Regulatory Risk Officer Jobs

The Security team is responsible for protecting Asana’s employees, users, and customers. We are a team of security engineers and risk and compliance practitioners who build innovative safeguards to ensure that our data is protected against threats and that we comply with legal, regulatory, and customer requirements. We collaborate closely with teams across the organization to foster a culture of security throughout our product and operations. We’re looking for an Application Security Engineer to join our Security team in Warsaw. You’ll be a foundational member of the security presence in a key engineering hub, partnering directly with IT, infrastructure, and product teams to ensure we design and ship secure software. You will be instrumental in scaling our security practices by conducting security design reviews, threat modeling, and vulnerability assessments across our products and internal applications, eliminating entire classes of vulnerabilities, and championing a security-first mindset. This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. We offer a Contract of Employment (UoP) for our employees in Poland. What you’ll achieve ● Conduct security architecture reviews and threat modeling for new features and services across our product and internal applications, identifying risks early and influencing secure design decisions. ● Perform vulnerability assessments of software and systems, using a range of assessment methodologies to surface and prioritize security weaknesses across our product surface. ● Triage, investigate, and drive remediation of vulnerabilities from our bug bounty program and automated s

The Security team is responsible for protecting Asana’s employees, users, and customers . We are a team of security engineers and risk and compliance practitioners who build innovative safeguards to ensure that our data is protected against threats and that we comply with legal, regulatory, and customer requirements . We collaborate closely with teams across the organization to foster a culture of security throughout our product and operations . We're looking for a Manager of Offensive Security to lead our Offensive Security function in Warsaw . In this role, you will own and grow a team spanning red team operations, application security, and vulnerability management, driving both the strategic direction and the hands-on execution of our offensive security program . You will work directly with engineering leadership, legal, and senior stakeholders to ensure our security posture is contin uously tested, measured, and improved . This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. We offer a Contract of Employment (UoP) for our employees in Poland. What you’ll achieve Lead, grow, and mentor a team of offensive security engineers across red team, application security, and vulnerability management disciplines while staying actively engaged in day-to-day technical operations . Define team roadmap, OKRs, and priorities in alignment with broader security and engineering strategy . Foster a culture of technical excellence, continuous learning, and psychological safety within the team, partnering with recruiting to scale the team . Plan and execute red team operations and adversary simulation exercises across Asana's infrastructure, products, and corporate environment . Perform clo

Who we are About Stripe At Stripe, our Mexico City office is a vibrant hub at the forefront of our mission to reshape the financial landscape for businesses worldwide. Our team prioritizes collaboration, innovation, and excellence. As a member of the Mexico City team, you'll be part of a mission-driven community dedicated to enhancing the global economy and increasing the GDP of the internet. We strive for excellence by creating with craft and beauty, while having fun and celebrating our successes together.We cultivate a culture of collaboration, inclusivity and support where every team member’s voice matters. Our commitment shines through as we handle over a million support cases each year, empowering our users not just to solve problems but to achieve their goals. About the team Did you know that only around 4% of the world’s GDP comes from internet commerce? At Stripe, we believe that this represents a future with almost limitless potential for innovation, creativity, and global prosperity. While the promise of a global online economy is palpable, it comes with significant risk. Each day, bad actors disrupt the trust and safety of the internet and increase the barrier to entry for online businesses. The Financial Crimes team ensures that our platform remains safe, that prohibited parties are not allowed to utilize our services, and that we identify bad actors engaging in money laundering or other financial crimes. What you’ll do We're looking for someone who is passionate about fighting financial crimes and solving the puzzle of investigations, is naturally curious, and is comfortable operating in ambiguity and finding creative solutions. You'll be responsible for conducting investigations and making account-level judgments and recommendations for regulatory reporting. You'll be confident in looking through data, assessing various indicators, and making judgements on your findings. The right candidate for this role will have experience in financial crimes c

