Technical Security Governance Lead Jobs

We are seeking a hands-on Senior Workday Platform Engineer within the G&A IT Applications team to serve as the primary technical owner of the Workday platform across HCM, Payroll, Recruiting, Prism Analytics, Illuminate (AI/ML), integrations, security, and release management. This is a builder-first role. You will configure, develop, integrate, and operate within Workday while partnering closely with HR, Payroll, Finance, and IT stakeholders. You own the technical platform layer configuration, integrations, security architecture, governance, and release discipline, while HR and Payroll retain ownership of sensitive data and business policy logic. Key Responsibilities Platform Ownership & Delivery: Own technical execution across Workday HCM, Payroll, Recruiting, Prism Analytics, and Illuminate. Translate business requirements into phased technical delivery plans. Manage sandbox strategy, tenant lifecycle, and biannual release readiness. Hands-On Configuration & Development: Configure HCM and Recruiting modules.Build advanced reports (matrix, composite, BIRT), calculated fields, validations, and business process frameworks. Leverage Workday Extend to design and build lightweight custom applications that enhance core workflows. Maintain scalable security models and governance standards. Integrations & Architecture: Build and maintain integrations (EIB, Studio, REST/SOAP APIs, RaaS). Integrate with applications like ERP, identity providers, benefits carriers, and third-party systems. Ensure secure, reusable integration frameworks with monitoring and error-handling discipline. Analytics, AI & Automation: Implement and manage Workday Prism Analytics datasets and dashboards. Enable Workday Illuminate capabilities and intelligent workflows. Drive automation while maintaining audit and compliance standards. Security & Compliance: Own Workday security architecture and least-privilege acc

At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar Games is on the lookout for a passionate and talented Engineer to help enable safe, scalable, and effective adoption of cloud technologies across the company. This role sits within IT and acts as the technical authority for cloud platforms, bridging emerging vendor capabilities with real-world production workflows. The role focuses on evaluating cloud platforms, supporting development teams through Proofs of Concept (POCs), helping transition successful experiments into production, and ensuring strong governance around security, cost, and data protection. This is a full-time, in-office position based out of Rockstar’s NYC headquarters in Downtown Manhattan. WHAT WE DO The Rockstar Games Systems Engineering Team delivers global IT systems infrastructure to the development teams. We maintain our infrastructure to the highest standard, with an emphasis on preventative actions rather than reactive. Our team constantly reviews our processes with the aim of automating wherever possible. RESPONSIBILITIES Evaluate enterprise cloud platforms and services for security, scalability, cost and enterprise fit. Maintain various on-premise systems including Kubernetes, Elasticsearch, and other Linux-based systems. Manage a catalogue of approved cloud platforms and usage patterns. Maintain documentation and support development teams in design and implementation of cloud-enabled workflows and architecture. Coordinate with Security, Operations, Infrastructure, as well as Development and Legal stakeholders on platform architecture decisions. Coordinate with Security to define guardrails around data handling, access cont

About the opportunity We are seeking an Information Security Controls Manager to join the Information Risk Management (IRM) Segment within the Information Security (IS) Controls team at N26. As a member of this team, you will contribute to ensuring that Information Security Controls Framework processes are operated without any disruptions, with a specialized focus on strengthening our Cloud Security posture and AI Governance frameworks. N26 and its subsidiaries operate in a variety of regulatory environments and across international boundaries, while the IRM team helps N26 to navigate this complex, demanding, and rapidly evolving technological landscape. In this role, you will: Frequently communicate with various stakeholders of all levels. Execution and review of the Information Security (IS) Controls Framework monitoring process, ensuring comprehensive coverage of cloud infrastructure and AI/ML deployments. Communicate, Collate and review the evidence received via monthly control review request tickets (TOE). Perform QA reviews, query and or seek clarification from stakeholders to achieve the objectives of controls effectiveness. Highlight the gaps/risks observed during reviews, raise non-conformities, particularly concerning cloud misconfigurations and AI model risks, and suggest improvements to the teams or stakeholders. Liaise with the CISO office and the DPO office to provide updates on a monthly basis over the status of controls, including compliance updates regarding cloud security and AI systems. Improve awareness of controls, security practices, and responsible AI utilization among stakeholders. Contribute to the team in developing KRIs tailored to traditional IT, Cloud environments, and AI use cases. Working independently and managing the IS Controls daily tasks. Review and update the design of the controls pages from a technical perspective and maintain the control calendar. Actively work on the change requests from stakeholders. Preparation and follow-u

