Technical Security Governance Lead Jobs

About Pinterest: Millions of people around the world come to our platform to find creative ideas, dream about new possibilities and plan for memories that will last a lifetime. At Pinterest, we’re on a mission to bring everyone the inspiration to create a life they love, and that starts with the people behind the product. Discover a career where you ignite innovation for millions, transform passion into growth opportunities, celebrate each other’s unique experiences and embrace the flexibility to do your best work. Creating a career you love? It’s Possible. At Pinterest, AI isn't just a feature, it's a powerful partner that augments our creativity and amplifies our impact, and we’re looking for candidates who are excited to be a part of that. To get a complete picture of your experience and abilities, we’ll explore your foundational skills and how you collaborate with AI. Through our interview process, what matters most is that you can always explain your approach, showing us not just what you know, but how you think. You can read more about our AI interview philosophy and how we use AI in our recruiting process here . The Team: Pinterest Technical Program Managers are proactive owners with technical expertise. They are aligned to the highest level company priorities to support successful delivery of programs within their teams. The Platform T/PgM Team is responsible for overall program governance in Infrastructure, Infra Finance, Data Engineering and Security, as well as Compliance and managing our cloud budget. What you’ll do: As a Staff Technical Program Manager focusing on cross-engineering special projects, you will identify, scope, champion, and land key strategic projects important to advancing Pinterest’s platform and underpinning. Translate Strategy into Execution — Convert strategic platform priorities into structured, milestone-driven execution plans; operating at both breadth (big picture vision) and depth (dr

The Product Management team drives Asana’s product strategy and execution, translating customer needs and opportunities into a compelling roadmap and working cross-functionally to deliver impactful solutions for team productivity and collaboration. We're defining a new category of technology as the human agent operating system by inventing new ways for teams to work together more efficiently. Our team works directly with Engineering, Design, Experience Research, and Data Science, as well as with Sales, Support, and Marketing to ship great products. You’ll take part in every type of product work here, from strategy to product to process improvements, by conceptualizing, launching, and iterating on Asana itself for millions of teams around the world. We are looking for an experienced Product Manager to join our Enterprise Data Governance team. Our team owns the strategic platform capabilities that govern the full lifecycle of customer data, including retention, migration, auditing, export, and operational governance. We are foundational to Asana's enterprise success, providing the controls and policy frameworks that allow large organizations to meet complex regulatory requirements and securely adopt AI. As a Product Manager here, you will bridge the gap between technical infrastructure and enterprise customer needs, partnering closely with Engineering, Security, Legal, and Design to reduce operational burden and build the governance foundation that helps people and AI agents collaborate safely at scale. This is a high-impact role at the intersection of enterprise trust, regulatory compliance, and platform strategy, directly driving Asana’s growth in highly regulated industries. This role is based in our Vancouver office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams wit

Strength in Trust OneTrust’s mission is to enable innovation through the responsible use of data and AI. We believe that ensuring data is trusted shouldn’t slow teams down—it should accelerate what’s possible. This led us to develop the first technology platform for responsible data use in 2016. Today, with AI representing the latest and most impactful expansion of data yet, OneTrust is once again redefining what responsible innovation looks like. OneTrust, the AI‑Ready Governance Platform™, unifies regulatory intelligence, automation, and connected governance workflows so businesses can continue to move at the speed of AI while ensuring good governance to prevent data misuse at scale. Trusted by thousands of organizations worldwide, OneTrust is shaping the future where trusted data becomes a transformative force for business and society. Principal PM AI Governance - Runtime Governance About OneTrust OneTrust helps organizations operationalize trust through privacy, security, data governance, and responsible technology adoption. As AI governance becomes a board-level and regulatory priority, customers increasingly need structured ways to understand AI systems, assess risk, monitor behavior, and demonstrate compliance over time. The Challenge We are looking for a Principal PM to help shape the future of our AI Governance product with a specific focus on observability and enforcement across AI systems. This role is for a product manager who can connect strategy, execution, and technical depth to help us build the right platform capabilities for the next generation of governed AI. You will help run squad activities and drive clarity across product, engineering, design, and go-to-market stakeholders to ensure we are building capabilities that are durable, differentiated, and ready for where AI governance is heading next. The ideal candidate brings a strong product mindset along with a background in cybersecurity, SIEM and

