Security Compliance Lead Jobs

A Career with Point72’s Technology Team As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications. As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity—all while delivering real business impact for our multi-billion-dollar global business. What you’ll do Own and operate our enterprise chat platforms supporting the firm globally Lead the strategy, planning, and execution of chat platform transitions, partnering with our front office, compliance, and technology teams to define the target state Design transition approaches that reduce friction for end users, including coexistence patterns, history preservation, identity and directory mapping, integration migrations, and phased cutover plans Administer and optimize the firm’s chat platform environments, including user provisioning, room and channel governance, and integration with internal systems Partner with the appropriate stakeholders to ensure the firm’s chat platforms operate in line with applicable regulatory and recordkeeping requirements Work with information security and compliance partners to support appropriate controls and governance across chat platforms Automate provisioning, configur

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. Position Summary: CVS Health is hiring a Lead Director for our Cloud Platform engineering teams within Digital Engineering - the AWS infrastructure, DevOps practices, and delivery pipelines that every product engineering team builds on. This Lead Director - Digital Engineering, Cloud Platform will own multiple platform engineering teams that power the products and services we deliver to our members, and every improvement you make - faster delivery, lower cost, smarter automation - compounds across everything we ship. This is a strategic architecture and leadership role: you’ll set technical direction for AWS, DevOps, and CI/CD; own the platform’s security and compliance posture; run cloud cost as a managed portfolio; build the self-service tooling that lets developers move faster; and lead AI adoption across both the platform and the teams that depend on it. You will bring deep technical depth, financial acumen to run infrastructure like a business, and the leadership presence to make this platform a genuine competitive advantage. This role reports to an AVP within Digital Engineering and partners directly with executive engineering leadership. What You’ll Be Doing: Setting the cloud platform strategy, target-state AWS architecture, and multi-year roadmap in partnership with Product, Architecture, Security, and enterprise stakeholders Owning AWS secu

Perplexity is seeking a highly experienced Governance, Risk & Compliance Analyst to join our world-class team. You will help shape our compliance and risk management program. If you are a self-motivated, organized professional with a passion for driving compliance and building customer trust, this is an exciting chance to join a fast-growing startup and help revolutionize the way people search and interact online. What You'll Do Implement and lead frameworks such as SOC2, ISO 27001 and HIPAA. Ensuring compliance with certification requirements Ensure and maintain compliance with GDPR, CCPA, CPRA and other privacy regulations Design and build scalable audit management processes and documentation systems that will support future expansion to additional compliance frameworks Build internal GRC platform and tooling Conduct risk assessments and mitigate data security and compliance risks Write, update and enact policies capturing security, privacy, and AI safety requirements Follow and help shape the AI regulatory and standards landscape to keep the company at the forefront of industry developments and best practices What You'll Bring 6+ years of experience leading engagements in audit and compliance Experience translating complex compliance requirements into scalable automation using AI agents and custom built tooling Worked in high tech companies in cloud-native environments Able to translate complex compliance requirements into clear and actionable work-streams Strong commitment to cross-functional collaboration with IT, Security, GTM, and Engineering Self-motivated, detailed and organized, with a diligent approach to project completion Excellent written, verbal, and interpersonal communication skills

Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! Figma's GRC team helps build and maintain trust with our users, regulators, business partners, and the organizations that rely on Figma every day. We partner across the company to strengthen security, manage risk, maintain compliance, and scale the programs that support our continued growth. We're growing our team and looking for security, risk, and compliance professionals across several disciplines. Whether your expertise is in compliance, risk management, governance, GRC tooling, or customer trust, you'll have the opportunity to build programs, improve processes, and help shape how Figma scales security and trust. Roles we hire for on this team: Compliance Management Lead compliance and certification programs across security and regulatory frameworks Manage audit cycles, partner with external assessors, and drive audit readiness initiatives Improve controls, processes, and evidence management practices across the organization <s

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Staff Backend Engineer at GitLab, you will help shape a major investment in our Software Supply Chain Security offering. In this role, you'll serve as a senior technical leader for backend systems that help customers secure how software is built, verified, and delivered inside the GitLab platform. You'll work on foundational capabilities across package policy enforcement, build provenance, artifact signing, and malicious package detection, with a strong focus on enterprise-grade security and performance. You'll define architecture before systems are built, write clear technical proposals, and guide i

