Security Grc Engineer Jobs

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. Vanta is looking for a Senior Account Executive for our Upmarket team to take full ownership of the sales cycle in the UK market — bringing in new upmarket logos and helping shape the commercial sales playbook as we scale our EMEA presence. Vanta is growing quickly, and we're consistently outpacing our growth targets while maintaining exceptionally strong NPS scores. Our Sales team is leading the charge in growing market share as the category leader in compliance automation and trust management — and our EMEA commercial motion is a major part of that story. As a Senior Account Executive in the UK, you'll be one of the key contributors to establishing Vanta's footprint in this market, converting both outbound and inbound pipeline into long-term customers and helping define how we sell to upmarket companies across the region. What you’ll do as an Account Executive at Vanta: Identify high-potential business verticals and execute outbound strategies to engage upmarket prospects across the UK and Ireland Own the full sales cycle — from initial outreach through discovery, demo, negotiation, and close Convert inbound demand into closed-won business and long-term Vanta customers Manage and grow your pipeline, contributing to the maturation of Vanta's commercial sales process and playbook Tailor demos and sales materials to communicate the specific value of Vanta for each upmarket buyer Forecast accurately on a monthly and quarterly basis, maintaining strong pipeline hygiene in Salesforce Collaborate cross-functionally with SDRs, Solutions Engineering, GRC specialists, Legal, and Deal Desk throughout the sales process Surface prospect i

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. Vanta is looking for a Sr Account Executive for our Upmarket team to take full ownership of the sales cycle in the UK market — bringing in new upmarket logos and helping shape the commercial sales playbook as we scale our EMEA presence. Vanta is growing quickly, we're profitable, and we're consistently outpacing our growth targets while maintaining exceptionally strong NPS scores. Our Sales team is leading the charge in growing market share as the category leader in compliance automation and trust management — and our EMEA commercial motion is a major part of that story. As a Sr AE in the UK, you'll be one of the key contributors to establishing Vanta's footprint in this market, converting both outbound and inbound pipeline into long-term customers and helping define how we sell to upmarket companies across the region. What you’ll do as an Account Executive at Vanta: Identify high-potential business verticals and execute outbound strategies to engage upmarket prospects across the UK Own the full sales cycle — from initial outreach through discovery, demo, negotiation, and close Convert inbound demand into closed-won business and long-term Vanta customers Manage and grow your pipeline, contributing to the maturation of Vanta's commercial sales process and playbook Tailor demos and sales materials to communicate the specific value of Vanta for each upmarket buyer Forecast accurately on a monthly and quarterly basis, maintaining strong pipeline hygiene in Salesforce Collaborate cross-functionally with SDRs, Solutions Engineering, GRC specialists, Legal, and Deal Desk throughout the sales process Surface prospect insights to inform

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role We are looking for a Senior Manager, IT SOX to join the Internal Audit team at Anthropic. In this role, you will be a hands-on technical contributor and key executor of our IT SOX compliance program, with deep focus on our IT General Controls, IT Application Controls, and system risk assessments. This role reports to the Head of IT SOX and is well-suited for someone who is comfortable with ambiguity, thrives in a high-pace environment, and enjoys solving problems that don't yet have industry-standard answers. This is a high-impact opportunity to collaborate with first and second lines of defense to help establish a control environment suitable for an AI-first company! You will act as a trusted advisor to Engineering, GRC, Security and Finance teams on the technology controls adapted to a fast growing and rapidly changing organization. You'll bring technical depth, a bias toward automation, and the ability to partner effectively with both technical teams and external auditors as the organization experiences scaling to public-company standards. Key responsibilities Advise on the design of a control environment fit for an AI-first company, including controls over highly automated DevOps pipelines and emerging agentic identity models Partner with Engineering, Security, IT, and DevOps teams to assess the design and implementation of scalable and sustainable controls Assess new system implementations and changes Identify automation and tooling opportunities to improve control efficiency and monitoring, and contribute to the development of continuous monitoring capabilities Assist in scoping and planning for annual SOX IT asse

