Data Security Compliance Director Jobs

This is Adyen Adyen provides payments, data, and financial products in a single solution for customers like Meta, Uber, H&M, and Microsoft - making us the financial technology platform of choice. At Adyen, everything we do is engineered for ambition. For our teams, we create an environment with opportunities for our people to succeed, backed by the culture and support to ensure they are enabled to truly own their careers. We are motivated individuals who tackle unique technical challenges at scale and solve them as a team. Together, we deliver innovative and ethical solutions that help businesses achieve their ambitions faster. Senior Security Program Manager Adyen is looking for a Security Program Manager to join the Tech Regulatory team within the first line of defense. The Tech Regulatory team ensures that the platform is secure, reliable and compliant with all global regulatory requirements. As a Security Program Manager, you are responsible for ensuring that our products and services comply with security regulations and laws. You actively engage, bring together, and communicate with people from various teams to be successful in ensuring continued compliance of products and services and you manage multiple security compliance programs such as PCI-DSS and PCI 3DS. What you'll do Program Management: Manage programs across multiple domains - for example responsible for program managing the PCI-DSS and PCI 3DS certifications in addition to supporting security on regulatory requirements surrounding a broad set of security risk domains for example security detection and monitoring, data loss prevention, vulnerability management and three core operational risk domains as your team’s core anchor: Incident Management, Change Management, and Business Continuity Management Defining standards and ensuring frameworks withstand internal and external scrutiny Operational Design: Translate complex regulatory requirements into actionable operational program desig

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Staff Security Governance Engineer, you will be the individual contributor who owns how GitLab writes, maintains, communicates, and measures its security policies and standards. You will turn emerging regulations, including AI regulation, into clear requirements that engineering, product, and legal teams can act on, and you will use automation to keep governance lightweight and continuous rather than a point-in-time exercise. You will sit on the Security Governance team within Security Assurance and work closely with Security Compliance, Security Risk, and GRC Engineering. You will report to the Dire

About Us: Paytm is India’s largest digital payments and financial services platform, leading the mobile QR revolution. We power millions of businesses and individuals, and we’re building scalable, resilient systems to serve half a billion Indians and beyond. Here at Paytm, technology isn't just about keeping up, it's about building the future. We believe the next generation of engineers must not only scale systems to billions but also leverage AI and GPT tools to accelerate innovation. Role Overview: We are seeking an experienced Senior Information Security Manager to lead our security initiatives and ensure the integrity, confidentiality, and availability of our systems and data. This role is crucial in safeguarding our digital assets and maintaining compliance with industry standards. 1. Should take care of Infosec functions by coordinating with various stakeholders 2. Lead and manage Vulnerability Assessment (VA) and Penetration Testing (PT) programs end to end. 3. Should have technical hands-on knowledge on different VAPT tools, like Qualys, Tenable, BurpSuite, Checkmarx etc. 4. Ensure all cyber security compliance and audits directions issued from time to time by the regulator like SEBI, RBI etc. 5. Coordination with SOC, Technology team to follow up the incidents till closure 6. Follow escalation matrix for delayed issues 7. Assist in Internal and External Audits (Regulatory) and work towards closure of observations if any 8. Should have project management espouse, to run the security PMO for ensuring the multiple initiatives with internal / external teams, vendors, and regulators. 9. Prepare and review new/existing policies, procedures, and secure configure/ hardening documents. 10. Should possess technical skills and knowledge to handle/manage security solutions if required 11. Should have understanding of data protection technologies & laws, including DLP, DSPM, DPDPA, IT Act and international regulations like GDPR 12. Exposure to Cloud Environment & Appl

