Technology Risk And Controls Senior Analyst in United States

Citi's U.S. Consumer Cards (USCC) business is one of the largest card issuers in the United States, serving millions of customers across a broad portfolio of branded, co-brand, and retail services card products. We are seeking to hire a VP Rewards Reengineering - Strategy and Analytics position to be part of the USCC Pricing and Rewards Reengineering team. The VP Rewards Reengineering - Strategy and Analytics position will report to Rewards Reengineering Analytics Lead and will be responsible for developing Rewards strategies grounded in data, customer, and operational insights. This individual will leverage financial analysis to enhance portfolio profitability through many rewards strategic work, balancing customer experience and ensuring regulatory compliance. This role will partner across multiple teams, including Product, Finance, Risk, Legal, Compliance, Technology and Operations to drive Rewards strategies for USCC. Key Responsibilities: Develop comprehensive Rewards strategy recommendations based on in-depth customer insights (both quantitative and qualitative), sound financial impact forecasting and thorough understanding of competitive landscape and regulatory environment Evaluate new initiatives by developing financial sizings, weighing risk / reward tradeoffs, assessing customer impact, and various other key factors Retrieve data and conduct data driven analytics using various analytical tools, software, and techniques Develop robust forecasting and tracking capabilities, and ensure robust quality control in Rewards processes Understand regulatory implications associated with Rewards policy and develop mitigation / opportunity strategies Communicate clearly and effectively to business partners and senior leaders Candidate Qualifications 6+

Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The Role: Positioned in the first line of defense (1LOD) and reporting to the Head of Business Controls, this experienced executive will act as the Business Controls Lead for SoFi’s Technology and Cybersecurity organizations. This includes comprehensive coverage of Engineering, Information Security, Infrastructure, and Data across the full SoFi Legal structure: SoFi Inc., SoFi Bank, Galileo, Technisys, and SoFi Hong Kong. The Business Controls Lead will act as the direct advisor to the Chief Technology Officer (CTO), Chief Information Security Officer (CISO), and their senior leadership teams. You will lead a team of experienced IT risk & controls team charged with promoting risk awareness and ensure the overall effectiveness of risk and compliance management program implementation and execution across the 1LOD. This role provides support, advisory services, and enables strategic alignment directly to department heads to accelerate and ensure quality execution. You will be responsible for supporting and driving consistent 1LOD adherence to critical programs, such as building and maintaining risk and control self-assessments (RCSAs); identification and evaluation of control effectiveness through control testing; 1LOD risk reporting; and supporting audits and regulatory exams. You will monitor the first l

About Ramp Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $200B in annualized spend flows in and out of 70,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. About the Role Ramp is seeking its first dedicated Financial Crimes Compliance Controls Senior Strategist to build and own the framework that demonstrates FCC controls are working as intended, remain effective as risk evolves, and can be clearly supported in bank-partner, audit, and regulatory examinations. This is a senior individual-contributor role at the intersection of financial-crimes compliance, controls effectiveness, technology, data, and AI-enabled operations. You will own FCC’s approach to testing, documenting, and improving manual and automated controls, including procedures, detection rules, AI and LLM-enabled workflows, and automation deployments. You will serve as FCC’s dedicated compliance partner for program-level Product, Engineering, Design, and Data (“PEDD”) initiatives, ensuring FCC requirements, controls, and risk considerations are incorporated into strategic product and technology planning. This role complements the broader team’s cross-functional partnerships by focusing specifically on major PEDD-led initiatives. This is a

