Regulatory Affairs Associate Consultant Plm Jobs

👋 Welcome to Glide! At Glide we’re reimagining the banking experience for the modern world . Our embedded fintech platform empowers legacy financial institutions, like community banks and credit unions, to pioneer novel digital experiences for their customers. You’ll be joining an all-star team with engineering, product, and growth experience from Stripe, Google, and Amazon. We’re looking for a talented Digital Support Manager (DSM) to help us grow our product to hundreds of banks. We’re bringing a new perspective to the decades-old financial world , and we’re hoping you can help us do that! Your Responsibilities: Serve as the primary point of contact for clients post go-live support, managing inbound support requests and ensuring timely, high-quality resolutions Leverage deep knowledge of financial institution operations to diagnose issues at the root cause level — not just the surface Partner with clients to understand their regulatory environment, core system configurations, and operational workflows in order to recommend solutions that truly fit their needs Maintain accurate records of all client interactions, escalating issues to engineering or product teams as needed Identify patterns in support requests and proactively surface product feedback and client insights to internal teams Leverage AI tools to streamline and optimize day-to-day responsibilities Contribute to the development of help articles, training materials, and client-facing documentation Need-to-Haves: Experience working at a bank or credit union — you know what a core system is, you understand regulatory requirements, and you can speak your clients' language A natural curiosity to dig past the surface-level problem and uncover what clients actually need Strong written and verbal communication skills with a client-first mindset Ability to manage multiple open issues simultaneously without dropping the ball Comfort working in a fast-paced, early-stage startup environment where the playbook is sti

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We are seeking a mid-level Infrastructure Vulnerability Management Engineer with a strong background in Cloud Security, DevSecOps, and Infrastructure-as-Code (IaC). In this role, you will bridge the gap between security, compliance, DevOps, and Platform engineering teams. You will identify infrastructure misconfigurations, secure multi-cloud environments, and manage continuous vulnerability lifecycles across cloud workloads, containers, and data repositories to satisfy strict regulatory compliance frameworks. You will also serve as a technical infrastructure responder during security incidents, deploying real-time cloud or network countermeasures to protect our production ecosystem. What You'll Do Core Responsibilities Infrastructure Scanning & Triage: Perform continuous security scanning across our cloud posture and workloads. Review, validate, and prioritize flaws and misconfigurations based on CVSS scores, real-world exploitability, and infrastructure network exposure. Posture Management & Visibility : Own and optimize Cloud Security Posture Management (CSPM), Kubernetes Security Posture Management (KSPM), and Data Security Posture Management (DSPM) tools to ensure uniform compliance, prevent data leakage, and maintain hardened baselines. Infrastructure-as-Code (IaC) Security: Configure, tune, and embed automated IaC security scanning tools into CI/CD pipelines to identify architectural risks (e.g., overly permissive IAM, public S3 buckets/Cloud Storage) before they are deployed to production. Workload & Container Security: Manage the continuous vulnerability scanning lifecycle for container images, registries, and Virtual Machines (VMs), partnering with SRE and Platform teams to build aut

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We are seeking a mid-level AppSec Vulnerability Management Engineer with a strong software development background. In this role, you will bridge the gap between security, compliance, and engineering teams. You will identify application vulnerabilities, maintain software supply chain security, and drive tracking to satisfy strict regulatory compliance frameworks. You will also serve as a technical responder during security incidents, deploying real-time countermeasures to protect our software ecosystem. What You'll Do Core Responsibilities Vulnerability Scanning & Triage: Perform periodic application security scanning activities. Review results and prioritize flaws based on CVSS scores, real-world exploitability, and system exposure. Compliance-Driven Tracking: Track, document, and manage vulnerabilities according to strict compliance SLAs (e.g., SOC 2, ISO 27001, PCI-DSS). Maintain audit-ready evidence of remediation timelines and exception approvals. Executive Reporting & Alerting: Escalate and report critical exposures directly to the CISO and senior leadership. Maintain dashboards and alerting mechanisms that visualize vulnerability status, risk trends, and compliance posture. Software Supply Chain Security: Ownership of the organization's Software Bill of Materials (SBOM). Continually update SBOM inventories to ensure compliance with modern regulatory requirements and dependency tracking. Help Replit mature through various SLSA levels for supply chain security. Remediation Collaboration: Partner with development teams to provide clear mitigation paths. Review, write, and patch code directly when necessary to resolve security flaws. Tooling Integration: Configure and tune automated security te