About the Role The Enterprise Trust & Governance team builds the control plane that lets the world’s largest organizations deploy Perplexity broadly and with confidence. Computer and our agents work across a growing share of our customers’ environments, tools, and models. For administrators, that makes precise, enforceable control essential: who can do what, with which data, through which agents, and within what usage limits. This team makes those controls easy to manage, reliable and consistent across every product, and transparent to the people accountable for them. This is a product and platform engineering role with end-to-end ownership, from shaping the architecture and policy models to shipping the experiences our customers’ administrators and security teams use every day. You’ll work across product and infrastructure teams to turn complex enterprise requirements into reusable primitives and intuitive controls. The scope spans identity and provisioning, fine-grained role-based access across connectors, tool actions, and models, customer-managed encryption keys, admin APIs, audit logs, and policy and usage controls. Strong governance helps enterprises move from pilots to company-wide rollouts and gives them the confidence to entrust agents with greater responsibility over time. Key Responsibilities Own enterprise identity and provisioning, including SSO (SAML/OIDC), SCIM, WorkOS integrations, and support for identity providers such as Okta and Microsoft Entra ID. Build the permissions platform, with fine-grained roles and permissions for connectors, tool actions, models, and model effort levels, enforced consistently across products and agent workflows. Design and ship secure, well-documented admin APIs for audit logs, members, groups, roles, and settings. Build policy controls for model and feature availability, staged rollouts, model deprecations, usage and spend limits, alerts, and cost-center allocation. Build admin-facing analytics for adoption, usage,

About the Team Governance, Risk, and Compliance (GRC) is foundational to Security delivering mission outcomes at OpenAI. The GRC team provides security assurances and builds compliance for OpenAI’s technology, people, and products. We are technical in what we build but operational in how we do our work, and we partner deeply with Product, Security, Legal, Privacy, GTM, and Field Security to help OpenAI move quickly while maintaining trust with customers, auditors, regulators, and the public. About the Role We are looking for an experienced Product Lifecycle Assurance IC to help scale OpenAI’s GRC function across our product stack to ensure products address customer and regulatory compliance requirements at launch and regressions are detected promptly and corrected. You will partner closely with Product, Security, Legal, and Privacy teams to make sure OpenAI can move quickly while maintaining our security, privacy and compliance claims and giving customers, auditors, and regulators assurance about how OpenAI handles user data. You are responsible for product assurance end-to-end from inception to post-launch (continuous) monitoring. You leverage existing workflows, reviews, and data and enhance, augment and build the components needed to create an end-to-end product assurance program. This role is not about supporting SOC or ISO audits; it's a highly cross-functional and deeply technical operations role to ensure that OAI products meet the compliance bar at launch, regressions are prevented and detected, and our compliance state can be evidenced. This role also helps ensure that our product launch governance program operates effectively across key safety, privacy, legal and security stakeholders and lessons-learned from incidents and regressions are used to improve the program. You or in partnership with engineering teams, build key controls in our infrastructure stack, developer workflows and launch tooling to provide developers with guardrails, perform CI/CD confor