About the Team Our Robotics team is focused on unlocking general-purpose robotics and pushing towards AGI-level intelligence in dynamic, real-world settings. Working across the entire model stack, we integrate cutting-edge hardware and software to explore a broad range of robotic form factors. We strive to seamlessly blend high-level AI capabilities with the constraints of physical systems to improve peoples’ lives. About the Role We are seeking a Lead Robotics Safety Engineer to define and lead the product safety strategy for our robotics program. You will work closely with leadership, engineering, research, legal, and policy teams to ensure safety is integrated into our products from the earliest stages of development through deployment. This role combines product safety, regulatory strategy, systems engineering, and risk management. You will help shape how we think about safety across robotic platforms, influence product architecture and development decisions, and ensure our systems are designed to meet both current and emerging regulatory expectations. You will serve as a subject matter expert on robotics safety standards, regulatory frameworks, and safety engineering practices while helping establish the long-term safety strategy for our products and organization. This role is based in San Francisco, CA. This role will be expected to be in office 4 days per week and offer relocation assistance to new employees. In this role, you will Define and lead the product safety strategy for robotic systems across the development lifecycle. Monitor and influence emerging regulatory frameworks, industry standards, and policy developments relevant to robotics and autonomous systems. Partner with engineering teams to translate safety requirements into product architecture, design decisions, and engineering requirements. Develop and maintain system-level hazard analyses, risk assessments, and safety cases for robotic products. Establish safety requirements, verification strat

About the Team OpenAI’s Tax and Trade team sits at the center of OpenAI’s global growth, shaping how cutting-edge AI products, partnerships, and infrastructure scale across borders while navigating complex tax, trade, and regulatory regimes. We operate as strategic operators, not just compliance experts, embedding early in product, finance, policy, and infrastructure decisions to manage risk, unlock incentives, and enable OpenAI to grow responsibly and competitively worldwide. About the Role We’re hiring a Tax Director to help shape some of OpenAI’s most important business, product, infrastructure, and financing initiatives. This role will sit at the intersection of tax, finance, technology, and commercial strategy, advising on the investments, products, partnerships, and operating decisions that enable OpenAI to scale. You will serve as a senior tax business partner to Finance, Legal, Infrastructure, Treasury, Accounting, Product, and commercial teams. Your work will span compute and infrastructure investments, structured financings, commercial contracting, product strategy, new business models, and international expansion. This is a broad, highly commercial role for someone who enjoys solving new problems and influencing business decisions. The ideal candidate combines strong tax judgment with financial acumen, intellectual curiosity, and an understanding of transaction economics, contractual risk allocation, and business operations. You will engage early in strategic initiatives, help teams evaluate possibilities, and develop practical structures that support OpenAI’s growth. This role is based in San Francisco, CA. We use a hybrid work model of 3 days in the office per week and offer relocation assistance. In this role, you will: Serve as a senior tax business partner across OpenAI, advising on strategic business decisions, product development, commercial models, infrastructure investments, financing initiatives, and international growth. Serve as the lead tax a

Synthesia is the world’s leading AI video platform for business, used by over 90% of the Fortune 100. Founded in 2017, the company is headquartered in London, with offices and teams across Europe and the US. As AI continues to shape the way we live and work, Synthesia develops products to enhance visual communication and enterprise skill development, helping people work better and stay at the center of successful organizations. Following our recent Series E funding round, where we raised $200 million, our valuation stands at $4 billion. Our total funding exceeds $530 million from premier investors including Accel, NVentures (Nvidia's VC arm), Kleiner Perkins, GV, and Evantic Capital, alongside the founders and operators of Stripe, Datadog, Miro, and Webflow. As a Product & Privacy Counsel at Synthesia, you’ll partner closely with Product, Engineering, R&D, Business Operations, and Go-To-Market teams to help bring innovative AI products to market responsibly. Reporting to the Head of Product & Privacy Legal, you’ll play a key role in navigating complex legal and regulatory issues, balancing risk with business objectives, and helping the company scale with confidence. In this role you will: Partner with Product, Engineering, and R&D teams across the entire product lifecycle to identify and address legal risks in areas including AI, IP, privacy, security, open source, and marketing. Support commercialization efforts by advising Go-To-Market and Business Operations teams on product positioning, licensing models, and regulatory issues. Monitor and interpret evolving laws related to AI, privacy, IP, and competition to ensure proactive compliance and business alignment. Draft and maintain scalable processes, playbooks, and guidance to support consistent legal input across teams. Assist in creation and management of privacy, security and AI governance frameworks and audits. Operate independently and provide pragmatic, business-oriented legal advice that alig