About the Team At Trendyol Legal, we go beyond compliance—shaping business decisions with legal insight and strategic perspective. As trusted advisors, we support teams across the company on matters ranging from contracts and corporate law to labor, competition, transportation, and regulatory frameworks. By embedding legal thinking into every stage of business design, we safeguard the company’s integrity while enabling agile, sustainable growth. We are seeking a Senior Legal Counsel to join our European Legal team. This individual will be covering a broad and complex portfolio of regulatory and commercial topics, including marketplace seller matters, product compliance, customs law, payment regulation, and warehouse and logistics agreements. The role requires someone who combines deep legal expertise with strong business acumen, the ability to lead and develop a team, and the drive to build scalable legal frameworks in a fast-paced, cross-border environment.

About the Team Trendyol Express is the next-generation, global delivery platform that prioritizes customers, leveraging cutting-edge technology, flexible operational infrastructure, and a dedicated, strong team. With a fast-paced and collaborative culture, we overcome challenges through data, agility, and teamwork. As we expand across regions, we set new standards in logistics — delivering impact at every step. About the Role This role is primarily focused on driving the company's sustainability and ESG agenda by coordinating sustainability reporting processes, monitoring environmental and occupational health & safety performance, and ensuring compliance with relevant regulations and international reporting frameworks. In this position, you will work closely with internal departments and external stakeholders to collect and analyze sustainability data, support ESG ratings and reporting activities, monitor regulatory and industry developments, and contribute to initiatives that strengthen corporate sustainability, resource efficiency, and workplace health and safety culture.

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As a GRC Program Manager, you are the engine behind Palantir's Governance, Risk, and Compliance programs. You partner with compliance engineers, security teams, and developers to design and scale the processes that keep our Commercial, International, and US Government businesses operating at the highest regulatory standards. You track and stabilize projects, remove roadblocks, and anticipate stakeholder needs to free up our specialists to focus on the problems they are best equipped to solve.

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As a GRC Program Manager, you are the engine behind Palantir's Governance, Risk, and Compliance programs. You partner with compliance engineers, security teams, and developers to design and scale the processes that keep our Commercial, International, and US Government businesses operating at the highest regulatory standards. You track and stabilize projects, remove roadblocks, and anticipate stakeholder needs to free up our specialists to focus on the problems they are best equipped to solve.

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As a GRC Program Manager, you are the engine behind Palantir's Governance, Risk, and Compliance programs. You partner with compliance engineers, security teams, and developers to design and scale the processes that keep our Commercial, International, and US Government businesses operating at the highest regulatory standards. You track and stabilize projects, remove roadblocks, and anticipate stakeholder needs to free up our specialists to focus on the problems they are best equipped to solve.

Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The role: We are seeking an Operations Control Analyst - SMB who will support the Vendor Relationship Manager in maintaining the operational integrity and regulatory compliance of third-party vendors within the Small Business Lending unit. This role focuses on the execution of the control framework, ensuring that vendor activities across the entire SMB lifecycle—including sales, servicing, and collections—align with SoFi’s internal policies and external regulatory requirements. What you’ll do: To assist the Vendor Relationship Manager - SMB in maintaining the operational integrity of the Small Business Lending unit, the Operations Control Analyst — SMB will focus on the following structured responsibilities: Process Integrity and Resilience: You will execute consistent monitoring and rigorous testing of vendor processes to ensure all workflows are thoroughly documented, testable, and capable of supporting long-term operational resilience. Risk Mitigation and Compliance: Working closely with the Vendor Manager and the Operations Exam & Control Support Manager, you will assess vendor risk across customer acquisition and servicing to ensure alignment with internal policies and regulatory requirements. Data-Driven Insights: By utilizing advanced Excel or Google Sheets functions, you wil

