Information Security Governance in United States

Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The Role: Positioned in the first line of defense (1LOD) and reporting to the Head of Business Controls, this experienced executive will act as the Business Controls Lead for SoFi’s Technology and Cybersecurity organizations. This includes comprehensive coverage of Engineering, Information Security, Infrastructure, and Data across the full SoFi Legal structure: SoFi Inc., SoFi Bank, Galileo, Technisys, and SoFi Hong Kong. The Business Controls Lead will act as the direct advisor to the Chief Technology Officer (CTO), Chief Information Security Officer (CISO), and their senior leadership teams. You will lead a team of experienced IT risk & controls team charged with promoting risk awareness and ensure the overall effectiveness of risk and compliance management program implementation and execution across the 1LOD. This role provides support, advisory services, and enables strategic alignment directly to department heads to accelerate and ensure quality execution. You will be responsible for supporting and driving consistent 1LOD adherence to critical programs, such as building and maintaining risk and control self-assessments (RCSAs); identification and evaluation of control effectiveness through control testing; 1LOD risk reporting; and supporting audits and regulatory exams. You will monitor the first l

Role Summary The CISO, Infrastructure and Cloud Services organization enables Pfizer’s mission by delivering secure, resilient, and scalable technology platforms that support operations and future growth. Through a unified operating model, it strengthens accountability, accelerates decision‑making, and improves availability, security, and cost efficiency. The CISO Marketing Manager will support the Senior Manager, Marketing and Enterprise Awareness to develop meaningful marketing materials that tell the CISO story to external clients by executing strategic, creative, and visually compelling communications including presentations, graphics, pictures, charts and tables that support cybersecurity awareness, organizational priorities, and business outcomes. The manager will lead the creation of a marketing strategy for the Chief Information Security Office Team. Role Responsibilities Lead the development and execution of integrated marketing and communications strategies in support of CISO priorities, strategic initiatives, and portfolio management objectives. Produce high-quality written, visual, and digital content that strengthens awareness, engagement, and understanding of cybersecurity programs across the organization. Create and manage internal communications, including newsletters, leadership messages, campaign materials, SharePoint content, presentations, infographics, and other digital assets. Simplify complex cybersecurity and technical information into clear, engaging, and actionable content for diverse audiences, including executives, business partners, and internal colleagues. Partner closely with cross-functional teams across Cyber Defense, Infrastructure, Cloud, and related Digital and Technology groups to ensure consistent, coordinated, and impactful messaging. Develop executive-ready presentations and visual storytelling materials

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. Position Summary The Manager - Process Engineering leads high-impact process improvement and Business Process Management (BPM) initiatives across Information Security and Technology Solutions (ISTS). This role is accountable for enabling operational excellence by designing, standardizing, improving, and governing ISTS processes using agentic workflows, Lean Six Sigma, and Business Process Management disciplines. The Manager- Process Engineering serves as both a delivery leader and capability builder, ensuring that ISTS has well-documented, measurable, and continuously improving processes with clear ownership, performance indicators, and controls. This role partners closely with technology tower leaders, Experience Owners, Process Owners, and risk, security, and compliance stakeholders to reduce operational friction, increase capacity, mitigate risk, and strengthen enterprise controls. Key Responsibilities: Apply DMAIC and Lean Six Sigma methodologies to solve complex, cross‑funct

ABOUT BASETEN Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F , led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to to ship AI products. THE ROLE As the Head of IT at Baseten, you will build, scale, and secure our internal technology function to support our rapid growth. Reporting to our Chief Information Security Officer, you will lead and mentor a team of 5+ IT engineers, leading the charge to transition Baseten from startup-era IT to a highly automated, enterprise-ready IT organization. You will take full ownership of corporate IT infrastructure, Helpdesk operations, corporate identity management, device lifecycles, and vendor procurement. As we scale to support the world’s most dynamic AI companies, you will ensure our internal systems scale seamlessly with our headcount, providing a secure, frictionless, and world-class technology experience for all Baseten employees. RESPONSIBILITIES Team Leadership: Manage, mentor, and grow a team of IT engineers, fostering a high-performance culture focused on technical excellence and end-user satisfaction. Helpdesk Operational Excellence: Build a fast-response support function by establishing clear response SLAs, tracking employee satisfaction metrics, and formalizing on-call and incident response processes. Zero-Touch Automation: Architect and implement automated employee onboarding, offboarding, and role-based access changes through deep integrations across HRIS, MDM, and IAM systems. SaaS Management & Procurement: Establish comprehensive SaaS management processes to eliminate shadow IT, automate access w