CLEAR is building THE secure identity company of the future. Our mission is to make experiences safer and easier—physically and digitally. With more than 43 million Members and a growing network of partners across the world, CLEAR's secure identity platform is transforming the way people live, work, and travel. Whether it’s at the airport, stadium, or throughout your everyday life, CLEAR unlocks the magic of frictionless experiences. We are seeking a Senior Product Security Engineer to serve as a technical leader and strategic contributor within our Product Security team. This role goes beyond execution — you will drive the evolution of CLEAR’s application security posture by influencing architecture, shaping security engineering processes, and mentoring team members in security and engineering. You’ll lead security initiatives across the organization and help embed security into every stage of our software development lifecycle. What you'll do: Drive security strategy and implementation across all CLEAR products and engineering teams, ensuring consistent protection of customer and business-critical assets. Partner with engineering leadership to align application security initiatives with company-wide technology and product roadmaps, balancing innovation with risk mitigation. Provide technical leadership across CLEAR’s application security initiatives, guiding architecture, design, and development to meet high security standards. Serve as a trusted advisor to cross-functional teams — including Engineering, DevOps, Product, GRC, and IT — enabling secure-by-design practices across the organization. Design and drive implementation of scalable automated security controls and testing frameworks integrated into CLEAR’s CI/CD pipelines. Lead complex threat modeling, architecture reviews, and risk assessments across high-value systems and platforms, driving meaningful security outcomes. Engage with CLEAR's customers to provide insight and support their fraud and ident

About the Team OpenAI’s Legal team plays a crucial role in advancing our mission by tackling innovative and fundamental legal issues in AI. The team includes professionals from diverse legal fields—technology, AI, infrastructure, privacy, IP, corporate, employment, tax, regulatory, and litigation—who collaborate closely with colleagues across the company. If you are passionate about being a technology lawyer working on cutting-edge challenges, you’ll thrive here. About the Role We’re seeking a senior lawyer to participate in commercial legal strategy and execution across OpenAI’s fast-growing infrastructure portfolio. This is a cross-functional role that will partner closely with procurement, supply chain, partnerships, finance, and product teams to structure, negotiate, and manage the transactions that will support OpenAI’s long-term infrastructure ambitions. We’re looking for an experienced infrastructure transactions lawyer who thrives in ambiguity and wants to help define the commercial playbook for infrastructure efforts in the AI era. This role reports to the Associate General Counsel for infrastructure. This role is based in San Francisco, CA. We use a hybrid work model of 3-days in the office per week and offer relocation assistance to new employees. In this role, you will: Own commercial legal strategy and risk management for OpenAI infrastructure transactions. Draft, negotiate, and advise on complex agreements with infrastructure suppliers, manufacturers, distributors, and technology partners. Support strategic partnerships involving AI infrastructure and hardware supply chains. Develop frameworks for procurement, licensing, and collaboration across the infrastructure ecosystem. Partner with finance and operations teams to align contract terms with business and compliance requirements. Collaborate with policy and regulatory colleagues on issues impacting global supply chains, export controls, and manufacturing. Build scalable, efficient contracting process

NVIDIA has been transforming computer graphics, PC gaming, and accelerated computing for more than 25 years. It’s a unique legacy of innovation that’s fueled by great technology—and amazing people. Today, we’re tapping into the unlimited potential of AI to define the next era of computing. An era in which our GPU acts as the brains of computers, robots, and self-driving cars that can understand the world. Doing what’s never been done before takes vision, innovation, and the world’s best talent. As an NVIDIAN, you’ll be immersed in a diverse, supportive environment where everyone is inspired to do their best work. Come join the team and see how you can make a lasting impact on the world. We are seeking a Senior IT Auditor passionate about SOX and internal examination. The role supports the Senior Manager of IT SOX Compliance to strengthen NVIDIA’s internal control environment over financial reporting (ICFR). It involves collaborating with IT and accounting/finance groups to evaluate and build efficient business and IT controls that mitigate financial reporting risk. What you'll be doing: Plan, scope, and implement the end-to-end SOX 404 lifecycle, including walkthroughs, risk-control matrices, testing, deficiency evaluation, remediation, and reporting. Partner with process owners to assess risks in new and changing business processes,-identify the key IT controls, and build out narrative, flowchart and control description. Drive continuous improvement and automation by seeking opportunities to streamline, standardize, and automate controls, reducing operational friction while maintaining control effectiveness. Provide guidance and training to control owners to promote awareness and understanding of SOX compliance requirements. Serve as the primary point of contact for external auditors, and ensure a seamless, efficient audit process. Coach

