It Internal Controls Jobs

At Anyscale , we're on a mission to democratize distributed computing and make it accessible to software developers of all skill levels. We’re commercializing Ray , a popular open-source project that's creating an ecosystem of libraries for scalable machine learning. Companies like OpenAI , Uber , Spotify , Instacart , Cruise , and many more, have Ray in their tech stacks to accelerate the progress of AI applications out into the real world. With Anyscale, we’re building the best place to run Ray, so that any developer or data scientist can scale an ML application from their laptop to the cluster without needing to be a distributed systems expert. Proud to be backed by Andreessen Horowitz, NEA, and Addition with $250+ million raised to date. About the Role Anyscale's security and compliance needs are growing as we work with larger and more demanding customers. Compliance is increasingly a customer-facing, contractual function rather than an internal exercise, and we are looking for someone to own it. This role owns that function end to end: our audits, our evidence base, our risk register, and the security diligence that customers put us through before and during a contract. You will work directly with the Head of Security and across engineering, IT, legal, and sales. This is a program-ownership role with the autonomy and accountability that implies. You will not have a senior compliance function above you to defer to; you are that function. In your first year, success looks like a complete and defensible evidence base with clean audit outcomes, a repeatable way to answer customer security diligence, and a risk register that leadership actually uses. What You'll Do Own our SOC 2 Type II and ISO 27001 programs, and future frameworks as we take them on, including scope, evidence, control operation, and the relationship with our external auditors. Own and complete the control evidence base in our compliance automation platform, moving controls from partially substantia

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. The Risk pillar builds products that help customers understand and act on exposure across their organizations. Our work spans AI and data governance, privacy, identity and access, workforce security, enterprise risk management, and third-party oversight. These areas come together through Vanta's Trust Graph, which connects people, agents, data, controls, assets, and vendors to turn fragmented signals into clear context, prioritization, and action. As a Senior Fullstack Engineer, you'll lead product engineering work end to end across the stack, partnering closely with product and design to turn ambiguous customer problems into simple, high-quality experiences. This role offers a unique opportunity to shape a critical and rapidly growing area of Vanta's product. Depending on team priorities, you might build AI-powered workflows that let the Vanta Agent take on operational work, systems that transform connected signals into trustworthy recommendations, or intuitive experiences for complex internal and third-party programs. You'll tackle unique technical challenges and help customers move from manual, disconnected work to continuous, informed decision-making. Our business has achieved strong product-market fit and has monetized effectively since the day we signed our first customer. As Vanta continues to scale, engineers have meaningful opportunities to accelerate their growth and contribute directly to the company's next stage. What you'll do as a Senior Fullstack Engineer at Vanta: Identify, scope, and lead large technical projects, laying the groundwork for core products to evolve and scale into highly performant, reliable, and

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. This is not a back-office compliance role and it is not a generic sales-engineering role. You will operate as a named member of deal teams under our pod model: paired with Strategic and Enterprise Account Executives, embedded in their weekly cadences, engaged from first discovery through POC, onsite, close, and expansion. You will be the practitioner in the room that a buyer's CISO or GRC lead trusts — and the internal expert our AEs, SEs, and marketing team build around. What you’ll do as a Subject Matter Expert, GTM at Vanta: Serve as the dedicated GRC SME for a book of Strategic/Enterprise Account Executives: join discovery and qualification calls at the earliest deal stages, scope compliance programs against Vanta's platform, and support demos, POCs, workshops, and customer onsites across Compliance, Third-Party Risk Management, Risk Management, and Trust/Questionnaire Automation. Advise prospects on program architecture: multi-framework strategy, shared controls, business-unit and workspace scoping, custom frameworks, and audit sequencing. Answer field questions through our SME channels at customer-forwardable quality — including reviewing and validating AI-agent-generated answers before they reach customers. Our team runs AI-first: you'll use agents daily, act as the quality gate on their output, and (ideally) build tooling of your own. Design and deliver enablement: live sessions for GTM teams, bootcamp scenarios and mock-customer roleplay, async curriculum modules, and review of GRC marketing and SEO content. Own monthly alignment cadences with sales front-line managers; feed structured product feedback to our Product a