At Asana, security is foundational to our mission of helping teams work together effortlessly. Our security team protects Asana’s employees, users, and customers by proactively addressing threats, ensuring compliance with legal and regulatory requirements, and fostering a culture of security throughout our product and operations. We are a team of security engineers and risk and compliance practitioners who build innovative safeguards and collaborate across the organization to build and maintain trust at scale. As the Third Party Risk Management Lead, you will be responsible for building and running Asana’s Third Party Risk Management (TPRM) program. You will own the end-to-end lifecycle of vendor security risk — from initial due diligence and risk tiering through ongoing monitoring and remediation. You will work closely with Procurement, Legal, Privacy, and Engineering teams to ensure that our third-party relationships are effectively assessed, tracked, and managed. This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. Our employees in Poland are employed under a contract of employment. What you’ll achieve Own and scale Asana’s TPRM program: Design, implement, and continuously improve a risk-based framework for assessing and managing third-party vendors and service providers. Establish risk tiering criteria, assessment workflows, and governance processes that scale with business growth. Lead vendor security assessments: Conduct and oversee security due diligence for new and existing vendors, including reviewing SOC 2 reports, ISO 27001 certifications, security questionnaires (SIG, CAIQ), and other relevant documentation. Identify gaps and work with vendors to remediate findings. Drive rem

The Security team is responsible for protecting Asana’s employees, users, and customers. We are a team of security engineers and risk and compliance practitioners who build innovative safeguards to ensure that our data is protected against threats and that we comply with legal, regulatory, and customer requirements. We collaborate closely with teams across the organization to foster a culture of security throughout our product and operations. We’re looking for an Application Security Engineer to join our Security team in Warsaw. You’ll be a foundational member of the security presence in a key engineering hub, partnering directly with IT, infrastructure, and product teams to ensure we design and ship secure software. You will be instrumental in scaling our security practices by conducting security design reviews, threat modeling, and vulnerability assessments across our products and internal applications, eliminating entire classes of vulnerabilities, and championing a security-first mindset. This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. We offer a Contract of Employment (UoP) for our employees in Poland. What you’ll achieve ● Conduct security architecture reviews and threat modeling for new features and services across our product and internal applications, identifying risks early and influencing secure design decisions. ● Perform vulnerability assessments of software and systems, using a range of assessment methodologies to surface and prioritize security weaknesses across our product surface. ● Triage, investigate, and drive remediation of vulnerabilities from our bug bounty program and automated s

Our Legal team at Asana works collaboratively across functions to achieve our ambitious mission of fostering effortless teamwork for everyone. We are a tightly-knit and cooperative group committed to supporting teams throughout the organization, ensuring they have the necessary resources for success while protecting Asana's core values and interests. Within our team, we exchange ideas, collectively solve problems, and collaborate with other groups to navigate through challenging issues. This role reports to Asana’s Head of Global Privacy, Data Protection, and Compliance. As a founding member of the Privacy Engineering team, you'll shape how we build privacy into our products from the ground up — bridging the legal, regulatory, and technical dimensions of privacy across the company. This role can either be fully remote depending on which US state you live in, or based in our San Francisco office with an office-centric hybrid sche dule . If based in-office: The standard in-office days are Monday, Tuesday, and Thursday . Most Asanas have the option to work from home on Wednesdays . Working from home on Fridays d epends on the type of work you do and the teams with which you partner . If you're interviewing for this role, your recruiter will share more about the in-office requirements . What you’ll achieve Lead technical privacy-by-design reviews for new features and major architectural changes, embedding privacy controls early in the development lifecycle across our business, data, and product infrastructure . Help drive compliance with global privacy regulations (such as GDPR and CCPA) by translating legal requirements into concrete engineering standards, frameworks, and tooling that facilitate velocity . Evaluate and mitigate privacy risks in AI/ML systems, including training data pipelines and model outputs . Build and operate systems that enable data rights for our users and privacy-enhancing technologies (PETs), such as data minimization and de-identificatio

