Security And Compliance Analyst Jobs

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. As an Engineering Manager leading our Reporting team, you will lead a newly structured team focused on a critical product area within our Product Platform group. This role represents an exciting opportunity to shape the future of how Vanta customers understand, visualize, and operationalize their compliance and security programs. This team is focused on evolving Vanta’s reporting platform beyond dashboards into a scalable, AI-powered reporting experience. The team owns core initiatives across enterprise reporting, historical analytics, AI-assisted insights, and certified data infrastructure powering in-product experiences. This role sits at the intersection of data products, enterprise scalability, and product innovation. As reporting becomes increasingly foundational to enterprise growth, customer retention, and Vanta’s long-term AI strategy, this role will play a key role in shaping engineering execution, cross-functional alignment, and the long-term technical direction of one of Vanta’s critical product investments. Visit our Vanta Engineering Blog to learn more about what our team is working on! What you’ll do as an Engineering Manager at Vanta: Build and scale a high-performing team: lead, coach, and grow the team while hiring strategically, identifying operational gaps, and raising the engineering bar Drive execution across strategic initiatives: Deliver against a multi-quarter roadmap spanning reporting infrastructure, enterprise reporting capabilities, AI-powered insights, and scalable data foundations Shape technical and product strategy: Partner closely with Product and cross-functional engineering teams to define the

We are seeking a hands-on Senior Workday Platform Engineer within the G&A IT Applications team to serve as the primary technical owner of the Workday platform across HCM, Payroll, Recruiting, Prism Analytics, Illuminate (AI/ML), integrations, security, and release management. This is a builder-first role. You will configure, develop, integrate, and operate within Workday while partnering closely with HR, Payroll, Finance, and IT stakeholders. You own the technical platform layer configuration, integrations, security architecture, governance, and release discipline, while HR and Payroll retain ownership of sensitive data and business policy logic. Key Responsibilities Platform Ownership & Delivery: Own technical execution across Workday HCM, Payroll, Recruiting, Prism Analytics, and Illuminate. Translate business requirements into phased technical delivery plans. Manage sandbox strategy, tenant lifecycle, and biannual release readiness. Hands-On Configuration & Development: Configure HCM and Recruiting modules.Build advanced reports (matrix, composite, BIRT), calculated fields, validations, and business process frameworks. Leverage Workday Extend to design and build lightweight custom applications that enhance core workflows. Maintain scalable security models and governance standards. Integrations & Architecture: Build and maintain integrations (EIB, Studio, REST/SOAP APIs, RaaS). Integrate with applications like ERP, identity providers, benefits carriers, and third-party systems. Ensure secure, reusable integration frameworks with monitoring and error-handling discipline. Analytics, AI & Automation: Implement and manage Workday Prism Analytics datasets and dashboards. Enable Workday Illuminate capabilities and intelligent workflows. Drive automation while maintaining audit and compliance standards. Security & Compliance: Own Workday security architecture and least-privilege acc

The Hall & Kay way… it’s a people thing. At Hall & Kay, we deliver complex fire protection and security solutions to protect what matters most to our clients. As technical experts our focus is on the lifetime value of a project. Meaning we can design, supply, install, test and maintain all types of sprinkler, gas suppression, fire detection, and integrated security systems. With 140+ year trading experience and a strong project delivery culture, we are proud to have built lasting relationships with some of the UK’s most respected companies in all areas of industry and construction. Summary of Role You will be responsible for managing and coordinating quotation processes for remedial, repair, and maintenance works within the service business. This role serves as the primary point of contact between suppliers and clients for obtaining accurate pricing and specifications for corrective remedial works. What you will be doing Process requests for quotations (RFQs) for remedial works, repairs, and maintenance across building portfolios. Coordinate with approved suppliers and service providers to obtain competitive quotes. Review and analyse quotes for accuracy, completeness, and compliance with specifications. Ensure quotes include appropriate scope of works, materials, labour costs, and timelines. Review building defect reports, condition assessments, and maintenance logs to determine required works. Interpret technical specifications and translate them into clear scope requirements for customers. Verify that quoted works align with id

