Cybersecurity And Technology Audit Leader Jobs

About the Team The OpenAI Audit Team is on a mission to build the future of internal audit from the ground up. Our ambition will be powered by a high-energy, technically exceptional team with the judgment, intellectual curiosity, and creativity to harness the latest advances in AI and design a truly next-generation audit function. As AI reshapes how work is performed across the enterprise, Internal Audit will use AI, automation, and data analytics to identify and assess the most significant and emerging risks across the business, including technology, cybersecurity, finance, compliance, operations, and data. We will build trusted partnerships at every level—from the Board of Directors and senior leadership to the teams delivering on OpenAI’s mission every day. We will operate as both an independent assurance provider and a trusted advisor, bringing an objective and pragmatic perspective to critical decisions. By engaging closely with management while preserving our independence, we will help the business innovate responsibly, move with confidence, and manage risk without creating unnecessary barriers. About the Role As the Cybersecurity & Technology Audit Leader, you will help shape the strategy, methodology, technology, and culture of a new audit function. You will lead complex audits and advisory reviews of cybersecurity, technology, data, and AI-related risks while advising leaders on practical ways to strengthen governance, resilience, and risk management. You are an experienced, hands-on professional who combines deep technical expertise with strong business judgment. You can quickly move between executive-level governance questions and detailed technical analysis, use data to identify and assess risk, and form clear, well-supported conclusions in fast-moving or ambiguous situations. You will have meaningful influence over how the function develops, including how we apply AI, automation, and analytics to audit planning, testing, monitoring, and reporting. T

Who We Are Notion is the collaborative AI workspace where teams and agents think together . We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. About the Role: We are seeking a strategic and technically fluent Lead, IT Audit to join our Finance team reporting to the Head of Internal Audit. This is a broad, high-impact role spanning both IT SOX compliance and operational IT audits. You will help establish and elevate our technology controls program end to end — owning the IT SOX lifecycle, designing the IT general and application controls framework, embedding AI and automation into how we test and monitor controls, and delivering value-added operational IT and cybersecurity audits that strengthen how the company builds and runs its systems. You will partner with leaders across Engineering, Security, IT, Finance, and the business to ensure sound technology controls are built into how the company operates as we scale. This role is ideal for someone who thinks like a builder, not just an auditor — someone who can translate complex control and security requirements into practical, scalable processes in a fast-moving SaaS environment with modern cloud architecture and complex data flows. This role can be based in either San Francisco or New York City. We work from our offices on M

About the Team The OpenAI Audit Team is on a mission to build the future of internal audit from the ground up. Our ambition will be powered by a high-energy, technically exceptional team with the judgment, intellectual curiosity, and creativity to harness the latest advances in AI and design a truly next-generation audit function. As AI reshapes how work is performed across the enterprise, Internal Audit will use AI, automation, and data analytics to identify and assess the most significant and emerging risks across the business, including technology, cybersecurity, finance, compliance, operations, and data. We will build trusted partnerships at every level—from the Board of Directors and senior leadership to the teams delivering on OpenAI’s mission every day. We will operate as both an independent assurance provider and a trusted advisor, bringing an objective and pragmatic perspective to critical decisions. By engaging closely with management while preserving our independence, we will help the business innovate responsibly, move with confidence, and manage risk without creating unnecessary barriers. About the Role As the Finance & Operations Audit Leader, you will help shape the strategy, methodology, technology, and culture of a new audit function. You will lead complex audits, forensic and investigative reviews, and advisory work across financial reporting, accounting, finance, and business operations, while addressing related compliance risks. You will advise leaders on practical ways to strengthen governance, execution, accountability, and risk management. You are an experienced, hands-on professional who combines deep finance and accounting knowledge with strong audit, risk, and business judgment. Your work will span across finance & accounting areas including treasury, tax, revenue, financial planning, business operations, and enterprise governance, with opportunities to apply forensic accounting techniques to complex transactions, anomalies, and pot

