Technology Risk And Controls Specialist in United States

A Career with Point72’s Technology Team As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications. As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity—all while delivering real business impact for our multi-billion-dollar global business. What you’ll do Develop and maintain the information security policy and standards library, aligning it with business priorities, regulatory expectations, and control objectives Lead independent assessments of the information security program, including regulatory examinations and third-party evaluations Identify technology risks across a complex business environment and drive mitigation aligned with our firm’s standards and control expectations Investigate data privacy inquiries and privacy-related events, assess business impact, and coordinate timely response activities Partner with technology, legal, compliance, and business stakeholders to translate risk findings into practical remediation plans Advise control owners on policy interpretation, risk treatment, and evidence expectations for assessments and examinations Prepare clear reports for management on team activity, emerging risks, remediation progress, and key decisions Maintain accurate risk, policy, priv

Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The role: The Crypto AML & Sanctions Advisor will provide specialized financial crime compliance advisory support for SoFi’s digital asset and cryptocurrency products and services, reporting to the Crypto Compliance Officer. Your role will be to support the business in identifying and mitigating risks related to money laundering, terrorist financing, sanctions, and other illicit finance activity associated with digital assets, while helping ensure SoFi meets applicable regulatory requirements, expectations, and guidance. The role will support the development and maintenance of sound, risk-based AML and sanctions programs and controls across SoFi’s crypto ecosystem. What you’ll do: Act as a key Crypto AML & Sanctions advisor, providing subject matter expertise to the Crypto Compliance Officer, Compliance, Product, Engineering, Investigations, and business leaders on financial crime risks and controls. Provide AML and sanctions advisory across the crypto product lifecycle, including trading, custody, deposits and withdrawals, wallets, stablecoins, staking, and emerging digital asset products. Identify and assess blockchain-specific financial crime risks and advise on appropriate controls, including KYT, transaction and wallet screening, sanctions exposure, Travel Rule requirements, and escalatio

Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The Role: Positioned in the first line of defense (1LOD) and reporting to the Head of Business Controls, this experienced executive will act as the Business Controls Lead for SoFi’s Technology and Cybersecurity organizations. This includes comprehensive coverage of Engineering, Information Security, Infrastructure, and Data across the full SoFi Legal structure: SoFi Inc., SoFi Bank, Galileo, Technisys, and SoFi Hong Kong. The Business Controls Lead will act as the direct advisor to the Chief Technology Officer (CTO), Chief Information Security Officer (CISO), and their senior leadership teams. You will lead a team of experienced IT risk & controls team charged with promoting risk awareness and ensure the overall effectiveness of risk and compliance management program implementation and execution across the 1LOD. This role provides support, advisory services, and enables strategic alignment directly to department heads to accelerate and ensure quality execution. You will be responsible for supporting and driving consistent 1LOD adherence to critical programs, such as building and maintaining risk and control self-assessments (RCSAs); identification and evaluation of control effectiveness through control testing; 1LOD risk reporting; and supporting audits and regulatory exams. You will monitor the first l

Who We Are Notion is the collaborative AI workspace where teams and agents think together . We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. About the Role: We are seeking a strategic and technically fluent Lead, IT Audit to join our Finance team reporting to the Head of Internal Audit. This is a broad, high-impact role spanning both IT SOX compliance and operational IT audits. You will help establish and elevate our technology controls program end to end — owning the IT SOX lifecycle, designing the IT general and application controls framework, embedding AI and automation into how we test and monitor controls, and delivering value-added operational IT and cybersecurity audits that strengthen how the company builds and runs its systems. You will partner with leaders across Engineering, Security, IT, Finance, and the business to ensure sound technology controls are built into how the company operates as we scale. This role is ideal for someone who thinks like a builder, not just an auditor — someone who can translate complex control and security requirements into practical, scalable processes in a fast-moving SaaS environment with modern cloud architecture and complex data flows. This role can be based in either San Francisco or New York City. We work from our offices on M

Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The role: The Composer by SoFi Segment Manager plays a key role in operating, scaling, and evolving the Composer business. This individual will own critical workstreams spanning trading and brokerage operations, process design, member servicing, risk and controls, and strategic initiatives. The role will partner closely with Product, Engineering, Operations, and Compliance to translate business needs into scalable operating solutions. The ideal candidate combines strong brokerage expertise with structured problem-solving, sound judgment, and the ability to independently drive complex initiatives from problem identification through implementation. What you'll do: Own and support critical Composer business operations, including trading, brokerage servicing, account operations, and complex operational escalations. Serve as a subject matter expert across Composer's operating model, including key brokerage workflows, systems, dependencies, and controls. Design and continuously improve end-to-end member journeys across key Composer experiences, identifying friction points and ensuring scalable servicing solutions. Serve as an escalation point for complex or high-impact member issues, driving resolution and translating learnings into broader process improvements. Partner across the business to identify oper

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Senior Internal Auditor reporting to the Senior Manager, Technology Internal Audit, you’ll help GitLab assess risk and strengthen controls across a technology landscape that includes multi-cloud infrastructure, artificial intelligence and machine learning systems, and modern development practices. This USA-based role supports our Sarbanes-Oxley Act (SOX) program while partnering with Engineering, IT Operations, Security, and business teams to build controls that work in practice, not just on paper. You’ll execute technology audits, turn findings into practical improvements, and use data analytics, au

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . As a Staff IT Technical Program Manager on the IT Operations team, you'll own and drive eDiscovery and information governance programs across Coinbase. Embedded with cross-functional leadership, you'll serve as the connective tissue between domain experts and engineering teams, identifying automation opportunities, prototyping solutions with AI and workflow tooling, and driving adoption across the organization. You'll lead the technical strategy behind defensible eDiscovery processes and entity-specific retention capabilities, ensuring Coinbase meets its regulatory obligations at scale. What you’ll do: Own the end-to-end strategy and execution for eDiscovery and information governance solutions spanning multiple business functions and enterprise platforms. Partner with engineering teams to deliver technology programs that transform eDiscovery capabilities from hold through collection, review, and production (EDRM). Drive the translation of regulatory and compliance requirements into actionable system configurations, policies, and controls across platforms such as Slack and Google Workspace. Lead program timelines, dependencies, and risk escalations while maintaining audit-ready documentation including regulatory control matrices, playbooks, and SLAs. Build and validate comprehensive test plans for eDiscovery controls and information governance tooling to ensure defen

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. Position Summary The Manager - Process Engineering leads high-impact process improvement and Business Process Management (BPM) initiatives across Information Security and Technology Solutions (ISTS). This role is accountable for enabling operational excellence by designing, standardizing, improving, and governing ISTS processes using agentic workflows, Lean Six Sigma, and Business Process Management disciplines. The Manager- Process Engineering serves as both a delivery leader and capability builder, ensuring that ISTS has well-documented, measurable, and continuously improving processes with clear ownership, performance indicators, and controls. This role partners closely with technology tower leaders, Experience Owners, Process Owners, and risk, security, and compliance stakeholders to reduce operational friction, increase capacity, mitigate risk, and strengthen enterprise controls. Key Responsibilities: Apply DMAIC and Lean Six Sigma methodologies to solve complex, cross‑funct

About Ramp Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $200B in annualized spend flows in and out of 70,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. About the Role Ramp is seeking its first dedicated Financial Crimes Compliance Controls Senior Strategist to build and own the framework that demonstrates FCC controls are working as intended, remain effective as risk evolves, and can be clearly supported in bank-partner, audit, and regulatory examinations. This is a senior individual-contributor role at the intersection of financial-crimes compliance, controls effectiveness, technology, data, and AI-enabled operations. You will own FCC’s approach to testing, documenting, and improving manual and automated controls, including procedures, detection rules, AI and LLM-enabled workflows, and automation deployments. You will serve as FCC’s dedicated compliance partner for program-level Product, Engineering, Design, and Data (“PEDD”) initiatives, ensuring FCC requirements, controls, and risk considerations are incorporated into strategic product and technology planning. This role complements the broader team’s cross-functional partnerships by focusing specifically on major PEDD-led initiatives. This is a

