Regulatory Affairs And Entity Corporate Governance Senior Manager Jobs

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We are seeking a mid-level AppSec Vulnerability Management Engineer with a strong software development background. In this role, you will bridge the gap between security, compliance, and engineering teams. You will identify application vulnerabilities, maintain software supply chain security, and drive tracking to satisfy strict regulatory compliance frameworks. You will also serve as a technical responder during security incidents, deploying real-time countermeasures to protect our software ecosystem. What You'll Do Core Responsibilities Vulnerability Scanning & Triage: Perform periodic application security scanning activities. Review results and prioritize flaws based on CVSS scores, real-world exploitability, and system exposure. Compliance-Driven Tracking: Track, document, and manage vulnerabilities according to strict compliance SLAs (e.g., SOC 2, ISO 27001, PCI-DSS). Maintain audit-ready evidence of remediation timelines and exception approvals. Executive Reporting & Alerting: Escalate and report critical exposures directly to the CISO and senior leadership. Maintain dashboards and alerting mechanisms that visualize vulnerability status, risk trends, and compliance posture. Software Supply Chain Security: Ownership of the organization's Software Bill of Materials (SBOM). Continually update SBOM inventories to ensure compliance with modern regulatory requirements and dependency tracking. Help Replit mature through various SLSA levels for supply chain security. Remediation Collaboration: Partner with development teams to provide clear mitigation paths. Review, write, and patch code directly when necessary to resolve security flaws. Tooling Integration: Configure and tune automated security te

About the Team At Trendyol Legal, we go beyond compliance—shaping business decisions with legal insight and strategic perspective. As trusted advisors, we support teams across the company on matters ranging from contracts and corporate law to labor, competition, transportation, and regulatory frameworks. By embedding legal thinking into every stage of business design, we safeguard the company’s integrity while enabling agile, sustainable growth. We are seeking a Senior Legal Counsel to join our European Legal team. This individual will be covering a broad and complex portfolio of regulatory and commercial topics, including marketplace seller matters, product compliance, customs law, payment regulation, and warehouse and logistics agreements. The role requires someone who combines deep legal expertise with strong business acumen, the ability to lead and develop a team, and the drive to build scalable legal frameworks in a fast-paced, cross-border environment.

About the Team Trendyol Express is the next-generation, global delivery platform that prioritizes customers, leveraging cutting-edge technology, flexible operational infrastructure, and a dedicated, strong team. With a fast-paced and collaborative culture, we overcome challenges through data, agility, and teamwork. As we expand across regions, we set new standards in logistics — delivering impact at every step. About the Role This role is primarily focused on driving the company's sustainability and ESG agenda by coordinating sustainability reporting processes, monitoring environmental and occupational health & safety performance, and ensuring compliance with relevant regulations and international reporting frameworks. In this position, you will work closely with internal departments and external stakeholders to collect and analyze sustainability data, support ESG ratings and reporting activities, monitor regulatory and industry developments, and contribute to initiatives that strengthen corporate sustainability, resource efficiency, and workplace health and safety culture.

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As a GRC Program Manager, you are the engine behind Palantir's Governance, Risk, and Compliance programs. You partner with compliance engineers, security teams, and developers to design and scale the processes that keep our Commercial, International, and US Government businesses operating at the highest regulatory standards. You track and stabilize projects, remove roadblocks, and anticipate stakeholder needs to free up our specialists to focus on the problems they are best equipped to solve.

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As a GRC Program Manager, you are the engine behind Palantir's Governance, Risk, and Compliance programs. You partner with compliance engineers, security teams, and developers to design and scale the processes that keep our Commercial, International, and US Government businesses operating at the highest regulatory standards. You track and stabilize projects, remove roadblocks, and anticipate stakeholder needs to free up our specialists to focus on the problems they are best equipped to solve.

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As a GRC Program Manager, you are the engine behind Palantir's Governance, Risk, and Compliance programs. You partner with compliance engineers, security teams, and developers to design and scale the processes that keep our Commercial, International, and US Government businesses operating at the highest regulatory standards. You track and stabilize projects, remove roadblocks, and anticipate stakeholder needs to free up our specialists to focus on the problems they are best equipped to solve.

Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The role: We are seeking an Operations Control Analyst - SMB who will support the Vendor Relationship Manager in maintaining the operational integrity and regulatory compliance of third-party vendors within the Small Business Lending unit. This role focuses on the execution of the control framework, ensuring that vendor activities across the entire SMB lifecycle—including sales, servicing, and collections—align with SoFi’s internal policies and external regulatory requirements. What you’ll do: To assist the Vendor Relationship Manager - SMB in maintaining the operational integrity of the Small Business Lending unit, the Operations Control Analyst — SMB will focus on the following structured responsibilities: Process Integrity and Resilience: You will execute consistent monitoring and rigorous testing of vendor processes to ensure all workflows are thoroughly documented, testable, and capable of supporting long-term operational resilience. Risk Mitigation and Compliance: Working closely with the Vendor Manager and the Operations Exam & Control Support Manager, you will assess vendor risk across customer acquisition and servicing to ensure alignment with internal policies and regulatory requirements. Data-Driven Insights: By utilizing advanced Excel or Google Sheets functions, you wil

At Asana, security is foundational to our mission of helping teams work together effortlessly. Our security team protects Asana’s employees, users, and customers by proactively addressing threats, ensuring compliance with legal and regulatory requirements, and fostering a culture of security throughout our product and operations. We are a team of security engineers and risk and compliance practitioners who build innovative safeguards and collaborate across the organization to build and maintain trust at scale. As the Third Party Risk Management Lead, you will be responsible for building and running Asana’s Third Party Risk Management (TPRM) program. You will own the end-to-end lifecycle of vendor security risk — from initial due diligence and risk tiering through ongoing monitoring and remediation. You will work closely with Procurement, Legal, Privacy, and Engineering teams to ensure that our third-party relationships are effectively assessed, tracked, and managed. This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. Our employees in Poland are employed under a contract of employment. What you’ll achieve Own and scale Asana’s TPRM program: Design, implement, and continuously improve a risk-based framework for assessing and managing third-party vendors and service providers. Establish risk tiering criteria, assessment workflows, and governance processes that scale with business growth. Lead vendor security assessments: Conduct and oversee security due diligence for new and existing vendors, including reviewing SOC 2 reports, ISO 27001 certifications, security questionnaires (SIG, CAIQ), and other relevant documentation. Identify gaps and work with vendors to remediate findings. Drive rem

The Security team is responsible for protecting Asana’s employees, users, and customers. We are a team of security engineers and risk and compliance practitioners who build innovative safeguards to ensure that our data is protected against threats and that we comply with legal, regulatory, and customer requirements. We collaborate closely with teams across the organization to foster a culture of security throughout our product and operations. We’re looking for an Application Security Engineer to join our Security team in Warsaw. You’ll be a foundational member of the security presence in a key engineering hub, partnering directly with IT, infrastructure, and product teams to ensure we design and ship secure software. You will be instrumental in scaling our security practices by conducting security design reviews, threat modeling, and vulnerability assessments across our products and internal applications, eliminating entire classes of vulnerabilities, and championing a security-first mindset. This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. We offer a Contract of Employment (UoP) for our employees in Poland. What you’ll achieve ● Conduct security architecture reviews and threat modeling for new features and services across our product and internal applications, identifying risks early and influencing secure design decisions. ● Perform vulnerability assessments of software and systems, using a range of assessment methodologies to surface and prioritize security weaknesses across our product surface. ● Triage, investigate, and drive remediation of vulnerabilities from our bug bounty program and automated s