XO Health believes healthcare is fixable. Become part of the community changing the face of the industry. XO Health is the first health plan designed by and for self-insured employers that delivers a more unified health experience for everyone – from those who receive care, to those who deliver it, to those who pay for it. We are growing a multi-disciplinary team of diverse and digitally empowered employees ready to rebuild trust in healthcare through comprehensive and unified transformation. CyberSecurity & Infrastructure Engineer - India (Remote) About the Role : The Cybersecurity & Infrastructure Engineer is responsible for designing, implementing, monitoring, and securing the organization's hybrid cloud and infrastructure environments. This role serves as a technical leader for cybersecurity operations, cloud security, compliance initiatives, infrastructure engineering, and incident response. The position combines hands-on infrastructure administration with cybersecurity engineering responsibilities across Microsoft Azure, Microsoft Sentinel, Microsoft 365, Entra ID, AWS, networking, endpoints, and security platforms. Engineering plays a key role in maintaining compliance with SOC 2 Type II controls, improving cyber resilience, supporting audits, and advancing the organization's security maturity. Responsibilities: SOC2 Audit Support organization's annual SOC 2 Type II audit program, including control design, evidence collection, remediation management, auditor coordination, and continuous compliance monitoring. Partner with business and technology stakeholders to ensure security, availability, confidentiality, and change management controls are effectively implemented and operating throughout the audit period. Drive successful completion of SOC 2 Type II examinations with minimal findings by maintaining an audit-ready environment, strengthening internal controls, and promoting a culture of security and compliance. Develop and maintain policies, pr

About the Team DoorDash’s Internal Audit team provides independent assurance that the company’s risk management, governance, and internal control processes are operating effectively. We are a small team that is looking to expand and bring on motivated professionals. We don’t think of ourselves as a typical audit function - we are obsessively focused on risks to the organizations which reflects in the type of projects we support and execute. DoorDash is rapidly growing - we are expanding in multiple geos and launching new products. This exciting growth allows us to drive creative analysis, strategy, and solutions. Our focus areas include financial, operational, regulatory, security, IT, and more. About the Role We are seeking a Senior Director, IT Internal Audit to lead the strategy, execution and evolution of DoorDash’s global IT audit function. In this highly visible role, you will help shape the technology risk management practices across DoorDash - you will oversee a broad portfolio of audits, including IT SOX, cybersecurity, data governance, AI governance, and operational technology. You will report directly to the Chief Audit Executive and serve as a strategic advisor to DoorDash’s technology, security, and engineering leaders. You will bring deep technical audit expertise, exceptional leadership skills, and a passion for innovation to build and lead a world-class IT audit organization that scales with the business. This role demands someone who can balance strategy with execution (and isn’t afraid to roll up their sleeves) — a leader who can anticipate emerging technology risks, foster strong cross-functional partnerships, translate complex technical concepts into meaningful business insights, and be ready to operate at the lowest level of detail. You will partner with teams across Security, Platform Engineering, Data Engineering, Privacy Legal, AI, Product, and Compliance to strengthen our risk posture and drive a data-driven approach

Become a part of our caring community The Associate Vice President, Model & AI Governance, is the enterprise leader responsible for establishing and overseeing the organization’s framework for model governance, artificial intelligence (AI) risk management, responsible AI and AI governance. Reporting to the Chief Audit & Risk Officer, this executive provides independent second-line oversight and challenge of the organization’s use of models, advanced analytics, machine learning, generative AI, and emerging AI technologies. The role establishes the governance, risk-management, control, monitoring and escalation framework necessary to ensure AI models are deployed in a manner that is safe, ethical, transparent, explainable, compliant, secure and aligned with the organization’s mission and risk appetite. The Associate Vice President, Model & AI Governance, partners closely with executive leadership, technology, data and analytics, clinical/business leaders, compliance, legal, privacy, cybersecurity, information security, internal audit, enterprise risk management and other control functions to ensure AI-related risks are identified, assessed, governed, monitored, and appropriately reported. This leader will serve as an advisor to executive management on emerging model and AI risks, while maintaining appropriate independence from the teams developing and deploying models and AI solutions. Key Responsibilities Own and continuously enhance the enterprise model governance framework, including model identification, inventory, classification, risk tiering, development, validation, approval, implementation, monitoring, change management, retirement and documentation. Define model risk appetite, risk taxonomy, minimum control standards, governance requirements and escalation thresholds. Provide effective challenge over model

Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The Role: Positioned in the first line of defense (1LOD) and reporting to the Head of Business Controls, this experienced executive will act as the Business Controls Lead for SoFi’s Technology and Cybersecurity organizations. This includes comprehensive coverage of Engineering, Information Security, Infrastructure, and Data across the full SoFi Legal structure: SoFi Inc., SoFi Bank, Galileo, Technisys, and SoFi Hong Kong. The Business Controls Lead will act as the direct advisor to the Chief Technology Officer (CTO), Chief Information Security Officer (CISO), and their senior leadership teams. You will lead a team of experienced IT risk & controls team charged with promoting risk awareness and ensure the overall effectiveness of risk and compliance management program implementation and execution across the 1LOD. This role provides support, advisory services, and enables strategic alignment directly to department heads to accelerate and ensure quality execution. You will be responsible for supporting and driving consistent 1LOD adherence to critical programs, such as building and maintaining risk and control self-assessments (RCSAs); identification and evaluation of control effectiveness through control testing; 1LOD risk reporting; and supporting audits and regulatory exams. You will monitor the first l

Job Title Process Engineer Job Description Job title: Process Engineer Your role: Seeking a senior Process Engineer to lead process governance, compliance, and operational excellence initiatives within Digital Innovation Platforms. This individual will act as a process leader across engineering, operations, cybersecurity, and quality organizations, ensuring scalable and compliant ways of working while driving continuous improvement and business transformation. experience in Process Engineering, Quality Systems, Operational Excellence, or Compliance roles. Experience working in regulated software, cloud, digital health, medical device, healthcare technology, or similar environments. Strong knowledge of ISO 9001, ISO 27001, ISO 27018, HIPAA, HiTrust, CAPA, and quality system processes. Experience leading cross-functional initiatives involving engineering, operations, cybersecurity, and quality stakeholders. Strong process mapping, root cause analysis, change management, and continuous improvement skills. Experience supporting audits, compliance programs, ISMS activities, and regulatory inspections. Excellent communication, stakeholder management, and executive presentation skills. Ability to influence without direct authority and drive adoption across global teams. Independently leads larger and more complex initiatives. Influences multiple organizations and senior stakeholders. Owns strategic process governance programs. Drives enterprise-wide process improvements. Serves as a subject matter expert and mentor. Demonstrates greater autonomy, business impact, and leadership responsibility. You're

Leidos has an exciting opportunity for Cyber Security Engineer—Technical Lead in our Intel Security Sector's Analysis Solutions Business Area . Our talented team is at the forefront in Security Engineering, Computer Network Operations (CNO), Mission Software, Analytical Methods and Modeling, Signals Intelligence (SIGINT), and Cryptographic Key Management. At Leidos , we offer competitive benefits , including Paid Time Off, 11 paid Holidays, 401K with a 6% company match and immediate vesting, Flexible Schedules, Discounted Stock Purchase Plans, Technical Upskilling, Education and Training Support, Parental Paid Leave, and much more. Join us and make a difference in National Security! Job Summary This role is responsible for protecting the customer’s information systems and networks from potential cyber-attacks. The Cyber Security Engineer– Technical Lead will serve in a hands-on “player-coach" capacity, dedicating approximately 75% of time to direct technical engineering, troubleshooting, and implementation work, while providing technical leadership and coordination across the security team. The candidate must display an excellent understanding of technology and utilization of Firewalls (Security Groups), VPNs, Data Loss Prevention (DPS), IDS/IPS, Web-Proxy, Security tools, and Security Audits. Candidate will work directly with Team leads, developers, operations personnel, and other Technical Leads throughout a DevSecOps life cycle both on policy and technical implementation of technologies. This is not a supervisory management role. Success in this position is measured by individual technical contribution and resolution of complex security issues, in addition to technical leadership impact. Primary Responsibilities: Plan, implement, manage, monitor, and upgrade security controls and tools used to protect enterprise systems and networks, while identifying opportunitie

