Controls Engineer in United States

ABOUT BASETEN Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F , led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to to ship AI products. PRODUCT AT BASETEN Product at Baseten is a nascent function. Our company today has a strong engineering culture, is heavily customer-obsessed, and moves fast. We're building the product function now, and you'd be one of the people who defines it. You'll work directly with our founders and with some of the best systems and infrastructure engineers in the world, and you'll set the standard for what product looks like here. You earn trust by being technical, finding the truth in front of customers, building great cross-functional relationships, and shipping great product experiences. THE ROLE The largest, most demanding Enterprises are starting to run on Baseten and they come with a range of security, compliance, and procurement requirements. Today that readiness is assembled deal-by-deal. You'll own the enterprise-readiness surface end to end and turn it into product: the deployment options customers can choose and buy, compliance posture they can trust, access and security controls their IT teams require, and the billing and spend controls their finance teams expect. What does a complete Baseten Enterprise Product offering look like? RESPONSIBILITIES Drive the Enterprise Readiness customer experience end to end: Partner with GTM and Enterprise Engineering to make "enterprise-ready" a platform-wide capability, not a deal-by-deal scramble. Outcome: readiness becomes a supported, priced product instead of bespoke work asse

ABOUT BASETEN Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F , led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to to ship AI products. THE ROLE We are seeking an experienced and detail-oriented GRC (Governance, Risk, and Compliance) Manager to build, support, and continuously enhance Baseten’s security governance, compliance, and privacy programs. As one of the early members of our security organization, you will play a key role in ensuring our platform meets and exceeds the highest standards for privacy, trust, and regulatory compliance. In this role, you’ll work cross-functionally with engineering, operations, legal, and leadership teams to develop policies, manage audits, and implement controls aligned with frameworks such as SOC 2, ISO 27001, ISO 27701, and FedRAMP. You’ll be instrumental in building scalable processes to manage risk, support customer assurance, and uphold Baseten’s commitment to security and compliance as we grow. RESPONSIBILITIES Governance & Policy Development: Design, implement, and maintain security governance frameworks, policies, and procedures that align with Baseten’s risk posture and industry best practices. Risk Management: Build and manage the company-wide risk assessment program, identifying, tracking, and mitigating key security and compliance risks. Compliance Operations: Lead efforts to achieve and maintain compliance with SOC 2, ISO 27001/27701, HIPAA, FedRAMP and other applicable standards and regulations. Audit & Certification Management: Coordinate external audits and certification processes, ensuring e

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. We are seeking an experienced Manager of Security Operations, reporting to the Director of Security, to lead our exceptionally talented Security Engineering team. Vanta’s Security Operations team provides essential security operational services, including configuring, monitoring, and maintaining our security tools and infrastructure. You’ll be responsible for leading the Security Operations team and assisting with incident response, setting our detection and response strategy, and assisting with investigations. You’ll also work cross-functionally to ensure we maintain compliance and improve our secure maturity. What you’ll do as a Manager, Security Operations at Vanta: Lead and grow a team of the best security operations analysts in the world, with a view of security that is AI-first, human-centric, and trust-based. Help define the strategy for Vanta’s security operations team, and empower the team to implement robust security protocols and stay ahead of emerging threats. Leverage AI to improve efficiency of team processes, and improve the maturity of the overall security program. Lead and drive incident response from detection, remediation, to prevention Identify, develop, and implement new processes in our security operations program Identify new technologies and emerging threats for our organization, and plan a technology-driven approach to addressing new risks How to be successful in this role: Strong leadership experience in security and an ability to lead a global team from a foundation of transparency and trust. Strong security operations experience, with emphasis on implementing security controls in a SaaS and cloud env

