Data Security Compliance Director Jobs

Opportunity Overview: We are seeking a versatile and highly skilled Lead Claims Auditor to join our dynamic Payment Integrity team. This critical role involves conducting comprehensive professional and facility coding reviews—encompassing both outpatient/professional and inpatient claims—to ensure the accuracy of code assignment, DRG/reimbursement, and to maximize overpayment identification. If you possess a CPC and/or CCS credential, expert knowledge of CPT, HCPCS, and ICD-10-CM/PCS coding guidelines, and a passion for deep analytical auditing, you will be instrumental in supporting our commitment to accurate reimbursement solutions. This opportunity requires a self-motivated individual who thrives on precision, compliance, and continuous learning in a high-growth environment What you’ll do: Conduct comprehensive coding reviews to ensure accuracy in code assignment and reimbursement. Conduct comprehensive outpatient and professional coding reviews to ensure accuracy in code assignment and reimbursement. Apply expert knowledge of coding guidelines and utilize industry-leading tools to maximize overpayment identifications. Conduct ambulatory surgery center, emergency room, observation and infusion coding reviews. Apply expert knowledge of coding guidelines and utilize industry-leading tools to maximize overpayment identifications. Craft clear, concise, and well-supported audit findings, backed by AHA Coding Clinic Guidelines and ICD-10-CM/PCS regulations. Utilize advanced DRG encoder tools (such as 3M, Webstrat) to drive efficiency and accuracy in audits. Meet or exceed company quality and productivity standards, including strong uphold rates for appeals. Stay ahead of industry trends, coding updates, and compliance regulations to maintain expert-level knowledge. Adhere to HIPAA and company policies and procedures to ensure data security and regulatory compliance. Maintain and apply superior knowledge of changes and updates to coding guidelines, reimbursement trends,

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What Is The Role : Join our team as a Principal Security Compliance Analyst , where you'll take the lead in managing our FedRAMP Moderate program . You'll be part of a fantastic team that values a strong security culture, allowing you to contribute meaningfully to our mission while collaborating with like-minded professionals. Your expertise will help us maintain and enhance our compliance efforts in a supportive and engaging environment. What You Will Be Doing : Manage the FedRAMP Moderate authorization and continuous monitoring program. Maintain the System Security Plan, policies, procedures, evidence, inventories, diagrams, and other required documentation. Coordinate assessments and reviews with our 3PAO, federal agency partners, consultants, and internal teams. Track security findings and POA&M items through remediation. Work with Security, Engineering, IT, Product, and Legal teams to implement and maintain required controls. Monitor program deadlines, risks, and compliance metrics and report progress to leadership. Review system and product changes for potential FedRAMP impact. Help control owners understand their responsibilities and prepare appropriate evidence. What You Bring : 5+ years of experience managing or supporting a FedRAMP Moderate program. Strong understanding of FedRAMP, NIST SP 800-53, and continuous monitoring requireme

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the team Anthropic's Security Governance, Risk, and Compliance (GRC) team is the connective tissue that holds the company accountable to its security commitments. We translate regulatory, customer, and voluntary obligations into controls that teams act on, and give leadership a bird's-eye view of how well we're meeting them. We're building toward a fundamentally different kind of GRC: one that directs Claude, with the right humans in the loop, to challenge and evidence the performance of controls continuously rather than through periodic audits. Responsibilities: Serve as the security policy partner for AI agent governance, authoring the policies and standards for how agents are built, deployed, operated Define review and approval criteria when an agent may interact with sensitive or regulated data, and which actions require human approval as it relates to compliance frameworks Serve as the GRC reviewer within existing engineering approval workflows Define data governance requirements for agents, including least-privilege access, access reviews, and handling of regulated and sensitive data Monitor agent behavior over time and adapt governance requirements in partnership with cross-functional security, research and engineering teams Map agent security and data controls to AI governance frameworks (e.g., ISO 27001, ISO 42001, EU AI Act), strengthening Anthropic's certification efforts ensuring agent security is auditable Assess and document agent-related security and compliance risks, driving them to resolution with engineering owners Own the policy for agent-related risk acceptances and exceptions, including approval authority, d