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Manager, Procurement, you’ll serve as an individual contributor supporting GitLab’s Chief Technology Officer, Chief Information Security Officer, and Chief Information Officer organizations. You’ll lead strategic sourcing, vendor management, and contract negotiations for critical technology suppliers, with a strong focus on software, cloud infrastructure, and hyperscaler partnerships. You’ll work closely with senior leaders and cross-functional partners to shape sourcing strategies, improve procurement processes, identify savings opportunities, and explore how artificial intelligence can support proc

About the team The Intelligence and Investigations team seeks to rapidly identify and mitigate abuse and strategic risks to ensure a safe online ecosystem in close collaboration with our internal and external partners. Our efforts contribute to OpenAI's overarching goal of developing AI that benefits humanity. This role focuses specifically on AI Safety: understanding and mitigating risks created or amplified by increasingly capable AI systems. It is not a cybersecurity, information security, or corporate security role. The Strategic Intelligence & Analysis (SIA) team provides safety intelligence for OpenAI’s products by monitoring, analyzing, and forecasting real-world abuse, geopolitical risks, and strategic threats. Our work informs AI safety mitigations, product decisions, and partnerships, ensuring OpenAI’s tools are deployed responsibly across critical sectors. About the role We are looking for a Frontier AI Risks Lead to help us understand potential harms and misuse of AI in a time of rapid, sustained change. We seek to understand how developments in AI could intersect with misuse and abuse, accelerating existing harm areas and creating novel risks. We seek to scan available signals and use strategic foresight methodologies to enable proactive detection and mitigation of frontier AI risks. This is an AI safety role focused on frontier and systemic risks, including model misalignment, recursive self-improvement (RSI), multi-agent interaction, loss of control, runaway agents, and related emerging failure modes. In this role, you will help provide a strategic-level perspective on a range of frontier AI safety areas, producing actionable understanding of issues relevant to OpenAI’s platforms, systems, and broader mission. Utilizing mixed quantitative and qualitative methodologies, you will spot early warning signs, pull threads on potentially concerning behavior, and turn weak signals into clear, prioritized risk calls. You will focus on upstream ecosystem sc

A Career with Point72’s Technology Team As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications. As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity—all while delivering real business impact for our multi-billion-dollar global business. What you’ll do Develop and maintain the information security policy and standards library, aligning it with business priorities, regulatory expectations, and control objectives Lead independent assessments of the information security program, including regulatory examinations and third-party evaluations Identify technology risks across a complex business environment and drive mitigation aligned with our firm’s standards and control expectations Investigate data privacy inquiries and privacy-related events, assess business impact, and coordinate timely response activities Partner with technology, legal, compliance, and business stakeholders to translate risk findings into practical remediation plans Advise control owners on policy interpretation, risk treatment, and evidence expectations for assessments and examinations Prepare clear reports for management on team activity, emerging risks, remediation progress, and key decisions Maintain accurate risk, policy, priv

Upwork Inc.'s (Nasdaq: UPWK) family of companies connects businesses with global, AI-enabled talent across every contingent work type including freelance, fractional, and payrolled. This portfolio includes the Upwork Marketplace, which connects businesses with on-demand access to highly skilled talent across the globe, and Lifted, which provides a purpose-built solution for enterprise organizations to source, contract, manage, and pay talent across the full spectrum of contingent work. From Fortune 100 enterprises to entrepreneurs, businesses rely on Upwork Inc. to find and hire expert talent, leverage AI-powered work solutions, and drive business transformation. With access to professionals spanning more than 10,000 skills across AI & machine learning, software development, sales & marketing, customer support, finance & accounting, and more, the Upwork family of companies enables businesses of all sizes to scale, innovate, and transform their workforces for the age of AI and beyond. Since its founding, Upwork Inc. has facilitated more than $30 billion in total transactions and services as it fulfills its purpose to create opportunity in every era of work. Learn more about the Upwork Marketplace at Upwork.com and follow us on LinkedIn , Facebook , Instagram , TikTok , and X ; and learn more about Lifted at Go-Lifted and follow on LinkedIn . About the Role Upwork's COO and GM of Marketplace operates across one of the broadest organizational portfolios in the company - spanning Legal, Information Security, Marketing, Payments, Trust & Safety, Communications, Customer Support, Design, and Product. The Chief of Staff to the COO exists to make that model work: not as a coordinator, but as a true operating partner who extends the COO's capacity, sharpens decision-making, and holds together a complex, fast-moving organization. This role requires someone who has earned the confidence to walk into any room, speak with authority, and immediately earn cre

