Technical Security Governance Lead Jobs

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. About the role We are looking for a Principal Engineer to help build GitLab Duo Agent Platform, the agentic orchestration layer that runs AI agents and flows across the entire software lifecycle. Principal Engineers at GitLab are recognized experts across multiple technology domains and represent the senior technical leadership within their organization. In this role you will set technical direction for a significant part of the Agent Platform, working across several teams to turn agentic capabilities into something engineering organizations can actually depend on: predictable, observable, governable, and fast enough to sit in th

NVIDIA has been transforming computer graphics, PC gaming, and accelerated computing for more than 25 years, fueled by incredible technology and amazing people. Today, we're using the power of AI to define the next era of computing, with our GPU acting as the brains of computers, robots, and self-driving cars. Doing what's never been done before takes vision, innovation, and the world's best talent. As an NVIDIAN, you'll be immersed in a diverse, encouraging environment where everyone is inspired to do their best work. NVIDIA is hiring a Staff Engineer to build the company's Enterprise Data Governance platform. This platform spans sensitive-information protection, governed data access across every collaboration and content system at NVIDIA, and the knowledge infrastructure that makes our enterprise AI trustworthy and accurate. What makes this role genuinely hard is the tension at its core: AI agents need broad, deep access to enterprise knowledge to be useful, while export controls, legal constraints, and security policy demand precise, auditable access control. Getting both right, across dozens of systems and one of the most complex enterprise environments in the industry, is the problem this team is solving. We are looking for technically strong engineers across the senior to principal level who thrive on hard infrastructure problems and want to own work that is central to how NVIDIA operates at scale. What You Will Be Doing: Sensitive Information Protection Own the roadmap for sensitive-information detection and remediation, working with Finance, Legal, and Security to define classification models, remediation workflows, and reporting that leadership can trust. Evaluate and integrate ML-based classification approaches to detect sensitive content across unstructured data at scale, and iterate on precision and recall as the data landscape evolves. Governed Dat

Join us in building the future of finance. Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic cultural and financial shift, keep reading. About the team + role We are building an elite team, applying frontier technologies to the world's biggest financial problems. We're looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn't a place for complacency, it's where ambitious people do the best work of their careers. We're a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. The Internal Audit function at Robinhood provides independent, objective, and timely assurance on the effectiveness of governance, risk management, and internal controls — helping to strengthen the organization's overall control ecosystem. Our team oversees governance across the Company and its regulated entities, and facilitates the communication of risk management information between RHM leadership and the Board of Directors and its Committees. We work closely with cross-functional partners across Brokerage, Crypto, Security, and Engineering to drive meaningful improvements to the control environment. We're a collaborative, high-performing group of auditors who take their work seriously — and love what they do! As an Internal Audit Senior Associate , you will play a key role in executing internal audits for Robinhood's International Entities, spanning Brokerage and Crypto products and integrated audits across multiple lines of business and jurisdictions. You will be a technically skilled, collaborative, and analytical professional with a strong understanding of risks, controls, and processes in a regulated Fintech setting. You'll contribute across the full audit lifecycle

Everpure (NYSE: P) has evolved from storage pioneer to data platform, closing fiscal 2026 with $3.7 billion in revenue, its first billion-dollar quarter, and accelerating growth into FY27. Our strategic agenda spans the companies defining the next era of technology - hyperscalers, AI labs, the AI hardware supply chain, data platform providers, and the broader AI ecosystem. This type of work—work that changes the world—is what the tech industry was founded on. So, if you're ready to seize the endless opportunities and leave your mark, come join us. THE ROLE The Senior Manager, Data & Analytics Products owns a portfolio of enterprise-critical Tier 1 products from strategy and discovery through delivery, adoption, service performance, and value realization. The role connects executive and business priorities to product roadmaps and leads across product, data engineering, analytics, governance, architecture, security, operations, and business teams. The ideal candidate is a data and analytics leader with strong product judgment: commercially grounded, technically fluent, practical in the application of AI, and skilled at aligning senior stakeholders and global delivery teams. Success requires the ability to make enterprise data trusted, analytics products useful, and complex strategic programs executable - without requiring hands-on engineering or model development. WHAT YOU'LL DO Tier 1 insights product portfolio strategy. Own the vision, value proposition, target users, product criticality, investment priorities, outcome metrics, and multi-horizon roadmaps for the company's most important data and analytics products. Balance run, grow, and transform priorities across the portfolio. Discovery and product lifecycle. Lead stakeholder interviews, user research, decision-journey and process analysis, and opportunity sizing. Translate important business questions into product requirements, priorities, roadmaps, success measures, and an ongoing improvement a

