Iso 42001 Compliance Manager Jobs

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. About the Role Security GRC Engineers design, implement, and scale our governance, risk, and compliance (GRC) program. You'll lead automation of compliance workflows, build self-serve tools to enable GTM teams, and ensure our products and infrastructure meet the highest security standards. This role blends technical implementation with strategic program development, directly shaping how we build trust with customers. You may be a fit if You have experience with GRC frameworks such as SOC 2, ISO 27001, ISO 42001, and AIUC-1. You're comfortable tracing an external claim back to how the product and infrastructure are actually configured — you use coding agents and curiosity to confirm that what we say is what we do, flag issues that affect the security and AI governance program, and drive them to the right outcome. You have strong cross-functional collaboration skills, especially with Engineering, Legal, GTM, Trust & Safety, auditors, and regulators. Sample projects include Automate evidence gathering and continuous control testing. Own the relationship with audit firms and customers — you're the person who explains the security and AI governance program and earns their trust i

Who Are We? Postman is the world’s leading API platform, used by more than 45 million+ developers and 500,000 organizations, including 98% of the Fortune 500. Postman is helping developers and professionals across the globe build the API-first world by simplifying each step of the API lifecycle and streamlining collaboration—enabling users to create better APIs, faster. The company is headquartered in San Francisco and has offices in Boston, New York, Austin, Tokyo, London, and Bangalore - where Postman was founded. Postman is privately held, with funding from Battery Ventures, BOND, Coatue, CRV, Insight Partners, and Nexus Venture Partners. Learn more at postman.com or connect with Postman on X via @getpostman. P.S: We highly recommend reading The "API-First World" graphic novel to understand the bigger picture and our vision at Postman. About the Team The Information Security organization at Postman operates across three pillars: Governance Risk & Compliance (GRC), Product Security, and Security Operations. We are a team of builders, not checkbox-checkers. We hold active SOC 2 Type II, ISO 27001, ISO 42001, and HIPAA compliance postures, and we are pursuing FedRAMP High and CMMC Level 2 authorization. Our security stack includes Wiz, SentinelOne, Okta, Jamf, and 1Password, and we operate across a multi-cloud environment. The Offensive Security team is the "red" pulse of this organization. We don't just find bugs — we simulate the adversary to ensure our defenses hold up under real-world pressure. We focus on continuous security validation, AI-augmented adversary emulation, and offensive AI security research at Postman's scale. The Opportunity We are looking for a Principal Offensive Security Engineer who is as much a strategist as they are a hacker. You will own the strategic direction of Postman's offensive security program — including building out a dedicated Offensive AI Security capability from the ground up — and operat

Sr. GRC Engineer The Team + The Role Pendo's Information Security team protects the data entrusted to Pendo and helps ensure our products are built with security and privacy by design. The team spans Security Operations, Product Security, and Compliance and Risk. With a small team and broad scope, the work directly supports the security, resilience, and trust of Pendo's products and operations. The Sr. GRC Engineer is an AI-first technical leader who helps drive the evolution of Pendo's governance, risk, and compliance program. This role independently leads complex compliance, risk, and incident-response work while identifying program maturity gaps, translating security risk into business terms, and contributing to security roadmap and investment decisions. Success means building durable controls and programs that reduce risk and operational friction, not simply completing audits. This role is based in our Raleigh office. What this looks like day-to-day AI-driven compliance and operations acceleration: Use AI to accelerate audit evidence preparation, policy documentation, control testing workflows, and regulatory research. Evaluate GRC platform automation capabilities and integrate AI tooling where it reduces manual overhead, then document and share effective approaches with the team. Security program strategy and roadmap: Identify maturity gaps across compliance and security operations and translate them into prioritized roadmap recommendations grounded in business risk. Contribute to security investment discussions, clarify tradeoffs between coverage, cost, and risk, and anticipate emerging regulatory requirements before they become audit findings. Compliance program ownership: Own one or more regulatory compliance programs end-to-end, including SOC 2 Type II, ISO 27001/42001, PCI-DSS, GovRAMP, or FedRAMP. Lead control design, evidence collection, auditor relationships, and remediation tracking to maintain effective and durable compliance programs. Risk assessment

