Controls Engineer Jobs

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. Vanta is hiring for a Head of Design (VP) to lead our design organization — setting direction for a ~40-person team, shaping the next generation of AI-native product experiences, and building the quality systems that let great design ship at scale. The Design team at Vanta shapes how security and compliance teams experience Vanta — from a startup founder building their security program for the first time to an enterprise security team managing hundreds of controls. The org spans all areas of Vanta — GRC, Trust, Platform, Self-serve, and AI — and includes product designers, visual designers, design engineering, content designers, and a user researcher, led by experienced design directors. As AI fundamentally changes what products can do and how they get built, this team is at an inflection point: the right leader will define what it means for a design org to be genuinely AI-forward — enabling designers to move faster, ship more, and contribute to product direction and delivery in new ways. This is the right role for a design leader who leads with AI fluency, brings strong taste and craft across interaction design and visual design, and has the operational instincts to build the systems that make quality a consistent property of the whole org. What you’ll do as Head of Design at Vanta: Lead a team of ~40 designers and design directors across GRC, Trust, Platform, Self-serve, and AI — setting org-wide direction and enabling each leader to do their best work Lead the team building the next generation of agentic, AI-native product experiences — defining what great design looks like as Vanta’s products are increasingly shaped by AI E

Supabase is the Postgres development platform, built by developers for developers to help them ship countless products that people love. More than 7 million developers trust us with their data, and we are custodians of every byte of it. Security is foundational to that trust, and as we move deeper into AI-native development, regulated industries, and enterprise, it shapes whether a developer chooses us on day one and whether a regulated company can build their most sensitive workloads on Supabase. About the role We're looking for a PM who can balance the constant tension between security and developer experience at platform scale. Every control you add is friction a developer has to absorb, and every default you loosen is a door an attacker could walk through. Finding the right balance between protecting customers and keeping them fast is the work of this role. You'll partner with Security Engineering, Compliance, and the platform teams that own auth, networking, and audit. This is a remote position and we're open to considering candidates located across EMEA and AMER time zones. In This Role You Will Set the security agenda for the platform. Lead Supabase's platform security roadmap end-to-end, from the defaults that protect a developer prototyping their first project to the advanced controls a Fortune 500 CISO needs before approving us. Hold the line between security and developer experience. Every security feature trades protection against friction. A control that's too strict pushes developers off the platform; one that's too easy to bypass doesn't protect anyone. Lead our security strategy for AI agents. Agents now read, write, and deploy on behalf of developers and companies, often at machine speed. You'll lead how Supabase authenticates, scopes, and audits agent activity so customers can give them real capability while staying in control of their data. Own our security product surface. Drive the roadmap for the security tooling customers use to operate safely

Who are we? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us! About the Role Cohere is seeking a Global Public Policy Manager to lead policy engagement on compute infrastructure, export controls, AI competitiveness, and sovereign AI strategies. Governments increasingly view AI as critical national infrastructure and are investing heavily in compute capacity, energy resources, and domestic AI ecosystems. This role will help position Cohere as a trusted partner in emerging discussions around AI infrastructure, national competitiveness, and sovereign AI deployment. Key Responsibilities Monitor and analyze developments related to AI infrastructure, data centers, energy policy, semiconductor policy, export controls, and national AI strategies. Develop policy positions on sovereign AI, compute access, digital sovereignty, and AI competitiveness. Support engagement with governments developing AI infrastructure investment programs and national AI initiatives. Collaborate with commercial, product, and corporate development teams on strategic opportunities involving public-private partnerships. Represent Cohere in policy discussions related to AI infrastructure, energy requirements, and technology c

