Compliance Officer in United States

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We are seeking a mid-level Infrastructure Vulnerability Management Engineer with a strong background in Cloud Security, DevSecOps, and Infrastructure-as-Code (IaC). In this role, you will bridge the gap between security, compliance, DevOps, and Platform engineering teams. You will identify infrastructure misconfigurations, secure multi-cloud environments, and manage continuous vulnerability lifecycles across cloud workloads, containers, and data repositories to satisfy strict regulatory compliance frameworks. You will also serve as a technical infrastructure responder during security incidents, deploying real-time cloud or network countermeasures to protect our production ecosystem. What You'll Do Core Responsibilities Infrastructure Scanning & Triage: Perform continuous security scanning across our cloud posture and workloads. Review, validate, and prioritize flaws and misconfigurations based on CVSS scores, real-world exploitability, and infrastructure network exposure. Posture Management & Visibility : Own and optimize Cloud Security Posture Management (CSPM), Kubernetes Security Posture Management (KSPM), and Data Security Posture Management (DSPM) tools to ensure uniform compliance, prevent data leakage, and maintain hardened baselines. Infrastructure-as-Code (IaC) Security: Configure, tune, and embed automated IaC security scanning tools into CI/CD pipelines to identify architectural risks (e.g., overly permissive IAM, public S3 buckets/Cloud Storage) before they are deployed to production. Workload & Container Security: Manage the continuous vulnerability scanning lifecycle for container images, registries, and Virtual Machines (VMs), partnering with SRE and Platform teams to build aut

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role Join our Enterprise Platform team and build the infrastructure foundations that enable the world's largest organizations to run Replit within their security and compliance boundaries. As a Software Engineer on this team, you'll design and implement the deployment flexibility, networking capabilities, authorization systems, and data controls that enterprises require, from single-tenant architectures and private connectivity to custom policy enforcement and customer-managed encryption. You'll work at the intersection of cloud infrastructure and enterprise requirements, partnering with Platform Engineering, Security, and Sales to ship capabilities that unlock adoption at demanding organizations. What You'll Do Build enterprise deployment infrastructure: Design and implement single-tenant and dedicated deployment options, enabling customers to run Replit with the isolation guarantees their security posture requires. Implement private networking capabilities: Build VPC peering, private connectivity, and static IP configurations that allow enterprises to integrate Replit into their existing network architectures. Design authorization services: Build the authorization infrastructure that enforces custom enterprise policies; enabling fine-grained access controls, custom permission models, and policy enforcement that integrates with customers' existing identity and governance systems. Ship data protection features: Implement bring-your-own-key (BYOK) encryption, customer-managed keys, and data residency controls that give enterprises ownership over their most sensitive data. Develop infrastructure automation: Write Terraform modules and automation that enable reliable, repeatable enterprise deployments across reg

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role We are seeking a mid-level AppSec Vulnerability Management Engineer with a strong software development background. In this role, you will bridge the gap between security, compliance, and engineering teams. You will identify application vulnerabilities, maintain software supply chain security, and drive tracking to satisfy strict regulatory compliance frameworks. You will also serve as a technical responder during security incidents, deploying real-time countermeasures to protect our software ecosystem. What You'll Do Core Responsibilities Vulnerability Scanning & Triage: Perform periodic application security scanning activities. Review results and prioritize flaws based on CVSS scores, real-world exploitability, and system exposure. Compliance-Driven Tracking: Track, document, and manage vulnerabilities according to strict compliance SLAs (e.g., SOC 2, ISO 27001, PCI-DSS). Maintain audit-ready evidence of remediation timelines and exception approvals. Executive Reporting & Alerting: Escalate and report critical exposures directly to the CISO and senior leadership. Maintain dashboards and alerting mechanisms that visualize vulnerability status, risk trends, and compliance posture. Software Supply Chain Security: Ownership of the organization's Software Bill of Materials (SBOM). Continually update SBOM inventories to ensure compliance with modern regulatory requirements and dependency tracking. Help Replit mature through various SLSA levels for supply chain security. Remediation Collaboration: Partner with development teams to provide clear mitigation paths. Review, write, and patch code directly when necessary to resolve security flaws. Tooling Integration: Configure and tune automated security te