Senior Infrastructure Architect — Enterprise Observability and Automation Description - Job Summary Senior individual contributor responsible for the architecture, implementation, and operational ownership of enterprise observability, monitoring, and automation platforms across HP's global IT environment. This role modernizes infrastructure visibility capabilities while ensuring operational stability, security, and compliance. Serves as a technical and operational bridge between infrastructure engineering, cybersecurity, SOX/compliance stakeholders, automation teams, and external technology partners — leading complex initiatives such as platform migrations, enterprise integrations, and governance enablement. Responsibilities Enterprise Observability and Monitoring Application owner and senior technical authority for enterprise monitoring and logging platforms (Datadog, Splunk), including platform governance, roadmap alignment, and operational oversight. Lead enterprise-scale monitoring platform migrations, including architecture design, agent strategy, data ingestion models, vendor coordination, and deployment across 5,000+ servers. Define standards for alerting, dashboards, observability data quality, and integration with ITSM platforms (ServiceNow). Design and manage multi-org Datadog architecture, including org structure, RBAC, SSO/SAML, secrets management, and cybersecurity compliance. Oversee SNMP-based monitoring of storage and network devices, including device profiling, syslog/event integration, and NetFlow collection. SOX Compliance and IT Governance SOX control owner for enterprise monitoring applications — approve monthly reviews, participate in internal/external audits (EY), and maintain ITGC/SOX compliance. Provide audit evidence, walkthrough docu

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive. We’re looking for a proactive, collaborative Manager of Internal Audit to help execute our internal audit program and support Lyft’s governance, risk management, and compliance efforts. This role will focus on both business and technology audits, helping identify and address key risks while delivering insights that enable informed decision-making. Reporting to the Director of Internal Audit, and based in our San Francisco HQ, you’ll work closely with stakeholders across the company to strengthen controls, improve processes, and drive continuous improvement. Responsibilities: Audit Execution & Risk-Based Planning Execute audit and advisory engagements spanning across both technology (e.g. cybersecurity, data governance, infrastructure, etc.) and business (e.g. operations, compliance, etc.) domains from end to end — including planning, fieldwork, testing, and reporting. Perform annual risk assessment over assigned risks to develop and refine the annual risk-based audit plan. Take a hands-on approach to audits, ensuring findings are data-driven, relevant, and aligned with business objectives. Use process improvement techniques (e.g. process mapping, root cause analysis, gap assessments) to identify opportunities for enhanced control design and operational efficiency. Perform risk assessments and identify areas for process improvement, control enhancement, or technology enablement. Ensure timely and effective follow-up on remediation of audit findings, coordinating with business owners to verify resolution. Collaborate with cross-functional teams — including Engineering, Security, Legal, Finance, and Compliance — to assess risks and test key controls. Stay current on evolving risks related to emerging technologies, regulatory changes, and internal initiatives. Enterprise Risk Management (ERM) Support

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive. We’re looking for a proactive, collaborative Manager of Internal Audit to help execute our internal audit program and support Lyft’s governance, risk management, and compliance efforts. This role will focus on both business and technology audits, helping identify and address key risks while delivering insights that enable informed decision-making. Reporting to the Director of Internal Audit, and based in our San Francisco HQ, you’ll work closely with stakeholders across the company to strengthen controls, improve processes, and drive continuous improvement. Responsibilities: Audit Execution & Risk-Based Planning Execute audit and advisory engagements spanning across both technology (e.g. cybersecurity, data governance, infrastructure, etc.) and business (e.g. operations, compliance, etc.) domains from end to end — including planning, fieldwork, testing, and reporting. Perform annual risk assessment over assigned risks to develop and refine the annual risk-based audit plan. Take a hands-on approach to audits, ensuring findings are data-driven, relevant, and aligned with business objectives. Use process improvement techniques (e.g. process mapping, root cause analysis, gap assessments) to identify opportunities for enhanced control design and operational efficiency. Perform risk assessments and identify areas for process improvement, control enhancement, or technology enablement. Ensure timely and effective follow-up on remediation of audit findings, coordinating with business owners to verify resolution. Collaborate with cross-functional teams — including Engineering, Security, Legal, Finance, and Compliance — to assess risks and test key controls. Stay current on evolving risks related to emerging technologies, regulatory changes, and internal initiatives. Enterprise Risk Management (ERM) Support

