Principal Security And Compliance Analyst Jobs

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What Is The Role : Join our team as a Principal Security Compliance Analyst , where you'll take the lead in managing our FedRAMP Moderate program . You'll be part of a fantastic team that values a strong security culture, allowing you to contribute meaningfully to our mission while collaborating with like-minded professionals. Your expertise will help us maintain and enhance our compliance efforts in a supportive and engaging environment. What You Will Be Doing : Manage the FedRAMP Moderate authorization and continuous monitoring program. Maintain the System Security Plan, policies, procedures, evidence, inventories, diagrams, and other required documentation. Coordinate assessments and reviews with our 3PAO, federal agency partners, consultants, and internal teams. Track security findings and POA&M items through remediation. Work with Security, Engineering, IT, Product, and Legal teams to implement and maintain required controls. Monitor program deadlines, risks, and compliance metrics and report progress to leadership. Review system and product changes for potential FedRAMP impact. Help control owners understand their responsibilities and prepare appropriate evidence. What You Bring : 5+ years of experience managing or supporting a FedRAMP Moderate program. Strong understanding of FedRAMP, NIST SP 800-53, and continuous monitoring requireme

Job Requisition ID # 26WD101016 Job Title: SOX IT Compliance Analyst [P4] Location: Canada Company: Autodesk Job Type: Full-Time Job Summary Autodesk is seeking an experienced Compliance Analyst to lead key aspects of its Sarbanes-Oxley (SOX) IT General Controls (ITGC) program. This individual contributor role combines deep technical expertise, independent judgment, and business understanding to strengthen the effectiveness, scalability, and sustainability of the IT control environment supporting financial reporting. A successful candidate will take end-to-end ownership of significant ITGC workstreams and initiatives, including onboarding new systems into SOX scope, evaluating controls for systems within SOX scope and improving evidence collection and testing through automation. They will interpret complex technical and regulatory requirements, evaluate business and compliance risks, and recommend practical solutions with minimal supervision. Working closely with control owners, Engineering, IT, Security, Audit & Advisory Services, and external auditors, this individual will influence technical and control decisions, drive cross-functional outcom

We take play seriously. We’re looking for curious adventurers ready to find their party, fueled by imagination and drive to build what’s never been built before. At Hasbro and Wizards of the Coast, you’ll collaborate with passionate teams to reimagine our iconic brands and create experiences that spark joy, connection, and community through the magic of play. This is your chance to shape legendary play that lasts a lifetime. About the Role Hasbro is seeking a Principal SAP Security Analyst to join our IT Security team in Montreal. This senior individual contributor position will assist in steering access governance, role development, compliance readiness, and security controls across SAP ECC, S/4HANA, SAP RISE, SAP Business Technology Platform, Identity Authentication Service, and Identity Provisioning Service. We are shifting more SAP security responsibility internally and need someone who can guide complex tasks through knowledge, collaboration, and sound judgment. This role is not a people manager position, but it does provide technical direction to SAP analysts, access administrators, project teams, business partners, auditors, and implementation partners. What You’ll Do Build SAP security architecture, standards, access models, and role design practices. Support our migration to SAP RISE, including role mapping, identity integration, access transition, privileged access, connectivity, and post-migration controls. Develop and enhance Role-Based Access Control models that uphold least-privilege, address business needs, and meet compliance requirements. Lead role cleanup, redesign, simplification, and Segregation of Duties remediation. Set up and maintain SAP Identity Access Governance and SAP Governance Risk and Compliance, covering connectors, workflows, risk rules, provisioning, access analysis, and reporting. Strengthen access provisioning, access reviews, emergency and privileged access oversight. Support SOX and IT General Contro

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. About the role: As a member of the Roblox Security Governance, Risk, and Compliance (GRC) team, you will play a key role in supporting the Security team’s mission. The GRC team is at the heart of Roblox's security organization — empowering every builder to make risk-informed decisions by establishing a portfolio of governing policies and standards, a repeatable and scalable method of assessing and quantifying risk, and a formal oversight process for GRC capabilities across Roblox. Our program takes a balanced, "right-sized" approach to security governance — combining qualitative and quantitative risk management methodologies, including Factor Analysis of Information Risk (FAIR), to assess and prioritize the security risks that matter most to Roblox. GRC partners closely with Engineering, Legal, Finance, and leadership — including providing regular reporting to the Board of Directors and the Audit & Compliance Committee — to ensure that security risk is visible, well-understood, and actioned appropriately. The team is in an exciting phase of growth and innovation. We are using engineering to drive automation across risk management, policy lifecycle management, supply chain risk, AI risk,

