Risk And Control Officer Jobs

Senior Security Engineer, Vulnerability Management Here at Datadog, we think about vulnerability management a little differently. We embrace open source software, recognize our role in the software supply chain, and see attackers weaponizing vulnerabilities faster than ever. We are looking for a Senior Security Engineer who can combine vulnerability-management judgment with hands-on engineering to help us scale and improve our vulnerability lifecycle across Datadog’s multi-cloud products and services. In this role, you will turn ambiguous security problems into clear solutions, and work with engineering teams to address root causes and develop technical controls that reduce vulnerabilities earlier in the SDLC. You’ll use AI and automation to help scale the overall vulnerability lifecycle across Datadog. You will use data and sound technical judgment to prioritize risk, and partner with security, product, platform, and compliance teams to bring scalable solutions into practice. At Datadog, we place value in our office culture - the relationships and collaboration it builds, and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do Work across the vulnerability lifecycle from detection and impact assessment through risk-based prioritization, remediation, and verification. Use AI and automation to build tools, services, and workflows that make security ideas concrete, validate them quickly, and create alignment for scalable implementation. Reduce engineering toil through a “PRs, not tickets” approach, using automation to enrich findings, identify ownership, recommend or deliver fixes, and track outcomes. Analyze recurring vulnerabilities and remediation failures to identify root causes and opportunities to prevent issues earlier in the SDLC. Partner with SDLC Security, Product Security, platform teams, and engineering teams to balance technical constraints, busin

We believe that the way people interact with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. Plaid powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like Venmo, SoFi, several of the Fortune 500, and many of the largest banks to make it easy for people to connect their financial accounts to the apps and services they want to use. Plaid’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, the company is headquartered in San Francisco with offices in New York, Washington D.C., London and Amsterdam. About the Team: The Security Governance, Risk, and Compliance (GRC) team is part of Plaid’s security organization, focused on enabling the business by proactively managing information security risks and maintaining effective controls. Our mission is to reduce the likelihood and impact of security risks while operating a robust assurance program that builds trust with our customers, consumers, and data partners. We partner closely across the company to ensure Plaid’s platform remains secure, resilient, and aligned with industry and regulatory expectations. The Security Contracts workstream is a core part of our Security Assurance and Trust Enablement program — ensuring Plaid's contractual security obligations with customers and data partners are defensible, consistent, and never a bottleneck to deal velocity, all while building trust. About the Role You will own Plaid’s Security Contracts workstream end-to-end—the DRI for how security contract reviews get done, how fast they move, and how the program improves over time. You will review security provisions in customer MSAs, DPAs, and security addenda, identify unacceptable clauses, and provide Legal and GTM with the actionable security feedback they n

About Vercel: Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience. Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. About the role: We're looking for a Security Engineer to join our Cloud Security Engineering team. In this role, you'll help strengthen the security of our platform by building and improving the controls that protect our infrastructure. You'll play a key role in making security a core part of how we build, deploy, and scale our systems, while helping the company grow securely and confidently. You'll report to the Security Operations Manager, and this is a hybrid or fully remote within the United States. If you're based within commuting distance of our SF or NY offices, the role includes in-office anchor days on Monday, Tuesday, and Friday. What you will do: Design and implement scalable security controls across our cloud-native platform. Harden infrastructure components using infrastructure-as-code, policy enforcement, and service isolation. Build secure by default infrastructure and code CI/CD pipelines. Collaborate with platform and infrastructure teams to integrate security best practices into architecture and workflows. Stay ahead of cloud security trends and adopt cutting-edge technologies to enhance platform resilience. Conduct threat modeling, risk analysis, and mitigation planning for critical systems. Drive improvements in monitoring, detection, and incident response at the platform level. Build, deploy and maintain relevant tooling. About you: 8+ years of experience in infrastructure or platform security roles. Deep understanding of secure cloud infrastructure (AWS/GCP), identity and access management, and system hardening. Proficient wi

We're looking for an Engineering Manager who combines strong technical judgment with people leadership to help build the systems and team practices that keep Asana resilient at scale. This role is a great fit for someone who enjoys turning broad reliability problems into clear priorities, and can balance foundational engineering work with iterative delivery. You'll help shape what Platform Reliability means at Asana while building a team that ships durable systems, strong operational practices, and high-trust partnerships. You will define the reliability roadmap for a rapidly growing global platform, transforming reliability into a core architectural advantage. You'll partner closely with platform engineering, infrastructure, and product teams in Warsaw, Reykjavik and San Francisco to protect Asana under real-world load, improve how traffic and failure modes are handled, and ensure reliability is designed in rather than added later. This is a role for someone who can lead through influence, coach engineers, and raise the bar for execution and collaboration. This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. We offer a Contract of Employment (UoP) for our employees in Poland. What you'll achieve Build and lead a new Platform Reliability team, hiring and developing engineers while setting a clear standard for collaboration, ownership, technical excellence and growth. Partner with technical leaders to define the roadmap for core reliability systems such as load shedding, rate limiting, circuit breakers, traffic controls, and other platform guardrails. Establish and evangelize best-in-class operating practices for incident response, postmortems, and proactive risk management through SLOs a

