Security Risk Consultant Jobs

A Career with Point72's Technology Team As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications. As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity—all while delivering real business impact for our multi-billion-dollar global business. WHAT YOU’LL DO Lead the implementation, adoption, and continuous improvement of our enterprise privileged access management program to protect critical systems and sensitive access paths Develop and maintain privileged access policies, standards, governance processes, and operating procedures aligned with industry best practices and regulatory expectations Partner with infrastructure, security, cloud, application, and engineering teams to onboard applications, privileged accounts, service accounts, and systems into the platform Apply least privilege, segregation of duties, and risk-based access principles across privileged access workflows and control remediation efforts Lead privileged access certification campaigns and audit responses by validating access rights, producing evidence, and remediating findings Monitor operational health, security posture, and program effectiveness through performance indicators, risk indicators, dashboards, trend analysis, and management reporti

About the opportunity We are seeking an Internal IT Auditor to conduct the full IT audit cycle, ensuring operational effectiveness, reliability, and regulatory compliance across our internal IT environments and critical ICT third-party ecosystems. Our Internal Audit team provides independent assurance over risk and control management, and follows proactive risk mitigation and robust governance to safeguard our digital banking environment. This is a unique opportunity to play a pivotal role in shaping our IT resilience, where you will engage directly with internal architecture teams and critical external vendors to navigate the evolving landscape of digital banking and European financial regulations. In this role, you will: Execute the full audit cycle: Perform comprehensive risk and control management over IT operations to ensure effectiveness, reliability, and adherence to established professional and regulatory standards. Audit critical ICT services & vendors: Lead audits of third-party vendors, outsourced service providers, and cloud infrastructures, evaluating their control environments and how internal processes govern these external services. Analyze data and IT processes: Obtain and evaluate documentation, flowcharts, and data using data-driven audit approaches for system development, IT security, and vendor management. Deliver impactful reporting: Prepare detailed Internal Audit reports that translate complex technical findings into business-relevant insights and actionable recommendations for senior management. Drive continuous improvement: Continuously monitor the IT and ICT vendor risk landscape, facilitate alignment discussions, and advise management on best practices and risk remediation actions. What you need to be successful: 6 years of significant experience functioning as an Internal IT Auditor at an international company within a regulated environment (preferably a bank, financial institution, fintech, or an audit/consulting firm). Holding prof

Who We Are Addepar is a global data and AI platform empowering investment professionals to turn complex financial information into actionable intelligence. Addepar unifies portfolio, market and client data in a total portfolio view and delivers AI-powered insights within investment and client workflows. More than 1,500 firms in 60 countries use Addepar to manage and advise on nearly $10 trillion in assets. Its open platform integrates with 650 software, data and consulting partners to power end-to-end investment operations across firms of all sizes and levels of complexity. Addepar supports clients worldwide with offices in New York City, Salt Lake City, São Paulo, London, Edinburgh, Geneva, Warsaw, Dubai, Pune and Singapore. The Role We're hiring a Product Manager to own the roadmap for the Observability and Compute/Network teams within Addepar's Foundation Engineering organization. This is a foundational infrastructure role: you'll define and drive the roadmap for how engineers understand the health of their systems (metrics, logs, tracing, alerting, on-call tooling, SLOs) and for the compute and networking substrate their services run on (provisioning, container orchestration, networking, security posture, capacity planning, and cost). You'll work closely with the rest of the Foundation Engineering group to translate reliability risk, infrastructure constraints, and platform strategy into a prioritized, outcome-driven roadmap. This role reports to product leadership within Developer Platform and partners day to day with engineering leadership for Observability and Compute/Network. Applicants must be legally authorized to work in the United States for any employer without requiring current or future visa sponsorship (for example, employment-based visas such as H-1B , F-1 /OPT, or similar), and must be authorized to begin work in the U.S. on their first day of employment. What You’ll Do Own and evolve the product roadmap for the Observability and Compute/Network te