Who Are We HALA is a leading fintech player in the MENAP region that aims to redefine financial services and build the future bank of SMEs. HALA aims at empowering SMEs to start, run, and grow their businesses by providing them with cutting-edge financial and technological tools. HALA currently holds multiple entities in UAE, Saudi Arabia and Egypt (including HALA Payments and HALA Logistics) and offers solutions that enable merchants to digitize their payments as well as manage their sales and operations. Founded in 2017, HALA is currently licensed by the Saudi Arabian Central Bank. Objective We are seeking IT Audit Manager to join our team and lead audits across Information Technology, Cybersecurity, Business Continuity Management (BCM), and other technology-enabled business processes. The Senior IT Auditor will be responsible for planning and executing risk-based audits, evaluating the design and operating effectiveness of IT general controls (ITGCs), cybersecurity controls, technology governance, cloud environments, business continuity and disaster recovery capabilities, and regulatory compliance. The role also involves identifying technology risks and control deficiencies, assessing their impact on the organization, and providing practical recommendations to strengthen governance, enhance cyber resilience, improve operational effectiveness, and support compliance with applicable regulatory requirements and industry standards. Responsibilities Plan and execute risk-based IT audit engagements, including IT General Controls (ITGC), cybersecurity, cloud computing, digital platforms, data governance, business continuity management (BCM), disaster recovery (DR), third-party risk, and technology-enabled business processes. Perform audit planning activities, including risk assessments, audit scoping, control identification, and development of audit programs and testing procedures. Evaluate the design and operating effectiveness of IT controls, identify technolog

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. As a Senior IT Internal Auditor, you will serve as a technical lead and subject matter resource on an agile, high-impact team operating across complex, technology, cybersecurity, and AI-related audit engagements. Reporting to the Internal Audit Manager, you will independently drive audit execution across Technology Data & Insights (TDI), Security, Engineering, and cross-functional business stakeholders — with minimal supervision. This role requires a practitioner who can move beyond task execution: you will contextualize control gaps within Okta's broader risk and governance landscape, mentor junior team members, and bring a continuous improvement mindset to everything you deliver. Company Description Okta is the foundation for secure connections between people and technology. By harnessing the power of the cloud, Okta allows people to access applications on any device at any time, while still enforcing strong security protections. It integrates directly with an organization's existing directories and identity systems. Because Okta runs on an integrated platform, organizations can implement the service quickly at large scale and low total cost. Thousands of customers, including Adobe, Allergan, Chiquita, LinkedIn, and Western Union, trust Okta to help their organizations work faster, boost revenue, and stay secure. To learn more about Okta, visit: https://www.okta.com. What You Will Own Audit Planning & Risk Assessment Independently lead techn

Leidos is seeking a detail-oriented Cybersecurity Analyst with expertise in Security Accreditation to support the assessment, authorization, and continuous monitoring of information systems. The successful candidate will ensure systems comply with government and industry cybersecurity requirements while supporting the organization's Risk Management Framework (RMF) processes. Primary Responsibilities: Lead and support the security accreditation process for information systems. Develop, maintain, and review security authorization packages. Conduct security control assessments in accordance with RMF and applicable security standards. Collaborate with system owners, engineers, and stakeholders to implement security controls. Perform security risk assessments and recommend mitigation strategies. Monitor systems for compliance with cybersecurity policies and standards. Maintain Plans of Action and Milestones (POA&Ms) and track remediation activities. Support continuous monitoring activities, including vulnerability management and security reporting. Prepare documentation for Assessment & Authorization (A&A) activities. Participate in internal and external cybersecurity audits. Stay current on cybersecurity threats, regulatory requirements, and best practices. Basic Qualifications: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience). 3–7 years of experience in cybersecurity, information assurance, or security compliance. Experience implementing or supporting the NIST Risk Management Framework (RMF). Knowledge of: NIST SP 800-37 NIST SP 800-53 NIST SP 800-171 FISMA FedRAMP (preferred) Experience with vulnerability assessment tools such as Tenabl