Governance Risk And Compliance Consultant Jobs

Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams — People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more — provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block. The Role We are seeking an experienced Deputy Chief Compliance Officer, Financial Services to join our Line 2 Compliance function at Afterpay ANZ. This is a fantastic opportunity for candidates looking to innovate and help provide financial services compliance advisory, licensing, governance and frameworks services and support across all Afterpay business units in Australia and New Zealand. This role much be based in Australia, preferably in Sydney or Melbourne, and will report directly to the Head of Compliance for Afterpay ANZ. You Will Support the Head of Compliance to ensure the Compliance Function and the Compliance Risk Management Framework operates effectively and meets regulatory expectations. Lead the Compliance Framework and Program, ensuring it is comprehensive and sustainable; this includes documenting and maintaining policies, standards, and procedures for all aspects of the program Work with the business, global risk and compliance functions to build, embed and maintain governance, risk and compliance frameworks to support regulated financial services products. Maintain Afterpay's Australian Credit License, which includes governance, compliance oversight and due diligence, and the compilation and submission of the annual compliance certificate requirements with ASIC. Manage of all monitoring, reporting, audit and testing ac

About Paytm Europe Merchants deserve better from their payments provider: fairer pricing, faster settlement, easier tools, and support from a partner that understands their business. Paytm Europe Payments S.A., is being established in Luxembourg, backed by One97 Communications Limited, one of India's largest fintech groups, with the ambition of transforming how SMEs across Europe accept and manage payments. Following launch in Luxembourg, the business will expand into Germany, the Netherlands and other European markets. Robust governance and intelligent risk management will be fundamental to our long-term success. Role Purpose The Head of Risk will establish and lead Paytm Europe's Risk Management function across Europe. The successful candidate will design, implement and continuously enhance the Company's risk management framework, ensuring that risk management supports strategic decision-making, regulatory compliance and sustainable commercial growth. This is a foundational executive leadership role responsible for embedding a strong risk culture throughout the organisation whilst enabling innovation and business expansion. Key Responsibilities Build the Enterprise Risk Framework - Design and implement Paytm Europe's Risk Management Framework, Risk Appetite Statement and supporting policies. - Develop a consistent methodology for identifying, assessing, monitoring and reporting risks across the organisation. - Ensure the framework remains proportionate, scalable and aligned with CSSF, EBA, DORA and other applicable European regulatory requirements. Risk Governance - Lead the Company's Risk function and act as the second line of defence. - Provide independent challenge to Executive Management and business functions. - Prepare risk reporting for Executive Management, the Board and Board Risk & Compliance Committee. Operational & Technology Risk - Oversee operational, technology, cyber, outsourcing, third-party and resilience risks. - Work closely with Technol

About the Team DoorDash’s Global Governance, Risk and Compliance (GRC) team helps the business scale securely through practical risk-based decisions, reliable controls and clear accountability. Our third-party risk program protects the systems and data behind our marketplace across DoorDash, Wolt, and Deliveroo. About the Role We're hiring a Security Risk Specialist, who will help run and shape our risk management program and treatment plans, enabling risk and control owners and security teams to keep risk at an acceptable level as the business grows. You will work cross-functionally to achieve business goals by running risk assessments and reporting, supporting exception requests when a policy can't be met, and helping automate the tooling and processes that keep our risk register accurate and trustworthy. You'll also help us build a more proactive risk function — going into specific areas of the business to deep-dive their controls, surface where things have gone wrong, and get ahead of issues before they surface. You will report into the Senior Security Risk Manager on our GRC team in our Security organization. You’re excited about this opportunity because you will… Lead our global risk management process (assessing risk, negotiating treatment plans with owners, turning regulatory and framework changes into real, working controls) Get into the detail of how controls operate day-to-day, factoring in threat intelligence to make sure we stay ahead of new threat actors and attack vectors Manage policy exceptions by building compensatory controls or a case for risk acceptance instead Own risk reporting for key areas like security or engineering, becoming the go-to risk contact for at least one and helping reduce risk there in a measurable way Collaborate and report widely within our GRC and security teams and across the business Help shape our team’s strategy and tooling as we grow by building your own automations rather than waiting on an engineer to build them for y

