Security Controls Assurance Lead Jobs

Hydraulic Systems Engineer (Associate, Experienced, or Lead) Company: The Boeing Company Boeing Defense, Space & Security (BDS) Mobility, Surveillance and Bombers (MS&B) B-52 Commercial Engine Replacement Program (CERP ) is seeking a Hydraulic Systems Engineer (Associate, Experienced or Senior) to join the Systems Engineering, Integration, and Test (SEIT) team . The selected candidate will drive engineering excellence on this complex development program in Oklahoma City, OK . Position Responsibilities: Operate as the team’s Subject Matter Expert on the B-52 Hydraulics Subsystem. Lead systems and multifunctional engineering efforts for the SEIT IPT, ensuring adherence to technical quality standards throughout the product lifecycle Collaborate with cross-functional teams, including design, manufacturing, and quality assurance, to define and implement systems engineering processes and best practices Conduct trade studies and risk assessments to inform design decisions and optimize system performance, cost, and schedule Develop and maintain system requirements, interface control documents, and verification and validation plans to ensure compliance with customer specifications and regulatory standards Oversee the integration of hardware and software components in System Integration Labs in Oklahoma City Oversee the verification and test of hardware and software components supporting the modification in San Antonio

About the Team DoorDash’s Internal Audit team provides independent assurance that the company’s risk management, governance, and internal control processes are operating effectively. We are a small team that is looking to expand and bring on motivated professionals. We don’t think of ourselves as a typical audit function - we are obsessively focused on risks to the organizations which reflects in the type of projects we support and execute. DoorDash is rapidly growing - we are expanding in multiple geos and launching new products. This exciting growth allows us to drive creative analysis, strategy, and solutions. Our focus areas include financial, operational, regulatory, security, IT, and more. About the Role We are seeking a Senior Director, IT Internal Audit to lead the strategy, execution and evolution of DoorDash’s global IT audit function. In this highly visible role, you will help shape the technology risk management practices across DoorDash - you will oversee a broad portfolio of audits, including IT SOX, cybersecurity, data governance, AI governance, and operational technology. You will report directly to the Chief Audit Executive and serve as a strategic advisor to DoorDash’s technology, security, and engineering leaders. You will bring deep technical audit expertise, exceptional leadership skills, and a passion for innovation to build and lead a world-class IT audit organization that scales with the business. This role demands someone who can balance strategy with execution (and isn’t afraid to roll up their sleeves) — a leader who can anticipate emerging technology risks, foster strong cross-functional partnerships, translate complex technical concepts into meaningful business insights, and be ready to operate at the lowest level of detail. You will partner with teams across Security, Platform Engineering, Data Engineering, Privacy Legal, AI, Product, and Compliance to strengthen our risk posture and drive a data-driven approach

Reolink , a leader in intelligent visual technology for homes and businesses, was founded in 2009 by a group of engineers with a strong commitment to and passion for smarter security solutions. Our products are now trusted by millions of users across more than 110 countries and regions worldwide. Building on this trust, we continue expanding our presence and bringing our innovations to more markets around the globe. Reolink remains committed to delivering advanced, reliable, and user‑centric solutions that empower people to protect what matters most. Position: Group Internal Audit Manager 5 Work Days Per Week Office Near Tai Seng MRT, Singapore Medical Benefits Provided Entitled to Yearly Bonus & Performance Bonus ROLE PURPOSE Reolink is a Singapore-headquartered consumer electronics group delivering smart home security cameras and cloud subscription services to customers worldwide. The Group operates 16 legal entities across Asia-Pacific, Europe and North America on a single NetSuite ERP platform, and is strengthening its Singapore headquarters as the Group’s regional hub for finance, governance and control. This newly created role will establish and lead the Group’s internal audit and governance function. Reporting to the Group CFO, with a functional line to the Audit Committee / Board, the incumbent will build a risk-based assurance framework fit for a fast-growing, multi-jurisdiction group and support the organisation’s journey toward listed-company governance standards. REQUIREMENTS Degree in Accountancy, Finance or related discipline. Professional qualification required: CA (Singapore) / ACCA / CPA / ICAEW. CIA, CISA or CRMA is a strong advantage. 8–12 years of experience in internal audit , risk advisory or external audit, including at least 3 years with a Big 4 or established risk advisory firm. Minimum 3 years in an in-house internal audit or governance lead role within a multinational o

WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Why we're hiring: Provide senior hands-on PAM engineering, owning complex change and integrations and assuring Kyndryl-delivered operations What you'll be doing: Engineer and assure complex PAM configuration, onboarding and integrations. Act as senior technical escalation above the Kyndryl run layer. Automate privileged-account onboarding and operational tasks. Assure the quality and security of partner-delivered change. Support audit remediation and control hardening. Own complex and small change in-house and provide senior technical escalation above the Kyndryl run layer. Assure the quality, safety and standards-compliance of Kyndryl-delivered change. Coach and uplift partner engineers and engineer out recurring failure. What you'll need: Expert PAM platform engineering and integration. Expert Beyond Trust product knowledge Vaulting, session management and connector configuration. Automation and scripting. Security hardening and troubleshooting. Change assurance and standards enforcement. Extensive hands-on senior engineering experience with the relevant platforms. Relevant senior technical certific

About the Team The OpenAI Risk & Audit team is building an enterprise risk capability for a company operating at the frontier of AI. We help leaders identify, understand, and manage the risks that matter most while enabling responsible innovation and durable growth. We are developing a modern enterprise risk management (ERM) program and the technology foundation that powers it. Our work connects risk strategy, governance, compliance, and assurance with high-quality data, automated workflows, continuous monitoring, and AI-enabled analysis. We partner across Finance, Security, Legal, Engineering, Product, People, Operations, and Internal Audit, and provide clear reporting to senior leadership and the Board. We aim to make risk ownership practical, decision-useful, and embedded in how OpenAI builds and scales. About the Role As the Head of Enterprise Risk Management, you will help build and lead an integrated ERM program and the ERM platform that supports it. You will establish common risk language, governance, and decision processes while translating them into scalable systems, data products, and workflows. You will own enterprise risk assessments, maintain a centralized risk register, develop risk appetite and key risk indicators, and help leaders evaluate significant changes such as new products, markets, partnerships, major systems, and strategic investments. This is a hands-on leadership role at the intersection of risk, operations, and technology. You will work with technical and business teams to connect source systems, improve data quality, automate evidence and control monitoring, and use AI to surface emerging risks and accelerate analysis. You will also help create a strong risk culture, coordinate assurance across the three lines, and communicate complex issues with clarity and sound judgment. This is an opportunity to build a next-generation capability from the ground up. This role is based in San Francisco, CA. We use a hybrid work model of 3 days in

About the opportunity We are seeking an Internal IT Auditor to conduct the full IT audit cycle, ensuring operational effectiveness, reliability, and regulatory compliance across our internal IT environments and critical ICT third-party ecosystems. Our Internal Audit team provides independent assurance over risk and control management, and follows proactive risk mitigation and robust governance to safeguard our digital banking environment. This is a unique opportunity to play a pivotal role in shaping our IT resilience, where you will engage directly with internal architecture teams and critical external vendors to navigate the evolving landscape of digital banking and European financial regulations. In this role, you will: Execute the full audit cycle: Perform comprehensive risk and control management over IT operations to ensure effectiveness, reliability, and adherence to established professional and regulatory standards. Audit critical ICT services & vendors: Lead audits of third-party vendors, outsourced service providers, and cloud infrastructures, evaluating their control environments and how internal processes govern these external services. Analyze data and IT processes: Obtain and evaluate documentation, flowcharts, and data using data-driven audit approaches for system development, IT security, and vendor management. Deliver impactful reporting: Prepare detailed Internal Audit reports that translate complex technical findings into business-relevant insights and actionable recommendations for senior management. Drive continuous improvement: Continuously monitor the IT and ICT vendor risk landscape, facilitate alignment discussions, and advise management on best practices and risk remediation actions. What you need to be successful: 6 years of significant experience functioning as an Internal IT Auditor at an international company within a regulated environment (preferably a bank, financial institution, fintech, or an audit/consulting firm). Holding prof

