Risk And Compliance Specialist Jobs

Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About the Team Our company, specializing in blockchain and web3 technologies, places a high emphasis on security and reliability. We are seeking individuals who are deeply knowledgeable in operating systems, browsers, DApps, smart contract security, and programming language behaviors. Responsibilities include identifying potential risks such as private key storage and designing leakage prevention solutions. What You’ll Be Doing: Design, develop, and maintain real-time and batch data processing pipelines using Flink, ensuring high performance and scalability. Responsible for the architecture design and development of Flink streaming systems, tailoring solutions to complex business requirements. Collaborate with data scientists to support feature engineering and develop feature stores for machine learning models in production. Work closely with cross-functional teams, including AI, compliance, risk, and engineering, to provide robust and scalable data solutions. Troubleshoot and resolve performance bottlenecks and technical challenges in real-time stream processing, ensuring system stability and scalability

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: Replit is building the security GRC function that will scale with an AI-native product. As the Risk & Compliance lead, you'll own our certification and audit program end to end: SOC 2, ISO 27001, and eventually ISO 42001 (AI management systems), while also owning the company's master security risk register and continuous compliance monitoring. You'll report to the Head of Security GRC, who retains overall accountability for the risk program, and work closely with Engineering to make sure controls hold up in practice, not just on paper. What You'll Do Own the end-to-end certification roadmap (SOC 2 Type II, ISO 27001, and future frameworks like ISO 42001) including scoping, gap assessments, remediation, and audit execution Manage relationships with external auditors and drive the annual audit calendar so certifications renew without last-minute scrambles Own and maintain the company's master security risk register including risk identification, scoring methodology, treatment plans, and residual risk reporting Build and maintain continuous compliance monitoring so control status reflects real-time state rather than point-in-time snapshots Own the core audit artifacts that back every certification including ISMS documentation, Statements of Applicability, risk assessments, and potentially FedRAMP System Security Plans (SSPs) Run regular audits and readiness assessments, and track remediation of findings and control gaps to closure Support GDPR and broader privacy compliance alongside the Legal/Privacy team, without owning the legal interpretation of requirements Partner with the GRC Engineer to define what evidence collection and control monitoring should be automated versus manually reviewed Track and

About us: Build the future of banking. Zeta is a next-generation banking technology company providing cloud-native, fully stackable processing and core banking platforms for issuers. With a focus on scalability, compliance, and innovation, Zeta empowers financial institutions to modernize their technology infrastructure and deliver secure, seamless digital banking experiences. Our impact runs at real-world scale. Today, over 25 million cards are live on Zeta-powered platforms across 7 countries, supported by a passionate team of 1,700+ Zetanauts across India, the US, EMEA, and Asia. Backed by SoftBank Vision Fund, Mastercard, and other reputed strategic investors, we reached a valuation of $2 billion in 2025. Our focus is on establishing product lines that focus on key outcomes by addressing real customer pain points, modernizing legacy systems, and strengthening core fundamentals. As a result, our systems and platforms support a wide range of banking and payments capabilities, including: 1. Tachyon, our cloud-native banking stack built for population-scale systems 2. Cipher, our unified authentication platform for secure, high-volume banking environments 3. Digital Credit as a Service, enabling banks to launch credit lines on UPI 4. Elena, our intelligent and conversational AI platform for banking 5. Pixel, India’s first digital-native credit card, launched in partnership with HDFC Bank, for whom we also revamped their PayZapp mobile app: Winner of the Celent Model Bank Award for Payments Innovation 2024 6. Sparrow, the leading card experience for non-prime cardholders in the US …and more across cards, payments, lending, and core banking. We are an engineering-first organization that values ownership, bias for action, and long-term thinking. Together, we solve some of the hardest problems in banking tech. Our culture is built around trust, collaboration, and creating the conditions for you to drive impact proportionate to your potential. Reinforcing our com