About the Team DoorDash’s Global Governance, Risk and Compliance (GRC) team helps the business scale securely through practical risk-based decisions, reliable controls and clear accountability. Our third-party risk program protects the systems and data behind our marketplace across DoorDash, Wolt, and Deliveroo. About the Role We’re looking for a Third-Party Risk Management (TPRM) Manager to lead a technically rigorous global program and shape its AI-native future. You will own the vendor security risk lifecycle, lead complex assessments of integrations with our most critical systems and data, and develop a team that makes clear, evidence-based risk decisions. You will also set the vision and build practical agentic workflows that improve how we gather evidence, assess risk, and follow through on remediation. Reporting to the Global Head of GRC, you will serve as their US-based deputy and provide GRC leadership and escalation coverage during US business hours. You will directly manage TPRM analysts together with other US-based GRC team members assigned to your organization. This role combines hands-on technical judgment, program ownership and people leadership. You will be based in the United States, preferably within the Eastern or Central timezones, with core working hours aligned to US business needs and clear handoffs with global colleagues. What you will do Run the day-to-day TPRM program operations from vendor discovery and risk tiering through due diligence, onboarding, continuous monitoring, remediation and exit. Maintain a reliable vendor inventory, policies, assessment standards, and service levels across DoorDash, Wolt, and Deliveroo, covering cloud, SaaS, business process outsourcing (BPO), and other critical suppliers. Lead assessments of vendors connected to crown jewel systems, including identity platforms, production cloud, source code and CI/CD, and sensitive-data platforms. Examine architecture, data flows, permissions, and control evidence. Use st

About the Team The Identity Governance team is responsible for managing the services and controls that deliver stable, secure, and efficient Identity & Access Management (IAM) across Crypto.com and its related entities. IAM controls are foundational to the organisation, ensuring the right individuals have the right access to the right resources, backed by robust audit trails. Role overview You'll lead a globally distributed Identity Governance team, owning the controls, risk assessments, and compliance posture that keep Crypto.com's identity ecosystem audit-ready. You'll set direction for your team's day-to-day work while staying hands-on with the highest-stakes risk assessments and stakeholder relationships yourself. Responsibilities: Manage and develop the Identity Governance team spanning APAC and EU time zones — set priorities, review work quality, and support career growth across the team. Establish, manage, and document effective IAM controls, including the evaluation, testing, and rollout of a new group-wide Identity and Access Management platform. Identify, assess, and document identity-related risks across key business processes. Manage identity lifecycle risks in alignment with the Operational Risk Management Framework. Partner with business, risk management, and compliance stakeholders to maintain compliance with Group Policies, risk standards, and regulatory obligations. Foster a strong risk and control culture across key business functions. Lead process deep-dive activities to map workflows, evaluate existing risks and controls, and identify control gaps. Coordinate across APAC, EU, and US working hours to ensure consistent stakeholder engagement. What success looks like: Control gaps identified in process deep-dives are closed within an agreed SLA. Team operates with clear ownership and consistent quality across regions. Clean audit ou

About the Role: We are seeking an experienced Risk Management professional to lead and strengthen the organisation's Operational Risk and Outsourcing Risk Management framework. The role will be responsible for identifying, assessing, monitoring, and mitigating operational and third-party risks across payment products, merchant acquiring, cross-border payments, and outsourced business operations. The incumbent will work closely with business, operations, compliance, technology, audit, and leadership teams to ensure adherence to regulatory requirements, network guidelines, and internal risk policies. Key Responsibilities Operational Risk Management: Develop, implement, and enhance the Operational Risk Management (ORM) framework, including Risk and Control Self-Assessments (RCSAs), across the organisation. Identify, assess, monitor, and mitigate operational risks arising from payment operations, merchant onboarding, transaction processing, and customer servicing. Drive corrective action plans arising from RCSA findings and control gaps. Monitor Key Risk Indicators (KRIs), operational losses, incidents, and control effectiveness. Lead root cause analysis and remediation for operational risk events. Own SOP and policy lifecycle management — including drafting, versioning, and periodic review — for all operational risk policies and procedures. Outsourcing Risk Management: Manage end-to-end outsourcing risk governance for third-party vendors involved in KYC verification, PAN validation, customer onboarding, payment processing, and other critical functions. Maintain and operate a vendor categorisation framework (IT/Non-IT, critical/non-critical outsourcing) and ensure risk assessments are calibrated to vendor tier and exposure. Ensure compliance with RBI Outsourcing Guidelines, PA Master Directions 2025, and all applicable regulatory requirements. Conduct vendor due diligence, risk assessments, performance reviews, and periodic audits. Monitor SLA adherence, control ef