Role: DataOps Solution Architect — Azure Data Platform (Fabric & Databricks) Owns end-to-end architecture of the Azure data platform (Fabric, Databricks, Azure services) and sets the governance, security, and DataOps standards engineering teams implement. Design authority and primary architecture advisor to the client, not the day-to-day builder. Experience Required 8-10+ years overall in data engineering / cloud architecture, including 3+ years as a Solution Architect or in a comparable design-authority role. Microsoft Fabric: 2+ years hands-on. Azure Databricks: 4+ years hands-on. Proven track record designing and delivering enterprise-scale Azure data platforms end-to-end. Azure is mandatory ; experience across multiple client engagements or a consulting/SI background is a plus. Core Technical Expertise Azure Platform Fabric & Databricks architecture. ADF. ADLS. Entra ID. Key Vault. Monitor/Log Analytics. Microsoft Fabric Workspace & environment strategy. Lakehouse/Warehouse. OneLake. Pipelines/Notebooks. REST APIs/CLI. Governance. Azure Databricks Workspace strategy. Unity Catalog. RBAC. Jobs/Workflows. Delta Lake. Asset Bundles. ML platform integration. DevOps & IaC Azure DevOps/GitHub CI/CD. Terraform & Bicep. Branching/release strategy. Reusable IaC modules. Security & Networking Entra ID. RBAC architecture. Private Endpoints/DNS. Key Vault integration. DataOps Standards CI/CD & test gates for pipelines. Data-quality frameworks. Observability/alerting architecture. SLAs/SLOs. Incident-management practices. FinOps guardrails. Key Responsibilities Own end-to-end architecture; translate requirements into scalable, secure, cost-effective designs. Design enterprise-scale Fabric/Databricks architecture including workspace, networking, security, and governance. Set standards for CI/CD, IaC, DataOps, and environment management; ensure enterprise security and regulatory compliance. Evaluate technology options; identify architectural risks a

**This role is primarily remote with the expectation of 1 day a month visit to the Cardiff office** At Veriforce, we help companies in high-risk industries keep their people, worksites, and supply chains safe and compliant. As a global leader in contractor and supply chain risk management, our SaaS platform simplifies contractor onboarding, credentialing, and compliance while providing powerful analytics and insights. Beyond software, we offer expert support, training, and consulting so our clients can operate with confidence. Together, we’re making workplaces safer every day. We're hiring an SDET to help deliver reliable, high-quality SaaS solutions at Veriforce. You’ll design and execute manual, automated, and performance tests, validate APIs and integrations, and embed testing into CI/CD pipelines. Leveraging AI/ML for smarter test coverage, you’ll identify issues early, drive continuous improvement, and ensure scalability and security. Collaborating with developers, DevOps, and stakeholders, you’ll play a vital role in delivering seamless, customer-focused solutions while mentoring team members and enhancing testing practices. Define and develop comprehensive test plans in collaboration with scrum teams. Design, document, and maintain functional, integration, security, and performance test cases. Perform manual testing, log defects in Jira, and collaborate with developers for resolution. Build and maintain automated test scripts Playwright. Validate APIs and data flows with tools such as Postman and SQL queries to ensure accuracy and integrity. Integrate automated tests into CI/CD pipelines (e.g., Jenkins, GitHub Actions, Azure DevOps) for continuous quality feedback. Apply AI/ML-driven testing for intelligent test generation, prioritization, anomaly detection, and predictive analytics. Conduct load, stress, and scalability testing to identify and resolve performance bottlenecks. Coordinate and facilitate UAT sessions with stakeholders to validate business requi

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . As an Internal Audit Analytics Associate, you'll join the IT Internal Audit team within Finance to deliver data-driven, third-line assurance across Coinbase's global technology infrastructure and crypto-native products. You'll extract, analyze, and validate large datasets from internal systems to assess the design and operational effectiveness of IT and security controls. This role translates complex audit data requests into precise SQL-based extracts and actionable findings that directly support the audit team's control testing objectives. What you'll do: Execute in-depth data analysis to assess IT and security control effectiveness by writing complex, reusable SQL queries against Snowflake and other internal data platforms. Validate system and model changes by performing comprehensive testing of their compliance and performance impact, documenting results for relevant stakeholders. Produce accurate data extracts and reports from multiple sources, translating complex audit data requests into clear, actionable requirements and outputs. Test data ETL processes from upstream production systems into the data repository and from the repository into enterprise tools, validating completeness and accuracy at each stage. Design and enhance metrics dashboards to measure IT and security system performance and provide actionable insights to the Internal Audit team. Partner cros