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. Vanta for Government (V4G) is how we bring that mission to the public sector. As federal compliance undergoes its biggest shift in a decade — FedRAMP 20x, machine-readable authorization, OSCAL — we're building the platform that turns federal frameworks into automated, continuously monitored product experiences. The GRC Subject Matter Experts on this team are the people who make that possible. As Vanta's GRC Subject Matter Expert for V4G , you'll own federal compliance content used by every customer pursuing or maintaining federal authorization on our platform. This is an interpretation-and-authoring role, not a compliance program administration role: your job is to interpret underlying control requirements, identify where FedRAMP modifies or constrains the NIST framework, and translate those interpretations into precise, technically testable guidance that engineering can build and customers can act on. The content you write ships as product — a five-person startup and a Fortune 100 CSP both receive it — so calibrating depth, precision, and universality is the core craft. You'll join Vanta's Security organization, which directly influences product development, facilitates the creation of automated GRC solutions for customers, and provides expert advisory services across the company. What you’ll do as a V4G GRC SME at Vanta: Build and own federal compliance frameworks — Lead the creation, enhancement, and lifecycle management of controls, evidence requirements, and implementation guidance for FedRAMP (Low/Moderate/High), NIST SP 800-53, NIST SP 800-171, CMMC, DFARS, and StateRAMP. Author clear control rationales, acceptance crite

Location: Kfar Saba, IL (hybrid) ERGO NEXT's mission is to help entrepreneurs thrive. We’re doing that by building the only technology-led, full-stack provider of small business insurance in the industry, taking on the entire value chain and transforming the customer experience. Simply put, wherever you find small businesses, you’ll find ERGO NEXT. Since 2016, we’ve helped hundreds of thousands of small business customers across the United States get fast, customized and affordable coverage. We’re backed by industry leaders in insurance and tech, and we still have room to grow - that’s where you come in. NEXT is expanding its role within the ERGO Group as a software and SaaS platform provider. As our platform capabilities grow beyond the US and into Europe, we are building a dedicated GRC capability to support European regulatory, security, privacy, operational resilience, and assurance expectations. We are looking for a proactive, experienced GRC Manager to build and lead our Europe Platform Governance domain. This person will work at the intersection of GRC, engineering, product, security, privacy, legal, and ERGO Group stakeholders. The role requires someone who can translate complex regulatory and group requirements into practical controls, partner effectively with technical teams, and build scalable governance processes from the ground up. This is a high-impact role for a self-starter who is comfortable with ambiguity, experienced in regulated technology environments, and capable of building new programs while maintaining strong execution discipline. What you’ll do Build and lead the GRC domain supporting NEXT’s expansion into ERGO Europe. Translate requirements from DORA, GDPR, the EU AI Act, ERGO Group standards, and related regulatory expectations into practical governance, controls, and evidence processes. Partner with Engineering, Product, Security, Privacy and Legal to embed compliance and risk requirements into platform design and software delivery

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. Overview of the role We're looking for a seasoned Threat Intelligence Engineer to join us as a dedicated Senior Security Engineer, TI. You'll be joining a program established a couple of years ago, with a solid foundation already in place: reporting templates, tooling, feeds, and industry connections built out by the Security Operations team over that time. Your mission will be to provide actionable intelligence that empowers GitLab to make informed, proactive decisions about security. We want to get in front of threats before they materialize - using intelligence to see around corners and anticipate the next attack. We'll

Sr. GRC Engineer The Team + The Role Pendo's Information Security team protects the data entrusted to Pendo and helps ensure our products are built with security and privacy by design. The team spans Security Operations, Product Security, and Compliance and Risk. With a small team and broad scope, the work directly supports the security, resilience, and trust of Pendo's products and operations. The Sr. GRC Engineer is an AI-first technical leader who helps drive the evolution of Pendo's governance, risk, and compliance program. This role independently leads complex compliance, risk, and incident-response work while identifying program maturity gaps, translating security risk into business terms, and contributing to security roadmap and investment decisions. Success means building durable controls and programs that reduce risk and operational friction, not simply completing audits. This role is based in our Raleigh office. What this looks like day-to-day AI-driven compliance and operations acceleration: Use AI to accelerate audit evidence preparation, policy documentation, control testing workflows, and regulatory research. Evaluate GRC platform automation capabilities and integrate AI tooling where it reduces manual overhead, then document and share effective approaches with the team. Security program strategy and roadmap: Identify maturity gaps across compliance and security operations and translate them into prioritized roadmap recommendations grounded in business risk. Contribute to security investment discussions, clarify tradeoffs between coverage, cost, and risk, and anticipate emerging regulatory requirements before they become audit findings. Compliance program ownership: Own one or more regulatory compliance programs end-to-end, including SOC 2 Type II, ISO 27001/42001, PCI-DSS, GovRAMP, or FedRAMP. Lead control design, evidence collection, auditor relationships, and remediation tracking to maintain effective and durable compliance programs. Risk assessment