The Security team is responsible for protecting Asana’s employees, users, and customers . We are a team of security engineers and risk and compliance practitioners who build innovative safeguards to ensure that our data is protected against threats and that we comply with legal, regulatory, and customer requirements . We collaborate closely with teams across the organization to foster a culture of security throughout our product and operations . We're looking for a Manager of Offensive Security to lead our Offensive Security function in Warsaw . In this role, you will own and grow a team spanning red team operations, application security, and vulnerability management, driving both the strategic direction and the hands-on execution of our offensive security program . You will work directly with engineering leadership, legal, and senior stakeholders to ensure our security posture is contin uously tested, measured, and improved . This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. We offer a Contract of Employment (UoP) for our employees in Poland. What you’ll achieve Lead, grow, and mentor a team of offensive security engineers across red team, application security, and vulnerability management disciplines while staying actively engaged in day-to-day technical operations . Define team roadmap, OKRs, and priorities in alignment with broader security and engineering strategy . Foster a culture of technical excellence, continuous learning, and psychological safety within the team, partnering with recruiting to scale the team . Plan and execute red team operations and adversary simulation exercises across Asana's infrastructure, products, and corporate environment . Perform clo

Datadog is seeking a Senior Payroll Specialist to keep up with our rapidly growing company. In this role, you will support the payrolls either directly through Workday and ADP or indirectly via a PEO (Professional Employer Organization) for the Americas (Canada, Mexico, and Brazil).. The individual will work closely with the internal team and with local payroll providers in order to securely process payroll within specified deadlines. You will also play a key role in supporting the company’s equity events by coordinating with the Equity team for stock based compensation including Restricted Stock Unit releases, Non Qualified Stock Options, and Employee Stock Purchase transactions, ensuring accurate tax withholding, regulatory compliance, and timely reporting. Most importantly, you will collaborate with our People and Finance teams to continue to scale this critical function. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do Manage the preparation and processing of payroll, ensuring data accuracy and meeting of deadlines. Handle all government reporting requirements for payroll taxes, withholdings and employer contributions. Manage regional payroll partners and PEO, including defining KPIs and standards they are required to meet. Liaise with payroll counterparts in APAC and EMEA to ensure global consistency of payroll processes and practices. Partner with the Benefits team on all matters involving benefits. Partner with the HRIS team for configuration and testing of new codes, tax withholding configurations, inbound/outbound integrations, and all other payroll related projects involving Workday. Partner with Finance stakeholders bridging the relationship between Payroll and Finance functions and support audits, identify and implemen

As the Engineering Manager for Commercial Audit, you will lead a high-performing team responsible for scaling Datadog’s security and compliance posture through automation, tooling, and engineering excellence. Our GRC (Governance, Risk, and Compliance) function is a critical partner to the broader Security and Engineering organizations, ensuring that Datadog not only meets rigorous global regulatory standards but does so in a way that is efficient, scalable, and integrated into our cloud-native infrastructure. You will manage a team of engineers and analysts who are transitioning to a GRC engineering direction to treat compliance as a software problem, leveraging AI, custom tooling, CI/CD pipelines, and cloud-native services to turn complex regulatory requirements into actionable, automated controls. You will lead the strategy, roadmap, and execution of Datadog’s Commercial Audit initiatives. This is a high-impact leadership role where you will grow a team of engineers and analysts responsible for directly maintaining our compliance programs and related audits (e.g., SOC2, PCI, HIPAA, ISO) while looking to improve efficiency and effectiveness through platforms and tooling. You will act as a bridge between technical engineering, legal, and compliance, enabling the organization to move fast while maintaining a secure and compliant environment. You will champion a culture of "compliance-as-code," identifying opportunities to automate evidence collection, streamline control testing, and reduce manual toil for both your team and our partner engineering teams. At Datadog, we place value in our office culture - the relationships and collaboration it builds, and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Lead the strategy, roadmap, and execution of Datadog’s commercial security compliance efforts, shifting from manual audit processes to automated, scalable