About the role: This is an opportunity to join K's critical InfoSec team as a Senior Security Engineer - AppSec and operate with foresight in protecting our infrastructure, applications, cloud security, and customer trust. As a lean team, we span across multiple areas such as AppSec, CloudSec, SecOps, ITSec, and Compliance and apply it towards reading and interpreting architecture, or planning and building out net new security solutions. You will have the autonomy to define and implement cutting-edge security solutions across our entire technical ecosystem, ensuring our innovative work remains robust and compliant against evolving global threats. This role is crucial for establishing and maintaining a world-class security posture, particularly within the sensitive and highly regulated healthcare technology space. What you will do: Lead the development and implementation of robust application security protocols throughout the entire Software Development Lifecycle (SDLC). Partner with engineering teams to incorporate security into architecture, design, development, testing and deployment Perform hands-on security testing of web applications, APIs, cloud-native services and supporting infrastructure Build and improve automated security testing within CI/CI pipelines, including static analysis, dependency scanning, secrets detection, container scanning and dynamic testing Evaluate effectiveness of application security tools, improve tooling output quality and reduce unnecessary findings and developer friction Develop secure coding standards with developer-focused documentation Contribute application security expertise to vulnerability management, during security incidents/investigations and post-incident reviews Evaluate third party applications, libraries and APIs and integrations for security risk Ensure adherence to relevant healthcare regulatory and compliance requirements (e.g., HIPAA, GDPR, etc.) across all product lines and systems. What we're looking for: 4+ yea

Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. About the Opportunity We are looking for a Security Operations Engineer who combines hands-on engineering skills with security operations expertise. You will be deeply involved in the operations and troubleshooting of both server-side and client-side components within our Zero Trust architecture, drive security risk governance initiatives, and leverage AI tools to continuously improve system stability and compliance. Key Responsibilities K8s Operations & Vendor Engagement: Develop deep expertise in K3s / Kubernetes, including version management and disaster recovery. Independently identify and reproduce system issues, proactively engage with vendors to drive root cause analysis and resolution — not just workarounds. Zero Trust Network Access Governance: Work closely on Zero Trust initiatives, participate in cluster network configuration and troubleshooting, identify device compliance risks, drive remediation of non-compliant devices, and continuously optimize access control policies. Monitoring & Observability: Build and continuously improve log monitoring systems; proactively surface system risks through alert rules and trend analysis. AI Agent Implementation: Lead the adoption of AI Agents in security operations — design and deploy AI Agent workflows f

ABOUT BASETEN Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F , led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to ship AI products. THE ROLE We are seeking an experienced and proactive Security Engineer to help us build, maintain, and continuously improve the security posture of our rapidly growing ML infrastructure platform. As one of the first dedicated security hires at Baseten, you will work cross-functionally with engineering and operations teams to ensure we’re meeting the highest standards of confidentiality, integrity, and availability. You’ll have an opportunity to shape our security strategy and best practices from the ground up, influencing the way our platform handles sensitive data for both internal and external stakeholders. RESPONSIBILITIES Security architecture and design: Collaborate with engineering teams to design and implement secure systems and infrastructure, including cloud (AWS/GCP) environments and container orchestration platforms. Vulnerability management: Lead proactive vulnerability assessments, pen tests, and remediation efforts to ensure our products and infrastructure remain secure. Incident response: Develop and maintain incident response processes, including detection, analysis, containment, eradication, and post-incident reviews. Identity and access management (IAM): Oversee IAM strategies and tools to ensure the right people have the right level of access to our systems and data. Security compliance and audits: Work closely with operations to ensure compliance with relevant standards (e.g., SOC 2, ISO 27001) and as

