Technology And Security Risk Director Jobs

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. Our Staff Software Engineers identify key strategic technical initiatives, deliver significant value to our customers and business, and set the tone for engineering excellence and culture. As a Staff Software Engineer on the team based in London, you will play a key role in growing our engineering presence in Europe. You'll partner with product management, product design, and your growing engineering team to drive the discovery and development of privacy, AI, and risk management features that expand Vanta’s value for its customers - working in a domain where technical decisions carry real compliance and data-governance weight, not just product tradeoffs. Your work will accelerate product development and create a consistent customer experience for all of our customer segments. Vanta’s team and technology surface are growing quickly, and it’s essential that we invest in the right abstractions and systems to enable us to scale with our business. Our business has found incredible product-market fit and has monetized effectively since the day we signed our first customer. We’re growing at a blistering pace, which presents career-defining opportunities for engineers to accelerate their growth and to contribute to a rapidly-scaling company. This role is remote-first. For engineers based in the London area, we ask for 2–3 days per week in the office. For engineers based elsewhere in the UK/Ireland, we expect occasional travel to London (roughly once per quarter, <20% of your time). Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. We’d love for you to jo

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Ready to scale your career at the intersection of law and innovation? Join Okta’s Public Sector and Regulated Offerings Legal Team . As Corporate Counsel, you won’t just be reviewing regulatory requirements—you’ll be a foundational builder of a scalable, global Public Sector practice. In this role, you will provide frontline legal counseling for Okta’s most critical regulated environments, working both independently and alongside senior leadership to navigate the complexities of the U.S. government’s regulatory frameworks. You will partner with business and technology teams to guide the development and implementation of Okta’s Public Sector solutions. Our Public Sector legal team drives the legal strategy for introducing new products and features into regulated environments (e.g., FedRAMP, GovRAMP, DoD CC SRG). In this role, you must use sharp critical thinking to provide pragmatic legal solutions that balance aggressive business objectives with necessary risk mitigation. Finally, you serve as a bridge between legal, engineering, compliance, security, and sales teams to ensure our products meet the rigorous standards of our public sector customers. What You Bring to the Table Comfortable working independently in a fast-paced, remote-friendly environment and can pivot as business goals evolve. A deep understanding of the unique legal and regulatory hurdles associated with U.S. regulated industries, specifically: FedRAMP&n

About the Team At Trendyol Tech, our mission is to create a positive impact in our ecosystem by enabling commerce through technology. We solve complex problems with data, creativity, and agility — always driven by real outcomes. With a culture built on learning, collaboration, and ownership, we grow together while building what’s next. About the Role This role is part of the Security Architecture & Engineering team and focuses on embedding security into systems, platforms, products, and infrastructure by design. The role provides security architecture consultancy to technical and business stakeholders, helping teams make pragmatic, risk-based security decisions while supporting business objectives. It is responsible for identifying architectural security risks, design flaws, and security gaps across new initiatives, infrastructure changes, cloud adoption, platform services, and business-critical systems. In addition, the role contributes to building reusable reference security architectures, design principles, and assessment frameworks aligned with regulatory and industry frameworks such as NIST, ISO, PCI DSS, GDPR, and KVKK. The role also drives process improvement and automation initiatives to improve the scalability, consistency, and maturity of security architecture practices across the organization.

About the Role As our Digital Trust and Resilience Specialist you will lead and perform technology risk assessment and security compliance activities central to our global operations. You will coordinate annual IT internal and external audit programs, including ISO and SOC 2 certifications across our key markets. These certifications are critical to accelerating customer onboarding and streamlining annual regulatory audits worldwide. You will also run mandatory employee security awareness training globally, and drive the automation of evidence collection to improve efficiency. In this role, you will identify compliance gaps, support remediations, and provide technical guidance across all business units. AI is fundamental to how we work. In this position, you will help us build AI automations, workflows, and agents to boost the efficiency of Digital Trust & Resilience operations. You do not need to be an AI researcher. You just need to understand compliance risks and have a drive to learn and apply AI tools. Responsibilities: Coordinate and perform annual IT internal audits and external audits for ISO and SOC 2 certifications across global markets, ensuring certifications are maintained to support customer and partner onboarding and regulatory audit readiness Run global, regulator-mandated employee security awareness and compliance training campaigns, including tracking, reporting, and continuous improvement Automate evidence collection and compliance workflows to drive efficiency gains and scale operations in response to growing regulatory demands Participate in internal security and privacy assessments, external audits, compliance certifications, and risk management activities Provide complete and accurate responses to internal and third-party enquiries on security compliance Perform periodic technical, organizational, and third-party risk and control assessments, and manage remediation activities to completi