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team Stripe MALPB operates in a highly complex, fast-moving regulatory environment. The Risk and Compliance team is responsible for ensuring that our expansion is grounded in a bulletproof governance framework that matches the speed of our technology. Having successfully established our foundational ERM policies, taxonomy, and risk registers, we are entering the integration phase. This team is building the future of "AI-Native" risk management—where governance frameworks are embedded into daily business operations through automated data pipelines, machine learning, and LLM orchestration. What you’ll do As the sole dedicated ERM Lead for Stripe MALPB, you will own the enterprise risk program end-to-end. This is a unique hybrid role designed for a technically fluent risk architect. Roughly 1/3rd of your time will be dedicated to ERM Integration and Execution: rolling out our mature risk framework to the First Line (1LoD), running the RCSA cycle, managing the control library, and synthesizing risk scorecards for executive and Board-level reporting. Roughly 2/3rds of your time will be dedicated to AI and Control Automation Design: acting as a hands-on developer to build and scale LLM tools, automated evidence-collection scripts, and real-time monitoring workflows that eliminate manual compliance overhead. Responsibilities ERM Framework Integration & Execution (1/3rd) Enterprise Rollout: Drive the cross-functional implementation and adoption o

At Asana, security is foundational to our mission of helping teams work together effortlessly. Our security team protects Asana’s employees, users, and customers by proactively addressing threats, ensuring compliance with legal and regulatory requirements, and fostering a culture of security throughout our product and operations. We are a team of security engineers and risk and compliance practitioners who build innovative safeguards and collaborate across the organization to build and maintain trust at scale. As the Third Party Risk Management Lead, you will be responsible for building and running Asana’s Third Party Risk Management (TPRM) program. You will own the end-to-end lifecycle of vendor security risk — from initial due diligence and risk tiering through ongoing monitoring and remediation. You will work closely with Procurement, Legal, Privacy, and Engineering teams to ensure that our third-party relationships are effectively assessed, tracked, and managed. This role is based in our Vancouver office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner. If you're interviewing for this role, your recruiter will share more about the in-office requirements. What you’ll achieve Own and scale Asana’s TPRM program: Design, implement, and continuously improve a risk-based framework for assessing and managing third-party vendors and service providers. Establish risk tiering criteria, assessment workflows, and governance processes that scale with business growth. Lead vendor security assessments: Conduct and oversee security due diligence for new and existing vendors, including reviewing SOC 2 reports, ISO 27001 certifications, security questionnaires (SIG, CAIQ), and other relevant documentation. Identify gaps and work with vendors to remediate findings. Dri

At Dawn Aerospace, we're redefining how the world accesses space. From industry-leading satellite propulsion systems to the development of the world's first reusable spaceplane designed to fly to space twice in one day, we're building technologies that are changing the future of aerospace. As we continue to grow across the United States, Europe and New Zealand, we operate in an increasingly complex environment of export controls, information security, customer requirements and regulatory obligations. We're looking for a Senior Compliance Officer to help build the governance, risk and compliance capability that enables Dawn Aerospace to scale securely and responsibly. This role is remote, but we have preference for someone based in or near Alabama. This is a broad, high-impact role where you'll work across Engineering, Operations, IT, Legal, Commercial and Corporate teams to translate complex regulatory, customer and security requirements into practical processes that support both compliance and execution. While export controls and trade compliance will be an immediate focus, you'll also help shape the governance, risk, information security and compliance frameworks that support Dawn Aerospace's continued international growth. This is an opportunity to build capability, solve complex problems and help define how compliance supports one of the world's most ambitious aerospace companies. What you'll do Lead Dawn Aerospace's export control and trade compliance activities, including licensing, record keeping, jurisdictional assessments and ongoing compliance obligations. Develop and continuously improve the company's governance, risk and compliance framework. Design and implement practical policies, procedures and internal controls that support both compliance and efficient business operations. Coordinate compliance with customer, contractual and regulatory obligations across multiple international jurisdictions. Develop and maintain compliance registers, risk registers,