Identity has become a critical to an organizations security posture. This is true across their entire digital landscape include cloud, traditional on prem and emerging technologies like agentic ai. Britive is at the forefront of a modern approach to delivering identity security with the only modern privileged access management platform that provides unified Privileged Access Visibility, Dynamic Privilege Management and Secrets Governance across infrastructure, platforms & SaaS. Our patent-pending technology is deployed at companies of all sizes around the world, including Fortune 500 companies. We have repeatedly ranked among the hottest Cloud Security startups. Britive is founded by CyberSecurity industry veterans with a successful prior exit and is backed by top-tier VCs. Summary As a Technical Program Manager at Britive, you will be expected to not just ensure that Scrum is applied and practiced in letter and in spirit, but also coach teams in achieving a high-performance state that allows them to deliver with high standards of quality, repeatably. More importantly, you are expected to understand Agile and its ethos, and then apply practices from other Agile frameworks such as Kanban, XP, SAFe to complement Scrum. Ultimately, you’ll help create self-managing and cross-functional teams that are flexible and productive during sprints. You should have true knowledge of the Scrum framework, with a focus on what new learnings the Scrum Guide provides with every revision. You’ll also need the ability to coordinate people and projects with a focus on business objectives. Responsibilities Develop comprehensive project plans that merge customer requirements with company goals. Responsible for the overall development life cycle of the solution and managing complex projects with significant visibility and impact. Ensure teams are building deliverables that are high-value and high-quality, at a consistent and su

A CAreer with point72’s technology TEAM As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications. As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity—all while delivering real business impact for our multi-billion-dollar global business. What you’ll do We are seeking an Identity & Privileged Governance Analyst to join our Information Security team, supporting identity and privileged access governance, monitoring, and remediation initiatives across the firm. Specifically, you will: Support identity and privileged access governance, hygiene, and remediation activities, with a focus on service account management. Monitor identity and privileged access controls, identify gaps, risks, and exceptions, and drive remediation to completion. Develop, maintain, and enforce identity and privileged access policies, standards, and control requirements. Coordinate and facilitate working sessions to deliver remediation, audit, and control initiatives. Collaborate with application, engineering, and platform teams to map and govern access models within the firm’s Identity Governance & Administration solution. Manage and respond to identity and privileged a

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. As a Senior Security Software Engineer for Infrastructure Security you will be a part of the Information Security organization and report to the Senior Manager of Infrastructure Security. You will help shape the future of Platform Security at Roblox. We work closely with Production IAM, Network Security, and Cloud Security at Roblox. You Will: Identify security gaps and threats in our cloud and on premise infrastructure, partnering with Governance Risk and Compliance teams to create standards and policies along the way. This will help Roblox meet regulatory and compliance requirements. Harden our infrastructure by introducing secure by default configurations, designs and guardrails for all developers at Roblox. Own and drive solutions that enable Roblox engineers to design, build, and use infrastructure securely at scale. Work closely with other InfoSec teams (AppSec, D&R, GRC, CorpSec, CloudSec, NetSec) and partner with engineering teams across Roblox, specifically the Infrastructure organization, to ensure the secure outcomes of security and product driven initiatives. You Have: 5+ years of experience writing code and/or relevant technical experience. Experience with

About Us At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in. Available Locations: Austin, US Applications will be accepted until November 01, 2026. Job Title: Senior Oracle Security and AI Engineer About the Role This Senior Oracle Security and AI Engineer is primarily responsible for the Oracle Fusion security architecture, role design governance, oversight of the Risk Management Cloud service and AI initiatives. The Engineer serves as a hands-on expert for the technical administration, environment management, a