The Platform team creates the technology that enables Spotify to learn quickly and scale easily, enabling rapid growth in our users and our business around the globe. Spanning many disciplines, we work to make the business work; creating the infrastructure, tooling, frameworks, and capabilities needed to welcome a billion customers. We are looking for a Backend Engineer II to join our Security Compliance Engineering team. You’ll help turn complex security, risk, and compliance requirements into scalable software solutions that make it easier for teams across Spotify to build and operate securely. You’ll work with engineers and partners across security to strengthen our technical Governance, Risk, and Compliance (GRC) capabilities. What You'll Do Design and build backend products, services, and infrastructure that strengthen Spotify’s technical security Governance, Risk, and Compliance strategy. Build scalable infrastructure and tooling that help apply regulatory requirements and security framework controls across Spotify’s distributed environment. Develop reliable services that automate security and compliance processes, reducing manual work and helping engineering teams understand and meet requirements. Work with security, engineering, and other partners to translate security and compliance requirements into practical technical solutions. Contribute to consistent engineering practices that address security, risk, and compliance requirements while supporting teams at scale. Own the quality of your work from design and development through deployment, operation, and continuous improvement. Who You Are You have experience developing backend software using an object-oriented programming

Location: New York City or San Francisco - 4 days in office About the Role We are looking for a highly technical Senior Security Engineer who is passionate about protecting data across modern SaaS, cloud, endpoint, and analytics environments. This role is ideal for someone who enjoys solving complex data security challenges through engineering, automation, and AI rather than relying solely on commercial tools. You will help build, scale, and continuously evolve Sigma’s data security capabilities across SaaS applications, cloud platforms, endpoints, collaboration tools, AI systems, and data warehouses. You will be joining a dynamic and highly technical Security Engineering team at Sigma. This is a hands-on engineering role for builders, innovators, and problem-solvers who want to create scalable security solutions that protect the organization's most critical asset - data. What You'll Do Design, build, and maintain security platforms, services, APIs, automation, and internal tooling that protect Sigma's data across cloud, SaaS, endpoint, and analytics environments. Develop scalable solutions for data discovery, classification, governance, access controls, monitoring, and protection using modern engineering practices and automation. Build and mature capabilities around CASB, DLP, DSPM, SSPM, insider risk, and data access governance to reduce the risk of unauthorized access, sharing, or exposure of sensitive information. Build and maintain DLP controls and tooling across multiple cloud, OS environments and decentralized datasets, implementing and tuning prevention capabilities that protect against sophisticated data security incidents. Drive automation across DLP engineering and operations by leveraging LLMs, agentic AI, and an automation-first mindset to streamline workflows, reduce manual effort, and scale data protection coverage. Design and implement security controls across SaaS applications, collaboration platforms, endpoints, and business-critical

Location: New York City or San Francisco - 4 days in office About the Role We are looking for a highly technical Senior Security Engineer who thrives on building security capabilities from the ground up. This role is ideal for someone who enjoys solving complex security challenges through engineering, automation, and AI rather than relying solely on commercial tools. You will help build, scale, and continuously evolve the next generation of security capabilities across our cloud-native SaaS platform, with a strong focus on AI security, automation, and scalable security operations. We are looking for engineers who enjoy solving security problems across multiple domains rather than specializing exclusively in a single area. You will join a highly technical Security Engineering team that values innovation, ownership, and building scalable security solutions. This is a hands-on engineering role for builders, innovators, and problem-solvers who want to create security solutions that operate at scale. What You’ll Do Security Engineering Design, build, and maintain security platforms, services, APIs, automation, and internal tooling. Develop solutions that streamline Cloud vulnerability management, Network Security, Detection engineering, Incident response, access governance, and security operations. Use software engineering principles to build detections-as-code, security workflows, internal platforms, and scalable security services that enable the organization to move faster while remaining secure. Leverage AI extensively to accelerate investigations, automate workflows, improve decision making, and reduce operational overhead. AI & LLM Security Design and implement security controls for AI applications, LLM-powered services, agents, and AI development workflows. Build guardrails and security tooling to identify and mitigate risks such as prompt injection, data leakage, model misuse, excessive permissions, insecure plugins, and unsafe AI interacti

