Security Compliance Lead Jobs

Founded in 1972, Atari is one of the world’s most iconic consumer brands and a pioneer in the video game industry, recognized worldwide for its multi-platform games and licensed products. Atari owns and/or manages a portfolio of more than 400 games and franchises, including globally recognized brands such as Asteroids®, Centipede®, Missile Command®, Pong®, and RollerCoaster Tycoon®. The Atari family of brands includes Digital Eclipse, Nightdive Studios, Infogrames, AtariAge, MobyGames, as well as Coatsink, Early Morning Studios, and Stormteller Games—spanning game development, publishing, and community experiences worldwide. Today, Atari Inc. continues to build on its legacy by developing games, hardware, and experiences that honor the past while driving innovation for the future. Over the past two years, we've been building Atari India, a growing team that plays a critical role in supporting our global operations. We're proud of the team we've assembled so far, and we’re just getting started. As part of a lean, high-impact organization, the team in India works closely with colleagues in North America and Europe on projects that move the company forward. Whether you're helping launch a new game, keeping our infrastructure secure, or supporting day-to-day operations, your work here matters. Join us as we continue to grow Atari India and build the future of a legendary brand. Position: Security & Compliance Lead Experience: 10-15 years Location: Netaji Subhash Place,

Role Overview As a Security Risk and Compliance Lead you will play a hands-on role in maturing and operating Asana's compliance and certification programme—with a primary focus on FedRAMP Continuous Monitoring and authorization activities. This role sits at the intersection of traditional GRC work and compliance engineering: you will own our FedRAMP programme day-to-day, while also supporting our broader audit cycles and control frameworks across SOC 2 and ISO 27001. This is an excellent opportunity for someone with early-career GRC experience who has a strong grounding in FedRAMP and is excited to grow their technical skills in a high-growth SaaS environment. You will partner closely with Security Engineering, Legal, Privacy, and R&D to ensure our FedRAMP obligations are met with rigour, our controls are effective, and our certifications are maintained. This role is based in our San Francisco office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner. If you're interviewing for this role, your recruiter will share more about the in-office requirements. What You’ll Achieve FedRAMP Continuous Monitoring Own the monthly FedRAMP ConMon package submission, ensuring it is accurate, complete, and delivered on time every month. Track and drive completion of all timeboun

At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a talented Security Compliance Operations Lead to manage and mature a security assurance function within Security GRC. This role will help ensure key security safeguards are operating effectively across Rockstar’s global technology environments. Leveraging cross-domain cybersecurity expertise, you will lead control validation strategy, mature security compliance operations capabilities, use automation to scale control validation, evidence collection, and reporting, and provide leadership with clear visibility into security posture and risk reduction. This is a full-time, in-office position based in Rockstar’s large game development studio in Bangalore, India. WHAT WE DO The Rockstar Games Security team is responsible for advancing the state of information security across the company globally in collaboration with numerous partners and stakeholders by prioritizing and executing security initiatives that drive down risk. We strive to understand the threat landscape affecting our development studios, the gaming industry, and the world at large to define information security policies, standards, and procedures

Opportunity Overview We're hiring a Data Architect who will serve as a senior technical leader responsible for architecting the complete lifecycle data moves, transforms, and creates value across every product line we operate. You'll own the blueprint for our enterprise data lakehouse - setting the standards, governance, and strategy that elevate data from a byproduct of operations to the company's most valuable asset. We need someone who pairs deep mathematical and logical modeling expertise with a builder's instinct - someone who codes, prototypes fast, and proves out next-generation AI data architectures before committing the organization to them. This role would need experience with US healthcare domain data. What You'll Do Semantic Layer Governance: Set the technical standard and reference architecture for a universal semantic layer across multiple distinct data products, ensuring unified definitions of complex metrics and healthcare business entities across Architect the Enterprise Context Layer: Define, scale, and govern the global Enterprise Ontology (abstract domain maps, business entity classes, and entity-relationship rules) that serves as the backbone for Agentic AI systems. AI-Native Prototyping : Leverage modern AI-native development environments (such as Cursor, GitHub Copilot) to rapidly generate, iterate, and document blueprints for complex enterprise data schemas and metadata layers. Security & Compliance Leadership : Embed regulatory compliance (HIPAA,

ABOUT BASETEN Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F , led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to to ship AI products. THE ROLE We are seeking an experienced and detail-oriented GRC (Governance, Risk, and Compliance) Manager to build, support, and continuously enhance Baseten’s security governance, compliance, and privacy programs. As one of the early members of our security organization, you will play a key role in ensuring our platform meets and exceeds the highest standards for privacy, trust, and regulatory compliance. In this role, you’ll work cross-functionally with engineering, operations, legal, and leadership teams to develop policies, manage audits, and implement controls aligned with frameworks such as SOC 2, ISO 27001, ISO 27701, and FedRAMP. You’ll be instrumental in building scalable processes to manage risk, support customer assurance, and uphold Baseten’s commitment to security and compliance as we grow. RESPONSIBILITIES Governance & Policy Development: Design, implement, and maintain security governance frameworks, policies,

