Security And Compliance Analyst Jobs

Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! We're looking for a collaborative and detail-oriented HRIS Analyst to support, maintain, and improve our Workday platform, with a focus on Core HCM — configuration, reporting, security, EIBs, notifications, and alerts. You'll also take on configuration and testing for larger projects across other Workday modules. Success here means balancing hands-on day-to-day support with thoughtful, scalable system improvements. This is a full-time role that can be held from one of our US hubs or remotely in the United States. What you’ll do at Figma: Configure and maintain Workday Core HCM, including business processes, notifications, alerts, condition rules, validations, and related configuration Maintain and update Workday security roles and role assignments, partnering with stakeholders to ensure appropriate access and compliance with SOX and security best practices Manage the HRIS support ticket queue, triaging requests, resolving system issues, identifying root causes, and recommending process improvements; escalate complex problems as needed. Manage projects end to end, partnering with stakeholders to translate business requirements into scalable Workday solutions, including work spanning modules such as Payroll, Advanced Comp, Time Tracking, Benefits, Performance, or Absence Build, maintain, and troubleshoot Workday reports, dashboards, and calculated fields to support business and compliance needs Create, execute, and troubleshoot Enterprise Interface Builder (EIB) integrations to support data import

Role Overview – Market Data Site Reliability and Engineering (SRE) This team ensures the high availability and performance of systems that distribute real-time, historical, and reference market data across the firm. These platforms handle extremely high message volumes - over 10 million/second with microsecond latency - and support global financial instruments including equities, fixed income, FX, and derivatives. Key Responsibilities Maintain and optimize global market data distribution systems Monitor capacity, manage latency, and ensure platform stability and security Collaborate with users and developers on integration, migrations, and compliance Support production operations, test new releases, and perform system upgrades Identify automation and efficiency improvements in daily operations Required Skills Strong knowledge of UNIX/Linux, including scripting and performance tuning Proficiency in shell scripting and Python (Java/C++/Perl a plus) Understanding of networking protocols (TCP/IP, UDP, multicast preferred) Experience managing global, high-availability systems Strong problem-solving and communication skills Preferred Skills Familiarity with Agile, CI/CD, project management Knowledge of database technologies The successful candidate should have : Excellent communication skills, broad sense of ownership and proactiveness Bachelor's degree in computer science or a related STEM subject (science, technology, engineering, maths). Good grades 2.1 and above. We look for potential, not prestige, but it’s important that you enjoy pushing yourself to pick up new ideas. A passion for Financial Markets Solid communication skills for facing off both to IT and business teams Strong understanding of server, storage, MQ, and application technologies (Java, .NET, C++) Able to troubleshoot, problem solver, analytical Proficiency with Linux Strong SQL databases experience such as Sybase, DB2, Oracle); able to search log files and compose SQL queries. Net

The mission of The New York Times is to seek the truth and help people understand the world. That means independent journalism is at the heart of all we do as a company. It’s why we have a world-renowned newsroom that sends journalists to report on the ground from nearly 160 countries. It’s why we focus deeply on how our readers will experience our journalism, from print to audio to a world-class digital and app destination. And it’s why our business strategy centers on making journalism so good that it’s worth paying for. About the Role, Mission or Department Overview The Senior System Analyst is an individual contributor within Enterprise Technology responsible for the configuration, release management, and operational support of Zip, our procurement and intake platform. As a Sr. Systems Analyst - Procurement you will report to the Sr. Manager of HRIS. You will partner with multiple teams, including Sourcing, Accounts Payable, Finance, Legal, and Enterprise Applications. Your partnerships will ensure Zip remains stable, well-governed, and aligned with Workday and other SaaS financial applications. This is a hybrid role based in our New York City headquarters. You can typically expect to come into the office 3 days/week. Responsibilities: Manage Zip configuration, including workflows, fields, validations, permissions, and company settings Manage Zip release cycles (monthly and ad hoc), including reviewing release notes, assessing impact, advising business, coordinating testing, and promoting changes from sandbox to production Administer user roles and permissions in Zip to ensure appropriate access, segregation of tasks, and compliance with governance and security standards Partner with Sourcing, Accounts Payable, Finance, and Legal to translate requirements into Zip configuration changes Evaluate and resolve Zip support requests, defects, and small enhancement Follow our SDLC and change control procedures to guarantee proper configuration, testing, validatio