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As Principal Product Marketing Manager, Competitive, you own GitLab's competitive point of view on AI and agentic software development and serve as the authority on our market differentiation. You consult regularly with sales, product teams, investor relations, industry analysts, and leadership on competitive strategy and roadmap implications while publishing external thought leadership. With deep experience in the modern SDLC and agentic tooling, you collaborate with developer advocacy and conduct primary market analysis to drive positioning, field assets, competitive plays, and partnership strategy. In

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Principal Software Engineer, Data Architecture Overview: Mastercard's Data & Analytics organization is seeking a visionary Principal Software Engineer, Data Architecture to define and advance our global enterprise data architecture strategy. Reporting to the Vice President of Data Engineering, this role will lead the design and evolution of strategic platforms that simplify how external data is securely exchanged with Mastercard and enable product teams, consultants, and analysts to more easily discover, access, and leverage enterprise data. The successful candidate will establish the architectural vision for platforms that transform complex, fragmented data processes into scalable, self-service experiences that accelerate innovation and unlock greater value from Mastercard's data assets. This position combines deep hands-on technical expertise with enterprise influence, driving architectural decisions that maximize the value of Mastercard's data assets while meeting the highest standards for security, resiliency, compliance, and operational excellence. Role: • Serve as the senior technical leader for enterprise data architecture, partnering closely with the VP and senior technology leadership. • Act as a trusted advisor to executive stakeholders, translating business strategy into scalabl

About Graphcore Graphcore is a globally recognized leader in Artificial Intelligence computing systems. The company designs advanced semiconductors and data center hardware that provide the specialized processing power needed to drive AI innovation, while delivering the efficiency required to support its broader adoption. As part of the SoftBank Group, Graphcore is a member of an elite family of companies responsible for some of the world’s most transformative technologies. We are opening a new AI Engineering Campus in Austin, which will play a central role in Graphcore's work building the future of AI computing. About the Role We are seeking a Principal Security Architect to design, maintain and secure scalable infrastructure solutions for cryptographic key management. In this strategic role, you will be responsible for evaluating, deploying and manage Hardware Secure Modules from the ground up, ensuring compliance with standards across different regions. You will also enable multiple teams by supporting them for control and automation. You will be expected to drive and implement policies for key and certificate creation, rotation, and revocation. Collaboration with stakeholders to analyze requirements and implement robust access controls is essential while demonstrating operational excellence. RESPONSIBILITIES Design and deploy scalable, secure infrastructure solutions from scratch, aligned with business requirements and security standards. Hardware Secure Module ownership and governance. Develop organizational standards, policies, access models, and workflows to ensure consistent, secure usage of the platform. Conduct risk and compliance assessments to support system security plans and disaster recovery strategies. Collaborate on requirement analysis, user and key story operations, and capacity planning to ensure optimal resource utilization. Advocate for best practices in secret lifecycle management, a

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. As a Regional Governance, Risk, Compliance (GRC) Principal, you will serve as the senior Governance, Risk, Compliance, and Cyber Resilience leader for Japan, acting as the primary liaison between Micron's global GRC organization and regional business operations. This role is responsible for driving adoption of enterprise governance, cybersecurity, risk management, compliance, audit, resilience, and regulatory programs across Japan while ensuring alignment with Micron's strategic objectives, regulatory obligations, customer requirements, and evolving threat landscape. You will partner closely with regional business leaders, site leadership, Engineering, IT, Product Security, Physical Security, Legal, Privacy, HR, Internal Audit, BISOs, external auditors, regulators, customers, and government stakeholders to assess risks, coordinate compliance activities, facilitate audits, manage remediation efforts, and strengthen organizational resilience. This role serves as the voice of Japan within the global GRC organization and ensures local regulatory requirements, cultural considerations, customer expectations, and business priorities are effectively represented in enterprise governance decisions. The Regional GRC Principal will also champion AI-enabled governance and risk management capabilities, helping scale assessments, evidence management, risk monitoring, regulatory analysis, and compliance oversight while improving efficiency and consistency across the region. POSITION QUALIFICATIONS <p