CAPCO POLAND *We are looking for Poland based candidate. Capco is a fully independent, global management and technology consultancy. For 25 years we have combined innovative thinking with deep industry knowledge to deliver business consulting, digital transformation and technology services to Finance and Energy markets. Our collaborative and efficient approach helps clients reduce costs and manage risk and regulatory change while increasing revenues. We are thinkers, innovators, and disruptors. We are small enough to care but large enough to matter. As an IT Security Analyst , you will play a key role in supporting a large-scale Secrets & Credential Management initiative. You will analyze current-state environments, identify control gaps, and define robust, scalable security requirements. Working across technical and business teams, you will help ensure that sensitive credentials are governed, controlled, and aligned with regulatory and operational expectations. Key Responsibilities: Conduct end-to-end analysis of secrets and credential management practices across applications, infrastructure, and platforms Identify, classify, and document secrets, including ownership, usage, storage, lifecycle stage, and associated risks Assess control gaps (e.g., unmanaged credentials, hardcoded secrets, weak auditability) and define remediation approaches Define functional and non-functional requirements for centralized secrets management solutions Facilitate workshops with stakeholders to gather requirements, validate findings, and support governance activities Required Skills and Experience: At least 5 years of experience in a similar role. At least 2 years of experience in working with IAM projects. Experience in IT security analysis, security requirements engineering, or security governance within complex environments Strong understanding of IAM, PAM, least privilege, and secure access governance principles Knowledge of credential types (passwords, SSH

We believe that the way people interact with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. Plaid powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like Venmo, SoFi, several of the Fortune 500, and many of the largest banks to make it easy for people to connect their financial accounts to the apps and services they want to use. Plaid’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, the company is headquartered in San Francisco with offices in New York, Seattle, Washington D.C., Raleigh, London, and Amsterdam. The Security Governance, Risk, and Compliance (GRC) team is part of Plaid’s security organization, focused on enabling the business by proactively managing information security risks and maintaining effective controls. Our mission is to reduce the likelihood and impact of security risks while operating a robust assurance program that builds trust with our customers, consumers, and data partners. We own Plaid’s security compliance frameworks, run our audits and risk programs, and partner across the company to keep Plaid’s platform secure, resilient, and aligned with industry and regulatory expectations. GRC Engineering is how we make all of that scale — turning compliance into code, evidence into telemetry, and audits into a continuous, automated capability. The Role: You will own GRC Engineering at Plaid — a foundational, high-ownership role defining an emerging discipline from the ground up. Today most of our compliance work is manual and point-in-time; you will turn it into an engineered system that is continuous, data-driven, and scalable, and set the technical direction for the field. You will: Define the discipline and the architecture — how GRC Engineering works at Plaid, no

We're Hiring Senior AI Engineer (Generative AI Azure) Remote Immediate Joiners Preferred Salary: Up to 12 LPA We are seeking an experienced Senior AI Engineer to design, develop, and deploy enterprise-grade Generative AI solutions on Microsoft Azure. The ideal candidate will have strong expertise in Large Language Models (LLMs), Agentic AI, Retrieval-Augmented Generation (RAG), Model Context Protocol (MCP), Azure AI Services, and modern AI engineering practices. Technical Summary • AI & LLMs: Azure OpenAI, GPT-4.x, OpenAI, Prompt Engineering, Prompt Chaining, Function Calling, Structured Outputs, Tool Calling, JSON Schema, Model Evaluation, Guardrails, Fine-tuning Concepts • Agentic AI: Multi-step Reasoning, Planning, Memory Management, Tool Orchestration, Multi-Agent Systems, Human-in-the-Loop Workflows, Reflection, Context Management, AI Observability • Frameworks: Semantic Kernel, LangChain, LangGraph, AutoGen, Azure AI Agent Service • RAG & MCP: Retrieval-Augmented Generation, Vector Search, Semantic Search, Hybrid Search, Embeddings, Knowledge Grounding, Citation Generation, Document Ingestion, Chunking, MCP Architecture, MCP Servers & Clients • Azure Technologies: Azure AI Foundry, Azure AI Search, Azure AI Document Intelligence, Azure Machine Learning, Azure Functions, API Management, Logic Apps, App Service, Container Apps, AKS, Azure Storage, Data Lake Gen2, Azure Key Vault, Azure Entra ID, Azure Monitor, Application Insights, Event Grid, Service Bus • Programming & DevOps: Python, C#, REST APIs, FastAPI, ASP.NET Core, JSON, YAML, Git, Azure DevOps, Docker, Kubernetes • Data Platforms: SQL Server, Azure SQL, PostgreSQL, Cosmos DB, Snowflake, Microsoft Fabric, Azure Databricks, Delta Lake, Vector Databases (Azure AI Search, Pinecone, Weaviate, Milvus, Qdrant) • Security & Governance: Responsible AI, Prompt Injection Prevention, RBAC, Content Filtering, Data Privacy, GDPR, ISO 27001, Azure Key Vault, Audit Logging & Monitoring • Nice to Have: Microsoft Copilo