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. This is not a back-office compliance role and it is not a generic sales-engineering role. You will operate as a named member of deal teams under our pod model: paired with Strategic and Enterprise Account Executives, embedded in their weekly cadences, engaged from first discovery through POC, onsite, close, and expansion. You will be the practitioner in the room that a buyer's CISO or GRC lead trusts — and the internal expert our AEs, SEs, and marketing team build around. What you’ll do as a Subject Matter Expert at Vanta: Serve as the dedicated GRC SME for a book of Strategic/Enterprise Account Executives: join discovery and qualification calls at the earliest deal stages, scope compliance programs against Vanta's platform, and support demos, POCs, workshops, and customer onsites across Compliance, Third-Party Risk Management, Risk Management, and Trust/Questionnaire Automation. Advise prospects on program architecture: multi-framework strategy, shared controls, business-unit and workspace scoping, custom frameworks, and audit sequencing. Answer field questions through our SME channels at customer-forwardable quality — including reviewing and validating AI-agent-generated answers before they reach customers. Our team runs AI-first: you'll use agents daily, act as the quality gate on their output, and (ideally) build tooling of your own. Design and deliver enablement: live sessions for GTM teams, bootcamp scenarios and mock-customer roleplay, async curriculum modules, and review of GRC marketing and SEO content. Own monthly alignment cadences with sales front-line managers; feed structured product feedback to our Product and PM

Build something people love Wealthsimple is Canada’s leading financial innovator. The company offers a full suite of simple, sophisticated financial products across managed investing, do-it-yourself trading, cryptocurrency, tax filing, spending and saving. Wealthsimple currently serves more than 4 million Canadians and holds over $155 billion in assets under administration. The company was founded in 2014 by a team of financial experts and technology entrepreneurs, and is headquartered in Toronto, Canada. We're proud of what we've built — and we're just getting started. Read our Culture Manual and learn more about how we work . About the team The Client Tax team helps make investing simple, reliable, and compliant for Wealthsimple clients. We lead the systems, processes, controls, and reporting that support tax slips, registered accounts, client statements, withholding, and related regulatory obligations across our growing brokerage business. About the role You’ll lead Wealthsimple’s client tax function across brokerage products and regulated entities, including the people and team capabilities required to deliver the mandate. You’ll be accountable for accurate, timely, and scalable client tax reporting, while building the controls, systems, and operating practices needed to support continued product and client growth. You’ll act as a senior partner to CXO, Product, Engineering, Operations, Compliance, Legal, and Finance, translating complex client tax and regulatory requirements into product design advice with clear decisions and reliable execution. A key part of the role is working closely with CXO to ensure reporting processes, internal & external communications, and issue resolution deliver a clear and reliable client experience. In this role you'll have the opportunity to: Lead the strategy, operating model, and execution of Wealthsimple’s client tax operating function across Canadian and applicable U.S. requirements. Own the end-to-end delivery of client t

Junior SOC 2 Type 2 Auditor Position Overview Clearwater is looking for a Junior SOC 2 Type 2 Auditor to support the planning, execution, and documentation of SOC 2 Type 2 audits. The role will work closely with internal teams, control owners, external auditors, and compliance stakeholders to assess the design and operating effectiveness of controls and ensure appropriate audit evidence is maintained. The ideal candidate should have good understanding of SOC 2, IT general controls, information security, risk management, and compliance frameworks , with strong attention to detail and documentation skills. Key Responsibilities Support SOC 2 Type 2 audit activities from planning through completion. Assist in reviewing and testing controls related to security, availability, confidentiality, processing integrity, and privacy, as applicable. Collect, organize, and validate audit evidence from control owners. Perform preliminary testing of controls for design and operating effectiveness under the supervision of senior auditors. Review evidence for completeness, accuracy, relevance, and appropriate audit periods. Identify control gaps, exceptions, and missing evidence and communicate them to relevant stakeholders. Maintain audit workpapers, testing documentation, evidence trackers, and issue logs. Follow up with control owners to obtain missing or updated evidence. Assist in preparing audit findings and documenting observations, exceptions, and remediation activities. Support management in tracking remediation plans and closure of identified control deficiencies. Participate in walkthroughs and discussions with IT, Security, Engineering, HR, Legal, Finance, and other business teams. Assist with maintaining SOC 2 policies, procedures, control descriptions, and supporting documentation. Stay current with SOC 2 requirements, security and compliance practices, and relevant industry standards. Required Qualifications Bachelor's degree in Infor

