Technology Risk And Controls Manager in United States

Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The role: The Composer by SoFi Segment Manager plays a key role in operating, scaling, and evolving the Composer business. This individual will own critical workstreams spanning trading and brokerage operations, process design, member servicing, risk and controls, and strategic initiatives. The role will partner closely with Product, Engineering, Operations, and Compliance to translate business needs into scalable operating solutions. The ideal candidate combines strong brokerage expertise with structured problem-solving, sound judgment, and the ability to independently drive complex initiatives from problem identification through implementation. What you'll do: Own and support critical Composer business operations, including trading, brokerage servicing, account operations, and complex operational escalations. Serve as a subject matter expert across Composer's operating model, including key brokerage workflows, systems, dependencies, and controls. Design and continuously improve end-to-end member journeys across key Composer experiences, identifying friction points and ensuring scalable servicing solutions. Serve as an escalation point for complex or high-impact member issues, driving resolution and translating learnings into broader process improvements. Partner across the business to identify oper

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . As a Staff IT Technical Program Manager on the IT Operations team, you'll own and drive eDiscovery and information governance programs across Coinbase. Embedded with cross-functional leadership, you'll serve as the connective tissue between domain experts and engineering teams, identifying automation opportunities, prototyping solutions with AI and workflow tooling, and driving adoption across the organization. You'll lead the technical strategy behind defensible eDiscovery processes and entity-specific retention capabilities, ensuring Coinbase meets its regulatory obligations at scale. What you’ll do: Own the end-to-end strategy and execution for eDiscovery and information governance solutions spanning multiple business functions and enterprise platforms. Partner with engineering teams to deliver technology programs that transform eDiscovery capabilities from hold through collection, review, and production (EDRM). Drive the translation of regulatory and compliance requirements into actionable system configurations, policies, and controls across platforms such as Slack and Google Workspace. Lead program timelines, dependencies, and risk escalations while maintaining audit-ready documentation including regulatory control matrices, playbooks, and SLAs. Build and validate comprehensive test plans for eDiscovery controls and information governance tooling to ensure defen

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. Position Summary The Manager - Process Engineering leads high-impact process improvement and Business Process Management (BPM) initiatives across Information Security and Technology Solutions (ISTS). This role is accountable for enabling operational excellence by designing, standardizing, improving, and governing ISTS processes using agentic workflows, Lean Six Sigma, and Business Process Management disciplines. The Manager- Process Engineering serves as both a delivery leader and capability builder, ensuring that ISTS has well-documented, measurable, and continuously improving processes with clear ownership, performance indicators, and controls. This role partners closely with technology tower leaders, Experience Owners, Process Owners, and risk, security, and compliance stakeholders to reduce operational friction, increase capacity, mitigate risk, and strengthen enterprise controls. Key Responsibilities: Apply DMAIC and Lean Six Sigma methodologies to solve complex, cross‑funct

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Senior Internal Auditor reporting to the Senior Manager, Technology Internal Audit, you’ll help GitLab assess risk and strengthen controls across a technology landscape that includes multi-cloud infrastructure, artificial intelligence and machine learning systems, and modern development practices. This USA-based role supports our Sarbanes-Oxley Act (SOX) program while partnering with Engineering, IT Operations, Security, and business teams to build controls that work in practice, not just on paper. You’ll execute technology audits, turn findings into practical improvements, and use data analytics, au

Datadog is a world-class monitoring and security platform for cloud applications. We're dedicated to creating, developing, and supporting our product and customers, fostering seamless collaboration and problem-solving among Dev, Ops, and Security teams globally. Built by engineers for engineers, our SaaS product is trusted by organizations of all sizes across various industries, driving digital transformation, cloud migration, and infrastructure monitoring for our customers' entire technology stacks. As cloud technologies continue to evolve and digital operations become ever more crucial, Datadog remains at the forefront of innovation and is well-positioned for sustained growth. Datadog's Finance team partners with stakeholders across the organization, providing commercial, operational, and analytical support to ensure that Datadog's business continues its rapid and efficient growth. The Equity Administration team is responsible for overseeing the full cycle of stock administration on a global basis, collaborating with groups across Accounting, Tax, People, Payroll, and Legal to manage Datadog's equity plans worldwide. Our work spans the processing of equity transactions including RSU releases, stock option exercises, and ESPP purchases; management of equity-related inquiries from employees, executives, investors, and other key partners; day-to-day management of the E*TRADE Equity Edge Online platform; global equity reporting and tax compliance; oversight of equity procedures, policies, and controls; and employee education on equity programs. We are seeking a hands-on Equity Administration Assistant Manager to own our complex and high-risk equity workstreams. Reporting to the Senior Manager, Equity Administration, the Assistant Manager will serve as a first level preparer or reviewer on equity transactions, assist with process documentation, and work closely with various internal teams across Accounting, Tax, People Operations, Payroll, and Legal. This is a ro

