Security Grc Engineer Jobs

About the Team DoorDash’s Global Governance, Risk and Compliance (GRC) team helps the business scale securely through practical risk-based decisions, reliable controls and clear accountability. Our third-party risk program protects the systems and data behind our marketplace across DoorDash, Wolt, and Deliveroo. About the Role We’re looking for a Third-Party Risk Management (TPRM) Manager to lead a technically rigorous global program and shape its AI-native future. You will own the vendor security risk lifecycle, lead complex assessments of integrations with our most critical systems and data, and develop a team that makes clear, evidence-based risk decisions. You will also set the vision and build practical agentic workflows that improve how we gather evidence, assess risk, and follow through on remediation. Reporting to the Global Head of GRC, you will serve as their US-based deputy and provide GRC leadership and escalation coverage during US business hours. You will directly manage TPRM analysts together with other US-based GRC team members assigned to your organization. This role combines hands-on technical judgment, program ownership and people leadership. You will be based in the United States, preferably within the Eastern or Central timezones, with core working hours aligned to US business needs and clear handoffs with global colleagues. What you will do Run the day-to-day TPRM program operations from vendor discovery and risk tiering through due diligence, onboarding, continuous monitoring, remediation and exit. Maintain a reliable vendor inventory, policies, assessment standards, and service levels across DoorDash, Wolt, and Deliveroo, covering cloud, SaaS, business process outsourcing (BPO), and other critical suppliers. Lead assessments of vendors connected to crown jewel systems, including identity platforms, production cloud, source code and CI/CD, and sensitive-data platforms. Examine architecture, data flows, permissions, and control evidence. Use st

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. As one of Vanta’s GTM-facing GRC Subject Matter Experts, you will be a highly visible, customer-facing leader within Vanta’s Security team, responsible for representing Vanta’s Trust Management Platform to prospects and customers, as well as having a role in collaborating with internal teams to help drive and implement new features in the product. This role is specifically involved with Vanta's pre-sales and marketing motions, owning GRC conversations for net-new prospects and the expansion of existing customers' use of the Vanta product, as well as supporting marketing efforts by representing Vanta in public-facing conversations and speaking engagements. If this sounds like you, and you're excited to use your Security, Privacy, and broader GRC experience to help grow and sell our product, we'd love to hear from you. Candidates must be based in Pacific, Mountain, or Central time zones for this role. What you’ll do as a Governance, Risk, and Compliance Expert, GTM at Vanta: Partner with Vanta's Sales, Account Management, and Solutions Engineering teams and own GRC-focused discussions & activities, representing Vanta’s Trust Management Platform to prospects/customers. Become an expert in Vanta’s product features to translate how they can help optimize prospect/customer GRC workflows. Engage with executives and senior staff at prospect and customer organizations to establish relationships with customer security, privacy, and AI teams. Answer questions from internal and external stakeholders on GRC programs, including program foundation/scaling strategies, framework-specific requirements, third-party risk management, and broade

SPECIFIC JOB RESPONSIBILITIES Defensive Operations (SecOps): Design and automate the Security Incident Response (SIR) and Vulnerability Response (VR) lifecycles. Build playbooks in Flow Designer to automate threat containment and remediation. Offensive Operations: Develop custom scoped applications to track penetration testing results, manage red-team engagement lifecycles, and automate the ingestion of reconnaissance data. Compliance & GRC: Configure and customize Integrated Risk Management (IRM) modules to map technical controls to frameworks like SOC2, ISO 27001, HIPAA, and FedRAMP. Integrations & Orchestration: Build robust, secure integrations (REST/SOAP, IntegrationHub , MID Servers) with our XDR, SIEM (Splunk/Sentinel), and cloud-native services (AWS/Azure/GCP). Multi-Tenancy & MSSP Architecture: Architect a scalable, multi-tenant environment that ensures strict data isolation between clients while allowing for unified " ClickOps " and Terraform-driven automation. AI & Innovation: Explore and implement Now Assist (GenAI) and AI-heavy workflows to automate security reporting and incident summarization. Defensive Operations (SecOps): Design and automate the Security Incident Response (SIR) and Vulnerability Response (VR) lifecycles. Build playbooks in Flow Designer to automate threat containment and remediation. Offensive Operations: Develop custom scoped applications to track penetration testing results, manage red-team engagement lifecycles, and automate the ingestion of reconnaissance data. Compliance & GRC: Configure and customize Integrated Risk Management (IRM) modules to map technical controls to frameworks like SOC2, ISO 27001, HIPAA, and FedRAMP. Integrations & Orchestration: Build robust, secure integrations (REST/SOAP, IntegrationHub , MID Servers) with our XDR, SIEM (Splunk/Sentinel), and cloud-native services (AWS/Azure/GCP)

