Operational Risk And Controls Senior Jobs

WHO WE ARE: Zinnia is the leading technology platform for accelerating life and annuities growth. With innovative enterprise solutions and data insights, Zinnia simplifies the experience of buying, selling, and administering insurance products. All of which enables more people to protect their financial futures. Our success is driven by a commitment to three core values: be bold, team up, deliver value – and that we do. Zinnia has over $180 billion in assets under administration, serves 100+ carrier clients, 2500 distributors and partners, and over 2 million policyholders. WHO YOU ARE: Zinnia is seeking a Financial Systems Internal Controls Specialist to help strengthen the internal control environment across our financial systems and related business processes. In this role, you will partner with Finance, Accounting, Financial Systems, Information Technology, Information Security, and Audit teams to document processes, assess risks, test controls, and support the remediation of identified issues. You will develop clear, audit-ready documentation and help ensure that controls remain effective as systems, integrations, and business processes evolve. This position is ideal for an internal controls, audit, or financial systems professional who enjoys understanding how systems and processes work, identifying risks, and developing practical solutions that improve control effectiveness and operational efficiency. WHAT YOU’LL DO: Lead process walkthroughs with accounting, finance, technology, and business stakeholders. Develop and maintain process narratives, flowcharts, standard operating procedures, data-flow diagrams, and risk and control matrices. Evaluate whether controls are appropriately designed to prevent or detect errors, unauthorized activity, and incomplete or inaccurate financial processing. Perform tests of control design and operating effectiveness. Develop test procedures, validate testing populations, select samples, inspect evidence, document exceptions,

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive. We’re looking for a proactive, collaborative Manager of Internal Audit to help execute our internal audit program and support Lyft’s governance, risk management, and compliance efforts. This role will focus on both business and technology audits, helping identify and address key risks while delivering insights that enable informed decision-making. Reporting to the Director of Internal Audit, and based in our San Francisco HQ, you’ll work closely with stakeholders across the company to strengthen controls, improve processes, and drive continuous improvement. Responsibilities: Audit Execution & Risk-Based Planning Execute audit and advisory engagements spanning across both technology (e.g. cybersecurity, data governance, infrastructure, etc.) and business (e.g. operations, compliance, etc.) domains from end to end — including planning, fieldwork, testing, and reporting. Perform annual risk assessment over assigned risks to develop and refine the annual risk-based audit plan. Take a hands-on approach to audits, ensuring findings are data-driven, relevant, and aligned with business objectives. Use process improvement techniques (e.g. process mapping, root cause analysis, gap assessments) to identify opportunities for enhanced control design and operational efficiency. Perform risk assessments and identify areas for process improvement, control enhancement, or technology enablement. Ensure timely and effective follow-up on remediation of audit findings, coordinating with business owners to verify resolution. Collaborate with cross-functional teams — including Engineering, Security, Legal, Finance, and Compliance — to assess risks and test key controls. Stay current on evolving risks related to emerging technologies, regulatory changes, and internal initiatives. Enterprise Risk Management (ERM) Support

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive. We’re looking for a proactive, collaborative Manager of Internal Audit to help execute our internal audit program and support Lyft’s governance, risk management, and compliance efforts. This role will focus on both business and technology audits, helping identify and address key risks while delivering insights that enable informed decision-making. Reporting to the Director of Internal Audit, and based in our San Francisco HQ, you’ll work closely with stakeholders across the company to strengthen controls, improve processes, and drive continuous improvement. Responsibilities: Audit Execution & Risk-Based Planning Execute audit and advisory engagements spanning across both technology (e.g. cybersecurity, data governance, infrastructure, etc.) and business (e.g. operations, compliance, etc.) domains from end to end — including planning, fieldwork, testing, and reporting. Perform annual risk assessment over assigned risks to develop and refine the annual risk-based audit plan. Take a hands-on approach to audits, ensuring findings are data-driven, relevant, and aligned with business objectives. Use process improvement techniques (e.g. process mapping, root cause analysis, gap assessments) to identify opportunities for enhanced control design and operational efficiency. Perform risk assessments and identify areas for process improvement, control enhancement, or technology enablement. Ensure timely and effective follow-up on remediation of audit findings, coordinating with business owners to verify resolution. Collaborate with cross-functional teams — including Engineering, Security, Legal, Finance, and Compliance — to assess risks and test key controls. Stay current on evolving risks related to emerging technologies, regulatory changes, and internal initiatives. Enterprise Risk Management (ERM) Support