We believe that the way people interact with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. Plaid powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like Venmo, SoFi, several of the Fortune 500, and many of the largest banks to make it easy for people to connect their financial accounts to the apps and services they want to use. Plaid’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, the company is headquartered in San Francisco with offices in New York, Washington D.C., London and Amsterdam. About the Team: The Security Governance, Risk, and Compliance (GRC) team is part of Plaid’s security organization, focused on enabling the business by proactively managing information security risks and maintaining effective controls. Our mission is to reduce the likelihood and impact of security risks while operating a robust assurance program that builds trust with our customers, consumers, and data partners. We partner closely across the company to ensure Plaid’s platform remains secure, resilient, and aligned with industry and regulatory expectations. The Security Contracts workstream is a core part of our Security Assurance and Trust Enablement program — ensuring Plaid's contractual security obligations with customers and data partners are defensible, consistent, and never a bottleneck to deal velocity, all while building trust. About the Role You will own Plaid’s Security Contracts workstream end-to-end—the DRI for how security contract reviews get done, how fast they move, and how the program improves over time. You will review security provisions in customer MSAs, DPAs, and security addenda, identify unacceptable clauses, and provide Legal and GTM with the actionable security feedback they n

We believe that the way people interact with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. Plaid powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like Venmo, SoFi, several of the Fortune 500, and many of the largest banks to make it easy for people to connect their financial accounts to the apps and services they want to use. Plaid’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, the company is headquartered in San Francisco with offices in New York, Washington D.C., London and Amsterdam. The Security Governance, Risk, and Compliance (GRC) team is part of Plaid’s security organization, focused on enabling the business by proactively managing information security risks and maintaining effective controls. Our mission is to reduce the likelihood and impact of security risks while operating a robust assurance program that builds trust with our customers, consumers, and data partners. We own Plaid’s security compliance frameworks, run our audits and risk programs, and partner across the company to keep Plaid’s platform secure, resilient, and aligned with industry and regulatory expectations. GRC Engineering is how we make all of that scale — turning compliance into code, evidence into telemetry, and audits into a continuous, automated capability. The Role: You will own GRC Engineering at Plaid — a foundational, high-ownership role defining an emerging discipline from the ground up. Today most of our compliance work is manual and point-in-time; you will turn it into an engineered system that is continuous, data-driven, and scalable, and set the technical direction for the field. You will: Define the discipline and the architecture — how GRC Engineering works at Plaid, not just execute with

The Legal team supports Datadog’s rapid growth by providing a wide range of legal services across a highly dynamic technology company, from driving new business via contracts and compliance efforts, to protecting Datadog’s offerings. Datadog’s Legal team collaborates with virtually every team across the organization, from engineering to product to marketing. Within Legal, the Commercial, Alliances & Procurement team focuses on all commercial engagements, channel and alliances agreements, procurement matters, and related legal topics across Datadog’s global footprint. We are a collaborative, people-first team that values acting as trusted advisors, communicating clearly, embedding inclusion, and holding ourselves accountable. This role offers the chance to play a critical part in the success of a rapidly growing and innovative SaaS company in APJ, with a particular focus on our India and South East Asia regions. You will lead complex negotiations with Indian and South East Asia customers and partners and serve as a trusted advisor to internal stakeholders with a strong focus on the India region as our business rapidly expands in that region. The position requires someone who can negotiate complex agreements with Indian customers, have deep expertise in navigating the legal regulatory landscape in India and South East Asia while also supporting broader APJ commercial activity. You will also have the opportunity to influence and refine Datadog’s contracting and compliance approach across these fast-evolving markets. The role involves close collaboration with cross-functional teams including Sales, Deal Desk, Procurement, and Privacy. You will be expected to provide strong, practical solutions that balance legal risk with business objectives. This position will also give you exposure to cutting-edge SaaS technology areas such as privacy, security, and AI, allowing you to stay at the forefront of the industry. At Datadog, we place value in our office culture -