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. Summary Micron's Firmware & Product Test (FPT) team is hiring a Principal Test Development Engineer to lead front-end firmware validation for enterprise SSDs. In this role, you'll own verification strategy for NVMe front-end features, drive automation framework development, and serve as a technical authority for failure analysis and debug methodologies. You'll leverage AI-enabled tools and workflows to accelerate validation efficiency. You'll mentor engineers, define test coverage standards, and collaborate with firmware architects to influence testability decisions. The FPT team builds verification plans in Python, enforces NVMe and security protocol compliance, and executes white-box, grey-box, and black-box testing across simulation, FPGA, and prototype hardware environments. Responsibilities Lead design and execution of firmware verification strategies for NVMe front-end features (SMART, Trim, Get Log Page, OCP, Identify, Namespace Management) across multiple product lines. Own end-to-end test development lifecycle — from spec analysis and test planning through automation, execution, and coverage closure. Drive root-cause analysis for critical field and regression failures; establish systematic debug methodologies using coyote logs, protocol analyzers, and firmware traces. Architect and maintain scalable test automation frameworks that become organizational standards for firmware quality. Lead failure analysis efforts, correla

Principal Consultant (Senior Manager) – Operational Resilience & Cyber Risk Location: London (Hybrid) | Practice Area: Finance, Risk, Regulatory & Financial Crime | Type: Permanent Build resilience where it matters most across cyber, technology, and third-party risk The Role Capco is seeking experienced Principal Consultants in Operational Resilience and Cyber Risk to join our growing Finance, Risk, Regulatory & Financial Crime (FRRF) capability. In this senior role, you'll lead complex client engagements across financial services and energy, advising on regulatory expectations such as PRA and DORA while driving the design and implementation of robust resilience frameworks. You'll play a key role in shaping client strategy, leading transformation programmes, and contributing to capability growth. You'll also leverage approved AI tools and AI-enabled ways of working to enhance analysis, accelerate insight generation, and improve delivery while applying responsible AI practices and appropriate human oversight. What You'll Do Lead operational resilience assessments, scenario testing, and control implementation programmes, identifying opportunities to leverage AI-enabled workflows and automation to strengthen resilience outcomes. Advise clients on regulatory readiness across PRA, DORA, and other resilience frameworks, translating regulatory expectations into practical transformation strategies and sustainable operating models. Oversee cyber risk, third-party risk, and vendor resilience assessments, using AI-enabled analytics where appropriate to strengthen risk identification, prioritisation, and decision-making. Design and implement governance models, dashboards, Important Business Services (IBS), Impact Tolerance (ITOL), and reporting frameworks, ensuring robust governance, validation, and oversight where AI-assisted tools are utilised. Lead cyber and technology resilience transformation initiatives, including tooling, cloud security, and control enhanceme

Managing Principal / Director – Cyber & Operational Resilience Location: London (Hybrid) | Practice Area: Finance, Risk, Regulatory & Financial Crime | Type: Permanent Lead large-scale cyber and operational resilience transformation across the financial services industry The Role Capco is seeking experienced Managing Principals / Directors to join our Cyber & Operational Resilience capability. In this senior leadership role, you'll act as a strategic advisor and delivery lead, partnering with leading financial institutions to design and implement end-to-end resilience solutions. You'll play a critical role in shaping client strategy, leading complex transformation programmes, and driving growth across our Risk practice. You'll also champion AI-enabled ways of working, helping clients and teams responsibly adopt approved AI tools, automation, and data-driven insights to strengthen resilience, improve decision-making, and accelerate delivery while maintaining appropriate governance and human oversight. What You'll Do Lead large-scale cyber and operational resilience programmes, including regulatory alignment with PRA, DORA, and global resilience frameworks, identifying opportunities to leverage AI-enabled workflows and automation to enhance client outcomes. Oversee resilience assessments across operational and technology landscapes, including third-party and vendor risk, using AI-enabled analytics where appropriate to strengthen risk identification, resilience, and decision-making. Define and implement resilience frameworks, governance models, controls, and reporting mechanisms, ensuring robust governance, validation, and responsible AI practices where AI-supported capabilities are adopted. Drive cyber resilience strategy, including cyber posture assessments, security architecture, cloud security initiatives, and the responsible application of AI to improve resilience capabilities. Lead business development, proposition creation, and strategic client growt