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. Vanta is hiring for a Head of Design (VP) to lead our design organization — setting direction for a ~40-person team, shaping the next generation of AI-native product experiences, and building the quality systems that let great design ship at scale. The Design team at Vanta shapes how security and compliance teams experience Vanta — from a startup founder building their security program for the first time to an enterprise security team managing hundreds of controls. The org spans all areas of Vanta — GRC, Trust, Platform, Self-serve, and AI — and includes product designers, visual designers, design engineering, content designers, and a user researcher, led by experienced design directors. As AI fundamentally changes what products can do and how they get built, this team is at an inflection point: the right leader will define what it means for a design org to be genuinely AI-forward — enabling designers to move faster, ship more, and contribute to product direction and delivery in new ways. This is the right role for a design leader who leads with AI fluency, brings strong taste and craft across interaction design and visual design, and has the operational instincts to build the systems that make quality a consistent property of the whole org. What you’ll do as Head of Design at Vanta: Lead a team of ~40 designers and design directors across GRC, Trust, Platform, Self-serve, and AI — setting org-wide direction and enabling each leader to do their best work Lead the team building the next generation of agentic, AI-native product experiences — defining what great design looks like as Vanta’s products are increasingly shaped by AI E

Who are we? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us! About the Role Cohere is seeking a Global Public Policy Manager to lead policy engagement on compute infrastructure, export controls, AI competitiveness, and sovereign AI strategies. Governments increasingly view AI as critical national infrastructure and are investing heavily in compute capacity, energy resources, and domestic AI ecosystems. This role will help position Cohere as a trusted partner in emerging discussions around AI infrastructure, national competitiveness, and sovereign AI deployment. Key Responsibilities Monitor and analyze developments related to AI infrastructure, data centers, energy policy, semiconductor policy, export controls, and national AI strategies. Develop policy positions on sovereign AI, compute access, digital sovereignty, and AI competitiveness. Support engagement with governments developing AI infrastructure investment programs and national AI initiatives. Collaborate with commercial, product, and corporate development teams on strategic opportunities involving public-private partnerships. Represent Cohere in policy discussions related to AI infrastructure, energy requirements, and technology c

Who are we? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us! NOTE: This Senior Staff level career opportunity is a senior level individual contributor role. As a Senior Manager of Financial Planning & Analysis at Cohere, your responsibilities include: Establish and maintain comprehensive departmental forecasting processes with regular vs. actuals analysis Design, implement, and track key performance indicators (KPIs) across the organization Build scalable financial models and planning frameworks to support rapid business growth Collaborate with department heads to understand business needs and translate them into financial requirements Conduct variance analysis and provide actionable insights to leadership on financial performance Develop and maintain financial reporting dashboards for executive leadership Drive process improvements and automation in FP&A workflows Partner with cross-functional teams on strategic initiatives and M&A activities Ensure compliance with financial reporting standards and internal controls Strategic Planning: Lead the annual and multi-year long-range planning (LRP) processes. You will bridge the gap between high-level vision and granular departmenta

Datadog is seeking an Indirect Tax Manager to oversee U.S. sales and use tax compliance, support related audits, and coordinate VAT/GST obligations across our global entity portfolio. You will partner with external advisors and cross-functional teams to address evolving indirect tax requirements, strengthen controls, and embed tax considerations into business systems and processes. This role offers the opportunity to manage complex, multi-jurisdictional workstreams while helping scale a global indirect tax function. You will also expand your expertise across tax technology, e-invoicing, compliance operations, and international tax matters as Datadog continues to grow. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Review U.S. multi-state sales and use tax filings prepared by the team, ensuring accuracy and alignment with established nexus and taxability positions Support U.S. sales and use tax audits, notices, and inquiries by coordinating documentation, technical analysis, external advisors, and communications with tax authorities Coordinate VAT/GST compliance and recovery activities across Datadog’s international entity portfolio, partnering with advisors across EMEA, APAC, and LATAM Monitor changes in nexus, taxability, VAT/GST, e-invoicing, and e-reporting requirements, and communicate relevant impacts to internal stakeholders Partner with Accounting, Revenue, Legal, Procurement, and Engineering to incorporate indirect tax requirements into billing systems, ERP configurations, controls, and new market or product initiatives Develop and maintain process documentation, audit-readiness materials, workstream tracking, and SOX-aligned controls that support a scalable indirect tax function Who You Are: Experienced in progressive indirect tax roles within