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done. We are hiring a Senior Compliance Analyst, Snowgov Compliance for our SnowTrust GRC team. You will champion key public sector compliance initiatives, safeguard Snowflake's US public sector certifications, and align IT, Legal, Product, Security, and Engineering around the work that powers Snowflake's growth in government markets. AS A SENIOR COMPLIANCE ANALYST, SNOWGOV COMPLIANCE AT SNOWFLAKE, YOU WILL: Own and maintain core FedRAMP authorization artifacts, including the System Security Plan (SSP), Contingency Plan (ISCP), and Incident Response Plan (IRP), keeping them accurate and updated annually. Manage the lifecycle of Plans of Action and Milestones (POA&M), tracking findings, risks, and remediation commitments through closure with clear ownership and realistic deadlines. Coordinate annual 3PAO assessments and continuous monitoring, acting as the primary liaison between Snowflake, assessors, and federal agency stakeholders. Advise Engineering and Operations teams so cloud configurations (FIPS 140-3 validation, boundary protection, access control, logging and monitoring) meet federal and DoD mandates. Perform gap analyses for new or evolving public sector requirements, such as emerging CMMC or GovRAMP mandates and FedRAMP Consolidated Rules, and define technical remed

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. As one of Vanta’s GTM-facing GRC Subject Matter Experts supporting Vanta for Government (V4G) opportunities, you will be a highly visible, customer-facing leader within Vanta’s Security team, responsible for representing Vanta’s Trust Management Platform to prospects and customers, bringing deep public-sector compliance expertise across FedRAMP, GovRAMP, TX-RAMP, NIST 800-53, CMMC 2.0, and NIST 800-171. You will also have a role in collaborating with internal teams to help drive and implement new V4G product features. This role is specifically involved with Vanta's pre-sales and marketing motions, owning V4G GRC conversations for net-new prospects and the expansion of existing customers' use of the product, as well as supporting marketing efforts by representing Vanta in public-facing conversations and speaking engagements. If this sounds like you, and you're excited to use your Security, Privacy, and broader Gov-focused GRC experience to help grow and sell our product, we'd love to hear from you. Candidates must be based in Pacific, Mountain, or Central time zones for this role. What you’ll do as a Governance, Risk, and Compliance Expert, GTM - V4G at Vanta: Use your expert knowledge of compliance frameworks like FedRAMP, GovRAMP, TX-RAMP, NIST 800-53, CMMC 2.0, and NIST 800-171, to advise customers regarding questions about scoping, policy creation, detailed control requirements and security best practices, and recommend implementations within Vanta’s product related to these frameworks. Partner with Vanta's Sales, Account Management, and Solutions Engineering teams and own public-sector GRC discussions & activities, repr

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done. We are hiring a Senior Compliance Analyst, Governance Programs for our SnowTrust GRC team. In this highly visible role, you will define and scale governance programs, strengthen our existing compliance architecture, and partner with leaders across IT, Legal, Product, Security, and Engineering to raise our security posture and build customer trust worldwide. AS A SENIOR COMPLIANCE ANALYST, GOVERNANCE PROGRAMS AT SNOWFLAKE, YOU WILL: Build a deep understanding of regulated-industry compliance requirements and how they apply to Snowflake. Establish and run programs that manage Snowflake's compliance posture against those requirements, including readiness, how we communicate that posture externally, and leading customer and regulator audits. Become an expert on Snowflake's control environment, security features, and best practices for customer deployments. Serve as a trusted advisor on Snowflake's security and compliance obligations and documentation, responding to customer and regulator inquiries. Build self-service resources so customers and field teams can increasingly answer compliance questions on their own. Join sales conversations to explain Snowflake's security and compliance capabilities. OUR IDEAL SENIOR COMPLIANCE ANALYST, GOVERNANCE PROGRAMS WILL HAVE: 5+ years of e