About the Role As our Digital Trust and Resilience Engineer, you will lead and perform technology risk assessment and security compliance activities central to our global operations. You will coordinate annual IT internal and external audit programs, including ISO and SOC 2 certifications across our key markets. These certifications are critical to accelerating customer onboarding and streamlining annual regulatory audits worldwide. You will also run mandatory employee security awareness training globally, and drive the automation of evidence collection to improve efficiency. In this role, you will identify compliance gaps, support remediations, and provide technical guidance across all business units. AI is fundamental to how we work. In this position, you will help us build AI automations, workflows, and agents to boost the efficiency of Digital Trust & Resilience operations. You do not need to be an AI researcher. You just need to understand compliance risks and have a drive to learn and apply AI tools. Responsibilities: Coordinate and perform annual IT internal audits and external audits for ISO and SOC 2 certifications across global markets, ensuring certifications are maintained to support customer and partner onboarding and regulatory audit readiness Run global, regulator-mandated employee security awareness and compliance training campaigns, including tracking, reporting, and continuous improvement Automate evidence collection and compliance workflows to drive efficiency gains and scale operations in response to growing regulatory demands Participate in internal security and privacy assessments, external audits, compliance certifications, and risk management activities Provide complete and accurate responses to internal and third-party enquiries on security compliance Perform periodic technical, organizational, and third-party risk and control assessments, and manage remediation activities to complet

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. Position Overview The Physical Security Specialist will serve as the primary security professional responsible for supporting day-to-day physical security operations at Micron's Longmont, Colorado facility while also providing Technical Surveillance Countermeasures (TSCM) expertise in support of Global Security requirements. The role is responsible for physical security operations, security risk assessments, incident response and investigations, contract security oversight, access control, video surveillance, visitor management, security technology, and the protection of Micron personnel, assets, intellectual property, and sensitive information. As a Technical Surveillance Countermeasures (TSCM) Subject Matter Expert, the individual will conduct and support technical security inspections of executive offices, boardrooms, strategic meeting spaces, conference facilities, hotels, and other locations where sensitive discussions may occur. The role will deploy as required to other Micron locations and events in support of sensitive executive, board, and business activities. The role will also leverage Micron-approved AI-enabled tools and emerging technologies to improve security analysis, reporting, risk identification, operational efficiency, and continuous improvement while maintaining appropriate confidentiality, data protection, and responsible AI practices. Key Responsibilities Longmont Site Security Serve as the primary physical security professional supporting the Longmont site.

About the role: This is an opportunity to join K's critical InfoSec team as a Senior Security Engineer - AppSec and operate with foresight in protecting our infrastructure, applications, cloud security, and customer trust. As a lean team, we span across multiple areas such as AppSec, CloudSec, SecOps, ITSec, and Compliance and apply it towards reading and interpreting architecture, or planning and building out net new security solutions. You will have the autonomy to define and implement cutting-edge security solutions across our entire technical ecosystem, ensuring our innovative work remains robust and compliant against evolving global threats. This role is crucial for establishing and maintaining a world-class security posture, particularly within the sensitive and highly regulated healthcare technology space. What you will do: Lead the development and implementation of robust application security protocols throughout the entire Software Development Lifecycle (SDLC). Partner with engineering teams to incorporate security into architecture, design, development, testing and deployment Perform hands-on security testing of web applications, APIs, cloud-native services and supporting infrastructure Build and improve automated security testing within CI/CI pipelines, including static analysis, dependency scanning, secrets detection, container scanning and dynamic testing Evaluate effectiveness of application security tools, improve tooling output quality and reduce unnecessary findings and developer friction Develop secure coding standards with developer-focused documentation Contribute application security expertise to vulnerability management, during security incidents/investigations and post-incident reviews Evaluate third party applications, libraries and APIs and integrations for security risk Ensure adherence to relevant healthcare regulatory and compliance requirements (e.g., HIPAA, GDPR, etc.) across all product lines and systems. What we're looking for: 4+ yea

