Iso 42001 Compliance Manager Jobs

At Kailera, we are bold, authentic and committed to our mission of developing therapies that give people the power to transform their lives and elevate their overall health. Rooted in an entrepreneurial spirit and a team-oriented culture, we are working together to advance Kailera’s mission to advance novel therapies for obesity and related conditions. We are passionate about creating an inclusive workplace that promotes collaboration, integrity, and excellence. As we expand, we seek the most talented individuals with diverse backgrounds, cultures, perspectives, and experiences to join our team. What You’ll Do: We are seeking an experienced Associate Director, Device Engineering, to lead the development and launch of drug-device combination products, with a strong emphasis on autoinjectors, pre-filled syringes, and multidose pens. This role will drive cross-functional collaboration across CMC, quality, regulatory, manufacturing, clinical, and commercial teams to ensure robust product development aligned with meeting patient needs, global standards, and regulatory expectations. Required location: Waltham, MA (hub-based, onsite 3-4 days per week) OR Remote (home-based, onsite at a hub 1 week every other month). Responsibilities: Lead combination product development projects (prefilled syringes, autoinjectors, and/or multidose pens) from concept through commercialization Build and execute project plans with clearly defined risks and milestones Develop device and combination product requirements, including user and stakeholder needs and technical requirements, and ensure appropriate engineering translation and subsequent verification and validation of requirements Oversee and ensure compliance with design controls per FDA and ISO 13485 requirements Manage risk management activities in accordance with ISO 14971, including hazard analysis, FMEA, and risk mitigation strategies Drive design verification and validation activities, including test method d

Senior IT Administrator Location: Remote, USA About Syllo Syllo is defining the Litigation AI category. We are the first unified platform designed to autonomously manage the entire litigation lifecycle end to end. Founded in 2019 by a team of litigators and engineers, Syllo enables legal teams to securely harness the power of AI across any matter, regardless of complexity or scale. Our technology supports Fortune 500 companies and AmLaw 200 firms in managing their most complex litigation portfolios. Awarded ILTA Transformative Project of the Year and ALM eDiscovery Technology of the Year for 2026, we are the market leader in enterprise grade litigation AI. Backed by top tier VCs, we empower enterprise legal departments to move faster, mitigate risk, and push the boundaries of what technology can achieve. About the role Own our company-wide IT infrastructure and power AI-driven support across a fast-scaling team. In this role, you’ll take ownership of Syllo's corporate IT infrastructure. You will manage our hardware fleet, identity and access management, device provisioning workflows, and SaaS applications—ensuring our distributed team remains secure, productive, and supported. You’ll also leverage modern AI capabilities to scale internal IT support, automate issue reporting, and serve as a key technical partner as our team integrates new AI workflows into our tooling stack. Working closely with Security Engineering, you’ll embed the administrative and endpoint controls necessary to maintain our ISO 27001 and SOC 2 compliance standards. We are looking for a hands-on IT leader who brings strong technical judgment, proactive problem-solving, and a dedication to creating a smooth, secure employee experience. What you will do Own the corporate IT estate: Manage identity, endpoint devices, SaaS administration, and security posture across a distributed, multi-OS workforce. Scale support with AI: Implement and manage AI-driven workflows to automate ticketing, self-service s

At Asana, security is foundational to our mission of helping teams work together effortlessly. Our security team protects Asana’s employees, users, and customers by proactively addressing threats, ensuring compliance with legal and regulatory requirements, and fostering a culture of security throughout our product and operations. We are a team of security engineers and risk and compliance practitioners who build innovative safeguards and collaborate across the organization to build and maintain trust at scale. As the Third Party Risk Management Lead, you will be responsible for building and running Asana’s Third Party Risk Management (TPRM) program. You will own the end-to-end lifecycle of vendor security risk — from initial due diligence and risk tiering through ongoing monitoring and remediation. You will work closely with Procurement, Legal, Privacy, and Engineering teams to ensure that our third-party relationships are effectively assessed, tracked, and managed. This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. Our employees in Poland are employed under a contract of employment. What you’ll achieve Own and scale Asana’s TPRM program: Design, implement, and continuously improve a risk-based framework for assessing and managing third-party vendors and service providers. Establish risk tiering criteria, assessment workflows, and governance processes that scale with business growth. Lead vendor security assessments: Conduct and oversee security due diligence for new and existing vendors, including reviewing SOC 2 reports, ISO 27001 certifications, security questionnaires (SIG, CAIQ), and other relevant documentation. Identify gaps and work with vendors to remediate findings. Drive rem