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking an experienced Governance, Risk, and Compliance (GRC) Engineer focused on fintech and financial services regulation to help scale compliance for SpaceXSI and xMoney. As we operate deeper in regulated financial environments, maintaining a robust, transparent, and technically sound GRC program is critical. You will architect the systems and processes that automate trust — a pragmatic operator who understands that GRC exists to enable the business, balancing rigorous standards with the velocity of a high-growth company. The ideal candidate brings hands-on fintech compliance experience (PCI DSS, NYDFS, FFIEC), fluency in data privacy frameworks (GDPR, CCPA), and GRC engineering skills: Compliance-as-Code, continuous evidence collection, and deep partnership with engineering so controls are designed into the platform rather than bolted on after the fact. This role may also include additional tasks and responsibilities as needed to support the team and evolving business priorities. RESPONSIBILITIES: Own and evolve financial services and payments compliance posture across PCI DSS, NYDFS (including 23 NYCRR 500), FFIEC guidance, and related banking/

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We are seeking a mid-level Infrastructure Vulnerability Management Engineer with a strong background in Cloud Security, DevSecOps, and Infrastructure-as-Code (IaC). In this role, you will bridge the gap between security, compliance, DevOps, and Platform engineering teams. You will identify infrastructure misconfigurations, secure multi-cloud environments, and manage continuous vulnerability lifecycles across cloud workloads, containers, and data repositories to satisfy strict regulatory compliance frameworks. You will also serve as a technical infrastructure responder during security incidents, deploying real-time cloud or network countermeasures to protect our production ecosystem. What You'll Do Core Responsibilities Infrastructure Scanning & Triage: Perform continuous security scanning across our cloud posture and workloads. Review, validate, and prioritize flaws and misconfigurations based on CVSS scores, real-world exploitability, and infrastructure network exposure. Posture Management & Visibility : Own and optimize Cloud Security Posture Management (CSPM), Kubernetes Security Posture Management (KSPM), and Data Security Posture Management (DSPM) tools to ensure uniform compliance, prevent data leakage, and maintain hardened baselines. Infrastructure-as-Code (IaC) Security: Configure, tune, and embed automated IaC security scanning tools into CI/CD pipelines to identify architectural risks (e.g., overly permissive IAM, public S3 buckets/Cloud Storage) before they are deployed to production. Workload & Container Security: Manage the continuous vulnerability scanning lifecycle for container images, registries, and Virtual Machines (VMs), partnering with SRE and Platform teams to build aut

What you’ll do Design and implement secure cloud pipelines that ingest very large scan datasets (multi-terabyte), reliably and resumably. Build orchestration for GPU-accelerated reconstruction and analysis with strong retry semantics, idempotency, and cost controls. Define end-to-end data lifecycle for medical imaging: raw vs intermediate vs derived artifacts, retention policies, and reproducibility. Implement security + compliance primitives appropriate for HIPAA/PHI: encryption in transit/at rest, key management, least privilege, audit logs, and access reviews. Build operational tooling: monitoring, alerting, runbooks, and incident-driven improvements for a growing device fleet. What we’re looking for Strong experience with cloud batch/queueing/orchestration, storage systems, and data pipeline reliability. Experience shipping production systems that handle large data volumes and failure-prone networks. Practical security mindset (least privilege, secrets, audit logging) and comfort operating in compliance-constrained environments. Useful experience Building reliable data pipelines at scale (queues/orchestration, resumable uploads, GPU batch execution) with strong observability. Security + privacy by default: encryption, least-privilege access, auditing, and practical HIPAA/PHI guardrails. Owning the “boring” backend details that keep a lean team moving: schemas/migrations, cost controls, retries, and runbooks. Understanding compute tradeoffs across hardware options, and specifying appropriate cloud resources.

ABOUT BASETEN Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F , led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to ship AI products. THE ROLE We are seeking an experienced and proactive Security Engineer to help us build, maintain, and continuously improve the security posture of our rapidly growing ML infrastructure platform. As one of the first dedicated security hires at Baseten, you will work cross-functionally with engineering and operations teams to ensure we’re meeting the highest standards of confidentiality, integrity, and availability. You’ll have an opportunity to shape our security strategy and best practices from the ground up, influencing the way our platform handles sensitive data for both internal and external stakeholders. RESPONSIBILITIES Security architecture and design: Collaborate with engineering teams to design and implement secure systems and infrastructure, including cloud (AWS/GCP) environments and container orchestration platforms. Vulnerability management: Lead proactive vulnerability assessments, pen tests, and remediation efforts to ensure our products and infrastructure remain secure. Incident response: Develop and maintain incident response processes, including detection, analysis, containment, eradication, and post-incident reviews. Identity and access management (IAM): Oversee IAM strategies and tools to ensure the right people have the right level of access to our systems and data. Security compliance and audits: Work closely with operations to ensure compliance with relevant standards (e.g., SOC 2, ISO 27001) and as