About us Sierra is the leading platform for customer-facing AI agents, working with many of the world's biggest brands — including The GAP, Rocket Mortgage, SoFi, Sutter Health, and SoftBank — to transform how they serve customers and grow their businesses. We are primarily an in-person company based in San Francisco, with growing offices across North America, Europe, and Asia. We are guided by a set of values that are at the core of our actions and define our culture: Trust, Customer Obsession, Craftsmanship, Intensity, and a commitment to balancing Family along the way. These values are the foundation of our work, and we are committed to upholding them in everything we do. Our co-founders are Bret Taylor and Clay Bavor . Bret currently serves as Board Chair of OpenAI. Previously, he was co-CEO of Salesforce (which had acquired the company he founded, Quip) and CTO of Facebook. Bret was also one of Google's earliest product managers and co-creator of Google Maps. Before founding Sierra, Clay spent 18 years at Google, where he most recently led Google Labs. Earlier, he started and led Google’s AR/VR effort, Project Starline, and Google Lens. Before that, Clay led the product and design teams for Google Workspace. What you'll do Own independent audits and regulatory programs including ISO 42001, PCI DSS, NIST 800-53, FedRAMP, HIPAA, and related frameworks. Drive scope definition, readiness assessments, auditor engagement, remediation planning, and executive level reporting. Develop a strong working understanding of Sierra’s Conversational AI Platform, model providers, and cloud architecture. Partner with Platform and Agent Engineering to design and operationalize controls across multi cloud environments, infrastructure, inference and data platforms. Build a centralized and evolving security controls library mapped to compliance, regulatory and customer requirements. Continuously assess control effectiveness, identify gaps, prioritize risk, and drive remediation that

Ready to Get Shit Done? At bunq, we're building a bank that lives in the cloud, handles billions of transactions, and now integrates AI into our operations—all while keeping our user's data and trust intact. To operate at this scale and speed without compromising security, we need an Internal Auditor focused on Data Security & AI to audit our security controls, validate our AI governance, and ensure every system we build is resilient and trustworthy. As an Internal Auditor – Data Security & AI, your mission is to strengthen bunq's security and AI governance posture by auditing data protection controls, assessing AI model risks, identifying vulnerabilities before attackers do, and ensuring our security practices evolve as fast as our technology. Take Ownership As an Internal Auditor - Data Security & AI, you'll own: Audit security controls across infrastructure, applications, and operations, assessing access controls, encryption, monitoring, incident response, and third-party security effectiveness. Build an AI governance audit program that evaluates model development, bias testing, monitoring, transparency, and regulatory alignment (AI Act, NIS2). Identify and prioritize security and AI risks, conducting vulnerability assessments, pen test reviews, and model audits to surface gaps before they're exploitable. What You'll Work on Right Away Security Control Assessment: Audit bunq's critical security infrastructure (cloud environment, API security, data encryption, access management) and validate the effectiveness of controls; deliver a risk-prioritized remediation roadmap. AI Model Governance Program: Design and execute bunq's first AI audit program, evaluating model development practices, data quality controls, bias testing, monitoring, and transparency, identifying governance gaps and building a scalable AI audit framework. Data Protection & Privacy Audit: Conduct a comprehensive audit of bunq's data handling practices across all systems, assessing compliance with G

This is Adyen Adyen provides payments, data, and financial products in a single solution for customers like Meta, Uber, H&M, and Microsoft - making us the financial technology platform of choice. At Adyen, everything we do is engineered for ambition. For our teams, we create an environment with opportunities for our people to succeed, backed by the culture and support to ensure they are enabled to truly own their careers. We are motivated individuals who tackle unique technical challenges at scale and solve them as a team. Together, we deliver innovative and ethical solutions that help businesses achieve their ambitions faster. Compliance Officer - Financial & Data Integrity Programs We are looking for a highly organized, detail-oriented, analytically minded, and commercially aware individual to join our Scheme Compliance team as a Compliance Officer for our Financial & Data Integrity pillar. This role is responsible for supporting the governance, oversight, and continuous improvement of card-network programs relating to transaction-data integrity, cardholder-data security, fraud, disputes, chargebacks, and merchant financial integrity. You will work across Scheme Compliance, Risk, Product, Engineering, Legal, Operations, Commercial, and regional stakeholders to help ensure card-network requirements are understood, consistently implemented, and well governed across the organization. This role is ideal for someone who thrives in structured program environments, can coordinate technical and operational workstreams, and enjoys translating complex network obligations into scalable, defensible compliance processes. What you’ll do Lead and coordinate program-management activities across the Financial & Data Integrity remit, including remediation tracking, program documentation, stakeholder coordination, and continuous-improvement initiatives for card-network monitoring and data-security programs. Support the governance and execution of relevant

