Data Security Compliance Director Jobs

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Senior Security Engineer on GitLab’s Security Incident Response Team (SIRT), you will play a critical role in defending GitLab.com and the broader GitLab environment against evolving security threats. This role operates on a compressed 4-day work schedule, with a full-time week's hours condensed into four longer working days. Shifts run either Sunday through Wednesday or Wednesday through Saturday to provide 24/7/365 security coverage. You will lead high-impact incidents and investigations, drive continuous improvements in defense, detection and response capabilities, and help scale security operatio

RDQ327R177 While candidates in the listed location(s) are encouraged for this role, candidates in other US locations will be considered. The Security Field Engineering team helps data teams solve the world's toughest problems by empowering customers to understand the security of the Databricks platform and by helping account teams address questions that come up during security reviews. Reporting to the Head of Security Field Engineering, you will meet with customers to answer questions, train other Databricks team members, build customer-facing content such as slide decks, white papers, and maybe write code that customers can use. Our team prioritizes scale -- we'd rather spend an hour building a doc than be in ten hours of meetings, rather deliver agent skills and knowledge base articles than be the rock star answering all the questions. If you want high growth, autonomy, and to touch all elements of security, look no further. The impact you will have: You will be viewed as a security expert as you work with field teams and customers to understand architectures, address concerns and handle compliance questions Your contributions may come in multiple ways, including customer interactions, scalable slides or white paper creation, internal enablement, process improvement, automation, or technical leadership—no one excels in every area, but all are valuable When you’re on the call, you will be directly appreciated. When you’re not, your impact will be felt across the company through the enablement, collateral, knowledge management, and systems you build You might not come from an assurance team, but you’ll come up to speed with common security and compliance regimes to save customers hours of effort and months of uncertainty You will identify customer pain points and work with product management and product marketing will improve our product and our messaging You will contribute to internal-facing services and automation that make life easier for our field staff

Gong harnesses the power of AI to transform how revenue teams win. The Gong Revenue AI Operating System unifies data, insights, and workflows into a single, trusted system that observes, guides, and acts alongside the world’s most successful revenue teams. Powered by the Gong Revenue Graph, AI-powered intelligence, specialized agents, and trusted applications, Gong helps more than 5,000 companies around the world deeply understand their teams and customers, automate critical sales workflows, and close more deals with less effort. For more information, visit www.gong.io. At Gong, you will join a company built on innovative products, ambitious goals, and passionate people. We are shaping the future of revenue intelligence and we want people who are excited to build what comes next. You will work with a team that dreams big, moves fast, and cares deeply about the craft and about each other. Here, transparency and trust are core to how we operate, and every person has the opportunity to make a visible impact. If you want to grow, stretch, and do work that truly matters, Gong is the place to do the best work of your career. This is a high-visibility, high-impact role at the center of Gong’s security and compliance story. As our Senior GRC Security Lead, you will be the architect of foundational programs we are building — Gong’s first-ever Common Controls Framework, standing up a formal risk process and register, implementing a GRC tooling ecosystem, and owning the full policy, standards, and exceptions management lifecycle. This is not a role for someone looking to inherit a mature program. It’s a role for a builder — someone who thrives in ambiguity, operates with urgency, and finds energy in creating order from complexity. You will work directly with Legal, Sales, Engineering, Customer Audit teams, and executive stakeholders, and your fingerprints will be visible across everything Gong builds for compliance and trust for years to come. RESPONSIBILITIES Design and imple