About AlphaSense: The world’s most sophisticated companies rely on AlphaSense to remove uncertainty from decision-making. With market intelligence and search built on proven AI, AlphaSense delivers insights that matter from content you can trust. Our universe of public and private content includes equity research, company filings, event transcripts, expert calls, news, trade journals, and clients’ own research content. The acquisition of Tegus by AlphaSense in 2024 advances our shared mission to empower professionals to make smarter decisions through AI-driven market intelligence. Together, AlphaSense and Tegus will accelerate growth, innovation, and content expansion, with complementary product and content capabilities that enable users to unearth even more comprehensive insights from thousands of content sets. Our platform is trusted by over 6,000 enterprise customers, including a majority of the S&P 500. Founded in 2011, AlphaSense is headquartered in New York City with more than 2,000 employees across the globe and offices in the U.S., U.K., Finland, India, Singapore, Canada, and Ireland. Come join us! About the Role We are building an AI Security and Governance capability and need an AI Security Analyst to be the front line for detecting, investigating, and containing risk across every AI tool, agent, and model touching AlphaSense's environment. You will monitor enterprise AI usage end to end, hunt for unauthorized ("shadow") AI and rogue agent activity, and turn raw AI telemetry into triaged findings the security and governance team can act on. Working alongside the Automation Engineer, Data Analyst, and Director, you will be a primary contributor to the evidence base underpinning our ISO 42001 certification and our broader AI risk posture. Key Responsibilities AI Tool Discovery & Shadow AI Monitoring Continuously monitor CASB/SWG, OAuth, and endpoint telemetry to discover unsanctioned AI tools, browser extensions, and API-level agents in u

About AlphaSense: The world’s most sophisticated companies rely on AlphaSense to remove uncertainty from decision-making. With market intelligence and search built on proven AI, AlphaSense delivers insights that matter from content you can trust. Our universe of public and private content includes equity research, company filings, event transcripts, expert calls, news, trade journals, and clients’ own research content. The acquisition of Tegus by AlphaSense in 2024 advances our shared mission to empower professionals to make smarter decisions through AI-driven market intelligence. Together, AlphaSense and Tegus will accelerate growth, innovation, and content expansion, with complementary product and content capabilities that enable users to unearth even more comprehensive insights from thousands of content sets. Our platform is trusted by over 6,000 enterprise customers, including a majority of the S&P 500. Founded in 2011, AlphaSense is headquartered in New York City with more than 2,000 employees across the globe and offices in the U.S., U.K., Finland, India, Singapore, Canada, and Ireland. Come join us! About the Role We are building an AI Security and Governance capability and need an AI Security Analyst to be the front line for detecting, investigating, and containing risk across every AI tool, agent, and model touching AlphaSense's environment. You will monitor enterprise AI usage end to end, hunt for unauthorized ("shadow") AI and rogue agent activity, and turn raw AI telemetry into triaged findings the security and governance team can act on. Working alongside the Automation Engineer, Data Analyst, and Director, you will be a primary contributor to the evidence base underpinning our ISO 42001 certification and our broader AI risk posture. Key Responsibilities AI Tool Discovery & Shadow AI Monitoring Continuously monitor CASB/SWG, OAuth, and endpoint telemetry to discover unsanctioned AI tools, browser extensions, and API-level agents in u