As a Senior Product Manager for AI & Data Security at Datadog, you will define and deliver capabilities that help organizations securely adopt and scale AI across their applications and infrastructure. You’ll focus on building products that provide visibility into AI systems and data usage, assess security posture, and enable teams to manage risk across the AI lifecycle. This role sits at the intersection of security, AI, and cloud platforms, and is ideal for a PM who thrives in emerging, ambiguous problem spaces. You will work cross-functionally to shape how customers discover, understand, and secure AI-powered systems in production. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Own and drive the roadmap for AI & Data Security capabilities, including data security posture management and data loss prevention Define how customers assess and manage the security posture of AI systems, including risks related to configuration, data exposure, and policy compliance Partner with engineering and design to deliver end-to-end product capabilities, from concept through launch and iteration Collaborate with security research teams to identify emerging risks in AI systems and translate them into actionable product features Engage with customers to understand AI adoption patterns and validate solutions that enable secure, scalable operations Define and track success metrics such as product adoption, usage, and impact on customer security workflows Who You Are: &l

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done. We are hiring a Senior Software Engineer across our Identity, Data Security and Trust organization. These teams builds the security backbone of Snowflake — enabling customers to confidently bring their most sensitive data and workloads to the Data Cloud, empowering every Snowflake engineer to deliver the most secure platform at scale, and giving customers the tools to monitor, achieve, and maintain a strong security, governance, privacy, and compliance posture. As the agentic era accelerates, these teams are at the forefront of building AI-native security capabilities that protect the world's data. AS A SENIOR SOFTWARE ENGINEER AT SNOWFLAKE, YOU WILL: Design and implement critical AI security capabilities — including controlled, audited agent workflows, MCP server and client security, agent identity frameworks, and admin guardrails — that form the foundation for secure agentic enterprise adoption Build and evolve foundational identity and access management systems, including authentication protocols, SSO integrations, multi-factor authentication, OAuth/OIDC, SAML, SCIM, and fine-grained RBAC that scales to millions of objects and users Design and develop core security infrastructure spanning secret management, key management, service identity, and end-to-end encryption acro

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As a member of Palantir's Security Compliance team, you will develop a deep understanding of Palantir's control environment, infrastructure, and products. You will work with information security, business and product development experts, and external parties to navigate and manage commercial and international compliance frameworks (SOC/ISO 27001/17/18, ISO 9001) and geographically strategic compliance frameworks (ENS, TISAX, ISMAP, IRAP) in order to provide practical guidance on technical documentation, operational concerns, and sustainable processes that will allow us to continue to grow quickly & efficiently while also maintaining our current compliance obligations. You will additionally be a co-owner of our holistic internal risk management and internal control structures. We are looking for a team-focused and mission-oriented compliance professional that can navigate ambiguity and uncertainty, with the ability and desire to achieve goals and drive progress in an environment where outcomes must be achieved through their own resourcefulness and initiative. Core Responsibilities Assist in the performance of internal and external security assessments of Palantir products, infrastructure, and processes. Have a interest and general aptitude emerging technologies : from leveraging AI tooling, harnessing the capabilities of evidence automation and documentation management, and a general aptitude for agentic integration within workflows. Develop and maintain an understanding of Palantir’s control environment and articulate this understanding to various audiences, including internal and external stakeholders and auditors. Technica

