Senior Risk And Compliance Engineer Jobs

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . We're hiring an Analytics Engineer to join the Compliance Technology team within the Platform organization. This team builds and operates data and detection capabilities that enable Coinbase to meet global BSA/AML and related regulatory obligations at scale, partnering with Compliance, Product, and Engineering to ensure monitoring and investigative controls are effective, measurable, and auditable. You'll build and own end-to-end data pipelines that power compliance detection and decisioning, improving signal quality, defining control performance measurement, and creating scalable tooling that makes compliance data easier to trust and use. What you'll do: Build and maintain curated datasets and data models (e.g., case, alert, entity, transaction, and risk features) that power compliance controls across Transaction Monitoring, EDD/KYC, and Screening systems. Own data quality for compliance datasets by implementing validation checks, monitoring, lineage tracking, and documentation to ensure outputs are accurate, complete, and audit-ready. Partner with cross-functional engineering teams and Compliance stakeholders to close upstream data gaps, standardize instrumentation, and translate control requirements into scalable data structures and feature sets. Drive detection signal quality improvements by analyzing detection outputs, identifying opportunities to reduce non-act

Work Flexibility: Hybrid or Onsite Stryker is hiring a Senior Quality Engineer to join our Neurovascular division. This is a hybrid r ole based in Fremont, CA or Salt Lake City, UT . As the Senior Design Quality Engineer , you will be actively involved in Product Risk Management, Post Market Surveillance, Design Control and Product Quality Improvement. You will be involved in a fast-paced mix of short design change efforts and will be responsible for product risk management and adherence to design control requirements throughout the product lifecycle. You will be responsible for ensuring that post market data and feedback is channeled into the risk management system throughout the product lifecycle. You will make regular use of problem-solving tools and statistical analysis to analyze and trend data and provide quality input into technical investigations, perform test method development and validation, design verification, risk assessment and design reviews. You will be responsible for supporting product testing and failure analysis, writing protocols and reports, creating and maintaining risk files and assessing the impact of necessary changes to our products. You will lead initiatives to increase sales and improve the customer experience of our devices. Neurovascular (NV) products push the boundaries of technology to meet ever increasing product performance requirements, making the goal of assessing and demonstrating, safety, performance and compliance an exciting challenge. What You Will Do Develop qualification plans, protocols, and reports for new products, existing products, components, and subassemblies. Execute product testing, inspection, verification, and validation activities to support design and quality objectives. Perform failure investigations and root cause anal

Work Flexibility: Hybrid or Onsite Stryker is hiring a Senior Quality Engineer to join our Neurovascular division. This is a hybrid r ole based in Fremont, CA . As the Senior Design Quality Engineer , you will be actively involved in Product Risk Management, Post Market Surveillance, Design Control and Product Quality Improvement. You will be involved in a fast-paced mix of short design change efforts and will be responsible for product risk management and adherence to design control requirements throughout the product lifecycle. You will be responsible for ensuring that post market data and feedback is channeled into the risk management system throughout the product lifecycle. You will make regular use of problem-solving tools and statistical analysis to analyze and trend data and provide quality input into technical investigations, perform test method development and validation, design verification, risk assessment and design reviews. You will be responsible for supporting product testing and failure analysis, writing protocols and reports, creating and maintaining risk files and assessing the impact of necessary changes to our products. You will lead initiatives to increase sales and improve the customer experience of our devices. Neurovascular (NV) products push the boundaries of technology to meet ever increasing product performance requirements, making the goal of assessing and demonstrating, safety, performance and compliance an exciting challenge. What You Will Do Develop qualification plans, protocols, and reports for new products, existing products, components, and subassemblies. Execute product testing, inspection, verification, and validation activities to suppor

