Вакансии

Location: Birkirkara, Malta Workplace: none David Kennedy Recruitment is working with a licensed and regulated fintech company providing global payment solutions, that is seeking to onboard a Legal and Compliance Executive to join its team in Malta. In this role, you support the Chief Legal and Compliance Officer in managing legal and regulatory matters, reviewing legal documentation, monitoring regulatory developments and coordinating compliance activities. You contribute to the organisation’s governance, risk management and data protection practices while working closely with teams across the business. This opportunity is suited to a legal professional with 2–4 years of relevant experience who is looking to develop their expertise in fintech, payments and regulatory compliance. Position: Legal and Compliance Executive Location: Birkirkara, Malta Work model: Hybrid (2 days per week at the office) Employment type: Full-time. DUTIES AND RESPONSIBILITIES: Draft, review and negotiate commercial contracts, non-disclosure agreements, internal policies and other legal documents Conduct legal research and assist in preparing legal opinions, memoranda and briefing notes, particularly on payment services, electronic money, PSD3, MiCA, cryptocurrency and AI-related matters Assist with corporate governance activities, including board packs, resolutions and statutory filings Assist with regulatory reporting and ensure submissions are completed within required deadlines Conduct compliance monitoring and support internal audits Assist in developing and delivering compliance training and awareness programmes Support initiatives promoting ethical conduct, data protection and regulatory compliance Help maintain compliance with GDPR, privacy frameworks, internal data governance policies and the Digital Operational Resilience Act (DORA) Assist with data breach reporting, subject access requests and record-keeping obligations where applicable REQUIREMENTS: Bachelor’s degree in Law (LL.B. or equivalent) and a legal warrant 2–4 years of relevant post-degree experience in a legal, compliance or regulatory role, either in-house or at a law firm Strong understanding of legal drafting, contract law, regulatory obligations and corporate governance Knowledge of compliance frameworks, risk management and data protection regulations, including GDPR and DORA Excellent written and verbal communication skills, with a high level of accuracy and attention to detail Ability to manage multiple priorities, meet deadlines and exercise sound professional judgement High standards of integrity, confidentiality and professional ethics OFFER: Hybrid working model, with a minimum of two days per week in the Birkirkara office Annual remote-working allowance starting at 15 days after probation, increasing with tenure to 60+ days Private health and dental care after probation Discounted gym membership 192 hours of annual leave, equivalent to 24 days Sponsored further education through the Get Qualified Scheme top-up Quarterly social events and an annual family fun day Opportunities to travel to other office locations Free snacks and refreshments And many more!

Задачи: — Организовывать разработку внутренней нормативной документации по информационной безопасности; — Взаимодействовать с регуляторами и аудиторами по вопросам информационной безопасности; — Проводить регулярную оценку рисков информационной безопасности. Требования: — Опыт работы в банковской сфере не менее 3-х лет в аналогичной должности; — Знание стандартов информационной безопасности и нормативных документов, регламентирующих процессы ИБ в РФ (152-ФЗ, 187-ФЗ, 98-ФЗ, 63-ФЗ, 149-ФЗ, 313-ПП и др.), в том числе документов Банка России (ГОСТ Р 57580, 851-П, 716-П, 757-П, 802-П, 821-П и др.); — Понимание способов и механизмов защиты информации в операционных системах, системах управления базами данных, сетях, системах виртуализации, ИТ инфраструктуре и информационных системах; — Знание современных средств и систем защиты информации; — Опыт в разработке документов в области информационной безопасности; — Опыт проведения оценки соответствия/аудита по выполнению требований регуляторов; — Опыт сопровождения проверок регуляторов/аудиторов в области информационной безопасности. Будет плюсом: — Знание зарубежных стандартов информационной безопасности и нормативных документов (серия ISO, SWIFT, PCI DSS, GDPR и др.); — Опыт реализации проектов КБС, Цифровой рубль, аттестация ГИС. Условия: — Официальное оформление с первого дня, IT-компания аккредитована; — Развитие профессиональной экспертизы: обучение и посещение конференций и митапов за счёт Банка; — Комфортный офис с уютными рабочими пространствами, комнатами отдыха с настольным теннисом, кикером, плойкой и другими удобствами; — Погружение в ИИ-культуру с постоянным взаимодействием с искусственным интеллектом и обучением новичков, предоставление бесплатных ИИ-помощников; — Коворкинги в Сочи и на Алтае с возможностью работать и отдыхать в режиме 4/3 за счёт Банка; — Более 50 социальных программ: ДМС со стоматологией и страхованием, изучение английского, софинансирование отпусков, уникальные условия по продуктам и услугам Банка; — Забота о детях: праздники и экскурсии, софинансирование частного детского сада, отдых в лагере и подготовка к экзаменам; — Много спорта: клубы и секции, участие в корпоративных турнирах и чемпионатах, софинансирование абонементов в фитнес-клубы; — Минимум бюрократии, отсутствие дресс-кода, гибкое начало и завершение рабочего дня; — Яркая корпоративная культура: летние IT-фесты, путешествия по России и за её пределами.