About the Team Joining Capco means joining an organization that is committed to an inclusive working environment where you are encouraged to #BeYourselfAtWork. Capco ICT RISK is a multi-faceted team focused on the evaluation, strategy definition, and execution of risk-minded solutions for leading organizations across the Financial Services industry. We provide customized results, adapting enterprise risk management strategies to potential cyber pitfalls. Capco has experience assisting financial institutions’ leadership on top cyber security priorities through a team with expertise in financial business processes, strategic advisory, cyber programs and security operations. About the Job As a Governance, Risk and Compliance Consultant ion our ICT Risk team, you will be part of consulting engagements responsible for managing, controlling, and mitigating client’s risk management strategies. You will be a part of teams working in close collaboration with our clients to define their security strategy. You will work alongside industry leaders to gain insight and experience as the practice continues to expand. What You’ll Get to Do Perform reviews of platforms and services to assess cyber risks around security risks such as data leakage and unauthorized access, and design controls to mitigate those risks Design, develop, and implement cybersecurity requirements that allow business requirements to be met with appropriate controls Design and develop cybersecurity policies, standards, and procedures Independently lead teams and projects of varying sizes Develop high-quality content deliverables such as security automation tools, reference security architectures, and white papers to help our consultants, partners, and customers build on the work you deliver What You’ll Bring with You 5+ years of experience in a similar role Interest in a p

At Asana, security is foundational to our mission of helping teams work together effortlessly. Our security team protects Asana’s employees, users, and customers by proactively addressing threats, ensuring compliance with legal and regulatory requirements, and fostering a culture of security throughout our product and operations. We are a team of security engineers and risk and compliance practitioners who build innovative safeguards and collaborate across the organization to build and maintain trust at scale. As the Third Party Risk Management Lead, you will be responsible for building and running Asana’s Third Party Risk Management (TPRM) program. You will own the end-to-end lifecycle of vendor security risk — from initial due diligence and risk tiering through ongoing monitoring and remediation. You will work closely with Procurement, Legal, Privacy, and Engineering teams to ensure that our third-party relationships are effectively assessed, tracked, and managed. This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. Our employees in Poland are employed under a contract of employment. What you’ll achieve Own and scale Asana’s TPRM program: Design, implement, and continuously improve a risk-based framework for assessing and managing third-party vendors and service providers. Establish risk tiering criteria, assessment workflows, and governance processes that scale with business growth. Lead vendor security assessments: Conduct and oversee security due diligence for new and existing vendors, including reviewing SOC 2 reports, ISO 27001 certifications, security questionnaires (SIG, CAIQ), and other relevant documentation. Identify gaps and work with vendors to remediate findings. Drive rem

Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! Figma's GRC team helps build and maintain trust with our users, regulators, business partners, and the organizations that rely on Figma every day. We partner across the company to strengthen security, manage risk, maintain compliance, and scale the programs that support our continued growth. We're growing our team and looking for security, risk, and compliance professionals across several disciplines. Whether your expertise is in compliance, risk management, governance, GRC tooling, or customer trust, you'll have the opportunity to build programs, improve processes, and help shape how Figma scales security and trust. Roles we hire for on this team: Compliance Management Lead compliance and certification programs across security and regulatory frameworks Manage audit cycles, partner with external assessors, and drive audit readiness initiatives Improve controls, processes, and evidence management practices across the organization <s

Location Details: India, Remote At GoDaddy, the future of work varies by team. Some teams are fully office-based. Others split their time between remote work and the office. Some teams work completely from home. This is a remote position, so you’ll be working remotely from your home. You may occasionally visit a GoDaddy office to meet with your team for events or meetings. Join Our Team... At GoDaddy, we are seeking a Senior Analyst to join our Assurance, Risk and Compliance (ARC) Enablement team. This role will help transform how our team and business improve processes, use technology, and empower people to manage risk and build the future compliance program. Reporting directly to the Director of ARC, you will drive meaningful improvements in people, processes, and technology. You will redesign workflows that cause unnecessary manual effort. You will develop automation and analytics that make compliance ongoing instead of occasional. You will ensure the team and collaborators are prepared to maintain and expand what is developed. You will work with SOX, Internal Audit (IA), and Enterprise Risk Management (ERM) to deliver scalable, auditable, and AI-forward solutions. If improving how compliance functions motivates you, this is your role! What you'll get to do... Find the friction and fix it. Map current-state workflows across ARC's SOX, IA, and ERM functions. Identify where manual effort and inefficiency exist. Lead process improvements that remove them for good. Build automation that actually sticks — develop pipelines, CI/CD-enabled code repositories, and repeatable testing frameworks that turn periodic compliance efforts into continuous, always-on operations. Make compliance visible in real time — build Power BI dashboards and analytics pipelines (Python, SQL) that give leadership and control owners a live view of risk posture. Put Jira to work for compliance — configure workflows, automation rules, and intake forms that embed traceability and standardization di