Who Are We? Postman is the world’s leading API platform, used by more than 45 million+ developers and 500,000 organizations, including 98% of the Fortune 500. Postman is helping developers and professionals across the globe build the API-first world by simplifying each step of the API lifecycle and streamlining collaboration—enabling users to create better APIs, faster. The company is headquartered in San Francisco and has offices in Boston, New York, Austin, Tokyo, London, and Bangalore - where Postman was founded. Postman is privately held, with funding from Battery Ventures, BOND, Coatue, CRV, Insight Partners, and Nexus Venture Partners. Learn more at postman.com or connect with Postman on X via @getpostman. P.S: We highly recommend reading The "API-First World" graphic novel to understand the bigger picture and our vision at Postman. The Opportunity The Security GRC team is responsible for the overall security posture of Postman by ensuring compliance with applicable regulations and contractual obligations and maintaining effective and efficient governance, risk, and compliance programs. In addition, the Security GRC team is directly involved with supporting and enabling Sales and driving security and compliance initiatives to further the growth of Postman. We seek a Senior GRC Engineer who combines deep GRC expertise with strong engineering skills to build and scale automation across governance, risk, and compliance. This is a hands-on technical role focused on designing and operating GRC tooling, integrations, and AI-assisted workflows that reduce manual effort while improving security assurance. The ideal candidate has experience implementing and maturing compliance programs, including SOC 2, ISO 27001, HIPAA, GDPR, CCPA, and FedRAMP, and can translate security and risk requirements into practical engineering solutions. As a senior member of the Security GRC team, you will partner with Security, Engineering, IT, Legal, Sales, and other stakeholders to

About the Team DoorDash’s Internal Audit team provides independent assurance that the company’s risk management, governance, and internal control processes are operating effectively. We are a small team that is looking to expand and bring on motivated professionals. We don’t think of ourselves as a typical audit function - we are obsessively focused on risks to the organizations which reflects in the type of projects we support and execute. DoorDash is rapidly growing - we are expanding in multiple geos and launching new products. This exciting growth allows us to drive creative analysis, strategy, and solutions. Our focus areas include financial, operational, regulatory, security, IT, and more. About the Role We are seeking a Senior Director, IT Internal Audit to lead the strategy, execution and evolution of DoorDash’s global IT audit function. In this highly visible role, you will help shape the technology risk management practices across DoorDash - you will oversee a broad portfolio of audits, including IT SOX, cybersecurity, data governance, AI governance, and operational technology. You will report directly to the Chief Audit Executive and serve as a strategic advisor to DoorDash’s technology, security, and engineering leaders. You will bring deep technical audit expertise, exceptional leadership skills, and a passion for innovation to build and lead a world-class IT audit organization that scales with the business. This role demands someone who can balance strategy with execution (and isn’t afraid to roll up their sleeves) — a leader who can anticipate emerging technology risks, foster strong cross-functional partnerships, translate complex technical concepts into meaningful business insights, and be ready to operate at the lowest level of detail. You will partner with teams across Security, Platform Engineering, Data Engineering, Privacy Legal, AI, Product, and Compliance to strengthen our risk posture and drive a data-driven approach

At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive. Lyft connects people to transportation to change the way we live and get around our communities. Our drivers and passengers entrust Lyft with their personal information and travel details to get where they are going and expect us to keep that data safe. Lyft's Privacy and Compliance team ensures that appropriate security controls and data protections are applied to meet our compliance requirements and customer obligations We conduct security risk assessments, consult with organizational stakeholders, monitor and continuously improve Lyft's Information Security program, facilitate third-party security audits, work with engineering teams to implement, automate, and monitor security controls, develop policies, and advise on all matters related to information security assurance. We also conduct risk assessments of our third parties to ensure we understand and can mitigate any associated risk. We are looking for a highly motivated, organized, and detail-oriented individual to join our Privacy and Compliance team. As a senior member of this team, you will support our third party risk management program by conducting risk assessments and recommending mitigations. You will also help our Customer Trust team by completing inbound security and data protection questionnaires from potential partners and customers. Responsibilities: Third Party Risk Assessments Review vendor or partner requests from internal stakeholders, understanding the business purpose Work with external stakeholders to collect relevant security and data protection information from third parties Review the information and accurately assess and document the risk, and propose potential mitigations Security Questionnaires Draft responses to customer security questionnaires (e.g., CAIQ, SIG) and assist in the ma