REQUISITOS MANDATÓRIOS •Pacote Microsoft Office; •Conhecimento das normas de sistemas de gestão integrada (Ex.: ISO 45001, ISO 14001, ISO 9001); •Conhecimento funcional SAP ERP ou Sistema Informatizado de Registro de Anomalias; Será necessário ART de cargo e função para esse posto de serviço. EXPERIÊNCIA experiência em atividades similares ao escopo dos serviços. ESCOLARIDADE Grau de Instrução: Pós graduação Formação: Formação em engenharia com Pós-graduação em Engenharia de Segurança do Trabalho, com registro em conselho profissional. ATRIBUIÇÕES Elaborar e/ou atualizar painéis no powerBi que facilitem a gestão sobre os temas de contingência (ex. Acompanhamento do Plano de Manutenção dos Ativos de Contingências, Teste de Performance de Bombas, Cronograma de Simulados, entre outros); Realizar gestão dos treinamentos relacionados a contingência, buscando novas oportunidades e conteúdos a serem compartilhados; Apoiar o planejamento e acompanhar exercícios simulados nas Unidades Operacionais; Propor ações para aprimoramento dos conhecimentos das lideranças no que tange o ICS – Sistema de Comando de Incidente; Acompanhar a implantação das recomendações de contingência oriundas dos estudos de análises de risco de processo e outras inspeções/diagnósticos; Apoiar na elaboração e/ou revisão dos Planos de Resposta a Emergência – PRE das unidades do parque de refino, processamento de gás, DTEN e LCM, bem como os PRE-SOs, Planos Locais e PROs; Assessorar, do ponto de vista da engenharia de segurança, assuntos relacionados à preparação e atendimento a emergências; Apoiar na revisão de procedimentos e padrões relacionados ao tema de gestão de contingência; Realizar apresentações tais como RAC de SMS, Subcomissão, entre outras, sobre o tema de Contingência; Acompanhar a implantação das recomendações de contingência oriundas dos estudos de análises de risco de processo; Auditoria de conformidade de barreiras de proteção identificadas nos estudos de risco de proc

Formação complementar: Mandatório: Inglês avançado; Desejável formação em sistemas de gestão de SMS; Interpretação das Normas ISO 14001 e ISO 45001 (SMS em contratos); Para embarques eventuais: T-HUET, CBSP. Tempo de Experiência: Experiencia em atividades correlatas ao escopo do serviço. Conhecimentos Obrigatórios: Pacote Microsoft Office avançado; Power BI; Domínio em práticas para adoção de medidas de gerenciamento (mediante Inspeções, Auditorias e Acompanhamento de Planos de Ação); Apoio na elaboração de Análises Preliminares de Risco (APR), HAZOP (Avaliação de Perigos na Operabilidade de Sistemas) e Análises Quantitativas de Riscos (AQR) de novos empreendimentos ou existentes; Experiência em atividades em plantas industriais; Participação em planejamento de simulados de emergências de grande amplitude em plantas industriais. Sobre a CAPCO: Na Capco promovemos uma cultura inclusiva. Valorizamos a diversidade em todas as suas expressões. Pensamos, em conjunto , sempre em ações diversas de inclusão e de responsabilidade social através de comitês internos geridos pela nossa comunidade interna, como os grupo de Mulheres, Pessoas Com Deficiência, Pessoas Negras, LGBTQIAPN+, Parentalidade, Gerações, entre outros. Nossas oportunidades são trabalhadas para todos(as)!!! #LifeAtCapco PRÓXIMOS PASSOS: Se você está ansioso(a) para progredir sua carreira conosco, candidate-se e aguarde o contato de um de nossos recrutadores!

About the job Build the operating system that helps Graphcore scale quality, resilience and production readiness. As an Integrated Management Systems Engineer, you will help shape the Graphcore way. This is our integrated approach to practical, scalable management systems. You will turn ISO 9001, ISO/IEC 27001, ISO 45001 and ISO 22301 requirements into usable ways of working. Your impact will reach engineering, operations, suppliers and corporate teams. Lead the delivery of the Integrated Management System internal audit programme, including audit planning and execution, reporting findings, agreeing corrective actions with process owners, and monitoring actions through to effective closure. The team and culture You will work with Manufacturing Operations and Quality, partnering closely with engineering, operations and process owners. Work happens through direct problem solving, clear ownership and practical decisions. This role needs someone who can move between standards, systems and real workflows. You will challenge complexity and help teams build processes that people actually use. Decisions are grounded in evidence, risk and operational reality. You will be expected to speak up, take responsibility and help Graphcore improve at pace. This Team work x3 days a week in the Bristol office. What we’re looking for · Strong understanding of ISO 9001 principles in engineering or technology-led organisations · Lead auditor qualification in ISO/IEC 27001, ISO 45001, ISO 22301 or ISO 9001 · Experience designing or improving management system processes · Ability to translate standards into practical operating models · Experience working in complex product development environments · Structured problem-solving skills, such as A3, 5 Whys or Ishikawa Benefits · Flexible working: Balance your work and personal life with greater flexibility, with an expectation to be in 2-3 days/week · Generous leave: Take time to rest, recharge and enjoy life outside of work · Retirement planni