About the Team At OpenAI, the User Safety & Risk Operations (USRO) team helps protect our products and users from abuse, fraud, safety risks, and other forms of misuse. We operate at the front line of real-world safety and risk management, translating user and operational signals into timely decisions, effective interventions, and improvements to our systems. This role sits on a team focused on building operational capacity for new, ambiguous, and fast-moving company priorities. The team defines what needs to be built, creates the operating model to support it, and works with partner teams to make the work scalable and durable over time. About the Role We are looking for a senior program manager to build the safety, quality, and risk operations supporting a new category of consumer devices. You will translate ambiguous product risks and evolving requirements into practical operating models, workflows, escalation paths, launch-readiness plans, and cross-functional decision-making. This is a foundational role: the systems you build will shape how OpenAI launches, monitors, and improves a new category of consumer devices safely at scale. You will help establish how potential safety incidents, product-quality concerns, sensitive customer escalations, privacy-sensitive issues, and other emerging device risks are identified, investigated, resolved, and incorporated into product and operational improvements. You will turn incomplete requirements into practical workflows, decision rights, launch plans, quality controls, measurement, and durable ownership. The role centers on program building, operational judgment, and execution. We welcome candidates from product safety, quality assurance, regulatory operations, technical program management, healthcare, medical devices, aerospace, consumer technology, and other environments involving complex products or regulated risks. Direct consumer-hardware experience is helpful but not required. The strongest candidates learn unfam

About the role OpenAI is building a world-class global mobility and immigration program—agile, compliant, technology-enabled, and designed to help exceptional people work where they can have the greatest impact. In this role, you will lead high-impact strategic initiatives, including U.S. permanent residence strategy, M&A, organizational change, and global expansion. This is a senior individual-contributor role for a builder who can translate legal and operational complexity into clear, practical solutions. Reporting to the Head of Global Mobility & Immigration, you will partner with the broader team and lead through expertise and influence across Legal, Corporate Development, Recruiting, People, Finance, business teams, and external counsel to turn emerging business needs into scalable programs, policies, and durable controls. What you'll do Set the roadmap, principles, governance, and operating model for priority global mobility and immigration initiatives. Lead the U.S. permanent residence strategy, including PERM planning, controls, communications, compliance and continuous improvement. Own immigration and mobility workstreams for M&A, divestitures, restructurings, entity changes, and new-market entry—from diligence through integration. Lead global expansion strategy, ensuring work authorization, business travel, and compliance in rapidly growing international jurisdictions. Build reusable playbooks, decision frameworks, risk assessments, and change-management plans. Partner with Legal, Corporate Development, Recruiting, People, Finance, and business leaders to identify implications early and drive sound decisions. Establish dashboards and program-health measures covering compliance, cycle time, quality, cost, vendor performance, and employee experience. Manage external counsel and vendor partners through clear service levels, quality standards, budgets, and outcomes. Use systems, automation, and AI-enabled tools to improve case handling, documentati

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As the Manager, IT SOX PMO, you'll own information technology (IT)-specific Sarbanes-Oxley (SOX) compliance activities and serve as a subject matter expert for IT general controls (ITGCs) and IT application controls (ITACs). You will be an individual contributor, reporting to the Senior Director, SOX PMO Leader within the Chief Accounting Officer's organization, you'll directly support the Senior Manager, IT SOX PMO in strengthening GitLab's IT SOX program, preparing new and changing processes and systems for SOX requirements, and advancing automation in a high-growth technology environment. You'll combin

