Security Controls Assurance Lead Jobs

Scale AI sits at the intersection of frontier AI, enterprise software, and national security. We safeguard high-value assets: proprietary AI data and infrastructure, a global contributor ecosystem, and sensitive enterprise and government customer data. As our International Head of Security, you will own and unify Scale’s security strategy across our non-US affairs: Global Public Sector and non-US Enterprise deals. You will drive the execution, customer engagements and compliance with frameworks such as GDPR, ISO27001, UK Cyber Essentials Plus, the EU AI Act, NIS2 and country-specific sovereignty requirements while staying tightly aligned to our global secure-by-default architecture set by the Head of Security. As we expand into FDE-led Agentic Applications while continuing to serve our data and model customers, our security surface area spans internal systems, external products, distributed contributors, and high-assurance government environments. You are a builder who believes security is a product feature, not a hurdle — and who can raise both our defensive maturity and our ambition in frontier AI security. What You'll Do Execute the Global Security Strategy Across International Markets Drive execution of Scale's multi-year secure-by-default roadmap across non-US markets, surfacing regional needs into global architecture decisions. Translate regional regulatory requirements (GDPR, ISO 27001/27017/27018, SOC 2, UK Cyber Essentials Plus, EU AI Act, NIS2, and country-specific data residency / sovereign-cloud rules) into concrete engineering controls. Track regional security metrics and accountability, and represent the international perspective in global prioritisation, audits, and roadmap reviews. Lead Regional Security Engineering & Threat Detection Own the regional execution of identity, fine-grained RBAC, secrets management, CI/CD hardening, encryption, logging, and infrastructure protection with a particular focus on cross-border data flows and in-region tel

Most security assurance work is reactive: a customer asks, a team scrambles, an answer goes out. This role exists to end that cycle. As a Senior Staff Analyst, you’ll own a named portfolio of our most significant customers from a security perspective, and get ahead of what they need — their regulatory environment, their audit calendar, their risk appetite, their control expectations — well enough to have the evidence ready before the request arrives. You’ll lead customer security audits hands-on, sit across from customer security teams as a peer rather than a form-filler, and build account security plans that make the next assessment predictable instead of painful. This is deliberately a hands-on senior individual contributor role. You’ll spend your time in audits, in customer conversations, and in the detail of controls and evidence — not in a management chain. If you’ve got deep SOC 2 and ISO 27001 knowledge, real technical range across cloud architecture, identity and vulnerability management, and the presence to hold a room with a sceptical CISO, this is a portfolio you can genuinely own. Here’s a breakdown of what you’ll do (not all of it, just the important stuff): Own a portfolio of strategic accounts as their dedicated security point of contact, building durable relationships with their security, risk, compliance and procurement teams. Lead customer security audits and assessments hands-on — scoping, preparing evidence, running the sessions, defending control design and driving findings to closure with internal owners. Build and maintain an account security plan for each account: their frameworks and regulators, audit and reassessment cycles, known concerns, open items and the roadmap commitments they care about. Anticipate requirements before they’re raised, tracking regulatory change, industry expectations and each account’s compliance calendar so documentation and evidence are staged in advance. Act

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . We're hiring a Manager, GRC to join our Technology Risk & Controls team within Security and lead second line of defense advisory coverage across critical technology and security domains. This team evaluates risk posture, improves control design, and helps engineering, infrastructure, and security leaders make better, risk-informed decisions. You'll both manage a team and directly own advisory coverage for domains that may include disaster recovery and resiliency, SDLC, artificial intelligence, identity and access management, and supply chain - building trusted partnerships that ensure Coinbase addresses its most critical risks in its most critical functions. What you'll do: Lead second line advisory coverage for key technology and security domains, assessing risk exposure, control effectiveness, policy alignment, and emerging issues across the business. Partner with engineering and technology teams to evaluate domain posture and identify where additional controls, remediation, or governance improvements are needed. Review and challenge the design of new and existing risks and their corresponding controls to ensure our mitigations are scalable, effective, and aligned to business, risk, and regulatory expectations. Drive coordination across risk, controls, policy, audit, and assurance teams to translate incidents, audit findings, and regulatory expectations i