🚀 We’re on a mission to make money work for everyone. We’re waving goodbye to the complicated and confusing ways of traditional banking. After starting as a prepaid card, our product offering has grown a lot in the last 10 years in the UK. As well as personal and business bank accounts, we offer joint accounts , accounts for 16-17 year olds , a free kids account and credit cards in the UK, with more exciting things to come beyond. Our UK customers can also save , invest and combine their pensions with us. With our hot coral cards and get-paid-early feature, combined with financial education on social media and our award winning customer service, we have a long history of creating magical moments for our customers! We’re not about selling products - we want to solve problems and change lives through Monzo ❤️ 📍Madrid, Spain | 💰€75,000 - €95,000 + Incentive Awards tied to your performance ➕ benefits | Hear from the team ✨ ⭐Our Risk & Compliance Team We are looking for a Senior Risk & Compliance Officer to oversee risk management and compliance activities for the Spanish Branch of Monzo Bank Europe. In this role, you will implement Monzo’s Risk Management Framework in Spain, monitor the Branch’s key material risks covering operational, conduct and compliance risks, and support regulatory engagements particularly with Banco de España. Acting as a trusted advisor to the Spain Branch Manager, you will provide independent oversight, challenge and advice across a broad spectrum of risks including Credit, Operational, ICT/Security, Conduct, Compliance and Business risks. You will maintain strict functional independence via your reporting lines into the EU Risk Directors. This role sits within the Second Line of Defense (2LOD) and reports functionally to the EU Director of Operational Risk and the EU Director of Conduct & Compliance Risk, and operationally to the Spain Branch Manager. This role includes acting as the Customer Service Rep

🚀 We’re on a mission to make money work for everyone. We’re waving goodbye to the complicated and confusing ways of traditional banking. After starting as a prepaid card, our product offering has grown a lot in the last 10 years in the UK. As well as personal and business bank accounts, we offer joint accounts , accounts for 16-17 year olds , a free kids account and credit cards in the UK, with more exciting things to come beyond. Our UK customers can also save , invest and combine their pensions with us. With our hot coral cards and get-paid-early feature, combined with financial education on social media and our award winning customer service, we have a long history of creating magical moments for our customers! We’re not about selling products - we want to solve problems and change lives through Monzo ❤️ 📍Barcelona, Spain | 💰€75,000 - €95,000 + Incentive Awards tied to your performance ➕ benefits | Hear from the team ✨ ⭐Our Risk & Compliance Team We are looking for a Senior Risk & Compliance Officer to oversee risk management and compliance activities for the Spanish Branch of Monzo Bank Europe. In this role, you will implement Monzo’s Risk Management Framework in Spain, monitor the Branch’s key material risks covering operational, conduct and compliance risks, and support regulatory engagements particularly with Banco de España. Acting as a trusted advisor to the Spain Branch Manager, you will provide independent oversight, challenge and advice across a broad spectrum of risks including Credit, Operational, ICT/Security, Conduct, Compliance and Business risks. You will maintain strict functional independence via your reporting lines into the EU Risk Directors. This role sits within the Second Line of Defense (2LOD) and reports functionally to the EU Director of Operational Risk and the EU Director of Conduct & Compliance Risk, and operationally to the Spain Branch Manager. This role includes acting as the Customer Service