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done. We are hiring a Senior Compliance Analyst, Customer Trust for our SnowTrust GRC team. You will own the full lifecycle of multiple customer-facing and third-party assessments, from defining scope and owning the project plan to driving deliverables across projects with moderate to high business or technical complexity. You will work daily with IT, Business, Procurement, Security, and Compliance teams, and regularly with leadership, to deliver the vendor and customer projects in your portfolio. AS A SENIOR COMPLIANCE ANALYST, CUSTOMER TRUST AT SNOWFLAKE, YOU WILL: Customer Trust Respond to customer due diligence questionnaires and audits about Snowflake's security and compliance obligations. Become an expert on Snowflake's control environment, security features, and best practices for customer deployments. Serve as a trusted advisor on customer and regulator inquiries about Snowflake's security and compliance obligations and documentation. Join sales conversations to explain Snowflake's security and compliance capabilities. Third-Party Oversight, Governance, and Risk Management Conduct security risk assessments of new and existing vendors, evaluating their security posture against contractual, regulatory, and industry requirements. Partner with Legal and Procurement to make su

Strength in Trust OneTrust’s mission is to enable innovation through the responsible use of data and AI. We believe that ensuring data is trusted shouldn’t slow teams down—it should accelerate what’s possible. This led us to develop the first technology platform for responsible data use in 2016. Today, with AI representing the latest and most impactful expansion of data yet, OneTrust is once again redefining what responsible innovation looks like. OneTrust, the AI‑Ready Governance Platform™, unifies regulatory intelligence, automation, and connected governance workflows so businesses can continue to move at the speed of AI while ensuring good governance to prevent data misuse at scale. Trusted by thousands of organizations worldwide, OneTrust is shaping the future where trusted data becomes a transformative force for business and society. The Challenge Due to rapid growth and increased demand for our Privacy, Security, Data Governance, GRC, Third-Party Risk, Ethics and Compliance, and ESG platform, OneTrust is seeking a Senior UX Designer to join the User Experience Design team within our dynamic Research and Development team. This team continually improves the usability, design, and overall experience of OneTrust offerings, including web applications and other products and services. It is an excellent opportunity to improve the experience of an exceptionally wide range of users around the world. Your Mission The Senior UX Designer will work under the oversight of a Principal UX Designer and assist with all the UX responsibilities below: Design: Create deliverables for the entire design process, including information architecture, interface design, interaction design, and low and high-fidelity prototypes. Standards: Identify, define and promote UX best practices, including templates UX Metrics: Identify, collect, and analyze data to inform user experience decisions, including web metrics, customer sup

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. As a Director of Product on our Governance & Compliance team, you will own the product strategy and deliver key capabilities that enable Vanta’s GRC product to meet the needs of our largest enterprise customers. You will drive company-wide initiatives requiring deep partnerships across PMM, engineering, design, and go-to-market teams. You will help scale Vanta’s capabilities alongside our rapidly growing customer base and shape the culture and processes of the product team, all while growing the talented PMs you lead. This role reports directly to the VP of Product for Governance and Compliance. What you’ll do as a Director of Product at Vanta: Own the product strategy and roadmap for across trust, audit, and segmentation Inherit, lead and grow a product team: Hire and mentor product managers while establishing strong product thinking and execution. Evolve your area’s product strategy to an AI-first approach, enabling agentic workflows within the product and with the outside ecosystem Be accountable for critical business metrics, including: Revenue from products and add-ons under your purview. Enterprise customer adoption and satisfaction metrics. Collaborate cross-functionally to define a vision and roadmap that balances innovation, scalability, and customer impact. How to be successful in this role: 12+ years of product management experience in high-growth and complex environments. 5+ years of experience hiring, managing, and growing high-performing teams. A passion for scaling B2B SaaS products that serve SMB and enterprise customers alike. A track record of setting clear product vision and business strategies for comple