A Career with Point72's Technology Team As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications. As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity—all while delivering real business impact for our multi-billion-dollar global business. WHAT YOU'LL DO Shape high-impact treasury applications used by internal financing, liquidity, and margin teams to make faster, better-informed decisions Design intuitive user experiences that translate complex financial data into clear workflows for analysis, monitoring, and action Build responsive single-page applications that expose large data sets without compromising usability, performance, or reliability Develop back-end services that deliver trusted data and calculations through clean, scalable service interfaces Implement efficient pagination and data retrieval patterns that support demanding client-side controls and large-volume reporting Partner with product owners, business users, and engineers to translate treasury needs into practical, durable technology solutions Improve application quality through thoughtful design, testable code, peer review, and disciplined engineering practices Contribute to architecture decisions across front-end and back-end components as the

The Security Operations (SecOps) Engineer is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats across the organisation’s infrastructure, cloud services, endpoints, identities, and business applications. The role supports continuous improvement across security monitoring, vulnerability management, incident response, governance, and operational security controls. Working closely with IT, engineering, and business stakeholders, the SecOps Engineer helps protect organisational assets, data, and services while supporting compliance with internal policies, security standards, and regulatory requirements. Building innovative solutions; enabling safer workplaces for everyone. We’ll create a safer working world, building software to support a global network of responsible buyers, suppliers and partners. We take the pain out of compliance for over 50,000 organisations globally, helping them protect their people, their operations, and the planet. Keeping our network of hiring clients, suppliers, and contractors compliant with the standards that matter most, from health and safety and sustainability to ethical behaviour by building best in class solutions. The tech we build today, will create a better tomorrow. • Monitor and investigate security alerts and incidents. • Conduct threat hunting activities using SIEM, EDR, and cloud security platforms. • Manage vulnerability scanning, assessment, prioritisation, and remediation tracking. • Develop and maintain security monitoring rules and detection logic. • Support incident response investigations and forensic activities. • Administer security platforms such as Microsoft Defender XDR, Sentinel, Entra ID, and vulnerability management tools. • Review and improve security configurations across cloud and on-premises systems. • Support third-party risk assessments and supplier security reviews. • Assist with ISO 27001, SOC, Cyber Essentials, GDPR, and other compliance activities. • Develop se

The Security Operations (SecOps) Engineer is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats across the organisation’s infrastructure, cloud services, endpoints, identities, and business applications. The role supports continuous improvement across security monitoring, vulnerability management, incident response, governance, and operational security controls. Working closely with IT, engineering, and business stakeholders, the SecOps Engineer helps protect organisational assets, data, and services while supporting compliance with internal policies, security standards, and regulatory requirements. Building innovative solutions; enabling safer workplaces for everyone. We’ll create a safer working world, building software to support a global network of responsible buyers, suppliers and partners. We take the pain out of compliance for over 50,000 organisations globally, helping them protect their people, their operations, and the planet. Keeping our network of hiring clients, suppliers, and contractors compliant with the standards that matter most, from health and safety and sustainability to ethical behaviour by building best in class solutions. The tech we build today, will create a better tomorrow. • Monitor and investigate security alerts and incidents. • Conduct threat hunting activities using SIEM, EDR, and cloud security platforms. • Manage vulnerability scanning, assessment, prioritisation, and remediation tracking. • Develop and maintain security monitoring rules and detection logic. • Support incident response investigations and forensic activities. • Administer security platforms such as Microsoft Defender XDR, Sentinel, Entra ID, and vulnerability management tools. • Review and improve security configurations across cloud and on-premises systems. • Support third-party risk assessments and supplier security reviews. • Assist with ISO 27001, SOC, Cyber Essentials, GDPR, and other compliance activities. • Develop se