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . We're hiring a Manager, GRC to join our Technology Risk & Controls team within Security and lead second line of defense advisory coverage across critical technology and security domains. This team evaluates risk posture, improves control design, and helps engineering, infrastructure, and security leaders make better, risk-informed decisions. You'll both manage a team and directly own advisory coverage for domains that may include disaster recovery and resiliency, SDLC, artificial intelligence, identity and access management, and supply chain - building trusted partnerships that ensure Coinbase addresses its most critical risks in its most critical functions. What you'll do: Lead second line advisory coverage for key technology and security domains, assessing risk exposure, control effectiveness, policy alignment, and emerging issues across the business. Partner with engineering and technology teams to evaluate domain posture and identify where additional controls, remediation, or governance improvements are needed. Review and challenge the design of new and existing risks and their corresponding controls to ensure our mitigations are scalable, effective, and aligned to business, risk, and regulatory expectations. Drive coordination across risk, controls, policy, audit, and assurance teams to translate incidents, audit findings, and regulatory expectations i

About the Team OpenAI’s Legal team helps advance our mission by tackling novel legal issues in AI. Our team brings together professionals across technology, privacy, intellectual property, corporate, employment, tax, regulatory, and litigation. Our regulatory compliance work turns legal requirements into practical programs that support responsible AI development and deployment. About the Role As a Legal Program Manager focused on regulatory compliance, you will build and manage cross-functional programs that translate counsel’s guidance into practical, sustainable operations. Your initial focus may include content moderation and/or frontier AI governance, with the mix shaped by team priorities and your strengths. You will partner with internal and external counsel, other legal program managers, and technical and business teams to coordinate implementation, evidence collection, reporting, and ongoing compliance. You’ll build repeatable systems that scale across regulations, products, and jurisdictions, helping teams navigate emerging requirements with clarity and sound judgment. This full-time role is based in San Francisco, CA, or New York, NY. In this role, you will: Lead regulatory compliance programs end to end: define scope, owners, milestones, dependencies, risks, and escalation paths, and drive execution with counsel and cross-functional partners. Translate counsel’s regulatory guidance into repeatable workflows, controls, and documentation. Depending on your portfolio, this may include content moderation disclosures, transparency reporting, reporting and appeals workflows, or frontier AI model launch readiness, evaluation and risk-management evidence, and incident reporting. Build strong partnerships across Product, Engineering, User Operations, Governance, Risk and Compliance (GRC), Global Affairs, Communications, and Go-to-Market to align program priorities and deliverables. Support regulatory inquiries, audits and investigations with counsel, organizing ev

About the role OpenAI is building a world-class global mobility and immigration program—agile, compliant, technology-enabled, and designed to help exceptional people work where they can have the greatest impact. In this role, you will lead high-impact strategic initiatives, including U.S. permanent residence strategy, M&A, organizational change, and global expansion. This is a senior individual-contributor role for a builder who can translate legal and operational complexity into clear, practical solutions. Reporting to the Head of Global Mobility & Immigration, you will partner with the broader team and lead through expertise and influence across Legal, Corporate Development, Recruiting, People, Finance, business teams, and external counsel to turn emerging business needs into scalable programs, policies, and durable controls. What you'll do Set the roadmap, principles, governance, and operating model for priority global mobility and immigration initiatives. Lead the U.S. permanent residence strategy, including PERM planning, controls, communications, compliance and continuous improvement. Own immigration and mobility workstreams for M&A, divestitures, restructurings, entity changes, and new-market entry—from diligence through integration. Lead global expansion strategy, ensuring work authorization, business travel, and compliance in rapidly growing international jurisdictions. Build reusable playbooks, decision frameworks, risk assessments, and change-management plans. Partner with Legal, Corporate Development, Recruiting, People, Finance, and business leaders to identify implications early and drive sound decisions. Establish dashboards and program-health measures covering compliance, cycle time, quality, cost, vendor performance, and employee experience. Manage external counsel and vendor partners through clear service levels, quality standards, budgets, and outcomes. Use systems, automation, and AI-enabled tools to improve case handling, documentati