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Senior Product Manager , you will own GitLab's Secret Detection offering and the Vulnerability Research function that produces the detection content across security products. Secret Detection is one of the highest-signal, highest-volume security capabilities on the platform. Leaked credentials are the most common initial access vector in real breaches, and as AI agents write, commit, and configure more of the software, the surface area for exposed secrets grows faster than the number of humans watching it. You will own the full loop: detect a secret with high precision, tell the customer whether it i

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. Core Responsibilities Develop automation and tooling for corporate and customer-facing identity platforms Build, secure, and manage geo-redundant containerized services (EKS and ECS) in AWS and Azure Scale the implementation of Single Sign-On (SSO) integrations across multiple Entra ID tenants using infrastructure-as-code frameworks Build tooling to standardize and scale operational workflows across AWS, Azure, and Google Cloud Platform (GCP) Extend the identity platform to non-human identities, treating workloads and AI agents as first-class principals with scoped, short-lived credentials Build the governance layer: an access graph that makes entitlements legible and a policy engine that makes authorization decisions enforceable and auditable Design token-issuance and federation flows that make least-privilege, ephemeral access the default Research and drive adoption of emerging authentication and session security standards (such as device-bound session credentials and continuous access evaluation) in collaboration with Security Engineers Pressure-test designs and partner with Identity Security Engineers to threat model implementations before they ship Partner with Security Compliance Engineers to build services that reduce the cost and complexity of compliance enforcement What We Value Technical proficiency in identity protocols (SAML, OIDC, OAuth 2.0, LDAP, Kerberos, FIDO2, WebAuthn) Experience managing identities and governance workflows on platforms such as Entra ID, Keycloak, AWS Cognito, or Okta Experience with policy engines and

The Role: Scale AI is hiring a highly skilled foundational IT Systems Engineer for our Public Sector IT team to design, build, and operate secure, scalable infrastructure that empowers employees to do their best work. You’ll join a creative, fast-moving, solutions-oriented group that architects and implements automation across identity and access management, endpoint management, and our broader SaaS stack. Leveraging Okta Workflows, GCC High/Azure Gov, and your familiarity with federal frameworks (FedRAMP High, IL6, CMMC), you’ll deliver robust, audit-ready systems that meet stringent compliance requirements. The ideal candidate pairs deep IAM best practices and hands-on SaaS administration with a zero-trust mindset, clear documentation, and a genuine drive to make people happy—while protecting system integrity in a fast-paced, high-security environment. You will: Assist with the administration of our tech stack with platforms such as Okta, GCC High, Opal, Slack, Jamf, Jira, and many more Provide escalated assistance to the IT Services and Support team Partner with Security/Compliance on audit artifacts (SSP updates, POA&Ms, control mappings to NIST 800-53/171, CMMC 2.0). Create and update technology documentation for internal IT teams and Scale employees Design and maintain Zero-Trust controls (device posture, network segmentation, Conditional Access) across GCC High/Azure Gov and Okta. Build Okta Workflows and lightweight services (webhooks/queues) to automate joiner–mover–leaver events, access reviews, and deprovisioning. Own change management for IT systems in regulated environments (CAB records, rollback plans, validation evidence). Ideally you'd have: 5+ years of IT systems, infrastructure, and/or engineering experience Experience with integrating with SaaS APIs and SDKs Experience with leveraging Okta or similar identity management systems for authentication and provisioning methods such as SAML, OIDC, and SCIM Scripting experience with Python, Powe