This is Adyen Adyen provides payments, data, and financial products in a single solution for customers like Meta, Uber, H&M, and Microsoft - making us the financial technology platform of choice. At Adyen, everything we do is engineered for ambition. For our teams, we create an environment with opportunities for our people to succeed, backed by the culture and support to ensure they are enabled to truly own their careers. We are motivated individuals who tackle unique technical challenges at scale and solve them as a team. Together, we deliver innovative and ethical solutions that help businesses achieve their ambitions faster. Senior Security Program Manager Adyen is looking for a Security Program Manager to join the Tech Regulatory team within the first line of defense. The Tech Regulatory team ensures that the platform is secure, reliable and compliant with all global regulatory requirements. As a Security Program Manager, you are responsible for ensuring that our products and services comply with security regulations and laws. You actively engage, bring together, and communicate with people from various teams to be successful in ensuring continued compliance of products and services and you manage multiple security compliance programs such as PCI-DSS and PCI 3DS. What you'll do Program Management: Manage programs across multiple domains - for example responsible for program managing the PCI-DSS and PCI 3DS certifications in addition to supporting security on regulatory requirements surrounding a broad set of security risk domains for example security detection and monitoring, data loss prevention, vulnerability management and three core operational risk domains as your team’s core anchor: Incident Management, Change Management, and Business Continuity Management Defining standards and ensuring frameworks withstand internal and external scrutiny Operational Design: Translate complex regulatory requirements into actionable operational program desig

Project Manager – Cyber Security (CyberArk) Location: Dallas, Texas (Hybrid) | Practice Area: Technology & Engineering | Type: Permanent Lead enterprise CyberArk transformation initiatives that strengthen security, resilience, and regulatory compliance. The Role As a Project Manager within Capco's Cyber Security practice, you will lead the successful delivery of Privileged Access Management (PAM) initiatives for leading financial services clients. Working closely with business, security, and technology stakeholders, you will manage CyberArk implementation and enhancement projects, ensuring delivery aligns with client security strategies, compliance requirements, and operational objectives. This role combines project leadership, stakeholder management, and cybersecurity consulting expertise to deliver impactful business outcomes. What You’ll Do Lead CyberArk implementation and enhancement projects, managing scope, timelines, risks, and successful delivery of Privileged Access Management capabilities Coordinate business, security, infrastructure, application, and vendor teams to ensure effective project execution and stakeholder alignment Manage project governance, executive communications, deployment planning, testing, and transition to operational support Facilitate client workshops, provide delivery guidance, and recommend leading practices for Identity and Access Management (IAM) and Privileged Access Management (PAM) Drive continuous improvement by supporting platform optimization, process enhancements, and alignment with security and regulatory objectives What We’re Looking For 5+ years of experience managing complex technology projects using Agile and/or Waterfall delivery methodologies Proven experience leading cross-functional teams and managing executive-level stakeholder relationships Strong experience with project management tools including JIRA, Confluence, Microsoft Project, or Visio Excellent communication, presentation, and risk management s

