Security Risk And Compliance Jobs

🚀 We’re on a mission to make money work for everyone. We’re waving goodbye to the complicated and confusing ways of traditional banking. After starting as a prepaid card, our product offering has grown a lot in the last 10 years in the UK. As well as personal and business bank accounts, we offer joint accounts , accounts for 16-17 year olds , a free kids account and credit cards in the UK, with more exciting things to come beyond. Our UK customers can also save , invest and combine their pensions with us. With our hot coral cards and get-paid-early feature, combined with financial education on social media and our award winning customer service, we have a long history of creating magical moments for our customers! We’re not about selling products - we want to solve problems and change lives through Monzo ❤️ 📍Madrid, Spain | 💰€75,000 - €95,000 + Incentive Awards tied to your performance ➕ benefits | Hear from the team ✨ ⭐Our Risk & Compliance Team We are looking for a Senior Risk & Compliance Officer to oversee risk management and compliance activities for the Spanish Branch of Monzo Bank Europe. In this role, you will implement Monzo’s Risk Management Framework in Spain, monitor the Branch’s key material risks covering operational, conduct and compliance risks, and support regulatory engagements particularly with Banco de España. Acting as a trusted advisor to the Spain Branch Manager, you will provide independent oversight, challenge and advice across a broad spectrum of risks including Credit, Operational, ICT/Security, Conduct, Compliance and Business risks. You will maintain strict functional independence via your reporting lines into the EU Risk Directors. This role sits within the Second Line of Defense (2LOD) and reports functionally to the EU Director of Operational Risk and the EU Director of Conduct & Compliance Risk, and operationally to the Spain Branch Manager. This role includes acting as the Customer Service Rep

🚀 We’re on a mission to make money work for everyone. We’re waving goodbye to the complicated and confusing ways of traditional banking. After starting as a prepaid card, our product offering has grown a lot in the last 10 years in the UK. As well as personal and business bank accounts, we offer joint accounts , accounts for 16-17 year olds , a free kids account and credit cards in the UK, with more exciting things to come beyond. Our UK customers can also save , invest and combine their pensions with us. With our hot coral cards and get-paid-early feature, combined with financial education on social media and our award winning customer service, we have a long history of creating magical moments for our customers! We’re not about selling products - we want to solve problems and change lives through Monzo ❤️ 📍Barcelona, Spain | 💰€75,000 - €95,000 + Incentive Awards tied to your performance ➕ benefits | Hear from the team ✨ ⭐Our Risk & Compliance Team We are looking for a Senior Risk & Compliance Officer to oversee risk management and compliance activities for the Spanish Branch of Monzo Bank Europe. In this role, you will implement Monzo’s Risk Management Framework in Spain, monitor the Branch’s key material risks covering operational, conduct and compliance risks, and support regulatory engagements particularly with Banco de España. Acting as a trusted advisor to the Spain Branch Manager, you will provide independent oversight, challenge and advice across a broad spectrum of risks including Credit, Operational, ICT/Security, Conduct, Compliance and Business risks. You will maintain strict functional independence via your reporting lines into the EU Risk Directors. This role sits within the Second Line of Defense (2LOD) and reports functionally to the EU Director of Operational Risk and the EU Director of Conduct & Compliance Risk, and operationally to the Spain Branch Manager. This role includes acting as the Customer Service

Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams — People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more — provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block. The Role We are seeking an experienced Deputy Chief Compliance Officer, Financial Services to join our Line 2 Compliance function at Afterpay ANZ. This is a fantastic opportunity for candidates looking to innovate and help provide financial services compliance advisory, licensing, governance and frameworks services and support across all Afterpay business units in Australia and New Zealand. This role much be based in Australia, preferably in Sydney or Melbourne, and will report directly to the Head of Compliance for Afterpay ANZ. You Will Support the Head of Compliance to ensure the Compliance Function and the Compliance Risk Management Framework operates effectively and meets regulatory expectations. Lead the Compliance Framework and Program, ensuring it is comprehensive and sustainable; this includes documenting and maintaining policies, standards, and procedures for all aspects of the program Work with the business, global risk and compliance functions to build, embed and maintain governance, risk and compliance frameworks to support regulated financial services products. Maintain Afterpay's Australian Credit License, which includes governance, compliance oversight and due diligence, and the compilation and submission of the annual compliance certificate requirements with ASIC. Manage of all monitoring, reporting, audit and testing ac