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. We are seeking an experienced Manager of Security Operations, reporting to the Director of Security, to lead our exceptionally talented Security Engineering team. Vanta’s Security Operations team provides essential security operational services, including configuring, monitoring, and maintaining our security tools and infrastructure. You’ll be responsible for leading the Security Operations team and assisting with incident response, setting our detection and response strategy, and assisting with investigations. You’ll also work cross-functionally to ensure we maintain compliance and improve our secure maturity. What you’ll do as a Manager, Security Operations at Vanta: Lead and grow a team of the best security operations analysts in the world, with a view of security that is AI-first, human-centric, and trust-based. Help define the strategy for Vanta’s security operations team, and empower the team to implement robust security protocols and stay ahead of emerging threats. Leverage AI to improve efficiency of team processes, and improve the maturity of the overall security program. Lead and drive incident response from detection, remediation, to prevention Identify, develop, and implement new processes in our security operations program Identify new technologies and emerging threats for our organization, and plan a technology-driven approach to addressing new risks How to be successful in this role: Strong leadership experience in security and an ability to lead a global team from a foundation of transparency and trust. Strong security operations experience, with emphasis on implementing security controls in a SaaS and cloud env

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. We are seeking an experienced Sr. Manager of Security Operations, reporting to the Director of Security, to lead our exceptionally talented Security Engineering team. Vanta’s Security Operations team provides essential security operational services, including configuring, monitoring, and maintaining our security tools and infrastructure. You’ll be responsible for leading the Security Operations team and assisting with incident response, setting our detection and response strategy, and assisting with investigations. You’ll also work cross-functionally to ensure we maintain compliance and improve our secure maturity. What you’ll do as a Sr. Manager, Security Operations at Vanta: Lead and grow a team of the best security operations analysts in the world, with a view of security that is AI-first, human-centric, and trust-based. Help define the strategy for Vanta’s security operations team, and empower the team to implement robust security protocols and stay ahead of emerging threats. Leverage AI to improve efficiency of team processes, and improve the maturity of the overall security program. Lead and drive incident response from detection, remediation, to prevention Identify, develop, and implement new processes in our security operations program Identify new technologies and emerging threats for our organization, and plan a technology-driven approach to addressing new risks How to be successful in this role: Strong leadership experience in security and an ability to lead a global team from a foundation of transparency and trust. Strong security operations experience, with emphasis on implementing security controls in a SaaS and c

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive. Lyft is a global company that connects people to transportation to change the way we live and get around our communities. Our drivers and passengers entrust Lyft with their personal information and travel details to get where they are going and expect us to keep that data safe. Lyft's Privacy team is composed of engineers and analysts dedicated to ensuring appropriate data protections are applied to our drivers' and passengers' data. Our goal is to make privacy the default setting for our internal engineers and our customers. We help design architectures, build a scalable data platform, and define policies to reduce the exposure of user data and ensure appropriate privacy and security protections are applied across the company. We are looking for a highly motivated, collaborative, team-focused and technically strong Software Engineer to join our Privacy team. As a member of this team, you will design and build systems that make privacy the default at Lyft. Every day, you'll partner with engineering, product, legal, and compliance stakeholders on high-impact projects — from building data redaction pipelines to enabling users to exercise their privacy rights to deploying data management systems across a diverse set of Lyft services. You'll bring strong engineering instincts, a passion for privacy, and the ability to lead large projects from idea to execution. Responsibilities: Write well-crafted, well-tested, readable, and maintainable code Promote appropriate tech and engineering best practices Partner with teams across Lyft on organizational privacy initiatives Partner with senior engineers to design, build, and maintain systems that enhance privacy across the organization Independently lead tasks from idea to execution Participate in code reviews to ensure code quality and distribute knowledge Parti