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. Vanta's Design Systems team is the foundational layer that powers visual consistency, design quality, and engineering velocity across all of Vanta's product surfaces. The Design Systems team builds and maintains Vanta's shared component library, design tokens, interaction patterns, and documentation — enabling product designers and engineers to ship high-quality, cohesive experiences at scale. As Vanta grows across GRC, Trust, Design Systems, and new product areas, the Design Systems team plays a critical role in maintaining quality, reducing design and engineering debt, and accelerating the entire product organization. What you’ll do as a Staff Product Designer at Vanta: Building and evolving a robust, scalable component library used across every product team Establishing and maintaining design tokens, typography, spacing, color systems, and interaction patterns Creating and enforcing documentation standards, contribution models, and design governance frameworks Partnering with front-end engineering to ensure design-to-code fidelity and maintain a shared component vocabulary Driving design system adoption across product teams through education, tooling, and proactive partnership Evolving the design system to support accessibility and platform scalability across Vanta's growing product suite Deep expertise building and maintaining scalable design systems for complex B2B SaaS products, including component architecture, design tokens, and pattern libraries Strong visual design foundation with mastery of typography, color theory, spacing, interaction design, and accessibility principles Proven ability to govern and evolve a design

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Anthropic is growing fast, and our SOX program needs to keep up. Many of the controls that matter for financial reporting run on engineering systems: who can access production and financial systems, how code changes are reviewed and deployed, and how usage is metered and billed. We’re hiring a Technical Program Manager to own the technology side of our SOX program. You'll work across engineering, security, GRC, Finance, and Internal Audit to design and run IT controls, drive gaps to closure, and make compliance lighter for engineering teams. You’ll also use Claude to automate evidence collection and control testing, so the program scales without more manual work. Responsibilities Own the technology side of the SOX program end-to-end, from planning and control design through evidence, testing, remediation, and year-end reporting Work with engineering teams to design and roll out IT general controls and IT application controls Work with engineering teams to build Claude-based workflows, tools, and dashboards to automate evidence collection, control testing, and monitoring that warns engineering teams about compliance issues before an audit finds them Lead large SOX projects, such as bringing new systems into scope, with clear success criteria, dependencies, and delivery dates Turn control requirements into concrete engineering work with clear scope, owners, and deadlines, and a design that fits how our teams already build and ship Build processes to evaluate new products, systems, and major engineering changes for SOX impact before they ship, so the right controls are in place from the start Build strong working relations

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. Vanta is the AI-powered Trust Management platform redefining how businesses earn and prove trust. As a Director of Product, you will lead Vanta’s expansion of agentic workflows, focused on audit and proof outcomes. You will own the strategy and vision for how agentic features and products can accelerate and simplify earning trust through audits, trust centers, questionnaires and more. You will drive an opinionated vision for how LLMs and agentic workflows are natively embedded into enterprise software and own the product strategy and deliver key capabilities that enable Vanta’s GRC product to meet the needs of our largest enterprise customers. You will drive company-wide initiatives requiring deep partnerships across PMM, engineering, design, and go-to-market teams. You will help scale Vanta’s capabilities alongside our rapidly growing customer base and shape the culture and processes of the product team, all while growing the talented PMs you lead. This role reports directly to the VP of Product for Governance and Compliance. What you’ll do as a Director of Product at Vanta: Set the vision and product roadmap for autonomous audit agents—transforming manual internal/external audit workflows into automated workflows, powered by AI Own Questionnaire Automation and Trust Centers, turning customer security postures into a competitive growth driver while partnering directly with EPD and GTM leadership to unblock enterprise deals. Architect the multi-entity, multi-region, and complex organizational structures (business units, divisions, subsidiaries) required to support Fortune 500-level enterprise deployments. Own the product strate