Our Legal team at Asana works collaboratively across functions to achieve our ambitious mission of fostering effortless teamwork for everyone. We are a tightly-knit and cooperative group committed to supporting teams throughout the organization, ensuring they have the necessary resources for success while protecting Asana's core values and interests. Within our team, we exchange ideas, collectively solve problems, and collaborate with other groups to navigate through challenging issues. This role reports to Asana’s Head of Global Privacy, Data Protection, and Compliance. As a founding member of the Privacy Engineering team, you'll shape how we build privacy into our products from the ground up — bridging the legal, regulatory, and technical dimensions of privacy across the company. This role can either be fully remote depending on which US state you live in, or based in our San Francisco office with an office-centric hybrid sche dule . If based in-office: The standard in-office days are Monday, Tuesday, and Thursday . Most Asanas have the option to work from home on Wednesdays . Working from home on Fridays d epends on the type of work you do and the teams with which you partner . If you're interviewing for this role, your recruiter will share more about the in-office requirements . What you’ll achieve Lead technical privacy-by-design reviews for new features and major architectural changes, embedding privacy controls early in the development lifecycle across our business, data, and product infrastructure . Help drive compliance with global privacy regulations (such as GDPR and CCPA) by translating legal requirements into concrete engineering standards, frameworks, and tooling that facilitate velocity . Evaluate and mitigate privacy risks in AI/ML systems, including training data pipelines and model outputs . Build and operate systems that enable data rights for our users and privacy-enhancing technologies (PETs), such as data minimization and de-identificatio

The Security team is responsible for protecting Asana’s employees, users, and customers . We are a team of security engineers and risk and compliance practitioners who build innovative safeguards to ensure that our data is protected against threats and that we comply with legal, regulatory, and customer requirements . We collaborate closely with teams across the organization to foster a culture of security throughout our product and operations . We're looking for a Manager of Offensive Security to lead our Offensive Security function in Warsaw . In this role, you will own and grow a team spanning red team operations, application security, and vulnerability management, driving both the strategic direction and the hands-on execution of our offensive security program . You will work directly with engineering leadership, legal, and senior stakeholders to ensure our security posture is contin uously tested, measured, and improved . This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. We offer a Contract of Employment (UoP) for our employees in Poland. What you’ll achieve Lead, grow, and mentor a team of offensive security engineers across red team, application security, and vulnerability management disciplines while staying actively engaged in day-to-day technical operations . Define team roadmap, OKRs, and priorities in alignment with broader security and engineering strategy . Foster a culture of technical excellence, continuous learning, and psychological safety within the team, partnering with recruiting to scale the team . Plan and execute red team operations and adversary simulation exercises across Asana's infrastructure, products, and corporate environment . Perform clo

Datadog is seeking a Senior Payroll Specialist to keep up with our rapidly growing company. In this role, you will support the payrolls either directly through Workday and ADP or indirectly via a PEO (Professional Employer Organization) for the Americas (Canada, Mexico, and Brazil).. The individual will work closely with the internal team and with local payroll providers in order to securely process payroll within specified deadlines. You will also play a key role in supporting the company’s equity events by coordinating with the Equity team for stock based compensation including Restricted Stock Unit releases, Non Qualified Stock Options, and Employee Stock Purchase transactions, ensuring accurate tax withholding, regulatory compliance, and timely reporting. Most importantly, you will collaborate with our People and Finance teams to continue to scale this critical function. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do Manage the preparation and processing of payroll, ensuring data accuracy and meeting of deadlines. Handle all government reporting requirements for payroll taxes, withholdings and employer contributions. Manage regional payroll partners and PEO, including defining KPIs and standards they are required to meet. Liaise with payroll counterparts in APAC and EMEA to ensure global consistency of payroll processes and practices. Partner with the Benefits team on all matters involving benefits. Partner with the HRIS team for configuration and testing of new codes, tax withholding configurations, inbound/outbound integrations, and all other payroll related projects involving Workday. Partner with Finance stakeholders bridging the relationship between Payroll and Finance functions and support audits, identify and implemen