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive. Lyft is a global company that connects people to transportation to change the way we live and get around our communities. Our drivers and passengers entrust Lyft with their personal information and travel details to get where they are going and expect us to keep that data safe. Lyft's Privacy team is composed of engineers and analysts dedicated to ensuring appropriate data protections are applied to our drivers' and passengers' data. Our goal is to make privacy the default setting for our internal engineers and our customers. We help design architectures, build a scalable data platform, and define policies to reduce the exposure of user data and ensure appropriate privacy and security protections are applied across the company. We are looking for a highly motivated, collaborative, team-focused and technically strong Senior Software Engineer to join our Privacy team. As a member of this team, you will design and build systems that make privacy the default at Lyft. Every day, you'll partner with engineering, product, legal, and compliance stakeholders on high-impact projects — from building data redaction pipelines to enabling users to exercise their privacy rights to deploying data management systems across a diverse set of Lyft services. You'll bring strong engineering instincts, a passion for privacy, and the ability to lead large projects from idea to execution. Responsibilities: Design, build, and maintain systems that enhance privacy across the organization Independently lead large projects from idea to execution Advocate for user privacy throughout the organization, consulting engineering teams throughout the software development lifecycle and escalating potential privacy concerns Write well-crafted, well-tested, readable, and maintainable code Participate in code reviews to ensure code quality

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Data Infrastructure designs, operates, and scales secure, privacy-respecting systems that power data-driven decisions across Anthropic. Our mission is to provide data processing, storage, and access that are trusted, fast, and easy to use. We're looking for infrastructure engineers who thrive working at the intersection of data systems, security, and scalability. You'll tackle diverse challenges ranging from building financial reporting pipelines to architecting access control systems to ensuring cloud storage reliability. This role offers the opportunity to work directly with data scientists, analysts, and business stakeholders while diving deep into cloud infrastructure primitives. Responsibilities: Within Data Infra, you may be matched to critical business areas including: Data Governance & Access Control: Design and implement robust access control systems ensuring only authorized users can access sensitive data. Build infrastructure for permission management, audit logging, and compliance requirements. Work on IAM policies, ACLs, and security controls that scale across thousands of users and systems. Financial Data Infrastructure: Build and maintain data pipelines and warehouses powering business-critical reporting. Ensure data integrity, accuracy, and availability for complex financial systems, including third party revenue ingestion pipelines; manage the external relationships as needed to drive upstream dependencies. Own the reliability of systems processing revenue, usage, and business metrics. Cloud Storage & Reliability: Architect disaster recovery, backup, and replication systems for petabyte-sc

At Jamf, we believe in an open, flexible culture based on respect and trust. Our track record and thriving work environment all stem from the freedom we grant ourselves to get the job done right. We take pride in helping tens of thousands of customers around the globe succeed with Apple. The secret to our success lies in our connectivity, while operating with a high degree of flexibility. Work-life balance remains our priority while feeling connected is important to maintain our strong culture, achieve our goals, and thrive as #OneJamf. What you'll do at Jamf: The Security Risk & Compliance Analyst (Analyst) is responsible for ensuring that Jamf ‘s security controls, policies, and procedures are implemented in accordance with applicable laws, regulations, and industry standards. Reporting to the Director of Security Risk & Compliance, the Analyst will support the activities and improvements across the entire scope of Jamf’s Security Risk & Compliance program. You may be required to work periodically at a Jamf office or collaborative work location with other Jamf employees in your area for certain events or moments that matter. What you can expect to do in this role : Conduct risk assessments in accordance with established methodology. Collaborate with team members to evaluate cyber risk and treatment plans, and follow up to ensure appropriate action is taken to mitigate risk. Support maintenance of security policies to ensure compliance with relevant laws, regulations, and industry standards. Collaborate with teams across Jamf to ensure security policies are consistently implemented. Participate in monitoring efforts to ensure compliance with the security-related policies and procedures. Participate in external audits to ensure Jamf’s ongoing maintenance of its security certifications (i.e., ISO 27001, ISO 27701, SOC2 Type 2, StateRAMP). Support the vendor risk management function for evaluating Jamf’s