At Freddie Mac, our mission of Making Home Possible is what motivates us, and it’s at the core of everything we do. Since our charter in 1970, we have made home possible for more than 90 million families across the country. Join an organization where your work contributes to a greater purpose. Position Overview: Are you an experienced HR technology leader passionate about operational excellence, workforce technology strategy, and delivering exceptional employee experiences? Freddie Mac is seeking a Workforce Technology Operations Manager to lead the team responsible for the technology operations, workforce data, governance, and service delivery that support critical workforce programs across the enterprise. In this leadership role, you will oversee the reliability, security, and performance of workforce technology services while driving continuous improvement, managing operational risk, and enabling scalable solutions that support business priorities and employee outcomes. Our Impact: We enable the technology, data, and operational capabilities that support Freddie Mac's workforce and employee experience. Through strong governance, reliable service delivery, and trusted workforce data, we help ensure workforce technology solutions operate securely, efficiently, and effectively across the enterprise. Partnering across HR, Technology, Risk, and business teams, we drive operational excellence, strengthen controls, improve employee experiences, and deliver technology solutions that support organizational success. Your Impact: In this role, you will: Lead and develop a team responsible for workforce technology operations, security administration, workforce data governance, and service delivery. Manage the production operations of workforce technology applications, including platform reliability, integrations, releases, issue resolution, and ongoing support.

About Ramp Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $200B in annualized spend flows in and out of 70,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. About the Role The Employee Lifecycle Analyst is a critical member of Ramp's People Operations team, responsible for the data workflows that power every employee's experience at Ramp. You'll be a trusted operational partner to our Comp, Finance, and HR teams, bringing structure and precision to cross-functional processes while building the documentation and systems that scale with the business. This is a role for someone who loves getting into the details, takes real pride in accuracy, and is excited to build — not just maintain — the processes that support every employee at Ramp. What You'll Do ~60%: Data Management Own end-to-end employee data changes in our HRIS and connected systems including internal moves, title changes, compensation updates, bulk uploads, complex exceptions. Ensuring accuracy and timeliness across every change. Establish and run data-audit, reconciliation, cleansing, and issue-resolution routines; identify root causes and drive durable fixes. Build scalable operating procedures and controls that improve data quality ahead of

Location Details: Remote, India At GoDaddy the future of work looks different for each team. Some teams work in the office full-time; others have a hybrid arrangement (they work remotely some days and in the office some days) and some work entirely remotely This is a remote position, so you’ll be working remotely from your home. You may occasionally visit a GoDaddy office to meet with your team for events or meetings Join Our Team... GoDaddy’s Product Security team is looking for a Security Engineer who is passionate about helping build secure products and services used by millions of customers worldwide. In this role, you will work closely with engineering and platform teams to identify security risks, improve security practices, and help embed security throughout the software development lifecycle. You will have the opportunity to learn from experienced security professionals while contributing to initiatives that improve the security and resilience of our products, platforms, and cloud environments. The ideal candidate is curious, hands-on, eager to learn, takes ownership of their work, and excited to solve security challenges at scale! What you'll get to do... Identify, assess, and help remediate security risks across applications, infrastructure, cloud environments, and AI-enabled services Partner with engineering and platform teams to design, implement, and improve security controls throughout the software development lifecycle Conduct security reviews, threat modelling, and risk assessments to help build secure, resilient, and scalable systems Develop and enhance automation, tooling, and processes that strengthen security coverage, improve detection and response capabilities, and increase operational efficiency Investigate security findings, stay informed on emerging threats and technologies, and contribute to a culture of security awareness and continuous learning Your experience should include... 2+ yea