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Anthropic is growing fast, and our SOX program needs to keep up. Many of the controls that matter for financial reporting run on engineering systems: who can access production and financial systems, how code changes are reviewed and deployed, and how usage is metered and billed. We’re hiring a Technical Program Manager to own the technology side of our SOX program. You'll work across engineering, security, GRC, Finance, and Internal Audit to design and run IT controls, drive gaps to closure, and make compliance lighter for engineering teams. You’ll also use Claude to automate evidence collection and control testing, so the program scales without more manual work. Responsibilities Own the technology side of the SOX program end-to-end, from planning and control design through evidence, testing, remediation, and year-end reporting Work with engineering teams to design and roll out IT general controls and IT application controls Work with engineering teams to build Claude-based workflows, tools, and dashboards to automate evidence collection, control testing, and monitoring that warns engineering teams about compliance issues before an audit finds them Lead large SOX projects, such as bringing new systems into scope, with clear success criteria, dependencies, and delivery dates Turn control requirements into concrete engineering work with clear scope, owners, and deadlines, and a design that fits how our teams already build and ship Build processes to evaluate new products, systems, and major engineering changes for SOX impact before they ship, so the right controls are in place from the start Build strong working relations

The mission of The New York Times is to seek the truth and help people understand the world. That means independent journalism is at the heart of all we do as a company. It’s why we have a world-renowned newsroom that sends journalists to report on the ground from nearly 160 countries. It’s why we focus deeply on how our readers will experience our journalism, from print to audio to a world-class digital and app destination. And it’s why our business strategy centers on making journalism so good that it’s worth paying for. About the Role The Manager, Business Operations and Enablement is a people leader and operational owner supporting The New York Times' Advertising organization. You will translate advertising strategy into scalable execution across the sales cycle. Responsibilities will include managing client coordinators, resource planning, classified business operations, Salesforce governance and enablement, performance analytics, and competitive intelligence. Our mission in BOE is to provide the best experience to our internal and external clients. You will report to the Sr. Director, BOE and partner with the Executive Director, BOE. This is a hybrid role based in the NYC office. Responsibilities: You will lead a team of client coordinators, developing skills, managing capacity planning, staffing, coverage. Establish and strengthen service standards, quality controls, and operating rhythms for POD support and designated client coordinator accounts. Lead daily classified business operations. Be an escalation point for complex operational issues. You will lead high-priority advertising projects, from definition through delivery. Coordinate pre and post-sale workflows and processes. Evaluate tools for AI/automation opportunities that create operational value. Lead competitive-intelligence operations. Establish governance for processes, data definitions, documentation, and compliance. Promote Salesforce enablement and adoption. Partner with BOE leads to refi

RDQ427R608 While candidates in the listed location(s) are encouraged for this role, candidates in other US locations will be considered. --- About the Team The Enterprise Security team at Databricks is responsible for securing the corporate environment, including the SaaS platforms, internal tools, integrations, automation workflows, and AI-adjacent systems that Databricks employees and operations depend on. We work at the intersection of enterprise architecture, security engineering, and business enablement, partnering with IT, Engineering, Legal, Privacy, and Procurement to surface risk early, set enforceable security standards, and enable the business to operate securely at scale. The Role As a Sr. Security Engineer on the Enterprise Security team, you turn security requirements into working protections across Databricks' enterprise environment. You implement, integrate, test, and improve security controls across enterprise applications, identity, endpoint, network, SaaS, and data-security systems. You bring strong hands-on engineering experience, developing automation and reusable capabilities that strengthen preventive controls, improve security coverage, and reduce repetitive manual work. You work closely with security domain leads, IT, and platform owners to translate approved security designs into practical implementations. Your focus is on delivering reliable controls, automating recurring security checks and workflows, and continuously validating that protections remain effective as enterprise systems evolve. The Impact You Will Have Security Control Engineering & Implementation Implement and improve preventive security controls across enterprise systems, translating approved security requirements into tested, operational protections. Partner with security domain leads, IT, and platform owners to implement access, configuration, endpoint, network, and data-protection guardrails. Develop reusable technical implementations and secure configuration patter