Datadog is a world-class monitoring and security platform for cloud applications. We're dedicated to creating, developing, and supporting our product and customers, fostering seamless collaboration and problem-solving among Dev, Ops, and Security teams globally. Built by engineers for engineers, our SaaS product is trusted by organizations of all sizes across various industries, driving digital transformation, cloud migration, and infrastructure monitoring for our customers' entire technology stacks. As cloud technologies continue to evolve and digital operations become ever more crucial, Datadog remains at the forefront of innovation and is well-positioned for sustained growth. Datadog's Finance team partners with stakeholders across the organization, providing commercial, operational, and analytical support to ensure that Datadog's business continues its rapid and efficient growth. The Equity Administration team is responsible for overseeing the full cycle of stock administration on a global basis, collaborating with groups across Accounting, Tax, People, Payroll, and Legal to manage Datadog's equity plans worldwide. Our work spans the processing of equity transactions including RSU releases, stock option exercises, and ESPP purchases; management of equity-related inquiries from employees, executives, investors, and other key partners; day-to-day management of the E*TRADE Equity Edge Online platform; global equity reporting and tax compliance; oversight of equity procedures, policies, and controls; and employee education on equity programs. We are seeking a hands-on Equity Administration Assistant Manager to own our complex and high-risk equity workstreams. Reporting to the Senior Manager, Equity Administration, the Assistant Manager will serve as a first level preparer or reviewer on equity transactions, assist with process documentation, and work closely with various internal teams across Accounting, Tax, People Operations, Payroll, and Legal. This is a ro

At Freddie Mac, our mission of Making Home Possible is what motivates us, and it’s at the core of everything we do. Since our charter in 1970, we have made home possible for more than 90 million families across the country. Join an organization where your work contributes to a greater purpose. We are accepting applications for this position until 10/16/2026 Position Overview: Are you looking for an inclusive company culture to help prepare you for a successful career? The Internal Audit division within Freddie Mac is searching for curious, analytical, and collaborative individuals to join our organization. Freddie Mac offers a dynamic environment where interns gain exposure to real-world business challenges while building valuable technical and professional skills. As an Internal Audit Intern, you will work at the intersection of business, technology, data analytics, and risk management, helping the organization improve processes and strengthen controls through innovative approaches to auditing and analysis. Our Impact: The Internal Audit division plays a meaningful role in Freddie Mac's approach to managing risk by providing independent, objective, and value-added assurance over risk management, governance, and internal controls. As the organization evolves, Internal Audit continues to leverage data analytics, artificial intelligence, and automation to enhance audit effectiveness, generate deeper insights, and drive efficiency across the company. Our team works closely with business and technology partners to identify risks, evaluate controls, and support informed decision-making. Your Impact: Support high-impact audit engagements that evaluate key business processes, risks, controls, and strategic initiatives across Freddie Mac. Utilize data analytics, AI tools, and automation techniques to imp

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . We're hiring a Manager, GRC to join our Technology Risk & Controls team within Security and lead second line of defense advisory coverage across critical technology and security domains. This team evaluates risk posture, improves control design, and helps engineering, infrastructure, and security leaders make better, risk-informed decisions. You'll both manage a team and directly own advisory coverage for domains that may include disaster recovery and resiliency, SDLC, artificial intelligence, identity and access management, and supply chain - building trusted partnerships that ensure Coinbase addresses its most critical risks in its most critical functions. What you'll do: Lead second line advisory coverage for key technology and security domains, assessing risk exposure, control effectiveness, policy alignment, and emerging issues across the business. Partner with engineering and technology teams to evaluate domain posture and identify where additional controls, remediation, or governance improvements are needed. Review and challenge the design of new and existing risks and their corresponding controls to ensure our mitigations are scalable, effective, and aligned to business, risk, and regulatory expectations. Drive coordination across risk, controls, policy, audit, and assurance teams to translate incidents, audit findings, and regulatory expectations i