WHAT IS BOX? Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI-first era of business. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia. By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It’s the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations. With the combination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift WHY BOX NEEDS YOU Box is building a modern, AI-first Strategic Sourcing and Procurement Intelligence & Operations organization that makes it easier for Boxers to buy, travel, and manage spend — while creating value, maintaining strong controls, and managing risk. We're looking for a Senior Team Manager to lead the team, systems, and programs powering Box's procurement and spend experience — with operational ownership of Zip, Navan, and Brex, spanning procurement intake and workflows, business travel and expense, and corporate cards. This is a problem-solving and operational leadership role, not an administrative one. You'll identify root causes behind operational challenges and turn complex or ambiguous problems into scalable solutions — partnering

WHAT IS BOX? Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI-first era of business. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia. By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It’s the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations. With the combination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift WHY BOX NEEDS YOU Box is building a modern, AI-first Strategic Sourcing and Procurement Intelligence & Operations organization that makes it easier for Boxers to buy, travel, and manage spend — while creating value, maintaining strong controls, and managing risk. We're looking for a Senior Team Manager to lead the team, systems, and programs powering Box's procurement and spend experience — with operational ownership of Zip, Navan, and Brex, spanning procurement intake and workflows, business travel and expense, and corporate cards. This is a problem-solving and operational leadership role, not an administrative one. You'll identify root causes behind operational challenges and turn complex or ambiguous problems into scalable solutions — partnering

WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Senior Technology Risk Analyst Department: Data & Technology Solutions (DTS) Reports To: SVP Security and Compliance Location: [London/Hybrid 2 days a week in office] Position Type: Full-Time Role Purpose The Senior Technology Risk Analyst is responsible for managing and continuously improving the Information Security Management System (ISMS) across Data & Technology Solutions. You will ensure that security policies, controls, risks, exceptions, and governance processes are properly maintained, evidenced, reviewed, and acted upon. Reporting to the SVP Security and Compliance, you will provide the operational backbone for security governance across DTS. This is a hands-on Governance, Risk, and Compliance (GRC) role. You will collaborate across security, product, engineering, infrastructure, architecture, legal, risk, compliance, and delivery teams to transform security governance into a dynamic, working management system rather than a static documentation exercise. Key Responsibilities 1. ISMS Ownership & Operation Manage the day-to-day opera

CAPCO POLAND * We are looking for Poland based candidate. * This role is hybrid and may require working from the office in Warsaw. Business Analyst – Third Party Risk Management & Risk Remediation We are looking for an experienced Business Analyst / Consultant to support tactical remediation activities and oversee the effective embedding of the new process within a global banking environment. Key Responsibilities Support and coordinate tactical remediation activities , ensuring timely delivery of agreed actions. Oversee the embedding and adoption of the process across relevant teams and stakeholders. Coordinate activities across multiple business, risk, and technology stakeholders. Track actions, proactively follow up on dependencies, and drive issues through to completion. Identify gaps and support the development of practical remediation solutions. Provide structured analysis and bring clarity to complex or ambiguous problems. Support stakeholder discussions and ensure effective communication across involved teams. Key Requirements Experience in banking or financial services , ideally within Risk, Controls, or Transformation. Knowledge of or experience in Third Party Risk Management (TPRM) is highly desirable. Basic to intermediate understanding of Cyber Risk . Basic to intermediate understanding of Financial Crime and/or Internal Fraud Risk . Strong analytical, problem-solving, and critical-thinking skills. Excellent stakeholder management, interpersonal, and negotiation skills. High level of proactivity and independent thinking , with a strong focus on execution and timely delivery. Proven ability to coordinate activities involving multiple stakeholders and effectively drive actions to completion. Agile mindset with the ability to adapt quickly and continuously improve ways of working. WHAT WE OFFER Contract of employment. Multiple employee benefits packages (MyBenefit Cafeteria, private medical care, insurance). Access to 3,000