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As the Manager, IT SOX PMO, you'll own information technology (IT)-specific Sarbanes-Oxley (SOX) compliance activities and serve as a subject matter expert for IT general controls (ITGCs) and IT application controls (ITACs). You will be an individual contributor, reporting to the Senior Director, SOX PMO Leader within the Chief Accounting Officer's organization, you'll directly support the Senior Manager, IT SOX PMO in strengthening GitLab's IT SOX program, preparing new and changing processes and systems for SOX requirements, and advancing automation in a high-growth technology environment. You'll combin

About the Team At OpenAI, the User Safety & Risk Operations (USRO) team helps protect our products and users from abuse, fraud, safety risks, and other forms of misuse. We operate at the front line of real-world safety and risk management, translating user and operational signals into timely decisions, effective interventions, and improvements to our systems. This role sits on a team focused on building operational capacity for new, ambiguous, and fast-moving company priorities. The team defines what needs to be built, creates the operating model to support it, and works with partner teams to make the work scalable and durable over time. About the Role We are looking for a senior program manager to build the safety, quality, and risk operations supporting a new category of consumer devices. You will translate ambiguous product risks and evolving requirements into practical operating models, workflows, escalation paths, launch-readiness plans, and cross-functional decision-making. This is a foundational role: the systems you build will shape how OpenAI launches, monitors, and improves a new category of consumer devices safely at scale. You will help establish how potential safety incidents, product-quality concerns, sensitive customer escalations, privacy-sensitive issues, and other emerging device risks are identified, investigated, resolved, and incorporated into product and operational improvements. You will turn incomplete requirements into practical workflows, decision rights, launch plans, quality controls, measurement, and durable ownership. The role centers on program building, operational judgment, and execution. We welcome candidates from product safety, quality assurance, regulatory operations, technical program management, healthcare, medical devices, aerospace, consumer technology, and other environments involving complex products or regulated risks. Direct consumer-hardware experience is helpful but not required. The strongest candidates learn unfam

NVIDIA has been transforming computer graphics, PC gaming, and accelerated computing for more than 25 years. It’s a unique legacy of innovation that’s fueled by great technology—and amazing people. Today, we’re tapping into the unlimited potential of AI to define the next era of computing. An era in which our GPU acts as the brains of computers, robots, and self-driving cars that can understand the world. Doing what’s never been done before takes vision, innovation, and the world’s best talent. As an NVIDIAN, you’ll be immersed in a diverse, supportive environment where everyone is inspired to do their best work. Come join the team and see how you can make a lasting impact on the world. We are seeking a Senior IT Auditor passionate about SOX and internal examination. The role supports the Senior Manager of IT SOX Compliance to strengthen NVIDIA’s internal control environment over financial reporting (ICFR). It involves collaborating with IT and accounting/finance groups to evaluate and build efficient business and IT controls that mitigate financial reporting risk. What you'll be doing: Plan, scope, and implement the end-to-end SOX 404 lifecycle, including walkthroughs, risk-control matrices, testing, deficiency evaluation, remediation, and reporting. Partner with process owners to assess risks in new and changing business processes,-identify the key IT controls, and build out narrative, flowchart and control description. Drive continuous improvement and automation by seeking opportunities to streamline, standardize, and automate controls, reducing operational friction while maintaining control effectiveness. Provide guidance and training to control owners to promote awareness and understanding of SOX compliance requirements. Serve as the primary point of contact for external auditors, and ensure a seamless, efficient audit process. Coach

Senior Manager, Logistics Security Description - At HP, we create technology that helps people and businesses bring their ideas to life. Our global supply chain plays a vital role in that mission, moving high-value products safely and reliably to customers around the world. We are looking for a collaborative and solutions-oriented Senior Manager, Logistics Security to help protect our logistics network, strengthen transportation risk programs, and lead efforts that reduce loss, improve carrier performance, and support a secure customer experience. Core responsibilities Own logistics security strategy for HP's transportation network. Manage loss, theft, damage, shortage and mis-delivery incidents across carriers, warehouses and distribution partners. Lead transportation claims management, including investigation, documentation, recovery and settlement. Manage relationships with major LSPs, carriers, freight forwarders and 3PLs. Investigate high-value shipment incidents and identify root causes. Develop controls to prevent cargo theft, fraud, unauthorized access and product diversion. Establish security standards for transportation lanes, warehouses and high-risk locations. Track claims and losses using KPIs such as: Claim $ / shipment Loss rate Damage rate Theft incidents Recovery % Claim cycle time Carrier performance Partner with Supply Chain, Logistics, Finance, Legal, Compliance, Security and Insurance teams. Lead corrective/preventive actions with logistics service providers. Review carrier contracts and ensure appropriate liability and insurance coverage. Establish escalation processes for major incidents. Conduct risk assessments of logistics providers and distribution locations. Use dat