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career. About the team To advance Stripe’s important mission, we are building a world class Internal Audit (IA) team. Our purpose is to strengthen the organization’s ability to create, protect, and sustain value by providing the board and management with independent, risk-based, and objective assurance, advice, insight, and foresight. We are consumed with the goal of moving as fast as the business, being powered by technology, and increasing the maturity of Stripe’s controls where it matters the most. Our IA team is responsible for providing objective assurance on the design and operational effectiveness of Stripe’s internal controls and business processes, its compliance with laws and regulations, its risk management framework, and other governance processes. Currently Stripe IA supports various APAC licenced entities including Singapore, India, Australia, New Zealand, Thailand, Malaysia, Indonesia, and Japan. We’re looking for a candidate with deep finance, operations and regulatory compliance audit experience who will help us build and scale a global audit program and its relevance in the region. What you’ll do As a member of the APAC IA team you will support our audit landscape in one of the most dynamic sectors of FinTech. In this role, you will assist in the execution of a comprehensive, risk-based internal audit strategy that anticipates emerging risks and aligns with our management's vision and regulatory landscape. As a member of the global IA team,

About the Team OpenAI Finance ensures the organization is positioned for long-term success as we pursue our mission. The Revenue team plays a critical role in enabling OpenAI to scale commercial offerings by overseeing billing operations, deal desk, revenue systems, revenue accounting, and controllership. We work cross-functionally with Product, Engineering, Go-To-Market, Tax, Legal, and Technical Accounting to support new monetization strategies, improve operational efficiency, and maintain financial integrity as the business grows. About the Role This role will own accounting and controllership for OpenAI's advertising products. You will help build the financial foundation for Ads from early scale into durable operations, including revenue recognition, close, controls, reporting, reconciliations, and risk assessment across measurement logic, billing data, rev-share structures, incentives, credits, and emerging monetization models. You will be a finance partner to Product, Engineering, Technical Accounting, Go-To-Market, Tax, Legal, and Financial Systems. The role requires someone who can independently operate in ambiguity, design 0-to-1 processes and apply AI automation thoughtfully to support a rapidly evolving product environment. Advertising is a critical and growing monetization vector for OpenAI, and this role will help shape the financial foundations that enable Ads to scale responsibly and transparently. You’ll be responsible for: Own end-to-end accounting and controllership for Ads revenue, including revenue recognition, contra-revenue, rev-share, incentives, credits, rebates, and related close activities under ASC 606. Design and execute scalable month-end and quarter-end close processes for Ads, ensuring accurate, complete, and timely reporting supported by reconciliations, flux analysis, and reviewer-ready evidence. Design accounting and control frameworks for global Ads expansion, including new currencies, billing entities, tax/invoice localization, FX

About the Team Corporate Security helps protect OpenAI's people, offices, events, and operations through practical and risk-informed security programs. The team partners closely with Workplace, Legal, People/HR, Resilience & Safety, Executive Operations, GSOC, regional leaders, vendors, and building management. About the Role OpenAI is seeking a Paris-based Security Operations Manager to lead corporate and physical security operations for Paris, provide primary support for Brussels, and coordinate regional support for Munich, Zurich, and other European cities as needed. This person will be a trusted security partner for local teams, regional stakeholders, vendors, building management, and global Corporate Security peers. In this role, you will: Lead day-to-day physical security operations for the Paris office and supporting Brussels operations. Coordinate regional security support for Munich, Zurich, and other European cities where business activity, events, travel, or executive visits require coverage. Manage practical security controls, including access management, visitor workflows, vendor coordination, incident response, emergency readiness, and site security documentation. Partner with Workplace, building management, Legal, People/HR, EHS/Resilience, GSOC, Executive Operations, and local leadership to keep security effective, locally appropriate, and employee-friendly. Support event and executive visit planning with clear escalation paths, stakeholder alignment, and proportionate risk mitigation. Improve vendor performance, operational standards, reporting, and remediation tracking. You might thrive in this role if you have: 8+ years of experience in corporate security, physical security operations, protective services, emergency management, public service, military, law enforcement, or a closely related operational field. Experience leading physical security operations in a modern office environment, ideally in technology, professional services, financial