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. Vanta is hiring for a Head of Design (VP) to lead our design organization — setting direction for a ~40-person team, shaping the next generation of AI-native product experiences, and building the quality systems that let great design ship at scale. The Design team at Vanta shapes how security and compliance teams experience Vanta — from a startup founder building their security program for the first time to an enterprise security team managing hundreds of controls. The org spans all areas of Vanta — GRC, Trust, Platform, Self-serve, and AI — and includes product designers, visual designers, design engineering, content designers, and a user researcher, led by experienced design directors. As AI fundamentally changes what products can do and how they get built, this team is at an inflection point: the right leader will define what it means for a design org to be genuinely AI-forward — enabling designers to move faster, ship more, and contribute to product direction and delivery in new ways. This is the right role for a design leader who leads with AI fluency, brings strong taste and craft across interaction design and visual design, and has the operational instincts to build the systems that make quality a consistent property of the whole org. What you’ll do as Head of Design at Vanta: Lead a team of ~40 designers and design directors across GRC, Trust, Platform, Self-serve, and AI — setting org-wide direction and enabling each leader to do their best work Lead the team building the next generation of agentic, AI-native product experiences — defining what great design looks like as Vanta’s products are increasingly shaped by AI E

Role Overview You are a senior product leader who wants to shape how AI transforms IT and cyber risk management at scale. In this role, you will own one of the most strategic product areas in a global GRC SaaS platform, defining how organisations identify, assess, and act on cyber risk — and how CISOs and boards get the clarity they need when it matters most. You will set and drive the product vision, roadmap, and outcomes for IT & Cyber Risk on a multi-solution platform used by enterprises worldwide. You will partner closely with engineering, design, data science, and senior leaders to build AI-native capabilities that automate risk detection, prioritisation, and reporting. Your work will have high executive visibility, real strategic weight, and direct impact on how customers manage governance, risk, and compliance. Here’s a breakdown of what you’ll do (not all of it, just the important stuff) Lead the end-to-end product strategy and roadmap for IT & Cyber Risk, aligning to company objectives and broader platform direction. Design and deliver AI-powered features (LLMs, agents, ML models) that automate risk identification, assessment, and reporting for enterprise security and risk teams. Partner with engineering, data science, and design to define technical approaches, ship high-quality releases across web, mobile, and API, and iterate using product analytics. Develop deep market and customer insight by engaging regularly with CISOs, security leaders, and risk managers, and turn those insights into clear product bets. Define, track, and communicate product KPIs, AI performance metrics, and north star outcomes to senior stakeholders, including business cases for major investments. Work cross-functionally with Sales, Customer Success, Professional Services, and Marketing to ensure successful launches and adoption of new IT & Cyber Risk capabilities. These are the essentials you’ll need to get an interview 7+ years of product management experience, includi

Perplexity is seeking a highly experienced Governance, Risk & Compliance Analyst to join our world-class team. You will help shape our compliance and risk management program. If you are a self-motivated, organized professional with a passion for driving compliance and building customer trust, this is an exciting chance to join a fast-growing startup and help revolutionize the way people search and interact online. What You'll Do Implement and lead frameworks such as SOC2, ISO 27001 and HIPAA. Ensuring compliance with certification requirements Ensure and maintain compliance with GDPR, CCPA, CPRA and other privacy regulations Design and build scalable audit management processes and documentation systems that will support future expansion to additional compliance frameworks Build internal GRC platform and tooling Conduct risk assessments and mitigate data security and compliance risks Write, update and enact policies capturing security, privacy, and AI safety requirements Follow and help shape the AI regulatory and standards landscape to keep the company at the forefront of industry developments and best practices What You'll Bring 6+ years of experience leading engagements in audit and compliance Experience translating complex compliance requirements into scalable automation using AI agents and custom built tooling Worked in high tech companies in cloud-native environments Able to translate complex compliance requirements into clear and actionable work-streams Strong commitment to cross-functional collaboration with IT, Security, GTM, and Engineering Self-motivated, detailed and organized, with a diligent approach to project completion Excellent written, verbal, and interpersonal communication skills