Managing Principal, Cybersecurity & AI Location: New York (Hybrid) | Practice Area: Technology & Engineering | Type: Permanent Lead the future of Cybersecurity and AI in Financial Services The Role Joining Capco means joining an organization that is committed to an inclusive working environment where you are encouraged to #BeYourselfAtWork. Capco Cybersecurity is a multi-faceted team focused on evaluating, defining, and delivering risk-aware solutions for leading financial services organizations. We are seeking a Managing Principal in the New York Metro area to help scale our Cybersecurity practice at a pivotal stage of growth. This role blends senior leadership responsibilities—driving business development, leading delivery, and developing teams—with a mandate to shape and lead our Cyber + AI offering. You will work closely with senior stakeholders to build market propositions, develop pipelines, deliver impactful programs, and grow a high-performing team. What You’ll Do Define and scale a Cyber AI strategy aligned with market demand and business priorities Develop offerings including accelerators, playbooks, and reference architectures Lead complex cybersecurity and AI-enabled security engagements end-to-end Build and grow client relationships, acting as a trusted advisor to senior stakeholders Lead business development activities including pipeline creation, proposals, and deal closure What We’re Looking For 12+ years’ experience in cybersecurity, information security, or technology risk Ability to be onsite in New York City 3 days per week Experience within a management or technology consulting environment Strong track record delivering complex cybersecurity programs Experience with AI security, GenAI governance, or AI-enabled security operations Ability to communicate technical concepts clearly to diverse audiences Bonus Points For Knowledge of frameworks such as NIST, ISO, or FFIEC Experience across domains such as cloud security, IAM, or resilience Re

Your Role: Datadog is seeking a Senior Contracts Manager based in our New York City office to review and negotiate vendor agreements, including those with non-standard terms and moderate complexity. This role will primarily support vendor transactions across the Americas while collaborating with global Procurement, Legal, and business teams on cross-regional matters. You will advise Procurement and internal stakeholders on contractual, commercial, operational, and compliance risks. You will also help improve contracting processes and support other members of the contracts team. What You’ll Do: Serve as a primary point of contact for Procurement and business leaders on supplier and service provider engagements across the Americas. Manage matters across the contract lifecycle, from intake through renewal or termination, and support global or cross-regional transactions as needed. Review and negotiate vendor agreements, with an emphasis on SaaS and technology-related vendor transactions. Handle moderately complex agreements independently and take on high-complexity agreements and novel issues with attorney or management support. Typical intake includes agreements for software, cloud services, AI tools, privacy, professional services and consulting, marketing and advertising, equipment purchase and rental (including maintenance), office operations and facilities, and benefits. Partner with Product, Privacy, Security, and Procurement to assess risk and recommend practical positions. Advise stakeholders on gaps between proposed contract terms and the business’s technical and compliance requirements, balancing legal protection with operational and commercial goals. Use negotiation and influencing skills with senior stakeholders to resolve complex contract issues. Interpret existing agreements and advise stakeholders on rights, obligations, renewals, amendments, termination, and risk exposure. Support resolution of vendor disputes by developing recommend

POSITION SUMMARY The Account Manager serves as the primary relationship leader for an assigned portfolio of clients. This individual is responsible for renewals, client satisfaction, and expansion, ensuring clients receive strong value and support throughout their engagement with Clearwater. This role requires excellent relationship-building skills, structured renewal planning, disciplined forecasting, and the ability to identify and qualify expansion opportunities related to cybersecurity maturity and compliance needs. The Account Manager partners closely with Delivery, Solutions Architecture, and Sales Executives to ensure client success and consistent revenue performance. This is a strategic role centered on client partnership, proactive account management, and value realization, ensuring Clearwater remains a trusted and long-term partner. SPECIFIC JOB RESPONSIBILITIES Client Relationship & Retention Serve as primary client point of contact across assigned accounts Lead renewal cycles, including early risk identification and executive communication Maintain client health, value delivery cadence, and partner satisfaction Conduct roadmap meetings and Quarterly Business Reviews (QBRs) Ensure proactive planning and alignment with client strategic goals Expansion & Commercial Growth Identify and qualify expansion opportunities tied to client needs and maturity goals across Clearwater’s full portfolio: Managed services (e.g., Managed Security Services, Cloud Managed Services, ClearAdvantage, ClearConfidence) and IRM|Pro® platform offerings Advisory, Assessment, and Compliance Services Build and manage an expansion pipeline aligned with security programs, IRM|Pro, and managed services Collaborate with AEs, Consulting and/or Solutions Architects to scope and present recommendations Track expansion activity and engage the client executive sponsors to advance conversations Revenue Forecasting & Execution Maintain accurate forecasts for renewals and