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform. We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. Role We are looking for a Staff Compliance Architect to join our team. This is a Remote (if located outside of the San Jose, CA area) or Hybrid (based in San Jose, CA) role, reporting to the Director, Technology Risk and Compliance in the Exposure Management & Security Operations department. Zscaler is seeking an experienced Staff Compliance Architect to serve as the compliance team’s technical subject matter expert and to embed scalable, auditable compliance requirements into product and infrastructure delivery. This role brings an architectural mindset to compliance, partnering closely with Engineering, Product, Compliance Engineering, and Authorization Operations (AuthOps) to translate regulatory and assurance obligations into clear technical requirements, standardized implementation patterns, and automated validation. What you’ll do (Role Expectations) Define and maintain enterprise privacy baseline requirements, em

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. As a Senior Security Software Engineer for Infrastructure Security you will be a part of the Information Security organization and report to the Senior Manager of Infrastructure Security. You will help shape the future of Platform Security at Roblox. We work closely with Production IAM, Network Security, and Cloud Security at Roblox. You Will: Identify security gaps and threats in our cloud and on premise infrastructure, partnering with Governance Risk and Compliance teams to create standards and policies along the way. This will help Roblox meet regulatory and compliance requirements. Harden our infrastructure by introducing secure by default configurations, designs and guardrails for all developers at Roblox. Own and drive solutions that enable Roblox engineers to design, build, and use infrastructure securely at scale. Work closely with other InfoSec teams (AppSec, D&R, GRC, CorpSec, CloudSec, NetSec) and partner with engineering teams across Roblox, specifically the Infrastructure organization, to ensure the secure outcomes of security and product driven initiatives. You Have: 5+ years of experience writing code and/or relevant technical experience. Experience with

Lead Engineers at Thoughtworks act as trusted technical leaders and security advisors who align enterprise risk and executive strategy with modern software delivery, ensuring security measures enhance organizational objectives. In this role, you bring a strategic and proactive mindset to client engagements, guiding delivery teams in embedding security directly into the software development lifecycle, platform architecture, and cloud environments. You balance high-level security architecture with hands-on engineering, conducting threat modeling, establishing DevSecOps practices, and following a pragmatic and robust approach to risk management. As a technical leader, you guide and coach cross-functional teams, cultivate security awareness across accounts, and navigate complex stakeholder environments to build resilient, trustworthy software solutions. Due to the nature of the projects and specific client security clearance , this role requires the successful candidate to be a Singapore Citizen Or Singapore Permanent residents. Job Responsibilities You will lead the design and implementation of enterprise security architectures, zero-trust patterns, and DevSecOps practices and controls across software delivery teams. You will act as a primary technical advisor to client stakeholders and engineering leads, aligning information security strategies with enterprise risk tolerances and business goals. You will champion shifting security left in the software development lifecycle by integrating automated SAST, DAST, SCA, and secrets management into CI/CD pipelines. You will conduct threat modeling sessions, security risk assessments, and architectural reviews to identify vulnerabilities and design pragmatic mitigations alongside delivery teams. You will oversee cloud platform security governance, Identity and Access Management (IAM), container security (Kubernetes, Docker), and Infrastructure as Code (IaC) compliance across AWS, Azure, or GCP. You wi

About the role: This is an opportunity to join K's critical InfoSec team as a Senior Security Engineer - AppSec and operate with foresight in protecting our infrastructure, applications, cloud security, and customer trust. As a lean team, we span across multiple areas such as AppSec, CloudSec, SecOps, ITSec, and Compliance and apply it towards reading and interpreting architecture, or planning and building out net new security solutions. You will have the autonomy to define and implement cutting-edge security solutions across our entire technical ecosystem, ensuring our innovative work remains robust and compliant against evolving global threats. This role is crucial for establishing and maintaining a world-class security posture, particularly within the sensitive and highly regulated healthcare technology space. What you will do: Lead the development and implementation of robust application security protocols throughout the entire Software Development Lifecycle (SDLC). Partner with engineering teams to incorporate security into architecture, design, development, testing and deployment Perform hands-on security testing of web applications, APIs, cloud-native services and supporting infrastructure Build and improve automated security testing within CI/CI pipelines, including static analysis, dependency scanning, secrets detection, container scanning and dynamic testing Evaluate effectiveness of application security tools, improve tooling output quality and reduce unnecessary findings and developer friction Develop secure coding standards with developer-focused documentation Contribute application security expertise to vulnerability management, during security incidents/investigations and post-incident reviews Evaluate third party applications, libraries and APIs and integrations for security risk Ensure adherence to relevant healthcare regulatory and compliance requirements (e.g., HIPAA, GDPR, etc.) across all product lines and systems. What we're looking for: 4+ yea