The Data Engineering team is responsible for building ETL pipelines that populate the Internal Data Platform, which drives analytics that help the company run more efficiently. Our team builds highly performant and scalable processes that extract massive datasets and makes those datasets available for querying in an optimal way. We are looking to speak to candidates who are based in Gurgaon for our hybrid working model. What you’ll do Guide the Data Engineering team on building highly performance ETL pipelines using Spark and other Big Data technologies Help design the architecture of our Internal Data Platform to support the implementation of a robust medallion architecture Provide thought leadership on ways to achieve infrastructure cost savings on Cloud hyperscalers Design and build AI agents that can help automate many of the common development and support tasks that the team performs Work with Security and Compliance teams to ensure that datasets have appropriate permissions and regulations in place Work with our Data Platform, and Governance sibling teams to make data scalable, consumable, and discoverable We’re looking for someone with 10+ years experience working on enterprise data lakes/warehouses 5+ years of Spark and Python experience 5+ years of direct hands-on experience working with AWS or GCP Thorough AI knowledge, particularly with codegen tools and agentic frameworks Hive, Iceberg, Glue, or other technologies that expose big data as tables Familiarity with different big data file types such as Parquet, Avro, and JSON Exposure to real-time or streaming data technologies is a plus Success Measures In 3 months, you'll have a thorough understanding of the architecture of MongoDB’s internal Data and AI ecosystem In 6 months, you'll have owned the delivery of a large project from start (scoping, design) to finish (delivery) In 12 months, you'll have designed new features, led development work, and become a go-to expert on parts of the system About MongoDB

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a member of the Infrastructure Security Team within the Product Security Department , you will work with teams across GitLab to ensure that the components that comprise our public cloud infrastructure are built from the beginning with resiliency and set security expectations that our customers rely on to power their DevSecOps goals. As a Staff Security Engineer, you will serve as a technical lead across the topics the Infrastructure Security team owns, including our SaaS Platforms (e.g. GitLab Dedicated, Cells) and Self-Managed offerings. You will define the technical direction for how the team approac

We believe that the way people interact with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. Plaid powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like Venmo, SoFi, several of the Fortune 500, and many of the largest banks to make it easy for people to connect their financial accounts to the apps and services they want to use. Plaid’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, the company is headquartered in San Francisco with offices in New York, Seattle, Washington D.C., Raleigh, London, and Amsterdam. About the team: The Security Governance, Risk, and Compliance (GRC) team is part of Plaid’s security organization, focused on enabling the business by proactively managing information security risks and maintaining effective controls. Our mission is to reduce the likelihood and impact of security risks while operating a robust assurance program that builds trust with our customers, consumers, and data partners.We partner closely across the company to ensure Plaid’s platform remains secure, resilient, and aligned with industry and regulatory expectations.Security risk management is how Plaid makes informed security trade-offs—we identify and analyze the risks that could materially affect the business, make sure the right owners decide what to do about them, and turn that picture into reporting leadership and the board can act on. About the role: You will run security risk assessments end-to-end within Plaid’s security risk management program—intake, scenario-based analysis, treatment decisions, and monitoring across security, infrastructure, and product risk. You will work with engineering SMEs and risk owners on risks ranging from over-privileged access and supply-chain gaps to pr

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role You will engineer security improvements to the GitLab product as well as building and maintaining the tools we use to detect and prevent abuse on our SaaS platforms. A strong software engineering background with experience in large Ruby/Rails codebases is required. As a senior engineer on the Trust and Safety team, you will predictively identify abuse patterns and trends and build anomaly detection and prevention systems to mitigate abusive users and their activities. This role is an ideal fit for candidates with software engineering backgrounds interested in moving into security engineering. Formal

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. Intermediate Backend Engineer, Security Factory: Code Security An overview of this role As an Intermediate Backend Engineer on GitLab's Security Factory: Code Security team, you'll help developers find and fix security issues in the code they write and the open source components they depend on. Your work connects dependency analysis, vulnerability detection, and automated remediation. You'll build parsing that tells the security analysis engine which libraries and frameworks a project uses, extend a service that turns security advisories into dependency update merge requests, and develop hybrid analyzers that combine rule-based d

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. Position Summary The Data Engineer - People Analytics role is a technical developer in IT and individual contributor for the People Analytics Data Engineering team responsible for the development of data warehouse modeling, data pipelines, and related analytics specific to People and Workforce analytics in cloud data platforms. Key Responsibilities: Data Pipeline Management Design, build, and manage robust data pipelines and ETL processes that integrate HR data from various systems, including Workday, talent management, payroll, and other data sources. Data Engineering and Transformation Develop and optimize data workflows to ensure data accuracy, quality, and availability for the People Analytics team and stakeholders across HR and business units. Technical Leadership Oversee a team of data engineers, providing mentorship, support, and guidance on best practices in data engineering, version control, and coding standards. Analytics & Reporting Support Work closely with People Analytics to structure data for analysis, develop data models, and create reproducible workflows that enable efficient reporting in R, Python, and other analytics tools. Data Security and Compliance

