Risk And Control Officer Jobs

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. This is not a back-office compliance role and it is not a generic sales-engineering role. You will operate as a named member of deal teams under our pod model: paired with Strategic and Enterprise Account Executives, embedded in their weekly cadences, engaged from first discovery through POC, onsite, close, and expansion. You will be the practitioner in the room that a buyer's CISO or GRC lead trusts — and the internal expert our AEs, SEs, and marketing team build around. What you’ll do as a Subject Matter Expert at Vanta: Serve as the dedicated GRC SME for a book of Strategic/Enterprise Account Executives: join discovery and qualification calls at the earliest deal stages, scope compliance programs against Vanta's platform, and support demos, POCs, workshops, and customer onsites across Compliance, Third-Party Risk Management, Risk Management, and Trust/Questionnaire Automation. Advise prospects on program architecture: multi-framework strategy, shared controls, business-unit and workspace scoping, custom frameworks, and audit sequencing. Answer field questions through our SME channels at customer-forwardable quality — including reviewing and validating AI-agent-generated answers before they reach customers. Our team runs AI-first: you'll use agents daily, act as the quality gate on their output, and (ideally) build tooling of your own. Design and deliver enablement: live sessions for GTM teams, bootcamp scenarios and mock-customer roleplay, async curriculum modules, and review of GRC marketing and SEO content. Own monthly alignment cadences with sales front-line managers; feed structured product feedback to our Product and PM

Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. What You’ll Be Doing Be the Group subject matter expert for Global Tax (Pillar Two, Indirect Tax, Direct Tax, Transfer Pricing, DSTs, and crypto-specific taxes) and provide clear, timely, and strategic guidance to executive stakeholders and other departments on complex financial and tax-related issues. Direct regional and cross-regional financial tax management systems, providing oversight of global tax compliance to ensure proper collection, controls, and reporting across 4+ financial management modules. Lead enterprise engagements with tax authorities and tax consultants globally on group tax matters, and direct global tax controversy defense strategies. Shape group policy and strategy in response to new global tax legislation (including crypto/digital economy developments), evaluate its group-wide implications, and brief executive leadership and the wider business as appropriate. Be proactive in establishing the group tax risk matrix, identifying financial tax risks/opportunities, solving difficult non-predictable issues within finance and other departments, and developing actionable corporate strategies. Spea

We believe that the way people interact with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. Plaid powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like Venmo, SoFi, several of the Fortune 500, and many of the largest banks to make it easy for people to connect their financial accounts to the apps and services they want to use. Plaid’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, the company is headquartered in San Francisco with offices in New York, Washington D.C., London and Amsterdam. About the team The GL Accounting team is responsible for ensuring accurate and timely financial reporting across Plaid’s global operations. We manage general ledger accounting, accruals, fixed assets, prepaids, intercompany, consolidations, international statutory reporting, treasury operations, and AP and T&E, and we partner cross-functionally with Procurement and Legal to drive cost allocation across the business. Team Mission: We drive operational excellence, enable financial transparency, and support Plaid’s growth through accurate reporting, strong controls, and scalable, AI-enabled processes. Role description As the Accounting Manager, you will lead a team of accountants across core GL functions. You will oversee the Accounts Payable & T&E processes, run month-end close, ensure compliance with US GAAP and SOX, drive automation and efficiency with AI and collaborate cross-functionally to support Plaid’s financial operations and scale. Responsibilities Accounting Operations: Lead AP and T&E operations, ensuring expense accuracy and timely accruals Oversee a timely, accurate and efficient month-end close process. Compliance, Audit & Risk Management: Maintain strong internal co

Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. Key Responsibilities Design and optimize high throughput order execution systems with sub-millisecond latency targets Build real time market data pipelines aggregating order books and price feeds from multiple exchanges Implement position tracking with exchange reconciliation, risk limits, and multi account support Develop exchange connectivity using FIX 5.0+, WebSocket, and HTTP/2 protocols Profile and eliminate latency hotspots using garbage free coding and lock free concurrency Implement pre-trade risk controls, circuit breakers, and rate limiters Qualifications Solid STEM (Science/Technology/Engineering/Mathematics) education background. 5-8 years software development experience, preferably in trading/oms/latency sensitive systems Strong Java 17+ proficiency with understanding of JVM internals and GC behavior Hands-on experience with FIX 5.0+, WebSocket, and HTTP/2 protocols Solid multi-threaded programming and concurrent systems knowledge Understanding of order lifecycle and market microstructure basics Strong problem solving skills and attention to detail Excellent co