About the Team Governance, Risk, and Compliance (GRC) is foundational to Security delivering mission outcomes at OpenAI. The GRC team provides security assurances and builds compliance for OpenAI’s technology, people, and products. We are technical in what we build but operational in how we do our work, and we partner deeply with Product, Security, Legal, Privacy, GTM, and Field Security to help OpenAI move quickly while maintaining trust with customers, auditors, regulators, and the public. About the Role We are looking for an experienced Product Lifecycle Assurance IC to help scale OpenAI’s GRC function across our product stack to ensure products address customer and regulatory compliance requirements at launch and regressions are detected promptly and corrected. You will partner closely with Product, Security, Legal, and Privacy teams to make sure OpenAI can move quickly while maintaining our security, privacy and compliance claims and giving customers, auditors, and regulators assurance about how OpenAI handles user data. You are responsible for product assurance end-to-end from inception to post-launch (continuous) monitoring. You leverage existing workflows, reviews, and data and enhance, augment and build the components needed to create an end-to-end product assurance program. This role is not about supporting SOC or ISO audits; it's a highly cross-functional and deeply technical operations role to ensure that OAI products meet the compliance bar at launch, regressions are prevented and detected, and our compliance state can be evidenced. This role also helps ensure that our product launch governance program operates effectively across key safety, privacy, legal and security stakeholders and lessons-learned from incidents and regressions are used to improve the program. You or in partnership with engineering teams, build key controls in our infrastructure stack, developer workflows and launch tooling to provide developers with guardrails, perform CI/CD confor

About the Team Governance, Risk, and Compliance (GRC) is foundational to Security delivering mission outcomes at OpenAI. We’re excited about building creative solutions to ambiguous security requirements and delivering new technologies to mission critical customers. The GRC team provides security and engineering expertise to ensure our customers’ most critical and stringent requirements are met. We are technical in what we build but are operational in how we do our work, and are committed to obtaining, expanding, and maintaining Authorizations to Operate (ATOs) for critical systems while fostering a collaborative and execution-driven culture. About the Role Our technologies support some of the most important and impactful work in the world, including our strategic and high-impact customers in the public sector. As a GRC Program Manager, you’ll play a pivotal role in achieving US government (USG) ATOs and compliance frameworks, including but not limited to FedRAMP and Department of War (DoW),for OpenAI products and support agency-specific ATOs for systems deployed in highly regulated and secure environments. You’ll work closely with engineers, internal stakeholders, and external assessors to design, document, and implement security controls that meet stringent compliance requirements. Your creativity and execution-focused approach will be critical in navigating complex challenges while maintaining the trust of our stakeholders. We’re looking for people who bring: Proven experience in obtaining and maintaining a FedRAMP ATO and agency specific ATOs in highly restricted environments, within government or regulated sectors. A deep understanding of USG security frameworks and policies (e.g., NIST, RMF, FedRAMP). Ability to communicate technical concepts to diverse audiences, including engineers and non-technical stakeholders. Exceptional technical program management skills, with the ability to multitask and deliver large complex programs under pressure. This role is base

About Vercel: Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience. Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. About the role: We are looking for a Governance, Risk and Compliance (GRC) Analyst who wants to build GRC with AI, and you do not need to be an engineer to do it. We encourage and equip you to use AI tooling to build automations for audit evidence and customer security questionnaires, alongside assessing AI tools and vendors and managing audits. This is a hybrid role based in San Francisco, New York City, or London with three days a week in the office. What you’ll do: Assess AI tools and vendors against security, privacy, and compliance requirements, and run company compliance and ethics training Maintain the internal controls behind ISO 27001, System and Organization Controls 2 (SOC 2), Health Insurance Portability and Accountability Act (HIPAA), and Payment Card Industry Data Security Standard (PCI DSS) compliance, and drive remediation to completion with documented progress Use AI tooling to build automations that collect audit evidence, monitor controls, and draft security questionnaire responses, and report on controls maturity scores Manage annual audit deliverables, write treatment plans, and track completion across teams Answer customer compliance inquiries and maintain customer-facing security and compliance documentation What you need: 3+ years supporting the audit lifecycle for SOC 2, ISO 27001, PCI DSS, or HIPAA in a cloud-based environment Applied security or privacy controls to AI systems or AI vendors, such as model access, data handling, or third-party risk review Built security policies and technical controls into the software dev