Who are we? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us! Role Overview We are seeking a Platform Experience and Developer PM to own how developers and enterprise technical teams build on, integrate with, and operate Cohere's model platform. This is a high-leverage role sitting at the intersection of three domains: Managed Services and Models as a Service. Own Cohere's managed service offerings as a product. This is broader than model serving alone. It includes the full range of how enterprises consume and operate Cohere's capabilities, from shared multi-tenant model access to dedicated single-tenant deployments, and from synchronous real-time inference to high-volume asynchronous workloads. You will own the product thinking around deployment models, data residency and regional compliance requirements, self-serve provisioning, and the operational controls that give enterprises confidence in running production workloads on Cohere’s infrastructure. API and SDK. Own the roadmap for how developers build on Cohere. This means setting the direction for our APIs and SDKs, thinking carefully about interface design and ergonomics, and ensuring we ship developer primitives that are stable, well-

Who are we? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us! NOTE: This Senior Staff level career opportunity is a senior level individual contributor role. As a Senior Manager of Financial Planning & Analysis at Cohere, your responsibilities include: Establish and maintain comprehensive departmental forecasting processes with regular vs. actuals analysis Design, implement, and track key performance indicators (KPIs) across the organization Build scalable financial models and planning frameworks to support rapid business growth Collaborate with department heads to understand business needs and translate them into financial requirements Conduct variance analysis and provide actionable insights to leadership on financial performance Develop and maintain financial reporting dashboards for executive leadership Drive process improvements and automation in FP&A workflows Partner with cross-functional teams on strategic initiatives and M&A activities Ensure compliance with financial reporting standards and internal controls Strategic Planning: Lead the annual and multi-year long-range planning (LRP) processes. You will bridge the gap between high-level vision and granular departmenta

The Product Management team drives Asana’s product strategy and execution, translating customer needs and opportunities into a compelling roadmap and working cross-functionally to deliver impactful solutions for team productivity and collaboration. We're defining a new category of technology as the human agent operating system by inventing new ways for teams to work together more efficiently. Our team works directly with Engineering, Design, Experience Research, and Data Science, as well as with Sales, Support, and Marketing to ship great products. You’ll take part in every type of product work here, from strategy to product to process improvements, by conceptualizing, launching, and iterating on Asana itself for millions of teams around the world. We are looking for an experienced Product Manager to join our Enterprise Data Governance team. Our team owns the strategic platform capabilities that govern the full lifecycle of customer data, including retention, migration, auditing, export, and operational governance. We are foundational to Asana's enterprise success, providing the controls and policy frameworks that allow large organizations to meet complex regulatory requirements and securely adopt AI. As a Product Manager here, you will bridge the gap between technical infrastructure and enterprise customer needs, partnering closely with Engineering, Security, Legal, and Design to reduce operational burden and build the governance foundation that helps people and AI agents collaborate safely at scale. This is a high-impact role at the intersection of enterprise trust, regulatory compliance, and platform strategy, directly driving Asana’s growth in highly regulated industries. This role is based in our Vancouver office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams wit

Datadog is seeking an Indirect Tax Manager to oversee U.S. sales and use tax compliance, support related audits, and coordinate VAT/GST obligations across our global entity portfolio. You will partner with external advisors and cross-functional teams to address evolving indirect tax requirements, strengthen controls, and embed tax considerations into business systems and processes. This role offers the opportunity to manage complex, multi-jurisdictional workstreams while helping scale a global indirect tax function. You will also expand your expertise across tax technology, e-invoicing, compliance operations, and international tax matters as Datadog continues to grow. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Review U.S. multi-state sales and use tax filings prepared by the team, ensuring accuracy and alignment with established nexus and taxability positions Support U.S. sales and use tax audits, notices, and inquiries by coordinating documentation, technical analysis, external advisors, and communications with tax authorities Coordinate VAT/GST compliance and recovery activities across Datadog’s international entity portfolio, partnering with advisors across EMEA, APAC, and LATAM Monitor changes in nexus, taxability, VAT/GST, e-invoicing, and e-reporting requirements, and communicate relevant impacts to internal stakeholders Partner with Accounting, Revenue, Legal, Procurement, and Engineering to incorporate indirect tax requirements into billing systems, ERP configurations, controls, and new market or product initiatives Develop and maintain process documentation, audit-readiness materials, workstream tracking, and SOX-aligned controls that support a scalable indirect tax function Who You Are: Experienced in progressive indirect tax roles within