Joining Capco means joining an organization that is committed to an inclusive working environment where you’re encouraged to #BeYourselfAtWork. We celebrate individuality and recognize that diversity and inclusion, in all forms, is critical to success. It’s important to us that we recruit and develop as diverse a range of talent as we can, and we believe that everyone brings something different to the table – so we’d love to know what makes you different. Such differences may mean we need to make changes to our process to allow you the best possible platform to succeed, and we are happy to cater to any reasonable adjustments you may require. You will find the section to let us know of these at the bottom of your application form or you can mention it directly to your recruiter at any stage and they will be happy to help. About Capco Capco is a global technology and business consultancy, focused on the financial services sector. We are growing at fast pace in our Italian office, the opportunity for growth is large, accessible, and immediate. We are passionate about helping our clients succeed in an ever-changing industry. Capco is going through a significant growth journey, now is a very good time to join us as we expand our consulting team in Italy. Role Description As part of the consulting team, the DORA Governance & TPRM Specialist will: Support the definition, implementation, and evolution of the Digital Operational Resilience framework in line with DORA, including governance, roles, responsibilities, and reporting Monitor and manage ICT and third-party risks, with a focus on service providers and outsourcing arrangements Contribute to the ICT Third-Party Risk Management (TPRM) framework, including risk assessment, due diligence, and ongoing supplier monitoring Support second line of defense activities within the ERM framework (e.g., KRI, RAF, controls), focusing on ICT and security risks Maintain and update the Register of Information (RoI), ensuring data q

WHAT IS BOX? Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI-first era of business. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia. By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It’s the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations. With the comination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift. WHY BOX NEEDS YOU Box is building a modern, AI-first Strategic Sourcing and Procurement Intelligence & Operations organization that makes it easier for Boxers to buy, scale, and manage technology spend — while unlocking business value, maintaining strong controls, and mitigating third-party risk. WHAT YOU'LL DO We are looking for a Senior Strategic Sourcing Partner to partner directly with our Box stakeholders, with a focus on Build (Engineering) and Box Security organizations. In this role, you will lead end-to-end sourcing lifecycles, manage commercial and technology contracting, drive proactive renewals, and optimize supplier performance across mission-critical cloud software, security tooling, and support Procurement Operations with reporting a

About the Team OpenAI's Legal team plays a crucial role in furthering OpenAI's mission by tackling innovative, fundamental legal issues in AI. If you're passionate about doing significant and unique work as a technology lawyer, this team is for you. The team comprises professionals from diverse fields, including technology, AI, privacy, IP, corporate, employment, tax law, regulatory, and litigation. About the Role As a member of our AI Product Counsel team, you will lead legal compliance initiatives for global online safety, platform, and AI regulations, including the UK Online Safety Act, EU Digital Services Act, EU AI Act, and similar emerging frameworks. You will partner closely with Product, Policy, Safety, Engineering, Security, Operations, and other teams to translate complex regulatory requirements into scalable, practical compliance solutions. This role is based in San Francisco, CA. We use a hybrid work model of 3 days in the office per week and offer relocation assistance to new employees. In this role, you will: Serve as the primary legal expert on the Online Safety Act, Digital Services Act, EU AI Act, and related global AI, platform, and online safety regulations. Lead the design and implementation of scalable compliance programs, governance frameworks, controls, and operating processes. Partner with Product, Engineering, Safety, Policy, Operations, and Security teams to translate regulatory obligations into practical product and operational requirements. Monitor emerging regulations and enforcement trends, anticipate their impact, and help shape OpenAI’s compliance strategy. Develop repeatable processes, playbooks, escalation paths, and decision frameworks that enable teams to move quickly while managing risk responsibly. Support engagement with regulators, external counsel, industry groups, and other stakeholders as needed. You’ll thrive in this role if you: Have 10+ years of experience with a mix of in-house or technology-focused law firm roles. Have