Toast creates technology to help restaurants and local businesses succeed in a digital world, helping business owners operate, increase sales, engage customers, and keep employees happy. At Toast, Talent Acquisition runs on its tools. Greenhouse, GoodTime, and BrightHire are where every requisition, interview, and hiring decision actually happens — and no single person owns them end-to-end today. That is this role. As a Principal TA Systems Architect, you will be the technical owner of the TA tech stack: the person who configures it, integrates it, secures it, measures it, and decides where it goes next. You will partner closely with the TA Operations who live in these systems every day, with the broader People Systems and People Analytics teams who own the HRIS and downstream data, and with IT, Security, Legal, and Procurement on access, privacy, and purchasing. You will own the vendor relationships — roadmap conversations, renewals, escalations — and hold our partners to a standard. This is an individual contributor role today with a clear path to building and leading a small team as the function scales. If you want to own a domain, be the deepest expert in the building on it, and eventually hire people to extend it, this is that job. A day in the life (Responsibilities) Own the stack: Serve as system owner and top-tier administrator for Greenhouse, GoodTime, and BrightHire — configuration, permissions, workflows, approval chains, compliance settings, and release management. Own the integration layer between TA systems and the rest of the People stack: HRIS, background check, assessments, sourcing, and offer tooling, including API-based integrations and middleware. Run intake-to-resolution on system issues: triage, root-cause, fix, and close the loop with whoever reported it. Hold the change management discipline the stack needs — sandbox testing, documented configuration decisions, release notes, and user communications. Partner across the People org

Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey! What makes Tenable such a great place to work? Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together! Your Role: Design and develop complex, scalable, and high-performance features and systems within your team, ensuring clean, efficient, and maintainable code. Collaborate closely with product managers, architects, and fellow engineers to help shape technical approaches and project plans for your team’s roadmap. Provide technical input and recommendations to ensure solutions align with business objectives, compliance standards, and long-term maintainability, escalating cross-team architectural questions to staff/principal engineers as needed. Diagnose and resolve complex production issues within your team’s systems, driving root cause analysis and fixes, and escalating the most critical, cross-system issues appropriately. Mentor engineers through code review, pairing, and day-to-day guidance, helping raise the quality bar within the team. Review team members’ code with a focus on improving design and implementation quality. Your Opportunity: Develop and maintain key components and features, integrating new functionality and helping maintain the reliability and scalability of core infrastructure.

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. The Enterprise Technology Team The Enterprise Technology team builds and delivers the secure, scalable systems that power how our business runs. Our People Technology Team sits at the heart of this work, overseeing the full Hire-to-Retire technical ecosystem—including core applications like Workday, Greenhouse, and Cornerstone—and ensuring these platforms evolve alongside the company's growth. We partner closely with HR, Finance, Operations, and Security to bring data-driven, secure, compliant, and innovative solutions to life. The Opportunity Reporting to the Director of People Technology, this Principal Product Analyst role serves as the Workday Delivery Lead for Okta's People Technology portfolio, focused on the Experience & Rewards pod. In this broad role, you will lead complex, multi-system initiatives spanning Core HCM, Benefits, Rewards, and Compensation. You will serve as the crucial conduit between Product Management, Total Rewards, and HR Operations leadership, driving technical execution against a prioritized backlog to align with Okta's strategic goals. What You'll Be Doing Strategic Leadership: Technically scope and lead the delivery of multi-quarter, high-visibility, executive-sponsored projects across Experience & Rewards system and processes (e.g., compensation, benefits, equity, and total rewards platforms). Stakeholder Partnership: Act as the primary conduit between business partners and technical delivery teams, owning and writing

RDQ327R177 While candidates in the listed location(s) are encouraged for this role, candidates in other US locations will be considered. The Security Field Engineering team helps data teams solve the world's toughest problems by empowering customers to understand the security of the Databricks platform and by helping account teams address questions that come up during security reviews. Reporting to the Head of Security Field Engineering, you will meet with customers to answer questions, train other Databricks team members, build customer-facing content such as slide decks, white papers, and maybe write code that customers can use. Our team prioritizes scale -- we'd rather spend an hour building a doc than be in ten hours of meetings, rather deliver agent skills and knowledge base articles than be the rock star answering all the questions. If you want high growth, autonomy, and to touch all elements of security, look no further. The impact you will have: You will be viewed as a security expert as you work with field teams and customers to understand architectures, address concerns and handle compliance questions Your contributions may come in multiple ways, including customer interactions, scalable slides or white paper creation, internal enablement, process improvement, automation, or technical leadership—no one excels in every area, but all are valuable When you’re on the call, you will be directly appreciated. When you’re not, your impact will be felt across the company through the enablement, collateral, knowledge management, and systems you build You might not come from an assurance team, but you’ll come up to speed with common security and compliance regimes to save customers hours of effort and months of uncertainty You will identify customer pain points and work with product management and product marketing will improve our product and our messaging You will contribute to internal-facing services and automation that make life easier for our field staff