Senior Compliance Specialist Position Description SingleStore is building a real-time data platform that helps organizations transact, analyze and act on data in a single system. We are committed to operating with strong security, privacy and resilience standards across our products, services and internal operations. We are seeking an experienced and highly motivated Senior Compliance Specialist to help scale our security, privacy and compliance programs. This role will be responsible for maintaining key certifications, driving cross-functional compliance initiatives, overseeing development and management of our privacy program, supporting compliance with the Digital Operational Resilience Act (DORA), and helping mature our Business Continuity Management System (BCMS). The ideal candidate is practical, organized and collaborative, with experience translating regulatory and framework requirements into durable operational processes across technical and business teams. Job Responsibilities Support governance activities across the security, privacy and compliance program, including maintaining Information Security Management System documentation, evidence, policies, procedures and audit trails. Help maintain and improve active certifications and attestations such as ISO/IEC 27001, SOC 2 Type II, HIPAA and PCI DSS, while coordinating with stakeholders across the business to ensure ongoing compliance. Drive readiness efforts for new compliance objectives, certifications and customer-driven assurance requirements. Participate in enterprise risk management activities, including risk methodology, risk assessments, treatment planning and follow-up with risk owners. Oversee the development, implementation and ongoing management of SingleStore’s privacy program in partnership with Legal, Security, IT and business stakeholders. Support compliance with applicable privacy and data protection requirements, including operationalizing controls and processes needed to meet regu

Identity has become a critical to an organizations security posture. This is true across their entire digital landscape include cloud, traditional on prem and emerging technologies like agentic ai. Britive is at the forefront of a modern approach to delivering identity security with the only modern privileged access management platform that provides unified Privileged Access Visibility, Dynamic Privilege Management and Secrets Governance across infrastructure, platforms & SaaS. Our patent-pending technology is deployed at companies of all sizes around the world, including Fortune 500 companies. We have repeatedly ranked among the hottest Cloud Security startups. Britive is founded by CyberSecurity industry veterans with a successful prior exit and is backed by top-tier VCs. About You You are a passionate Software Engineer who wants to develop and scale our multi-tenant SaaS applications on the AWS platform. You have a strong software engineering background and advanced knowledge of the AWS platform, tools and services. From day one, you must be able to hit the ground running and bring all your experience to the team to contribute in the building of a great product. Most importantly, you have a positive “can do” attitude and a passion for delivering technical solutions in a fast-paced startup environment. This position will report to the Engineering Manager. Your Impact Key Responsibilities: Responsible for design and development of a large-scale application stack running on AWS. Collaborate with product management and engineering teams to design and integrate software, conduct code reviews, and troubleshoot product issues. Perform proof of concepts to identify best design options including usage of AWS services. Research integration options for various SaaS/IaaS technologies, including APIs for user administration and incorporate this research in our application integration.

Identity has become a critical to an organizations security posture. This is true across their entire digital landscape include cloud, traditional on prem and emerging technologies like agentic ai. Britive is at the forefront of a modern approach to delivering identity security with the only modern privileged access management platform that provides unified Privileged Access Visibility, Dynamic Privilege Management and Secrets Governance across infrastructure, platforms & SaaS. Our patent-pending technology is deployed at companies of all sizes around the world, including Fortune 500 companies. We have repeatedly ranked among the hottest Cloud Security startups. Britive is founded by CyberSecurity industry veterans with a successful prior exit and is backed by top-tier VCs. About You You are a passionate Senior Software Engineer who wants to develop and scale our multi-tenant SaaS applications on the AWS platform. You have a strong software engineering background and advanced knowledge of the AWS platform, tools and services. From day one, you must be able to hit the ground running and bring all your experience to the team to contribute in the building of a great product. Most importantly, you have a positive “can do” attitude and a passion for delivering technical solutions in a fast-paced startup environment. This position will report to the Engineering Manager. Your Impact Key Responsibilities: Responsible for design and development of a large-scale application stack running on AWS. Collaborate with product management and engineering teams to design and integrate software, conduct code reviews, and troubleshoot product issues. Perform proof of concepts to identify best design options including usage of AWS services. Research integration options for various SaaS/IaaS technologies, including APIs for user administration and incorporate this research in our application int