At Asana, security is foundational to our mission of helping humanity thrive by enabling the world's teams to work together effortlessly. Our security team protects Asana's employees, users, and customers by proactively addressing threats and fostering a culture of security throughout our product and operations. We are looking for a collaborative, innovative Group Tech Lead to join our security organization in Warsaw. This is a senior technical leadership role that sits at the intersection of offensive and defensive security — a true purple team visionary who will design and drive Asana's threat operations strategy from the ground up. You will set the long-term technical direction for how we detect, emulate, respond to, and continuously improve our defences against real-world adversaries. This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. We offer a Contract of Employment (UoP) for our employees in Poland. What you’ll achieve Purple Team Strategy & Technical Leadership: Define and own the technical strategy for a fully integrated purple team function, bridging offensive (red team) and defensive (blue team) capabilities into a cohesive, intelligence-driven program. Adversary Emulation: Design and implement a structured adversary emulation programme based on real threat intelligence, ensuring red team exercises directly improve blue team detection and response playbooks while establishing continuous feedback loops. Security Maturity & Industry Standards: Lead Asana's security maturity journey, defining a roadmap that progressively advances capabilities toward frameworks and standards such as NIST CSF, ISO 27001, SOC 2, and MITRE ATT&CK maturity l

Datadog’s Implementation Services team helps customers implement and deploy Datadog quickly and successfully. Our team of architects leads the discovery, design, build, and launch of the Datadog platform to help customers accelerate time to value and get the most out of their investment. As a Senior Services Architect focused on Security and Cloud SIEM, you will help customers design, implement, and operationalize Datadog’s security capabilities across cloud, infrastructure, application, and log data sources. You will lead structured, outcome-driven professional services engagements delivered through a day-based professional services delivery model, partnering directly with customers through co-development working sessions, architecture workshops, implementation planning, and operational handoff. This role is ideal for someone who combines customer-facing consulting experience with strong cybersecurity knowledge, hands-on Cloud SIEM implementation skills, and an understanding of security control frameworks such as NIST 800-53, the NIST Cybersecurity Framework, CIS Controls, MITRE ATT&CK, SOC 2, PCI, HIPAA, ISO 27001, or similar standards. At Datadog, we place value in our office culture — the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Design and guide execution of Datadog implementations, focusing on Security and Cloud SIEM deployment, including discovery, requirements gathering, technical architecture, deployment planning, and launch. Partner with customers to map security requirements, controls, and monitoring objectives to Datadog capabilities, including frameworks such as NIST 800-53, NIST Cybersecurity Framework, CIS Controls, MITRE ATT&CK, SOC 2, PCI, HIPAA, ISO 27001, or similar standards. Advise customers on security data strategy, including log source prioritization, parsing, normalizat

Hello potential future Oatly employee. It’s us, the original oatmilk company that started in Sweden back 25 or so years ago and has since expanded to the U.S. where we’ve continued growing at a rate such that we need more brilliant minds to come work with us to keep the momentum going and the oatmilk flowing. Sustainability, health, and transparency are the core values that guide everything we do. Basically, we exist to help people live a healthier life without recklessly taxing the planet’s resources in the process, and to change the food system for the better. We drive that change through the power of oats and through a significant reduction in cow’s milk consumption. If any of this resonates with you, then maybe you’d like to work for Oatly, too. Now onto the formal stuff. We are looking for a SQA Manager (External Manufacturing & Warehouse/Logistics) North America to join our team. This role will be responsible for ensuring food safety, quality, and regulatory compliance across external manufacturing partners, warehouses, and logistics providers supporting Oatly products in North America. Reporting to the Global Director, SQA, this role manages supplier quality and food safety for processes and products, ensuring products produced at Co Manufacturers are appropriately risk assessed, approved, released, or blocked in accordance with Oatly requirements, GFSI standards (BRCGS/SQF/ISO 22000), and FDA/FSMA Regulatory requirements. Here are the things we want to hire you to do: Supplier Quality Management – external manufacturing partners, warehouse and logistics Approve and manage external manufacturing, warehouse, and logistics partners from a quality and food safety perspective Ensure supplier compliance with Oatly standards, GFSI schemes, and regulatory requirements Approve new production lines (commissioning/validation) at new and existing external manufacturers Conduct supplier risk assessments, including HACCP and food safety plan reviews Own supplier audits, d