CLEAR is building THE secure identity company of the future. Our mission is to make experiences safer and easier—physically and digitally. With more than 43 million Members and a growing network of partners across the world, CLEAR's secure identity platform is transforming the way people live, work, and travel. Whether it’s at the airport, stadium, or throughout your everyday life, CLEAR unlocks the magic of frictionless experiences. We are seeking a Senior Product Security Engineer to serve as a technical leader and strategic contributor within our Product Security team. This role goes beyond execution — you will drive the evolution of CLEAR’s application security posture by influencing architecture, shaping security engineering processes, and mentoring team members in security and engineering. You’ll lead security initiatives across the organization and help embed security into every stage of our software development lifecycle. What you'll do: Drive security strategy and implementation across all CLEAR products and engineering teams, ensuring consistent protection of customer and business-critical assets. Partner with engineering leadership to align application security initiatives with company-wide technology and product roadmaps, balancing innovation with risk mitigation. Provide technical leadership across CLEAR’s application security initiatives, guiding architecture, design, and development to meet high security standards. Serve as a trusted advisor to cross-functional teams — including Engineering, DevOps, Product, GRC, and IT — enabling secure-by-design practices across the organization. Design and drive implementation of scalable automated security controls and testing frameworks integrated into CLEAR’s CI/CD pipelines. Lead complex threat modeling, architecture reviews, and risk assessments across high-value systems and platforms, driving meaningful security outcomes. Engage with CLEAR's customers to provide insight and support their fraud and ident

About the Role Join the Controls Technology division as a Technology Product Owner. In this critical role, you will act as the bridge between complex business needs and our engineering teams. You will be empowered to translate intricate requirements for risk and control systems into a flawlessly managed backlog of epics and user stories. Your primary mission is to drive the delivery of high-quality, compliant software by ensuring our development teams have the clarity and context needed to execute effectively, sprint after sprint. This is a role for a product owner — someone who thrives on execution, champions quality, and is passionate about building world-class technology solutions in a dynamic, global financial environment. What You'll Do 1. Backlog Ownership & Agile Execution Own and Master the Backlog: Meticulously create, refine, and prioritize the product backlog, ensuring it is transparent, well-understood, and always ready for at least two sprints ahead. Translate Vision into Action: Deconstruct complex business requirements into well-defined Epics, User Stories, and precise Acceptance Criteria, ensuring a high percentage of stories are accepted without rework. Drive Sprint Success: Serve as the dedicated point of contact for the engineering team, providing unwavering clarity during sprint planning, daily stand-ups, and throughout the development cycle to remove ambiguity. 2. Solution Definition & Quality Assurance Define the "What": Partner with business stakeholders to elicit, analyze, and document requirements, defining the precise solution to be built. Champion Quality: Drive a quality-first mindset with a relentless focus on clear, testable acceptance criteria to minimize ambiguity and reduce critical defects in UAT. Demonstrate Value: Conduct compelling de

NVIDIA has been transforming computer graphics, PC gaming, and accelerated computing for more than 25 years. It’s a unique legacy of innovation that’s fueled by great technology—and amazing people. Today, we’re tapping into the unlimited potential of AI to define the next era of computing. An era in which our GPU acts as the brains of computers, robots, and self-driving cars that can understand the world. Doing what’s never been done before takes vision, innovation, and the world’s best talent. As an NVIDIAN, you’ll be immersed in a diverse, supportive environment where everyone is inspired to do their best work. Come join the team and see how you can make a lasting impact on the world. As the Manager of SOX and Internal Audit, you will have a key role in managing financial reporting risk across our fast-growing business. This is your moment to lead with impact and help transform the audit function by putting AI at its core. Join us in Santa Clara, CA, and be a member of a team dedicated to outstanding performance and careful implementation! What you'll be doing: Be responsible for the end-to-end SOX 404 lifecycle and for assigned business process areas, including design assessment, risk assessment, walkthroughs, test planning, control testing, and reporting to management. Partner with process owners to assess risks, determine the control response, and drive the resulting narratives, flowcharts, and control builds to completion. Promote the adoption of AI in the Internal audit and SOX function by applying AI and analytics to risk assessment, documentation, testing, sampling, and evidence review. Review risks and controls associated with AI-powered business processes, ensuring the deployed AI and automation are regulated and sufficiently monitored. Evaluate control deficiencies, quantify potential impact, conclude on severity, and drive remediation to clo