What you’ll do Own day-to-day operations for the scanner program and scanner builds in the spa: purchasing/procurement, vendor management, receiving, inventory, and logistics. Stand up lightweight production operations as we move from prototypes to repeatable builds: build planning, kitting, work instructions, and readiness checklists. Partner with Quality to ensure the operational system supports compliance: traceability, document control, training records, NCR/CAPA workflows, and audit readiness. Drive cross-functional execution for the physical spa build-out and scanner integration: schedules, dependencies, risk register, and weekly coordination with vendors and internal teams. Own the “integration glue” across facilities + device ops: commissioning plans, acceptance criteria, and operational handoff (runbooks, maintenance, spares, escalation paths). Build and track operational metrics: cost, budget, lead times, vendor performance, build throughput, and reliability of critical subsystems. Audit of import/export documentation, management of contract renewals, regulatory compliance. What we’re looking for Proven operations leadership in hardware/medical/robotics (or similarly complex electromechanical products), including procurement and vendor management. Strong program management instincts: can run schedules, unblock cross-functional dependencies, and keep priorities clear under ambiguity. Comfort operating in quality/regulatory environments and building processes that are rigorous without slowing a small team. High ownership and bias to action: can jump between spreadsheets, docks, and the lab/site to keep the program moving. Useful experience Experience running prototype-to-production transitions (NPI, EVT/DVT/PVT-style builds, CM/EMS collaboration). Facilities / construction operations experience (GC coordination, MEP commissioning, site readiness). Familiarity with inventory systems and procurement tooling (even “simple but disciplined”).

What you’ll do Design and implement secure cloud pipelines that ingest very large scan datasets (multi-terabyte), reliably and resumably. Build orchestration for GPU-accelerated reconstruction and analysis with strong retry semantics, idempotency, and cost controls. Define end-to-end data lifecycle for medical imaging: raw vs intermediate vs derived artifacts, retention policies, and reproducibility. Implement security + compliance primitives appropriate for HIPAA/PHI: encryption in transit/at rest, key management, least privilege, audit logs, and access reviews. Build operational tooling: monitoring, alerting, runbooks, and incident-driven improvements for a growing device fleet. What we’re looking for Strong experience with cloud batch/queueing/orchestration, storage systems, and data pipeline reliability. Experience shipping production systems that handle large data volumes and failure-prone networks. Practical security mindset (least privilege, secrets, audit logging) and comfort operating in compliance-constrained environments. Useful experience Building reliable data pipelines at scale (queues/orchestration, resumable uploads, GPU batch execution) with strong observability. Security + privacy by default: encryption, least-privilege access, auditing, and practical HIPAA/PHI guardrails. Owning the “boring” backend details that keep a lean team moving: schemas/migrations, cost controls, retries, and runbooks. Understanding compute tradeoffs across hardware options, and specifying appropriate cloud resources.

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. The Team The Avatar Team is at the heart of the Roblox experience. The Roblox Avatar defines the identity of every player and is a core pillar of the metaverse. Within this group, the Avatar Heads and Bodies team ensures that these foundational avatar components are high-quality, performant, and reliable at scale. We are looking for a Senior Software Engineer to join our User-Generated Content (UGC) Validation engineering initiatives. This role focuses on advancing our existing automation and validation systems to ensure that the rapidly growing ecosystem of 3D marketplace content meets our platform standards. The Role As a Senior Software Engineer for UGC Validation , you will focus on scaling and evolving our automated systems to validate 3D assets uploaded directly to the Roblox marketplace. Your primary responsibility will be to develop engineering solutions that quantitatively enforce our marketplace policies. Rather than building systems from scratch, you will expand upon our established validation frameworks to detect avatar schema compliance, flag geometry-based exploits, and programmatically measure asset quality. In this role, you will serve as a core practical resource for