Joining Capco means joining an organisation that is committed to an inclusive working environment where you’re encouraged to #BeYourselfAtWork. We celebrate individuality and recognize that diversity and inclusion, in all forms, is critical to success. It’s important to us that we recruit and develop as diverse a range of talent as we can. We believe that everyone brings something different to the table – so we’d love to know what makes you different. Such differences may mean we need to make changes to our process to allow you the best possible platform to succeed, and we are happy to cater to any reasonable adjustments you may require. You will find the section to let us know of these at the bottom of your application form or you can mention it directly to your recruiter at any stage and they will be happy to help. ABOUT CAPCO Capco is a global business, data and technology consultancy, focused on the Financial Services sector. We are passionate about helping our clients succeed in an ever-changing industry. We are: Experts in capital markets, banking and payments, insurance and wealth and asset management Deep knowledge in financial services offering, including e.g. Finance, Risk and Compliance, Financial Crime, Resilience etc. Committed to growing our business and hiring the best talent to help us get there Focus on maintaining our nimble, agile and entrepreneurial culture ROLE DESCRIPTION We are looking to recruit financial risk transformation candidates into our growing Financial Crime, Risk, Regulation and Finance (FRRF) capability. Successful candidates will be involved in on regulatory capital and Credit RWA models and tools, with emphasis on Basel III Endgame implementation, RWA calculations, and related model risk management activities. The role is suited for candidates with strong quantitative, regulatory capital, and programming skills, as well as the ability to challenge methodologies and communicate findings clearly to technical an

Joining Capco means joining an organisation that is committed to an inclusive working environment where you’re encouraged to #BeYourselfAtWork. We celebrate individuality and recognize that diversity and inclusion, in all forms, is critical to success. It’s important to us that we recruit and develop as diverse a range of talent as we can. We believe that everyone brings something different to the table – so we’d love to know what makes you different. Such differences may mean we need to make changes to our process to allow you the best possible platform to succeed, and we are happy to cater to any reasonable adjustments you may require. You will find the section to let us know of these at the bottom of your application form or you can mention it directly to your recruiter at any stage and they will be happy to help. ABOUT CAPCO Capco is a global business, data and technology consultancy, focused on the Financial Services sector. We are passionate about helping our clients succeed in an ever-changing industry. We are: Experts in capital markets, banking and payments, insurance and wealth and asset management Deep knowledge in financial services offering, including e.g. Finance, Risk and Compliance, Financial Crime, Resilience etc. Committed to growing our business and hiring the best talent to help us get there Focus on maintaining our nimble, agile and entrepreneurial culture ROLE DESCRIPTION We are looking to recruit financial risk transformation candidates into our growing Financial Crime, Risk, Regulation and Finance (FRRF) capability. Successful candidates will be involved in on regulatory capital and Credit RWA models and tools, with emphasis on Basel III Endgame implementation, RWA calculations, and related model risk management activities. The role is suited for candidates with strong quantitative, regulatory capital, and programming skills, as well as the ability to challenge methodologies and communicate findings clearly to technical an

We're transforming the grocery industry At Instacart, we invite the world to share love through food because we believe everyone should have access to the food they love and more time to enjoy it together. Where others see a simple need for grocery delivery, we see exciting complexity and endless opportunity to serve the varied needs of our community. We work to deliver an essential service that customers rely on to get their groceries and household goods, while also offering safe and flexible earnings opportunities to Instacart Personal Shoppers. Instacart has become a lifeline for millions of people, and we’re building the team to help push our shopping cart forward. If you’re ready to do the best work of your life, come join our table. Instacart is a Flex First team There’s no one-size fits all approach to how we do our best work. Our employees have the flexibility to choose where they do their best work—whether it’s from home, an office, or your favorite coffee shop—while staying connected and building community through regular in-person events. Learn more about our flexible approach to where we work. Overview Instacart's Governance, Risk and Compliance (GRC) team sits at the intersection of security, data, and business impact — and we're building an automated, engineering-grade risk program that produces real-time risk scoring, quantified exposure models, and ROI-linked investment decisions that reach the CISO, executive leadership, and the board. We're looking for a Senior Risk & Compliance Engineer to help us get there. This is an engineering role with a data science expertise needed. You'll write production-level code, build signal ingestion pipelines, and develop probabilistic risk models that give our security organization a quantified, confidence-backed view of our risk posture — all in service of protecting Instacart's customers and products at scale. If you're energized by the challenge of transforming a manual, reactive discipline into a data-drive