Location: Kfar Saba, IL (hybrid) ERGO NEXT's mission is to help entrepreneurs thrive. We’re doing that by building the only technology-led, full-stack provider of small business insurance in the industry, taking on the entire value chain and transforming the customer experience. Simply put, wherever you find small businesses, you’ll find ERGO NEXT. Since 2016, we’ve helped hundreds of thousands of small business customers across the United States get fast, customized and affordable coverage. We’re backed by industry leaders in insurance and tech, and we still have room to grow - that’s where you come in. NEXT is expanding its role within the ERGO Group as a software and SaaS platform provider. As our platform capabilities grow beyond the US and into Europe, we are building a dedicated GRC capability to support European regulatory, security, privacy, operational resilience, and assurance expectations. We are looking for a proactive, experienced GRC Manager to build and lead our Europe Platform Governance domain. This person will work at the intersection of GRC, engineering, product, security, privacy, legal, and ERGO Group stakeholders. The role requires someone who can translate complex regulatory and group requirements into practical controls, partner effectively with technical teams, and build scalable governance processes from the ground up. This is a high-impact role for a self-starter who is comfortable with ambiguity, experienced in regulated technology environments, and capable of building new programs while maintaining strong execution discipline. What you’ll do Build and lead the GRC domain supporting NEXT’s expansion into ERGO Europe. Translate requirements from DORA, GDPR, the EU AI Act, ERGO Group standards, and related regulatory expectations into practical governance, controls, and evidence processes. Partner with Engineering, Product, Security, Privacy and Legal to embed compliance and risk requirements into platform design and software delivery

Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The role We are looking for a Staff Cryptography Engineer to help lead SoFi’s enterprise readiness for post-quantum cryptography and long-term cryptographic resilience. This role sits within our Security Assurance organization and will partner closely with security, engineering, infrastructure, product, and business stakeholders to assess, modernize, and strengthen cryptographic controls across the enterprise. This is a highly cross-functional and strategic role. The ideal candidate brings deep applied cryptography expertise, strong engineering and architecture judgment, and the ability to drive complex security initiatives in ambiguous environments. You will help build SoFi’s cryptographic inventory, identify where cryptographic keys, protocols, algorithms, certificates, and libraries are used, and guide teams through the implementation of quantum-resistant and crypto-agile solutions. What you’ll do Lead efforts to assess and improve SoFi’s enterprise cryptographic posture, with a focus on post-quantum cryptography preparedness and crypto-agility. Build and maintain an inventory of cryptographic assets, including keys, certificates, algorithms, protocols, libraries, services, and business-critical systems. Partner with product, engineering, infrastructure, cloud, and security teams to identify cryptographi

SmartBear delivers application integrity for modern tech stacks, ensuring continuous, measurable assurance that software just works as intended with governance to operate at AI speed and scale. SmartBear offers deep test automation, API lifecycle management, and observability capabilities. With integrations across the SDLC, it sets a new quality standard for application delivery teams. SmartBear is trusted by developers, testers, and software engineers across 32,000 organizations, including 75% of the largest financial institutions and industry leaders such as Adobe, JetBlue, and Microsoft. SmartBear’s open source tools are downloaded more than 100 million times a month and have earned over 30,000 GitHub stars from the developer community. With its best-loved brands, including Swagger, TestComplete, Reflect, QMetry, Zephyr, and more, SmartBear meets customers where they are to make our technology-driven world a better place. Learn more at www.smartbear.com , or follow us on LinkedIn , X , and Reddit . At SmartBear, you will be part of a dynamic team solving one of the most critical challenges facing modern businesses: ensuring the integrity of software in an AI-driven world. Whether you are working directly with customers, driving go to market strategies, supporting operations, building products, or enabling teams, your contributions help shape the future of software quality for organizations worldwide. Join us in our mission. Procurement Manager Own SmartBear’s centralized procurement function as an individual contributor, partnering across the business to create a streamlined, compliant purchasing experience. Maximize the value of vendor relationships through strategic sourcing, negotiation, contract management, spend analysis, and usage optimization. Partner with Finance, Legal, Information Security, and business stakeholders to manage third-party spend, strengthen controls, and mitigate supplier risk. About the Role Oversee and support the procurement proc