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. As a Regional Governance, Risk, Compliance (GRC) Principal, you will serve as the senior Governance, Risk, Compliance, and Cyber Resilience leader for Japan, acting as the primary liaison between Micron's global GRC organization and regional business operations. This role is responsible for driving adoption of enterprise governance, cybersecurity, risk management, compliance, audit, resilience, and regulatory programs across Japan while ensuring alignment with Micron's strategic objectives, regulatory obligations, customer requirements, and evolving threat landscape. You will partner closely with regional business leaders, site leadership, Engineering, IT, Product Security, Physical Security, Legal, Privacy, HR, Internal Audit, BISOs, external auditors, regulators, customers, and government stakeholders to assess risks, coordinate compliance activities, facilitate audits, manage remediation efforts, and strengthen organizational resilience. This role serves as the voice of Japan within the global GRC organization and ensures local regulatory requirements, cultural considerations, customer expectations, and business priorities are effectively represented in enterprise governance decisions. The Regional GRC Principal will also champion AI-enabled governance and risk management capabilities, helping scale assessments, evidence management, risk monitoring, regulatory analysis, and compliance oversight while improving efficiency and consistency across the region. POSITION QUALIFICATIONS <p

Position Overview: The Solutions Sales Specialist will play an instrumental role in driving revenue growth for Diligent for both existing and new accounts for specialized products, with focus on Compliance (Entity Management and Managed Services). This position will collaborate with core selling teams, customer success, and other internal stakeholders to support the sales process. This role requires a strong understanding of corporate governance, legal entity management, and compliance workflows, paired with consultative selling skills and the ability to translate complex requirements into easy to understand, scalable SaaS solutions. Key Responsibilities Help generate strategic, product-focused pipeline in partnership with core sales teams. Lead discovery to understand customer goals and quantify the value of outcome-based GRC and Entity Management solutions. Advise on solution fit and make recommendations on how to best solution, working closely with SMEs, Solution Engineers and Professional Services. Co-run deals alongside core teams from start to finish. Recommend and present pricing and packaging aligned to customer values and desired outcomes. Support negotiations, security reviews, and procurement processes. Travel to customer sites to conduct strategic, on-site workshops and executive sessions. Partner with post-sale and adoption teams to support implementation and ensure a successful, value-driven customer outcome. Required Experience/Skills: 5+ years of experience in a technical sales, consulting or practitioner role, with a proven track record of success. Ability to build and maintain strong relationships with stakeholders at all levels, both internally at Diligent and within customer organizations. Strong commitment to continuous lear

Perplexity is AI for people who expect more. More accuracy. More agency. More signal, less noise. Our answer engine handles hundreds of millions of queries every month for people whose questions spark change and whose decisions bend the world toward progress. Our legal team works side by side with product and business teams. We help the company move quickly, make sound risk decisions, and build legal requirements into products and operations from the start. About the Opportunity We are looking for a practical, versatile attorney to join our Product, Privacy and Regulatory Legal team. You will have a clear center of gravity in consumer protection and a flexible mandate across product counseling, privacy, regulatory matters, marketing, subscriptions, and international expansion. This is not a narrow subject matter role. You might advise on a new consumer product flow one day, assess an advertising or subscription practice the next, and help respond to a regulator or customer escalation after that. You will work directly with Product, Engineering, Growth, Marketing, Support, Security, GRC, Policy, and Communications. The right person can identify the legal issue quickly, learn the product deeply, and give the business a practical path forward. You will own matters independently and help turn recurring questions into clear guidance and durable systems. This role Reports to the Senior Director, Product, Privacy and Regulatory Legal. What You Will Do Serve as a primary legal partner for consumer products and features from early design through launch and post-launch review Advise on consumer protection issues, including unfair and deceptive practices, disclosures, pricing, subscriptions, renewals, refunds, promotions, advertising claims, dark patterns, and customer support practices Review marketing, growth, and advertising initiatives, including adtech and martech integrations, audience practices, email and messaging campaigns, and product claims Counsel product and engin

WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Senior Technology Risk Analyst Department: Data & Technology Solutions (DTS) Reports To: SVP Security and Compliance Location: [London/Hybrid 2 days a week in office] Position Type: Full-Time Role Purpose The Senior Technology Risk Analyst is responsible for managing and continuously improving the Information Security Management System (ISMS) across Data & Technology Solutions. You will ensure that security policies, controls, risks, exceptions, and governance processes are properly maintained, evidenced, reviewed, and acted upon. Reporting to the SVP Security and Compliance, you will provide the operational backbone for security governance across DTS. This is a hands-on Governance, Risk, and Compliance (GRC) role. You will collaborate across security, product, engineering, infrastructure, architecture, legal, risk, compliance, and delivery teams to transform security governance into a dynamic, working management system rather than a static documentation exercise. Key Responsibilities 1. ISMS Ownership & Operation Manage the day-to-day opera

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team The Stripe Security team is dedicated to improving the security of Stripe and its users. Our users trust us with some of their most sensitive information, and we make security a first-class consideration in everything we do. Security concerns are ever-evolving, creating an extremely dynamic environment for the Security team. The Security Governance, Risk, and Compliance (SGRC) team helps Stripe make informed security decisions, understand its risk and control posture, and represent its security program to internal and external stakeholders. The team also manages security risk arising from Stripe’s relationships with third parties by assessing their security controls, identifying and mitigating risk, and supporting informed onboarding and risk-acceptance decisions. Our work helps Stripe move quickly while maintaining clear and consistent security expectations. What you'll do Independently manage a portfolio of Third Party Security Risk Assessments (TPSRAs) for new engagements, renewals / reassessments, and material changes in relationship scope. Review security questionnaires, independent assurance reports, certifications, penetration-test results, and other evidence to evaluate third-party control effectiveness. Identify security gaps, determine proportionate remediation requirements, and clearly communicate findings to Stripe DRIs and cross-functional partners. Apply Stripe’s third-party security standards consistently, documenting assessme

Here’s a summary of the role: Every enterprise deal reaches the moment where someone in security says “prove it.” You’re the person who answers — quickly, accurately, and with the evidence to back it up. As an Analyst II on our Trust & Assurance team, you’ll own a live queue of security questionnaires, third-party due diligence assessments, RFP security sections and customer assurance requests. You’ll draft at speed using AI-assisted response tooling, then verify every answer against our approved answer library, current SOC 2 and ISO 27001 certifications and the underlying evidence before it leaves your hands. Accuracy is the whole game here: a wrong answer in a customer questionnaire is a commitment we didn’t mean to make. The best part is that you won’t just work the queue — you’ll shrink it. Every recurring question you turn into a published answer on our trust site is a ticket that never comes back. If you’ve spent two to four years in security GRC, compliance, IT audit or customer assurance, you’re precise under volume, and you like being measured on turnaround time and first-pass accuracy, you’ll do well here. Here’s a breakdown of what you’ll do (not all of it, just the important stuff): Own a high-volume queue of security questionnaires, due diligence assessments, RFP security sections and assurance requests, delivering accurate responses within SLA. Use AI-assisted response tooling to draft at speed, then verify every answer against the approved answer library, current certifications and underlying evidence before it goes out. Triage and route incoming requests using established playbooks — resolving the routine independently and escalating anything novel, contractual or architecturally complex. Maintain and expand the answer library by adding approved answers, retiring stale ones and flagging inconsistencies, so the same question never has to be researched twice. Build out trust site and customer-facing content, and show commercial teams how to

