Technology Risk And Controls Analyst in United States

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. Position Summary The Manager - Process Engineering leads high-impact process improvement and Business Process Management (BPM) initiatives across Information Security and Technology Solutions (ISTS). This role is accountable for enabling operational excellence by designing, standardizing, improving, and governing ISTS processes using agentic workflows, Lean Six Sigma, and Business Process Management disciplines. The Manager- Process Engineering serves as both a delivery leader and capability builder, ensuring that ISTS has well-documented, measurable, and continuously improving processes with clear ownership, performance indicators, and controls. This role partners closely with technology tower leaders, Experience Owners, Process Owners, and risk, security, and compliance stakeholders to reduce operational friction, increase capacity, mitigate risk, and strengthen enterprise controls. Key Responsibilities: Apply DMAIC and Lean Six Sigma methodologies to solve complex, cross‑funct

About Ramp Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $200B in annualized spend flows in and out of 70,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. About the Role Ramp is seeking its first dedicated Financial Crimes Compliance Controls Senior Strategist to build and own the framework that demonstrates FCC controls are working as intended, remain effective as risk evolves, and can be clearly supported in bank-partner, audit, and regulatory examinations. This is a senior individual-contributor role at the intersection of financial-crimes compliance, controls effectiveness, technology, data, and AI-enabled operations. You will own FCC’s approach to testing, documenting, and improving manual and automated controls, including procedures, detection rules, AI and LLM-enabled workflows, and automation deployments. You will serve as FCC’s dedicated compliance partner for program-level Product, Engineering, Design, and Data (“PEDD”) initiatives, ensuring FCC requirements, controls, and risk considerations are incorporated into strategic product and technology planning. This role complements the broader team’s cross-functional partnerships by focusing specifically on major PEDD-led initiatives. This is a

Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The role: The Crypto AML & Sanctions Advisor will provide specialized financial crime compliance advisory support for SoFi’s digital asset and cryptocurrency products and services, reporting to the Crypto Compliance Officer. Your role will be to support the business in identifying and mitigating risks related to money laundering, terrorist financing, sanctions, and other illicit finance activity associated with digital assets, while helping ensure SoFi meets applicable regulatory requirements, expectations, and guidance. The role will support the development and maintenance of sound, risk-based AML and sanctions programs and controls across SoFi’s crypto ecosystem. What you’ll do: Act as a key Crypto AML & Sanctions advisor, providing subject matter expertise to the Crypto Compliance Officer, Compliance, Product, Engineering, Investigations, and business leaders on financial crime risks and controls. Provide AML and sanctions advisory across the crypto product lifecycle, including trading, custody, deposits and withdrawals, wallets, stablecoins, staking, and emerging digital asset products. Identify and assess blockchain-specific financial crime risks and advise on appropriate controls, including KYT, transaction and wallet screening, sanctions exposure, Travel Rule requirements, and escalatio

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . We're hiring a Manager, GRC to join our Technology Risk & Controls team within Security and lead second line of defense advisory coverage across critical technology and security domains. This team evaluates risk posture, improves control design, and helps engineering, infrastructure, and security leaders make better, risk-informed decisions. You'll both manage a team and directly own advisory coverage for domains that may include disaster recovery and resiliency, SDLC, artificial intelligence, identity and access management, and supply chain - building trusted partnerships that ensure Coinbase addresses its most critical risks in its most critical functions. What you'll do: Lead second line advisory coverage for key technology and security domains, assessing risk exposure, control effectiveness, policy alignment, and emerging issues across the business. Partner with engineering and technology teams to evaluate domain posture and identify where additional controls, remediation, or governance improvements are needed. Review and challenge the design of new and existing risks and their corresponding controls to ensure our mitigations are scalable, effective, and aligned to business, risk, and regulatory expectations. Drive coordination across risk, controls, policy, audit, and assurance teams to translate incidents, audit findings, and regulatory expectations i

CLEAR is building THE secure identity company of the future. Our mission is to make experiences safer and easier—physically and digitally. With more than 43 million Members and a growing network of partners across the world, CLEAR's secure identity platform is transforming the way people live, work, and travel. Whether it’s at the airport, stadium, or throughout your everyday life, CLEAR unlocks the magic of frictionless experiences. We are seeking a Senior Product Security Engineer to serve as a technical leader and strategic contributor within our Product Security team. This role goes beyond execution — you will drive the evolution of CLEAR’s application security posture by influencing architecture, shaping security engineering processes, and mentoring team members in security and engineering. You’ll lead security initiatives across the organization and help embed security into every stage of our software development lifecycle. What you'll do: Drive security strategy and implementation across all CLEAR products and engineering teams, ensuring consistent protection of customer and business-critical assets. Partner with engineering leadership to align application security initiatives with company-wide technology and product roadmaps, balancing innovation with risk mitigation. Provide technical leadership across CLEAR’s application security initiatives, guiding architecture, design, and development to meet high security standards. Serve as a trusted advisor to cross-functional teams — including Engineering, DevOps, Product, GRC, and IT — enabling secure-by-design practices across the organization. Design and drive implementation of scalable automated security controls and testing frameworks integrated into CLEAR’s CI/CD pipelines. Lead complex threat modeling, architecture reviews, and risk assessments across high-value systems and platforms, driving meaningful security outcomes. Engage with CLEAR's customers to provide insight and support their fraud and ident