Identity has become a critical to an organizations security posture. This is true across their entire digital landscape include cloud, traditional on prem and emerging technologies like agentic ai. Britive is at the forefront of a modern approach to delivering identity security with the only modern privileged access management platform that provides unified Privileged Access Visibility, Dynamic Privilege Management and Secrets Governance across infrastructure, platforms & SaaS. Our patent-pending technology is deployed at companies of all sizes around the world, including Fortune 500 companies. We have repeatedly ranked among the hottest Cloud Security startups. Britive is founded by CyberSecurity industry veterans with a successful prior exit and is backed by top-tier VCs. About You You are a passionate Software Engineer who wants to develop and scale our multi-tenant SaaS applications on the AWS platform. You have a strong software engineering background and advanced knowledge of the AWS platform, tools and services. From day one, you must be able to hit the ground running and bring all your experience to the team to contribute in the building of a great product. Most importantly, you have a positive “can do” attitude and a passion for delivering technical solutions in a fast-paced startup environment. This position will report to Engineering Manager. Your Impact Key Responsibilities: Responsible for design and development of a large-scale application stack running on AWS. Collaborate with product management and engineering teams to design and integrate software, conduct code reviews, and troubleshoot product issues. Perform proof of concepts to identify best design options including usage of AWS services. Research integration options for various SaaS/IaaS technologies, including APIs for user administration and incorporate this research in our application integration. Wh

Identity has become a critical to an organizations security posture. This is true across their entire digital landscape include cloud, traditional on prem and emerging technologies like agentic ai. Britive is at the forefront of a modern approach to delivering identity security with the only modern privileged access management platform that provides unified Privileged Access Visibility, Dynamic Privilege Management and Secrets Governance across infrastructure, platforms & SaaS. Our patent-pending technology is deployed at companies of all sizes around the world, including Fortune 500 companies. We have repeatedly ranked among the hottest Cloud Security startups. Britive is founded by CyberSecurity industry veterans with a successful prior exit and is backed by top-tier VCs. About You You are a passionate Software Engineer who wants to develop and scale our multi-tenant SaaS applications on the AWS platform. You have a strong software engineering background and advanced knowledge of the AWS platform, tools and services. From day one, you must be able to hit the ground running and bring all your experience to the team to contribute in the building of a great product. Most importantly, you have a positive “can do” attitude and a passion for delivering technical solutions in a fast-paced startup environment. Your Impact Key Responsibilities: Responsible for design and development of a large-scale application stack running on AWS. Collaborate with product management and engineering teams to design and integrate software, conduct code reviews, and troubleshoot product issues. Perform proof of concepts to identify best design options including usage of AWS services. Research integration options for various SaaS/IaaS technologies, including APIs for user administration and incorporate this research in our application integration. What will you need? Required Skills: M

Identity has become a critical to an organizations security posture. This is true across their entire digital landscape include cloud, traditional on prem and emerging technologies like agentic ai. Britive is at the forefront of a modern approach to delivering identity security with the only modern privileged access management platform that provides unified Privileged Access Visibility, Dynamic Privilege Management and Secrets Governance across infrastructure, platforms & SaaS. Our patent-pending technology is deployed at companies of all sizes around the world, including Fortune 500 companies. We have repeatedly ranked among the hottest Cloud Security startups. Britive is founded by CyberSecurity industry veterans with a successful prior exit and is backed by top-tier VCs. About You You are a passionate Senior Software Engineer who wants to develop and scale our multi-tenant SaaS applications on the AWS platform. You have a strong software engineering background and advanced knowledge of the AWS platform, tools and services. From day one, you must be able to hit the ground running and bring all your experience to the team to contribute in the building of a great product. Most importantly, you have a positive “can do” attitude and a passion for delivering technical solutions in a fast-paced startup environment. Your Impact Key Responsibilities: Responsible for design and development of a large-scale application stack running on AWS. Collaborate with product management and engineering teams to design and integrate software, conduct code reviews, and troubleshoot product issues. Perform proof of concepts to identify best design options including usage of AWS services. Research integration options for various SaaS/IaaS technologies, including APIs for user administration and incorporate this research in our application integration. What will you need? &nbs

