Security Compliance Lead Jobs

Bloomreach is building the world’s premier agentic platform for personalization .We’re revolutionizing how businesses connect with their customers, building and deploying AI agents to personalize the entire customer journey. We're taking autonomous search mainstream, making product discovery more intuitive and conversational for customers, and more profitable for businesses. We’re making conversational shopping a reality, connecting every shopper with tailored guidance and product expertise — available on demand, at every touchpoint in their journey. We're designing the future of autonomous marketing , taking the work out of workflows, and reclaiming the creative, strategic, and customer-first work marketers were always meant to do. And we're building all of that on the intelligence of a single AI engine — Loomi — so that personalization isn't only autonomous…it's also consistent.From retail to financial services, hospitality to gaming, businesses use Bloomreach to drive higher growth and lasting loyalty. We power personalization for more than 1,400 global brands, including American Eagle, Sonepar, and Pandora. Security & Compliance Analyst Become a Security & Compliance Analyst at Bloomreach. You will join our Governance, Risk, and Compliance team and help maintain our compliance activities, resolve compliance-related issues, and support engineering and sales teams with customer requirements. Bloomreach provides the best digital experience for leading international e-commerce companies, and your work will help protect the trust of hundreds of millions of consumers who shop online. Your tasks and responsibilities As a Security & Compliance Analyst, you will: Support periodic audits of company procedures and processes, and help prepare reports on compliance. Investigate compliance issues, document findings, and support the implementation of appropriate actions. Support the sales process by completing s

Bloomreach is building the world’s premier agentic platform for personalization .We’re revolutionizing how businesses connect with their customers, building and deploying AI agents to personalize the entire customer journey. We're taking autonomous search mainstream, making product discovery more intuitive and conversational for customers, and more profitable for businesses. We’re making conversational shopping a reality, connecting every shopper with tailored guidance and product expertise — available on demand, at every touchpoint in their journey. We're designing the future of autonomous marketing , taking the work out of workflows, and reclaiming the creative, strategic, and customer-first work marketers were always meant to do. And we're building all of that on the intelligence of a single AI engine — Loomi — so that personalization isn't only autonomous…it's also consistent.From retail to financial services, hospitality to gaming, businesses use Bloomreach to drive higher growth and lasting loyalty. We power personalization for more than 1,400 global brands, including American Eagle, Sonepar, and Pandora. Security & Compliance Analyst Become a Security & Compliance Analyst at Bloomreach. You will join our Governance, Risk, and Compliance team and help maintain our compliance activities, resolve compliance-related issues, and support engineering and sales teams with customer requirements. Bloomreach provides the best digital experience for leading international e-commerce companies, and your work will help protect the trust of hundreds of millions of consumers who shop online. Your tasks and responsibilities As a Security & Compliance Analyst, you will: Support periodic audits of company procedures and processes, and help prepare reports on compliance. Investigate compliance issues, document findings, and support the implementation of appropriate actions. Support the sales process by completing s

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: Replit is building the security GRC function that will scale with an AI-native product. As the Risk & Compliance lead, you'll own our certification and audit program end to end: SOC 2, ISO 27001, and eventually ISO 42001 (AI management systems), while also owning the company's master security risk register and continuous compliance monitoring. You'll report to the Head of Security GRC, who retains overall accountability for the risk program, and work closely with Engineering to make sure controls hold up in practice, not just on paper. What You'll Do Own the end-to-end certification roadmap (SOC 2 Type II, ISO 27001, and future frameworks like ISO 42001) including scoping, gap assessments, remediation, and audit execution Manage relationships with external auditors and drive the annual audit calendar so certifications renew without last-minute scrambles Own and maintain the company's master security risk register including risk identification, scoring methodology, treatment plans, and residual risk reporting Build and maintain continuous compliance monitoring so control status reflects real-time state rather than point-in-time snapshots Own the core audit artifacts that back every certification including ISMS documentation, Statements of Applicability, risk assessments, and potentially FedRAMP System Security Plans (SSPs) Run regular audits and readiness assessments, and track remediation of findings and control gaps to closure Support GDPR and broader privacy compliance alongside the Legal/Privacy team, without owning the legal interpretation of requirements Partner with the GRC Engineer to define what evidence collection and control monitoring should be automated versus manually reviewed Track and