Yellow Card is looking for an AML Compliance Officer to lead Zimbabwean AML compliance, implement controls, investigate transaction alerts, and engage regulators.

Задачи: — Управление налоговым соответствием — Усиление операционного контроля — Подготовка бизнеса к аудитам и проверкам

KYC клиентов и KYT транзакций. контроль соблюдения регуляторных требований.

Location: Limassol, Cyprus Are you looking for the next professional opportunity, that will challenge you and advance your career? Join our team now! Tickmill is looking to hire a Junior Compliance & AML Officer to join our team to monitor and ensure compliance with all applicable laws, regulations, and standards. Join a high-caliber team and contribute to its success with your passion, hard work and positive attitude. About Tickmill. Tickmill is an award-winning, multi-regulated broker offering access to a broad range of asset classes, including CFDs on Forex, Stocks, Indices, Commodities, Cryptocurrencies, and Bonds, as well as Exchange Traded Derivatives such as Futures & Options. Founded in 2014, the Tickmill Group employs over 330 professionals across offices in London, Cyprus, Poland, Estonia, Seychelles, and several other locations worldwide. Our culture is built on trust, transparency, and high standards. We bring together ambitious professionals who thrive in an environment that supports growth, innovation, and excellence. We offer competitive benefits packages, frequent team initiatives, and opportunities for professional development. Join the Tigers! What does the job look like? The Junior Compliance & AML Officer will have the opportunity to: Monitor the activities of the Company's, including websites, customer communications, live chats, marketing materials, and operational processes, to identify and address potential compliance issues. Maintain up-to-date knowledge of relevant regulatory requirements and provide practical compliance advice and guidance to internal departments. Support client onboarding by conducting Know Your Customer (KYC) checks, Anti-Money Laundering (AML) screening, due diligence, and risk assessments. Review and investigate alerts relating to potentially suspicious activity and escalate cases to the Anti-Money Laundering Compliance Officer (AMLCO), where appropriate. Assist in developing, reviewing, and maintaining internal compliance policies and procedures, including the Anti-Money Laundering (AML) Manual. Assist with regulatory enquiries and requests, internal audits, and ad hoc compliance reviews across the Group. Support the delivery of staff training and provide guidance on AML/CFT risks, obligations, and awareness. Provide ongoing day-to-day compliance support to internal stakeholders, ensuring a sound understanding of applicable regulatory obligations and best practices. Perform any other ad hoc compliance and AML-related duties as assigned by the Head of Compliance or Senior Management. What will you need to be able to do the job? Academic background in Law, Business, Finance, Economics, or a related field. At least one year of relevant professional experience is required. CySEC certification will be considered an advantage. Candidates who do not currently hold the relevant certification but demonstrate a strong willingness to learn and develop will be supported by the Company in obtaining the AML and/or Advanced CySEC certification. Strong work ethic, with the ability to take initiative, work proactively, and demonstrate a high level of responsibility. Fluency in both Greek and English, with excellent verbal and written communication skills. Excellent presentation skills and the ability to communicate information clearly and effectively. Ability to work independently while also contributing effectively as part of a team. By joining us, you can expect: Unique Opportunity for a career in a global, fast-growing company. Attractive remuneration package based on qualifications and experience (including 13th salary and Discretionary Bonuses to reward exceptional performance). Opportunities to learn and grow through our “Employee Training & Development program”. Medical Insurance Cover, which includes Outpatient, Inpatient, and Dental Care. Multiple events to bond with the team and the group through Quarterly/Semestrial Team Activities for all the Company. Participation in our welfare investment and savings plan through our Provident Fund Scheme. Birthday and Loyalty benefits. Collaboration with SportBenefit. What to expect from our recruitment process: First interview with TA and Head of the Department Final interview with top management Make your next Career step and apply NOW! * Due to the great number of applications, we receive for each of our open vacancies, we are unable to respond on an individual basis