Hello potential future Oatly employee. It’s us, the original oatmilk company that started in Sweden back 25 or so years ago and has since expanded to the U.S. where we’ve continued growing at a rate such that we need more brilliant minds to come work with us to keep the momentum going and the oatmilk flowing. Sustainability, health, and transparency are the core values that guide everything we do. Basically, we exist to help people live a healthier life without recklessly taxing the planet’s resources in the process, and to change the food system for the better. We drive that change through the power of oats and through a significant reduction in cow’s milk consumption. If any of this resonates with you, then maybe you’d like to work for Oatly, too. Now onto the formal stuff. We are looking for a SQA Manager (Direct Material & Release) North America to join our team. This role will be responsible for ensuring food safety, quality, and regulatory compliance of direct materials used in Oatly products in North America. This role manages supplier quality and food safety for direct materials and serves as release authority, ensuring products produced at Co Manufacturers are risk assessed, approved, released, or blocked in accordance with Oatly requirements, GFSI standards (BRCGS/SQF/ISO 22000), and FDA/FSMA Regulatory requirements. Here are the things we want to hire you to do: Supplier Quality Management – Direct Materials (raw material and packaging material) Approve and manage direct material suppliers from a quality and food safety perspective in line with applicable regulatory and Oatly requirements Ensure supplier compliance with Oatly standards, GFSI schemes, and regulatory requirements Conduct supplier risk assessments, including HACCP and food safety plan reviews Own supplier audits, deviation management, and CAPA follow-up Drive supplier performance through KPIs and supplier development plans, in line with global strategy Release & Positive Release Management A

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. Responsibilities and Tasks: •T o be 4/3 night shift. • Cleanroom AMC scopes including MA/MB/MC sample preparation and sampling schedule. • Cleanroom ESD measurement for EPA management. • Cleanroom particle sampling and metal swab sampling. • Cleanroom material test and verification report summary. • Responsible to sensors management, include excursion follow up, trouble shoot, maintenance/calibration, performance check and spare parts management/purchase. • Responsible to cleanroom 6S, safety, audit, data accuracy and metrics performance. • Efficiently control and response cleanroom ISO requirement. • Responsible to pre-task/SOP as well as lead excursions/OCAP follow up. 作為美光科技（ Micron Technology, Inc. ）的 MQC （材料品質控制）污染控制輪班工程師，您將與污染控制（ CC ）團隊以及其他部門合作，負責啟動、維護並控制潔淨室的潔淨度與空氣分子污染物（ AMC ），以提供穩定且高品質的生產環境。 您將參與污染控制知識的開發、設備故障排除、統計製程控制（ SPC ）管理、回應安全與稽核要求，並負責潔淨室環境的穩定性。污染控制的範疇

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. As Vanta’s Customer Success Manager, Commercial you will play a pivotal role in guiding customers through their security and compliance journeys with Vanta's specialized solutions. By combining your customer-centric approach with expertise in Vanta's products and security best practices, you will contribute to the overall success and satisfaction of Vanta's customers in achieving robust security and compliance outcomes through retention of customers and health of the book of business. Vanta’s success over the last year was exponential and we are now working to solve the problem of how to provide world-class customer experience to as many security-minded software companies as possible. As Vanta’s Enterprise Customer Success Manager, you will be the voice of Vanta, responsible for helping keep our customers moving toward their goals and ultimately successful and happy. What you’ll do as a Customer Success Manager, Commercial at Vanta: Lead all post-sales activities for Vanta’s mid-market customers through onboarding, implementation, product expertise, renewal and identify upsell opportunities. Partner with Account Managers to drive renewal and expansion opportunities within your book of business. Act as the voice of the customer within Vanta. Serve as the point of contact for your customers and drive them to specific business outcomes on their timelines. Become a product expert on Vanta and how our platform can be used to improve security posture through our compliance offerings (SOC 2, ISO 27001, GDPR, HIPAA, USDP and Custom Frameworks), Trust Reports, and Risk Management solution. Provide insightful technical answers and recomm

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive. Lyft connects people to transportation to change the way we live and get around our communities. Our drivers and passengers entrust Lyft with their personal information and travel details to get where they are going and expect us to keep that data safe. Lyft's Customer Trust team ensures that appropriate security controls and data protections are applied to meet our compliance requirements and customer contractual commitments. We conduct security risk assessments, consult with organizational stakeholders, monitor and continuously improve Lyft's Information Security program, facilitate third-party security audits, work with engineering teams to implement, automate, and monitor security controls, develop policies, and advise on all matters related to information security assurance. We are looking for a highly motivated, organized, and detail-oriented individual to join our Customer Trust team. As a senior member of this team, you will own a portfolio of concurrent, multi-program compliance efforts and help ensure Lyft meets its enterprise promises and contractual commitments to customers on security and privacy across global markets. You'll manage relationships with external auditors and internal stakeholders, scale our program through efficient processes and automation, and serve as a trusted advisor on technical compliance matters spanning North America, the EU, and the UK. Responsibilities: Program & Audit Ownership Own and lead our ISO 27001 compliance program end-to-end, from certification planning and internal audit through surveillance cycles and Statement of Applicability updates Drive execution across our multi-program compliance portfolio spanning SOC 2, PCI DSS, HIPAA, and NIST CSF, alongside global and international frameworks including UK Cyber Essentials, Spain ENS, and emerging EU re