The Role MongoDB is seeking a Staff Product Manager to lead strategic initiatives across Identity and Security. In this role, you will serve as the senior product leader shaping the next generation of authentication, authorization, and access control across MongoDB Atlas, the core database engine, and emerging developer platforms. You will lead the strategy for non-human identity—spanning workload identity federation, zero-trust passwordless access, Model Context Protocol (MCP) integrations, and autonomous AI agentic identity. You will partner closely with engineering, UX, product marketing, and enterprise customers to build identity experiences that are enterprise-grade, seamless for developers, and secure by default. Responsibilities Set and champion a multi-year product strategy across interrelated identity areas, aligning dependencies and investments to MongoDB’s broader objectives Identify cross-cutting customer and market opportunities, build business cases for investment, and bring a clear point of view to senior stakeholders Lead workload identity federation and programmatic access initiatives across cloud and enterprise identity environments Define secure authorization approaches for AI agents and MCP clients, including delegation, identity lifecycle, policy, and administrative controls Drive developer-first access management, ensuring security controls enhance rather than obstruct developer velocity Partner with engineering, design, GTM, and cross-functional leadership to validate enterprise requirements, prioritize initiatives, and measure feature adoption Stay ahead of evolving cloud security paradigms, emerging standards (e.g., SPIFFE/SPIRE, O4AA), and AI access patterns to guide executive decision-making Represent MongoDB’s security and identity vision at industry events, customer advisory boards, and executive briefings Demonstrate creativity, an innovative spirit, and a bias towards action Requirements 8+ years (or equivalent experience) in Pro

The Role MongoDB is seeking a Staff Product Manager to lead strategic initiatives across Identity and Security. In this role, you will serve as the senior product leader shaping the next generation of authentication, authorization, and access control across MongoDB Atlas, the core database engine, and emerging developer platforms. You will lead the strategy for non-human identity—spanning workload identity federation, zero-trust passwordless access, Model Context Protocol (MCP) integrations, and autonomous AI agentic identity. You will partner closely with engineering, UX, product marketing, and enterprise customers to build identity experiences that are enterprise-grade, seamless for developers, and secure by default. Responsibilities Set and champion a multi-year product strategy across interrelated identity areas, aligning dependencies and investments to MongoDB’s broader objectives Identify cross-cutting customer and market opportunities, build business cases for investment, and bring a clear point of view to senior stakeholders Lead workload identity federation and programmatic access initiatives across cloud and enterprise identity environments Define secure authorization approaches for AI agents and MCP clients, including delegation, identity lifecycle, policy, and administrative controls Drive developer-first access management, ensuring security controls enhance rather than obstruct developer velocity Partner with engineering, design, GTM, and cross-functional leadership to validate enterprise requirements, prioritize initiatives, and measure feature adoption Stay ahead of evolving cloud security paradigms, emerging standards (e.g., SPIFFE/SPIRE, O4AA), and AI access patterns to guide executive decision-making Represent MongoDB’s security and identity vision at industry events, customer advisory boards, and executive briefings Demonstrate creativity, an innovative spirit, and a bias towards action Requirements 8+ years (or equivalent experience) in Pro

We are looking to speak to candidates who are based in Gurugram for our hybrid working model. About MongoDB The database market is massive, and MongoDB is at the head of its disruption. The MongoDB community is transforming industries and empowering developers to build amazing applications that people use every day. We are the leading modern data platform and continue to innovate at scale to support our customers and internal teams with world-class systems and experiences. About Team IT SaaS Engineering Team plays a critical role in optimizing MongoDB sales processes, streamlining customer interactions, and maximizing the efficiency of our sales efforts. By leveraging Salesforce, the team ensures that business users have the tools, automation, security, and governance needed to effectively manage customer relationships, support operational processes, and drive business growth. With deep expertise in Salesforce administration, platform governance, automation, and system operations, the team continuously enhances the Salesforce CRM platform to meet evolving business needs. The team partners closely with stakeholders across Sales Operations, Revenue Operations, Security, Compliance, and Engineering to deliver scalable, secure, and reliable Salesforce solutions. What you’ll do We are looking for a Senior Salesforce Administrator to manage and enhance the Salesforce CRM system supporting MongoDB’s Sales organization. Effectively work both autonomously and collaboratively across Salesforce platform administration, configuration, release support, security, and audit-related activities. Work closely with Tech Leads, Program Managers, Developers, DevOps teams, and Business Stakeholders to understand requirements and deliver scalable declarative solutions. Contribute across multiple functions including platform administration, CI/CD participation, release support, access governance, security improvements, and audit readiness. Ensure appropriate controls, documentation, and go