Join us in building the future of finance. Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic cultural and financial shift, keep reading. About the team + role We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. The Financial Operations team’s mission is to provide accurate, complete, and timely financial and operational information to our leaders, regulators, customers, and key stakeholders. We ensure efficient asset utilization, proactively mitigate risks, and ensure full compliance with regulatory bodies. We are seeking a Financial Operations Manager to join our growing team on the ground in Singapore. In this role, you will lead our local financial regulatory reporting and finops work, ensuring adherence to Monetary Authority of Singapore (MAS) regulations while collaborating across international entities. As one of the early operational hires in Singapore, you will play a key role in building processes from the ground up with high autonomy and visibility. This role is based in our Singapore office, with in-person attendance expected at least 3 days per week. At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams. What you’ll do Manage risk for back-office activities by maintaining controls ov

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . Senior Associate, FCM The FCM Operations team supports Coinbase Financial Markets, Inc. across US Futures, Prediction Markets, and Options by managing back-office operations including trade flow management, position management, margin monitoring, regulatory reporting, and business analytics. As a Senior Associate, FCM, you'll own exception management and operational readiness for new product launches, ensuring our derivatives infrastructure scales reliably while meeting regulatory expectations. What you'll do: Own exception management across cash, positions, trades, and margin, including triage, investigation, resolution, and implementation of durable fixes Lead operational readiness for new product launches, covering UAT/test case design, playbooks, cutover plans, and post-launch stabilization Partner with Product, Risk, Compliance, Accounting, and Engineering to design processes, controls, and reporting that scale and meet regulatory expectations Establish monitoring and exception reporting frameworks (SLAs, KPIs, dashboards) and run incident triage with clear escalation paths Drive root cause analysis and post-mortems, translating learnings into product and process improvements Identify and implement automation and tooling to reduce operational friction and manual work Required Skills and Experience: 5+ years in financial services or fintech operations with FCM, b

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . As the AMLCO & Senior Compliance Associate for Coinbase's Cyprus MiFID entity, you'll own Financial Crime Compliance (AML/CFT) while supporting the Head of Compliance in building and running the broader compliance program. The Compliance team ensures our Cyprus operations meet CySEC and EU regulatory expectations across AML/CFT, MiFID conduct, Market Abuse, and data protection, enabling the business to scale safely. You'll combine formal AMLCO responsibilities with hands-on second-line oversight of risk assessment, monitoring, policy governance, training, and regulatory engagement. Hybrid Role: Please expect to be remote 4 days per week and in-office on Wednesdays. What you'll do: Own all AMLCO deliverables for the Cyprus MiFID entity, including the Annual AMLCO Report, AML Risk Assessment, and periodic financial crime compliance reporting to senior management and the Board. Lead second-line monitoring and testing across AML/CFT and broader conduct/compliance areas, documenting results, findings, and remediation actions for internal governance bodies. Drive regulatory engagement with CySEC, the FIU, and competent authorities, coordinating responses to information requests, inspections, and thematic reviews. Partner with first-line teams to assess the effectiveness of onboarding, KYC/EDD, sanctions screening, transaction monitoring, and STR/SAR reporting controls,

Join us in building the future of finance. Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic cultural and financial shift, keep reading. About the team + role We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. The Compliance team’s mission is to ensure that Robinhood operates in alignment with regulatory expectations while maintaining strong controls. The team partners closely with legal, risk, product, and operations teams to identify, assess, and mitigate compliance risks. The team focuses on maintaining robust frameworks, monitoring emerging risks, and ensuring consistent execution of compliance obligations across international markets. As the Deputy CCO , you will play a critical leadership role in the oversight, development, and execution of the firm’s compliance framework, acting as the ultimate subject matter expert on European operations compliance and regulatory reporting. You will provide strategic guidance on applicable regulations - including MiFID and MiCA - while ensuring our EU sanctions controls are robust and effective. You will partner closely with business leaders and internal stakeholders, lead regulatory engagements, and drive governance processes to continuously strengthen our compliance posture. This role is based in our Lithuania office, with in-person attendance expected at least 3 days per week. At Robinhood, we believe in the power of in-person wor

Enterprise Business Risk and Control Lead — McLean, VA. Apply via Workday.