At Anyscale , we're on a mission to democratize distributed computing and make it accessible to software developers of all skill levels. We’re commercializing Ray , a popular open-source project that's creating an ecosystem of libraries for scalable machine learning. Companies like OpenAI , Uber , Spotify , Instacart , Cruise , and many more, have Ray in their tech stacks to accelerate the progress of AI applications out into the real world. With Anyscale, we’re building the best place to run Ray, so that any developer or data scientist can scale an ML application from their laptop to the cluster without needing to be a distributed systems expert. Proud to be backed by Andreessen Horowitz, NEA, and Addition with $250+ million raised to date. About the Role Anyscale's security and compliance needs are growing as we work with larger and more demanding customers. Compliance is increasingly a customer-facing, contractual function rather than an internal exercise, and we are looking for someone to own it. This role owns that function end to end: our audits, our evidence base, our risk register, and the security diligence that customers put us through before and during a contract. You will work directly with the Head of Security and across engineering, IT, legal, and sales. This is a program-ownership role with the autonomy and accountability that implies. You will not have a senior compliance function above you to defer to; you are that function. In your first year, success looks like a complete and defensible evidence base with clean audit outcomes, a repeatable way to answer customer security diligence, and a risk register that leadership actually uses. What You'll Do Own our SOC 2 Type II and ISO 27001 programs, and future frameworks as we take them on, including scope, evidence, control operation, and the relationship with our external auditors. Own and complete the control evidence base in our compliance automation platform, moving controls from partially substantia

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Senior Professional Services Technical Architect, Security at GitLab, you'll lead the design and implementation of secure enterprise solutions for Professional Services clients across AMER. You'll assess complex security architectures, guide security tool and CI/CD migrations, including legacy tools such as Jenkins, and implement GitLab security capabilities to help customers meet compliance frameworks such as NIST 800-53, ISO 27001, and SOC 2. This role requires depth in secure reference architecture design across cloud security, identity management, vulnerability management, and deployment choices

U.S. Person status required, as defined by ITAR (22 CFR 120.15). Active DoD Secret clearance required (minimum); Top Secret eligibility required. About the Role Systems Technology, Inc. (STI) is seeking a Facility Security Officer / IT Security Administrator to serve as the company's designated FSO of record and to manage the classified IT systems that support our NISPOM-governed defense programs. This is a hands-on, dual-hatted role at a growing facility — you'll run day-to-day industrial security operations (classified document control, personnel security, foreign visit processing) while also owning the security posture of the IT systems and networks that touch controlled and classified information. What You'll Do Security Operations & Program Execution Serve as STI's Facility Security Officer of record, executing daily collateral security operations under NISPOM (32 CFR Part 117) Maintain classified document control, accountability, and safeguarding procedures Support classified facility operations and any Restricted Areas Personnel Security & Onboarding Process personnel security clearance requests and maintain records in DISS/NISS Facilitate new hire security onboarding and deliver initial and annual security training/briefings Foreign Visits & External Engagements Process, disclose, and host foreign visits in accordance with NISPOM Coordinate with program and engineering teams to ensure compliant execution of visits and classified meetings Technology Control & IT Security Own and administer Technology Control Plans (TCPs) and ITAR/EAR compliance controls for controlled technical data Manage security configuration, access control, and monitoring for IT systems handling classified or export-controlled information Serve as (or support) the Information System Security Officer/Manager (ISSO/ISSM) function for accredited classified IT systems Administer user accounts, permissions, and audit logging on classified and controlled networks in coor