Who We Are Verkada is transforming how organizations protect their people and places with an integrated, privacy-sensitive AI-powered platform that includes solutions for video security, access control, air quality sensors, alarms, intercoms, and visitor management. We’ve got serious momentum in the market: more than 30,000 customers (including 100+ of the Fortune 500), a $5.8B valuation , more than $1 billion in annualized bookings, and backing from CapitalG, Sequoia Capital, General Catalyst, Felicis Ventures, Next47 and more. Physical AI is one of the most consequential technology shifts of our time, and Verkada is at the center of it. You can look at all kinds of communities to see our platform’s impact in the world. It's the retailer that uses our agentic AI to deter theft before it happens. The warehouse that uses AI-powered alerts to make sure its team is protected on the floor with proper PPE. The school that’s alerted to a threat in real-time and triggers a lockdown in seconds, not minutes. We’re rapidly scaling this impact: today, more than 2 million Verkada devices are deployed across 170+ countries. About the Role Build and lead the GRCA function within Verkada’s Security Team. Manage risks, scale and meet Verkada’s growing compliance needs. Curate information provided to customers about Verkada’s security practices. You'll build scalable, automated programs that enable rapid business growth while maintaining customer trust. As Verkada expands globally with increasing enterprise customers, this role is critical to meeting sophisticated security and compliance expectations that directly impact revenue and risk management. What You'll Do Work cross functionally with Security, IT, Engineering, Product and Legal to provide guidance on security controls implementation including: effectiveness, implementation and automation Research, build and maintain tooling for testing and continuous monitoring of security controls across multiple platforms incl

WHO WE ARE: Zinnia is the leading technology platform for accelerating life and annuities growth. With innovative enterprise solutions and data insights, Zinnia simplifies the experience of buying, selling, and administering insurance products. All of which enables more people to protect their financial futures. Our success is driven by a commitment to three core values: be bold, team up, deliver value – and that we do. Zinnia has over $180 billion in assets under administration, serves 100+ carrier clients, 2500 distributors and partners, and over 2 million policyholders. WHO YOU ARE: As Product Manager for Customer Identity & Access Management (CIAM), you will help shape and deliver how carriers, distributors, partners, and policyholders securely access Zinnia’s platform. Working alongside senior product leadership, you will own the backlog and delivery for parts of the identity product area — authentication, authorization, and the user lifecycle — balancing security and compliance with a smooth user experience. You will partner day to day with Engineering and Security to turn requirements into shipped features. WHAT YOU’LL DO: Own the product backlog and contribute to the CIAM roadmap across consumer (policyholder), partner (distributor/agent), and workforce identity. Write clear requirements and user stories for identity capabilities - authentication (SSO, MFA, passwordless), authorization (RBAC/ABAC, delegated access), and the user lifecycle (registration, provisioning/SCIM, recovery, deprovisioning). Work with Engineering and Architecture on identity protocol decisions and implementation (OAuth 2.0, OpenID Connect, SAML, SCIM). Contribute to build-vs-buy and platform evaluations for identity providers, and help maintain the integration approach across Zinnia products. Balance security, privacy, and usability — helping reduce friction while protecting against account takeover, credential stuffing, and abuse. Partner with Security, Risk, and Compliance to en