SOBRE A CAPCO A CAPCO é uma consultoria global de tecnologia e negócios, focada no setor de serviços financeiros e energia, somos apaixonados por ajudar nossos clientes, temos 33 escritórios nas Américas, Europa e Ásia-Pacífico! Vamos te apoiar e ajudar a acelerar sua carreira! EXPERIENCIA mínimo de 2 anos atuando com atividades de gestão de SMS no seguimento de Petróleo e Gás. CONHECIMENTOS: Conhecimento: • Pacote Microsoft Office; • Conhecimento das normas de sistemas de gestão integrada (Ex.: ISO 45001) Na Capco promovemos uma cultura inclusiva. Valorizamos a diversidade em todas as suas expressões. Pensamos, em conjunto, sempre em ações diversas de inclusão e de responsabilidade social através de comitês internos geridos pela nossa comunidade interna, como os grupo de Mulheres, Pessoas Com Deficiência, Pessoas Negras, LGBTQIAPN+, Parentalidade, Gerações, entre outros. Nossas oportunidades são trabalhadas para todos(as)!!! #LifeAtCapco PRÓXIMOS PASSOS: Se você está ansioso(a) para progredir sua carreira conosco, candidate-se e aguarde o contato de um de nossos recrutadores!

Requisitos: Conhecimento em leitura e interpretação de desenhos, normas técnicas e fluxogramas de processo; Experiência na utilização de sistemas informatizados de licenciamento e gestão ambiental; Leitura e compreensão de inglês em nível básico; Domínio do Pacote Office (Word, Excel, PowerPoint e Outlook); Conhecimento da legislação aplicável ao Licenciamento Ambiental; Conhecimento em Gestão Ambiental aplicada ao setor de Óleo e Gás; Capacidade de atuar de forma colaborativa e em equipes multidisciplinares; Conhecimento em simulados e planos de resposta a emergências; Noções de gestão e acompanhamento de projetos. Perfil Profissional Buscamos profissionais desejavelmente com experiência em empresas do setor de Óleo e Gás ou em indústrias de processo contínuo, com vivência em atividades relacionadas a: Estudos Ambientais; Monitoramento Ambiental; Licenciamento Ambiental; Sistemas de Gestão de Saúde, Segurança, Meio Ambiente e Segurança Operacional (SGSMS); Sistema de Gestão Integrada (SGI); Organização e acompanhamento de embarque e desembarque de equipes; Apoio às rotinas operacionais e administrativas da área ambiental. Escolaridade Curso Técnico completo em uma das seguintes áreas ou correlatas: Controle de Meio Ambiente; Meio Ambiente; Florestal; Química; Petróleo; Segurança do Trabalho; SMS; Qualidade; Planejamento; Produção; Logística. Formação Complementar (Desejável) Será considerado um diferencial possuir cursos de especialização, com carga horária mínima de 40 horas, em temas como: Auditor Interno ou Externo nas normas ISO 14001, ISO 45001 e ISO 9001; Auditoria em Sistema de Gestão Integrada (SGI); Licenciamento Ambiental; Gerenciamento de Resíduos; Outras capacitações correlatas à área de atuação. Sobre a Capco Na Capco, promovemos uma cultura verdadeiramente inclusiva e valorizamos a diversidade em todas as suas formas. Acreditamos que diferentes perspectivas impulsionam a inovação e fortalecem nossos resultados. Por isso, contamos com grupos int