We are seeking a Salesforce Engineer III to design, build, and support secure, scalable Salesforce solutions that support critical business operations. This is a senior individual contributor role requiring strong hands-on technical expertise, sound engineering judgment, and experience working in regulated environments. This position supports systems and data subject to FedRAMP and other U.S. government compliance requirements. Due to the nature of the work, U.S. citizenship is required. This role will be based remotely in the United States. What You’ll Do Design, build, and maintain Salesforce solutions across sales, service, customer, and operational workflows Implement functionality using Salesforce configuration, Flows, Apex, Lightning Web Components (LWC), SOQL, and platform automation Develop and support integrations between Salesforce and external enterprise systems Translate business requirements into secure, scalable, and maintainable technical solutions Participate in technical design reviews, sprint planning, code reviews, testing, deployments, and production support Troubleshoot and resolve issues related to automation, integrations, data integrity, and system performance Create and maintain technical documentation, support UAT and regression testing, and assist with user enablement Ensure all solutions comply with Salesforce best practices, internal security standards, and regulatory requirements Leverage AI-powered development tools to improve productivity and analysis, while adhering to security and compliance guidelines Responsibilities Technical Delivery: Own end-to-end delivery of Salesforce features using a mix of declarative and programmatic solutions Secure Engineering: Design and implement solutions that meet FedRAMP, security, and compliance requirements, including least-privilege access and auditability Integration Design: Build and maintain secure integrations between Salesforce and downstream systems Engineering Excellence: Maintain high st

Airbnb was born in 2007 when two hosts welcomed three guests to their San Francisco home, and has since grown to over 5 million hosts who have welcomed over 2 billion guest arrivals in almost every country across the globe. Every day, hosts offer unique stays and experiences that make it possible for guests to connect with communities in a more authentic way. The Community You Will Join: We’re looking for people who know and use Airbnb and believe in what we’re trying to accomplish. Airbnb is a marketplace that connects guests and hosts, and Payments is central to creating the trust that makes every transaction possible. The Platform team plays the role of conductor, leveraging AI prototyping to bring together engineers, designers, and data scientists to build great product experiences. Our Payments Platform Managers define and execute roadmaps for their product areas, translating organizational priorities into clear plans, requirements, and measurable outcomes. The Difference You Will Make: We are building foundational platform capabilities that require expertise and experience with digital wallets and identity services, and how they interact with payment services for our guests and hosts across the world. The Senior Platform Manager, Accounts will help shape the product vision, strategy, and roadmap for the Payment Accounts area, and lead execution of cross-functional initiatives with partner teams across Payments, Trust, Guest & Host, and Compliance. This is a highly strategic role with a mandate to define and build new platform capabilities and initiatives from the ground up. You will own how this platform scales to many different guest and host use cases, and support business outcomes on guest and host services. You will partner with a cross-functional team of engineers, designers, data scientists, marketplace businesses and operations to build and scale these capabilities. You will also work closely with external enterprise partners and identit

Airbnb was born in 2007 when two hosts welcomed three guests to their San Francisco home, and has since grown to over 5 million hosts who have welcomed over 2 billion guest arrivals in almost every country across the globe. Every day, hosts offer unique stays and experiences that make it possible for guests to connect with communities in a more authentic way. The Community You Will Join: The Data Stewardship team is a group of passionate data practitioners with a diverse background in analytics, data modeling, governance, compliance, and scaled data quality. We are responsible for ensuring Airbnb is meeting its compliance obligations across our data ecosystem and ensuring data consumers are able to easily identify the best data for their needs. We support the pipelines, programs, and policy-bodies that make this possible. You’ll be part of the overall Data Infrastructure organization that is responsible for online and offline data infrastructure across the company, and the components that transition data between these environments. The Difference You Will Make Set the North Star: you will define the multi-year vision for Data Governance and Data Quality that scales with our global business and evolving AI landscape. Organizational Influence: Act as a primary consultant for executive leadership on data governance, ensuring that compliance and stewardship are integrated into the data product lifecycle from day one. A Typical Day Architect Ecosystems: Lead the design of overarching data architectures that don't just solve today’s batch needs but anticipate future real-time and AI-driven requirements. Scale Best Practices: Rather than just "ensuring quality," you will define the best practices, tooling, and culture that enable data organizations to maintain high-quality data autonomously. Policy Stewardship: Lead cross-functional task forces (Infosec, Legal, Privacy) to navigate complex regulatory landscapes (like GDPR or AI Act) and translate them int