ABOUT BASETEN Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F , led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to to ship AI products. THE ROLE We are seeking an experienced and detail-oriented GRC (Governance, Risk, and Compliance) Manager to build, support, and continuously enhance Baseten’s security governance, compliance, and privacy programs. As one of the early members of our security organization, you will play a key role in ensuring our platform meets and exceeds the highest standards for privacy, trust, and regulatory compliance. In this role, you’ll work cross-functionally with engineering, operations, legal, and leadership teams to develop policies, manage audits, and implement controls aligned with frameworks such as SOC 2, ISO 27001, ISO 27701, and FedRAMP. You’ll be instrumental in building scalable processes to manage risk, support customer assurance, and uphold Baseten’s commitment to security and compliance as we grow. RESPONSIBILITIES Governance & Policy Development: Design, implement, and maintain security governance frameworks, policies, and procedures that align with Baseten’s risk posture and industry best practices. Risk Management: Build and manage the company-wide risk assessment program, identifying, tracking, and mitigating key security and compliance risks. Compliance Operations: Lead efforts to achieve and maintain compliance with SOC 2, ISO 27001/27701, HIPAA, FedRAMP and other applicable standards and regulations. Audit & Certification Management: Coordinate external audits and certification processes, ensuring e

Join us in building the future of finance. Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic cultural and financial shift, keep reading. About the team + role We are building an elite team, applying frontier technologies to the world's biggest financial problems. We're looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn't a place for complacency, it's where ambitious people do the best work of their careers. We're a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. The Internal Audit function at Robinhood provides independent, objective, and timely assurance on the effectiveness of governance, risk management, and internal controls — helping to strengthen the organization's overall control ecosystem. Our team oversees governance across the Company and its regulated entities, and facilitates the communication of risk management information between RHM leadership and the Board of Directors and its Committees. We work closely with cross-functional partners across Brokerage, Crypto, Security, and Engineering to drive meaningful improvements to the control environment. We're a collaborative, high-performing group of auditors who take their work seriously — and love what they do! As an Internal Audit Senior Associate , you will play a key role in executing internal audits for Robinhood's International Entities, spanning Brokerage and Crypto products and integrated audits across multiple lines of business and jurisdictions. You will be a technically skilled, collaborative, and analytical professional with a strong understanding of risks, controls, and processes in a regulated Fintech setting. You'll contribute across the full audit lifecycle

About the Team OpenAI’s mission is to ensure that general-purpose artificial intelligence benefits all of humanity. We believe that achieving our goal requires effective engagement with public policy stakeholders and the broader community impacted by AI. Accordingly, our Global Affairs team builds authentic, collaborative relationships with public officials and the broader AI policymaking community to inform and support our shared work in these domains. We ensure that insights from policymakers inform our work and – in collaboration with our colleagues and external stakeholders – seek to shape policy so that it aligns with and supports our mission. About the Role As AI agents move from answering questions to taking action across the internet, the standards that govern identity, delegated authority, discovery, communications, agentic-commerce and payment interfaces, agent-facing web access, agent-specific provenance, and auditability will determine whether agents can operate safely, interoperably, and with clear accountability. OpenAI is looking for an Agent Standards Manager to lead execution of our external technical standards strategy for a defined set of agent standards workstreams. This role will work closely with Agent Security, Applied and Platform teams, Product, Legal, GRC, Global Affairs, and GTM to turn OpenAI’s technical architecture and controls into credible specifications, protocol profiles, assurance criteria, and implementation guidance—and to bring emerging external requirements back into product and security roadmaps before they become blockers. The positions developed here are technical standards positions, not broad public-policy positions. This is a builder’s role as much as an external-facing role. You will execute a prioritized standards plan, author and negotiate protocols, build coalitions, secure the right internal approvals, and represent OpenAI in assigned technical forums. You will also help create repeatable processes that let the compa