About the Role Join the Controls Technology division as a Technology Product Owner. In this critical role, you will act as the bridge between complex business needs and our engineering teams. You will be empowered to translate intricate requirements for risk and control systems into a flawlessly managed backlog of epics and user stories. Your primary mission is to drive the delivery of high-quality, compliant software by ensuring our development teams have the clarity and context needed to execute effectively, sprint after sprint. This is a role for a product owner — someone who thrives on execution, champions quality, and is passionate about building world-class technology solutions in a dynamic, global financial environment. What You'll Do 1. Backlog Ownership & Agile Execution Own and Master the Backlog: Meticulously create, refine, and prioritize the product backlog, ensuring it is transparent, well-understood, and always ready for at least two sprints ahead. Translate Vision into Action: Deconstruct complex business requirements into well-defined Epics, User Stories, and precise Acceptance Criteria, ensuring a high percentage of stories are accepted without rework. Drive Sprint Success: Serve as the dedicated point of contact for the engineering team, providing unwavering clarity during sprint planning, daily stand-ups, and throughout the development cycle to remove ambiguity. 2. Solution Definition & Quality Assurance Define the "What": Partner with business stakeholders to elicit, analyze, and document requirements, defining the precise solution to be built. Champion Quality: Drive a quality-first mindset with a relentless focus on clear, testable acceptance criteria to minimize ambiguity and reduce critical defects in UAT. Demonstrate Value: Conduct compelling de

About the Team OpenAI’s Legal team helps advance our mission by tackling novel legal issues in AI. Our team brings together professionals across technology, privacy, intellectual property, corporate, employment, tax, regulatory, and litigation. Our regulatory compliance work turns legal requirements into practical programs that support responsible AI development and deployment. About the Role As a Legal Program Manager focused on regulatory compliance, you will build and manage cross-functional programs that translate counsel’s guidance into practical, sustainable operations. Your initial focus may include content moderation and/or frontier AI governance, with the mix shaped by team priorities and your strengths. You will partner with internal and external counsel, other legal program managers, and technical and business teams to coordinate implementation, evidence collection, reporting, and ongoing compliance. You’ll build repeatable systems that scale across regulations, products, and jurisdictions, helping teams navigate emerging requirements with clarity and sound judgment. This full-time role is based in San Francisco, CA, or New York, NY. In this role, you will: Lead regulatory compliance programs end to end: define scope, owners, milestones, dependencies, risks, and escalation paths, and drive execution with counsel and cross-functional partners. Translate counsel’s regulatory guidance into repeatable workflows, controls, and documentation. Depending on your portfolio, this may include content moderation disclosures, transparency reporting, reporting and appeals workflows, or frontier AI model launch readiness, evaluation and risk-management evidence, and incident reporting. Build strong partnerships across Product, Engineering, User Operations, Governance, Risk and Compliance (GRC), Global Affairs, Communications, and Go-to-Market to align program priorities and deliverables. Support regulatory inquiries, audits and investigations with counsel, organizing ev

About the Team OpenAI’s Legal team plays a crucial role in advancing our mission by tackling innovative and fundamental legal issues in AI. The team includes professionals from diverse legal fields—technology, AI, infrastructure, privacy, IP, corporate, employment, tax, regulatory, and litigation—who collaborate closely with colleagues across the company. If you are passionate about being a technology lawyer working on cutting-edge challenges, you’ll thrive here. About the Role We’re seeking a senior lawyer to participate in commercial legal strategy and execution across OpenAI’s fast-growing infrastructure portfolio. This is a cross-functional role that will partner closely with procurement, supply chain, partnerships, finance, and product teams to structure, negotiate, and manage the transactions that will support OpenAI’s long-term infrastructure ambitions. We’re looking for an experienced infrastructure transactions lawyer who thrives in ambiguity and wants to help define the commercial playbook for infrastructure efforts in the AI era. This role reports to the Associate General Counsel for infrastructure. This role is based in San Francisco, CA. We use a hybrid work model of 3-days in the office per week and offer relocation assistance to new employees. In this role, you will: Own commercial legal strategy and risk management for OpenAI infrastructure transactions. Draft, negotiate, and advise on complex agreements with infrastructure suppliers, manufacturers, distributors, and technology partners. Support strategic partnerships involving AI infrastructure and hardware supply chains. Develop frameworks for procurement, licensing, and collaboration across the infrastructure ecosystem. Partner with finance and operations teams to align contract terms with business and compliance requirements. Collaborate with policy and regulatory colleagues on issues impacting global supply chains, export controls, and manufacturing. Build scalable, efficient contracting process