As the Engineering Manager for Commercial Audit, you will lead a high-performing team responsible for scaling Datadog’s security and compliance posture through automation, tooling, and engineering excellence. Our GRC (Governance, Risk, and Compliance) function is a critical partner to the broader Security and Engineering organizations, ensuring that Datadog not only meets rigorous global regulatory standards but does so in a way that is efficient, scalable, and integrated into our cloud-native infrastructure. You will manage a team of engineers and analysts who are transitioning to a GRC engineering direction to treat compliance as a software problem, leveraging AI, custom tooling, CI/CD pipelines, and cloud-native services to turn complex regulatory requirements into actionable, automated controls. You will lead the strategy, roadmap, and execution of Datadog’s Commercial Audit initiatives. This is a high-impact leadership role where you will grow a team of engineers and analysts responsible for directly maintaining our compliance programs and related audits (e.g., SOC2, PCI, HIPAA, ISO) while looking to improve efficiency and effectiveness through platforms and tooling. You will act as a bridge between technical engineering, legal, and compliance, enabling the organization to move fast while maintaining a secure and compliant environment. You will champion a culture of "compliance-as-code," identifying opportunities to automate evidence collection, streamline control testing, and reduce manual toil for both your team and our partner engineering teams. At Datadog, we place value in our office culture - the relationships and collaboration it builds, and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Lead the strategy, roadmap, and execution of Datadog’s commercial security compliance efforts, shifting from manual audit processes to automated, scalable

The Travel Manager Americas is accountable for the strategy, operations, and optimization of the company’s corporate travel program across the Americas region, while also providing support for the regional leads. This role requires a consistent, cost‑effective, and employee‑centric travel experience while maintaining compliance with global travel & expense (T&E) policy and regional regulatory requirements. The role partners closely with Finance, HR, Procurement, Security, and regional business leaders to support business growth, traveler safety, and operational excellence. This role can be based remotely in the United States, or hybrid near one of our hub offices. Key Responsibilities Travel Program Strategy & Governance Own the Americas travel program, aligned to global T&E policy and mobility strategy Localize global travel policies for regional requirements (tax, labor, safety, visa, and regulatory) Act as the primary regional escalation point for travel‑related issues Supplier & Vendor Management Manage regional relationships with Travel Management Company (TMC)- Navan, Airlines, hotel chains, car rental providers Support sourcing, RFPs, and contract renewals in partnership with Procurement Track supplier performance against SLAs, cost targets, and traveler satisfaction metrics Financial & Cost Management Drive cost optimization through preferred supplier adoption and traveler behavior change Partner with Finance on budgeting, forecasting, and savings initiatives Monitor leakage, out‑of‑policy spend, and compliance trends Traveler Experience & Support Ensure a seamless, inclusive, and regionally relevant traveler experience Define traveler communications, guidance, and self‑service resources Oversee issue resolution related to disruptions, escalations, or complex bookings Risk, Duty of Care & Compliance Partner with Security and Legal to support duty of care obligations Ensure regional alignment with traveler tracking, emergency r

We're transforming the grocery industry At Instacart, we invite the world to share love through food because we believe everyone should have access to the food they love and more time to enjoy it together. Where others see a simple need for grocery delivery, we see exciting complexity and endless opportunity to serve the varied needs of our community. We work to deliver an essential service that customers rely on to get their groceries and household goods, while also offering safe and flexible earnings opportunities to Instacart Personal Shoppers. Instacart has become a lifeline for millions of people, and we’re building the team to help push our shopping cart forward. If you’re ready to do the best work of your life, come join our table. Instacart is a Flex First team There’s no one-size fits all approach to how we do our best work. Our employees have the flexibility to choose where they do their best work—whether it’s from home, an office, or your favorite coffee shop—while staying connected and building community through regular in-person events. Learn more about our flexible approach to where we work. Why this role is on the menu Instacart operates at the intersection of food access, gig economy labor, and marketplace regulation, making legislative and regulatory engagement a core business function, not an afterthought. As the regulatory landscape around gig economy platforms, marketplace operators, and labor practices continues to evolve rapidly, the Legislative and Labor Team needs a skilled lawyer to analyze emerging requirements, build compliance frameworks, and shape the regulatory conversation before it shapes Instacart. Without this role, gaps in legal analysis and compliance strategy could create operational risk across multiple areas of the business. A year from now, Instacart will have stronger legal frameworks in place, clearer compliance strategies across regulatory domains, and a more coordinated voice in the cross-industry conversations that define