Company Description Quantum Systems Management Pvt. Ltd. (QSMPL) is a multidisciplinary consulting firm specializing in Sustainability, ESG, Social Compliance, Technical Audits, Environmental Assessments, Supply-Chain Security, and ISO Management Systems. The company works with organizations across manufacturing, textiles, leather, apparel, electronics, engineering, and global supply chains to strengthen responsible business performance and meet international standards. QSMPL supports clients with ESG strategy, reporting, governance, stakeholder engagement, and disclosure aligned with leading global frameworks. The firm also conducts comprehensive social, environmental, and techno-social assessments, including worker wellbeing, responsible sourcing, and chain-of-custody systems. Combining technical depth, industry experience, and a sustainability-focused approach, QSMPL helps organizations build compliant, efficient, and future-ready systems. Role Description It is a full-time, on-site role based in Kolkata. The role involves planning, coordinating, and executing social, technical, environmental, and ISO audits for clients across diverse industry sectors. The Project Executive will review documentation, collect and analyze data, conduct on-site assessments, interview stakeholders and workers, and prepare clear, concise audit reports and improvement plans. Responsibilities include supporting clients with compliance gap analysis, corrective action plans, ESG and sustainability-related documentation, and readiness for buyer, brand, and certification audits. The role also includes collaborating with internal teams, maintaining up-to-date knowledge of relevant standards and frameworks, and contributing to training, client presentations, and continuous improvement initiatives. Qualifications Strong understanding of compliance, social audits, and ethical trade frameworks (e.g., BSCI, SMETA, SA8000, SLCP, Higg FSLM, WRAP, ICS or similar). Knowledge of ISO and management

We offer a hybrid work environment. Most US-based positions can also be performed remotely (any exceptions will be noted in the Minimum Qualifications below.) We offer a hybrid work environment. Most US-based positions can also be performed remotely (any exceptions will be noted in the Minimum Qualifications below.) Our Mission: To actively connect people to their next great opportunity. Who We Are: ZipRecruiter is a leading online employment marketplace. Powered by AI-driven smart matching technology, the company actively connects millions of all-sized businesses and job seekers through innovative mobile, web, and email services, as well as partnerships with the best job boards on the web. ZipRecruiter has the #1 rated job search app on iOS & Android. Summary of Job: As an Acquisition Account Executive, you’ll use your full-cycle selling skills to bring new subscribers onto the ZipRecruiter platform. You’ll be supported with market intelligence to identify and connect with employers who have never worked with ZipRecruiter before. This role requires a true new business acquisition mindset—handling everything from initial outreach and demoing the platform to managing free trials, developing proposals, and closing deals. ZipRecruiter’s world-class training program, known internally as Dev Bay, is designed to set you up for long-term success at ZipRecruiter and beyond. We don’t just encourage development, we live it. Upon starting in a sales role, you’ll begin with one week of new-hire onboarding, followed by 7 weeks of in-depth, hands-on, and highly rigorous sales training . This includes structured learning, consistent role-playing, and live-call practice to ensure you’re building real-world skills from day one. The goal is to prepare you for a seamless transition into a full quota-carrying role within your department. While you are eligible to earn commission during Dev Bay, the primary focus is on mastering a strong f