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive. We’re looking for a proactive, collaborative Manager of Internal Audit to help execute our internal audit program and support Lyft’s governance, risk management, and compliance efforts. This role will focus on both business and technology audits, helping identify and address key risks while delivering insights that enable informed decision-making. Reporting to the Director of Internal Audit, and based in our San Francisco HQ, you’ll work closely with stakeholders across the company to strengthen controls, improve processes, and drive continuous improvement. Responsibilities: Audit Execution & Risk-Based Planning Execute audit and advisory engagements spanning across both technology (e.g. cybersecurity, data governance, infrastructure, etc.) and business (e.g. operations, compliance, etc.) domains from end to end — including planning, fieldwork, testing, and reporting. Perform annual risk assessment over assigned risks to develop and refine the annual risk-based audit plan. Take a hands-on approach to audits, ensuring findings are data-driven, relevant, and aligned with business objectives. Use process improvement techniques (e.g. process mapping, root cause analysis, gap assessments) to identify opportunities for enhanced control design and operational efficiency. Perform risk assessments and identify areas for process improvement, control enhancement, or technology enablement. Ensure timely and effective follow-up on remediation of audit findings, coordinating with business owners to verify resolution. Collaborate with cross-functional teams — including Engineering, Security, Legal, Finance, and Compliance — to assess risks and test key controls. Stay current on evolving risks related to emerging technologies, regulatory changes, and internal initiatives. Enterprise Risk Management (ERM) Support

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive. We’re looking for a proactive, collaborative Manager of Internal Audit to help execute our internal audit program and support Lyft’s governance, risk management, and compliance efforts. This role will focus on both business and technology audits, helping identify and address key risks while delivering insights that enable informed decision-making. Reporting to the Director of Internal Audit, and based in our San Francisco HQ, you’ll work closely with stakeholders across the company to strengthen controls, improve processes, and drive continuous improvement. Responsibilities: Audit Execution & Risk-Based Planning Execute audit and advisory engagements spanning across both technology (e.g. cybersecurity, data governance, infrastructure, etc.) and business (e.g. operations, compliance, etc.) domains from end to end — including planning, fieldwork, testing, and reporting. Perform annual risk assessment over assigned risks to develop and refine the annual risk-based audit plan. Take a hands-on approach to audits, ensuring findings are data-driven, relevant, and aligned with business objectives. Use process improvement techniques (e.g. process mapping, root cause analysis, gap assessments) to identify opportunities for enhanced control design and operational efficiency. Perform risk assessments and identify areas for process improvement, control enhancement, or technology enablement. Ensure timely and effective follow-up on remediation of audit findings, coordinating with business owners to verify resolution. Collaborate with cross-functional teams — including Engineering, Security, Legal, Finance, and Compliance — to assess risks and test key controls. Stay current on evolving risks related to emerging technologies, regulatory changes, and internal initiatives. Enterprise Risk Management (ERM) Support