A Career with Point72's Compliance Team The Point72 Compliance department is an industry-leading team of compliance professionals who support global investment and trading activities by establishing and enforcing the firm’s compliance policies, providing real-time advice, and conducting pre- and post-trade surveillance. Our team is essential to Point72’s success and we provide mentorship, a growth path, and the opportunity for a long-term career with us. What you'll do Monitor compliance restriction alerts and partner with the broader Compliance team to investigate, escalate, and resolve potential issues Investigate trading exceptions, prepare concise findings, develop recommendations, and escalate to senior members of Compliance Manage compliance-related security master data by maintaining accurate mappings, validating underlying information, and resolving issues adversely affecting trading compliance reports Partner with, among other functions, Technology to implement automated controls, reports, and dashboards that improve visibility and reduce manual intervention Track open technology issues and compliance projects to support timely resolution Analyze compliance reports to identify data issues and improve related processes Support artificial intelligence integration to enhance compliance monitoring tools Assist with real-time compliance coverage for trade approvals and time-sensitive trading matters What's required One to three years of compliance experience within an investment manager, hedge fund, or broker-dealer Basic understanding of multiple asset classes Experience analyzing data and producing clear written summaries, escalation materials, and remediation plans Project management experience with the ability to manage multiple projects simultaneously Experience partnering successfully with cross-functional colleagues Excellent verbal and written communication skills, with the ability to explain technical compliance topics clearly Commitment to the highest

We believe that the way people interact with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. Plaid powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like Venmo, SoFi, several of the Fortune 500, and many of the largest banks to make it easy for people to connect their financial accounts to the apps and services they want to use. Plaid’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, the company is headquartered in San Francisco with offices in New York, Seattle, Washington D.C., Raleigh, London, and Amsterdam. Team: The Security Governance, Risk, and Compliance (GRC) team is part of Plaid’s security organization, focused on enabling the business by proactively managing information security risks and maintaining effective controls. Our mission is to reduce the likelihood and impact of security risks while operating a robust assurance program that builds trust with our customers, consumers, and data partners.We partner closely across the company to ensure Plaid’s platform remains secure, resilient, and aligned with industry and regulatory expectations. Third-party ecosystem risk is a core part of how we keep Plaid safe—we vet the security of both the vendors we rely on and the customers and partners who connect to our platform, so trust runs in both directions. Role: You will run security risk assessments for Plaid’s third parties end-to-end—from intake and questionnaire through risk rating, findings, and tracked exceptions. You will assess the security posture of customers and partners onboarding to the platform with the same rigor we apply to vendors. You will keep the third-party risk lifecycle moving—risk tiering, reassessment cadence, remediation follow-through, and a clean, current

Opportunity Overview We're hiring a Data Architect who will serve as a senior technical leader responsible for architecting the complete lifecycle data moves, transforms, and creates value across every product line we operate. You'll own the blueprint for our enterprise data lakehouse - setting the standards, governance, and strategy that elevate data from a byproduct of operations to the company's most valuable asset. We need someone who pairs deep mathematical and logical modeling expertise with a builder's instinct - someone who codes, prototypes fast, and proves out next-generation AI data architectures before committing the organization to them. This role would need experience with US healthcare domain data. What You'll Do Semantic Layer Governance: Set the technical standard and reference architecture for a universal semantic layer across multiple distinct data products, ensuring unified definitions of complex metrics and healthcare business entities across Architect the Enterprise Context Layer: Define, scale, and govern the global Enterprise Ontology (abstract domain maps, business entity classes, and entity-relationship rules) that serves as the backbone for Agentic AI systems. AI-Native Prototyping : Leverage modern AI-native development environments (such as Cursor, GitHub Copilot) to rapidly generate, iterate, and document blueprints for complex enterprise data schemas and metadata layers. Security & Compliance Leadership : Embed regulatory compliance (HIPAA, FHIR) and security principles into platform design. Partner with security and compliance teams to ensure architectural decisions support audit readiness and risk mitigation. Cross-Functional Collaboration : Partner with executive leadership, product management, and engineering to translate business requirements into scalable technical solutions. Communicate complex architectural concepts to both technical and non-technical stakeholders. ISMS roles and responsibilities Good knowledge of Informati