About the Team OpenAI’s Legal team helps advance our mission by tackling novel legal issues in AI. Our team brings together professionals across technology, privacy, intellectual property, corporate, employment, tax, regulatory, and litigation. Our regulatory compliance work turns legal requirements into practical programs that support responsible AI development and deployment. About the Role As a Legal Program Manager focused on regulatory compliance, you will build and manage cross-functional programs that translate counsel’s guidance into practical, sustainable operations. Your initial focus may include content moderation and/or frontier AI governance, with the mix shaped by team priorities and your strengths. You will partner with internal and external counsel, other legal program managers, and technical and business teams to coordinate implementation, evidence collection, reporting, and ongoing compliance. You’ll build repeatable systems that scale across regulations, products, and jurisdictions, helping teams navigate emerging requirements with clarity and sound judgment. This full-time role is based in San Francisco, CA, or New York, NY. In this role, you will: Lead regulatory compliance programs end to end: define scope, owners, milestones, dependencies, risks, and escalation paths, and drive execution with counsel and cross-functional partners. Translate counsel’s regulatory guidance into repeatable workflows, controls, and documentation. Depending on your portfolio, this may include content moderation disclosures, transparency reporting, reporting and appeals workflows, or frontier AI model launch readiness, evaluation and risk-management evidence, and incident reporting. Build strong partnerships across Product, Engineering, User Operations, Governance, Risk and Compliance (GRC), Global Affairs, Communications, and Go-to-Market to align program priorities and deliverables. Support regulatory inquiries, audits and investigations with counsel, organizing ev

Role Overview You are a senior product leader who wants to shape how AI transforms IT and cyber risk management at scale. In this role, you will own one of the most strategic product areas in a global GRC SaaS platform, defining how organisations identify, assess, and act on cyber risk — and how CISOs and boards get the clarity they need when it matters most. You will set and drive the product vision, roadmap, and outcomes for IT & Cyber Risk on a multi-solution platform used by enterprises worldwide. You will partner closely with engineering, design, data science, and senior leaders to build AI-native capabilities that automate risk detection, prioritisation, and reporting. Your work will have high executive visibility, real strategic weight, and direct impact on how customers manage governance, risk, and compliance. Here’s a breakdown of what you’ll do (not all of it, just the important stuff) Lead the end-to-end product strategy and roadmap for IT & Cyber Risk, aligning to company objectives and broader platform direction. Design and deliver AI-powered features (LLMs, agents, ML models) that automate risk identification, assessment, and reporting for enterprise security and risk teams. Partner with engineering, data science, and design to define technical approaches, ship high-quality releases across web, mobile, and API, and iterate using product analytics. Develop deep market and customer insight by engaging regularly with CISOs, security leaders, and risk managers, and turn those insights into clear product bets. Define, track, and communicate product KPIs, AI performance metrics, and north star outcomes to senior stakeholders, including business cases for major investments. Work cross-functionally with Sales, Customer Success, Professional Services, and Marketing to ensure successful launches and adoption of new IT & Cyber Risk capabilities. These are the essentials you’ll need to get an interview 7+ years of product management experience, includi

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team The Stripe Security team is dedicated to improving the security of Stripe and its users. Our users trust us with some of their most sensitive information, and we make security a first-class consideration in everything we do. Security concerns are ever-evolving, creating an extremely dynamic environment for the Security team. The Security Governance, Risk, and Compliance (SGRC) team helps Stripe make informed security decisions, understand its risk and control posture, and represent its security program to internal and external stakeholders. The team also manages security risk arising from Stripe’s relationships with third parties by assessing their security controls, identifying and mitigating risk, and supporting informed onboarding and risk-acceptance decisions. Our work helps Stripe move quickly while maintaining clear and consistent security expectations. What you'll do Independently manage a portfolio of Third Party Security Risk Assessments (TPSRAs) for new engagements, renewals / reassessments, and material changes in relationship scope. Review security questionnaires, independent assurance reports, certifications, penetration-test results, and other evidence to evaluate third-party control effectiveness. Identify security gaps, determine proportionate remediation requirements, and clearly communicate findings to Stripe DRIs and cross-functional partners. Apply Stripe’s third-party security standards consistently, documenting assessme

Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About the Opportunity We are seeking a Senior Audit Manager to help lead the delivery of OKX’s internal audit portfolio across the APAC region. Reporting to the Head of Internal Audit, APAC, you will lead risk-based audits and advisory reviews covering operational, financial, regulatory, and technology-related risks. You will be responsible for the full audit lifecycle, from risk assessment and planning through fieldwork, reporting, and remediation monitoring. You will work closely with senior business stakeholders, risk and compliance teams, external auditors, and regulators to provide independent assurance over the effectiveness of governance, risk management, and internal controls. The successful candidate will have broad audit experience within financial services, fintech, cryptocurrency, or another highly regulated industry, together with a strong understanding of the risks associated with digital assets and blockchain technology. This role is based in Singapore. What You’ll Be Doing Partner with Internal Audit leadership and business stakeholders to develop risk-based and regulatory-focused audit pla

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. At Vanta, being an Enterprise SDR is first about hitting targets and driving revenue. It also means joining a community that’s committed to your success and career growth. We believe the future of our sales organization lies with our SDRs, so we invest heavily in enablement and career advancement. You’ll get the training, support and mentorship you need to excel, with a clear path to an Account Executive role. As an Enterprise SDR, you’ll partner with Account Executives, Solutions Engineers, Marketing and channel partners to create pipeline at large organizations (2,000+ employees). You’ll engage senior security, risk and compliance leaders who are under growing pressure from audits, security reviews, third-party risk and AI governance. You don’t need SaaS or cybersecurity experience to be great at this job. We’ll teach you the product, the tools and the process. What we can’t teach is drive, curiosity and coachability, and that’s what we’re hiring for. Great SDRs come from everywhere: commission- or tip-based roles, hospitality, retail, call centers, fundraising, recruiting, real estate, political campaigns, competitive athletics, or something they started on their own. Vanta is growing quickly and is profitable. We keep beating our growth targets while maintaining very strong NPS scores, so it’s an exciting time to join. If you’re hungry to learn and ready to work hard, we’d love to hear from you. What you’ll do as a Sales Development Representative at Vanta : Learn Vanta’s value proposition and Trust Management Platform, including compliance automation, continuous monitoring, Trust Center, questionnaire automation, vendor ri

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. At Vanta, being an Enterprise SDR is first about hitting targets and driving revenue. It also means joining a community that’s committed to your success and career growth. We believe the future of our sales organization lies with our SDRs, so we invest heavily in enablement and career advancement. You’ll get the training, support and mentorship you need to excel, with a clear path to an Account Executive role. As an Enterprise SDR, you’ll partner with Account Executives, Solutions Engineers, Marketing and channel partners to create pipeline at large organizations (2,000+ employees). You’ll engage senior security, risk and compliance leaders who are under growing pressure from audits, security reviews, third-party risk and AI governance. You don’t need SaaS or cybersecurity experience to be great at this job. We’ll teach you the product, the tools and the process. What we can’t teach is drive, curiosity and coachability, and that’s what we’re hiring for. Great SDRs come from everywhere: commission- or tip-based roles, hospitality, retail, call centers, fundraising, recruiting, real estate, political campaigns, competitive athletics, or something they started on their own. Vanta is growing quickly and is profitable. We keep beating our growth targets while maintaining very strong NPS scores, so it’s an exciting time to join. If you’re hungry to learn and ready to work hard, we’d love to hear from you. What you’ll do as a Sales Development Representative at Vanta: Learn Vanta’s value proposition and Trust Management Platform, including compliance automation, continuous monitoring, Trust Center, questionnaire automation, vendor ris