Security Risk And Compliance Jobs

We take play seriously. We’re looking for curious adventurers ready to find their party, fueled by imagination and drive to build what’s never been built before. At Hasbro and Wizards of the Coast, you’ll collaborate with passionate teams to reimagine our iconic brands and create experiences that spark joy, connection, and community through the magic of play. This is your chance to shape legendary play that lasts a lifetime. About the Role Hasbro is seeking a Principal SAP Security Analyst to join our IT Security team in Montreal. This senior individual contributor position will assist in steering access governance, role development, compliance readiness, and security controls across SAP ECC, S/4HANA, SAP RISE, SAP Business Technology Platform, Identity Authentication Service, and Identity Provisioning Service. We are shifting more SAP security responsibility internally and need someone who can guide complex tasks through knowledge, collaboration, and sound judgment. This role is not a people manager position, but it does provide technical direction to SAP analysts, access administrators, project teams, business partners, auditors, and implementation partners. What You’ll Do Build SAP security architecture, standards, access models, and role design practices. Support our migration to SAP RISE, including role mapping, identity integration, access transition, privileged access, connectivity, and post-migration controls. Develop and enhance Role-Based Access Control models that uphold least-privilege, address business needs, and meet compliance requirements. Lead role cleanup, redesign, simplification, and Segregation of Duties remediation. Set up and maintain SAP Identity Access Governance and SAP Governance Risk and Compliance, covering connectors, workflows, risk rules, provisioning, access analysis, and reporting. Strengthen access provisioning, access reviews, emergency and privileged access oversight. Support SOX and IT General Contro

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As Senior Manager, Internal Audit focused on Audit Automation & Technology Risk, you’ll anchor our Internal Audit operations in Bangalore, India, and lead three connected areas: audit automation and innovation, people and operations for our India hub, and support of our technology risk audit program. Reporting to the VP, Internal Audit, you’ll help position Internal Audit as a strategic partner that gives leaders practical risk insight and helps the business improve. You’ll pioneer data analytics, artificial intelligence (AI)-assisted workflows, and automation across the Internal Audit function; suppo

WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Why we're hiring: The Enterprise Security Architect at WPP will be a pivotal role, responsible for defining and evolving the security architecture within WPP. This role ensures that WPP's technology landscape is designed with security, resilience, and compliance as fundamental pillars. The architect will bridge the gap between business objectives, regulatory requirements, and technical implementation, specifically focusing on embedding security best practices. Operating heavily in the Cyber Risk and Compliance function, the role will have a strong Security Operations architecture focus and will be key to ensuring the Security Operations function is successful and effective. This role offers a unique opportunity to shape the security foundation of one of the world's leading creative transformation companies. You will work on cutting-edge technologies, collaborate with diverse global teams, and directly contribute to protecting WPP's intellectual property, client data, and brand reputation in an evolving digital landscape. What you'll be doing: Security Architecture Strategy: Develop, main

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team The Stripe Security team is dedicated to improving the security of Stripe and its users. Our users trust us with some of their most sensitive information, and we make security a first-class consideration in everything we do. Security concerns are ever-evolving, creating an extremely dynamic environment for the Security team. The Security Governance, Risk, and Compliance (SGRC) team at Stripe provides security governance, risk management, and compliance capabilities to allow Stripe to make strategic security decisions, measure our risk and control posture, and represent Stripe Security to internal and external entities. The successful operation of our organization accelerates Stripe by optimizing the communication and expectations of our security program. What you’ll do We're looking for a Security GRC Program Manager with deep expertise in security compliance to serve as the primary interface between Stripe's Security organization and external auditors, regulators, and compliance stakeholders. In this role, you'll represent the Security team in audit engagements, articulate how Stripe's security controls are designed and how they operate, and ensure that compliance obligations across a complex global regulatory landscape are met with consistency and rigor. In this role, you will act as a proxy between external entities like regulators and auditors, and our internal security teams, ensuring consistency in compliance responses and helping main