About the role OpenAI is building a world-class global mobility and immigration program—agile, compliant, technology-enabled, and designed to help exceptional people work where they can have the greatest impact. In this role, you will lead high-impact strategic initiatives, including U.S. permanent residence strategy, M&A, organizational change, and global expansion. This is a senior individual-contributor role for a builder who can translate legal and operational complexity into clear, practical solutions. Reporting to the Head of Global Mobility & Immigration, you will partner with the broader team and lead through expertise and influence across Legal, Corporate Development, Recruiting, People, Finance, business teams, and external counsel to turn emerging business needs into scalable programs, policies, and durable controls. What you'll do Set the roadmap, principles, governance, and operating model for priority global mobility and immigration initiatives. Lead the U.S. permanent residence strategy, including PERM planning, controls, communications, compliance and continuous improvement. Own immigration and mobility workstreams for M&A, divestitures, restructurings, entity changes, and new-market entry—from diligence through integration. Lead global expansion strategy, ensuring work authorization, business travel, and compliance in rapidly growing international jurisdictions. Build reusable playbooks, decision frameworks, risk assessments, and change-management plans. Partner with Legal, Corporate Development, Recruiting, People, Finance, and business leaders to identify implications early and drive sound decisions. Establish dashboards and program-health measures covering compliance, cycle time, quality, cost, vendor performance, and employee experience. Manage external counsel and vendor partners through clear service levels, quality standards, budgets, and outcomes. Use systems, automation, and AI-enabled tools to improve case handling, documentati

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As the Manager, IT SOX PMO, you'll own information technology (IT)-specific Sarbanes-Oxley (SOX) compliance activities and serve as a subject matter expert for IT general controls (ITGCs) and IT application controls (ITACs). You will be an individual contributor, reporting to the Senior Director, SOX PMO Leader within the Chief Accounting Officer's organization, you'll directly support the Senior Manager, IT SOX PMO in strengthening GitLab's IT SOX program, preparing new and changing processes and systems for SOX requirements, and advancing automation in a high-growth technology environment. You'll combin

NVIDIA has been transforming computer graphics, PC gaming, and accelerated computing for more than 25 years. It’s a unique legacy of innovation that’s fueled by great technology—and amazing people. Today, we’re tapping into the unlimited potential of AI to define the next era of computing. An era in which our GPU acts as the brains of computers, robots, and self-driving cars that can understand the world. Doing what’s never been done before takes vision, innovation, and the world’s best talent. As an NVIDIAN, you’ll be immersed in a diverse, supportive environment where everyone is inspired to do their best work. Come join the team and see how you can make a lasting impact on the world. We are seeking a Senior IT Auditor passionate about SOX and internal examination. The role supports the Senior Manager of IT SOX Compliance to strengthen NVIDIA’s internal control environment over financial reporting (ICFR). It involves collaborating with IT and accounting/finance groups to evaluate and build efficient business and IT controls that mitigate financial reporting risk. What you'll be doing: Plan, scope, and implement the end-to-end SOX 404 lifecycle, including walkthroughs, risk-control matrices, testing, deficiency evaluation, remediation, and reporting. Partner with process owners to assess risks in new and changing business processes,-identify the key IT controls, and build out narrative, flowchart and control description. Drive continuous improvement and automation by seeking opportunities to streamline, standardize, and automate controls, reducing operational friction while maintaining control effectiveness. Provide guidance and training to control owners to promote awareness and understanding of SOX compliance requirements. Serve as the primary point of contact for external auditors, and ensure a seamless, efficient audit process. Coach