The role Scale builds enterprise AI systems deployed into production. As a Solutions Architect, you lead technical execution for enterprise deals in your vertical from initial discovery through deal close, and remain involved post-sale to support account growth. You own an assigned set of enterprise accounts. You conduct technical discovery, evaluate technical feasibility, build solution prototypes, and serve as the main technical point of contact for customer engineering and leadership teams. You work alongside three primary partners: the Account Executive (commercial owner), the Project Manager (delivery owner), and the Tech Lead (engineering lead for implementation). What you will own Technical discovery and qualification. Lead technical discovery and complete the Technical Qualification Checklist, evaluating feasibility, data readiness, integration requirements, security/compliance, evaluation readiness, and stakeholder alignment. Provide clear go/no-go recommendations for prospective deals. Evaluation and success criteria. Define performance metrics and evaluation criteria before proposal stage, including quality dimensions, baselines, evaluation datasets, and subject-matter expert access requirements. Customer workshops. Lead executive technical workshops for target use cases. Prepare pre-read materials and build working prototypes or live demos to validate proposed technical architectures. Statement of Work (SOW) input. Supply the technical input package for SOW creation (architectural approach, prototype findings, risks, dependencies, and assumptions) and review draft SOWs for technical accuracy. Post-sale account engagement. Maintain long-term technical engagement with signed accounts, identify expansion opportunities for new use cases, and share delivery feedback with GTM teams. Vertical technical assets. Develop reference architectures, demo environments, discovery templates, and evaluation frameworks for your assigned industry vertical. Wha

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As an Intermediate Software Engineer in GitLab's Security section, you'll contribute to the data layer behind our vulnerability and dependency management capabilities. You'll design and develop well-scoped features within the systems that ingest, store, index, and query security report data, including integrations with key third-party systems. With a strong focus on PostgreSQL and scalable backend design, your work will support security features delivered by teams across GitLab. You'll work with clear context and strong support from the Senior Software Engineers and Staff Software Engineers around you. Yo

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Senior Software Engineer, you'll work across two important areas for GitLab Security: the data layer behind our vulnerability and dependency management capabilities, and our move toward services outside the GitLab monolith. You'll design and develop systems that ingest, store, index, and query security report data, including integrations with key third-party systems. With a strong focus on PostgreSQL and scalable backend design, your work will support security features that teams across GitLab deliver. You'll own significant parts of larger deliverables from design through delivery. You'll shape the

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Staff Software Engineer, you'll help lead two important areas for GitLab Security: the data layer behind our vulnerability and dependency management capabilities, and our move toward services outside the GitLab monolith. You'll design and develop systems that ingest, store, index, and query security report data, including integrations with key third-party systems. With a strong focus on PostgreSQL and scalable backend design, your work will support security features delivered by teams across GitLab. You'll take ownership of large deliverables from early ideas through implementation, working directly

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role Palantir is seeking a Subcontracts Manager to join our broader U.S. Government contracts and legal team, which is key to Palantir’s mission. We’re a team that values creativity and teamwork. Whether operating solo or collaboratively, our goal is to enable our U.S. Government agency customers and partners to unlock their data and power critical operations. In this role, you’ll provide strategic support for business-to-business relationships throughout our supply chain, including negotiating and managing subcontracts, teaming agreements, and various supplier agreements. You’ll be the primary point of contact for communications with our subcontractors and other commercial partners, and also drive communications with internal teams like business development, finance, and security compliance in order to negotiate and sign agreements with our partners. You’ll manage agreements and workflows that are critical to our U.S. Government work, including vendor and supplier contracts, programs with strategic partners, and subcontractor deliverables. Core Responsibilities Draft, review, and negotiate various contracts, including teaming agreements, subcontracts, data sharing, and license agreements Support pre-award and capture efforts as well as post-award subcontract negotiation and management; including but not limited to driving the RFP process, review supplier paperwork to negotiate terms, deliverables and ensure compliance with applicable customer and regulatory requirements. Collaborate with various internal stakeholders, including attorneys, finance, information security, and technical teams to align contractual terms with risk posture