About the Team Governance, Risk, and Compliance (GRC) is foundational to Security delivering mission outcomes at OpenAI. The GRC team provides security assurances and builds compliance for OpenAI’s technology, people, and products. We are technical in what we build but operational in how we do our work, and we partner deeply with Product, Security, Legal, Privacy, GTM, and Field Security to help OpenAI move quickly while maintaining trust with customers, auditors, regulators, and the public. About the Role We are looking for an experienced Product Lifecycle Assurance IC to help scale OpenAI’s GRC function across our product stack to ensure products address customer and regulatory compliance requirements at launch and regressions are detected promptly and corrected. You will partner closely with Product, Security, Legal, and Privacy teams to make sure OpenAI can move quickly while maintaining our security, privacy and compliance claims and giving customers, auditors, and regulators assurance about how OpenAI handles user data. You are responsible for product assurance end-to-end from inception to post-launch (continuous) monitoring. You leverage existing workflows, reviews, and data and enhance, augment and build the components needed to create an end-to-end product assurance program. This role is not about supporting SOC or ISO audits; it's a highly cross-functional and deeply technical operations role to ensure that OAI products meet the compliance bar at launch, regressions are prevented and detected, and our compliance state can be evidenced. This role also helps ensure that our product launch governance program operates effectively across key safety, privacy, legal and security stakeholders and lessons-learned from incidents and regressions are used to improve the program. You or in partnership with engineering teams, build key controls in our infrastructure stack, developer workflows and launch tooling to provide developers with guardrails, perform CI/CD confor

Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The Role: Positioned in the first line of defense (1LOD) and reporting to the Head of Business Controls, this experienced executive will act as the Business Controls Lead for SoFi’s Technology and Cybersecurity organizations. This includes comprehensive coverage of Engineering, Information Security, Infrastructure, and Data across the full SoFi Legal structure: SoFi Inc., SoFi Bank, Galileo, Technisys, and SoFi Hong Kong. The Business Controls Lead will act as the direct advisor to the Chief Technology Officer (CTO), Chief Information Security Officer (CISO), and their senior leadership teams. You will lead a team of experienced IT risk & controls team charged with promoting risk awareness and ensure the overall effectiveness of risk and compliance management program implementation and execution across the 1LOD. This role provides support, advisory services, and enables strategic alignment directly to department heads to accelerate and ensure quality execution. You will be responsible for supporting and driving consistent 1LOD adherence to critical programs, such as building and maintaining risk and control self-assessments (RCSAs); identification and evaluation of control effectiveness through control testing; 1LOD risk reporting; and supporting audits and regulatory exams. You will monitor the first l

Citibank, N.A. seeks a Project Management Lead for its Irving, Texas location. Duties: Manage end-to-end delivery of wholesale credit risk and climate risk initiatives, overseeing projects lifecycle from requirements intake through execution and implementation. Define and monitor project milestones, dependencies to ensure timely project delivery and resolution of emerging risks or constraints. Partner with model developers in order to streamline, consolidate and redevelop wholesale credit risk models. Support model validation, audit readiness and project success by maintaining comprehensive documentation, remediation trackers, and evidence repositories. Coordinate with technology partners to optimize model integration, leading efforts to embed Comprehensive Capital Analysis and Review (CCAR) and International Financial Reporting Standard 9 (IFRS9) models into the library system. A telecommuting/hybrid work schedule may be permitted within a commutable distance from the worksite, in accordance with Citi policies and protocols. Requirements: Requires a Master’s degree, or foreign equivalent, in Finance, Business Analytics, or related field and 4 years of experience as a Project Manager, Financial Analyst, Accountant, or related position involving treasury and balance-sheet risk assessment, wholesale credit risk management and financial audit management. 4 years of experience must include: Risk management processes and frameworks in order to measure financial exposures under stress scenarios in model development; Understanding of control framework and regulatory expectations for model documentation, validation and periodic review; Project management including project structuring, development of timeline, implementation phases planning, resources allocation, identification of dependencies and bottlenecks, and escalation of issues; Data analysis and data quality assurance, including cleanliness of the data, completeness and accuracy, while ad