Identity has become a critical to an organizations security posture. This is true across their entire digital landscape include cloud, traditional on prem and emerging technologies like agentic ai. Britive is at the forefront of a modern approach to delivering identity security with the only modern privileged access management platform that provides unified Privileged Access Visibility, Dynamic Privilege Management and Secrets Governance across infrastructure, platforms & SaaS. Our patent-pending technology is deployed at companies of all sizes around the world, including Fortune 500 companies. We have repeatedly ranked among the hottest Cloud Security startups. Britive is founded by CyberSecurity industry veterans with a successful prior exit and is backed by top-tier VCs. About You You are a passionate Senior Software Engineer who wants to develop and scale our multi-tenant SaaS applications on the AWS platform. You have strong hands-on technical expertise in a variety of big data technologies. From day one, you must be able to hit the ground running and bring all your experience to the team to contribute in the building of a great product. Most importantly, you have a positive “can do” attitude and a passion for delivering technical solutions in a fast-paced startup environment. Your Impact Key Responsibilities: Responsible for design and development of a large-scale data ingestion and analytics. Design and develop data pipelines for real-time and batch data processing for disparate datasets. Develop systems which can store data in highly normalized fashion to allow correlation with other data sources. Collaborate with product management and engineering teams to design and integrate software, conduct code reviews, and troubleshoot product issues. Perform proof of concepts to identify best design options including usage of AWS services. Resear

The AI Enablement Engineer helps teams across Topgolf, technical and non-technical alike, get real value from AI by removing the friction that blocks adoption and building the reusable archetypes, skills, and governed integrations that let business teams build safe, working applications through Topgolf’s AI-SDLC pipeline. This role acts as the technical backstop, reviewing AI-generated code and specs for correctness, security, and adherence to engineering standards before anything ships. Partner with teams across Topgolf, technical and non-technical, to unblock AI adoption by configuring agent access, resolving friction, and showing teams how to get real value from available AI tools Design and build archetypes and skills (e.g., SKILL.md files, intake questionnaires, spec templates, code scaffolds) that package engineering standards and governance into reusable building blocks for the AI-SDLC pipeline Connect agents to internal systems, data sources, and tools through governed connectors and MCP-style integrations Monitor archetypes and agents for model drift, prompt bloat, and other degradation as underlying models and usage evolve, and keep code scaffolds and prompts current with secure coding practices and platform engineering standards Review AI agent-produced code, specs, and gate results for correctness, security, scope adherence, and good development practice before production Test archetypes and agents against adversarial prompting (prompt injection, jailbreak attempts) and implement guardrail hooks to enforce scope, safety, and policy compliance Build documentation, examples, and light training (office hours, walkthroughs, guides) to raise teams' baseline capability with AI Retire, merge, or extend archetypes based on usage and escalation patterns, and triage escalations to security, data owners, or app stewards, partnering with platform engineering so new archetypes and integra

P-1348 At Databricks, we are passionate about enabling data teams to solve the world's toughest problems, from security threat detection to cancer drug development. We do this by building and running the world's best data and AI infrastructure platform, so our customers can focus on the high value challenges that are central to their own missions. Our engineering teams build technical products that fulfill real, important needs in the world. We always push the boundaries of data and AI technology, while simultaneously operating with the resilience, security and scale that is important to making customers successful on our platform. We develop and operate one of the largest scale software platforms. The fleet consists of millions of virtual machines, generating terabytes of logs and processing exabytes of data per day. At our scale, we observe cloud hardware, network, and operating system faults, and our software must gracefully shield our customers from any of the above. As a Senior Software Engineer working on the Data Platform team you will help build the Data Intelligence Platform for Databricks that will allow us to automate decision-making across the entire company. You will achieve this in collaboration with Databricks Product Teams, Data Science, Applied AI and many more. You will develop a variety of tools spanning logging, orchestration, data transformation, metric store, governance platforms, data consumption layers etc. You will do this using the latest, bleeding-edge Databricks product and other tools in the data ecosystem - the team also functions as a large, production, in-house customer that dog foods Databricks and guides the future direction of the product. The impact you will have: Design and run the Databricks metrics store that enables all business units and engineering teams to bring their detailed metrics into a common platform for sharing and aggregation, with high quality, introspection ability and query performance. Design and run the cross-