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As the Manager, IT SOX PMO, you'll own information technology (IT)-specific Sarbanes-Oxley (SOX) compliance activities and serve as a subject matter expert for IT general controls (ITGCs) and IT application controls (ITACs). You will be an individual contributor, reporting to the Senior Director, SOX PMO Leader within the Chief Accounting Officer's organization, you'll directly support the Senior Manager, IT SOX PMO in strengthening GitLab's IT SOX program, preparing new and changing processes and systems for SOX requirements, and advancing automation in a high-growth technology environment. You'll combin

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. As the Logistics Security Program Manager for EMEA, this role is an essential part of Micron’s Global Security team. The person leads the management and continuous refinement of the company’s important logistics security efforts across the EMEA area. This position serves as the regional authority, advancing risk-focused security methods that protect high-value shipments, improve supply chain durability, and lower transportation security risks in intricate multimodal logistics networks. As a senior individual contributor, the Logistics Security Program Manager takes charge of regional program initiatives on their own. They apply solid judgment to shifting threat conditions and collaborate with colleagues across functions and external partners to produce security results. The position involves balancing security, operational efficiency, and business continuity while transforming regional risks into scalable, practical controls that advance cargo visibility, shipment protection, and incident readiness. Responsibilities: Act as the EMEA logistics security authority, guiding the creation and implementation of risk-focused security programs for valuable and sensitive shipments involving carriers, freight forwarders, and logistics providers. Develop, apply, and manage shipment security controls, including tracking, telematics, geofencing, chain of custody, tamper detection, monitoring, critical issue handling, recovery processes, and carrier compliance requirements. Conduct carrier, route, l

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. The Logistics Security Intelligence Analyst supports Micron’s global logistics security program by producing timely, actionable intelligence on shipment risk, cargo theft trends, route exposure, carrier performance, alert activity, and logistics security incidents. This individual contributor role helps strengthen shipment visibility, support incident response, and enable data-driven decisions for valuable and sensitive shipments across Micron’s transportation network. Responsibilities: Collect, analyze, and report on logistics security data related to high-value and high-risk shipments, including shipment value, route risk, carrier performance, tracking status, alert activity, and incident history. Monitor internal, vendor, industry, open-source, and law-enforcement sources for cargo theft trends, route disruptions, regional security developments, and emerging threats. Prepare intelligence summaries, dashboards, route profiles, regional threat updates, incident trend reports, and briefing materials for logistics security leaders and multi-functional collaborators. Support lane, route, carrier, provider, and regional risk assessments by identifying risk indicators, documenting findings, and helping translate analysis into practical control recommendations. Analyze shipment monitoring alerts such as route deviation, unauthorized stop, signal loss, seal breach, geofence violation, cargo separation, and other logistics security events. Support blocking issue and incident response a

About the Team The Industrial Security team enables OpenAI’s classified and national security work by building secure, compliant programs that support government customers and protect sensitive information. Within Industrial Security, the Personnel Security function ensures employees have the clearances, accesses, briefings, and government approvals required to support classified programs. We work closely with employees, program teams, government customers, and partners across Security, People, Recruiting, Legal, IT, and Facilities to make complex security processes accurate, timely, and understandable. About the Role As a Personnel Security Specialist, you will own the day-to-day personnel security operations that allow OpenAI employees to support classified government work. You will manage clearance and access requests, maintain government-system records, coordinate visits and briefings, support onboarding and offboarding, and guide employees through sensitive security requirements with discretion and care. We’re looking for a hands-on security professional who can independently manage a high-volume operational queue, keep cases and records organized, recognize when issues require escalation, and improve the processes behind the work. This role offers the opportunity to help build a modern personnel security function that supports important national security programs while delivering a thoughtful, responsive employee experience. This role is based in San Francisco, CA, or Washington, DC. We use a hybrid work model of three days in the office per week and offer relocation assistance to new employees. Additional onsite presence and occasional travel may be required based on classified program and government customer needs. In this role, you will: Own the daily personnel security workload from intake through completion, including clearance verification, access nominations, visit requests, onboarding, offboarding, briefings, and reporting actions. Process and track pe