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform. We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. Role We are looking for a Security Compliance Architect to join our team. This is a San Jose, CA preferred; remote candidates will be considered for the role, which is reporting to the Director, Technology Risk & Compliance in the Exposure Management & Security Operations department. You will shape and scale security compliance across highly regulated cloud environments, translating complex regulatory requirements into practical technical and operational solutions. By working closely with cross-functional teams, you will support authorization efforts, strengthen control maturity, and build scalable compliance practices that enable business growth. What you’ll do (Role Expectations) Lead the design and implementation of security compliance architecture for cloud environments subject to FedRAMP and DoD IL5 requirements Interpret and operationalize control requirements from frameworks such as NIST SP 800-53, Fed

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What Is The Role : Join our team as a Principal Security Compliance Analyst , where you'll take the lead in managing our FedRAMP Moderate program . You'll be part of a fantastic team that values a strong security culture, allowing you to contribute meaningfully to our mission while collaborating with like-minded professionals. Your expertise will help us maintain and enhance our compliance efforts in a supportive and engaging environment. What You Will Be Doing : Manage the FedRAMP Moderate authorization and continuous monitoring program. Maintain the System Security Plan, policies, procedures, evidence, inventories, diagrams, and other required documentation. Coordinate assessments and reviews with our 3PAO, federal agency partners, consultants, and internal teams. Track security findings and POA&M items through remediation. Work with Security, Engineering, IT, Product, and Legal teams to implement and maintain required controls. Monitor program deadlines, risks, and compliance metrics and report progress to leadership. Review system and product changes for potential FedRAMP impact. Help control owners understand their responsibilities and prepare appropriate evidence. What You Bring : 5+ years of experience managing or supporting a FedRAMP Moderate program. Strong understanding of FedRAMP, NIST SP 800-53, and continuous monitoring requireme

About Syllo Syllo is on a mission to transform litigation. Our product is an AI-powered litigation workspace that enables lawyers and paralegals to safely harness the power of language models throughout the litigation life cycle. Since going to market, we have gained a diverse group of enterprise customers, including some of the biggest law firms in the country, and we are quickly expanding. By reducing the expense of litigation industry-wide, we aim to improve access to high-quality representation and promote the alignment of legal outcomes with merit. We’re looking for a Data Security Compliance Director who will own the compliance-side and business operations related to Company’s data security function. About the role Syllo is a legal technology company building infrastructure that law firms and legal teams trust with sensitive data. Compliance isn't a checkbox here, it's a product feature. We're looking for a Data Security Compliance Director to own our certification programs, manage vendor security relationships and processes, own the accurate and timely completion of our security disclosures in the sales context, and keep our posture audit-ready year-round. This role sits at the intersection of compliance and engineering. While this role does not own the security of our technical stack from an engineering perspective, you will work directly with technical teams to implement controls, close evidence gaps, and translate technical postures and requirements into concrete and well communicated action. Responsibilities - ISO 27001. Maintain and continuously improve our Information Security Management System. Manage internal audits, corrective actions, and annual surveillance cycles through Vanta. - SOC 2 Type II. Coordinate evidence collection, liaise with external auditors, and drive remediation across engineering and operations. - Vendor security. Lead vendor security assessments, manage VSQ responses (inbound and outbound), and maintain a tiered

Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. About the Opportunity This is not a traditional GRC hire. The Tech G overnance Office is looking for someone who combines the governance judgment of a seasoned compliance professional with the drive of a forward-deployed engineer — someone who closes gaps by shipping solutions, navigates ambiguity without hand-holding, and operates with the urgency of a startup and the rigour of a regulated financial institution. You will own complex cross-functional workstreams independently — coordinating across Engineering, Legal, Product, and Finance — while managing external auditors and regulators. Strong written and verbal communication in both English and Mandarin is a meaningful advantage in this role. AI tooling is not optional; it is how you work. Who You Are Self-directed driver — You run cross-functional workstreams without being managed. Ambiguity is a starting point, not a blocker. AI-native operator — You already use AI to do more, faster — and you raise the floor for the teams around you. Clear communicator — You earn trust across regulators, auditors, and C-suite through precision and consistency — in any room. Culture Fit Pace Standards Startup velocity — Decisions move fast. Priorities shift. You ship, iterate, and adapt — without waiting for perfect con

Senior Manager, Japan Security and Compliance GTM WHAT IS BOX? [Recruiting owns] Box is the market leader for Cloud Content Management. Our mission is to power how the world works together. Box is partnering with enterprise organizations to accelerate their digital transformation by creating a single platform for secure content management, collaboration and workflow. We have an amazing opportunity to further establish ourselves as leaders in the space, and we need strong advocates to help us achieve that goal. By joining Box, you will have the unique opportunity to help capture a majority of this developing market and define what content management looks like for the digital enterprise. Today, Box powers over 97,000 businesses, including 70% of the Fortune 500 who trust Box to manage their content in the cloud. WHY BOX NEEDS YOU Box's security, compliance, and privacy posture is a business enabler for customers and a competitive differentiator in the market. We are looking for a Senior Manager, Japan Security and Compliance GTM, to lead Box’s customer trust efforts in Japan. This will include oversight and responsibility for gathering, vetting and scaling security, compliance, privacy and other trust-related information to customers and partners. The right person should be excellent at communicating vertically and horizontally across the company and will be comfortable explaining Box's security, compliance, and privacy posture. WHAT YOU'LL DO Lead Japan’s customer trust efforts, including responding to customer security due-diligence questionnaires and, as needed, leading customer audits. Work with US-based GRC, Security, Legal, Product and other SMEs to find answers to customer questions specific to the Japan market. Assess the need for new customer-facing content; drive the development of new content; and then scale it to account teams, customers and partners, as appropriate. Work closely with both Box Japan’s leadersh

Location: Athens, Gr Weekly office requirement: Hybrid – 2 days per week Employment type: Permanent Seniority level: Mid At GWI we're always looking for extraordinary people who thrive on making an extraordinary impact. Right now we're looking for an Information Security GRC Specialist to play a key role in our Legal team in London. If that's you, and making a difference gets you out of bed in the morning, keep reading. It could be the start of something, well, extraordinary. Sounds great, what will I be doing? 🤔 As our Information Security GRC Specialist you'll play a pivotal role in shaping the future of security compliance at GWI. Reporting into our General Counsel and working closely with our Information Security, Product, and Technology teams, you'll own our compliance posture across security frameworks, vendor risk, and client-facing security requirements — while building a security-conscious culture across the business. A few things you'll be responsible for: 👉 Own and maintain GWI's ISO 27001 certification and compliance across relevant security frameworks, keeping our posture sharp as the threat landscape evolves. 👉 Develop, implement, and maintain information security policies and procedures aligned with industry best practices. 👉 Lead vendor risk management and client security assessments — including responding to client security questionnaires and onboarding requirements. 👉 Build and maintain GWI's security trust portal, showcasing our credentials to clients and stakeholders using tools such as Drata or Vanta. 👉 Drive security awareness across the business through training programmes and internal communications that promote a strong GRC culture. It's also fun; shaking things up is what working for GWI is all about. You'll need to be flexible, comfortable with continuous change, and working in a high-tempo environment. What do I need to bring with me? 🧳 You'll need to be able to demonstrate the core skills this role requires. You don't have