The Role MongoDB is seeking a Staff Product Manager to lead strategic initiatives across Identity and Security. In this role, you will serve as the senior product leader shaping the next generation of authentication, authorization, and access control across MongoDB Atlas, the core database engine, and emerging developer platforms. You will lead the strategy for non-human identity—spanning workload identity federation, zero-trust passwordless access, Model Context Protocol (MCP) integrations, and autonomous AI agentic identity. You will partner closely with engineering, UX, product marketing, and enterprise customers to build identity experiences that are enterprise-grade, seamless for developers, and secure by default. Responsibilities Set and champion a multi-year product strategy across interrelated identity areas, aligning dependencies and investments to MongoDB’s broader objectives Identify cross-cutting customer and market opportunities, build business cases for investment, and bring a clear point of view to senior stakeholders Lead workload identity federation and programmatic access initiatives across cloud and enterprise identity environments Define secure authorization approaches for AI agents and MCP clients, including delegation, identity lifecycle, policy, and administrative controls Drive developer-first access management, ensuring security controls enhance rather than obstruct developer velocity Partner with engineering, design, GTM, and cross-functional leadership to validate enterprise requirements, prioritize initiatives, and measure feature adoption Stay ahead of evolving cloud security paradigms, emerging standards (e.g., SPIFFE/SPIRE, O4AA), and AI access patterns to guide executive decision-making Represent MongoDB’s security and identity vision at industry events, customer advisory boards, and executive briefings Demonstrate creativity, an innovative spirit, and a bias towards action Requirements 8+ years (or equivalent experience) in Pro

Airbnb was born in 2007 when two hosts welcomed three guests to their San Francisco home, and has since grown to over 5 million hosts who have welcomed over 2 billion guest arrivals in almost every country across the globe. Every day, hosts offer unique stays and experiences that make it possible for guests to connect with communities in a more authentic way. The Difference You Will Make: Airbnb is entering a new era—reimagining how fraud, safety, and quality are measured, protected, and elevated across the digital landscape. Reporting to the Director of Advanced Analytics, Fraud & Safety, you will lead a dispersed team of ~8 advanced analysts tasked with turning safety measurement into governed, self-serve decision systems for Policy, Ops, Legal, Product, and Engineering. You will be a pivotal leader safeguarding Airbnb’s global community. You’ll steer a multidisciplinary team that designs, delivers, and scales state-of-the-art analytics for: Safety (physical & digital) Connected-account & circumvention detection Privacy protection & risk management This role isn’t just about reporting what happened; it’s about building the systems that help Airbnb see around corners. You will democratize data access, build always-on scenario simulators for fraud and safety, and turn incident impacts into seamless signals for continuous improvement. Your insights and systems will empower every stakeholder—from legal to operations, policy to product—to make bold, data-driven, and context-aware decisions in real time. A Typical Day: Own end-to-end analytical workflows for platform safety controls: data ingestion, feature engineering, modeling, experimentation, and visualization. A core mandate is to co-own and drive the enterprise-wide “Safety Single Source of Truth” (SSoT) strategy —a unified, structured data asset and taxonomy that underpins decision-making across Product, Operations, Policy, and Legal. Ensure metrics are future-proof, privacy-compliant, and g

About the Team OpenAI's Legal team plays a crucial role in furthering OpenAI's mission by tackling innovative, fundamental legal issues in AI. If you're passionate about doing significant and unique work as a technology lawyer, this team is for you. The team comprises professionals from diverse fields, including technology, AI, privacy, IP, corporate, employment, tax law, regulatory, and litigation. About the Role As a member of our AI Product Counsel team, you will advise the teams building and deploying OpenAI’s business products, including ChatGPT Business, ChatGPT Enterprise, and our API platform. You will partner closely with Product, Engineering, Safety, Security, Privacy, Strategy, Go-to-Market, and other Legal teams on issues spanning enterprise product development, model launches, customer data protections, administrative controls, strategic partnerships, and the responsible deployment of increasingly capable AI models. This is a unique opportunity to help shape how frontier AI products are built and delivered to businesses. This role is based in San Francisco, CA. We use a hybrid work model of three days in the office per week and offer relocation assistance to new employees. In this role, you will: Serve as a strategic legal partner to teams developing ChatGPT’s business products, enterprise features, and API offerings. Advise on product design and launches involving enterprise administration, data governance, identity and access, connectors and integrations, agentic capabilities, and voice and multimodal experiences in the B2B space. Counsel teams on deploying frontier AI capabilities responsibly while balancing customer commitments, safety, security, and privacy. Support strategic partnerships and distribution arrangements, including cloud platforms, resellers, and other third-party channels through which customers access OpenAI models. Partner with Commercial Legal, Privacy, Security, Safety, Product and Product Policy, and Go-to-Market teams on custom