RDQ226R497 At Databricks, we are passionate about enabling data teams to solve the world’s toughest problems — from making the next mode of transportation a reality to accelerating the development of medical breakthroughs. We do this by building and running the world’s best data and AI infrastructure platform so our customers can use deep data insights to improve their business. Founded by engineers — and customer obsessed — we leap at every opportunity to tackle technical challenges, from designing next-gen UI/UX for interfacing with data to scaling our services and infrastructure across millions of virtual machines. And we're only getting started. You will be a Sr Product Manager for Unity Catalog ( https://databricks.com/product/unity-catalog ). Unity Catalog is the metadata and governance foundation for the Lakehouse, providing not only fine grained security and governance capabilities, but also performance and productivity capabilities such as lineage, search, discovery, auditing, and compliance, for our customers' data and AI assets. This role is requires coordinating all product activities from vision to implementation, including engaging large enterprise customers to understand their needs, developing long-term product strategy, defining product roadmaps, working with engineering to build those products, and coordinating with various internal stakeholders (both pre- and post-launch) to ensure product success. The impact you will have: Design and launch new governance and security capabilities as part of Unity Catalog. Define and build new platform services that enable Databricks’ data & AI product teams (ML/AI, Data Science & Engineering, Data Warehousing, etc.) to easily add new workload-specific governance capabilities that enhance the value of Unity Catalog and the Lakehouse. Take new features you envision from ideation / exploration with customers to full launch and rollout, including a marketing plan, field enablement, and broad cust

RDQ226R497 At Databricks, we are passionate about enabling data teams to solve the world’s toughest problems — from making the next mode of transportation a reality to accelerating the development of medical breakthroughs. We do this by building and running the world’s best data and AI infrastructure platform so our customers can use deep data insights to improve their business. Founded by engineers — and customer obsessed — we leap at every opportunity to tackle technical challenges, from designing next-gen UI/UX for interfacing with data to scaling our services and infrastructure across millions of virtual machines. And we're only getting started. You will be a Sr Product Manager for Unity Catalog ( https://databricks.com/product/unity-catalog ). Unity Catalog is the metadata and governance foundation for the Lakehouse, providing not only fine grained security and governance capabilities, but also performance and productivity capabilities such as lineage, search, discovery, auditing, and compliance, for our customers' data and AI assets. This role is requires coordinating all product activities from vision to implementation, including engaging large enterprise customers to understand their needs, developing long-term product strategy, defining product roadmaps, working with engineering to build those products, and coordinating with various internal stakeholders (both pre- and post-launch) to ensure product success. The impact you will have: Design and launch new governance and security capabilities as part of Unity Catalog. Define and build new platform services that enable Databricks’ data & AI product teams (ML/AI, Data Science & Engineering, Data Warehousing, etc.) to easily add new workload-specific governance capabilities that enhance the value of Unity Catalog and the Lakehouse. Take new features you envision from ideation / exploration with customers to full launch and rollout, including a marketing plan, field enablement, and broad cust

