cloud environments to uncover stealthy adversary activity. The Threat Hunter plays a critical role in reducing dwell time and strengthening organizational resilience under the Autonomic Security Operations model. What you'll be doing: Proactive Threat Hunting Execute hypothesis-driven hunts based on adversary TTPs and threat intelligence. Analyze telemetry from SIEM, EDR/XDR, NDR, and cloud-native platforms to identify anomalies. Develop and maintain hunting queries and scripts for automation and repeatability. Validate detection coverage through purple team exercises and adversary emulation. Threat Intelligence Integration Incorporate emerging threat intelligence into hunting hypotheses and detection pipelines. Maintain awareness of global threat actor tactics, techniques, and procedures (MITRE ATT&CK). Continuous Improvem