About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects OpenAI’s technology, people, and products. We are technical in what we build but are operational in how we do our work, and are committed to supporting all products and research at OpenAI. Our Security team tenets include: prioritizing for impact, enabling researchers, preparing for future transformative technologies, and engaging a robust security culture. About the Role As a Security Engineer you will join our OpenAI engineers and researchers in building, operating and securing transformational AI technologies. This role will focus on all aspects of Detection & Response but with a strong emphasis on detecting insider threats and influencing controls to safeguard OpenAI's most sensitive assets. In this role, you will: In this role, you will: Innovate on Detection and Response infrastructure to engineer and automate end-to-end detection and investigation workflows. Develop, measure, and tune detection rules to ensure effective and sustainable operations. Drive projects across OpenAI’s technology stack with a focus on insider threats, ranging from access abuse and intellectual property theft to novel risks emerging within AI infrastructure. Partner closely with cross-functional stakeholders, including HR, Legal, and peer investigative teams, providing technical expertise and evidence to support investigations. Collaborate on cutting-edge AI research, and use AI to improve OpenAI’s Security posture. You might thrive in this role if you: 5+ years experience working in a detection/response or insider-risk role.. We are seeking mid-level and senior candidates. You have broad familiarity with operating systems and platforms such as macOS, Windows, Linux, and Kubernetes, along with experience in cloud infrastructure. Knowledge of modern adversary tactics and attack paths, data exfiltration techniques, and h

MongoDB is transforming the $138B+ data management software market by empowering developers to build the next generation of applications. As the leading modern data platform—and the first database company to IPO in over 20 years—we're at the forefront of innovation. We are seeking a driven, experienced commercial attorney to lead and scale our U.S. Public Sector and government contracting business. Operating in a fast-paced, high-growth environment, you will serve as the primary legal partner for our public sector sales ecosystem, managing complex transactions and ensuring strict regulatory compliance. This role can be based out of our US offices or remotely in the United States. Core Responsibilities & Requirements End-to-End Deal Execution: Draft, structure, and negotiate high-value public sector and commercial transactions, including SaaS, cloud licensing, professional services, and subcontracting agreements Public Sector Compliance: Provide expert guidance on U.S. and international government procurement laws, including FAR/DFARS frameworks, GSA schedules, and FedRamp requirements, and support ongoing development and refinement of public sector compliance program Strategic Sales Advisory: Advise cross-functional teams throughout the public sector sales lifecycle, from initial RFP evaluations and proposal risk assessments to handling audits or disputes Operational Scalability: Build, refine, and maintain legal playbooks, contract templates, and training modules to streamline negotiations and empower sales teams Regulatory Monitoring: Stay ahead of evolving technology laws, government contracting regulations, and government and defense related export controls to provide proactive, actionable risk mitigation strategies Cross-Functional Collaboration: Work cross-functionally to launch new programs to support growth of commercial and public sector businesses Requirements: 8+ years of US public sector transactions experience, preferably at a law firm a

Senior Manager, Logistics Security Description - At HP, we create technology that helps people and businesses bring their ideas to life. Our global supply chain plays a vital role in that mission, moving high-value products safely and reliably to customers around the world. We are looking for a collaborative and solutions-oriented Senior Manager, Logistics Security to help protect our logistics network, strengthen transportation risk programs, and lead efforts that reduce loss, improve carrier performance, and support a secure customer experience. Core responsibilities Own logistics security strategy for HP's transportation network. Manage loss, theft, damage, shortage and mis-delivery incidents across carriers, warehouses and distribution partners. Lead transportation claims management, including investigation, documentation, recovery and settlement. Manage relationships with major LSPs, carriers, freight forwarders and 3PLs. Investigate high-value shipment incidents and identify root causes. Develop controls to prevent cargo theft, fraud, unauthorized access and product diversion. Establish security standards for transportation lanes, warehouses and high-risk locations. Track claims and losses using KPIs such as: Claim $ / shipment Loss rate Damage rate Theft incidents Recovery % Claim cycle time Carrier performance Partner with Supply Chain, Logistics, Finance, Legal, Compliance, Security and Insurance teams. Lead corrective/preventive actions with logistics service providers. Review carrier contracts and ensure appropriate liability and insurance coverage. Establish escalation processes for major incidents. Conduct risk assessments of logistics providers and distribution locations. Use dat