About the Team OpenAI’s Cyber team works to make frontier AI a decisive advantage for defenders. The Cyber Blue Team is an operator-led group focused on turning real defensive problems into better models, useful products, safe Codex workflows, and integrations with the security tools defenders already use. Our ambition is simple: Raise attacker cost. Lower defender toil. Prove it by defending OpenAI; scale it through the ecosystem. We are not setting out to build another SIEM or autonomous SOC. We want to build the AI reasoning and workflow layer that helps security teams investigate threats, create and validate detections, improve their controls, and respond with greater speed and confidence. About the Role We are looking for a Product Manager to help build a new generation of AI-powered cyber defense products. You will work closely with security practitioners, researchers, engineers, designers, internal security teams, customers, and technology partners to turn emerging model capabilities into products that solve meaningful defensive problems. This is an early-stage product role. The work will span product discovery, prototyping, evaluation, development, launch, and iteration. You will help the team identify where AI can create the most value for defenders and translate those opportunities into clear, usable, and trustworthy product experiences. Initial areas of focus may include: Detection engineering and detection-content development Threat hunting and investigation Security validation and control testing AI-agent and MCP runtime defense Integrations with security platforms and enterprise workflows Safe, governed assistance for incident response The specific roadmap will continue to evolve based on model progress, practitioner needs, internal learnings, and customer feedback. In This Role, You Will Work with security practitioners to understand high-value defensive workflows, recurring pain points, and opportunities for AI to materially improve outcomes. Help sh

About Team Our Robotics team is focused on unlocking general-purpose robotics and advancing toward AGI-level intelligence in dynamic, real-world environments. Working across the full model and systems stack, we integrate cutting-edge hardware and software to explore a broad range of robotic form factors. We strive to seamlessly blend high-level AI capabilities with the physical constraints of real-world systems to improve people’s lives. About Role We are looking for an Operations Program Manager - Robotics Data Acquisition to own the day-to-day operating rhythm in our data collection facilities. You will work closely with operators, technicians, program managers, and engineers to keep rigs ready, campaigns moving, issues resolved, and performance improving. This is a hands-on operations role that requires you to be comfortable spending time on the floor, working through ambiguity, and using data to make the operation more reliable and efficient. This role is based in San Francisco, CA and requires in-person presence 5 days a week. In this role you will: Coordinate daily operations readiness across workstations, operators, materials. Track core operating metrics including utilization, cycle time, throughput, downtime, operator productivity, and data quality. Identify bottlenecks through workflow analysis, time studies, and capacity modeling, then drive practical fixes. Execute the rollout of new hardware, sensors, tools, and process changes with Engineering, Operations, Facilities, Supply Chain, and Safety. Identify equipment readiness issues and coordinate with technical support to keep workstations, and test equipment calibrated, configured, maintained, and ready for rollouts and evaluations. Lead root cause analysis for recurring operational issues and follow through on corrective actions. Provide operation input to create and maintain SOPs, work instructions, training materials, and process controls. Identify and flag resource constraints and manage issue escala