We are seeking an experienced Trading Operations Specialist to assist the company in executing trading strategies and ensuring the effective risk management of trading activities. This role involves overseeing pre-trade, live, and post-trade monitoring, stress testing algorithms, implementing kill functionality, monitoring market abuse, and raising red flags to senior management and compliance as necessary What You’ll Be Doing: Deploy and execute the company's trading strategy effectively, ensuring alignment with overall business objectives Have access to and oversee the implementation of the kill switch to manage and mitigate trading risks promptly Lead a first-line team responsible for owning and managing trading risks, including stress testing algorithms and monitoring trade executions Conduct pre-trade reviews to assess and approve trading strategies and positions before execution Monitor trades in real-time and review open positions to make informed decisions and adjustments as needed Raise red flags to the CEO, compliance team, and relevant stakeholders for immediate action and resolution Liaise with regulators on compliance matters where necessary Collaborate with the trading desk to ensure smooth and efficient trading operations while adhering to risk management protocols What We Look For In You: Bachelor's degree in Finance, Economics, Mathematics, or a related field 5+ years of proven experience in trading operations, risk management, and market surveillance within the financial industry Strong understanding of trading strategies, algorithms, risk metrics, and market dynamics Excellent analytical skills and the ability to assess and manage trading risks in real-time Proficiency in using trading platforms, automated monitoring tools, and risk management software Effective communication and decision-making skills to lead and collaborate with multidisciplinary teams in Finance, Economics, Mathematics, or related field (or equivalent practical experience) Why

Opportunity Overview We're hiring a Data Architect who will serve as a senior technical leader responsible for architecting the complete lifecycle data moves, transforms, and creates value across every product line we operate. You'll own the blueprint for our enterprise data lakehouse - setting the standards, governance, and strategy that elevate data from a byproduct of operations to the company's most valuable asset. We need someone who pairs deep mathematical and logical modeling expertise with a builder's instinct - someone who codes, prototypes fast, and proves out next-generation AI data architectures before committing the organization to them. This role would need experience with US healthcare domain data. What You'll Do Semantic Layer Governance: Set the technical standard and reference architecture for a universal semantic layer across multiple distinct data products, ensuring unified definitions of complex metrics and healthcare business entities across Architect the Enterprise Context Layer: Define, scale, and govern the global Enterprise Ontology (abstract domain maps, business entity classes, and entity-relationship rules) that serves as the backbone for Agentic AI systems. AI-Native Prototyping : Leverage modern AI-native development environments (such as Cursor, GitHub Copilot) to rapidly generate, iterate, and document blueprints for complex enterprise data schemas and metadata layers. Security & Compliance Leadership : Embed regulatory compliance (HIPAA, FHIR) and security principles into platform design. Partner with security and compliance teams to ensure architectural decisions support audit readiness and risk mitigation. Cross-Functional Collaboration : Partner with executive leadership, product management, and engineering to translate business requirements into scalable technical solutions. Communicate complex architectural concepts to both technical and non-technical stakeholders. ISMS roles and responsibilities Good knowledge of Informati

Reolink , a leader in intelligent visual technology for homes and businesses, was founded in 2009 by a group of engineers with a strong commitment to and passion for smarter security solutions. Our products are now trusted by millions of users across more than 110 countries and regions worldwide. Building on this trust, we continue expanding our presence and bringing our innovations to more markets around the globe. Reolink remains committed to delivering advanced, reliable, and user‑centric solutions that empower people to protect what matters most. Responsibilities:​ Global Compliance and Strategic Management:​ Develop, lead, and oversee the company’s global legal compliance strategies and framework to ensure all operations across regions fully comply with local laws, regulations, and international standards. Legal System Development and Contract Management:​ Establish, refine, and optimize the company’s global contract management system and standardized legal documents; lead or review major, complex commercial contracts, agreements, and investment-related legal documents; build a comprehensive global legal risk prevention and management system. Dispute Resolution and Business Support:​ Represent the company in handling significant and complex litigation, arbitration, and other legal disputes; provide on-site legal leadership and support in key business negotiations, M&A, financing, and other strategic matters to safeguard the company’s core interests. Legal Advisory and Risk Control:​ Provide authoritative and forward-looking legal advice and solutions to senior management and various business departments; identify, assess, and alert legal and compliance risks in global business operations. Team Leadership and External Resource Management:​ Lead and manage the global legal team (including legal professionals in Singapore and overseas locations); efficiently manage and coordinate external lawyers and legal advisors to ensure quality and cost-effectiveness in h