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As a member of Palantir's Security Compliance team, you will develop a deep understanding of Palantir's control environment, infrastructure, and products. You will work with information security, business and product development experts, and external parties to navigate and manage commercial and international compliance frameworks (SOC/ISO 27001/17/18, ISO 9001) and geographically strategic compliance frameworks (ENS, TISAX, ISMAP, IRAP) in order to provide practical guidance on technical documentation, operational concerns, and sustainable processes that will allow us to continue to grow quickly & efficiently while also maintaining our current compliance obligations. You will additionally be a co-owner of our holistic internal risk management and internal control structures. We are looking for a team-focused and mission-oriented compliance professional that can navigate ambiguity and uncertainty, with the ability and desire to achieve goals and drive progress in an environment where outcomes must be achieved through their own resourcefulness and initiative. Core Responsibilities Assist in the performance of internal and external security assessments of Palantir products, infrastructure, and processes. Have a interest and general aptitude emerging technologies : from leveraging AI tooling, harnessing the capabilities of evidence automation and documentation management, and a general aptitude for agentic integration within workflows. Develop and maintain an understanding of Palantir’s control environment and articulate this understanding to various audiences, including internal and external stakeholders and auditors. Technica

About the Team Meesho's Security & Compliance team safeguards a platform that 5% of Indian households shop with - millions of orders, billions of data points, zero downtime as a baseline. We own the Information Security Management System, drive every external certification, and shape how Meesho earns trust with sellers, buyers, partners and regulators. We move fast, default to automation, and obsess over evidence. About the Role This is a hands-on individual contributor role for someone who wants to drive - not just oversee - a multi-framework compliance program. You'll be the DRI for ISO 27001:2022 and SOC 2 Type II, run end-to-end ITGC and TPRM cycles, and help operationalise India's DPDP Rules 2025 across a product organisation that processes data at meaningful scale. You'll work directly with Engineering, IT, Legal, Product, and external auditors. What you will do Certifications & external audits Own the certification and surveillance cycle for ISO 27001:2022 and SOC 2 Type II ; act as the single point of contact for external auditors. Plan and execute readiness assessments, gap closure, evidence collection, control walkthroughs, and management responses. Maintain audit calendars, evidence repositories, and bridge letters between audit windows. Drive PCI DSS v4.0.1 scope-reduction and assessment activities for in-scope environments. ISMS, policies & frameworks Maintain Meesho's ISMS aligned to ISO 27001:2022 - all 93 Annex A controls mapped across Organizational, People, Physical and Technological themes, with named owners and live evidence. Author, review, version-control and socialise security policies, standards, and procedures. Map controls across frameworks: ISO 27001:2022, SOC 2 TSC, PCI DSS v4.0.1, NIST CSF 2.0,

We believe that the way people interact with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. Plaid powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like Venmo, SoFi, several of the Fortune 500, and many of the largest banks to make it easy for people to connect their financial accounts to the apps and services they want to use. Plaid’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, the company is headquartered in San Francisco with offices in New York, Seattle, Washington D.C., Raleigh, London, and Amsterdam. The Security Governance, Risk, and Compliance (GRC) team is part of Plaid’s security organization, focused on enabling the business by proactively managing information security risks and maintaining effective controls. Our mission is to reduce the likelihood and impact of security risks while operating a robust assurance program that builds trust with our customers, consumers, and data partners. We own Plaid’s security compliance frameworks, run our audits and risk programs, and partner across the company to keep Plaid’s platform secure, resilient, and aligned with industry and regulatory expectations. GRC Engineering is how we make all of that scale — turning compliance into code, evidence into telemetry, and audits into a continuous, automated capability. The Role: You will own GRC Engineering at Plaid — a foundational, high-ownership role defining an emerging discipline from the ground up. Today most of our compliance work is manual and point-in-time; you will turn it into an engineered system that is continuous, data-driven, and scalable, and set the technical direction for the field. You will: Define the discipline and the architecture — how GRC Engineering works at Plaid, no