About Flexport: At Flexport, we believe global trade can move the human race forward. That’s why it’s our mission to make global commerce so easy there will be more of it. We’re shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people. Today, companies of all sizes—from emerging brands to Fortune 500s—use Flexport technology to move more than $19B of merchandise across 112 countries a year. The recent global supply chain crisis has put Flexport center stage as we continue to play a pivotal role in how goods move around the world. We are proud to have the support of the best investors in the game who believe in our mission, solutions and people. Ready to tackle global challenges that impact business, society, and the environment? Come join us. Hundreds of engineers and thousands of freight operators around the world rely on Flexport's internal systems every single day to keep billions of dollars of freight moving. Keeping those systems — and the people who use them — secure is not a compliance checkbox. It's the core infrastructure for a company operating across 112 countries. The PSI (Platform, Security & Infrastructure) team is looking for a Senior Security Engineer to own the security of Flexport's corporate environment: endpoints, identity systems, internal networks, and the SaaS estate. This is a security engineering role, not an IT support role, and not a role where you write policies and hope for the best. You'll build, automate, and be on the ground when things get real. What You'll Do Endpoint & SaaS security Own and mature our endpoint security stack (EDR) across macOS and Windows fleets , writing device policy as code — configuration profiles, remediation scripts, and enforcement rules — with staged rollout and rollback built in. Own security configuration and monitoring for Flexport's critical SaaS applications (Google Workspace, Slack, and similar) through SSPM tooling, catching risk

About the role We are seeking an experienced and detail-oriented Information Security and Cloud Security Auditor to join our team. The ideal candidate will have 3-7 years of expertise in data security and privacy control implementation, internal auditing, third-party risk management, cybersecurity governance, and cloud security (banking sector preferred). This role will be responsible for conducting comprehensive IT and cloud security audits, ensuring compliance with regulatory requirements, and enhancing our information security policies and procedures. Key Responsibilities -Conduct IT and cloud security audits across various domains, including IT General Controls (ITGC), Information Security Controls, Cloud Security, Network Security, Vulnerability Management, and Vendor Risk Assessments. -Assess compliance with relevant laws, regulations, industry standards, and organizational policies across both on-premises and cloud environments. -Develop and enhance information security and cloud security policies and procedures in alignment with industry best practices. -Maintain thorough documentation of audit findings, risk assessments, security measures, working papers, audit program checklists, and evidence for internal and external reporting. -Validate ITGC, cloud security, and application-specific controls and manage audit documentation, risk assessments, evidence gathering, and control testing. -Follow up on audit findings and ensure timely closure of non-compliance and security issues identified during audits. -Manage and oversee third-party risk assessments and audits, ensuring robust security controls are implemented across traditional and cloud-based service providers. -Lead and participate in the development, migration, and implementation of security controls and policies for network and cloud security solutions. -Conduct risk-based security assessments of internal, vendor, and third-party hosted environments, covering both traditional IT infrastructure and cloud

Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams — People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more — provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block. The Role Block’s Business Resilience is part of the Security Governance Risk and Compliance team. The Business Resilience helps ensure that critical products, services, operations, and supporting technology can continue through disruption and recover within expected timeframes. The team partners across business, technology, risk, compliance, legal, regional entities, and third-party teams to identify resilience risks, validate recovery capabilities, support governance expectations, and drive practical remediation. This role will help operate and mature Block’s resilience program across business continuity, disaster recovery, crisis management, operational resilience, third-party resilience, testing, reporting, and regulatory compliance support. The role requires someone who can translate resilience requirements into clear business and technology actions, communicate risk in a practical way, and support accountable owners through testing, remediation, and governance. The ideal candidate is also comfortable improving how resilience work gets done. They should be able to identify manual or repeatable workflows, support AI-enabled and automation opportunities, improve reporting and dashboards, help administer resilience tooling, and build scalable templates, evidence processes, and self-service mechanisms that reduce friction while improving