As the Engineering Manager for Commercial Audit, you will lead a high-performing team responsible for scaling Datadog’s security and compliance posture through automation, tooling, and engineering excellence. Our GRC (Governance, Risk, and Compliance) function is a critical partner to the broader Security and Engineering organizations, ensuring that Datadog not only meets rigorous global regulatory standards but does so in a way that is efficient, scalable, and integrated into our cloud-native infrastructure. You will manage a team of engineers and analysts who are transitioning to a GRC engineering direction to treat compliance as a software problem, leveraging AI, custom tooling, CI/CD pipelines, and cloud-native services to turn complex regulatory requirements into actionable, automated controls. You will lead the strategy, roadmap, and execution of Datadog’s Commercial Audit initiatives. This is a high-impact leadership role where you will grow a team of engineers and analysts responsible for directly maintaining our compliance programs and related audits (e.g., SOC2, PCI, HIPAA, ISO) while looking to improve efficiency and effectiveness through platforms and tooling. You will act as a bridge between technical engineering, legal, and compliance, enabling the organization to move fast while maintaining a secure and compliant environment. You will champion a culture of "compliance-as-code," identifying opportunities to automate evidence collection, streamline control testing, and reduce manual toil for both your team and our partner engineering teams. At Datadog, we place value in our office culture - the relationships and collaboration it builds, and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Lead the strategy, roadmap, and execution of Datadog’s commercial security compliance efforts, shifting from manual audit processes to automated, scalable

MongoDB’s Security Product Management team is seeking a Staff Product Manager to own security, compliance, and public sector product strategy within Atlas for Government (A4G). In this role, you will be a key member of the security product management team, helping make data security a market differentiator that enables MongoDB to win in enterprise and regulated industries. You will lead product strategy and execution for capabilities and programs that support federal compliance requirements and broader regulated-industry needs. You will work across Engineering, Compliance, Legal, Security, and Go-to-Market teams to translate complex regulatory and customer requirements into clear product investments, roadmaps, and outcomes. This role is suited for a candidate who can orchestrate multiple interlinked product areas, own cross-team product and architectural trade-offs, and align senior stakeholders around multi-year bets. You will be expected to identify opportunities and dependencies that cut across team boundaries, bring clarity to ambiguous problem spaces, and establish reusable ways of working that help MongoDB deliver secure, compliant platform capabilities for public sector and other regulated markets. You will partner closely with senior engineering and business leaders to evaluate trade-offs, sequence investments, and bring clarity to decisions that balance customer impact, execution risk, and long-term business value. This role can be based out of of our offices or remotely in the United States. The Federal Risk and Authorization Management Program (FedRAMP) is a US government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services. Our FedRAMP program requires that anyone who is accessing customer data or metadata inside the Authorization Boundary be a US Person on US Soil. Responsibilities Security and Compliance Product Strategy Own the public sector compliance roadm

MongoDB is transforming the $138B+ data management software market by empowering developers to build the next generation of applications. As the leading modern data platform—and the first database company to IPO in over 20 years—we're at the forefront of innovation. We are seeking a driven, experienced commercial attorney to lead and scale our U.S. Public Sector and government contracting business. Operating in a fast-paced, high-growth environment, you will serve as the primary legal partner for our public sector sales ecosystem, managing complex transactions and ensuring strict regulatory compliance. This role can be based out of our US offices or remotely in the United States. Core Responsibilities & Requirements End-to-End Deal Execution: Draft, structure, and negotiate high-value public sector and commercial transactions, including SaaS, cloud licensing, professional services, and subcontracting agreements Public Sector Compliance: Provide expert guidance on U.S. and international government procurement laws, including FAR/DFARS frameworks, GSA schedules, and FedRamp requirements, and support ongoing development and refinement of public sector compliance program Strategic Sales Advisory: Advise cross-functional teams throughout the public sector sales lifecycle, from initial RFP evaluations and proposal risk assessments to handling audits or disputes Operational Scalability: Build, refine, and maintain legal playbooks, contract templates, and training modules to streamline negotiations and empower sales teams Regulatory Monitoring: Stay ahead of evolving technology laws, government contracting regulations, and government and defense related export controls to provide proactive, actionable risk mitigation strategies Cross-Functional Collaboration: Work cross-functionally to launch new programs to support growth of commercial and public sector businesses Requirements: 8+ years of US public sector transactions experience, preferably at a law firm a