WHO WE ARE: Zinnia is the leading technology platform for accelerating life and annuities growth. With innovative enterprise solutions and data insights, Zinnia simplifies the experience of buying, selling, and administering insurance products. All of which enables more people to protect their financial futures. Our success is driven by a commitment to three core values: be bold, team up, deliver value – and that we do. Zinnia has over $180 billion in assets under administration, serves 100+ carrier clients, 2500 distributors and partners, and over 2 million policyholders. WHO YOU ARE: As Product Manager for Customer Identity & Access Management (CIAM), you will help shape and deliver how carriers, distributors, partners, and policyholders securely access Zinnia’s platform. Working alongside senior product leadership, you will own the backlog and delivery for parts of the identity product area — authentication, authorization, and the user lifecycle — balancing security and compliance with a smooth user experience. You will partner day to day with Engineering and Security to turn requirements into shipped features. WHAT YOU’LL DO: Own the product backlog and contribute to the CIAM roadmap across consumer (policyholder), partner (distributor/agent), and workforce identity. Write clear requirements and user stories for identity capabilities - authentication (SSO, MFA, passwordless), authorization (RBAC/ABAC, delegated access), and the user lifecycle (registration, provisioning/SCIM, recovery, deprovisioning). Work with Engineering and Architecture on identity protocol decisions and implementation (OAuth 2.0, OpenID Connect, SAML, SCIM). Contribute to build-vs-buy and platform evaluations for identity providers, and help maintain the integration approach across Zinnia products. Balance security, privacy, and usability — helping reduce friction while protecting against account takeover, credential stuffing, and abuse. Partner with Security, Risk, and Compliance to en

About Mixpanel Mixpanel is the leading product intelligence and analytics platform, trusted by more than 29,000 companies to help understand how people use the products they build. By combining powerful analytics with AI that knows your business, Mixpanel helps teams see what’s working, diagnose what’s not, and decide what to build next. Learn more at mixpanel.com . About the Role As Mixpanel scales into the enterprise, this role is strategic: you'll own the systems and surface area that determine whether IT and security teams can confidently standardize on Mixpanel. Product Platform's mission is to earn the trust of enterprise-grade customers — organizations with formal procurement, security review functions, and a long institutional memory of rolling software out — across three dimensions: reliable performance at scale, security and compliance, and frictionless adoption by large organizations. You'll own Mixpanel's core enterprise management surface: identity and access management (RBAC, SSO, passkeys, audit logging), admin and account orchestration (settings, provisioning, organization setup), the public API and extensibility surface, and the consistency of the design system and shared components every product team builds on. The surface area is growing, too — conversations are underway about extending the platform's remit into adjacent areas like plan management as Mixpanel's enterprise footprint expands. What You'll Do Define and drive the roadmap for Mixpanel's enterprise management surface — identity and access management, SSO and authentication, audit logging, admin controls, and account/org settings Anticipate requirements from enterprise security reviews, compliance obligations, and the large organizations evaluating Mixpanel, and translate them into a prioritized roadmap Own the consistency and reliability of shared platform foundations — the design system and components, public APIs, and the patterns every other product team builds on Partner with engine

Who are we? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us! About North: North is Cohere's cutting-edge AI workspace platform, designed to revolutionize the way enterprises utilize AI. It offers a secure and customizable environment, allowing companies to deploy AI while maintaining control over sensitive data. North integrates seamlessly with existing workflows, providing a trusted platform that connects AI agents with workplace tools and applications. Why This Role? Cohere’s team partners with Canadian public sector organisations to unlock transformative value through secure, ethical deployment of Generative AI (GenAI) solutions. We work collaboratively to address complex societal challenges while maintaining the highest standards of data security and compliance. You will work directly with public sector customers to quickly understand their greatest problems and design and implement solutions using Cohere's stack. This role offers a unique opportunity to shape how enterprises harness the power of AI in real-world applications. As a bridge between our core North product and our clients’ engineering teams, you’ll be at the forefront of solving complex problems and securely integrating A

Who are we? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us! About North: North is Cohere's cutting-edge AI workspace platform, designed to revolutionize the way enterprises utilize AI. It offers a secure and customizable environment, allowing companies to deploy AI while maintaining control over sensitive data. North integrates seamlessly with existing workflows, providing a trusted platform that connects AI agents with workplace tools and applications. Why This Role? Cohere’s team partners with Canadian public sector organisations to unlock transformative value through secure, ethical deployment of Generative AI (GenAI) solutions. We work collaboratively to address complex societal challenges while maintaining the highest standards of data security and compliance. You will work directly with public sector customers to quickly understand their greatest problems and design and implement solutions using Cohere's stack. This role offers a unique opportunity to shape how enterprises harness the power of AI in real-world applications. As a bridge between our core North product and our clients’ engineering teams, you’ll be at the forefront of solving complex problems and securely integrating A