POSITION SUMMARY The Consultant is responsible for supporting the Consulting Services Team in delivering cybersecurity, privacy, and compliance services across a diverse portfolio of client engagements. This role operates as a flexible, deployable resource, contributing to multiple concurrent or sequential engagements based on business needs. This role requires proactive initiative to study, ask questions, and rapidly learn the organization’s solutions, methodologies, and delivery standards. Consultants must be comfortable transitioning between engagements, adapting quickly to new client environments, and delivering value immediately. Consultants focus on executing client deliverables, enhancing service quality, and improving project efficiency under the guidance of senior team members. They are expected to develop broad subject matter expertise, contribute to process improvements, and build trusted relationships across a variety of clients and internal teams. SPECIFIC JOB RESPONSIBILITIES Serve as a deployable consulting resource, supporting multiple client engagements across varying industries, with a focus on healthcare. Adapt quickly to new client environments, priorities, and team structures while maintaining high-quality delivery. Support the execution of cybersecurity and compliance consulting engagements under senior leadership guidance. Work closely with clients to collect data, conduct risk assessments, gap analyses, and document findings. Assist in evaluating client security postures, including vulnerability management, compliance alignment, and risk exposure. Develop and contribute to recommendations aligned with industry frameworks such as NIST, ISO 27001, CIS Controls, and HIPAA. Support clients in designing and implementing security controls, policies, and procedures.

Senior Compliance Specialist Position Description SingleStore is building a real-time data platform that helps organizations transact, analyze and act on data in a single system. We are committed to operating with strong security, privacy and resilience standards across our products, services and internal operations. We are seeking an experienced and highly motivated Senior Compliance Specialist to help scale our security, privacy and compliance programs. This role will be responsible for maintaining key certifications, driving cross-functional compliance initiatives, overseeing development and management of our privacy program, supporting compliance with the Digital Operational Resilience Act (DORA), and helping mature our Business Continuity Management System (BCMS). The ideal candidate is practical, organized and collaborative, with experience translating regulatory and framework requirements into durable operational processes across technical and business teams. Job Responsibilities Support governance activities across the security, privacy and compliance program, including maintaining Information Security Management System documentation, evidence, policies, procedures and audit trails. Help maintain and improve active certifications and attestations such as ISO/IEC 27001, SOC 2 Type II, HIPAA and PCI DSS, while coordinating with stakeholders across the business to ensure ongoing compliance. Drive readiness efforts for new compliance objectives, certifications and customer-driven assurance requirements. Participate in enterprise risk management activities, including risk methodology, risk assessments, treatment planning and follow-up with risk owners. Oversee the development, implementation and ongoing management of SingleStore’s privacy program in partnership with Legal, Security, IT and business stakeholders. Support compliance with applicable privacy and data protection requirements, including operationalizing controls and processes needed to meet regu