The Platform team creates the technology that enables Spotify to learn quickly and scale easily, enabling rapid growth in our users and our business around the globe. Spanning many disciplines, we work to make the business work; creating the infrastructure, tooling, frameworks, and capabilities needed to welcome a billion customers. We are looking for a Backend Engineer II to join our Security Compliance Engineering team. You’ll help turn complex security, risk, and compliance requirements into scalable software solutions that make it easier for teams across Spotify to build and operate securely. You’ll work with engineers and partners across security to strengthen our technical Governance, Risk, and Compliance (GRC) capabilities. What You'll Do Design and build backend products, services, and infrastructure that strengthen Spotify’s technical security Governance, Risk, and Compliance strategy. Build scalable infrastructure and tooling that help apply regulatory requirements and security framework controls across Spotify’s distributed environment. Develop reliable services that automate security and compliance processes, reducing manual work and helping engineering teams understand and meet requirements. Work with security, engineering, and other partners to translate security and compliance requirements into practical technical solutions. Contribute to consistent engineering practices that address security, risk, and compliance requirements while supporting teams at scale. Own the quality of your work from design and development through deployment, operation, and continuous improvement. Who You Are You have experience developing backend software using an object-oriented programming

Help strengthen network and data security across complex financial services environments, protecting critical infrastructure and sensitive information from evolving threats. The Role As a Senior Network Security Consultant, you will work with clients and delivery teams to strengthen the security, resilience, and protection of enterprise network and data environments across complex financial services organizations. You will bring together expertise across network security, infrastructure, and Data Loss Prevention (DLP), helping clients protect sensitive information while maintaining secure, reliable, and high-performing connectivity. You will support the design, implementation, configuration, monitoring, and ongoing enhancement of security controls across networks, endpoints, email, cloud, web, and other relevant technology environments. Working across cybersecurity, infrastructure, cloud, architecture, identity and access management, risk, compliance, privacy, and business teams, you will investigate security events and incidents, identify vulnerabilities and data protection risks, and translate security requirements into practical controls. As a senior consultant, you will provide technical insight, support complex security initiatives, and help clients improve network resilience and data protection while balancing security requirements with operational and business needs. What You’ll Do Assess, monitor, and analyze network and data security environments, investigating security events, DLP alerts, connectivity issues, potential data leakage, policy violations, and emerging risks. Design, configure, implement, and enhance network security and DLP controls across firewalls, VPNs, network segmentation, endpoints, email, cloud, web, and other relevant channels. Lead and support security implementations, upgrades, migrations, and control enhancements, including technical analysis, testing, documentation, deployment, and post-implementation validation. Investigate comple

Strength in Trust OneTrust’s mission is to enable innovation through the responsible use of data and AI. We believe that ensuring data is trusted shouldn’t slow teams down—it should accelerate what’s possible. This led us to develop the first technology platform for responsible data use in 2016. Today, with AI representing the latest and most impactful expansion of data yet, OneTrust is once again redefining what responsible innovation looks like. OneTrust, the AI‑Ready Governance Platform™, unifies regulatory intelligence, automation, and connected governance workflows so businesses can continue to move at the speed of AI while ensuring good governance to prevent data misuse at scale. Trusted by thousands of organizations worldwide, OneTrust is shaping the future where trusted data becomes a transformative force for business and society. The Challenge We are looking for a dynamic Senior Information Security GRC Analyst to support IT and InfoSec by performing various governance, risk, and compliance activities as part of the OneTrust InfoSec GRC team. Your Mission Customer Security Assurance & Questionnaires Own a high volume of end-to-end completion of customer security questionnaires (CAQs) , RFP security sections, and other assurance artifacts (e.g., SIG, CAIQ, custom questionnaires). Provide accurate, consistent, and defensible responses by leveraging internal evidence repositories (SOC reports, ISO certificates, policies, standards, diagrams, pen test summaries, etc.). Partner with internal stakeholders (Sales, Marketing, Customer Success, Security, Engineering, Privacy, Legal, Compliance, Product) to validate responses and resolve gaps. Customer Engagement & Security Discussions Meet with customers and prospects to explain security controls, risk posture, and compliance commitments . Present security topics with confidence and clarity—tailoring depth for technical and non-technical audiences. Support Sales and Customer Success by addressin