We offer a hybrid work environment. Most US-based positions can also be performed remotely (any exceptions will be noted in the Minimum Qualifications below.) Our Mission: To actively connect people to their next great opportunity. Who We Are: ZipRecruiter is a leading online employment marketplace. Powered by AI-driven smart matching technology, the company actively connects millions of all-sized businesses and job seekers through innovative mobile, web, and email services, as well as partnerships with the best job boards on the web. ZipRecruiter has the #1 rated job search app on iOS & Android. Summary of Job: As an Acquisition Account Executive, you’ll use your full-cycle selling skills to bring new subscribers onto the ZipRecruiter platform. You’ll be supported with market intelligence to identify and connect with employers who have never worked with ZipRecruiter before. This role requires a true new business acquisition mindset—handling everything from initial outreach and demoing the platform to managing free trials, developing proposals, and closing deals. ZipRecruiter’s world-class training program, known internally as Dev Bay, is designed to set you up for long-term success at ZipRecruiter and beyond. We don’t just encourage development, we live it. Upon starting in a sales role, you’ll begin with one week of new-hire onboarding, followed by 7 weeks of in-depth, hands-on, and highly rigorous sales training . This includes structured learning, consistent role-playing, and live-call practice to ensure you’re building real-world skills from day one. The goal is to prepare you for a seamless transition into a full quota-carrying role within your department. While you are eligible to earn commission during Dev Bay, the primary focus is on mastering a strong foundation of skills that will enable you to exceed your goals not just early on, but throughout your entire career. Key Focuses Hit or exceed your monthly new

We offer a hybrid work environment. Most US-based positions can also be performed remotely (any exceptions will be noted in the Minimum Qualifications below.) Our Mission: To actively connect people to their next great opportunity. Who We Are: ZipRecruiter is a leading online employment marketplace. Powered by AI-driven smart matching technology, the company actively connects millions of all-sized businesses and job seekers through innovative mobile, web, and email services, as well as partnerships with the best job boards on the web. ZipRecruiter has the #1 rated job search app on iOS & Android. Summary of Job: As an Acquisition Account Executive, you’ll use your full-cycle selling skills to bring new subscribers onto the ZipRecruiter platform. You’ll be supported with market intelligence to identify and connect with employers who have never worked with ZipRecruiter before. This role requires a true new business acquisition mindset—handling everything from initial outreach and demoing the platform to managing free trials, developing proposals, and closing deals. ZipRecruiter’s world-class training program, known internally as Dev Bay, is designed to set you up for long-term success at ZipRecruiter and beyond. We don’t just encourage development, we live it. Upon starting in a sales role, you’ll begin with one week of new-hire onboarding, followed by 7 weeks of in-depth, hands-on, and highly rigorous sales training . This includes structured learning, consistent role-playing, and live-call practice to ensure you’re building real-world skills from day one. The goal is to prepare you for a seamless transition into a full quota-carrying role within your department. While you are eligible to earn commission during Dev Bay, the primary focus is on mastering a strong foundation of skills that will enable you to exceed your goals not just early on, but throughout your entire career. Key Focuses Hit or exceed your monthly new

We offer a hybrid work environment. Most US-based positions can also be performed remotely (any exceptions will be noted in the Minimum Qualifications below.) Our Mission: To actively connect people to their next great opportunity. Who We Are: ZipRecruiter is a leading online employment marketplace. Powered by AI-driven smart matching technology, the company actively connects millions of all-sized businesses and job seekers through innovative mobile, web, and email services, as well as partnerships with the best job boards on the web. ZipRecruiter has the #1 rated job search app on iOS & Android. Summary of Job: As an Acquisition Account Executive, you’ll use your full-cycle selling skills to bring new subscribers onto the ZipRecruiter platform. You’ll be supported with market intelligence to identify and connect with employers who have never worked with ZipRecruiter before. This role requires a true new business acquisition mindset—handling everything from initial outreach and demoing the platform to managing free trials, developing proposals, and closing deals. ZipRecruiter’s world-class training program, known internally as Dev Bay, is designed to set you up for long-term success at ZipRecruiter and beyond. We don’t just encourage development, we live it. Upon starting in a sales role, you’ll begin with one week of new-hire onboarding, followed by 7 weeks of in-depth, hands-on, and highly rigorous sales training . This includes structured learning, consistent role-playing, and live-call practice to ensure you’re building real-world skills from day one. The goal is to prepare you for a seamless transition into a full quota-carrying role within your department. While you are eligible to earn commission during Dev Bay, the primary focus is on mastering a strong foundation of skills that will enable you to exceed your goals not just early on, but throughout your entire career. Key Focuses Hit or exceed your monthly new