Technology And Security Risk Director Jobs

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Staff Security Governance Engineer, you will be the individual contributor who owns how GitLab writes, maintains, communicates, and measures its security policies and standards. You will turn emerging regulations, including AI regulation, into clear requirements that engineering, product, and legal teams can act on, and you will use automation to keep governance lightweight and continuous rather than a point-in-time exercise. You will sit on the Security Governance team within Security Assurance and work closely with Security Compliance, Security Risk, and GRC Engineering. You will report to the Dire

CAPCO POLAND *We are looking for Poland based candidate. Capco is a fully independent, global management and technology consultancy. For 25 years we have combined innovative thinking with deep industry knowledge to deliver business consulting, digital transformation and technology services to Finance and Energy markets. Our collaborative and efficient approach helps clients reduce costs and manage risk and regulatory change while increasing revenues. We are thinkers, innovators, and disruptors. We are small enough to care but large enough to matter. We are seeking a highly skilled Security Operations Engineer to support the expansion of a strategic security program focused on onboarding critical applications into enhanced monitoring capabilities.In this role, you will play a key part in building and optimizing SIEM detection capabilities, supporting threat verification, and enabling regulatory alignment with DORA (Digital Operational Resilience Act) requirements by the end of 2026. You will work at the intersection of SIEM engineering, threat modelling, and security operations , contributing directly to improving detection accuracy and strengthening overall security posture. Key Responsibilities: Detection Engineering: Design, build, and optimize SIEM detection rules (with a focus on Microsoft Sentinel) Testing & Automation: Develop and execute test cases for detection logic; automate validation processes using scripting Application Onboarding: Support onboarding of critical applications into the security monitoring ecosystem Requirements Gathering: Collaborate with application teams to define logging requirements and detection use cases Workshop Facilitation: Lead and moderate workshops with stakeholders to align on threat scenarios and security capabilities Technical Documentation: Produce clear and comprehensive documentation covering detection logic, threat models, and validation results Collaboration: Work closely with SOC, enginee

About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects OpenAI’s technology, people, and products. We are technical in what we build but are operational in how we do our work, and are committed to supporting all products and research at OpenAI. Our Security team tenets include: prioritizing for impact, enabling researchers, preparing for future transformative technologies, and engaging a robust security culture. About the Role We are seeking a Software Engineer, Security Observability to join our Security team. In this role, you will be responsible for building secure, scalable systems that enhance our security observability infrastructure. Leveraging your strong engineering skills, you will collaborate with cross-functional teams to develop, deploy, and maintain robust software solutions that support our security and detection capabilities. This role is open to remote employees, or relocation assistance is available to one of our OpenAI offices in San Francisco, Seattle, or New York City. In this role, you will: Design and develop scalable software systems that facilitate security observability across our infrastructure. Build and maintain data pipelines that centralize and store security-relevant data from diverse sources. Proactively improve the resilience and reliability of data systems to ensure high platform availability Collaborate closely with Detection & Response (D&R) and other security teams to reduce the company’s security risk. Contribute to data engineering in support of forensic investigations and compliance efforts. You might thrive in this role if you have: Strong software engineering experience, with proficiency in programming languages such as Python, Golang, or similar. A background in infrastructure as code, with experience using tools like Terraform and working with cloud platforms such as Azure. Experience with building and main

WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Why we're hiring: We're looking for an Application & Development Security Lead to help shape and strengthen secure software development governance across one of the world's largest technology and creative ecosystems. Working within WPP's Digital Security & Risk Management team, you'll partner with engineering, product and platform teams to govern secure-by-design ways of working, improve software security governance, and provide oversight across modern development environments. This role isn't about writing code day-to-day. Instead, you'll influence governance of how secure software is built, deployed and maintained across cloud-native platforms, APIs, AI-enabled applications and global engineering teams. This is an opportunity to influence software security governance at global scale, helping shape how security supports innovation across one of the world's largest and most diverse technology environments. You'll work alongside talented security and engineering professionals while helping build secure, resilient products and platforms for the future. What you'll be doing: Define an