Why Harvey At Harvey, we’re transforming how legal and professional services operate. By combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise, we’re reshaping how critical knowledge work gets done for decades to come. This is a rare chance to help build a generational company at a true inflection point. We have strong product-market fit and world-class investor support. We’re scaling fast and defining a new category in real time. The work is ambitious, the bar is high, and the opportunity for growth — personal, professional, and financial — is unmatched. Our team moves fast, takes ownership, and is deeply committed to the mission — operating with intensity, staying close to our customers, and pushing each other for excellence. We live by three values: Decisiveness, Simplicity, and Job's Not Finished. We act quickly on clear judgment over perfect information, we believe simplicity is what scales, and we're never satisfied with where we are. If you want to do the best work of your career alongside people who share that drive, we'd love to build with you. At Harvey, the future of professional services is being written today — and we’re just getting started. Role Overview Some of the world's largest companies and their law firms use Harvey's AI capabilities to deliver world-class client services at unprecedented scale and efficiency. Harvey allows high-performing professionals to gain deep domain knowledge faster, understand the big picture, and tackle more complex challenges in less time. Our customers depend on us to deliver a secure, trustworthy, and compliant platform. Earning the trust of our customers is a business enabler and we value it more than anything else. In this role, you'll report to the Senior Compliance Manager and serve as a core executor on Harvey's certification and audit portfolio. You will be responsible for the hands-on compliance work that keeps our compliance programs healthy, maintaining control documentation,

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive. Lyft connects people to transportation to change the way we live and get around our communities. Our drivers and passengers entrust Lyft with their personal information and travel details to get where they are going and expect us to keep that data safe. Lyft's Customer Trust team ensures that appropriate security controls and data protections are applied to meet our compliance requirements and customer contractual commitments. We conduct security risk assessments, consult with organizational stakeholders, monitor and continuously improve Lyft's Information Security program, facilitate third-party security audits, work with engineering teams to implement, automate, and monitor security controls, develop policies, and advise on all matters related to information security assurance. We are looking for a highly motivated, organized, and detail-oriented individual to join our Customer Trust team. As a senior member of this team, you will own a portfolio of concurrent, multi-program compliance efforts and help ensure Lyft meets its enterprise promises and contractual commitments to customers on security and privacy across global markets. You'll manage relationships with external auditors and internal stakeholders, scale our program through efficient processes and automation, and serve as a trusted advisor on technical compliance matters spanning North America, the EU, and the UK. Responsibilities: Program & Audit Ownership Own and lead our ISO 27001 compliance program end-to-end, from certification planning and internal audit through surveillance cycles and Statement of Applicability updates Drive execution across our multi-program compliance portfolio spanning SOC 2, PCI DSS, HIPAA, and NIST CSF, alongside global and international frameworks including UK Cyber Essentials, Spain ENS, and emerging EU re

About Snorkel Snorkel AI is the frontier AI data lab, helping teams build the data and environments behind high-performing frontier and agentic AI. We combine technology with research-driven AI data development to create datasets, benchmarks, evals, and custom solutions for real-world AI systems. Founded out of the Stanford AI Lab in 2019, Snorkel works with leading AI labs and enterprises to move from better data to better outcomes. Excited to help us redefine how AI is built? Apply to be the newest Snorkeler! Job Description We are seeking a hands-on, builder-minded Senior Technical Compliance Analyst to serve as the operational engine behind our Trust & Security program. You will maintain our SOC 2 Type II posture, drive our second entity from Type I to Type II, and act as the bridge between compliance requirements and engineering & delivery execution. You will also lay the technical groundwork to evolve us toward **CMMC 2.0**, ensuring we are ready for federal contracts without slowing down our product velocity. **This is not a "compliance cop" role.** We practice **"Yes, if..."** security—you will influence architecture, automate policy enforcement, and unblock enterprise sales by ensuring the Security team has pristine, verifiable evidence at their fingertips. What You will Do Powering Customer Trust & Revenue Enablement The Engine Behind Revenue: Help drafting accurate, technically precise responses to RFPs, security questionnaires (CAIQ, SIG, custom risk assessments), and customer portals. Repository Stewardship: Own and continuously update the "Library of Truth"—a pristine repository of pre-vetted security evidence, technical configurations, and policy documents. By keeping this repository audit-ready, you enable the Security team to respond to enterprise prospects in hours, not days. Technical Depth on Demand: When a customer asks about AWS KMS encryption, logging pipelines, or IAM privilege escalation paths, you retrieve the granu