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. 職務概要 当社EHS（Environment, Health & Safety）部門の一員として、世界最先端の半導体製造施設における安全管理業務を担当していただきます。本ポジションでは、設備運転、保守、改造工事、建設プロジェクトなど、多様な業務に関わる安全リスクの低減を通じて、従業員および請負業者が安心して働ける職場環境の実現を推進します。Micronではグローバル共通の高い安全基準を採用しており、国内外の専門家との連携を通じて、最先端の安全管理手法やベストプラクティスを学びながら成長できる環境があります。また、安全を単なる法令遵守に留めるのではなく、事業継続や組織文化の重要な基盤として捉え、現場に近い立場から事業に貢献できることも、本ポジションの大きな魅力です。世界レベルの製造現場で経験を積みながら、自身の専門性を高め、安全文化の構築に主体的に関わりたい方を歓迎します。 主な業務内容 ガス設備・化学物質・プロセス安全に関する安全基準・手順の策定、維持、改善 ガス設備、化学物質取扱い、プロセスにおけるリスクアセスメントの実施および是正措置の推進 労働安全衛生法、化学物質管理、消防法、高圧ガス保安法など関連法令・規格に基づくコンプライアンス対応 現場での安全監査、点検、事故・ヒヤリハット事例の分析と再発防止策の立案 従業員・協力会社へのガス安全・化学安全教育・トレーニングの企画・実施 新規化学物質導入、ガス設備導入、プロセス変更時の安全評価および承認プロセスへの参画 グローバルEHS基準との整合性確保、関連部門や社内外ステークホルダーとの連携 グローバル基準、関連する国際規格（例：ISO、JIS、NFPA 等）に基づく設計レビュー 応募資格 学士号以上を有する方 専攻分野は問いませんが、化学、プロセス、または関連分野において、EHS業務に活かせる知識または実務経験を有する方 日本語能力として、JLPT N3 以上を必須とし、N2 以上の資格保持者を歓迎します 労働安全衛生法、高圧ガス保安法、化学物質管理に関する法規知識 製造業・プラント・化学設備・ガス設備における安全管理経験（歓迎） リスクアセスメント、事故調査、是正措置の実務経験 （歓迎）危険物取扱者、高圧ガス製造保安責任者、EHS関連資格（例：ISO45001内部監査員） 求める人物像 安全文化の醸成に積極的に取り組める方 現場と密に連携し、問題解決と改善提案を主体的に実行できる方 分析的思考力とプロジェクト管理能力を持ち、自律的に業務を遂行できる方 グローバル基準や最新の化学・安全技術に関心を持ち、継続的に学べる方 英語によるコミュニケーションができる方 コミュニケーション能力、チームでの協働力が高い方 About Micron Technolo

SYNOPSIS: The Manufacturing Co-Op role is designed for high school juniors and seniors seeking entry-level experience in production. As a Co-Op, you will perform various tasks associated with assembly, ensuring the quality of your work. This position offers the flexibility to work in teams, small batch production, or flow lines. This opportunity aims to provide valuable hands-on experience in production, with the potential for future apprenticeship opportunities. Projected start date: Fall 2026 RESPONSIBILITIES: May be required to operate various hand tools and other equipment. Has the ability to read and understand production documentation and drawings. Understands basic electronics concepts and can follow wiring schematics. Performs final assembly, electrical testing, and packaging of various assemblies Performs screening and separation of various parts Responsible for recording assembly time data and completion of all associated routing, quality inspections, and other related forms Performs miscellaneous assigned tasks Assist in other Production areas as needed Focus on increasing productivity in all activities Follow necessary PPE requirements, appropriate ISO specifications and company procedures. Performs other related duties as assigned. QUALIFICATIONS: Must be a junior or senior in high school. Must be at least 16 years of age by the start of the role. Strong organizational skills. Ability to read and comprehend English written production documents. Basic computer skills. Consistently demonstrate a positive attitude toward all aspects of work Apply effort and energy to lifelong learning and strive to continually grow Knowledge of and desire to work in a production environment. ESSENTIAL JOB FUNCTIONS: Must be willing to be cross trained in several assembly functions to meet constantly changing production requirements Must be willing to be moved into various work centers in order to meet production requirements or where skills best serve departm

For over 20 years, Smartsheet has empowered teams to manage work seamlessly and scale solutions smarter. Now, in our most ambitious chapter yet, we are uniting human teams with AI agents. By orchestrating the work agents do best, automating manual tasks and uncovering insights at scale, we create the space for people to focus on what truly matters: judgment, creativity, and big thinking. That is magic at work, and it’s what we show up for every day. Smartsheet's customers in Europe, the Middle East, and Africa expect our Customer Trust team to understand their compliance challenges, speak their language, and respond quickly to security assessments. We're looking for a Sr. Security Engineer I to lead Customer Trust operations across EMEA—responding to security questionnaires, managing vendor risk assessments, and building trusted relationships with enterprise customers in these regions. You will be responsible for questionnaire triage, completion, and queue management for EMEA customers. You'll work closely with EMEA sales teams, understand regional compliance requirements (GDPR, EU data protection, sector-specific frameworks), and ensure Smartsheet maintains a strong reputation for responsiveness and technical credibility in these high-value markets. You will work remotely from the UK and report to our Sr. Director, GRC Engineering, based in the US You Have 5+ years of experience in customer trust, vendor risk management, security assessment, or customer-facing security roles at SaaS or cloud platform companies. Proven experience completing and responding to customer security questionnaires, vendor assessments, and RFIs. Strong understanding of GDPR, EU data protection, and regional compliance requirements: Familiarity with data residency, data processing agreements, DPIAs, and how cloud services operate within EU regulatory frameworks. Knowledge of GRC frameworks: Working knowledge of SOC 2, ISO 27001, and compliance standards commonly referenced in EMEA asse