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking an experienced Governance, Risk, and Compliance (GRC) Engineer focused on Japanese information security and financial services regulation to help scale compliance for SpaceXSI and X Money. As we expand deeper into the regulated Japanese market, maintaining a robust, transparent, and technically sound information security GRC program is critical. You will architect the systems and processes that automate trust — a pragmatic operator who understands that GRC exists to enable the business, balancing rigorous standards with the velocity of a high-growth company. The ideal candidate brings hands-on experience with JFSA supervisory expectations, APPI, and local Japanese banking and payments technology controls, plus GRC engineering skills: Compliance-as-Code, continuous evidence collection, and deep partnership with engineering so controls are designed into the platform rather than bolted on after the fact. This role may also include additional tasks and responsibilities as needed to support the team and evolving business priorities. This position may require occasional travel. RESPONSIBILITIES: Own and evolve Japan financial services and payments compli

At Dawn Aerospace, we're redefining how the world accesses space. From industry-leading satellite propulsion systems to the development of the world's first reusable spaceplane designed to fly to space twice in one day, we're building technologies that are changing the future of aerospace. As we continue to grow across the United States, Europe and New Zealand, we operate in an increasingly complex environment of export controls, information security, customer requirements and regulatory obligations. We're looking for a Senior Compliance Officer to help build the governance, risk and compliance capability that enables Dawn Aerospace to scale securely and responsibly. This role is remote, but we have preference for someone based in or near Alabama. This is a broad, high-impact role where you'll work across Engineering, Operations, IT, Legal, Commercial and Corporate teams to translate complex regulatory, customer and security requirements into practical processes that support both compliance and execution. While export controls and trade compliance will be an immediate focus, you'll also help shape the governance, risk, information security and compliance frameworks that support Dawn Aerospace's continued international growth. This is an opportunity to build capability, solve complex problems and help define how compliance supports one of the world's most ambitious aerospace companies. What you'll do Lead Dawn Aerospace's export control and trade compliance activities, including licensing, record keeping, jurisdictional assessments and ongoing compliance obligations. Develop and continuously improve the company's governance, risk and compliance framework. Design and implement practical policies, procedures and internal controls that support both compliance and efficient business operations. Coordinate compliance with customer, contractual and regulatory obligations across multiple international jurisdictions. Develop and maintain compliance registers, risk registers,

Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams — People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more — provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block. The Role The Risk Automation ML team automates Risk and Compliance investigations and decision making at Block through the application of agentic and generative AI technology. We work globally with partners in Product, Engineering and Operations to ensure that we are providing a safe user experience for our customers while minimizing or eliminating bad activity on our platform. We are leveraging agentic and generative AI as an integral part of our toolkit to fulfill our mission. Block's machine learning systems monitor billions of payment transactions across traditional payment and blockchain networks and surface suspicious activity (fraudulent, suspicious, illegal activity and brand violations) for trained Operations analyst review and decisioning. We are leveraging generative AI to accelerate historically manually intensive analyst workflows; by adding features in the investigative UX to accelerate agent productivity and enable them to make faster, more informed and accurate decisions (aka Copilots). We also automate workflows end to end completely eliminating the need for manual reviews (aka Autopilots). This is a new and significant opportunity to rethink and optimize Risk Operations at Block at scale. This is an IC role, but the senior level has significant leadership responsibilities that include owning, and driving strategic roadm

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking an experienced Governance, Risk, and Compliance (GRC) Engineer focused on fintech and financial services regulation to help scale compliance for SpaceXSI and xMoney. As we operate deeper in regulated financial environments, maintaining a robust, transparent, and technically sound GRC program is critical. You will architect the systems and processes that automate trust — a pragmatic operator who understands that GRC exists to enable the business, balancing rigorous standards with the velocity of a high-growth company. The ideal candidate brings hands-on fintech compliance experience (PCI DSS, NYDFS, FFIEC), fluency in data privacy frameworks (GDPR, CCPA), and GRC engineering skills: Compliance-as-Code, continuous evidence collection, and deep partnership with engineering so controls are designed into the platform rather than bolted on after the fact. This role may also include additional tasks and responsibilities as needed to support the team and evolving business priorities. RESPONSIBILITIES: Own and evolve financial services and payments compliance posture across PCI DSS, NYDFS (including 23 NYCRR 500), FFIEC guidance, and related banking/