About the team Preparedness is a critical Safety Research team at OpenAI, which is focused on mitigating AI threats to global security that could scale to an extreme level of severity. Our work involves: Measurement. Monitoring and predicting the evolving capabilities of frontier AI systems. Mitigation. Keeping misuse safeguards, alignment tools, and security measures on track to adequately address extreme threats that might arise in the future. Coordination. Setting mitigation targets by maintaining OpenAI’s preparedness framework , and partnering with other staff to achieve these targets. This is urgent, fast-paced work that has far-reaching implications for the company and for society. About the role As AI agents become more capable at software engineering, and automate more of our internal work, they could become a dangerous cyber threat. People in this role will help OpenAI prepare for security threats from advanced AI agent insiders. In this role, you will: Identify paths by which capable future internal AI agents could compromise OpenAI. Design security controls - focusing on measures with long lead times that benefit from advanced preparation. Stress-test defenses with AI agent evaluations and penetration tests You might thrive in this role if you: Are deeply technical across security and modern infrastructure, and are comfortable digging into the details of operating systems, cloud, containers, CI/CD, or distributed systems. Have strong software engineering skills and enjoy building prototypes yourself. Are interested in engaging with stakeholders and can do so effectively. Bonus: have experience securing cloud infrastructure, and are deeply familiar with core components of the AI stack. Compensation Range: $293K - $405K USD About OpenAI OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy

About the Team The B2B Marketing team contributes to OpenAI's broader mission of ensuring responsible and widespread adoption of artificial intelligence. We are responsible for developing and executing strategies that drive awareness, engagement, and usage for OpenAI's products and platform. We take a data-driven approach to understand our customers' needs and challenges, ensuring that their voices are reflected in product development and messaging. We then partner closely with Product, Engineering, Growth, Sales, Research, Comms, and Design teams to create a cohesive customer experience across all our channels. About the Role We're looking for an enterprise Product Marketing Manager to own the administrator and governance experience across ChatGPT Work and Codex. IT administrators, security teams, and deployment owners are often the difference between an AI product being available and an organization actually putting it to work. This role will define how OpenAI earns the trust of the people responsible for approving, deploying, managing, and expanding AI inside their organizations. You will translate a fast-moving set of enterprise capabilities into a clear, practical story covering setup, access, controls, governance, security, usage, and value. You will own the administrator audience as a dedicated product marketing discipline, partnering closely with Product, Security, Sales, Customer Success, Growth, Customer Education, and other Marketing teams. Your job is not simply to announce new features. It is to help administrators understand what has changed, what they can control, how to deploy responsibly, and why expanding access is the right decision for their organization. In this role, you will: Own the IT administrator and governance audience: Build a deep understanding of the needs, decisions, objections, and workflows of workspace administrators, IT leaders, security teams, and enterprise deployment owners. Define the enterprise administration and governance s

About the Team Governance, Risk, and Compliance (GRC) is foundational to Security delivering mission outcomes at OpenAI. We’re excited about building creative solutions to ambiguous security requirements and delivering new technologies to mission critical customers. The GRC team provides security and engineering expertise to ensure our customers’ most critical and stringent requirements are met. We are technical in what we build but are operational in how we do our work, and are committed to obtaining, expanding, and maintaining Authorizations to Operate (ATOs) for critical systems while fostering a collaborative and execution-driven culture. About the Role Our technologies support some of the most important and impactful work in the world, including our strategic and high-impact customers in the public sector. As a GRC Program Manager, you’ll play a pivotal role in achieving US government (USG) ATOs and compliance frameworks, including but not limited to FedRAMP and Department of War (DoW),for OpenAI products and support agency-specific ATOs for systems deployed in highly regulated and secure environments. You’ll work closely with engineers, internal stakeholders, and external assessors to design, document, and implement security controls that meet stringent compliance requirements. Your creativity and execution-focused approach will be critical in navigating complex challenges while maintaining the trust of our stakeholders. We’re looking for people who bring: Proven experience in obtaining and maintaining a FedRAMP ATO and agency specific ATOs in highly restricted environments, within government or regulated sectors. A deep understanding of USG security frameworks and policies (e.g., NIST, RMF, FedRAMP). Ability to communicate technical concepts to diverse audiences, including engineers and non-technical stakeholders. Exceptional technical program management skills, with the ability to multitask and deliver large complex programs under pressure. This role is base