We're transforming the grocery industry At Instacart, we invite the world to share love through food because we believe everyone should have access to the food they love and more time to enjoy it together. Where others see a simple need for grocery delivery, we see exciting complexity and endless opportunity to serve the varied needs of our community. We work to deliver an essential service that customers rely on to get their groceries and household goods, while also offering safe and flexible earnings opportunities to Instacart Personal Shoppers. Instacart has become a lifeline for millions of people, and we’re building the team to help push our shopping cart forward. If you’re ready to do the best work of your life, come join our table. Instacart is a Flex First team There’s no one-size fits all approach to how we do our best work. Our employees have the flexibility to choose where they do their best work—whether it’s from home, an office, or your favorite coffee shop—while staying connected and building community through regular in-person events. Learn more about our flexible approach to where we work. Overview Instacart's Governance, Risk and Compliance (GRC) team sits at the intersection of security, data, and business impact — and we're building an automated, engineering-grade risk program that produces real-time risk scoring, quantified exposure models, and ROI-linked investment decisions that reach the CISO, executive leadership, and the board. We're looking for a Senior Risk & Compliance Engineer to help us get there. This is an engineering role with a data science expertise needed. You'll write production-level code, build signal ingestion pipelines, and develop probabilistic risk models that give our security organization a quantified, confidence-backed view of our risk posture — all in service of protecting Instacart's customers and products at scale. If you're energized by the challenge of transforming a manual, reactive discipline into a data-drive

Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! Figma's Governance, Risk, and Compliance team is the foundation of how we build and maintain trust - with our users, regulators, business partners, and the organizations that rely on Figma every day. We work across the organization and drive programs that ensure the effectiveness of our security protections, identify and manage risk, maintain compliance, and build trust with our customers. We're looking for a Governance, Risk and Compliance Director to lead this team through its next phase of growth. You'll own Figma's security compliance, risk management, and governance strategy end to end - setting direction for our certification portfolio, building the risk and controls frameworks that scale with our growing business and product suite, and representing GRC to executives, the board, customers, and regulators. This is a hands-on leadership role where you'll manage and grow a team of GRC professionals while staying close to the programs, infrastructure, audits, and cross-functional relationships needed to both protect and enable the business. If you're a strategist and team builder who is excited to scale Figma's GRC program in a rapidly evolving environment, we'd love to hear from you! This is a full time role that can be held from one of our US hubs or remotely in the United States. What you'll do at Figma: Set the strategy and roadmap for Figma's GRC program, aligning compliance, risk, and governance priorities with company objectives and the Security leadership team Own Figma's certification

About the opportunity Are you ready to take the next step in your career? As an ICT GRC - Risk & Compliance Manager, you will play a pivotal role in shaping how we manage IT risks in an increasingly AI-driven financial landscape. In this role, you’ll be at the forefront of risk management and compliance, ensuring our IT systems remain secure, resilient, and aligned with evolving regulations. You’ll work closely with tech, security, and compliance teams to strengthen risk frameworks, enhance resilience, and drive smarter decision-making. As AI and automation become essential in risk management, you’ll help explore and implement automation and AI-driven solutions to improve risk assessments, identify emerging threats, and streamline compliance processes. This is an opportunity to not just keep up with change, but to help shape it. If you're looking for a role where AI, automation, and ICT Risk and compliance intersect, and where your expertise can have a real impact, this is it. In this role you will Function as a key member of the bank's risk function (Second Line of Defense), reporting directly to the Deputy CISO and maintaining close collaboration with First Line of Defense teams on matters of ICT risk management. Actively engage in the ICT Risk Management process, encompassing proactive risk assessment, analysis, treatment plan identification, mitigation, and ongoing monitoring. Drive the maturity of the ICT Risk Management framework in adherence to DORA act. Proactively conduct risk assessments to identify ICT risks within the bank's IT infrastructure and propose appropriate mitigation strategies. Collaborate with cross-functional teams, including product, technology, security, and other First Line of Defense teams, to identify and implement risk treatment plans. Maintain the ICT risk register, ensuring the accuracy and completeness of ICT risks. Proactively report progress and updates to the team, providing detailed reports and presentations on the status of