About the Role Together AI is looking for a Commercial Counsel to support the deals that drive our growth. You’ll work alongside the Sales, Partnerships, Finance, Product, and Security teams as the legal partner who helps each of them move quickly while keeping risk in view. What we sell sits at the core of our customers’ own products, so our commercial deals call for a real understanding of how the technology works. The terms we agree to with customers and partners shape our relationships and our business for years. This role suits a lawyer who wants to be a true business partner to a fast-moving sales organization, rather than working within a narrow contracts lane. Responsibilities Sales Serve as the legal point of contact for Sales across enterprise customer deals, managing commercial agreements including master agreements, order forms, data processing terms, security exhibits, and NDAs. Negotiate customer contracts end to end, partnering closely with Sales, Security, Product, and Finance to resolve issues quickly and keep deals moving through the pipeline. Advise Sales on risk, contract positions, and fallback terms, and manage escalations on non-standard requests such as custom SLAs, data protection obligations, and liability and indemnity terms. Build the templates, playbooks, and scalable workflows that make Sales deals repeatable, including standard forms, negotiation playbooks, and clear escalation paths. Partnerships Structure and negotiate go-to-market and partnership deals, including collaboration, reseller, licensing, and co-sell arrangements. Work with Sales, Partnerships, and Product to align partner terms with business goals, customer commitments, and company risk posture. Develop standard partnership templates and default negotiating positions so routine partner deals can move quickly and consistently. Requirements A JD and an active bar license in good standing At least 5 years in commercial and technology transactions, including substantial in-ho

CLEAR is building THE secure identity company of the future. Our mission is to make experiences safer and easier—physically and digitally. With more than 43 million Members and a growing network of partners across the world, CLEAR's secure identity platform is transforming the way people live, work, and travel. Whether it’s at the airport, stadium, or throughout your everyday life, CLEAR unlocks the magic of frictionless experiences. We are seeking a Senior Product Security Engineer to serve as a technical leader and strategic contributor within our Product Security team. This role goes beyond execution — you will drive the evolution of CLEAR’s application security posture by influencing architecture, shaping security engineering processes, and mentoring team members in security and engineering. You’ll lead security initiatives across the organization and help embed security into every stage of our software development lifecycle. What you'll do: Drive security strategy and implementation across all CLEAR products and engineering teams, ensuring consistent protection of customer and business-critical assets. Partner with engineering leadership to align application security initiatives with company-wide technology and product roadmaps, balancing innovation with risk mitigation. Provide technical leadership across CLEAR’s application security initiatives, guiding architecture, design, and development to meet high security standards. Serve as a trusted advisor to cross-functional teams — including Engineering, DevOps, Product, GRC, and IT — enabling secure-by-design practices across the organization. Design and drive implementation of scalable automated security controls and testing frameworks integrated into CLEAR’s CI/CD pipelines. Lead complex threat modeling, architecture reviews, and risk assessments across high-value systems and platforms, driving meaningful security outcomes. Engage with CLEAR's customers to provide insight and support their fraud and ident

Become a part of our caring community *(Selected candidate will be required to live within 60 mins of one of the following metro locations OR be willing to relocate to within 12 months of hire date: Louisville KY, NYC Metro, Dallas Metro, Charlotte NC Metro, Tampa, Miami, Washington DC metro, Chicago, Boston, Atlanta, Nashville) The Senior Security Architect for AI works with EIP Department leaders and Humana enterprise stakeholders to identify, define, and develop security architecture requirements and secure designs for AI technology solutions across Humana's business, information technology, and security domains. The Security Architect leads the development of technical architecture & designs, develop security requirements, perform threat modeling and ensures alignment of security & risk imperatives with business priorities. The Security Architect is responsible for the high-level design and patterns of security program infrastructures to enable the protection of Humana tools, data, systems, and networks. Working with EIP Leaders, the security architect drives alignment between the EIP security strategy, security architecture and infrastructure, and Humana's overall business and technology strategic priorities. In this capacity, the role is responsible for planning, designing, and proposing architectural patterns or security enhancements for Humana's information security and technology infrastructures. The role works with EIP and Humana leaders to review and reconcile Humana business priorities with EIP security requirements. The role engages with relevant EIP stakeholders to identify current and emerging security threats and works to design security architecture elements to mitigate threats as they emerge. Additionally, the role actively works to identify gaps within existing EIP reference architecture and designs updates to impacted sec