Airbnb was born in 2007 when two hosts welcomed three guests to their San Francisco home, and has since grown to over 5 million hosts who have welcomed over 2 billion guest arrivals in almost every country across the globe. Every day, hosts offer unique stays and experiences that make it possible for guests to connect with communities in a more authentic way. The Community You Will Join: The Cities team leads the work necessary to implement the regulatory products and processes needed globally to comply with regulations, and does so in a manner that also sustainably supports Airbnb’s growth. The Difference You Will Make: We are seeking an operator who is exceptionally effective, entrepreneurial, collaborative, and an excellent communicator. In this role, you will help us scale regulatory compliance strategies and programs for jurisdictions, presenting to cross-functional peers and leadership. You will be the accountable owner for compliance programs, aligning strategy and execution across disparate stakeholders. You will have an eye towards scale, testing, and iterating to further the capacity of the team. You are both scrappy and polished, enabling you to move quickly while bringing stakeholders along. Ultimately your work will support our Stays business and partnerships with jurisdictions around the world, keeping Airbnb a trusted community. A Typical Day: Develop and drive regulatory initiatives that unlock supply growth and proactively address risks Lead the development and execution of successfully scaled programs across discrete compliance verticals. Create an operational rhythm and manage cross-functional stakeholders, ensuring initiatives are on track, and maintaining project documentation Analyze strategic opportunities for risk reduction across jurisdictions, partner with Engineering, Data Science, Policy and Legal to align roadmaps, and drive successful execution with measurable impact Support strategic projects to drive efficiency and e

Airbnb was born in 2007 when two hosts welcomed three guests to their San Francisco home, and has since grown to over 5 million hosts who have welcomed over 2 billion guest arrivals in almost every country across the globe. Every day, hosts offer unique stays and experiences that make it possible for guests to connect with communities in a more authentic way. The Job: Airbnb Payments team allows any two people in the world to frictionlessly exchange money with easy to use payments services. It is a core strategy to fulfill Airbnb's belongs anywhere mission. We are building a world-class payments platform that moves billions of dollars, in 191 countries, with 75 currencies, through a complex ecosystem of payments partners. We build and maintain our own in-house global payments platform because no solution exists with the global reach needed. As the platform grows we'll be adding new payment partners, global licenses, compliance and regulation controls, and building new payment experiences for our guests and hosts. Airbnb's business grows rapidly year over year, and so does Airbnb Payments' processing volume. Payments Compliance is an essential part of the Payments organization. Without it, Airbnb can be subject to fines and even forbidden from conducting business in certain markets. As a Senior Staff Engineer and Technical Lead for the Payments Compliance organization, you would own the technical vision and architectural direction across the full Compliance engineering landscape — spanning Policy Enforcement, Identity, Screening, Auditing, and Compliance Experience. You will ensure our compliance systems are cohesive, scalable, and aligned with broader company priorities as we navigate an increasingly complex global regulatory environment. The Role: We are looking for a seasoned technical leader who can operate at the intersection of deep systems expertise and organizational influence. As a Senior Staff Engineer, you will serve as the connective tissue across Complia

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team The Financial Crimes team plays a critical role in ensuring a healthy financial ecosystem and maintaining trust in Stripe's platform. We ensure that prohibited parties cannot utilize our services and identify bad actors engaging in money laundering, terrorist financing, or other financial crimes. As Stripe's user base and global footprint grow dramatically, this team is essential for mitigating risk and upholding regulatory compliance, directly contributing to Stripe's mission of increasing the GDP of the internet safely and responsibly. What you’ll do As the Manager, Global Sanctions, you will own and evolve an established sanctions function across geographies. You will be responsible for leading regional teams, driving the next phase of sanctions transformation, and partnering with Engineering and Product to modernize how sanctions operations work at Stripe. Responsibilities Lead and develop sanctions managers and analysts across regions, ensuring investigative quality, consistency, and throughput at scale Own the strategic direction of Stripe's global sanctions program, screening coverage, alert logic, escalation frameworks, and quality assurance Drive the sanctions transformation roadmap, identify where manual workflows and vendor tooling are limiting scale, and lead the shift toward automation and smarter detection Partner with Engineering and Product as a genuine co-designer, translate sanctions requirements into tooling inputs, ch