Présentation du poste : Au sein de l’équipe technique d’Artefact, vous rejoignez une communauté de Software Engineers en tant que Manager et référent technique auprès de nos grands comptes clients. Dans un environnement à forte accélération sur la Data et l’IA Générative, vous intervenez pour piloter des projets d'ingénierie complexes, encadrer les équipes et porter l'excellence opérationnelle et technique. Ce qu’on attend de vous : En tant que Manager, vous supervisez la conception et le déploiement d'architectures critiques (Data Platforms, Agentic Platforms) tout en assurant l'encadrement, le mentorat et le développement de carrières des membres de l'équipe. Vous jouez un rôle clé dans la relation client, le cadrage technique des affaires et le rayonnement de la communauté tech Artefact. Vos missions : Piloter et encadrer la réalisation de projets Data & IA complexes (ex. solutions multi-agents LangGraph sur Kubernetes, architectures Médaillon). Superviser le cadrage et la construction de Data Platforms robustes sur GCP, AWS, Azure ou Snowflake en garantissant l'alignement avec les meilleures pratiques d'Infrastructure as Code (IaC) et d'ingénierie logicielle. Définir la vision technique des projets GenAI / LLM (orchestration, évaluation, contrôle) et promouvoir l'usage quotidien des coding agents au sein des équipes. Assurer la gestion de carrière, le suivi de performance et le mentoring continu des Software Engineers sous votre responsabilité. Mener les cadrages techniques auprès des clients grands comptes et défendre avec pédagogie les choix stratégiques et d'architecture. Veiller au respect des standards de qualité de code, de sécurité et de livrables sur l'ensemble de vos périmètres applicatifs. Contribuer activement à l'animation de la communauté technique (Talks Tech, Guildes, REX) et participer au processus de recrutement et de montée en compétences de la pratique. Profil recherché : Expérience & Leadership : Expérience confirmée en tant que Lead

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive. Lyft connects people to transportation to change the way we live and get around our communities. Our drivers and passengers entrust Lyft with their personal information and travel details to get where they are going and expect us to keep that data safe. Lyft's Privacy and Compliance team ensures that appropriate security controls and data protections are applied to meet our compliance requirements and customer obligations We conduct security risk assessments, consult with organizational stakeholders, monitor and continuously improve Lyft's Information Security program, facilitate third-party security audits, work with engineering teams to implement, automate, and monitor security controls, develop policies, and advise on all matters related to information security assurance. We also conduct risk assessments of our third parties to ensure we understand and can mitigate any associated risk. We are looking for a highly motivated, organized, and detail-oriented individual to join our Privacy and Compliance team. As a senior member of this team, you will support our third party risk management program by conducting risk assessments and recommending mitigations. You will also help our Customer Trust team by completing inbound security and data protection questionnaires from potential partners and customers. Responsibilities: Third Party Risk Assessments Review vendor or partner requests from internal stakeholders, understanding the business purpose Work with external stakeholders to collect relevant security and data protection information from third parties Review the information and accurately assess and document the risk, and propose potential mitigations Security Questionnaires Draft responses to customer security questionnaires (e.g., CAIQ, SIG) and assist in the ma

