Iso 42001 Compliance Manager Jobs

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. 職務概要 当社EHS（Environment, Health & Safety）部門の一員として、世界最先端の半導体製造施設における安全管理業務を担当していただきます。本ポジションでは、設備運転、保守、改造工事、建設プロジェクトなど、多様な業務に関わる安全リスクの低減を通じて、従業員および請負業者が安心して働ける職場環境の実現を推進します。Micronではグローバル共通の高い安全基準を採用しており、国内外の専門家との連携を通じて、最先端の安全管理手法やベストプラクティスを学びながら成長できる環境があります。また、安全を単なる法令遵守に留めるのではなく、事業継続や組織文化の重要な基盤として捉え、現場に近い立場から事業に貢献できることも、本ポジションの大きな魅力です。世界レベルの製造現場で経験を積みながら、自身の専門性を高め、安全文化の構築に主体的に関わりたい方を歓迎します。 主な業務内容 ガス設備・化学物質・プロセス安全に関する安全基準・手順の策定、維持、改善 ガス設備、化学物質取扱い、プロセスにおけるリスクアセスメントの実施および是正措置の推進 労働安全衛生法、化学物質管理、消防法、高圧ガス保安法など関連法令・規格に基づくコンプライアンス対応 現場での安全監査、点検、事故・ヒヤリハット事例の分析と再発防止策の立案 従業員・協力会社へのガス安全・化学安全教育・トレーニングの企画・実施 新規化学物質導入、ガス設備導入、プロセス変更時の安全評価および承認プロセスへの参画 グローバルEHS基準との整合性確保、関連部門や社内外ステークホルダーとの連携 グローバル基準、関連する国際規格（例：ISO、JIS、NFPA 等）に基づく設計レビュー 応募資格 学士号以上を有する方 専攻分野は問いませんが、化学、プロセス、または関連分野において、EHS業務に活かせる知識または実務経験を有する方 日本語能力として、JLPT N3 以上を必須とし、N2 以上の資格保持者を歓迎します 労働安全衛生法、高圧ガス保安法、化学物質管理に関する法規知識 製造業・プラント・化学設備・ガス設備における安全管理経験（歓迎） リスクアセスメント、事故調査、是正措置の実務経験 （歓迎）危険物取扱者、高圧ガス製造保安責任者、EHS関連資格（例：ISO45001内部監査員） 求める人物像 安全文化の醸成に積極的に取り組める方 現場と密に連携し、問題解決と改善提案を主体的に実行できる方 分析的思考力とプロジェクト管理能力を持ち、自律的に業務を遂行できる方 グローバル基準や最新の化学・安全技術に関心を持ち、継続的に学べる方 英語によるコミュニケーションができる方 コミュニケーション能力、チームでの協働力が高い方 About Micron Technolo

SYNOPSIS: The Manufacturing Co-Op role is designed for high school juniors and seniors seeking entry-level experience in production. As a Co-Op, you will perform various tasks associated with assembly, ensuring the quality of your work. This position offers the flexibility to work in teams, small batch production, or flow lines. This opportunity aims to provide valuable hands-on experience in production, with the potential for future apprenticeship opportunities. Projected start date: Fall 2026 RESPONSIBILITIES: May be required to operate various hand tools and other equipment. Has the ability to read and understand production documentation and drawings. Understands basic electronics concepts and can follow wiring schematics. Performs final assembly, electrical testing, and packaging of various assemblies Performs screening and separation of various parts Responsible for recording assembly time data and completion of all associated routing, quality inspections, and other related forms Performs miscellaneous assigned tasks Assist in other Production areas as needed Focus on increasing productivity in all activities Follow necessary PPE requirements, appropriate ISO specifications and company procedures. Performs other related duties as assigned. QUALIFICATIONS: Must be a junior or senior in high school. Must be at least 16 years of age by the start of the role. Strong organizational skills. Ability to read and comprehend English written production documents. Basic computer skills. Consistently demonstrate a positive attitude toward all aspects of work Apply effort and energy to lifelong learning and strive to continually grow Knowledge of and desire to work in a production environment. ESSENTIAL JOB FUNCTIONS: Must be willing to be cross trained in several assembly functions to meet constantly changing production requirements Must be willing to be moved into various work centers in order to meet production requirements or where skills best serve departm