Here’s a summary of the role: Every enterprise deal reaches the moment where someone in security says “prove it.” You’re the person who answers — quickly, accurately, and with the evidence to back it up. As an Analyst II on our Trust & Assurance team, you’ll own a live queue of security questionnaires, third-party due diligence assessments, RFP security sections and customer assurance requests. You’ll draft at speed using AI-assisted response tooling, then verify every answer against our approved answer library, current SOC 2 and ISO 27001 certifications and the underlying evidence before it leaves your hands. Accuracy is the whole game here: a wrong answer in a customer questionnaire is a commitment we didn’t mean to make. The best part is that you won’t just work the queue — you’ll shrink it. Every recurring question you turn into a published answer on our trust site is a ticket that never comes back. If you’ve spent two to four years in security GRC, compliance, IT audit or customer assurance, you’re precise under volume, and you like being measured on turnaround time and first-pass accuracy, you’ll do well here. Here’s a breakdown of what you’ll do (not all of it, just the important stuff): Own a high-volume queue of security questionnaires, due diligence assessments, RFP security sections and assurance requests, delivering accurate responses within SLA. Use AI-assisted response tooling to draft at speed, then verify every answer against the approved answer library, current certifications and underlying evidence before it goes out. Triage and route incoming requests using established playbooks — resolving the routine independently and escalating anything novel, contractual or architecturally complex. Maintain and expand the answer library by adding approved answers, retiring stale ones and flagging inconsistencies, so the same question never has to be researched twice. Build out trust site and customer-facing content, and show commercial teams how to

At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a talented Security Analyst within Security GRC to support Security Compliance Operations through recurring control validation, evidence review, reporting preparation, and remediation tracking. This role will help determine whether key security safeguards are operating as intended by performing manual and semi-automated validation activities, analyzing evidence from multiple sources, documenting control gaps, and preparing clear reporting that helps interpret validation results. This is a full-time permanent position based out of Rockstar’s studio in Bangalore, India. WHAT WE DO The Rockstar Games Security team is responsible for advancing the state of information security across the company globally in collaboration with numerous partners and stakeholders by prioritizing and executing security initiatives that drive down risk. We strive to understand the threat landscape affecting our development studios, the gaming industry, and the world at large to define information security policies, standards, and procedures to safeguard our business and protect our players. We lead efforts to build enterprise security controls ranging from endpoint protection technologies to security incidents and event monitoring solutions. We have a passion for identifying threats and vulnerabilities and coming up with clever solutions to mitigate or remediate those risks. RESPONSIBILITIES Perform recurring manual and semi-automated validation of security controls to confirm safeguards are operating as intended. Collect, review, and organize evidence from systems, tools, reports, an

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team The Stripe Security team is dedicated to improving the security of Stripe and its users. Our users trust us with some of their most sensitive information, and we make security a first-class consideration in everything we do. Security concerns are ever-evolving, creating an extremely dynamic environment for the Security team. The Security Governance, Risk, and Compliance (SGRC) team at Stripe provides security governance, risk management, and compliance capabilities to allow Stripe to make strategic security decisions, measure our risk and control posture, and represent Stripe Security to internal and external entities. The successful operation of our organization accelerates Stripe by optimizing the communication and expectations of our security program. What you’ll do We're looking for a Security GRC Program Manager with deep expertise in security compliance to serve as the primary interface between Stripe's Security organization and external auditors, regulators, and compliance stakeholders. In this role, you'll represent the Security team in audit engagements, articulate how Stripe's security controls are designed and how they operate, and ensure that compliance obligations across a complex global regulatory landscape are met with consistency and rigor. In this role, you will act as a proxy between external entities like regulators and auditors, and our internal security teams, ensuring consistency in compliance responses and helping main