About Eudia: Eudia is redefining the future of legal work with AI-powered Augmented Intelligence, enabling Fortune 500 legal teams to move faster, manage risk more effectively, and unlock new business value. Backed by $105M in Series A funding led by General Catalyst, we’re building a category-defining platform that blends AI-driven automation with human expertise, transforming legal from a cost center into a strategic growth driver. At Eudia, we move fast. Unlike traditional enterprise software, our teams ship solutions in days, not months—delivering real impact for some of the world’s largest companies, including Cargill, Coherent, DHL, and Duracell. We’re solving one of the most complex, unsolved challenges in AI: bringing trust, accuracy, and security to legal automation. We’re a team of builders, operators, and problem-solvers who are passionate about reshaping an industry that has long been resistant to change. If you’re looking for a place where you’ll be challenged, take ownership from day one, and work alongside some of the brightest minds in AI and legal —we’d love to meet you. The Role We are hiring a Security GRC Engineer to build and scale the technical backbone of our security and compliance program. This is not a traditional compliance seat. You will take a control requirement, trace it into the system that implements it, work with Engineering to get it right, and automate the evidence that proves it works. You will operate across SOC 2, ISO 27001, HIPAA, and AI governance, and you will partner with our ISSM on public-sector and FedRAMP-related work rather than owning it. You will own real systems and processes, not just documents, and you will have real room to decide how the program gets built. We are small and lean, so we value a bias to action. A working control that ships beats a perfect policy that does not. What You’ll Do Translate requirements from SOC 2, ISO 27001, HIPAA, and customer security assessments into

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. The Identity Governance and Access Security Team The Identity Governance and Access Security team runs Identity Governance and Administration (IGA), Privileged Access Management (PAM), and Identity Security Posture Management (ISPM) for Okta itself — serving as Okta's "Customer Zero." The team owns the complete identity lifecycle for the workforce, from birthright provisioning through Workday to access certifications, privileged access management, and mover/leaver processes. What the team builds becomes the reference architecture that Okta customers deploy at scale. The Staff Identity Security Engineer Opportunity We're looking for a Staff Identity Security Engineer to take deep technical ownership of our Okta Identity Governance (OIG), Okta Privileged Access (OPA), and ISPM implementations. This is a senior individual-contributor role where you'll set technical direction for how the team builds on top of these platforms and raise the bar for the engineering team through review, mentorship, and documentation. You should be equally comfortable in an architecture discussion, in a live Okta Workflows debugging session, and writing the design doc that a Jira epic gets broken down from. The ideal candidate is a self-starter who thrives in an autonomous environment and actively drives "what's next" for our identity security posture — identifying process bottlenecks, designing technical solutions, and pushing initiatives from concept to production without waiting

This is Adyen Adyen provides payments, data, and financial products in a single solution for customers like Meta, Uber, H&M, and Microsoft - making us the financial technology platform of choice. At Adyen, everything we do is engineered for ambition. For our teams, we create an environment with opportunities for our people to succeed, backed by the culture and support to ensure they are enabled to truly own their careers. We are motivated individuals who tackle unique technical challenges at scale and solve them as a team. Together, we deliver innovative and ethical solutions that help businesses achieve their ambitions faster. The Role We are looking for a Senior AI Governance Counsel to join our Global DPO Office and help build, roll out, and operate Adyen's enterprise AI governance framework. Sitting within the group that owns our global privacy program and AI governance, and supports incident response and management as well as data governance, you will be the driving force in shaping our strong foundations into a consistent, enterprise-wide AI governance program that scales with Adyen's ambitions - helping the business innovate boldly and responsibly with AI. This is a builder role. You will translate the EU AI Act, the NIST AI Risk Management Framework, GDPR, the CCPA/CPRA, and emerging global AI and privacy requirements into pragmatic policies, standards, and assessment workflows - and partner with Enterprise Risk, Security, Product, Compliance, Legal, Regulatory and Engineering to make them real. You will have a particular focus on generative and agentic AI use cases, and on giving first-line teams the parameters and tooling they need to evaluate their own models and outcomes. What You'll Do Help build, roll out, and embed Adyen's enterprise-wide AI governance framework, policies, and standards, driving consistency as AI adoption scales across the business. Design and operationalize AI risk and impact assessments across the AI lifecycle - from intak