About the Team The Identity Governance team is responsible for managing the services and controls that deliver stable, secure, and efficient Identity & Access Management (IAM) across Crypto.com and its related entities. IAM controls are foundational to the organisation, ensuring the right individuals have the right access to the right resources, backed by robust audit trails. Role overview You'll lead a globally distributed Identity Governance team, owning the controls, risk assessments, and compliance posture that keep Crypto.com's identity ecosystem audit-ready. You'll set direction for your team's day-to-day work while staying hands-on with the highest-stakes risk assessments and stakeholder relationships yourself. Responsibilities: Manage and develop the Identity Governance team spanning APAC and EU time zones — set priorities, review work quality, and support career growth across the team. Establish, manage, and document effective IAM controls, including the evaluation, testing, and rollout of a new group-wide Identity and Access Management platform. Identify, assess, and document identity-related risks across key business processes. Manage identity lifecycle risks in alignment with the Operational Risk Management Framework. Partner with business, risk management, and compliance stakeholders to maintain compliance with Group Policies, risk standards, and regulatory obligations. Foster a strong risk and control culture across key business functions. Lead process deep-dive activities to map workflows, evaluate existing risks and controls, and identify control gaps. Coordinate across APAC, EU, and US working hours to ensure consistent stakeholder engagement. What success looks like: Control gaps identified in process deep-dives are closed within an agreed SLA. Team operates with clear ownership and consistent quality across regions. Clean audit ou

About Vercel: Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience. Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. About the role: We are looking for a Governance, Risk and Compliance (GRC) Analyst who wants to build GRC with AI, and you do not need to be an engineer to do it. We encourage and equip you to use AI tooling to build automations for audit evidence and customer security questionnaires, alongside assessing AI tools and vendors and managing audits. This is a hybrid role based in San Francisco, New York City, or London with three days a week in the office. What you’ll do: Assess AI tools and vendors against security, privacy, and compliance requirements, and run company compliance and ethics training Maintain the internal controls behind ISO 27001, System and Organization Controls 2 (SOC 2), Health Insurance Portability and Accountability Act (HIPAA), and Payment Card Industry Data Security Standard (PCI DSS) compliance, and drive remediation to completion with documented progress Use AI tooling to build automations that collect audit evidence, monitor controls, and draft security questionnaire responses, and report on controls maturity scores Manage annual audit deliverables, write treatment plans, and track completion across teams Answer customer compliance inquiries and maintain customer-facing security and compliance documentation What you need: 3+ years supporting the audit lifecycle for SOC 2, ISO 27001, PCI DSS, or HIPAA in a cloud-based environment Applied security or privacy controls to AI systems or AI vendors, such as model access, data handling, or third-party risk review Built security policies and technical controls into the software dev

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Position Overview: We are seeking a visionary Senior Director, Governance, Risk and Compliance (GRC) to lead and scale our world-class GRC Security organization. We don't view Governance, Risk, and Compliance (GRC) as a passive reporting function or an administrative checklist—we build engineering-forward, automated, and AI-driven GRC programs capable of operating in an evolving AI world. Reporting directly to Security Executive leadership, you will operate as a partner to the Senior Executives across Okta’s workforce, taking direct responsibility for cyber risk, data governance, security compliance and product certifications to enable Okta to ship world class, secure products. You will blend deep domain expertise across enterprise cyber risk, audit, and global compliance with a forward-thinking engineering mindset—pioneering continuous control monitoring, compliance-as-code, and robust AI governance for generative and agentic architectures. This is not just a leadership role. This is a builder’s role. Key Responsibilities: Drive AI-first Transformation: Execute a vision to integrate AI and agentic tools into daily GRC operations (automated evidence collection, automated risk scoring, intelligent policy mapping, and continuous audit readiness). Enterprise Risk & Governance: Operationalize Okta’s AI risk and governance framework—addressing training data protection, model risk management, responsible AI principles, and alignment with emerging

Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The Role: Positioned in the first line of defense (1LOD) and reporting to the Head of Business Controls, this experienced executive will act as the Business Controls Lead for SoFi’s Technology and Cybersecurity organizations. This includes comprehensive coverage of Engineering, Information Security, Infrastructure, and Data across the full SoFi Legal structure: SoFi Inc., SoFi Bank, Galileo, Technisys, and SoFi Hong Kong. The Business Controls Lead will act as the direct advisor to the Chief Technology Officer (CTO), Chief Information Security Officer (CISO), and their senior leadership teams. You will lead a team of experienced IT risk & controls team charged with promoting risk awareness and ensure the overall effectiveness of risk and compliance management program implementation and execution across the 1LOD. This role provides support, advisory services, and enables strategic alignment directly to department heads to accelerate and ensure quality execution. You will be responsible for supporting and driving consistent 1LOD adherence to critical programs, such as building and maintaining risk and control self-assessments (RCSAs); identification and evaluation of control effectiveness through control testing; 1LOD risk reporting; and supporting audits and regulatory exams. You will monitor the first l