For over 20 years, Smartsheet has empowered teams to manage work seamlessly and scale solutions smarter. Now, in our most ambitious chapter yet, we are uniting human teams with AI agents. By orchestrating the work agents do best, automating manual tasks and uncovering insights at scale, we create the space for people to focus on what truly matters: judgment, creativity, and big thinking. That is magic at work, and it’s what we show up for every day. Smartsheet's customers in Europe, the Middle East, and Africa expect our Customer Trust team to understand their compliance challenges, speak their language, and respond quickly to security assessments. We're looking for a Sr. Security Engineer I to lead Customer Trust operations across EMEA—responding to security questionnaires, managing vendor risk assessments, and building trusted relationships with enterprise customers in these regions. You will be responsible for questionnaire triage, completion, and queue management for EMEA customers. You'll work closely with EMEA sales teams, understand regional compliance requirements (GDPR, EU data protection, sector-specific frameworks), and ensure Smartsheet maintains a strong reputation for responsiveness and technical credibility in these high-value markets. You will work remotely from the UK and report to our Sr. Director, GRC Engineering, based in the US You Have 5+ years of experience in customer trust, vendor risk management, security assessment, or customer-facing security roles at SaaS or cloud platform companies. Proven experience completing and responding to customer security questionnaires, vendor assessments, and RFIs. Strong understanding of GDPR, EU data protection, and regional compliance requirements: Familiarity with data residency, data processing agreements, DPIAs, and how cloud services operate within EU regulatory frameworks. Knowledge of GRC frameworks: Working knowledge of SOC 2, ISO 27001, and compliance standards commonly referenced in EMEA asse

As the Engineering Manager for Commercial Audit, you will lead a high-performing team responsible for scaling Datadog’s security and compliance posture through automation, tooling, and engineering excellence. Our GRC (Governance, Risk, and Compliance) function is a critical partner to the broader Security and Engineering organizations, ensuring that Datadog not only meets rigorous global regulatory standards but does so in a way that is efficient, scalable, and integrated into our cloud-native infrastructure. You will manage a team of engineers and analysts who are transitioning to a GRC engineering direction to treat compliance as a software problem, leveraging AI, custom tooling, CI/CD pipelines, and cloud-native services to turn complex regulatory requirements into actionable, automated controls. You will lead the strategy, roadmap, and execution of Datadog’s Commercial Audit initiatives. This is a high-impact leadership role where you will grow a team of engineers and analysts responsible for directly maintaining our compliance programs and related audits (e.g., SOC2, PCI, HIPAA, ISO) while looking to improve efficiency and effectiveness through platforms and tooling. You will act as a bridge between technical engineering, legal, and compliance, enabling the organization to move fast while maintaining a secure and compliant environment. You will champion a culture of "compliance-as-code," identifying opportunities to automate evidence collection, streamline control testing, and reduce manual toil for both your team and our partner engineering teams. At Datadog, we place value in our office culture - the relationships and collaboration it builds, and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Lead the strategy, roadmap, and execution of Datadog’s commercial security compliance efforts, shifting from manual audit processes to automated, scalable

Who we are At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to hundreds of thousands of businesses and empower millions of developers worldwide to craft personalized customer experiences. Our dedication to remote-first work , and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day. As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands. . Hiring and how we work We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions! Also, while we are a remote-first company, you may be asked to report in person on an ad-hoc basis for team gatherings, functional off-sites or customer meetings. . See yourself at Twilio Join the team as Twilio’s next Security Risk Senior Analyst. About the job The Senior Security Risk Analyst will be a key member of the One Twilio Risk Management program, focused on maturing our Security risk posture by facilitating risk identification and treatment. The team works closely with our Product and Engineering teams to ensure all areas of cyber risk are identified across Twilio and that risk methodologies are operationally effective and in compliance with regulations (e.g. Cybersecurity and/or Telecom / sector-specific regulations) and industry best practice security measures (e.g. NIST RMF, AI RMF, COSO, ISO 31000). This role provides an exciting opportunity for experienced risk professionals who are passionate about risk management and ready to contribute to the continued growth and maturity of risk practices within a dynamic organization like Twilio. Responsibilities In this role, you’ll: Execute and improve upon daily operations