We're transforming the grocery industry At Instacart, we invite the world to share love through food because we believe everyone should have access to the food they love and more time to enjoy it together. Where others see a simple need for grocery delivery, we see exciting complexity and endless opportunity to serve the varied needs of our community. We work to deliver an essential service that customers rely on to get their groceries and household goods, while also offering safe and flexible earnings opportunities to Instacart Personal Shoppers. Instacart has become a lifeline for millions of people, and we’re building the team to help push our shopping cart forward. If you’re ready to do the best work of your life, come join our table. Instacart is a Flex First team There’s no one-size fits all approach to how we do our best work. Our employees have the flexibility to choose where they do their best work—whether it’s from home, an office, or your favorite coffee shop—while staying connected and building community through regular in-person events. Learn more about our flexible approach to where we work. Why this role is on the menu Instacart operates at the intersection of food access, gig economy labor, and marketplace regulation, making legislative and regulatory engagement a core business function, not an afterthought. As the regulatory landscape around gig economy platforms, marketplace operators, and labor practices continues to evolve rapidly, the Legislative and Labor Team needs a skilled lawyer to analyze emerging requirements, build compliance frameworks, and shape the regulatory conversation before it shapes Instacart. Without this role, gaps in legal analysis and compliance strategy could create operational risk across multiple areas of the business. A year from now, Instacart will have stronger legal frameworks in place, clearer compliance strategies across regulatory domains, and a more coordinated voice in the cross-industry conversations that define

About the team OpenAI’s Forward Deployed Engineering team partners with banks, asset managers, insurers, and private capital firms to deploy production-grade AI systems in high-stakes financial environments. We operate at the intersection of customer delivery and core platform development, embedding deeply with customers to translate frontier model capabilities into reliable, auditable systems that create measurable business impact. Our work turns early deployments into repeatable solution patterns, operating standards, and evaluation practices that scale across regulated financial institutions. About the role We are hiring a Forward Deployed Engineer (FDE) to lead end-to-end deployments of OpenAI’s models inside financial services organizations where correctness, latency, explainability, and control matter. You will work with customers who are experts in investment banking, trading, risk, compliance, underwriting, research, operations, or investment decision-making, translating complex workflows, data constraints, and regulatory requirements into production systems. You will measure success through production adoption, workflow efficiency, risk reduction, revenue impact, and evaluation-driven feedback loops that inform product, model, and GTM strategy. You’ll work closely with Product, Research, GTM, Security, Legal, and GRC to deliver systems that meet enterprise standards for governance, auditability, and operational resilience. You will also play a central role in shaping OpenAI’s Financial Services offering — identifying high-value use cases, defining solution patterns, and building the first repeatable deployments that scale across institutions. Learn more about some of our work with financial institutions . This role is based in New York. We use a hybrid work model of 3 days in the office per week. We offer relocation assistance. Travel up to 50% may be required. In this role, you will Design and ship production AI systems around models, owning integrations,

Strength in Trust OneTrust’s mission is to enable innovation through the responsible use of data and AI. We believe that ensuring data is trusted shouldn’t slow teams down—it should accelerate what’s possible. This led us to develop the first technology platform for responsible data use in 2016. Today, with AI representing the latest and most impactful expansion of data yet, OneTrust is once again redefining what responsible innovation looks like. OneTrust, the AI‑Ready Governance Platform™, unifies regulatory intelligence, automation, and connected governance workflows so businesses can continue to move at the speed of AI while ensuring good governance to prevent data misuse at scale. Trusted by thousands of organizations worldwide, OneTrust is shaping the future where trusted data becomes a transformative force for business and society. Strength in Trust OneTrust’s mission is to enable organizations to use data and AI responsibly. Our platform simplifies collecting data with consent and preferences, automates data governance with integrated risk management across privacy, security, IT/tech, third-party, and AI risk, and enables responsible data use by applying and enforcing data policies across the entire data estate and lifecycle. Recognized as a market pioneer and leader, OneTrust serves more than 14,000 customers globally. The Challenge We are seeking a strategic, commercially minded Senior Principal / Director, HR Country Manager to serve as the HR leader for our Madrid office, our hub for the EMEA region. This role will be based in Madrid and will provide visible, on-site leadership for the site while partnering closely with local leaders and global People stakeholders on both day-to-day operations and broader business strategy. The role combines executive partnership, strong operational and compliance oversight, and hands-on support for complex people matters in Spain. This leader will also spend part of their time mentoring the current senior H