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. Join Micron as a Senior Manager, Logistics Security Program, where you will have the outstanding opportunity to lead a world-class global security initiative! This role is critical in ensuring the flawless implementation of our logistics security strategy, encouraging collaboration with key partners, and advancing our program to new heights. Responsibilities: Direct Micron’s worldwide logistics security initiative for valuable shipments, establishing strategy, governance, standards, controls, and performance expectations throughout the transportation network. Lead and expand a distributed team of logistics security experts while promoting uniform performance across Asia Pacific, the Americas, Europe, and other priority regions. Maintain a risk-based shipment security framework that assesses lane, geography, modality, theft history, business impact, recovery capability, and other key risk factors. Establish and enforce logistics provider security requirements, including cargo tracking, route compliance, geofencing, chain of custody, tamper detection, monitoring, blocking issue, and recovery protocols. Partner multi-functionally with Procurement, Logistics, Global Security, Legal, Risk, Finance, and business collaborators to integrate security requirements into contracts, procedures, governance, and scorecards. Coordinate logistics security vendors and providers, including selection, performance management, service levels, monitoring operations, recovery capabilities, and corrective ac

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. As the Logistics Security Program Manager for EMEA, this role is an essential part of Micron’s Global Security team. The person leads the management and continuous refinement of the company’s important logistics security efforts across the EMEA area. This position serves as the regional authority, advancing risk-focused security methods that protect high-value shipments, improve supply chain durability, and lower transportation security risks in intricate multimodal logistics networks. As a senior individual contributor, the Logistics Security Program Manager takes charge of regional program initiatives on their own. They apply solid judgment to shifting threat conditions and collaborate with colleagues across functions and external partners to produce security results. The position involves balancing security, operational efficiency, and business continuity while transforming regional risks into scalable, practical controls that advance cargo visibility, shipment protection, and incident readiness. Responsibilities: Act as the EMEA logistics security authority, guiding the creation and implementation of risk-focused security programs for valuable and sensitive shipments involving carriers, freight forwarders, and logistics providers. Develop, apply, and manage shipment security controls, including tracking, telematics, geofencing, chain of custody, tamper detection, monitoring, critical issue handling, recovery processes, and carrier compliance requirements. Conduct carrier, route, l

About the Team OpenAI's Legal team plays a crucial role in furthering OpenAI's mission by tackling innovative, fundamental legal issues in AI. If you're passionate about doing significant and unique work as a technology lawyer, this team is for you. The team comprises professionals from diverse fields, including technology, AI, privacy, IP, corporate, employment, tax law, regulatory, and litigation. About the Role As a member of our AI Product Counsel team, you will lead legal compliance initiatives for global online safety, platform, and AI regulations, including the UK Online Safety Act, EU Digital Services Act, EU AI Act, and similar emerging frameworks. You will partner closely with Product, Policy, Safety, Engineering, Security, Operations, and other teams to translate complex regulatory requirements into scalable, practical compliance solutions. This role is based in San Francisco, CA. We use a hybrid work model of 3 days in the office per week and offer relocation assistance to new employees. In this role, you will: Serve as the primary legal expert on the Online Safety Act, Digital Services Act, EU AI Act, and related global AI, platform, and online safety regulations. Lead the design and implementation of scalable compliance programs, governance frameworks, controls, and operating processes. Partner with Product, Engineering, Safety, Policy, Operations, and Security teams to translate regulatory obligations into practical product and operational requirements. Monitor emerging regulations and enforcement trends, anticipate their impact, and help shape OpenAI’s compliance strategy. Develop repeatable processes, playbooks, escalation paths, and decision frameworks that enable teams to move quickly while managing risk responsibly. Support engagement with regulators, external counsel, industry groups, and other stakeholders as needed. You’ll thrive in this role if you: Have 10+ years of experience with a mix of in-house or technology-focused law firm roles. Have