We are seeking a driven, experienced commercial attorney who thrives in a fast-paced environment to fill the position of Legal Counsel - Procurement. You will work closely with internal business resources, procurement stakeholders, legal and other stakeholders across the enterprise to lead high value, high visibility and high impact procurement negotiations, while also ensuring all third-party agreements meet MongoDB’s contracting standards. You work both independently and as part of a team that values quality, fun and collaboration. We are looking to speak to candidates who are based in Toronto, ON for our hybrid working model. Responsibilities Serve as the primary legal partner to global Procurement and advise cross-functional stakeholders on third-party contracting matters Draft and negotiate buy-side agreements, including SaaS, software, marketing, facilities, professional services, and real estate agreements Provide practical legal guidance on complex, high-value, and high-risk procurement transactions, including escalation and resolution of issues requiring cross-functional stakeholder input or business leadership approval Develop and maintain scalable procurement and legal review processes Develop and maintain legal knowledge-management resources, including procurement playbooks, templates, and other institutional knowledge resources Identify opportunities to leverage technology, automation, contract lifecycle management tools, and emerging legal and AI technology to scale procurement legal support Develop and deliver training and practical guidance to Procurement and business stakeholders on contracting processes, legal requirements, negotiation strategy, risk allocation, and common contractual issues Maintain awareness of emerging legal and commercial issues affecting procurement, including developments relating to data privacy and security, artificial intelligence, intellectual property, technology contracting, and vendor risk, and incorporate releva

We are seeking a driven, experienced commercial attorney who thrives in a fast-paced environment to fill the position of Legal Counsel - Procurement. You will work closely with internal business resources, procurement stakeholders, legal and other stakeholders across the enterprise to lead high value, high visibility and high impact procurement negotiations, while also ensuring all third-party agreements meet MongoDB’s contracting standards. You work both independently and as part of a team that values quality, fun and collaboration. We are looking to speak to candidates who are based in New York City, NY or Austin, TX for our hybrid working model or remotely in the United States. Responsibilities Serve as the primary legal partner to global Procurement and advise cross-functional stakeholders on third-party contracting matters Draft and negotiate buy-side agreements, including SaaS, software, marketing, facilities, professional services, and real estate agreements Provide practical legal guidance on complex, high-value, and high-risk procurement transactions, including escalation and resolution of issues requiring cross-functional stakeholder input or business leadership approval Develop and maintain scalable procurement and legal review processes Develop and maintain legal knowledge-management resources, including procurement playbooks, templates, and other institutional knowledge resources Identify opportunities to leverage technology, automation, contract lifecycle management tools, and emerging legal and AI technology to scale procurement legal support Develop and deliver training and practical guidance to Procurement and business stakeholders on contracting processes, legal requirements, negotiation strategy, risk allocation, and common contractual issues Maintain awareness of emerging legal and commercial issues affecting procurement, including developments relating to data privacy and security, artificial intelligence, intellectual property, technology

About Eudia Eudia is revolutionizing legal and acquisition work through AI-powered Augmented Intelligence, empowering legal and contracting professionals to accelerate decision-making, mitigate risk, and deliver on mission. With $105M in Series A funding led by General Catalyst, we are building a category-defining platform that fuses AI-driven automation with human expertise. At Eudia, we move fast. Our teams ship solutions in days, not months. We are already engaged with the U.S. Air Force and the Department of War, and on the commercial side we support Fortune 500 legal departments including Cargill, Coherent, ServiceNow, and Western Digital We are solving one of the hardest unsolved problems in AI, which is bringing trust, accuracy, and security to legal and acquisition automation in environments where the standard for both is absolute. We are a team of problem-solvers. Eudia is a place where you will be challenged, take ownership from day one, and work alongside some of the brightest minds in AI, law, and GovCon. Opportunity for Impact This is a rare opportunity for early entry into the developing Defense Industrial Base business of a rapidly growing startup. Primes and their suppliers absorb the full weight of federal acquisition on the contractor side. Their legal, contracts, and compliance organizations manage FAR and DFARS flowdowns, subcontract and teaming agreements, proposal support, export control, and audit readiness at a volume that has grown far faster than their headcount. The professionals doing that work have been underserved by technology for decades. If you are excited by the challenge of putting real capability in the hands of general counsel and contracts organizations across the defense sector, we invite you to apply. About the Role As Business Lead for the Defense Industrial Base, you will own the end-to-end capture and growth of Eudia's pursuit across aerospace and defense primes, mid-tier suppliers, and defense technology companies, from id