Tenstorrent is leading the industry on cutting-edge AI technology, revolutionizing performance expectations, ease of use, and cost efficiency. With AI redefining the computing paradigm, solutions must evolve to unify innovations in software models, compilers, platforms, networking, and semiconductors. Our diverse team of technologists have developed a high performance RISC-V CPU from scratch, and share a passion for AI and a deep desire to build the best AI platform possible. We value collaboration, curiosity, and a commitment to solving hard problems. We are growing our team and looking for contributors of all seniorities. Tenstorrent is hiring a Senior In-House Counsel to own key legal functions and serve as a hands-on partner to teams across the organization. In this role, you will take end-to-end ownership of the areas you support—guiding teams through the entire contract lifecycle, from intake and drafting through negotiation, execution, and ongoing management—while minimizing legal and compliance risk and serving as a trusted advisor to internal stakeholders, external partners, and vendors. We seek someone who is adaptable, hands-on, and comfortable pivoting in a fast-paced startup environment. You will independently own competing priorities across commercial contracting, data privacy and security, compliance, and broader business matters, building the processes and playbooks that help the business move quickly and confidently. This role is hybrid or remote and can be based out of Santa Clara, CA, Boston, MA, Toronto, ON or Austin, TX. We welcome candidates at various experience levels for this role. During the interview process, candidates will be assessed for the appropriate level, and offers will align with that level, which may differ from the one in this posting. Who You Are A practical, solutions-oriented advisor. You balance business priorities with thoughtful risk management and can tell a real risk from a theoretical one, which is what lets you

Tenstorrent is leading the industry on cutting-edge AI technology, revolutionizing performance expectations, ease of use, and cost efficiency. With AI redefining the computing paradigm, solutions must evolve to unify innovations in software models, compilers, platforms, networking, and semiconductors. Our diverse team of technologists have developed a high performance RISC-V CPU from scratch, and share a passion for AI and a deep desire to build the best AI platform possible. We value collaboration, curiosity, and a commitment to solving hard problems. We are growing our team and looking for contributors of all seniorities. Tenstorrent is hiring a Senior In-House Counsel to own key legal functions and serve as a hands-on partner to teams across the organization. In this role, you will take end-to-end ownership of the areas you support—guiding teams through the entire contract lifecycle, from intake and drafting through negotiation, execution, and ongoing management—while minimizing legal and compliance risk and serving as a trusted advisor to internal stakeholders, external partners, and vendors. We seek someone who is adaptable, hands-on, and comfortable pivoting in a fast-paced startup environment. You will independently own competing priorities across commercial contracting, data privacy and security, compliance, and broader business matters, building the processes and playbooks that help the business move quickly and confidently. This role is hybrid or remote and can be based out of Santa Clara, CA, Boston, MA, Toronto, ON or Austin, TX. We welcome candidates at various experience levels for this role. During the interview process, candidates will be assessed for the appropriate level, and offers will align with that level, which may differ from the one in this posting. Who You Are A practical, solutions-oriented advisor. You balance business priorities with thoughtful risk management and can tell a real risk from a theoretical one, which is what lets you

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. At Vanta, being an Enterprise SDR is first about hitting targets and driving revenue. It also means joining a community that’s committed to your success and career growth. We believe the future of our sales organization lies with our SDRs, so we invest heavily in enablement and career advancement. You’ll get the training, support and mentorship you need to excel, with a clear path to an Account Executive role. As an Enterprise SDR, you’ll partner with Account Executives, Solutions Engineers, Marketing and channel partners to create pipeline at large organizations (2,000+ employees). You’ll engage senior security, risk and compliance leaders who are under growing pressure from audits, security reviews, third-party risk and AI governance. You don’t need SaaS or cybersecurity experience to be great at this job. We’ll teach you the product, the tools and the process. What we can’t teach is drive, curiosity and coachability, and that’s what we’re hiring for. Great SDRs come from everywhere: commission- or tip-based roles, hospitality, retail, call centers, fundraising, recruiting, real estate, political campaigns, competitive athletics, or something they started on their own. Vanta is growing quickly and is profitable. We keep beating our growth targets while maintaining very strong NPS scores, so it’s an exciting time to join. If you’re hungry to learn and ready to work hard, we’d love to hear from you. What you’ll do as a Sales Development Representative at Vanta : Learn Vanta’s value proposition and Trust Management Platform, including compliance automation, continuous monitoring, Trust Center, questionnaire automation, vendor ri