Who We Are Simpplr is the AI-powered intranet for unifying the digital workplace. It brings people, trusted knowledge, apps, and agents into a coherent digital experience. Powered by a proprietary EX Knowledge Graph, Simpplr synthesizes signals and context across connected systems to deliver personalized information and actions. The platform serves as a digital hub supporting communications, engagement, employee services, and work. With low-code extensibility and enterprise-grade security and governance, Simpplr enables confident operation at scale. More than 1,000 organizations — including AAA, the NHS, Penske, and Moderna — trust Simpplr to keep their workforce informed, aligned, and productive. Learn more at simpplr.com . The Opportunity We're looking for a highly skilled Senior Product Manager – Enterprise Search to join our Product Management team . In this role, you'll own the strategy, definition, and execution of enterprise search across Simpplr — powering both Magnus (our AI assistant) and the Simpplr platform. You'll shape how employees find the right knowledge, content, and answers across the entire enterprise, quickly, accurately, and securely. Search is the connective tissue of the employee experience: it is what makes Magnus's answers trustworthy and what makes the Simpplr platform feel intelligent. You'll be responsible for the end-to-end search experience — from how content is ingested, chunked, and indexed, to how it is retrieved, ranked, and grounded into high-quality, permission-aware answers via retrieval-augmented generation (RAG). You'll work closely with AI engineers, search/ML engineers, data scientists, designers, and cross-functional teams to deliver a search foundation that is fast, relevant, and enterprise-grade. This role requires strong technical fluency in modern search and AI concepts — indexing, chunking, embeddings, vector and hybrid retrieval, ranking, and RAG — along with the product judgment to translate them into measurabl

P-1489 About Databricks At Databricks, we are passionate about enabling data teams to solve the world's toughest problems, from making the next mode of transportation a reality to accelerating the development of medical breakthroughs. We do this by building and running the world's best data and AI infrastructure platform so our customers can use deep data insights to improve their business. Founded by engineers, and customer obsessed, we leap at every opportunity to solve technical challenges, from designing next-gen UI/UX for interfacing with data to scaling our services and infrastructure across millions of virtual machines. And we're only getting started. About the Role As a Staff Technical Program Manager (TPM) for Trust & Safety Engineering, you will drive technical execution across infrastructure initiatives that protect platform integrity, user identity, and data privacy at scale. You will work directly with Security Engineering, Identity Infrastructure, Machine Learning, and Core Platform teams to design, build, and deploy systems for authentication, access control, and anomaly detection. Working embedded within engineering groups, you will translate identity protocols, privacy-by-design principles, and threat mitigation models into clear technical specifications, system dependencies, and actionable execution roadmaps. This role is focused on technical execution, resolving complex engineering dependencies, and delivering scalable systems that guarantee identity integrity and prevent platform abuse. Key Responsibilities Define, articulate, and own the security program strategy and roadmap, ensuring alignment with Databricks’ business and product goals. Drive initiatives across Identity Infrastructure, Data Governance, Platform Security, Machine Learning, and Trust Engineering. Oversee execution of complex security engineering multi-half initiatives (AuthN/AuthZ/Secret/PKI/Cryptography,etc), demonstrating ownership from strategy through outcomes. Leverage

P-1489 About Databricks At Databricks, we are passionate about enabling data teams to solve the world's toughest problems; from making the next mode of transportation a reality to accelerating the development of medical breakthroughs. We do this by building and running the world's best data and AI infrastructure platform so our customers can use deep data insights to improve their business. Founded by engineers and customer obsessed, we leap at every opportunity to solve technical challenges, from designing next-gen UI/UX for interfacing with data to scaling our services and infrastructure across millions of virtual machines. And we're only getting started. About the Role As a Staff Technical Program Manager (TPM) for Trust & Safety Engineering, you will drive technical execution across infrastructure initiatives that protect platform integrity, user identity, and data privacy at scale. You will work directly with Security Engineering, Identity Infrastructure, Machine Learning, and Core Platform teams to design, build, and deploy systems for authentication, access control, and anomaly detection. Working embedded within engineering groups, you will translate identity protocols, privacy-by-design principles, and threat mitigation models into clear technical specifications, system dependencies, and actionable execution roadmaps. This role is focused on technical execution, resolving complex engineering dependencies, and delivering scalable systems that guarantee identity integrity and prevent platform abuse. Key Responsibilities Define, articulate, and own the security program strategy and roadmap, ensuring alignment with Databricks’ business and product goals. Drive initiatives across Identity Infrastructure, Data Governance, Platform Security, Machine Learning, and Trust Engineering. Oversee execution of complex security engineering multi-half initiatives (AuthN/AuthZ/Secret/PKI/Cryptography,etc), demonstrating ownership from strategy through outcomes. Leve