• Drafting and updating regulatory policies and internal procedures. • Ensuring business operations comply with UK regulatory requirements.

Location: New York, NY (HQ) Workplace: Hybrid ABOUT RAMP Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $275B in annualized spend flows in and out of 85,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 7.5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. ABOUT THE ROLE Ramp's Financial Crime Compliance (FCC) team is looking for a senior investigator ready to shift from running cases to scaling the systems that run cases. You've built real depth in TM Alerts, AML Investigations, Complex Fraud, and EDD Reviews; you know what a good escalation looks like, where analysts get stuck, and where automation actually holds up in production versus just looks good in a demo. In this role, you'll spend most of your time partnering with Engineering and the Head of FCC Tooling to turn that judgment into scaled AI systems: testing model outputs, labeling and calibrating results, and making sure every automated decision point is well-documented and properly governed. You'll stay close enough to FCC's day-to-day workflows and will partake in some of them, but this is fundamentally a builder role.   WHAT YOU'LL DO - Partner directly with Engineering and the Head of FCC Tooling on automation experimentation and AI initiatives across TM, sanctions, complex fraud, and EDD, moving prototypes from one-off calibration exercises to defined, repeatable evaluation processes. - Design and run labeling and tagging workflows for model outputs (e.g., TM alert dispositions, sanctions/PEP hit review) building a structured, documented pipeline in place of today's ad hoc process - Define and maintain test sets, scenario coverage, and evaluation frameworks for compliance AI/agent tools in partnership with the engineers building them - Own the documentation and governance layer for every automated or AI-assisted decision point - Work with the FCC team to understand current workflows to guide innovative solutions - Recommend automation and AI adoption decisions with evidence and escalate control-posture or model-risk trade-offs to compliance leadership   WHAT YOU NEED - 5+ years of financial services experience in compliance, AML, or related regulatory advisory roles, preferably in fintech - Demonstrated senior-investigator experience across TM Alerts, AML Investigations, Complex Fraud, and EDD Reviews - Direct experience testing, labeling, or evaluating AI/ML model outputs, or strong aptitude and demonstrated fast ramp-up if new to formal model evaluation - Strong AI fluency and data analytics skills - Comfort partnering with engineers day-to-day and ability to translate compliance judgment into build specs, test cases, and evaluation criteria engineers can act on - Strong project management and documentation rigor - Ability to scope an ambiguous automation problem, choose an approach, and deliver a durable outcome with minimal oversight   NICE-TO-HAVES - Data science background - Experience working with outsourced testing/QA partners on model tuning or signal collection BENEFITS AVAILABLE TO ALL FULL-TIME RAMP EMPLOYEES (GLOBAL) - Flexible PTO - Centralized home-office equipment ordering - Health and wellness stipend - Budget for intra-office travel - Weekly coffee stipend UNITED STATES - 100% medical, dental & vision insurance coverage for you, with partial coverage for dependents - One Medical annual membership - 401(k), including employer match on contributions made while employed by Ramp - Fertility HRA (up to $10,000 per year) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay - Pet insurance - In-office perks: lunch, snacks, drinks, and more - Relocation expense coverage to NYC or SF (if needed) CANADA - Group medical, dental, and vision coverage through Sun Life - Life, AD&D, and disability coverage - Fertility drug coverage (up to $4,000 lifetime) - Group Retirement Plan with employer match (RRSP + DPSP) - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay, with additional time available at reduced pay - Employee Assistance Program and virtual care through Lumino Health UNITED KINGDOM - Private medical insurance through Freedom Elite - Virtual GP and at-home care via eMed x Livi - Workplace pension through Penfold, with salary sacrifice option - Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay with additional time available at reduced pay REFERRAL INSTRUCTIONS If you are being referred for the role, please contact that person to apply on your behalf.   OTHER NOTICES Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.   Beware of recruiting scams: Ramp will only contact you through official @Ramp.com http://Ramp.com email addresses and will never ask for payment or sensitive personal information during the hiring process.   Ramp Applicant Privacy Notice https://ramp.com/legal/applicant-privacy-notice