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role As an Enterprise Account Executive based in Seoul, you'll drive adoption of safe, frontier AI technology across Korea's financial services industry — banks, insurers, asset managers, and fintech companies. You'll own the full sales cycle from prospecting to closing, working with senior leaders to help them modernize operations, risk, and customer-facing functions with Anthropic's AI solutions. Key responsibilities Own and exceed revenue targets by winning new accounts and expanding relationships across Korea's FSI companies. Build and execute territory plans, identifying opportunities across retail banking, corporate/investment banking, insurance, asset management, and fintech-adjacent units Lead consultative sales processes with senior stakeholders — including heads of digital transformation, risk and compliance leaders, IT leadership, and business-line executives Navigate Korea's FSI regulatory environment, including Financial Supervisory Service (FSS) requirements, data residency, model risk, and financial-sector compliance Work with internal teams (Product, Engineering, Applied AI, Partnerships, Legal) to tailor solutions tha

At Asana, security is foundational to our mission of helping teams work together effortlessly. Our security team protects Asana’s employees, users, and customers by proactively addressing threats, ensuring compliance with legal and regulatory requirements, and fostering a culture of security throughout our product and operations. We are a team of security engineers and risk and compliance practitioners who build innovative safeguards and collaborate across the organization to build and maintain trust at scale. As the Third Party Risk Management Lead, you will be responsible for building and running Asana’s Third Party Risk Management (TPRM) program. You will own the end-to-end lifecycle of vendor security risk — from initial due diligence and risk tiering through ongoing monitoring and remediation. You will work closely with Procurement, Legal, Privacy, and Engineering teams to ensure that our third-party relationships are effectively assessed, tracked, and managed. This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. Our employees in Poland are employed under a contract of employment. What you’ll achieve Own and scale Asana’s TPRM program: Design, implement, and continuously improve a risk-based

Job Requisition ID # 26WD101016 Job Title: SOX IT Compliance Analyst [P4] Location: Canada Company: Autodesk Job Type: Full-Time Job Summary Autodesk is seeking an experienced Compliance Analyst to lead key aspects of its Sarbanes-Oxley (SOX) IT General Controls (ITGC) program. This individual contributor role combines deep technical expertise, independent judgment, and business understanding to strengthen the effectiveness, scalability, and sustainability of the IT control environment supporting financial reporting. A successful candidate will take end-to-end ownership of significant ITGC workstreams and initiatives, including onboarding new systems into SOX scope, evaluating controls for systems within SOX scope and improvi

Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! Figma's Governance, Risk, and Compliance team is the foundation of how we build and maintain trust - with our users, regulators, business partners, and the organizations that rely on Figma every day. We work across the organization and drive programs that ensure the effectiveness of our security protections, identify and manage risk, maintain compliance, and build trust with our customers. We're looking for a Governance, Risk and Compliance Director to lead this team through its next phase of growth. You'll own Figma's security compliance, risk management, and governance strategy end to end - setting direction for our certification portfolio, building the risk and controls frameworks that scale with our growing business and product suite, and representing GRC to executives, the board, customers, and regulators. This is a hands-on leadership role where you'll manage and grow a team of GRC professionals while staying close to the programs, infrastructure, audits, and cross-functional relationships needed to

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Position Overview: We are seeking a visionary Senior Director, Governance, Risk and Compliance (GRC) to lead and scale our world-class GRC Security organization. We don't view Governance, Risk, and Compliance (GRC) as a passive reporting function or an administrative checklist—we build engineering-forward, automated, and AI-driven GRC programs capable of operating in an evolving AI world. Reporting directly to Security Executive leadership, you will operate as a partner to the Senior Executives across Okta’s workforce, taking direct responsibility for cyber risk, data governance, security compliance and product certifications to enable Okta to ship world class, secure products. You will blend deep domain expertise across enterprise cyber risk, audit, and global compliance with a forward-thinking engineering mindset—pioneering continuous control monitoring, compliance-as-code, and robust AI governance for generative and agentic architectures. This is not j

About Us: YipitData is the leading market research and analytics firm for the disruptive economy and recently raised up to $475M from The Carlyle Group at a valuation over $1B. We analyze billions of alternative data points every day to provide accurate, detailed insights on ridesharing, e-commerce marketplaces, payments and more. Our on-demand insights team uses proprietary technology to identify, license, clean and analyze the data many of the world’s largest investment funds and corporations depend on. For three years and counting, we have been recognized as one of Inc’s Best Workplaces . We are a fast-growing technology company backed by The Carlyle Group and Norwest Venture Partners. Our offices are located in NYC, Austin, Miami, Denver, Mountain View, Seattle , Hong Kong, Shanghai, Beijing, Guangzhou, and Singapore. We cultivate a people-centric culture focused on mastery, ownership, and transparency. About the Role: This is a fully on-site role based at our New York City headquarters. Employees are expected to work from the NYC office five days per week. We expect East Coast working hours. As Our IT Delivery Engineer, You Will: Design, implement, and maintain the systems and platforms that support the company’s internal IT environment Administer and troubleshoot SaaS platforms and endpoint management systems including Kandji, Google Workspace, Okta, Slack, Zoom, and other core business tools Manage and improve device management and endpoint configuration across the glo