About the Role As a Security Engineer at K Health, you will serve as a foundational force in securing our healthcare technology ecosystem. Reporting directly to the Director of Security, this is a deeply hands-on individual contributor role focused primarily on Security Operations (SecOps) and IT Security projects. You will be responsible for building, automating, and maintaining our security controls while acting as a key responder to security incidents. If you thrive in a fast-paced environment where you are empowered to own your domain, automate repetitive tasks, and directly safeguard patient and organizational data, this role is for you. What You Will Do Design, implement, and maintain hands-on SecOps workflows, threat detection, and incident response procedures across our corporate and cloud infrastructure. Build low-code and custom automations (using tools like Torq) to streamline security alerts, routine IT security tasks, and incident triage. Administer, optimize, and manage key security and endpoint management tools, including Sumo Logic, Jamf, Intune, Slack Enterprise, CrowdStrike, and related platforms. Maintain and support continuous compliance with SOC2 and HIPAA security controls, actively participating in audit preparation, evidence gathering, and control enforcement. Partner with cross-functional IT and engineering teams to harden systems, enforce zero-trust endpoint policies, and secure employee workflows. Conduct root-cause analysis on security incidents and proactively implement preventative security measures to eliminate recurring risks. What We Are Looking For Experience: 3–5 years of dedicated hands-on experience in Security Operations, IT Security, or System Administration with a strong security focus. Incident Response: Proven background in actively detecting, investigating, and remediating security incidents in a modern cloud/hybrid environment. Technical Depth: Deep foundational IT background spanning endpoint administration (macOS/Windows

We are seeking a Senior Security Engineer to join our growing security team. As we continue building AI-powered services that deliver tremendous value to our customers worldwide, and given the rapid pace of our business growth, we are looking for experienced and capable talent to strengthen cybersecurity across all stages of product development and to collaborate closely with our software engineering teams. You will also play a key role in driving information security initiatives and integration efforts across the group, including addressing the emerging risks introduced by rapid advancements in AI technologies. Responsibilities Design, implement, and maintain secure CI/CD pipelines with automated security controls (SAST, DAST, SCA, secrets scanning, and IaC scanning) integrated into development workflows Establish and drive the Secure Software Development Lifecycle (SSDLC), ensuring security is embedded at every stage — from design and threat modeling through deployment and runtime Define and standardize security requirements analysis and threat modeling practices to identify risks during the design phase Develop Policy as Code solutions to enable automated compliance and governance checks Conduct pre-production security assessments, vulnerability assessments, and penetration testing Implement security best practices for Infrastructure as Code (IaC) and cloud-native environments Build and maintain security monitoring, log aggregation, and alerting systems to support detection and response Create security deployment checklists and continuously improve production environment security posture Assess and mitigate emerging risks introduced by AI technologies, including risks related to LLM applications, AI agents, prompt injection, data leakage through AI tools, model supply chain, and AI-assisted development workflows Partner with engineering teams to evaluate, adopt, and govern AI-powered development tools (e.g., AI coding assistants, AI agents) in a secure and compli

NVIDIA has been transforming computer graphics, PC gaming, and accelerated computing for more than 25 years. It’s a unique legacy of innovation that’s fueled by great technology—and amazing people. Today, we’re tapping into the unlimited potential of AI to define the next era of computing. An era in which our GPU acts as the brains of computers, robots, and self-driving cars that can understand the world. Doing what’s never been done before takes vision, innovation, and the world’s best talent. As an NVIDIAN, you’ll be immersed in an inclusive, supportive environment where everyone is inspired to do their best work. Come join the team and see how you can make a lasting impact on the world. NVIDIA is searching for a creative, highly motivated and independent engineer with expertise in system software with security background to join the SOC System Software organization. This position offers the opportunity to have real impact in a dynamic, technology-focused company impacting SOC based product lines ranging from autonomous vehicles, robotics, consumer graphics, and edge AI. What You’ll Be Doing: Lead all HDCP (High-bandwidth Digital Content Protection) activities across SoC-based projects, leading the feature roadmap, protocol implementation, compliance certification, and delivery across chips, platforms, and products. Develop and maintain secure-engine firmware on a RISC-V based secure processor. Deliver end to end HDCP solution across multiple software stacks spanning Linux, Android for automotive, and consumer platforms. Drive firmware production signing readiness, rollback-prevention strategies, and key-provisioning workflows. Serve as the security primary contact for the team, leading all aspects of threat modeling, static analysis, vulnerability tracking and remediation, and security compliance across all projects. Collaborate with multi-functional teams spanning HW design, boo