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. Join Micron at a transformative time as we expand our advanced manufacturing footprint across Asia Pacific. This is a high-impact role where you will act as a strategic legal partner to large-scale capital projects, supporting the development and delivery of complex industrial and manufacturing facilities. You will work closely with cross-functional teams and senior stakeholders, driving commercially practical solutions across multiple APAC jurisdictions. What You’ll Do Lead end-to-end legal support for major capital projects across APAC, from early development and procurement strategy through contracting, execution, claims, and closeout Draft and negotiate complex agreements, including EPC/EPCM, design-build, construction management, consulting, procurement, and supply contracts Advise on project risks and strategy, including delay exposure, change orders, performance security, defects/warranty, and dispute avoidance/resolution Partner with business stakeholders (procurement, engineering, project teams) to structure tenders, manage risk, and develop contracting templates and playbooks Support regional project development matters, including land, permitting, and regulatory coordination with local counsel Manage external counsel across APAC, ensuring pragmatic, high-quality advice aligned to business objectives Track legal/regulatory developments and translate them into practical guidance for project

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. Join Micron at a transformative time as we expand our advanced manufacturing footprint across Asia Pacific . This is a high-impact role where you will act as a strategic legal partner to large-scale capital projects —supporting the development and delivery of complex industrial and manufacturing facilities. You will work closely with cross-functional teams and senior stakeholders, driving commercially practical solutions across multiple APAC jurisdictions. What You’ll Do Lead end-to-end legal support for major capital projects across APAC, from early development and procurement strategy through contracting, execution, claims, and closeout Draft and negotiate complex agreements , including EPC/EPCM, design-build, construction management, consulting, procurement, and supply contracts Advise on project risks and strategy , including delay exposure, change orders, performance security, defects/warranty, and dispute avoidance/resolution Partner with business stakeholders (procurement, engineering, project teams) to structure tenders, manage risk, and develop contracting templates and playbooks Support regional project development matters , including land, permitting, and regulatory coordination with local counsel Manage external counsel across APAC , ensuring pragmatic, high-quality advice aligned to business objectives</

Our vision is to transform how the world uses information to enrich life for all. Join an inclusive team passionate about one thing: using their expertise in the relentless pursuit of innovation for customers and partners. The solutions we build help make everything from virtual reality experiences to breakthroughs in neural networks possible. We do it all while committing to integrity, sustainability, and giving back to our communities. Because doing so can fuel the very innovation we are pursuing. Join Micron at a transformative time as we expand our advanced manufacturing footprint across Asia Pacific . This is a high-impact role where you will act as a strategic legal partner to large-scale capital projects —supporting the development and delivery of complex industrial and manufacturing facilities. You will work closely with cross-functional teams and senior stakeholders, driving commercially practical solutions across multiple APAC jurisdictions. What You’ll Do Lead end-to-end legal support for major capital projects across APAC, from early development and procurement strategy through contracting, execution, claims, and closeout Draft and negotiate complex agreements , including EPC/EPCM, design-build, construction management, consulting, procurement, and supply contracts Advise on project risks and strategy , including delay exposure, change orders, performance security, defects/warranty, and dispute avoidance/resolution Partner with business stakeholders (procurement, engineering, project teams) to structure tenders, manage risk, and develop contracting templates and playbooks Support regional project development matters , including land, permitting, and regulatory coordinati

