Iso 42001 Compliance Manager Jobs

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Senior Professional Services Technical Architect, Security at GitLab, you'll lead the design and implementation of secure enterprise solutions for Professional Services clients across AMER. You'll assess complex security architectures, guide security tool and CI/CD migrations, including legacy tools such as Jenkins, and implement GitLab security capabilities to help customers meet compliance frameworks such as NIST 800-53, ISO 27001, and SOC 2. This role requires depth in secure reference architecture design across cloud security, identity management, vulnerability management, and deployment choices

We're at a pivotal moment for both Tibber and the planet. When joining Tibber, you won’t just help scale a forward-thinking tech company - you’ll contribute to a real shift in how people consume electricity. With millions of smart devices connected to the Tibber platform (like electric vehicles and smart thermostats), we have one of the most unique energy trading portfolios on the market. We’re looking for a Senior Security Engineer to join us in making the energy transition happen - maybe that’s you? Job Mission 🚀 As a Senior Security Engineer, you'll play a key role in securing the platform that powers the energy transition for hundreds of thousands of homes. You'll be the technical backbone of our security posture - building controls, embedding security into how we build products, and making sure our engineers default to secure. What you'll do ✅ Secure the platform. Own the security posture of our cloud infrastructure and Kubernetes platform - identity and access, network segmentation, secrets management, encryption, workload hardening, logging, alerting and detection. Build guardrails so secure is the default path for our engineers. Embed security in how we build products. Partner with product teams on threat modelling and secure design reviews. Run and tune code, dependency and container scanning through to remediation, and coordinate external penetration tests. Turn compliance into engineering . Implement the technical controls behind our ISO/IEC 27001, NIS2 and NIST CSF work, automate evidence collection, and translate requirements into backlog items engineers can act on. Raise the bar on corporate IT security. Strengthen the security configuration of our identity provider, endpoint management, SaaS integrations and office networks. Own incident response for the technical estate. Maintain and exercise runbooks, lead technical investigation and containment, and drive learnings back into the platform. Make the whole company better at security. Share knowledge,

We take play seriously. We’re looking for curious adventurers ready to find their party, fueled by imagination and drive to build what’s never been built before. At Hasbro and Wizards of the Coast, you’ll collaborate with passionate teams to reimagine our iconic brands and create experiences that spark joy, connection, and community through the magic of play. This is your chance to shape legendary play that lasts a lifetime. At Hasbro, play is at the heart of everything we do, and so is making sure that play is safe. We are looking for an experienced quality, regulatory and compliance leader to head our EMEA team, driving product safety and technical compliance across Hasbro and licensed product. You will lead a specialist QA team, act as Hasbro's technical voice in the industry bodies that shape toy regulation, and partner with global stakeholders to ensure our products meet the highest safety standards in every market they reach. You will join a global QA team that is every bit as passionate about safety as we are about having fun. If you want to make a measurable impact on an iconic brand portfolio, we would like to hear from you. Key Responsibilities Represent Hasbro in industry and standardization bodies including TIE, TA, ATPA, BTHA, FJP, AFNOR, CEN and ISO, shaping proportionate regulation and standards for the company and the wider toy industry. Lead and develop the EMEA QA team, setting technical direction and providing authoritative interpretation of regulatory and licensing requirements. Monitor regulatory change across EMEA, assess business exposure, and lead engagement with industry associations to mitigate impact. Own the Regulatory Change Management Process for the region, ensuring new requirements are implemented on time and verified. Develop compliance strategies for complex markets, notably distributor territories and the GCC region including Saudi Arabia, and equip local teams