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: Replit is building the security GRC function that will scale with an AI-native product. As the Risk & Compliance lead, you'll own our certification and audit program end to end: SOC 2, ISO 27001, and eventually ISO 42001 (AI management systems), while also owning the company's master security risk register and continuous compliance monitoring. You'll report to the Head of Security GRC, who retains overall accountability for the risk program, and work closely with Engineering to make sure controls hold up in practice, not just on paper. What You'll Do Own the end-to-end certification roadmap (SOC 2 Type II, ISO 27001, and future frameworks like ISO 42001) including scoping, gap assessments, remediation, and audit execution Manage relationships with external auditors and drive the annual audit calendar so certifications renew without last-minute scrambles Own and maintain the company's master security risk register including risk identification, scoring methodology, treatment plans, and residual risk reporting Build and maintain continuous compliance monitoring so control status reflects real-time state rather than point-in-time snapshots Own the core audit artifacts that back every certification including ISMS documentation, Statements of Applicability, risk assessments, and potentially FedRAMP System Security Plans (SSPs) Run regular audits and readiness assessments, and track remediation of findings and control gaps to closure Support GDPR and broader privacy compliance alongside the Legal/Privacy team, without owning the legal interpretation of requirements Partner with the GRC Engineer to define what evidence collection and control monitoring should be automated versus manually reviewed Track and

The Data Governance Foundation Lead Analyst is responsible for contributing to the directional strategy and assisting in creation and modification of Enterprise Data Governance Strategy, and/or Data Risk and Control Framework and Data Risk Taxonomy. The focus of this role may be on one or more of the following areas: assisting in identification, measurement and reporting, data policy adoption and compliance, data controls framework performance and issue management process, and regulatory and audit response and action tracking. This role requires someone who is dynamic, flexible, and can easily respond to quickly changing needs. The candidate must have the ability to handle ambiguity and complexity and be able to deliver on multiple responsibilities. Developed communication and diplomacy skills are required in order to guide, influence and convince others. Responsibilities: Partner with multiple teams to implement relevant Data Governance requirements and execute inline with policies and/or Data Risk and Control framework Oversight and analysis of data-related issues, tracking of ownership and target dates and associated metrics and reporting Identify and remediate data quality issues, including mapping inconsistencies, duplicate elements, invalid domains, and ineffective business rules Gather and synthesize metrics on existing Data Governance implementation and/or Data Risk and Controls principles, policies, practices and standards Produce recommendations for enterprise-wide guiding principles, policies, processes and practices Determine requirements for and prioritize development of new tools and requirements leveraging data and maintaining compliance with Data Governance requirements as a part of the Business as Usual (BAU) process Perform data analysis and build subject matter expertise of data and usage Maintain traceability between data sources, busine

Who Are We HALA is a leading fintech player in the MENAP region that aims to redefine financial services and build the future bank of SMEs. HALA aims at empowering SMEs to start, run, and grow their businesses by providing them with cutting-edge financial and technological tools. HALA currently holds multiple entities in UAE, Saudi Arabia and Egypt (including HALA Payments and HALA Logistics) and offers solutions that enable merchants to digitize their payments as well as manage their sales and operations. Founded in 2017, HALA is currently licensed by the Saudi Arabian Central Bank. Job Description Operations Risk & Governance Manager Job Purpose The Operations Risk & Governance Manager ensures that operational processes, controls, and product launches are well governed, compliant, and managed within HALA’s risk appetite. The role works closely with Operations, Product, Technology, Risk, Compliance, Information Security, and Internal Audit to identify risks, strengthen controls, manage incidents, and support safe product launches. Key Responsibilities Operational Risk and Controls Maintain the Operations risk register and track mitigation actions. Conduct risk and control assessments across operational processes. Review the design and effectiveness of key operational controls. Identify control gaps and ensure corrective actions are completed. Monitor operational risk indicators, incidents, losses, and recurring issues. Escalate material risks and control failures to management. Product Launch Governance Manage the governance process for new product and service launches. Ensure all launches complete the required risk, compliance, operational, technology, security, and customer-impact assessments. Coordinate launch-readiness reviews with Product, Technology, Compliance, Risk, Operations, Finance, and Customer Experience. Confirm that operating procedures, controls, training, customer support, reporting, and incident processes are ready before launch. Maintain