We believe that the way people interact with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. Plaid powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like Venmo, SoFi, several of the Fortune 500, and many of the largest banks to make it easy for people to connect their financial accounts to the apps and services they want to use. Plaid’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, the company is headquartered in San Francisco with offices in New York, Seattle, Washington D.C., Raleigh, London, and Amsterdam. The Security Governance, Risk, and Compliance (GRC) team is part of Plaid’s security organization, focused on enabling the business by proactively managing information security risks and maintaining effective controls. Our mission is to reduce the likelihood and impact of security risks while operating a robust assurance program that builds trust with our customers, consumers, and data partners. We own Plaid’s security compliance frameworks, run our audits and risk programs, and partner across the company to keep Plaid’s platform secure, resilient, and aligned with industry and regulatory expectations. GRC Engineering is how we make all of that scale — turning compliance into code, evidence into telemetry, and audits into a continuous, automated capability. The Role: You will own GRC Engineering at Plaid — a foundational, high-ownership role defining an emerging discipline from the ground up. Today most of our compliance work is manual and point-in-time; you will turn it into an engineered system that is continuous, data-driven, and scalable, and set the technical direction for the field. You will: Define the discipline and the architecture — how GRC Engineering works at Plaid, no

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team The Stripe Security team is dedicated to improving the security of Stripe and its users. Our users trust us with some of their most sensitive information, and we make security a first-class consideration in everything we do. Security concerns are ever-evolving, creating an extremely dynamic environment for the Security team. The Security Governance, Risk, and Compliance (SGRC) team helps Stripe make informed security decisions, understand its risk and control posture, and represent its security program to internal and external stakeholders. The team also manages security risk arising from Stripe’s relationships with third parties by assessing their security controls, identifying and mitigating risk, and supporting informed onboarding and risk-acceptance decisions. Our work helps Stripe move quickly while maintaining clear and consistent security expectations. What you'll do Independently manage a portfolio of Third Party Security Risk Assessments (TPSRAs) for new engagements, renewals / reassessments, and material changes in relationship scope. Review security questionnaires, independent assurance reports, certifications, penetration-test results, and other evidence to evaluate third-party control effectiveness. Identify security gaps, determine proportionate remediation requirements, and clearly communicate findings to Stripe DRIs and cross-functional partners. Apply Stripe’s third-party security standards consistently, documenting assessme

Strength in Trust OneTrust’s mission is to enable innovation through the responsible use of data and AI. We believe that ensuring data is trusted shouldn’t slow teams down—it should accelerate what’s possible. This led us to develop the first technology platform for responsible data use in 2016. Today, with AI representing the latest and most impactful expansion of data yet, OneTrust is once again redefining what responsible innovation looks like. OneTrust, the AI‑Ready Governance Platform™, unifies regulatory intelligence, automation, and connected governance workflows so businesses can continue to move at the speed of AI while ensuring good governance to prevent data misuse at scale. Trusted by thousands of organizations worldwide, OneTrust is shaping the future where trusted data becomes a transformative force for business and society. The Challenge We are looking for a dynamic Senior Information Security GRC Analyst to support IT and InfoSec by performing various governance, risk, and compliance activities as part of the OneTrust InfoSec GRC team. Your Mission Customer Security Assurance & Questionnaires Own a high volume of end-to-end completion of customer security questionnaires (CAQs) , RFP security sections, and other assurance artifacts (e.g., SIG, CAIQ, custom questionnaires). Provide accurate, consistent, and defensible responses by leveraging internal evidence repositories (SOC reports, ISO certificates, policies, standards, diagrams, pen test summaries, etc.). Partner with internal stakeholders (Sales, Marketing, Customer Success, Security, Engineering, Privacy, Legal, Compliance, Product) to validate responses and resolve gaps. Customer Engagement & Security Discussions Meet with customers and prospects to explain security controls, risk posture, and compliance commitments . Present security topics with confidence and clarity—tailoring depth for technical and non-technical audiences. Support Sales and Customer Success by addressin