Who We Are Nuro believes self-driving vehicles are the most immediate and profound opportunity for AI to drive positive change in the physical world. Safer streets, more time for what matters, and easier access to the world around us—that’s why we’re building a universal autonomy platform: self-driving for all roads and all rides. Founded in 2016, Nuro is a physical AI company developing Level 4 autonomous driving technology for a wide range of vehicles, use cases, and markets. Powered by the Nuro Driver™, our universal autonomy platform enables the global mobility ecosystem to deploy autonomy at scale—from robotaxis and logistics fleets to personal vehicles. With years of real-world deployment experience and a flexible, partner-led business model, Nuro is working toward a future where millions of autonomous vehicles powered by our technology help make everyday life safer, easier, and more connected. Nuro has raised over $2B in capital from Uber, NVIDIA, Google, Softbank, Fidelity, T. Rowe Price, and other leading investors. About the Work Drive the system-level safety architecture and requirements for the Autonomy Hardware and Firmware of the Nuro Driver, ensuring compliance with automotive safety standards such as ISO 26262 and ISO 21448. Decompose vehicle-level Safety Goals into a cohesive Functional Safety Concept (FSC) and refine it into a detailed Technical Safety Concept (TSC), defining system-level safety mechanisms, fault detection and reaction strategies, and safe states. Develop the system-level SOTIF specification for the Autonomy Hardware and Firmware of the Nuro Driver, defining performance targets and acceptance criteria for safety-critical systems like Autonomy Sensors and Compute. Lead, perform, and review system-level safety analyses, including Hazard Analysis and Risk Assessment (HARA), Failure Mode and Effects Analysis (FMEA), and Fault Tree Analysis (FTA), Dependent Failure Analysis (DFA) to identify risks and deriv

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. Develops, evaluates, revises, and applies technical quality assurance protocols/methods to inspect and test in-process raw materials, production equipment, and finished products. Ensures activities and items are in compliance with both company quality assurance standards and applicable government regulations. Performs analysis and identifies trends in the inspection of finished products, in-process materials and bulk raw materials, and recommends corrective actions when necessary. Ensures that established manufacturing inspection, sampling and statistical process control procedures are followed. May assure compliance to in-house and/or external specifications and standards, such as GMPs and ISO regulations. Evaluates and analyzes the efforts in organizing, documenting, and interpreting inspection support documents and records. Partners with key team members to supervise data and continuously improve critical metrics, leveraging Generative AI insights where applicable. About Micron Technology, Inc. We are an industry leader in innovative memory and storage solutions transforming how the world uses information to enrich life for all . With a relentless focus on our customers, technology leadership, and manufacturing and operational excellence, Micron delivers a rich portfolio of high-performance DRAM, NAND, and NOR memory and storage products through our Micron® and Crucial® brands. Every day, the innovations that our pe

Zoox is on an ambitious journey to develop a full-stack autonomous mobility solution for cities and deploy such a robotaxi solution safely and reliably. The System Design and Mission Assurance (SDMA) team plays a foundational role in the company's success, responsible for constructing the safety case and fail-operational design for our autonomous driving robots before public road deployment. We are seeking a System Safety Engineer to perform safety analyses of complex hardware and software systems, specifically Sensing and Perception Systems. You will work across hardware and software domains to develop comprehensive system safety requirements and metrics that ensure safe, fail operational and reliable sensing capabilities for our autonomous vehicle platform. In this role, you will: Define safety requirements for sensing (e.g. camera, lidar, radar) and perception (sensor fusion, ML models) subsystems Lead cross-functional technical projects across Software, Hardware, Operations, Data Science, V&V teams to ensure we have the appropriate data and solutions to support our safety arguments Collaborate with perception, hardware, software, firmware and other systems engineering teams to design safety mechanisms by leveraging ISO 26262 (e.g HARAs, Functional Safety Concepts, etc.) and SOTIF (ISO 21448) standards Work with partner teams to develop safe, fail operational, and cost-optimized, next-generation sensing architectures and guide the selection of next-generation sensors Analyze field and simulation data to root cause issues, identify next steps or validate assumptions Leverage AI/LLM tools to accelerate analysis and automate repetitive processes, improving team efficiency Qualifications BS or MS in a related technical field, such as Electrical/Electronics Engineering, Computer Engineering, Mechanical Engineering, Compu