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role The Security Risk team is responsible for how Anthropic identifies, prioritizes, and drives treatment of its most important security risks. We are rebuilding risk management to operate as an engineering function, using automation, quantitative risk and AI-native platforms to enable decision making. The risks we assess span Anthropic's full security landscape, so the team needs breadth across domains and the judgment to go deep wherever a decision demands it. Security Risk, in deep partnership with Security Engineering, helps define the security program and shapes how investment and treatment decisions get made. The conventional GRC playbook was not built for a company shipping frontier AI. You will help define what replaces it, with a direct line to CISO-level decisions. As a Security Risk Analyst you will take risk questions from leadership and partner teams and drive them to a decision. Sometimes that is a fast, structured qualitative assessment and other times it is a deep FAIR-based quantitative analysis. Either way you bring leadership a clear position, the tradeoffs, and honest uncertainty, and you defend it under challenge. In parallel, you will help turn quantitative risk into a product partner teams can leverage, and define the standards a growing risk function will run on. Key responsibilities Enable leadership and partner teams to make risk-informed decisions. Take ambiguous risk questions, drive them to a documented decision, and communicate the quantitative and qualitative tradeoffs clearly Lead quantitative analysis of the company's top security risk scenarios using FAIR, calibrated estimation, and simulat

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the team Anthropic's Security Governance, Risk, and Compliance (GRC) team is the connective tissue that holds the company accountable to its security commitments. We translate regulatory, customer, and voluntary obligations into controls that teams act on, and give leadership a bird's-eye view of how well we're meeting them. We're building toward a fundamentally different kind of GRC: one that directs Claude, with the right humans in the loop, to challenge and evidence the performance of controls continuously rather than through periodic audits. Responsibilities: Serve as the security policy partner for AI agent governance, authoring the policies and standards for how agents are built, deployed, operated Define review and approval criteria when an agent may interact with sensitive or regulated data, and which actions require human approval as it relates to compliance frameworks Serve as the GRC reviewer within existing engineering approval workflows Define data governance requirements for agents, including least-privilege access, access reviews, and handling of regulated and sensitive data Monitor agent behavior over time and adapt governance requirements in partnership with cross-functional security, research and engineering teams Map agent security and data controls to AI governance frameworks (e.g., ISO 27001, ISO 42001, EU AI Act), strengthening Anthropic's certification efforts ensuring agent security is auditable Assess and document agent-related security and compliance risks, driving them to resolution with engineering owners Own the policy for agent-related risk acceptances and exceptions, including approval authority, d

For over 20 years, Smartsheet has empowered teams to manage work seamlessly and scale solutions smarter. Now, in our most ambitious chapter yet, we are uniting human teams with AI agents. By orchestrating the work agents do best, automating manual tasks and uncovering insights at scale, we create the space for people to focus on what truly matters: judgment, creativity, and big thinking. That is magic at work, and it’s what we show up for every day. Smartsheet needs a clear, defensible answer to "how risky is this?" for the risks that live inside our own environment and the risks that come in through every vendor and partner we rely on. We're looking for a Sr. Security Engineer I to own our Security Risk Management program end-to-end—running risk identification, analysis, and quantification; maintaining the enterprise risk register; and driving mitigation strategies that leadership can act on—while also overseeing our Third-Party Risk Management (TPRM) function. You don't need to be a hands-on security engineer to succeed here: you need to understand our technology and architecture well enough to have a real conversation with engineering teams about their risk exposure, and you need the judgment and communication skill to turn technical risk into business language that drives decisions. This role sits at the center of how Smartsheet decides what to fix first, what to accept, and what a vendor relationship is actually costing us in risk. This role reports to the Senior Director, GRC Engineering and can be based in our Bellevue, WA office or remotely from anywhere in the US where Smartsheet is a registered employer. You Will: Own and mature Smartsheet's Security Risk Management program: risk identification, analysis, scoring, and quantification (e.g., FAIR-based or similar) across internal systems, third parties, and emerging initiatives. Maintain the enterprise risk register—ratings, ownership, mitigation status, and residual risk—and drive it toward a living, decisi