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Role As a Senior Analyst, Travel & Expense, you will run the day-to-day financial controls, audit program, and executive reporting behind Anthropic's T&E function. T&E touches every employee, every legal entity, and every executive, and it runs on Navan, Brex, and negotiated supplier agreements. Spend and transaction volume have grown several-fold in the past six quarters, and the controls need to scale to meet a public-company standard. You will report to the Head of Travel & Expense in Finance Operations and work daily with Accounting, Tax, Payroll, Talent, Security, Legal, Finance Systems and Administrative Business Partners. Responsibilities Controls & SOX Compliance Own the day-to-day operation of key T&E controls, including approvals, card issuance and spend limits, segregation of duties, and policy exceptions, within the control framework set by the Head of T&E, who owns the overall T&E process Maintain the T&E process narratives and risk and control matrix, and keep them current as systems and policies change Ensure correct GL coding and complete, accurate month-end reconciliations across Navan, Brex, and Workday, and support close, flux analysis, and accruals Act as the preparer for T&E controls and the day-to-day contact for internal and external auditors: gather and retain evidence, support walkthroughs and sample requests, and track remediation, escalating significant issues to the Head of T&E International Expansion Controls Set up and maintain entity-level coding and approval flows in Brex and Navan as new legal entities and countries come online Document and operatio

A Career with Point72's Technology Team As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications. As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity while delivering real business impact for our multi-billion-dollar global business. WHAT YOU'LL DO Serve as a technical subject matter expert within our firm’s third-party information security risk management program Perform in-depth security assessments of new and existing third parties that access, process, store, or transmit firm information Evaluate the design and effectiveness of third-party security controls across technical environments and service delivery models Analyze business use cases, data flows, system integrations, and technical architectures to establish appropriate risk context Review security evidence, including assurance reports, certifications, penetration tests, vulnerability assessments, policies, and architecture documentation Assess controls across identity, cloud and infrastructure security, network security, vulnerability management, data protection, monitoring, incident response, and application security Engage third parties and internal technical stakeholders to validate responses, investigate control gaps, and evaluate remediat

About Supabase Supabase is the Postgres development platform, built by developers for developers. We provide a complete backend solution including Database, Auth, Storage, Edge Functions, Realtime, and Vector Search. All services are deeply integrated and designed for growth. About the Role We are looking for a Head of AI Native Operations to build the autonomous systems that run Supabase. Supabase is building an AI-native internal operating system, where agents carry the operational load end to end. We are standing up a new central team to build that platform and run it in production. This is the role that leads it, and it is hands-on. You design the architecture, build the first versions of the critical pieces, and are accountable for whether every agent we run is correct, safe, and improving over time. We build rather than buy, and there are no settled best practices for most of this yet, so you will be setting them. You will lead a team of senior individual contributors extending the platform and driving adoption across teams. What You’ll Be Responsible For In this role, you’ll: Own the agent platform architecture: The harness and orchestration layer and connectors into company systems, shared context and memory, and the path from prototype to production. Catch regressions before they ship: Model, prompt, and tool changes can’t ship until they pass the evals. When a new model comes out, you know within hours whether to adopt it. Make every agent observable: Every run and every decision is traced. For any agent at any time, you can answer what it did, why, what it cost, and how its quality is trending. Own safety and trust: Design the controls that let agents act without a human in the loop: least-privilege credentials, hard policy limits, escalation thresholds, audit logs, sandboxing, and prompt-injection defenses. Replace workflows, don’t assist them: Pick the workflows agents can fully own today and take them to production. Turn wins into a platform: Package w