About the Team Governance, Risk, and Compliance (GRC) is foundational to Security delivering mission outcomes at OpenAI. The GRC team provides security assurances and builds compliance for OpenAI’s technology, people, and products. We are technical in what we build but operational in how we do our work, and we partner deeply with Product, Security, Legal, Privacy, GTM, and Field Security to help OpenAI move quickly while maintaining trust with customers, auditors, regulators, and the public. About the Role We are looking for an experienced Product Lifecycle Assurance IC to help scale OpenAI’s GRC function across our product stack to ensure products address customer and regulatory compliance requirements at launch and regressions are detected promptly and corrected. You will partner closely with Product, Security, Legal, and Privacy teams to make sure OpenAI can move quickly while maintaining our security, privacy and compliance claims and giving customers, auditors, and regulators assurance about how OpenAI handles user data. You are responsible for product assurance end-to-end from inception to post-launch (continuous) monitoring. You leverage existing workflows, reviews, and data and enhance, augment and build the components needed to create an end-to-end product assurance program. This role is not about supporting SOC or ISO audits; it's a highly cross-functional and deeply technical operations role to ensure that OAI products meet the compliance bar at launch, regressions are prevented and detected, and our compliance state can be evidenced. This role also helps ensure that our product launch governance program operates effectively across key safety, privacy, legal and security stakeholders and lessons-learned from incidents and regressions are used to improve the program. You or in partnership with engineering teams, build key controls in our infrastructure stack, developer workflows and launch tooling to provide developers with guardrails, perform CI/CD confor

The opportunity We're looking for a Product Cybersecurity Engineer to help ensure that Polestar's products meet global cybersecurity standards and regulatory requirements throughout the vehicle lifecycle. In this role, you will work across concept, development, production, and post-launch operations, contributing to the implementation and validation of cybersecurity requirements that help safeguard our vehicle systems. Let us describe the challenge we offer As a Product Cybersecurity Engineer, you will play a key role in defining, integrating, and verifying technical security controls across our products. Working closely with R&D, suppliers, and cross-functional teams, you will support secure product development through threat analysis, secure design, cybersecurity validation, and regulatory compliance activities. This role is located at our HQ in Gothenburg, Sweden. What you'll do You will be responsible for implementing and validating cybersecurity requirements across the vehicle lifecycle while supporting compliance with standards and regulations such as ISO/SAE 21434 and UNECE R155. This includes: Define, decompose, trace, and maintain product cybersecurity requirements and assurance cases. Perform and/or support Threat Analysis and Risk Assessments (TARA) and risk treatment activities. Plan and execute cybersecurity validation and verification activities, including testing and reviews. Review supplier cybersecurity work products and support the closure of identified findings. Support the generation of technical evidence required for regulatory audits and type approvals. Collaborate with system architects, software and hardware teams, and functional safety teams to ensure secure integration. Contribute to the continuous improvement of security engineering methods, tools, and templates. Who you are You are an experienced cybersecurity engineer with a strong background in product or embedded cybersecurity. You enjoy working collaboratively across disciplines and a

About the Team Governance, Risk, and Compliance (GRC) is foundational to Security delivering mission outcomes at OpenAI. The GRC team provides security assurances and builds compliance for OpenAI’s technology, people, and products. We are technical in what we build but operational in how we do our work, and we partner deeply with Product, Security, Legal, Privacy, GTM, and Field Security to help OpenAI move quickly while maintaining trust with customers, auditors, regulators, and the public. About the Role We are looking for an experienced Product Lifecycle Assurance IC to help scale OpenAI’s GRC function across our product stack to ensure products address customer and regulatory compliance requirements at launch and regressions are detected promptly and corrected. You will partner closely with Product, Security, Legal, and Privacy teams to make sure OpenAI can move quickly while maintaining our security, privacy and compliance claims and giving customers, auditors, and regulators assurance about how OpenAI handles user data. You are responsible for product assurance end-to-end from inception to post-launch (continuous) monitoring. You leverage existing workflows, reviews, and data and enhance, augment and build the components needed to create an end-to-end product assurance program. This role is not about supporting SOC or ISO audits; it's a highly cross-functional and deeply technical operations role to ensure that OAI products meet the compliance bar at launch, regressions are prevented and detected, and our compliance state can be evidenced. This role also helps ensure that our product launch governance program operates effectively across key safety, privacy, legal and security stakeholders and lessons-learned from incidents and regressions are used to improve the program. You or in partnership with engineering teams, build key controls in our infrastructure stack, developer workflows and launch tooling to provide developers with guardrails, perform CI/CD confor