Our Global Structure Deliveroo is now part of DoorDash, bringing together teams with even greater reach, scale, and ambition. Depending on your role, you may collaborate with teammates, systems, and leaders across DoorDash and Wolt. Together, we’re unlocking new possibilities as one global team. About the Role Hybrid (3 days per week in the London office required) Individual contributor role Every day, millions of customer transactions flow through our platform. Our challenge is to make payments effortless for genuine customers while preventing fraud, abuse, and financial loss. As the Senior Strategy & Operations Manager for Payments Risk & Fraud, you'll own one of our most commercially important problem spaces. You'll define the strategy for payment fraud, promotions abuse, cash risk, and chargebacks – balancing customer experience, growth, and profitability. This is an end-to-end ownership role. You'll identify opportunities, shape strategy, influence product and engineering roadmaps, partner with data science to improve detection models, and work closely with Finance and Payments to protect revenue while enabling sustainable growth. If you enjoy solving ambiguous, high-impact business problems using data, technology, and cross-functional leadership, we'd love to hear from you. What You'll Own Defining our Payments Risk Strategy Own the strategy and roadmap for payment fraud, promotions abuse, cash risk, and disputes across multiple markets. Identify emerging risks, prioritise investments, and continuously evolve our controls to protect customers and the business while supporting growth. Driving Commercial Performance: Own the key business metrics that matter, including: Fraud losses Chargeback rates Payment approval rates Promotions efficiency Recovery rates False positive rates Evaluate trade-offs between risk, customer experience, and conversion to maximise long-term profitability Building Data-Driven Solutions Use data to understan

POSITION SUMMARY Clearwater is seeking a skilled and experienced Senior Microsoft 365 and Azure Cloud Engineer to join our team. The ideal candidate will have a strong background in Microsoft 365 Configuration and Management and significant experience with Azure operational tools such as Entra ID and Intune. As an Engineer, you will play a crucial role in managing and maintaining our client’s M365 and Azure-based infrastructure, ensuring its reliability, security, and scalability. SPECIFIC JOB RESPONSIBILITIES M365 and Azure Client Operations Management: Microsoft Entra ID — day-to-day identity management: Conditional Access policies, SSPR, PIM (Privileged Identity Management), directory sync (Entra Connect / Cloud Sync), B2B/B2C configurations, app registrations, enterprise app management Microsoft Intune — device enrollment (BYOD + corporate), compliance policies, configuration profiles, app deployment, co-management with SCCM if applicable, Autopilot Microsoft Purview — data classification, sensitivity labels, DLP policies, insider risk management, communication compliance, audit log review Exchange Online — mail flow rules, connectors, hybrid config, anti-spam/anti-phishing policies (Defender for Office 365) SharePoint Online & OneDrive — permissions governance, external sharing controls, tenant-level configuration Microsoft Teams — policy management, governance (lifecycle, guest access, DLP integration) Microsoft 365 Defender / Defender XDR — incident response integration, alert triage, threat hunting basics Azure Operation Management: Azure IaaS/PaaS operations — Setup VMs, VNets, NSGs, storage accounts, Key Vault Entra ID integration with Azure resources – Setup RBAC, managed identities, configure service principals Azure Policy and Defender for Cloud – Perform and monitor compliance posture management Hybrid connectivity — Setup ExpressRoute, VPN Gateways, Azure Arc PowerShell / Microsoft Graph API — Enable Automation of both Azure and M365 worklo

We are looking for a Trading Operations Manager to take care of the Trading Operations Team, which is a crucial component in ensuring a reliable, risk-averse, and robust trading process. It holds critical responsibility for anomaly detection, promptly identifying irregularities and instituting all necessary procedures to maintain trading integrity. By enhancing information accuracy and effectiveness, they continually streamline internal processes, bolstering the productivity and efficiency of many other teams. What You’ll Be Doing: Capacity planning Performance management Your stakeholders and your team happiness at the same time You are going to lead the Trading Operations Team responsible for: Designing, updating and reliable execution of: Pre- and post- session checks and action points Intrasession invariants controls Escalation procedures Continuous improvement of: Quality of anomalies detection Reaction and resolution SLAs Tooling and communication efficiency What We Look For In You: Experience in similar positions Willingness to combine hands-on and management tasks Great Attention to details Efficient communication in all flavours of English Why Should You Join Our Team? Great challenges with many opportunities to prove yourself A welcoming group of highly qualified international professionals Cutting-edge hardware and technology Work remotely from anywhere in the world Access any of our global offices anytime Flexible schedule 40 paid days off Competitive salary