Strength in Trust OneTrust’s mission is to enable innovation through the responsible use of data and AI. We believe that ensuring data is trusted shouldn’t slow teams down—it should accelerate what’s possible. This led us to develop the first technology platform for responsible data use in 2016. Today, with AI representing the latest and most impactful expansion of data yet, OneTrust is once again redefining what responsible innovation looks like. OneTrust, the AI‑Ready Governance Platform™, unifies regulatory intelligence, automation, and connected governance workflows so businesses can continue to move at the speed of AI while ensuring good governance to prevent data misuse at scale. Trusted by thousands of organizations worldwide, OneTrust is shaping the future where trusted data becomes a transformative force for business and society. The Challenge We are looking for a dynamic Senior Information Security GRC Analyst to support IT and InfoSec by performing various governance, risk, and compliance activities as part of the OneTrust InfoSec GRC team. Your Mission Customer Security Assurance & Questionnaires Own a high volume of end-to-end completion of customer security questionnaires (CAQs) , RFP security sections, and other assurance artifacts (e.g., SIG, CAIQ, custom questionnaires). Provide accurate, consistent, and defensible responses by leveraging internal evidence repositories (SOC reports, ISO certificates, policies, standards, diagrams, pen test summaries, etc.). Partner with internal stakeholders (Sales, Marketing, Customer Success, Security, Engineering, Privacy, Legal, Compliance, Product) to validate responses and resolve gaps. Customer Engagement & Security Discussions Meet with customers and prospects to explain security controls, risk posture, and compliance commitments . Present security topics with confidence and clarity—tailoring depth for technical and non-technical audiences. Support Sales and Customer Success by addressin

At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a Technical Research Analyst to support the intake, documentation, and coordination of software and SaaS product updates. You’ll partner with stakeholders across the business to gather requirements, keep requests moving, and ensure decisions and action items are clearly captured. This is a full-time, in-office position based out of Rockstar’s unique game development studio in Oakville, ON. WHAT WE DO The Rockstar Games Systems Engineering Team delivers global IT systems infrastructure to the development teams. We maintain our infrastructure to the highest standard, with an emphasis on preventative actions rather than reactive. Our team constantly reviews our processes with the aim of automating wherever possible. RESPONSIBILITIES Research requested third party software and other tools and provide concise summaries for a variety of stakeholders. Coordinate intake for software and emerging technology tool requests by collecting required details, clarifying incomplete submissions, and preparing concise summaries. Partner with cross-functional teams (e.g., business stakeholders, IT, security, and governance) to understand business needs, track requests, route questions, capture feedback, and escalate risks or blockers. Support recurring review meetings by reporting on research, capturing feedback, documenting decisions, and maintaining action items (owners and due dates). Maintain vendor communications to ensure product features align with expectations and cost models, while staying informed on new feature releases Maintain an inventory of commonly used tools and identify pote

Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams — People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more — provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block. The Role Square Financial Services, Inc. (SFS) is Block’s bank. We opened in March 2021 and provide lending and FDIC-insured deposit products to individuals and small businesses on a nationwide basis. SFS Risk Management is scaling vendor security, third party risk, and business continuity through innovation. Our Risk team designs and promotes the frameworks, standards, and oversight that elevates security considerations among our vendors, simplifies our regulatory obligations, and ensures resilience in our business operations. The team also operates the agent-first platforms that turn those frameworks into running systems. Most of governance is a data problem. The risk, control, and asset information needed to answer "are we secure and compliant?" is dispersed across dozens of systems: Security Engineers treat that as an engineering problem. You'll build the data pipelines, integrations, and agentic AI workflows that turn manual governance processes into products that run continuously, produce measurable results, and hold up to audit end to end. You Will Own and operationalize a SFS third-party risk management and business continuity program program. Define the technical approach for ambiguous, cross-team problem spaces. This is an early-stage program, and you will frame problems as often as you solve them. Build and operate the p