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. Are you ready to join a world-class team and make a tangible impact on the environment? As an Environmental Engineer at Micron, you will have the opportunity to work on ambitious projects, ensuring flawless compliance with environmental regulations. You will collaborate with exceptionally talented teams to successfully implement environmental programs that build the future of our operations. Key Responsibilities Support federal and New York State environmental permits, renewals, modifications, and agency submissions. Maintain compliance with regulations covering wetlands, streams, stormwater, air, wastewater, hazardous waste, spill prevention, and protected species. Conduct field inspections, document conditions, lead all aspects of corrective actions, and coordinate with contractors and consultants. Lead support activities related to SWPPP implementation, stormwater inspections, erosion and sediment control, and construction BMPs. Partner with engineering, construction, facilities, legal, sustainability, and EHS teams to manage environmental risks. Support incident investigations, spill reporting, corrective actions, and ongoing improvement efforts. Support ISO 14001 environmental management programs. Apply AI tools to improve administrative efficiency and data collection. Minimum Requirements Bachelor's degree or equivalent experience in Environmental Engineerin

Strength in Trust OneTrust’s mission is to enable innovation through the responsible use of data and AI. We believe that ensuring data is trusted shouldn’t slow teams down—it should accelerate what’s possible. This led us to develop the first technology platform for responsible data use in 2016. Today, with AI representing the latest and most impactful expansion of data yet, OneTrust is once again redefining what responsible innovation looks like. OneTrust, the AI‑Ready Governance Platform™, unifies regulatory intelligence, automation, and connected governance workflows so businesses can continue to move at the speed of AI while ensuring good governance to prevent data misuse at scale. Trusted by thousands of organizations worldwide, OneTrust is shaping the future where trusted data becomes a transformative force for business and society. The Challenge We are looking for a dynamic Senior Information Security GRC Analyst to support IT and InfoSec by performing various governance, risk, and compliance activities as part of the OneTrust InfoSec GRC team. Your Mission Customer Security Assurance & Questionnaires Own a high volume of end-to-end completion of customer security questionnaires (CAQs) , RFP security sections, and other assurance artifacts (e.g., SIG, CAIQ, custom questionnaires). Provide accurate, consistent, and defensible responses by leveraging internal evidence repositories (SOC reports, ISO certificates, policies, standards, diagrams, pen test summaries, etc.). Partner with internal stakeholders (Sales, Marketing, Customer Success, Security, Engineering, Privacy, Legal, Compliance, Product) to validate responses and resolve gaps. Customer Engagement & Security Discussions Meet with customers and prospects to explain security controls, risk posture, and compliance commitments . Present security topics with confidence and clarity—tailoring depth for technical and non-technical audiences. Support Sales and Customer Success by addressin

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role We are hiring an Energy Scheduling & Portfolio Lead to own energy availability across Anthropic's non-cloud data center portfolio: contracted and available energy against planned compute, and the risk to it. This one central scheduling and portfolio role holds the live view of energy availability risk and energy availability need for workload management. You will be our counterpart to the LSEs, QSEs, scheduling coordinators, and suppliers in electricity and gas markets across jurisdictions; forecasting is an instrument of that view. You schedule and manage physical energy delivery — not financial instruments — including how much gas the portfolio needs to schedule, and keep energy supply and the workload plan in step with workload and site planning, energy origination, and data center operations. ESA counterparties operate the behind-the-meter plants; you manage their performance and our exposure. This role will also build processes and structures to ultimately support asset management across our energy portfolio. You are this function's first dedicated owner and will build its models and processes from zero. Responsibilities: Own the live view of energy availability risk and need: contracted, available, and committed energy and capacity at each site against planned load and ramp, by month and by hour where it matters; keep it current as deals sign, sites come online, and plans change, and close gaps and use surpluses with workload and site planning and energy origination. Be the operational counterpart to our LSEs, QSEs, scheduling coordinators, and retail and wholesale suppliers in domestic ISO/RTOs, including ERC