Datadog is a world-class monitoring and security platform for cloud applications. We're dedicated to creating, developing, and supporting our product and customers, fostering seamless collaboration and problem-solving among Dev, Ops, and Security teams globally. Built by engineers for engineers, our SaaS product is trusted by organizations of all sizes across various industries, driving digital transformation, cloud migration, and infrastructure monitoring for our customers' entire technology stacks. As cloud technologies continue to evolve and digital operations become ever more crucial, Datadog remains at the forefront of innovation and is well-positioned for sustained growth. Datadog's Finance team partners with stakeholders across the organization, providing commercial, operational, and analytical support to ensure that Datadog's business continues its rapid and efficient growth. The Equity Administration team is responsible for overseeing the full cycle of stock administration on a global basis, collaborating with groups across Accounting, Tax, People, Payroll, and Legal to manage Datadog's equity plans worldwide. Our work spans the processing of equity transactions including RSU releases, stock option exercises, and ESPP purchases; management of equity-related inquiries from employees, executives, investors, and other key partners; day-to-day management of the E*TRADE Equity Edge Online platform; global equity reporting and tax compliance; oversight of equity procedures, policies, and controls; and employee education on equity programs. We are seeking a hands-on Equity Administration Assistant Manager to own our complex and high-risk equity workstreams. Reporting to the Senior Manager, Equity Administration, the Assistant Manager will serve as a first level preparer or reviewer on equity transactions, assist with process documentation, and work closely with various internal teams across Accounting, Tax, People Operations, Payroll, and Legal. This is a ro

POSITION SUMMARY The Consultant is responsible for supporting the Consulting Services Team in delivering cybersecurity, privacy, and compliance services across a diverse portfolio of client engagements. This role operates as a flexible, deployable resource, contributing to multiple concurrent or sequential engagements based on business needs. This role requires proactive initiative to study, ask questions, and rapidly learn the organization’s solutions, methodologies, and delivery standards. Consultants must be comfortable transitioning between engagements, adapting quickly to new client environments, and delivering value immediately. Consultants focus on executing client deliverables, enhancing service quality, and improving project efficiency under the guidance of senior team members. They are expected to develop broad subject matter expertise, contribute to process improvements, and build trusted relationships across a variety of clients and internal teams. SPECIFIC JOB RESPONSIBILITIES Serve as a deployable consulting resource, supporting multiple client engagements across varying industries, with a focus on healthcare. Adapt quickly to new client environments, priorities, and team structures while maintaining high-quality delivery. Support the execution of cybersecurity and compliance consulting engagements under senior leadership guidance. Work closely with clients to collect data, conduct risk assessments, gap analyses, and document findings. Assist in evaluating client security postures, including vulnerability management, compliance alignment, and risk exposure. Develop and contribute to recommendations aligned with industry frameworks such as NIST, ISO 27001, CIS Controls, and HIPAA. Support clients in designing and implementing security controls, policies, and procedures.

POSITION SUMMARY: The role of Patient Coordinator will be central to the success of the Signatera product line. This position will be focused on growing the relationship between Natera and its patients to ensure timely management of testing. Core responsibilities include collaborating with Nurse Coordinators to increase revenue and drive market development through direct sales by being the key contact for patient needs. The Patient Coordinator will accomplish this by being the patient advocate within Natera. PRIMARY RESPONSIBILITIES: Work with assigned Nurse Coordinator to maintain & support existing customers. Assess the needs of patients with a focus on customer support, coordination of logistics, and problem solving. Maintain and support a service-oriented relationship with patients Ensure all data and analysis requests from different parts of the organization are addressed in a timely manner. Help manage our business system tools (e.g. QlikView, Salesforce) Identify, nurture and grow patient relationship in order to influence and schedule ongoing testing. Performs other duties as assigned. This role works with PHI on a regular basis both in paper and electronic form and have access to various technologies to access PHI (paper and electronic) in order to perform the job. Employee must complete training relating to HIPAA/PHI privacy, General Policies and Procedure Compliance training and security training as soon as possible but not later than the first 30 days of hire. Must maintain a current status on Natera training requirements. QUALIFICATIONS: Minimum of 2 years of Call Center experience in an inbound and outbound capacity. Minimum of 2 years of sales experience Background in medical or biological sciences preferred KNOWLEDGE, SKILLS, AND ABILITIES: Outgoing personality with excellent oral & presentation skills. Ability to think strategically as well as execute tactically Emphasis on competitive analysis and team first a