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Role As part of the Anthropic security department, the compliance team owns understanding security and AI safety expectations, as established by regulators, customers and (nascent) industry norms (which we also seek to influence). The compliance team uses this understanding to provide direction to internal partners on the priorities of security and safety requirements they must meet. The compliance team assures regulators and customers that those expectations are met by earning security credentials and responding to direct inquiry about Anthropics security program from auditors, customers and partners. This opportunity is unique, as we work to secure today’s most novel and valuable asset types, we must build a new kind of compliance program, assuring the safety of artificial intelligence capabilities. Key responsibilities Understand how Anthropic's security and privacy capabilities across major cloud platforms implement common frameworks (e.g., NIST 800-53, NIST 800-171, ISO 27001, ISO 27701, CSA CCM, and SOC 2). Build scalable data center and hyperscaler processes and documentation systems that will support future expansion to additional geographies and compliance frameworks. Assess and mitigate security and operational risks, implementing corrective actions, and managing vendor compliance. Coordinate engagements with independent assessors to earn security and privacy certifications and attestations important to Anthropic customers and enterprise partnerships, and to meet regulatory obligations. Write, update and enact policies capturing security, privacy, and AI safety requirements. Maintain and enhance Anthropic's s

At Jamf, we believe in an open, flexible culture based on respect and trust. Our track record and thriving work environment all stem from the freedom we grant ourselves to get the job done right. We take pride in helping tens of thousands of customers around the globe succeed with Apple. The secret to our success lies in our connectivity, while operating with a high degree of flexibility. Work-life balance remains our priority while feeling connected is important to maintain our strong culture, achieve our goals, and thrive as #OneJamf. What you'll do at Jamf: The Security Risk & Compliance Analyst (Analyst) is responsible for ensuring that Jamf ‘s security controls, policies, and procedures are implemented in accordance with applicable laws, regulations, and industry standards. Reporting to the Director of Security Risk & Compliance, the Analyst will support the activities and improvements across the entire scope of Jamf’s Security Risk & Compliance program. You may be required to work periodically at a Jamf office or collaborative work location with other Jamf employees in your area for certain events or moments that matter. What you can expect to do in this role : Conduct risk assessments in accordance with established methodology. Collaborate with team members to evaluate cyber risk and treatment plans, and follow up to ensure appropriate action is taken to mitigate risk. Support maintenance of security policies to ensure compliance with relevant laws, regulations, and industry standards. Collaborate with teams across Jamf to ensure security policies are consistently implemented. Participate in monitoring efforts to ensure compliance with the security-related policies and procedures. Participate in external audits to ensure Jamf’s ongoing maintenance of its security certifications (i.e., ISO 27001, ISO 27701, SOC2 Type 2, StateRAMP). Support the vendor risk management function for evaluating Jamf’s

At Asana, security is foundational to our mission of helping teams work together effortlessly. Our security team protects Asana’s employees, users, and customers by proactively addressing threats, ensuring compliance with legal and regulatory requirements, and fostering a culture of security throughout our product and operations. We are a team of security engineers and risk and compliance practitioners who build innovative safeguards and collaborate across the organization to build and maintain trust at scale. As the Third Party Risk Management Lead, you will be responsible for building and running Asana’s Third Party Risk Management (TPRM) program. You will own the end-to-end lifecycle of vendor security risk — from initial due diligence and risk tiering through ongoing monitoring and remediation. You will work closely with Procurement, Legal, Privacy, and Engineering teams to ensure that our third-party relationships are effectively assessed, tracked, and managed. This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. Our employees in Poland are employed under a contract of employment. What you’ll achieve Own and scale Asana’s TPRM program: Design, implement, and continuously improve a risk-based framework for assessing and managing third-party vendors and service providers. Establish risk tiering criteria, assessment workflows, and governance processes that scale with business growth. Lead vendor security assessments: Conduct and oversee security due diligence for new and existing vendors, including reviewing SOC 2 reports, ISO 27001 certifications, security questionnaires (SIG, CAIQ), and other relevant documentation. Identify gaps and work with vendors to remediate findings. Drive rem