Location: London, UK Weekly office requirement: Hybrid – 2 days per week Employment type: 6 months fixed term contract, immediate start At GWI we're always looking for extraordinary people who thrive on making an extraordinary impact. Right now we're looking for an Information Security GRC Specialist to play a key role in our Legal team in London. If that's you, and making a difference gets you out of bed in the morning, keep reading. It could be the start of something, well, extraordinary. Sounds great, what will I be doing? 🤔 As our Information Security GRC Specialist you'll play a pivotal role in shaping the future of security compliance at GWI. Reporting into our General Counsel and working closely with our Information Security, Product, and Technology teams, you'll own our compliance posture across security frameworks, vendor risk, and client-facing security requirements — while building a security-conscious culture across the business. A few things you'll be responsible for: 👉 Own and maintain GWI's ISO 27001 certification and compliance across relevant security frameworks, keeping our posture sharp as the threat landscape evolves. 👉 Develop, implement, and maintain information security policies and procedures aligned with industry best practices. 👉 Lead vendor risk management and client security assessments — including responding to client security questionnaires and onboarding requirements. 👉 Build and maintain GWI's security trust portal, showcasing our credentials to clients and stakeholders using tools such as Drata or Vanta. 👉 Drive security awareness across the business through training programmes and internal communications that promote a strong GRC culture. It's also fun; shaking things up is what working for GWI is all about. You'll need to be flexible, comfortable with continuous change, and working in a high-tempo environment. What do I need to bring with me? 🧳 You'll need to be able to demonstrate the core skills this role requires. Y

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Ready to scale your career at the intersection of law and innovation? Join Okta’s Public Sector and Regulated Offerings Legal Team . As Corporate Counsel, you won’t just be reviewing regulatory requirements—you’ll be a foundational builder of a scalable, global Public Sector practice. In this role, you will provide frontline legal counseling for Okta’s most critical regulated environments, working both independently and alongside senior leadership to navigate the complexities of the U.S. government’s regulatory frameworks. You will partner with business and technology teams to guide the development and implementation of Okta’s Public Sector solutions. Our Public Sector legal team drives the legal strategy for introducing new products and features into regulated environments (e.g., FedRAMP, GovRAMP, DoD CC SRG). In this role, you must use sharp critical thinking to provide pragmatic legal solutions that balance aggressive business objectives with necessary risk mitigation. Finally, you serve as a bridge between legal, engineering, compliance, security, and sales teams to ensure our products meet the rigorous standards of our public sector customers. What You Bring to the Table Comfortable working independently in a fast-paced, remote-friendly environment and can pivot as business goals evolve. A deep understanding of the unique legal and regulatory hurdles associated with U.S. regulated industries, specifically: FedRAMP&n

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As a member of Palantir's Security Compliance team, you will develop a deep understanding of Palantir's control environment, infrastructure, and products. You will work with information security, business and product development experts, and external parties to navigate and manage commercial and international compliance frameworks (SOC/ISO 27001/17/18, ISO 9001) and geographically strategic compliance frameworks (ENS, TISAX, ISMAP, IRAP) in order to provide practical guidance on technical documentation, operational concerns, and sustainable processes that will allow us to continue to grow quickly & efficiently while also maintaining our current compliance obligations. You will additionally be a co-owner of our holistic internal risk management and internal control structures. We are looking for a team-focused and mission-oriented compliance professional that can navigate ambiguity and uncertainty, with the ability and desire to achieve goals and drive progress in an environment where outcomes must be achieved through their own resourcefulness and initiative. Core Responsibilities Assist in the performance of internal and external security assessments of Palantir products, infrastructure, and processes. Have a interest and general aptitude emerging technologies : from leveraging AI tooling, harnessing the capabilities of evidence automation and documentation management, and a general aptitude for agentic integration within workflows. Develop and maintain an understanding of Palantir’s control environment and articulate this understanding to various audiences, including internal and external stakeholders and auditors. Technica