About the Team At OpenAI, the User Safety & Risk Operations (USRO) team helps protect our products and users from abuse, fraud, safety risks, and other forms of misuse. We operate at the front line of real-world safety and risk management, translating user and operational signals into timely decisions, effective interventions, and improvements to our systems. This role sits on a team focused on building operational capacity for new, ambiguous, and fast-moving company priorities. The team defines what needs to be built, creates the operating model to support it, and works with partner teams to make the work scalable and durable over time. About the Role We are looking for a senior program manager to build the safety, quality, and risk operations supporting a new category of consumer devices. You will translate ambiguous product risks and evolving requirements into practical operating models, workflows, escalation paths, launch-readiness plans, and cross-functional decision-making. This is a foundational role: the systems you build will shape how OpenAI launches, monitors, and improves a new category of consumer devices safely at scale. You will help establish how potential safety incidents, product-quality concerns, sensitive customer escalations, privacy-sensitive issues, and other emerging device risks are identified, investigated, resolved, and incorporated into product and operational improvements. You will turn incomplete requirements into practical workflows, decision rights, launch plans, quality controls, measurement, and durable ownership. The role centers on program building, operational judgment, and execution. We welcome candidates from product safety, quality assurance, regulatory operations, technical program management, healthcare, medical devices, aerospace, consumer technology, and other environments involving complex products or regulated risks. Direct consumer-hardware experience is helpful but not required. The strongest candidates learn unfam

About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects OpenAI’s technology, people, and products. We are technical in what we build but are operational in how we do our work, and are committed to supporting all products and research at OpenAI. Our Security team tenets include: prioritizing for impact, enabling researchers, preparing for future transformative technologies, and engaging a robust security culture. About the Role As a Security Engineer you will join our OpenAI engineers and researchers in building, operating and securing transformational AI technologies. This role will focus on all aspects of Detection & Response but with a strong emphasis on detecting insider threats and influencing controls to safeguard OpenAI's most sensitive assets. In this role, you will: In this role, you will: Innovate on Detection and Response infrastructure to engineer and automate end-to-end detection and investigation workflows. Develop, measure, and tune detection rules to ensure effective and sustainable operations. Drive projects across OpenAI’s technology stack with a focus on insider threats, ranging from access abuse and intellectual property theft to novel risks emerging within AI infrastructure. Partner closely with cross-functional stakeholders, including HR, Legal, and peer investigative teams, providing technical expertise and evidence to support investigations. Collaborate on cutting-edge AI research, and use AI to improve OpenAI’s Security posture. You might thrive in this role if you: 5+ years experience working in a detection/response or insider-risk role.. We are seeking mid-level and senior candidates. You have broad familiarity with operating systems and platforms such as macOS, Windows, Linux, and Kubernetes, along with experience in cloud infrastructure. Knowledge of modern adversary tactics and attack paths, data exfiltration techniques, and h

Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The role In this role, you will participate in the development, implementation and administration of the Compliance Management Program for the SoFi Invest product group. You will provide primary compliance coverage in support of the registered investment adviser, SoFi Wealth. The main objective of this role is to serve as a trusted adviser and partner to the business units responsible for driving the growth of the broader Invest product offerings (including SoFi Wealth), while mitigating regulatory risk to the SoFi enterprise. You will participate in various committees, audits and examinations, as well as test the processes and infrastructure for the investment adviser and broker dealer that facilitate Invest activities through the administration and maintenance of the Compliance Risk Assessment and Annual Reviews. You will advise the Compliance and Legal teams on emerging compliance issues, regulatory changes, and new rules, and consult and guide the company in the establishment of controls to mitigate risks. You will engage with business partners to offer appropriate knowledge, expertise and business acumen to meet the increasing demands of a rapidly changing regulatory environment. What you’ll do: Day-to-day responsibility for management and ongoing evolution of the firm's investment advisory compliance

About the Team The Procurement organization enables OpenAI's mission by ensuring every dollar is spent responsibly, compliantly, and efficiently. Within Procurement, the Center of Excellence (COE) team is responsible for designing and scaling the processes, systems, governance, and operating models that enable Procurement to grow effectively alongside the business. This role partners closely with Procurement and cross-functional teams to simplify how work gets requested, routed, approved, and managed across the spend lifecycle. By combining program leadership, process design, and change enablement, we help Procurement scale while maintaining strong controls and delivering an exceptional experience for employees and business partners. About the Role As Procurement Portfolio & Delivery Lead, you will lead complex, cross-functional initiatives that span Strategic Sourcing, Procure-to-Pay (P2P), Extended Workforce, Travel & Expense, Corporate Card, Risk, Legal, Finance, and Technology teams. You will not only drive project and program execution, but also actively contribute to solution design, requirements development, process optimization, testing, rollout planning, and stakeholder alignment. This is a highly collaborative role for someone who thrives in fast-moving environments, can bring structure to ambiguity, and is equally comfortable facilitating executive discussions, building project plans, and rolling up their sleeves to help move initiatives forward. This role is based in San Francisco, CA. We use a hybrid work model of 3 days in the office per week and offer relocation assistance to new employees. In this role, you will: Lead cross-functional procurement transformation programs spanning Strategic Sourcing, P2P, Extended Workforce, T&E, Corporate Card, Risk, and Procurement Systems. Develop and maintain the Procurement transformation roadmap, partnering across teams to identify opportunities, prioritize initiatives, map dependencies, sequence work