ABOUT BASETEN Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F , led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to to ship AI products. THE ROLE We are seeking an experienced and detail-oriented GRC (Governance, Risk, and Compliance) Manager to build, support, and continuously enhance Baseten’s security governance, compliance, and privacy programs. As one of the early members of our security organization, you will play a key role in ensuring our platform meets and exceeds the highest standards for privacy, trust, and regulatory compliance. In this role, you’ll work cross-functionally with engineering, operations, legal, and leadership teams to develop policies, manage audits, and implement controls aligned with frameworks such as SOC 2, ISO 27001, ISO 27701, and FedRAMP. You’ll be instrumental in building scalable processes to manage risk, support customer assurance, and uphold Baseten’s commitment to security and compliance as we grow. RESPONSIBILITIES Governance & Policy Development: Design, implement, and maintain security governance frameworks, policies, and procedures that align with Baseten’s risk posture and industry best practices. Risk Management: Build and manage the company-wide risk assessment program, identifying, tracking, and mitigating key security and compliance risks. Compliance Operations: Lead efforts to achieve and maintain compliance with SOC 2, ISO 27001/27701, HIPAA, FedRAMP and other applicable standards and regulations. Audit & Certification Management: Coordinate external audits and certification processes, ensuring e

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. Engineering Program Manager with proven experience leading ASIC/SoC development programs, responsible for coordinating multi-functional deliverables across Micron. The role requires end‑to‑end ownership of ASIC development—from architecture and RTL through verification, PnR, integration, and silicon validation—along with strong project planning skills in estimation, scheduling, and milestone dependency management. Job requirements: BS/BEE in Electrical or Electronics Engineering with 7+ years of experience. Experience in ASIC/SoC design and development programs. Proven track record of delivering ASIC products end‑to‑end. Strong understanding of the ASIC design flow. Experience driving risk management, change control, and development reviews. Familiarity with ISO 9001 requirements; experience with FuSa and ISO 26262 is encouraged. Experience coordinating programs across multiple, global organizations. Strong proficiency with program/project management tools. Apply AI-enabled engineering tools Job Function: Responsible for end‑to‑end program execution of semiconductor devices, ensuring schedule, power, and cost targets are met. Drive risk management, change control, development reviews, and compliance with ASIC development processes. Regularly report to senior management on key achieve

About Us OpenFX is on a mission to move money as freely as data, unrestricted by time zones, banking hours, or legacy systems. We are building the infrastructure that will power the next generation of cross-border payment systems for institutions. The team's execution has been exceptional, and we're scaling at a remarkable pace. Our stellar early team comes with experience in companies like J.P. Morgan, Goldman Sachs, FalconX, Paypal, Affirm, Polygon, Kraken, Nium & others. We're backed by Accel, Lightspeed, NfX and other top-tier investors. Role Overview We are looking for a Security & Compliance Engineer to turn regulatory requirements into real, running controls — and then prove to auditors that they work. This is a senior, hands-on role for someone who thrives in fast-paced, heavily regulated environments and knows how to make compliance provable in production rather than on paper. OpenFX is expanding across Europe in a heavily regulated financial environment. As we scale into EU markets, regulators, auditors, and enterprise partners expect provable, continuously operating security controls — not slide decks or one-off audits. Compliance requirements (DORA, GDPR, SOC 2, ISO 27001, and region-specific regulations) are increasing faster than our ability to operationalize them, and this role exists to close that gap. You will own the security controls and evidence that regulators and auditors care about, end to end — from translating regulatory language into concrete mechanisms through to audit walkthroughs and remediation. You will partner closely with Legal, Compliance, Risk, and engineering to ensure compliance is built into the platform rather than bolted on after the fact. This role is based in Amsterdam, Netherlands (EU/EEA). Key Responsibilities: Own audit-ready security controls Design, implement, and maintain technical and operational controls for DORA, GDPR, SOC 2, ISO 27001, and future regional requirements. Ensure controls are not just documente

REQUISITOS MANDATÓRIOS Conhecimento funcional no Módulo MM do SAP ERP /SAP S/4HANA; - Pacote Microsoft Office; - Inglês Avançado (No mínimo para 50% dos postos de trabalho. Demais postos no mínimo inglês intermediário); - Habilidade de redação técnica; - Conhecimento da Norma ABNT NBR 16278 – Inspeção de fabricação - Qualificação e certificação de pessoas para o setor de petróleo e gás. EXPERIÊNCIA Significativa experiência, atuando em auditorias ou inspeção de fabricação ou controle de qualidade de equipamentos do setor de Óleo & Gás, em atividades correlatas ao posto de trabalho. CERTIFICADOS Conhecimento funcional no Módulo MM do SAP ERP /SAP S/4HANA; - Pacote Microsoft Office; - Inglês Avançado (No mínimo para 50% dos postos de trabalho. Demais postos no mínimo inglês intermediário); - Habilidade de redação técnica; - Conhecimento da Norma ABNT NBR 16278 – Inspeção de fabricação - Qualificação e certificação de pessoas para o setor de petróleo e gás. QUALIFICAÇÕES: - (Todos) Comprovação de treinamento na norma ISO 9001:2015; - (Todos) Certificado de Auditor Líder emitido por entidade reconhecida pelo IRCA, ou Registro de Auditor Certificado ABENDI-RAC; - (1 Posto) Comprovação de treinamento em processos de soldagem ASME IX, ASME VIII e/ou B31 3, com experiencia significativa - (1 Posto) Comprovação de treinamento em processos de ULTRASSOM e conhecimento em RX, LP e PM, com experien