About the Team OpenAI’s mission is to ensure that general-purpose artificial intelligence benefits all of humanity. We believe that achieving our goal requires effective engagement with public policy stakeholders and the broader community impacted by AI. Accordingly, our Global Affairs team builds authentic, collaborative relationships with public officials and the broader AI policymaking community to inform and support our shared work in these domains. We ensure that insights from policymakers inform our work and – in collaboration with our colleagues and external stakeholders – seek to shape policy so that it aligns with and supports our mission. About the Role As AI agents move from answering questions to taking action across the internet, the standards that govern identity, delegated authority, discovery, communications, agentic-commerce and payment interfaces, agent-facing web access, agent-specific provenance, and auditability will determine whether agents can operate safely, interoperably, and with clear accountability. OpenAI is looking for an Agent Standards Architect to lead execution of our external technical standards strategy for a defined set of agent standards workstreams. This role will work closely with Agent Security, Applied and Platform teams, Product, Legal, GRC, Global Affairs, and GTM to turn OpenAI’s technical architecture and controls into credible specifications, protocol profiles, assurance criteria, and implementation guidance—and to bring emerging external requirements back into product and security roadmaps before they become blockers. The positions developed here are technical standards positions, not broad public-policy positions. This is a builder’s role as much as an external-facing role. You will execute a prioritized standards plan, author and negotiate protocols, build coalitions, secure the right internal approvals, and represent OpenAI in assigned technical forums. You will also help create repeatable processes that let the com

LHV Bank Limited is a UK-licensed bank operating across three core business segments: Retail Banking, SME Lending, and Banking Services (BaaS). The bank is a wholly owned subsidiary of LHV Group, a listed financial services provider headquartered in Estonia. LHV Bank operates under a full UK banking licence granted in May 2023. The Bank supports over 200 fintech clients with embedded financial infrastructure, provides retail savings products via digital channels, and offers SME credit solutions across the UK. In line with its regulatory responsibilities and growth ambitions, LHV Bank is committed to maintaining a robust and proportionate financial crime control environment. Expanding our services, LHV Bank now provides personal banking solutions. Our offerings include current accounts with competitive interest rates, fixed-rate bonds for long-term savings, and debit cards. Customers can conveniently access these services through the LHV App, enabling secure account opening and management. The Technology Assurance & Operational Risk Specialist is responsible for delivering independent second-line operational risk assurance, with a particular focus on ICT, information security, cyber, AI and operational resilience. The role is highly hands-on and combines independent control assurance with the ability to translate operational risk information into meaningful risk insight that supports Executive and Board decision-making and contributes to the development of a strong risk culture across LHV. The role requires a strong understanding of technology and operational risk together with the ability to independently assess control effectiveness, identify emerging risks and provide credible challenge across the Bank. Key Responsibilities Independently lead and perform second-line control assurance reviews, with particular focus on ICT, information security, cyber resilience, operational resilience, technology change and AI governance, assessing both control design and

General program information and/or position overview: Leidos’ Undersea Systems Division is seeking a QA/QC Manager in San Diego, CA to join a fast-paced R&D engineering group. This role is a unique opportunity to drive innovation in underwater vehicle systems, maritime sensors, subsea telemetry, and ISR solutions that support critical defense and national security missions at Naval Information Warfare Center, Pacific (NIWC PAC). Leidos’ USD is a recognized leader in C4ISR technologies, delivering innovative, mission-critical solutions across sensor networks, unmanned systems, and tactical platforms. We’re known for achieving “industry firsts” in the most challenging maritime domains. The selected candidate will be part of an elite, top-notch group and will be responsible for establishing, documenting, and enforcing a Quality Management System (QMS) across a multi-disciplinary project that integrates specialized sensor payloads into unmanned systems. This individual will bridge the gap between rapid Research & Development (R&D) cycles and disciplined, repeatable low-volume production requirements within a demanding Navy laboratory environment. The successful candidate must operate as an architect of process—able to assess current workflows, identify critical risk points (technical, procedural, and regulatory), and develop comprehensive Standard Operating Procedures (SOPs) and Quality Assurance plans that ensure both mission compliance and scalability under extremely aggressive timelines. Join us and be part of a world-class team delivering unmatched solutions for today's most pressing maritime missions. This position will require the candidate to maintain a Secret Clearance. This position will require the candidate to work onsite at NIWC Pacific on a 9/80B schedule (80 hours of work into nine days over a two-week period, allowing for every other Friday