Airbnb was born in 2007 when two hosts welcomed three guests to their San Francisco home, and has since grown to over 5 million hosts who have welcomed over 2 billion guest arrivals in almost every country across the globe. Every day, hosts offer unique stays and experiences that make it possible for guests to connect with communities in a more authentic way. The Difference You Will Make: Airbnb is entering a new era—reimagining how fraud, safety, and quality are measured, protected, and elevated across the digital landscape. Reporting to the Director of Advanced Analytics, Fraud & Safety, you will lead a dispersed team of ~8 advanced analysts tasked with turning safety measurement into governed, self-serve decision systems for Policy, Ops, Legal, Product, and Engineering. You will be a pivotal leader safeguarding Airbnb’s global community. You’ll steer a multidisciplinary team that designs, delivers, and scales state-of-the-art analytics for: Safety (physical & digital) Connected-account & circumvention detection Privacy protection & risk management This role isn’t just about reporting what happened; it’s about building the systems that help Airbnb see around corners. You will democratize data access, build always-on scenario simulators for fraud and safety, and turn incident impacts into seamless signals for continuous improvement. Your insights and systems will empower every stakeholder—from legal to operations, policy to product—to make bold, data-driven, and context-aware decisions in real time. A Typical Day: Own end-to-end analytical workflows for platform safety controls: data ingestion, feature engineering, modeling, experimentation, and visualization. A core mandate is to co-own and drive the enterprise-wide “Safety Single Source of Truth” (SSoT) strategy —a unified, structured data asset and taxonomy that underpins decision-making across Product, Operations, Policy, and Legal. Ensure metrics are future-proof, privacy-compliant, and g

Discord has a highly engaged community of millions of daily active users who use the platform for many different reasons, but there’s one thing that nearly everyone does: play video games. Discord plays a uniquely important role in the future of gaming, and we are focused on making it easier and more fun for people to hang out before, during, and after playing games. Discord's Internal Audit team exists to demonstrate effective risk management, process optimization, and adherence to relevant regulations — through a mix of independent assurance and advisory work that helps teams strengthen our overall control environment. This Technology Risk Audit Manager role owns the technical side of that mission — IT SOX/ITGC, system controls, and domains centered around consumer trust — that protect hundreds of millions of our users worldwide. You'll have the opportunity to help build our internal audit function from the ground up: shaping the frameworks and processes with an AI-native approach from day one, rather than bolting AI on after the fact. Your first few months will focus on learning Discord's financial-reporting systems landscape, understanding the company's GRC program structure, and evaluating AI-powered testing solutions — setting the foundation for a function that's built to scale as Discord grows toward enterprise readiness. This person will report to the Vice President of Internal Audit. What You'll Be Doing Lead IT SOX/ITGC strategy and continuous improvement across financial-reporting-relevant systems Extend risk and controls assessment and assurance into consumer trust domains such as privacy, security, and trust & safety Partner with the Engineering organization to ensure proper access controls, segregation of duties, change management, and CI/CD integrity are in place Guide control design through system implementations, migrations, and platform changes Manage teams and projects related to IT controls and technical audits, including external contractors

At Stripe, our mission is to increase the GDP of the internet. We build the most powerful and flexible tools for running an internet business globally. We handle billions of dollars each year and enable millions of users around the world to scale faster and more efficiently by building their businesses on Stripe. Our tax team works with Stripes across the company to develop an efficient tax structure, as our international business scales and expands into new markets. We are looking for a well-rounded and seasoned tax professional to help us lead this effort. This function will be responsible for the global Indirect Tax (VAT/GST) Compliance of our Stripe business. This includes building and implementing VAT/GST compliance processes and controls, supporting management, and working with our indirect tax advisory, systems & compliance leads on day-to-day matters, and much more. The position will be based in Bangalore and report to the International Indirect Tax Lead. Responsibilities Oversee and manage our global indirect tax compliance function ensuring compliance with VAT/GST, and other indirect tax obligations across multiple jurisdictions. Manage VAT/GST registrations across tax authorities. Management of indirect tax audits and other indirect tax matters involving tax authorities. Collaborate with the international indirect tax planning and advisory team, the international accounting teams and third-party service providers on VAT/GST, assisting with the ongoing enhancement of the indirect tax compliance and control processes. Work with other tax team members and product and engineering teams to help define compliance requirements and collaborate on the design and implementation of VAT/GST controls. Promote indirect tax awareness and knowledge including training and liaising with business and tax partners on changes to indirect tax legislation, systems, policies and processes. We are looking for someone with: 4-6 years of experience in global indire