About the Team OpenAI Finance ensures the organization is positioned for long-term success as we pursue our mission. The Order to Cash (OTC) team oversees the complete flow of commercial transactions from order intake and provisioning through billing, collections, and cash application — ensuring accuracy, compliance, and operational excellence in support of OpenAI’s mission to ensure artificial general intelligence benefits all of humanity. About the Role We are looking for a senior, hands-on operator to own Order Management and Billing execution across OpenAI’s cloud marketplace and partner ecosystem, including platforms such as AWS, GCP, Oracle Cloud, GovCloud, and future channels. This senior individual contributor role will translate partner requirements into scalable workflows and ensure launch readiness, accurate billing, and reliable daily execution. As a senior individual contributor within the Cloud Marketplaces team, you will own the end-to-end order-to-invoice lifecycle for your assigned portfolio. You will ensure that private offers, commercial terms, provisioning, pricing, usage, billing data, credits, settlements, and partner-specific reporting flow through our systems accurately, on time, and with audit-ready controls. You will implement and continuously improve the common cloud marketplace operating model, lead cross-functional execution for your assigned portfolio, and surface risks, requirements, and improvement opportunities. You will partner across Revenue Systems, Product, Engineering, GTM, Finance, Partner Operations, and external marketplace stakeholders. This role is critical to building the operational backbone for OpenAI’s expansion across cloud marketplaces and government-cloud channels. You will combine deep operational judgment with process and control execution, automation, clear communication, and hands-on problem solving to improve billing reliability, partner experience, customer outcomes, and financial integrity at scale. This role

About the Team OpenAI Finance ensures the organization is positioned for long-term success as we pursue our mission. The Order to Cash (OTC) team oversees the complete flow of commercial transactions from order intake and provisioning through billing, collections, and cash application — ensuring accuracy, compliance, and operational excellence in support of OpenAI’s mission to ensure artificial general intelligence benefits all of humanity. About the Role We are seeking a Senior Manager to build and scale Order to Cash across OpenAI’s API and ChatGPT businesses, cloud marketplaces, and strategic partnership channels. This role will own end-to-end Order Management and Billing operations across API and ChatGPT while leading OTC readiness and execution for AWS Marketplace, Google Cloud Marketplace, Oracle Cloud Marketplace, GovCloud, and future partner channels. The role will also own the end-to-end Order Management and Billing close, setting the close calendar, readiness standards, review and sign-off expectations, while leading the team responsible for execution. You will oversee the Order Management and Billing lifecycle across API, ChatGPT, marketplace, and partner transactions, spanning commercial readiness, order intake, provisioning, usage and transaction data, pricing validation, invoicing, credits, settlements, and product and partner reporting. Your work will ensure transactions are accurate, timely, complete, and supported by audit-ready controls. This is a leadership role that combines strategic ownership, cross-functional leadership, and hands-on operational execution. You will define the target operating model, lead first-of-kind launches, shape product and systems roadmaps, and oversee the resolution of complex contract modifications, non-standard pricing, usage disputes, reconciliation breaks, settlement variances, and customer- or partner-impacting escalations. You will collaborate with teams across Finance, GTM, Product, Engineering, Legal, Tax, Reven

About the Team API Enterprise Controls is part of the API Infrastructure organization and owns the platform capabilities that help developers, startups, and enterprises adopt the OpenAI API securely and confidently. We build the systems underneath our APIs and developer platform across authentication and identity, service accounts and key management, secure networking, compliance, auditability, observability, and operational controls. Our users are developers and teams running critical applications on OpenAI, and we partner closely with Product, go-to-market, security, and infrastructure teams to turn their most important needs into reliable, intuitive platform capabilities. About the Role We are looking for an exceptional backend software engineer to help define and ship the enterprise capabilities our API Platform needs to scale.; this is a product-engineering role grounded in deep backend systems. You will work across databases, streaming systems, request routing, authentication, and developer-facing APIs while bringing strong product judgment, developer empathy, and attention to the small details that make a platform easier to understand, trust, and operate. You will lead large cross-functional initiatives, work closely with Product and go-to-market teams, engage directly with sophisticated users, and carry ambiguous needs from discovery through design, launch, and iteration. In this role, you will: Own backend product capabilities end to end across authentication and identity, service accounts and key controls, secure networking, compliance, observability, and operational workflows. Partner with Product, go-to-market, security, infrastructure teams, and sophisticated customers to identify needs, shape the roadmap, and lead large cross-functional projects from design through launch. Design developer-facing APIs, system behavior, configuration, error handling, safe defaults, auditing, and notifications with exceptional care for the details that define a great dev