Who we are About Bridge We're creating an entirely new payments platform, built with stablecoins, to simplify global money movement. Bridge enables faster, cheaper payments and borderless access to dollars via stablecoins. Through our APIs, businesses can send and receive funds across borders faster and cheaper vs. SWIFT and other fiat-only rails. Our virtual accounts enable international consumers and businesses to easily access, store, and spend US dollars. Our payouts infrastructure enables platforms to disburse USD to anyone globally. We believe many trillions of dollars will move and settle through stablecoin payment rails. Bridge is pulling this future forward. We have a small team of people who have previously built financial infrastructure at some of the world's leading companies (Coinbase, Stripe, Square, Brex, Upstart, DoorDash, Airbnb), and each and every one of them chose Bridge because they fundamentally believe that stablecoins will be a critical piece of financial infrastructure that allows for the improvement of global money movement. About the Role We’re hiring a Security Analyst / Program Manager to build and scale Bridge’s security foundation. This is a rare opportunity to design the security governance, risk and compliance programs from the ground up, while also leveraging the infrastructure, best practices, and tooling of one of the most mature security organizations in the industry. Responsibilities Identify and tackle Bridge’s most important security risks quickly and pragmatically. Adopt Stripe’s programs, controls and processes where it makes sense, and find custom approaches where it doesn’t. Reinforce engineering best practices around secure development and infrastructure. Ensure Bridge meets compliance and audit expectations as we scale to more regulated markets. Collaborate cross-functionally with engineering, product, and Stripe’s security org to move fast without compromising safety. Minimum Requirements Have 8+ years of experie

Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. About the Opportunity We are looking for a Security Operations Engineer who combines hands-on engineering skills with security operations expertise. You will be deeply involved in the operations and troubleshooting of both server-side and client-side components within our Zero Trust architecture, drive security risk governance initiatives, and leverage AI tools to continuously improve system stability and compliance. Key Responsibilities K8s Operations & Vendor Engagement: Develop deep expertise in K3s / Kubernetes, including version management and disaster recovery. Independently identify and reproduce system issues, proactively engage with vendors to drive root cause analysis and resolution — not just workarounds. Zero Trust Network Access Governance: Work closely on Zero Trust initiatives, participate in cluster network configuration and troubleshooting, identify device compliance risks, drive remediation of non-compliant devices, and continuously optimize access control policies. Monitoring & Observability: Build and continuously improve log monitoring systems; proactively surface system risks through alert rules and trend analysis. AI Agent Implementation: Lead the adoption of AI Agents in security operations — design and deploy AI Agent workflows f

About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects OpenAI’s technology, people, and products. We are technical in what we build but are operational in how we do our work, and are committed to supporting all products and research at OpenAI. Our Security team tenets include: prioritizing for impact, enabling researchers, preparing for future transformative technologies, and engaging a robust security culture. About the Role We are seeking a Software Engineer, Security Observability to join our Security team. In this role, you will be responsible for building secure, scalable systems that enhance our security observability infrastructure. Leveraging your strong engineering skills, you will collaborate with cross-functional teams to develop, deploy, and maintain robust software solutions that support our security and detection capabilities. This role is open to remote employees, or relocation assistance is available to one of our OpenAI offices in San Francisco, Seattle, or New York City. In this role, you will: Design and develop scalable software systems that facilitate security observability across our infrastructure. Build and maintain data pipelines that centralize and store security-relevant data from diverse sources. Proactively improve the resilience and reliability of data systems to ensure high platform availability Collaborate closely with Detection & Response (D&R) and other security teams to reduce the company’s security risk. Contribute to data engineering in support of forensic investigations and compliance efforts. You might thrive in this role if you have: Strong software engineering experience, with proficiency in programming languages such as Python, Golang, or similar. A background in infrastructure as code, with experience using tools like Terraform and working with cloud platforms such as Azure. Experience with building and main

About Graphcore Graphcore is a globally recognized leader in Artificial Intelligence computing systems. The company designs advanced semiconductors and data center hardware that provide the specialized processing power needed to drive AI innovation, while delivering the efficiency required to support its broader adoption. As part of the SoftBank Group, Graphcore is a member of an elite family of companies responsible for some of the world’s most transformative technologies. We are opening a new AI Engineering Campus in Austin, which will play a central role in Graphcore's work building the future of AI computing. About the Role We are seeking a Principal Security Architect to design, maintain and secure scalable infrastructure solutions for cryptographic key management. In this strategic role, you will be responsible for evaluating, deploying and manage Hardware Secure Modules from the ground up, ensuring compliance with standards across different regions. You will also enable multiple teams by supporting them for control and automation. You will be expected to drive and implement policies for key and certificate creation, rotation, and revocation. Collaboration with stakeholders to analyze requirements and implement robust access controls is essential while demonstrating operational excellence. RESPONSIBILITIES Design and deploy scalable, secure infrastructure solutions from scratch, aligned with business requirements and security standards. Hardware Secure Module ownership and governance. Develop organizational standards, policies, access models, and workflows to ensure consistent, secure usage of the platform. Conduct risk and compliance assessments to support system security plans and disaster recovery strategies. Collaborate on requirement analysis, user and key story operations, and capacity planning to ensure optimal resource utilization. Advocate for best practices in secret lifecycle management, a