About the Role This role will serve as a key execution partner to the GenAI Customer Compliance Manager, with a strong focus on supporting GenAI delivery workflows through embedded compliance operations and Legal coordination. The GenAI Compliance Operations & Programs Associate will sit at the intersection of Delivery, Ops, and Legal, ensuring that compliance considerations are integrated early in the project lifecycle, risks are clearly identified and prioritized, and Legal is engaged with the right context at the right time. By owning execution, coordination, and delivery integration, this role frees the Customer Compliance Manager to focus on strategy, governance, and risk frameworks. The role requires strong operational ownership, comfort with ambiguity, and the ability to drive alignment across fast-moving, cross-functional teams. Key Responsibilities Compliance Review Operations & Legal Coordination Manage end-to-end compliance review workflows for GenAI projects — from early-stage intake through review, approval, launch, and verification — in close partnership with Engagement Management and Delivery. Evaluate incoming work for compliance risk signals (e.g., data sensitivity, copyright exposure, privacy concerns); triage and prioritize requests for Legal based on risk, scope, and delivery timelines. Partner with Engagement Management to translate and execute risk mitigation at both the project and customer level, gather operational input to develop and prioritize systematic compliance controls, and train/educate Ops stakeholders on common or emerging compliance risks. Ensure Legal receives clear, structured, and actionable context; coordinate reviewers across Legal and internal teams to support SLA adherence. Identify workflow friction points and contribute to improving processes, templates, and prioritization frameworks. Maintain dashboards to track throughput, bottlenecks, SLAs, and risk trends. Risk Mitigation Solutions & Monitoring Support Eng

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role Replit is the agentic software creation platform that enables anyone to build applications using natural language. As we scale to support millions of developers and enterprise organizations, maintaining a robust, transparent, and technically sound Governance, Risk, and Compliance (GRC) program is critical. We are looking for a GRC Engineer to serve as a key technical contributor for our compliance and risk management ecosystem. You will architect the systems and processes that automate trust, partnering deeply across the organization. We need a pragmatic operator who understands that GRC exists to enable the business—balancing rigorous standards with the velocity of a high-growth startup. What You'll Do Technical Excellence & Architecture Technical Depth: Act as a technical subject matter expert for the GRC team. You will drive quality, technical depth, and operational efficiency in our security controls. Program Architecture: Own the technical vision for Replit’s GRC program, moving the team from manual workflows toward "Compliance-as-Code" and automated evidence collection. Thought Leadership: Champion a culture of security and privacy across the company, educating teams on why controls exist rather than just enforcing them. Cross-Functional Collaboration Engineering & Architecture: Partner with Architects and Engineering Leads to "bake in" compliance requirements early in the design phase. You will translate complex technical implementations into narratives that satisfy frameworks without slowing down development. Legal & Privacy: Work closely with Legal Counsel to interpret and implement requirements for Privacy (GDPR, CCPA) and emerging AI-specific regulations (e.g., EU AI Act). Sales &a

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team To advance Stripe's important mission, we are building a world-class Internal Audit (IA) team. Our purpose is to strengthen the organization's ability to create, protect, and sustain value by providing the board and management with independent, risk-based, and objective assurance, advice, insight, and foresight. We are consumed with the goal of moving as fast as the business, being powered by technology, and increasing the maturity of Stripe's controls where it matters most. Our IA team is responsible for providing objective assurance on the design and operational effectiveness of Stripe's internal controls and business processes, its compliance with laws and regulations, its risk management framework, and other governance processes. Organized as a single global function, the team operates under a unified methodology, set of policies, and governance model—with specialized leads who bring deep domain expertise while working in alignment with that shared framework. We're looking for a leader with extensive finance, operations, fiduciary, and regulatory compliance audit experience who will help us build and scale a global audit program. What you'll do As the IA Lead for Stablecoins and Digital Assets, you'll be the primary architect of our internal oversight framework for stablecoin and digital asset activities—serving as a subject matter expert and embedded specialist within the global Internal Audit team, reporting to Bridge National Trust Ba

WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Why we're hiring: The Technology Risk & Controls Analyst operates as part of the second line Technology Risk & Controls function, working under the direction of the Technology Risk & Controls Manager, Tech Ops. The role supports the delivery of independent assurance over Technology Operations control environments, including infrastructure, cloud platforms, identity and access management, service management and core operational processes. The role is focused on executing high-quality control testing, audit support and remediation assurance activities in line with WPP standards and methodologies. The Analyst works closely with Technology Operations teams, Financial Risk & Control colleagues and auditors to evidence control performance, support audit readiness (including SOX 404) and contribute to a consistent, well-documented and sustainable control environment. What you'll be doing: Perform control design and operating effectiveness testing across Technology Operations processes, including change management, access management, incident/problem management, backup and resilience controls,

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . As a Luxembourg Audit Manager, you'll join the Internal Audit team and own a portfolio of operational, financial, and compliance audits across Coinbase's Luxembourg entity operations. This team delivers independent, third-line assurance over governance, risk management, and control effectiveness, helping Coinbase protect customers and maintain trust at scale. You'll shape audit coverage aligned with European and Luxembourg regulatory requirements (CSSF, ECB, EBA, ESMA), ensure findings from complex audit work are communicated to executive, Board-level, and regulatory audiences, and lead team members to build a best-in-class operational audit function. What you'll do: Own and coordinate a portfolio of operational, financial, and compliance audits covering financial controls, regulatory compliance, business processes, vendor/third-party risk, and data governance in accordance with CSSF, CBL, ECB, EBA, and ESMA requirements. Shape the multi-year operational and compliance audit roadmap, coordinating coverage with co-sourced partners and aligning with enterprise risk initiatives and European regulatory frameworks (MiCA, PSD2, AMLD, DORA). Synthesize complex audit findings into high-impact reports and presentations for executive leadership, the Chief Audit Executive, Audit Committee, Board of Directors, and regulatory bodies, ensuring conclusions are rigorous, documented,

About the Team Governance, Risk, and Compliance (GRC) is foundational to Security delivering mission outcomes at OpenAI. We’re excited about building creative solutions to ambiguous security requirements and delivering new technologies to mission critical customers. The GRC team provides security and engineering expertise to ensure our customers’ most critical and stringent requirements are met. We are technical in what we build but are operational in how we do our work, and are committed to obtaining, expanding, and maintaining Authorizations to Operate (ATOs) for critical systems while fostering a collaborative and execution-driven culture. About the Role Our technologies support some of the most important and impactful work in the world, including our strategic and high-impact customers in the public sector. As a GRC Program Manager, you’ll play a pivotal role in achieving US government (USG) ATOs and compliance frameworks, including but not limited to FedRAMP and Department of War (DoW),for OpenAI products and support agency-specific ATOs for systems deployed in highly regulated and secure environments. You’ll work closely with engineers, internal stakeholders, and external assessors to design, document, and implement security controls that meet stringent compliance requirements. Your creativity and execution-focused approach will be critical in navigating complex challenges while maintaining the trust of our stakeholders. We’re looking for people who bring: Proven experience in obtaining and maintaining a FedRAMP ATO and agency specific ATOs in highly restricted environments, within government or regulated sectors. A deep understanding of USG security frameworks and policies (e.g., NIST, RMF, FedRAMP). Ability to communicate technical concepts to diverse audiences, including engineers and non-technical stakeholders. Exceptional technical program management skills, with the ability to multitask and deliver large complex programs under pressure. This role is base