CAPCO POLAND *We are looking for candidates willing to relocate to the Middle East - Qatar for the duration of the project. At Capco Poland, we’re not just another consultancy - we’re the spark behind digital transformation in the financial world. As a global leader in technology and management consulting, we thrive on helping clients tackle the toughest challenges across banking, payments, capital markets, wealth, and asset management. Our secret? A culture that’s fast, flexible, and fiercely entrepreneurial. We move quickly, think creatively, and always put our people first. We’re passionate about growth - both for our clients and ourselves - and that means attracting the very best talent to join us on this exciting journey. We’re proud to be: • Trailblazers in banking, payments, capital markets, wealth, and asset management • Champions of an agile, nimble, and innovative work environment • Dedicated to building a team of top-notch professionals who share our drive and vision The Role Capco is looking for an AI Security Consultant to help our clients identify, assess, and manage security risks associated with AI technologies and AI-enabled solutions. You’ll work across data, security, technology, risk, and business teams to embed appropriate security controls throughout the lifecycle of AI systems. This is an opportunity to work at the intersection of AI, data, and cybersecurity within financial services, helping clients adopt AI securely while protecting sensitive information, strengthening governance, and managing emerging security risks. The engagement is expected to run for one year and requires relocation to the Middle East for its duration . You will collaborate with client and project teams to deliver the agreed data engineering scope and project outcomes. What You’ll Do Assess security risks associated with AI systems, models, data pipelines, and supporting technology environments. Conduct AI security assessments and secure AI architectu

WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Why we're hiring: The S enior Identity and Access security Engineer is responsible for governing who, and what, can access DTS systems, data, APIs, tools, workflows and AI-enabled capabilities. This is a hands-on governance and control role, reporting into the SVP Security and Compliance. The role ensures that access across DTS is appropriate, auditable, reviewed, least-privileged and aligned with security, privacy, compliance and client commitments. The scope covers traditional human access, external users, privileged access, service accounts, machine identities, API keys, tokens, dataset access, and the emerging governance of AI agents and agentic workflows. The role will work closely with Architecture, Security, Product, Engineering, Infrastructure, Privacy, Legal/DPO, TechOps, Enterprise Technology and the ISMS and Risk Officer to ensure DTS has a clear and controlled model for access across platforms such as WPP Open, Choreograph, InfoSum, Open Intelligence, Resolve and related DTS capabilities. What you'll be doing: 1. Identity and access governance framework Define and maintain the

A Career with Point72's Technology Team As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications. As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity while delivering real business impact for our multi-billion-dollar global business. WHAT YOU'LL DO Serve as a technical subject matter expert within our firm’s third-party information security risk management program Perform in-depth security assessments of new and existing third parties that access, process, store, or transmit firm information Evaluate the design and effectiveness of third-party security controls across technical environments and service delivery models Analyze business use cases, data flows, system integrations, and technical architectures to establish appropriate risk context Review security evidence, including assurance reports, certifications, penetration tests, vulnerability assessments, policies, and architecture documentation Assess controls across identity, cloud and infrastructure security, network security, vulnerability management, data protection, monitoring, incident response, and application security Engage third parties and internal technical stakeholders to validate responses, investigate control gaps, and evaluate remediat

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Senior Vulnerability Analyst Overview Mastercard is seeking a Senior Vulnerability Analyst to manage the Bug Bounty Program and perform advanced application security testing across web, mobile, and API environments. This role is responsible for validating externally reported vulnerabilities, conducting penetration testing, partnering with engineering teams on remediation, and helping strengthen Mastercard's security posture through proactive security assessments and vulnerability management. Role • Manage the Bug Bounty Program, including vulnerability intake, validation, triage, and researcher engagement. • Conduct penetration testing of web, mobile, and API-based applications. • Assess risk, prioritize findings, and provide remediation guidance. • Partner with product and engineering teams to drive timely remediation and validate fixes. • Develop reporting and metrics to measure program effectiveness and communicate risk. All About You • At least 3 years of experience in application security and penetration testing • Strong knowledge of web, mobile, and API security, including OWASP Top 10 risks. • Hands-on experience with tools such as Burp Suite, OWASP ZAP, or similar testing platforms. • Ability to assess vulnerabilities, communicate risk, and provide actionable remediation gu