Most security assurance work is reactive: a customer asks, a team scrambles, an answer goes out. This role exists to end that cycle. As a Senior Staff Analyst, you’ll own a named portfolio of our most significant customers from a security perspective, and get ahead of what they need — their regulatory environment, their audit calendar, their risk appetite, their control expectations — well enough to have the evidence ready before the request arrives. You’ll lead customer security audits hands-on, sit across from customer security teams as a peer rather than a form-filler, and build account security plans that make the next assessment predictable instead of painful. This is deliberately a hands-on senior individual contributor role. You’ll spend your time in audits, in customer conversations, and in the detail of controls and evidence — not in a management chain. If you’ve got deep SOC 2 and ISO 27001 knowledge, real technical range across cloud architecture, identity and vulnerability management, and the presence to hold a room with a sceptical CISO, this is a portfolio you can genuinely own. Here’s a breakdown of what you’ll do (not all of it, just the important stuff): Own a portfolio of strategic accounts as their dedicated security point of contact, building durable relationships with their security, risk, compliance and procurement teams. Lead customer security audits and assessments hands-on — scoping, preparing evidence, running the sessions, defending control design and driving findings to closure with internal owners. Build and maintain an account security plan for each account: their frameworks and regulators, audit and reassessment cycles, known concerns, open items and the roadmap commitments they care about. Anticipate requirements before they’re raised, tracking regulatory change, industry expectations and each account’s compliance calendar so documentation and evidence are staged in advance. Act

Abbott is a global healthcare leader that helps people live more fully at all stages of life. Our portfolio of life-changing technologies spans the spectrum of healthcare, with leading businesses and products in diagnostics, medical devices, nutritionals and branded generic medicines. Our 115,000 colleagues serve people in more than 160 countries. JOB DESCRIPTION: Grow your career while continuing Exact Sciences’ inspiring work. Changing roles within the company allows you to develop your skills while changing the future of cancer in a new way. Schedule - Monday - Friday 8 am -4:30/5 PST Position Overview This role is responsible for diagnosing and resolving failures in enterprise laboratory instruments and automation systems, conducting root cause investigations, and escalating service issues to minimize downtime. It includes performing routine preventive maintenance and calibrations to ensure equipment reliability and compliance with service standards. The position requires accurate documentation aligned with Good Documentation Practices (GDP) and regulatory requirements such as OSHA, FDA, ISO, and CLIA. Success in this role involves developing technical expertise, training others, and collaborating across teams and vendors to support troubleshooting and project execution. Flexibility, commitment to quality, and a focus on process improvement—including SOP development and workflow optimization—are essential. Key Accountabilities: Include, but are not limited to, the following: Troubleshooting & Repair: Under general supervision, diagnose, repair, and resolve failures following established procedures on instrumentation and automation systems within the laboratory by applying technical expertise to restore functionality. Escalate unresolved or complex issues to senior s

Job Title Site Leader (Director), Operations Quality Assurance- Job Description The Site Leader (Director), Operations Quality Assurance is responsible for leading the Quality function across the Pune (Chakan) manufacturing sites. This role provides strategic and operational leadership to ensure all medical devices, manufacturing processes, and quality system activities comply with applicable regulatory requirements, Philips standards, and business objectives. Your Role: Lead all Operations Quality Assurance activities across the Pune (Chakan) manufacturing sites, ensuring compliance, product quality, patient safety, and operations quality performance. Accountable for developing and executing the Operations Quality Strategy, translating enterprise quality objectives into measurable site-level priorities/results, driving a culture of quality and compliance, ensuring inspection readiness, and continuously improving quality performance across the sites. As the senior Quality leader and designated Quality Management Representative, the Director represents the organization during regulatory inspections/external audits, ensures the effectiveness and compliance of the Quality Management System and partners closely with Operations, R&D, Regulatory Affairs, Supply Chain, and Business Leadership to ensure product quality, patient safety, and business continuity. Ensure all products, manufacturing processes, and quality system activities comply with FDA regulations, ISO 13485, ISO 14971, MDSAP, EU MDR, and other applicable global requirements. Lead and represent the sites during FDA inspections, Notified Body audits, customer audits, and regulatory authority interactions, maintaining a continuous state of inspection readiness. Drive timely resolution of audit findings, compliance gaps, nonconformances, and CAPA act