At Secureframe , we’re building the next generation of cybersecurity and compliance software. Thousands of organizations use our platform to strengthen security, automate compliance, and earn trust. We’re backed by leading investors including Kleiner Perkins, Accomplice, Gradient Ventures, BoxGroup, and Village Global. Our Defense AI business is experiencing record growth as organizations across the Defense Industrial Base look for a faster, more practical way to meet CMMC requirements. Secureframe Defense AI combines secure infrastructure, AI-guided CMMC workflows, automated documentation, continuous control monitoring, real-time readiness insights, and expert support in one platform. It gives sellers a differentiated story: help customers secure CUI, accelerate CMMC readiness, and reduce the cost and complexity of operating a compliant environment. Alongside Defense AI, our GRC products help companies achieve and maintain frameworks such as SOC 2, ISO 27001, HIPAA, PCI DSS, and more. About the Role The Customer Education & Content Manager will own everything that helps customers learn Secureframe independently, from screen-recorded product walkthroughs and compliance framework training courses to internal Sales, Implementation, and Channel Partner enablement. Experience selling to defense contractors, government suppliers, or public-sector organizations is valuable, but it is not required. This person will sit under the Customer Experience team (within the broader Customer Success org) and report to the Director of Support. Secureframe highly values having employees working in-office to foster a collaborative work environment and company culture. For office-based employees (employees who live within a defined radius of a Secureframe office), Secureframe considers working in the office, approximately 30% of the time under current policy, to be an essential function of the employee's role. Why this role matters As Secureframe grows its SMB and mid-market custome

Scale AI sits at the intersection of frontier AI, enterprise software, and national security. We safeguard high-value assets: proprietary AI data and infrastructure, a global contributor ecosystem, and sensitive enterprise and government customer data. As our International Head of Security, you will own and unify Scale’s security strategy across our non-US affairs: Global Public Sector and non-US Enterprise deals. You will drive the execution, customer engagements and compliance with frameworks such as GDPR, ISO27001, UK Cyber Essentials Plus, the EU AI Act, NIS2 and country-specific sovereignty requirements while staying tightly aligned to our global secure-by-default architecture set by the Head of Security. As we expand into FDE-led Agentic Applications while continuing to serve our data and model customers, our security surface area spans internal systems, external products, distributed contributors, and high-assurance government environments. You are a builder who believes security is a product feature, not a hurdle — and who can raise both our defensive maturity and our ambition in frontier AI security. What You'll Do Execute the Global Security Strategy Across International Markets Drive execution of Scale's multi-year secure-by-default roadmap across non-US markets, surfacing regional needs into global architecture decisions. Translate regional regulatory requirements (GDPR, ISO 27001/27017/27018, SOC 2, UK Cyber Essentials Plus, EU AI Act, NIS2, and country-specific data residency / sovereign-cloud rules) into concrete engineering controls. Track regional security metrics and accountability, and represent the international perspective in global prioritisation, audits, and roadmap reviews. Lead Regional Security Engineering & Threat Detection Own the regional execution of identity, fine-grained RBAC, secrets management, CI/CD hardening, encryption, logging, and infrastructure protection with a particular focus on cross-border data flows and in-region tel

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform. We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. Role We are looking for a Staff Program Manager, Compliance to join our team. This is a Hybrid role, reporting to the Leader of Global Commercial Compliance in the Exposure Management & Security Operations department. At Zscaler, compliance is a strategic business enabler and a foundation of customer trust. As a Staff Program Manager, Compliance, you will be at the forefront of how a global, cloud-native cybersecurity leader governs, scales, and continuously evolves its compliance posture across an increasingly complex regulatory landscape. Working at the intersection of engineering, product, legal, and security, you will ensure that infrastructure, products, and processes meet and anticipate the world's most demanding standards. What you’ll do (Role Expectations) Own and drive certification programs across SOC 2 Type II, ISO frameworks, and emerging standards while developing multi-year roadmaps anchored in cust