Leidos is seeking a detail-oriented Cybersecurity Analyst with expertise in Security Accreditation to support the assessment, authorization, and continuous monitoring of information systems. The successful candidate will ensure systems comply with government and industry cybersecurity requirements while supporting the organization's Risk Management Framework (RMF) processes. Primary Responsibilities: Lead and support the security accreditation process for information systems. Develop, maintain, and review security authorization packages. Conduct security control assessments in accordance with RMF and applicable security standards. Collaborate with system owners, engineers, and stakeholders to implement security controls. Perform security risk assessments and recommend mitigation strategies. Monitor systems for compliance with cybersecurity policies and standards. Maintain Plans of Action and Milestones (POA&Ms) and track remediation activities. Support continuous monitoring activities, including vulnerability management and security reporting. Prepare documentation for Assessment & Authorization (A&A) activities. Participate in internal and external cybersecurity audits. Stay current on cybersecurity threats, regulatory requirements, and best practices. Basic Qualifications: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience). 3–7 years of experience in cybersecurity, information assurance, or security compliance. Experience implementing or supporting the NIST Risk Management Framework (RMF). Knowledge of: NIST SP 800-37 NIST SP 800-53 NIST SP 800-171 FISMA FedRAMP (preferred) Experience with vulnerability assessment tools such as Tenabl

The opportunity We're looking for a Product Cybersecurity Engineer to help ensure that Polestar's products meet global cybersecurity standards and regulatory requirements throughout the vehicle lifecycle. In this role, you will work across concept, development, production, and post-launch operations, contributing to the implementation and validation of cybersecurity requirements that help safeguard our vehicle systems. Let us describe the challenge we offer As a Product Cybersecurity Engineer, you will play a key role in defining, integrating, and verifying technical security controls across our products. Working closely with R&D, suppliers, and cross-functional teams, you will support secure product development through threat analysis, secure design, cybersecurity validation, and regulatory compliance activities. This role is located at our HQ in Gothenburg, Sweden. What you'll do You will be responsible for implementing and validating cybersecurity requirements across the vehicle lifecycle while supporting compliance with standards and regulations such as ISO/SAE 21434 and UNECE R155. This includes: Define, decompose, trace, and maintain product cybersecurity requirements and assurance cases. Perform and/or support Threat Analysis and Risk Assessments (TARA) and risk treatment activities. Plan and execute cybersecurity validation and verification activities, including testing and reviews. Review supplier cybersecurity work products and support the closure of identified findings. Support the generation of technical evidence required for regulatory audits and type approvals. Collaborate with system architects, software and hardware teams, and functional safety teams to ensure secure integration. Contribute to the continuous improvement of security engineering methods, tools, and templates. Who you are You are an experienced cybersecurity engineer with a strong background in product or embedded cybersecurity. You enjoy working collaboratively across disciplines and a

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . As an Internal Audit Analytics Associate, you'll join the IT Internal Audit team within Finance to deliver data-driven, third-line assurance across Coinbase's global technology infrastructure and crypto-native products. You'll extract, analyze, and validate large datasets from internal systems to assess the design and operational effectiveness of IT and security controls. This role translates complex audit data requests into precise SQL-based extracts and actionable findings that directly support the audit team's control testing objectives. What you'll do: Execute in-depth data analysis to assess IT and security control effectiveness by writing complex, reusable SQL queries against Snowflake and other internal data platforms. Validate system and model changes by performing comprehensive testing of their compliance and performance impact, documenting results for relevant stakeholders. Produce accurate data extracts and reports from multiple sources, translating complex audit data requests into clear, actionable requirements and outputs. Test data ETL processes from upstream production systems into the data repository and from the repository into enterprise tools, validating completeness and accuracy at each stage. Design and enhance metrics dashboards to measure IT and security system performance and provide actionable insights to the Internal Audit team. Partner cros

A Career with Point72's Technology Team As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications. As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity while delivering real business impact for our multi-billion-dollar global business. WHAT YOU'LL DO Serve as a technical subject matter expert within our firm’s third-party information security risk management program Perform in-depth security assessments of new and existing third parties that access, process, store, or transmit firm information Evaluate the design and effectiveness of third-party security controls across technical environments and service delivery models Analyze business use cases, data flows, system integrations, and technical architectures to establish appropriate risk context Review security evidence, including assurance reports, certifications, penetration tests, vulnerability assessments, policies, and architecture documentation Assess controls across identity, cloud and infrastructure security, network security, vulnerability management, data protection, monitoring, incident response, and application security Engage third parties and internal technical stakeholders to validate responses, investigate control gaps, and evaluate remediat