About us Sierra is the leading platform for customer-facing AI agents, working with many of the world's biggest brands — including The GAP, Rocket Mortgage, SoFi, Sutter Health, and SoftBank — to transform how they serve customers and grow their businesses. We are primarily an in-person company based in San Francisco, with growing offices across North America, Europe, and Asia. We are guided by a set of values that are at the core of our actions and define our culture: Trust, Customer Obsession, Craftsmanship, Intensity, and a commitment to balancing Family along the way. These values are the foundation of our work, and we are committed to upholding them in everything we do. Our co-founders are Bret Taylor and Clay Bavor . Bret currently serves as Board Chair of OpenAI. Previously, he was co-CEO of Salesforce (which had acquired the company he founded, Quip) and CTO of Facebook. Bret was also one of Google's earliest product managers and co-creator of Google Maps. Before founding Sierra, Clay spent 18 years at Google, where he most recently led Google Labs. Earlier, he started and led Google’s AR/VR effort, Project Starline, and Google Lens. Before that, Clay led the product and design teams for Google Workspace. What you’ll do Act as a primary point of accountability for customer trust enablement, including participation in customer meetings, security reviews and AI governance. Contribute to AI Governance including building guardrails to align with AI regulations (EU AI Act,

About us Sierra is the leading platform for customer-facing AI agents, working with many of the world's biggest brands — including The GAP, Rocket Mortgage, SoFi, Sutter Health, and SoftBank — to transform how they serve customers and grow their businesses. We are primarily an in-person company based in San Francisco, with growing offices across North America, Europe, and Asia. We are guided by a set of values that are at the core of our actions and define our culture: Trust, Customer Obsession, Craftsmanship, Intensity, and a commitment to balancing Family along the way. These values are the foundation of our work, and we are committed to upholding them in everything we do. Our co-founders are Bret Taylor and Clay Bavor . Bret currently serves as Board Chair of OpenAI. Previously, he was co-CEO of Salesforce (which had acquired the company he founded, Quip) and CTO of Facebook. Bret was also one of Google's earliest product managers and co-creator of Google Maps. Before founding Sierra, Clay spent 18 years at Google, where he most recently led Google Labs. Earlier, he started and led Google’s AR/VR effort, Project Starline, and Google Lens. Before that, Clay led the product and design teams for Google Workspace. What you'll do Own independent audits and regulatory programs including ISO 42001, PCI DSS, NIST 800-53, FedRAMP, HIPAA, and related frameworks. Drive scope definition, readiness assessments, auditor engagement, remediation planning, and executive level reporting. De

About the Role As our Digital Trust and Resilience Specialist you will lead and perform technology risk assessment and security compliance activities central to our global operations. You will coordinate annual IT internal and external audit programs, including ISO and SOC 2 certifications across our key markets. These certifications are critical to accelerating customer onboarding and streamlining annual regulatory audits worldwide. You will also run mandatory employee security awareness training globally, and drive the automation of evidence collection to improve efficiency. In this role, you will identify compliance gaps, support remediations, and provide technical guidance across all business units. AI is fundamental to how we work. In this position, you will help us build AI automations, workflows, and agents to boost the efficiency of Digital Trust & Resilience operations. You do not need to be an AI researcher. You just need to understand compliance risks and have a drive to learn and apply AI tools. Responsibilities: Coordinate and perform annual IT internal audits and external audits for ISO and SOC 2 certifications across global markets, ensuring certifications are maintained to support customer and partner onboarding and regulatory audit readiness Run global, regulator-mandated employee security awareness and compliance training campaigns, including tracking, reporting, and continuous improvement Automate evidence collection and compli

About the Role As our Digital Trust and Resilience Engineer, you will lead and perform technology risk assessment and security compliance activities central to our global operations. You will coordinate annual IT internal and external audit programs, including ISO and SOC 2 certifications across our key markets. These certifications are critical to accelerating customer onboarding and streamlining annual regulatory audits worldwide. You will also run mandatory employee security awareness training globally, and drive the automation of evidence collection to improve efficiency. In this role, you will identify compliance gaps, support remediations, and provide technical guidance across all business units. AI is fundamental to how we work. In this position, you will help us build AI automations, workflows, and agents to boost the efficiency of Digital Trust & Resilience operations. You do not need to be an AI researcher. You just need to understand compliance risks and have a drive to learn and apply AI tools. Responsibilities: Coordinate and perform annual IT internal audits and external audits for ISO and SOC 2 certifications across global markets, ensuring certifications are maintained to support customer and partner onboarding and regulatory audit readiness Run global, regulator-mandated employee security awareness and compliance training campaigns, including tracking, reporting, and continuous improvement Automate evidence collection and compl