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As a member of Palantir's Security Compliance team, you will develop a deep understanding of Palantir's control environment, infrastructure, and products. You will work with information security, business and product development experts, and external parties to navigate and manage commercial and international compliance frameworks (SOC/ISO 27001/17/18, ISO 9001) and geographically strategic compliance frameworks (ENS, TISAX, ISMAP, IRAP) in order to provide practical guidance on technical documentation, operational concerns, and sustainable processes that will allow us to continue to grow quickly & efficiently while also maintaining our current compliance obligations. You will additionally be a co-owner of our holistic internal risk management and internal control structures. We are looking for a team-focused and mission-oriented compliance professional that can navigate ambiguity and uncertainty, with the ability and desire to achieve goals and drive progress in an environment where outcomes must be achieved through their own resourcefulness and initiative. Core Responsibilities Assist in the performance of internal and external security assessments of Palantir products, infrastructure, and processes. Have a interest and general aptitude emerging technologies : from leveraging AI tooling, harnessing the capabilities of evidence automation and documentation management, and a general aptitude for agentic integration within workflows. Develop and maintain an understanding of Palantir’s control environment and articulate this understanding to various audiences, including internal and external stakeholders and auditors. Technica

P-1528 As a Staff Security Assurance Engineer within the Security Assurance Team, you will help lead high-visibility security compliance implementation initiatives. Reporting directly to the Senior Director, you will serve as a strategic catalyst for these programs, ensuring seamless execution and alignment with Databricks’ global security objectives. You will navigate a complex, cloud-native landscape, collaborating with Security, IT, Engineering, Internal Audit, Corporate Operations, and other teams, to assure successful completion of highly cross-functional projects that enable the growth of our business and safeguard our customers. This role requires an active Top Secret Clearance, the ability to access and work within a SCIF environment, and residence within the Washington, DC metropolitan area. The impact you will have: Drive Project Outcomes: Adopt an ownership mindset to manage the end-to-end delivery of work required for new security certifications, federal authorizations, and compliance initiatives that expand Databricks’ reach across regulated and government markets. Accelerate Execution: Act as a force multiplier by proactively identifying and neutralizing project blockers, reducing friction, and maintaining high velocity in a cloud-native environment. Orchestrate Cross-Functional Decision Making: Navigate complex technical and compliance trade-offs, driving consensus across Engineering, IT, Product, and Security teams to reach timely resolutions. Optimize Delivery Methodologies: Continuously refine project frameworks to maximize effectiveness, ensuring that security initiatives are both rigorous and agile. Precision Program Management: Masterfully oversee project lifecycles—including milestones, dependencies, and risk mitigation—while providing executive-level transparency through accurate status reporting. Build Strategic Partnerships: Forge deep, collaborative relationships with Security Assurance Team subject matter experts and technical stakeholders

NVIDIA has been transforming computer graphics, PC gaming, and accelerated computing for more than 25 years. It’s a unique legacy of innovation that’s fueled by great technology—and amazing people. Today, we’re tapping into the unlimited potential of AI to define the next era of computing. An era in which our GPU acts as the brains of computers, robots, and self-driving cars that can understand the world. Doing what’s never been done before takes vision, innovation, and the world’s best talent. As an NVIDIAN, you’ll be immersed in an inclusive, supportive environment where everyone is inspired to do their best work. Come join the team and see how you can make a lasting impact on the world. NVIDIA is searching for a creative, highly motivated and independent engineer with expertise in system software with security background to join the SOC System Software organization. This position offers the opportunity to have real impact in a dynamic, technology-focused company impacting SOC based product lines ranging from autonomous vehicles, robotics, consumer graphics, and edge AI. What You’ll Be Doing: Lead all HDCP (High-bandwidth Digital Content Protection) activities across SoC-based projects, leading the feature roadmap, protocol implementation, compliance certification, and delivery across chips, platforms, and products. Develop and maintain secure-engine firmware on a RISC-V based secure processor. Deliver end to end HDCP solution across multiple software stacks spanning Linux, Android for automotive, and consumer platforms. Drive firmware production signing readiness, rollback-prevention strategies, and key-provisioning workflows. Serve as the security primary contact for the team, leading all aspects of threat modeling, static analysis, vulnerability tracking and remediation, and security compliance across all projects. Collaborate with multi-functional teams spanning HW design, boo