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. At Vanta, being an Enterprise SDR is first about hitting targets and driving revenue. It also means joining a community that’s committed to your success and career growth. We believe the future of our sales organization lies with our SDRs, so we invest heavily in enablement and career advancement. You’ll get the training, support and mentorship you need to excel, with a clear path to an Account Executive role. As an Enterprise SDR, you’ll partner with Account Executives, Solutions Engineers, Marketing and channel partners to create pipeline at large organizations (2,000+ employees). You’ll engage senior security, risk and compliance leaders who are under growing pressure from audits, security reviews, third-party risk and AI governance. You don’t need SaaS or cybersecurity experience to be great at this job. We’ll teach you the product, the tools and the process. What we can’t teach is drive, curiosity and coachability, and that’s what we’re hiring for. Great SDRs come from everywhere: commission- or tip-based roles, hospitality, retail, call centers, fundraising, recruiting, real estate, political campaigns, competitive athletics, or something they started on their own. Vanta is growing quickly and is profitable. We keep beating our growth targets while maintaining very strong NPS scores, so it’s an exciting time to join. If you’re hungry to learn and ready to work hard, we’d love to hear from you. What you’ll do as a Sales Development Representative at Vanta: Learn Vanta’s value proposition and Trust Management Platform, including compliance automation, continuous monitoring, Trust Center, questionnaire automation, vendor ris

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As Staff Product Manager, Test & Code Coverage, you'll build product capabilities from initial discovery through launch and adoption. You'll help engineering teams understand why pipelines fail, improve test automation, and use code coverage to make better decisions about software quality and risk. You'll turn a technically complex problem space into a focused strategy, roadmap, and developer experience. Working closely with Engineering and Design, you'll explore how agents can diagnose failures, recommend next steps, and help teams recover safely. The goal isn't to add artificial intelligence (AI) fo

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role You'll lead GitLab's Dedicated Infrastructure team, combining hands-on technical leadership with team development. Working with the team's Product Manager, you'll balance delivery speed and quality, guide architecture decisions, and lead the team through incidents. You'll demonstrate ideas through proofs of concept, give team members meaningful feedback, and use data to make prioritization and risk decisions. What you’ll do Partner with the team's Product Manager to set clear priorities and deliver with quality and speed. Maintain at least 99.9% availability for Dedicated infrastructure, strengthen securi

Your Role: Datadog is seeking a Senior Contracts Manager based in our New York City office to review and negotiate vendor agreements, including those with non-standard terms and moderate complexity. This role will primarily support vendor transactions across the Americas while collaborating with global Procurement, Legal, and business teams on cross-regional matters. You will advise Procurement and internal stakeholders on contractual, commercial, operational, and compliance risks. You will also help improve contracting processes and support other members of the contracts team. What You’ll Do: Serve as a primary point of contact for Procurement and business leaders on supplier and service provider engagements across the Americas. Manage matters across the contract lifecycle, from intake through renewal or termination, and support global or cross-regional transactions as needed. Review and negotiate vendor agreements, with an emphasis on SaaS and technology-related vendor transactions. Handle moderately complex agreements independently and take on high-complexity agreements and novel issues with attorney or management support. Typical intake includes agreements for software, cloud services, AI tools, privacy, professional services and consulting, marketing and advertising, equipment purchase and rental (including maintenance), office operations and facilities, and benefits. Partner with Product, Privacy, Security, and Procurement to assess risk and recommend practical positions. Advise stakeholders on gaps between proposed contract terms and the business’s technical and compliance requirements, balancing legal protection with operational and commercial goals. Use negotiation and influencing skills with senior stakeholders to resolve complex contract issues. Interpret existing agreements and advise stakeholders on rights, obligations, renewals, amendments, termination, and risk exposure. Support resolution of vendor disputes by developing recommend