Junior Data Scientist The Wiley Edge banking team is currently seeking a Data Scientist to work across the Front Office Trading, Risk & Regulatory Compliance Trade Analytics group, using Machine Learning and Data Analytics techniques to design and develop complex data models for client and trading analytics across their Fixed Income and FX offerings. You will be supporting the transformation from traditional controls monitoring to “on-screen” data driven monitoring and analytical solutions. Tools: Python (pandas, numpy) Machine Learning Algorithms / Natural Language Processing (NLP) AI / Robotics Predictive Analysis Good grasp of ML Algorithms Starting Salary: CA$85,000 per annum Junior Data Scientist

Who We Are Notion is the collaborative AI workspace where teams and agents think together . We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. About the Role: Millions of people use Notion every day, and we’re growing quickly. The Infrastructure Security team’s mission is to build a secure-by-default foundation across Notion’s technical stacks—architecting systems that make the secure path the easy path. As an IC4 on this team, you’ll own meaningful infrastructure security problems end-to-end: from identifying risk, to designing pragmatic controls, to shipping secure defaults that scale across engineering. This role can be based in either San Francisco or New York City. We work from our offices on Mondays, Tuesdays and Thursdays (our Anchor Days) because we do our best thinking and building together in person. We’re looking for someone who’s excited to work alongside the team during those days. What You'll Achieve: Proactively enhance the security posture of our AWS accounts and cloud infrastructure. Create secure frameworks for secrets management and authentication/authorization. Design and deploy robust Identity and Access Management (IAM) solutions. Provide guidance and education on security and privacy best practices to cross-functional partners. Participate in (and hel

About Ema Ema builds AI Employees for HR, IT and Finance. Our AI Employees take on the busy work across the employee experience, from recruiting, onboarding and benefits to IT support, invoice processing and payroll, so people can spend their time on work that needs them. Founded by former executives from Google, Coinbase, Flipkart, and Okta, our team includes engineers from premier tech companies and graduates of Stanford, MIT, UC Berkeley, CMU, and IITs. We are backed by industry leading investors including Accel, Naspers/Prosus, Creaegis, Section32, and angels like Sheryl Sandberg and Dustin Moskovitz. Headquartered in Silicon Valley and with offices in London, Bangalore and Vancouver, Ema is at the frontier of what Agentic AI can do in production. We ship real systems that run real business processes at scale. Ema builds AI agents that act on sensitive enterprise data and systems. You’ll make sure the agents, and the platform they run on, are secure by design. You’ll build security controls for autonomous agents operating across multi-tenant enterprise environments, including cloud, on-prem and air-gapped deployments. You’ll solve zero-trust problems where the code isn’t static logic but non-deterministic models making live API calls against sensitive customer data. Our agents orchestrate 100+ LLMs, call third-party tools through MCP, execute code in sandboxes and drive headless browsers, and each of those is an attack surface you’ll help define. Role Overview What you’ll own AI and agent security Threat model new AI agent features before launch: direct and indirect prompt injection, jailbreaks, data exfiltration through agent outputs, and over-privileged tool use Design guardrails for agentic workflows: least-privilege tool and connector scopes, human-in-the-loop approvals for high-risk actions, and output filtering Enforce tenant and data isolation across retrieval (RAG), context stores, and model calls, so no customer’s data leaks into another’s context Secur

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. This is not a back-office compliance role and it is not a generic sales-engineering role. You will operate as a named member of deal teams under our pod model: paired with Strategic and Enterprise Account Executives, embedded in their weekly cadences, engaged from first discovery through POC, onsite, close, and expansion. You will be the practitioner in the room that a buyer's CISO or GRC lead trusts — and the internal expert our AEs, SEs, and marketing team build around. What you’ll do as a Subject Matter Expert, GTM at Vanta: Serve as the dedicated GRC SME for a book of Strategic/Enterprise Account Executives: join discovery and qualification calls at the earliest deal stages, scope compliance programs against Vanta's platform, and support demos, POCs, workshops, and customer onsites across Compliance, Third-Party Risk Management, Risk Management, and Trust/Questionnaire Automation. Advise prospects on program architecture: multi-framework strategy, shared controls, business-unit and workspace scoping, custom frameworks, and audit sequencing. Answer field questions through our SME channels at customer-forwardable quality — including reviewing and validating AI-agent-generated answers before they reach customers. Our team runs AI-first: you'll use agents daily, act as the quality gate on their output, and (ideally) build tooling of your own. Design and deliver enablement: live sessions for GTM teams, bootcamp scenarios and mock-customer roleplay, async curriculum modules, and review of GRC marketing and SEO content. Own monthly alignment cadences with sales front-line managers; feed structured product feedback to our Product a