Who we are About Bridge We're creating an entirely new payments platform, built with stablecoins, to simplify global money movement. Bridge enables faster, cheaper payments and borderless access to dollars via stablecoins. Through our APIs, businesses can send and receive funds across borders faster and cheaper vs. SWIFT and other fiat-only rails. Our virtual accounts enable international consumers and businesses to easily access, store, and spend US dollars. Our payouts infrastructure enables platforms to disburse USD to anyone globally. We believe many trillions of dollars will move and settle through stablecoin payment rails. Bridge is pulling this future forward. We have a small team of people who have previously built financial infrastructure at some of the world's leading companies (Coinbase, Stripe, Square, Brex, Upstart, DoorDash, Airbnb), and each and every one of them chose Bridge because they fundamentally believe that stablecoins will be a critical piece of financial infrastructure that allows for the improvement of global money movement. About the Role We’re hiring a Security Analyst / Program Manager to build and scale Bridge’s security foundation. This is a rare opportunity to design the security governance, risk and compliance programs from the ground up, while also leveraging the infrastructure, best practices, and tooling of one of the most mature security organizations in the industry. Responsibilities Identify and tackle Bridge’s most important security risks quickly and pragmatically. Adopt Stripe’s programs, controls and processes where it makes sense, and find custom approaches where it doesn’t. Reinforce engineering best practices around secure development and infrastructure. Ensure Bridge meets compliance and audit expectations as we scale to more regulated markets. Collaborate cross-functionally with engineering, product, and Stripe’s security org to move fast without compromising safety. Minimum Requirements Have 8+ years of experie

Most security assurance work is reactive: a customer asks, a team scrambles, an answer goes out. This role exists to end that cycle. As a Senior Staff Analyst, you’ll own a named portfolio of our most significant customers from a security perspective, and get ahead of what they need — their regulatory environment, their audit calendar, their risk appetite, their control expectations — well enough to have the evidence ready before the request arrives. You’ll lead customer security audits hands-on, sit across from customer security teams as a peer rather than a form-filler, and build account security plans that make the next assessment predictable instead of painful. This is deliberately a hands-on senior individual contributor role. You’ll spend your time in audits, in customer conversations, and in the detail of controls and evidence — not in a management chain. If you’ve got deep SOC 2 and ISO 27001 knowledge, real technical range across cloud architecture, identity and vulnerability management, and the presence to hold a room with a sceptical CISO, this is a portfolio you can genuinely own. Here’s a breakdown of what you’ll do (not all of it, just the important stuff): Own a portfolio of strategic accounts as their dedicated security point of contact, building durable relationships with their security, risk, compliance and procurement teams. Lead customer security audits and assessments hands-on — scoping, preparing evidence, running the sessions, defending control design and driving findings to closure with internal owners. Build and maintain an account security plan for each account: their frameworks and regulators, audit and reassessment cycles, known concerns, open items and the roadmap commitments they care about. Anticipate requirements before they’re raised, tracking regulatory change, industry expectations and each account’s compliance calendar so documentation and evidence are staged in advance. Act

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As a Procurement Operations Analyst, you will sit on the Finance team and work across the procurement spectrum to ensure smooth and efficient purchasing, contracting, and supplier operations. As a motivated self-starter, you will be the liaison between procurement, vendors, and internal cross-functional teams to ensure that all purchases follow company procedures, meet expected service-level agreements (SLAs), have sufficient, thorough documentation, and that services and goods being rendered are compliant with the agreed upon contractual terms. Core Responsibilities Organize and track contractual documentation between the company and vendors, and ensure completeness of the contracts repository. Support Business Development teams, Procurement team, Contract Manager, and Legal Counsel in ushering contracts through the purchasing workflows. Track, measure, report, and evaluate vendor performance in the context of existing contractual obligations. Act as bridge between cross-functional teams such as Financial Planning & Analysis (FP&A), Accounting, Legal, Information Security, Compliance and the various business departments to remove blockers and push transactions through to completion. Identify and support improvements to end-to-end purchasing process, including supplier onboarding, contracting, and purchase order management. Build and maintain program for ensuring company-wide compliance with Procurement Policy. Work alongside the Contract Manager to ensure that vendors within the vendor base have passed the necessary compliance and information security reviews and are compliant with the requ