At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a talented Security Compliance Operations Lead to manage and mature a security assurance function within Security GRC. This role will help ensure key security safeguards are operating effectively across Rockstar’s global technology environments. Leveraging cross-domain cybersecurity expertise, you will lead control validation strategy, mature security compliance operations capabilities, use automation to scale control validation, evidence collection, and reporting, and provide leadership with clear visibility into security posture and risk reduction. This is a full-time, in-office position based in Rockstar’s large game development studio in Bangalore, India. WHAT WE DO The Rockstar Games Security team is responsible for advancing the state of information security across the company globally in collaboration with numerous partners and stakeholders by prioritizing and executing security initiatives that drive down risk. We strive to understand the threat landscape affecting our development studios, the gaming industry, and the world at large to define information security policies, standards, and procedures to safeguard our business and protect our players. We lead efforts to build enterprise security controls ranging from endpoint protection technologies to security incidents and event monitoring solutions. We have a passion for identifying threats and vulnerabilities and coming up with clever solutions to mitigate or remediate those risks. RESPONSIBILITIES Ensure key security safeguards are operating operate effectively across Rockstar’s global technology environments. L

Location: Athens, Gr Weekly office requirement: Hybrid – 2 days per week Employment type: Permanent Seniority level: Mid At GWI we're always looking for extraordinary people who thrive on making an extraordinary impact. Right now we're looking for an Information Security GRC Specialist to play a key role in our Legal team in London. If that's you, and making a difference gets you out of bed in the morning, keep reading. It could be the start of something, well, extraordinary. Sounds great, what will I be doing? 🤔 As our Information Security GRC Specialist you'll play a pivotal role in shaping the future of security compliance at GWI. Reporting into our General Counsel and working closely with our Information Security, Product, and Technology teams, you'll own our compliance posture across security frameworks, vendor risk, and client-facing security requirements — while building a security-conscious culture across the business. A few things you'll be responsible for: 👉 Own and maintain GWI's ISO 27001 certification and compliance across relevant security frameworks, keeping our posture sharp as the threat landscape evolves. 👉 Develop, implement, and maintain information security policies and procedures aligned with industry best practices. 👉 Lead vendor risk management and client security assessments — including responding to client security questionnaires and onboarding requirements. 👉 Build and maintain GWI's security trust portal, showcasing our credentials to clients and stakeholders using tools such as Drata or Vanta. 👉 Drive security awareness across the business through training programmes and internal communications that promote a strong GRC culture. It's also fun; shaking things up is what working for GWI is all about. You'll need to be flexible, comfortable with continuous change, and working in a high-tempo environment. What do I need to bring with me? 🧳 You'll need to be able to demonstrate the core skills this role requires. You don't have

Location: London, UK Weekly office requirement: Hybrid – 2 days per week Employment type: 6 months fixed term contract, immediate start At GWI we're always looking for extraordinary people who thrive on making an extraordinary impact. Right now we're looking for an Information Security GRC Specialist to play a key role in our Legal team in London. If that's you, and making a difference gets you out of bed in the morning, keep reading. It could be the start of something, well, extraordinary. Sounds great, what will I be doing? 🤔 As our Information Security GRC Specialist you'll play a pivotal role in shaping the future of security compliance at GWI. Reporting into our General Counsel and working closely with our Information Security, Product, and Technology teams, you'll own our compliance posture across security frameworks, vendor risk, and client-facing security requirements — while building a security-conscious culture across the business. A few things you'll be responsible for: 👉 Own and maintain GWI's ISO 27001 certification and compliance across relevant security frameworks, keeping our posture sharp as the threat landscape evolves. 👉 Develop, implement, and maintain information security policies and procedures aligned with industry best practices. 👉 Lead vendor risk management and client security assessments — including responding to client security questionnaires and onboarding requirements. 👉 Build and maintain GWI's security trust portal, showcasing our credentials to clients and stakeholders using tools such as Drata or Vanta. 👉 Drive security awareness across the business through training programmes and internal communications that promote a strong GRC culture. It's also fun; shaking things up is what working for GWI is all about. You'll need to be flexible, comfortable with continuous change, and working in a high-tempo environment. What do I need to bring with me? 🧳 You'll need to be able to demonstrate the core skills this role requires. Y