About Atomic Industries Atomic Industries is reinventing how the world makes things. From cars and aerospace systems to medical devices and packaging, most physical goods begin life in a mold or are shaped by a manufacturing tool. Producing these tools has always been slow, manual, and dependent on scarce expertise, taking weeks or months. We’re changing that. At our Detroit headquarters, we combine the industrial DNA of America’s manufacturing heartland with the speed, intelligence, and precision of Silicon Valley. Our AI-driven platform tackles the hardest problems in geometry, process planning, and fabrication, collapsing production timelines from months to days and soon, minutes. We don’t just build software; we run a fully operational factory where our technology produces production-grade tooling every week, enabling tight feedback loops and rapid iteration. Backed by top-tier investors, we’re restoring speed, flexibility, and capability to the American industrial base. Our mission is to make manufacturing as agile and scalable as the digital world, and in doing so, rebuild the infrastructure of the physical economy. Position Overview We’re seeking a detail-oriented and dependable Quality Inspector to support quality control and inspection across our injection molding operations. You’ll be on the floor inspecting parts, maintaining records, and working closely with process engineers and production to ensure every part meets Atomic’s exacting standards. This is a key hands-on role as we scale high-volume production and build out our ISO-compliant quality systems. Key Responsibilities Perform visual and dimensional inspections of molded parts (first piece, in-process, and final) Use precision measuring tools (calipers, micrometers, height gauges, checking fixture, etc.) Assist Quality Technician with part qualification processes: Example - PPAP, capability studies Perform Dock Audits, Incoming Inspections, and LPAs per schedule Monitor Safe Launch a

About the Role We are seeking an experienced Privacy Lead to establish, manage, and continuously enhance the organization's Privacy Program across business functions, products, technology platforms, and third-party ecosystems. The ideal candidate will possess deep expertise in privacy regulations including India's Digital Personal Data Protection Act (DPDP Act), GDPR, and privacy governance frameworks. The individual will partner closely with Legal, Compliance, Information Security, Product, Engineering, Risk, HR, and Business teams to ensure privacy-by-design principles are embedded into organizational processes and technology solutions. The Privacy Lead will serve as the subject matter expert for privacy governance, regulatory compliance, privacy risk management, data subject rights management, privacy impact assessments, and data protection controls. Key Responsibilities Privacy Governance & Strategy -Develop and execute the enterprise-wide Privacy Program and Privacy Governance Framework. -Define privacy policies, standards, procedures, and controls aligned with regulatory requirements. -Establish Privacy-by-Design and Privacy-by-Default principles across products and services. -Build privacy risk management and privacy control monitoring mechanisms. -Advise executive leadership on emerging privacy risks and regulatory developments. -Act as the organization's privacy subject matter expert for audits, inspections, and regulatory reviews. Regulatory Compliance Lead compliance initiatives for: -Digital Personal Data Protection Act (DPDP Act), India -GDPR (General Data Protection Regulation) -ISO 27701 Privacy Information Management System -RBI data governance and customer data protection requirements -Applicable privacy and data protection obligations relevant to the Banking, FinTech, Payments, and Technology sectors Responsibilities include: -Regulatory gap assessments -Compliance monitoring -Privacy control implementation -Privacy risk assessmen

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: Replit’s ecosystem is powered by an expanding array of external services and essential AI model partners. As our lead for Security Vendor Risk & Contract Reviews, you will architect and execute a risk management program focused on substantive evaluation rather than just processing checklists. You’ll analyze SOC 2 documentation, security assessments, and system architectures to determine actual risk profiles, collaborating with our Legal team to secure necessary contractual protections. This role reports to the Head of Security GRC and involves high-impact partnerships across Legal, Engineering, and Product teams. What You'll Do Run substantive third-party risk management (TPRM), independently evaluating real risk, not just processing questionnaire responses Review SOC 2 reports, pen test findings, and architecture documentation to form an independent view of vendor risk, extending the same rigor to AI/model providers Partner with Legal on vendor and AI contract terms, including DPAs, subprocessor agreements, and AI-specific provisions Review contracts for non-standard security language when flagged by Legal or deal desk, and recommend redlines Maintain the vendor and AI/model risk register, feeding findings into the company's master risk register Enable sales through maturing the customer trust program Build the capability for continuous monitoring of vendor ecosystem Required Skills & Experience 8+ years in third-party/vendor risk management, security risk, or a related GRC role Demonstrated ability to independently assess vendor risk rather than relying on questionnaire responses alone, fluent in reading SOC 2 reports, ISO certificates, pen test summaries, and architecture documentation Experi