Discord has a highly engaged community of millions of daily active users who use the platform for many different reasons, but there’s one thing that nearly everyone does: play video games. Discord plays a uniquely important role in the future of gaming, and we are focused on making it easier and more fun for people to hang out before, during, and after playing games. As Discord's advertising business grows alongside that community, protecting user trust and brand safety is central to that growth story. You'll join the Product Policy team's Commercial Policy function, partnering closely with Legal, Revenue, Product, Engineering, and Enforcement teams to build the frameworks that let Discord's ads business scale responsibly. This is a foundational, high-visibility role: you'll independently own policy strategy for Brand Safety and Anti-Malware, working directly with advertisers, industry vendors, and internal product teams to keep the platform safe as it grows. This person will report to the Senior Manager, Commercial Policy. Please note: this role involves regular exposure to potentially disturbing content, including violence, hate speech, and other harmful material. What You'll Be Doing Develop and evolve Discord's Brand Safety, Suitability, and anti-malvertising policies for the ads business, partnering with Legal to ensure global compliance and using AI/data analytics to spot emerging commercial risks Build deep knowledge of Discord's revenue strategy and commercial infrastructure, translating complex policy requirements into actionable guidance for Sales and Product teams Partner directly with Discord Advertising customers, Marketing, and Business Development to define partner requirements Guide Revenue product teams throughout the development lifecycle, partnering with Legal on risk and mitigation strategies for features in your portfolio Partner with Product and Engineering on detection infrastructure and enforcement scaling, and with Trust & Safety to ensu

Location: Remote (U.S.) Clearance: U.S. Citizen or Permanent Resident Required with the ability to obtain a Public Trust Salary Range: 110K – 125K LTS is seeking a Senior Security RMF Engineer to join a cybersecurity transformation surge team supporting the VA.gov Platform. This role will serve as the bridge between VA security/RMF requirements and the engineers responsible for implementing those requirements across VA.gov. The Senior Security / RMF Engineer must understand how security controls are implemented in modern cloud infrastructure and software delivery environments and be able to translate control deficiencies, authorization requirements, and security risks into actionable engineering work.This is not intended to be a documentation-only compliance role. This individual will work closely with DevSecOps engineers and the existing VA.gov Platform ATO/security team to assess the current security posture, address gaps in VA.gov's Critical Controls, support ATO/cATO readiness, improve authorization artifacts, and automate evidence and control assessment wherever possible. The PWS specifically describes the desired model as one in which ATO/RMF documentation confirms security rather than defines it, with success measured through risk reduction and security outcomes rather than paperwork completeness. What You’ll Do: Assess VA.gov Platform compliance with the 18 Critical Controls identified by VA and help establish a baseline of current implementation and remaining gaps. Perform security reviews, gap analyses, and risk assessments across VA.gov Platform infrastructure, pipelines, applications, and component systems. Support ongoing ATO and cATO readiness for the VA.gov Platform authorization boundary. Develop, update, and maintain RMF and authorization artifacts, including System Security Plans (SSPs), control narratives, POA&Ms, Business Impact Analyses (BIAs), Privacy Threshold Analyses (PTAs), and supporting evidence. Evaluate identified

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. Backend Engineer, Monitoring and Anomaly Detection (Monetization) An overview of this role The Observability, Monitoring, and Integrations team sits within GitLab's Monetization section and owns end-to-end observability, monitoring, and detection across the systems that power how customers buy and use GitLab. As a Backend Engineer on the Fulfillment Workflow Monitoring (Catch All) team, you'll build and operate telemetry, detection, and reconciliation tooling that identifies billing, data, and event anomalies across CustomersDot, Salesforce, and Zuora before they affect revenue or the customer experience. This is a greenfield tea

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As the Senior Manager of the Security Posture Management (SPM) team within the Product Security Department , you lead the team that secures GitLab's own software factory: the estate we build and ship from. Your team drives comprehensive, governed rollouts of GitLab's security capabilities across every project, applying our own product the way our customers do, and builds proactive software supply chain security as a first-class capability within Product Security. This is Customer Zero work with real reach. Where the team hits friction adopting our own features at scale, that signal goes straight to Produc

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Customer Success Engineer, you'll expand your impact by partnering with customers in GitLab's group across APJ to help them get measurable value from GitLab through hands-on technical guidance and proactive enablement. You'll serve as a trusted technical advisor, partnering with customers over Zoom and email to improve adoption, unblock implementations, and apply DevSecOps best practices across the software delivery lifecycle. Working closely with Account Executives and Renewals Managers, you'll align technical recommendations to customer goals and help support renewals and expansion by demonstrating

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Senior Professional Services Engineer at GitLab, you'll work directly with customers to deliver installation, migration, training, and advisory services that help them adopt GitLab successfully. You'll lead engagements from single-node Omnibus installs to large reference architectures built with infrastructure as code (IaC) and configuration as code. You'll also guide migrations from other systems to GitLab SaaS or self-managed deployments, and help customers make practical decisions that improve reliability, security, and day-to-day workflows. In this role, you'll work closely with customers and Git