About the Team At Capco, we believe in fostering an inclusive work environment where you can #BeYourselfAtWork. Our Cybersecurity team partners with leading financial institutions to evaluate, design, and implement risk-aware security solutions that enable business growth and resilience. We help organizations navigate an evolving threat landscape by delivering strategic advisory services across cyber risk, governance, resilience, data protection, cloud security, and emerging technologies. As artificial intelligence continues to transform the financial services industry, we work closely with clients to establish secure, responsible, and compliant AI adoption strategies. Our team helps organizations manage AI-related risks, strengthen governance frameworks, secure AI-enabled platforms, and build trust in the use of emerging technologies. We combine deep financial services expertise with cybersecurity, risk management, data, and technology capabilities to advise executive leadership on their most critical security and digital transformation priorities. About the Job As a Senior Consultant within Capco’s Cybersecurity Practice, you will play a key role in delivering complex cybersecurity and technology risk engagements for leading Investment Banking, Retail Banking, Wealth Management, Capital Markets, and Insurance clients. You will work alongside industry experts and client stakeholders to solve challenging business problems, strengthen security capabilities, and support large-scale transformation initiatives. You will also help clients address emerging risks associated with cloud adoption, digital transformation, artificial intelligence, and evolving regulatory expectations. What You'll Get to Do Design and enhance cybersecurity policies, standards, controls, and governance frameworks across domains including Operational Resilience, Data Security, IAM, Cloud Security, Application Security, Digital Trust, and Technology Risk. Support clients in developing secure AI and

About the Team Joining Capco means joining an organization that is committed to an inclusive working environment where you are encouraged to #BeYourselfAtWork. Capco's Cybersecurity Practice is a multi-disciplinary team focused on helping leading financial institutions navigate an increasingly complex cyber, technology, and regulatory landscape. We partner with clients to evaluate, design, and implement risk-aware solutions that strengthen resilience, protect critical assets, and enable innovation. As artificial intelligence continues to transform financial services, our team works closely with clients to develop secure and responsible AI adoption strategies, establish governance frameworks, manage emerging technology risks, and build trust in AI-enabled products and services. We combine deep expertise in cybersecurity, risk management, financial services, cloud transformation, and data protection to help executive leadership address their most critical business and security challenges. About the Job As a Principal Consultant within our Cyber Advisory Practice, you will serve as a trusted advisor to senior client stakeholders, leading complex cybersecurity and technology risk engagements across the Financial Services sector. You will be responsible for helping clients define and execute cybersecurity strategies, strengthen governance programs, manage enterprise risk, and address emerging challenges related to digital transformation, cloud adoption, and artificial intelligence. You will lead consulting teams, oversee delivery across multiple workstreams, contribute to business development initiatives, and play a key role in shaping the continued growth of Capco's Cybersecurity Practice. What You'll Get to Do Lead cybersecurity, technology risk, and AI governance engagements for global financial institutions, helping clients identify, assess, and mitigate cyber and emerging technology risks. Perform assessments of platforms, applications, cloud environments, AI

About the Team We are a small and fast-moving partnerships team that shapes and executes OpenAI’s most important collaborations. Your mission is to build and grow partnerships across the cybersecurity ecosystem. Reporting to the Cybersecurity Partnerships Lead, you will own a portfolio of cybersecurity technology partners and help them validate, launch, and scale solutions powered by OpenAI models and platforms. About the Role You are an experienced partnerships operator who combines business development, partner management, technical curiosity, and strong execution. You can manage external relationships while driving detailed cross-functional work across product, engineering, technical success, sales, marketing, legal, security, and operations. You move with urgency, follow through consistently, and are comfortable managing a portfolio in a fast-changing market. In this role, you will: Source, close and manage a portfolio of cybersecurity technology partners. Identify high-value use cases across security operations, identity, cloud security, application security, threat intelligence, governance, risk, and compliance. Develop partner plans covering integration, launch, enablement, co-marketing, co-sell, and growth. Support partnership structuring and coordinate product, technical, commercial, legal, and security workstreams. Help partners move from concept and technical validation to production launch and scaled customer adoption. Run regular partner reviews, track commitments, resolve blockers, and identify expansion opportunities. Coordinate closely with product, engineering, technical success, sales, marketing, legal, security, and operations. Measure partner pipeline, launches, model adoption, consumption, customer outcomes, and partner health. You might thrive in this role if you have: 8+ years of experience in partnerships, business development, alliances, partner success, or ecosystem roles. Experience in cybersecurity, enterprise software, cloud platforms, o

Our Purpose Mastercard powers economies and empowers people in 200&#43; countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Lead Technical Program Manager WIPRO Contractor conversion to FTE Mastercard is a merit-based, inclusive, equal opportunity employer that considers applicants without regard to gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law. We hire the most qualified candidate for the role. In the US or Canada, if you require accommodations or assistance to complete the online application process or during the recruitment process, please contact [email protected] and identify the type of accommodation or assistance you are requesting. Do not include any medical or health information in this email. The Reasonable Accommodations team will respond to your email promptly. Corporate Security Responsibility All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must: Abide by Mastercard’s security policies and practices; <p style="text