About Bluevine Bluevine is the largest small business banking platform in the U.S., redefining how entrepreneurs manage their money. We create modern financial solutions, from checking and lending to payments and beyond, designed to help small business owners grow, thrive, and take control of their financial future. Our best-in-class technology, advanced security, and deep understanding of the small business community give our customers the confidence to focus on what they do best. Since 2013, we’ve supported more than 750,000 small businesses nationwide. Backed by leading investors like Lightspeed Venture Partners, Menlo Ventures, 83North, and Citi Ventures, our 500+ person global team shares one mission: to give small businesses the financial tools they need to succeed. We’re innovators driven by big ideas, collaboration, and real impact. Here, you’ll have the freedom to take ownership, grow your career, and make a difference for small business owners across America. Ready to shape what’s next? This is a hybrid role . At Bluevine, we pride ourselves on our collaborative culture, which we believe is best maintained through in-person interactions and a vibrant office environment. All of our offices have reopened in accordance with local guidelines, and are following a hybrid model. In-office days will be determined by location and discipline. ABOUT THE ROLE: As a Fraud Risk Quality Assurance Analyst, you play a critical function in ensuring that our Risk Operations align with business goals. The primary focus is on identifying common fraud and risk issues, improving the customer experience, and ensuring procedure compliance. You will achieve this by meticulously monitoring the effectiveness and quality of alert reviews and cases. This involves identifying areas of improvement across Risk Operations. WHAT YOU'LL DO: QA Evaluations : Conducts team audits/evaluations to ensure processes and procedures are properly followed. Follows strict deadlines fo

Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About the Opportunity We are seeking a highly motivated Technology and Security Risk Manager within the Second Line of Defence (2LOD). You will be responsible for continuously refining and scaling the Technology and Security oversight program, guiding first-line of defence (1LOD) execution, and providing independent risk challenge. You will be a key member of OKX's Risk team, helping to shape and scale the firm’s 2LOD Security & Data Risk programs. You’ll work closely with stakeholders including Engineering, Product, Risk, Compliance and Internal Audit. You will play a key role in developing and implementing a comprehensive Technology and Security Risk Management program. This includes 2LOD oversight of technology defects, issues, and incidents, Risk and Control Self-Assessments (RCSA), key risk indicators (KRIs) and reporting. The ideal candidate has a strong understanding of Technology Risk (including Technology Resilience, Change Management, SDLC, CI/CD pipeline, and software quality assurance) and Cybersecurity (covering internal and external threat vectors, control weaknesses, and organisational cyber h

Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About the Opportunity We are seeking a highly motivated Technology and Security Risk Manager within the Second Line of Defence (2LOD). You will be responsible for continuously refining and scaling the Technology and Security oversight program, guiding first-line of defence (1LOD) execution, and providing independent risk challenge. You will be a key member of OKX's Risk team, helping to shape and scale the firm’s 2LOD Security & Data Risk programs. You’ll work closely with stakeholders including Engineering, Product, Risk, Compliance and Internal Audit. You will play a key role in developing and implementing a comprehensive Technology and Security Risk Management program. This includes 2LOD oversight of technology defects, issues, and incidents, Risk and Control Self-Assessments (RCSA), key risk indicators (KRIs) and reporting. The ideal candidate has a strong understanding of Technology Risk (including Technology Resilience, Change Management, SDLC, CI/CD pipeline, and software quality assurance) and Cybersecurity (covering internal and external threat vectors, control weaknesses, and organisational cyber h