About the Team The Industrial Security team enables OpenAI’s classified and national security work by building secure, compliant programs that support government customers and protect sensitive information. We partner across Security, Legal, People, Facilities, Engineering, IT, and program leadership to translate complex government requirements into practical operating models that allow important work to move forward responsibly. Our work spans personnel security, classified facilities, special programs, government customer engagement, and the safeguards required to operate in highly regulated environments. About the Role As a Senior Special Programs Security Manager, you will lead security operations for OpenAI’s Sensitive Compartmented Information (SCI) and Special Access Programs (SAP), serving in customer-designated roles such as Contractor Special Security Officer (CSSO) or Contractor Program Security Officer (CPSO). You will help shape how OpenAI operates across the Intelligence Community and other national security environments, building the relationships, processes, and security foundations required to support classified work at scale. We’re looking for someone who brings deep special programs expertise, sound operational judgment, and the credibility to work directly with government customers and senior internal stakeholders. This is a hands-on leadership role for someone comfortable navigating ambiguity, helping build the function, mentoring future team members, and finding compliant paths forward when mission needs and security requirements intersect. This role is based in San Francisco, CA, or Washington, DC. We use a hybrid work model of three days in the office per week and offer relocation assistance to new employees. Additional onsite presence and occasional travel may be required based on classified program, facility, and government customer needs. This position requires active Top Secret eligibility, current SCI access, and a current counterintelli

Leidos has an exciting opportunity for Cyber Security Engineer—Technical Lead in our Intel Security Sector's Analysis Solutions Business Area . Our talented team is at the forefront in Security Engineering, Computer Network Operations (CNO), Mission Software, Analytical Methods and Modeling, Signals Intelligence (SIGINT), and Cryptographic Key Management. At Leidos , we offer competitive benefits , including Paid Time Off, 11 paid Holidays, 401K with a 6% company match and immediate vesting, Flexible Schedules, Discounted Stock Purchase Plans, Technical Upskilling, Education and Training Support, Parental Paid Leave, and much more. Join us and make a difference in National Security! Job Summary This role is responsible for protecting the customer’s information systems and networks from potential cyber-attacks. The Cyber Security Engineer– Technical Lead will serve in a hands-on “player-coach" capacity, dedicating approximately 75% of time to direct technical engineering, troubleshooting, and implementation work, while providing technical leadership and coordination across the security team. The candidate must display an excellent understanding of technology and utilization of Firewalls (Security Groups), VPNs, Data Loss Prevention (DPS), IDS/IPS, Web-Proxy, Security tools, and Security Audits. Candidate will work directly with Team leads, developers, operations personnel, and other Technical Leads throughout a DevSecOps life cycle both on policy and technical implementation of technologies. This is not a supervisory management role. Success in this position is measured by individual technical contribution and resolution of complex security issues, in addition to technical leadership impact. Primary Responsibilities: Plan, implement, manage, monitor, and upgrade security controls and tools used to protect enterprise systems and networks, while identifying opportunitie

Healthcare is complex. We’re here to change that. RVO Health is a health technology company on a mission to make health easier to navigate, more accessible, and more affordable for everyone. Here, you'll help over 40 million people every month, with a team that genuinely cares about the work and each other. AT A GLANCE RVO Health is a first-of-its-kind comprehensive consumer healthcare platform that meets people where they are in their personal journeys and connects them with both the information and the care they need. RVO Health is a partnership between Red Ventures and UnitedHealth Group. Together we're focused on delivering on our vision of a stronger and healthier world. RVO Health has the largest consumer health and wellness audience online. Every month, we help nearly 100 million people take steps on their daily journey to lifelong well-being. As part of our RVO Health Security team, you will play a major part in strategic initiatives that improve our security posture and protect our sensitive data. You will work in a collaborative Agile environment, working closely with the business, IT, and engineering teams. You will apply your skills in a highly dynamic, innovative, cloud-native environment with a strong security-minded culture. Where You'll Be Location: Denver, CO | Hybrid We believe great collaboration happens when we're together, solving problems, learning from each other, and connecting as a team. That's why we’re in our offices Tuesday through Thursday each week. You are welcome to work remotely Mondays and Fridays if you wish. Address: 1801 California St. Denver, CO 80202 What You’ll Do Design, implement, and maintain security controls and architectures to protect the company's cloud infrastructure, applications, and data from cyber threats. Improve our cloud security posture and vulnerability management program — pull-request scanning, triage and tracking of findings to closure across engineering teams, and coverage and license optimization. Build