Location: San Francisco, CA • New York, NY • United States Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! As a Compliance Engineer at Figma, you will play a critical role in designing, implementing, and testing security controls across multiple compliance frameworks, including FedRAMP, SOC 2, ISO 27001, and NIST. You will collaborate closely with security, infrastructure, and product engineering teams to translate regulatory requirements into effective technical controls, evaluate control effectiveness, and identify opportunities to improve security and compliance processes. You will also help advance Figma’s compliance engineering capabilities by leveraging automation, machine-readable control definitions (JSON), APIs, and AI-assisted development tools to streamline control testing, evidence collection, and continuous monitoring. This role combines deep security compliance expertise with technical problem-solving to build scalable, repeatable, and effective compliance practices. This is a full time role that can be held from one of our US hubs or remotely in the United States. What you’ll do at Figma: Develop and verify technical security controls that satisfy multiple compliance frameworks Collaborate with security, infrastructure, and product engineering teams to translate compliance requirements into effective technical controls Design and execute control testing procedures to assess control performance, surface gaps, and verify that remediation is complete Establish repeatable control assessments and continuous monitoring processes to evaluate compliance effectiveness Translate security requirements into structured, machine-readable JSON definitions to support control management, testing, and automation Build and maintain API integrations and automated workflows to streamline evidence collection, control validation, and compliance processes Identify opportunities to improve control effectiveness, reduce manual effort, and scale compliance operations across multiple frameworks We’d love to hear from you if you have: 5+ years of hands-on experience in security compliance, security assurance, IT audit, or compliance engineering Experience with security compliance frameworks, including FedRAMP, SOC 2, ISO 27001, and NIST 800-53, designing, implementing, and testing technical security controls in SaaS or cloud environments Experience testing security controls for design and operating performance, including surfacing gaps and confirming fixes Understanding of cloud security concepts, including identity and access management, vulnerability management, logging, and security configurations Experience working with engineering teams to implement compliance requirements as technical solutions Experience with JSON, REST APIs, and automation, applied to compliance engineering challenges While it’s not required, it’s an added plus if you also have: Experience developing JSON-based control definitions, JSON Schema, or machine-readable compliance documentation, and REST API integrations and custom automation workflows Familiarity with Open Security Controls Assessment Language (OSCAL) Proficiency in Python or similar scripting languages for compliance automation, including experience with compliance automation platforms and automated evidence collection Experience using Git, version control, and collaborative development workflows Hands-on experience with cloud security technologies, particularly AWS At Figma, one of our values is Grow as you go. We believe in hiring smart, curious people who are excited to learn and develop their skills. If you’re excited about this role but your past experience doesn’t align perfectly with the points outlined in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles. Pay Transparency Disclosure Job level and actual compensation will be decided based on factors including, but not limited to, individual qualifications objectively assessed during the interview process (including skills and prior relevant experience, potential impact, and scope of role), market demands, and specific work location. Figma offers equity to employees, as well as a competitive package of additional benefits, including health, dental, and vision coverage; retirement benefits with company contributions; parental leave and reproductive or family planning support; mental health and wellness benefits; and paid time off. Figma provides paid sick leave, holidays, and other leave benefits in compliance with applicable federal, state, and local laws, including the requirements of the Washington Minimum Wage Act and related regulations. Exempt employees are eligible for employer‑provided paid flexible PTO in addition to flexible paid sick leave. PTO is subject to manager approval. Additional benefits may include company recharge days, cell phone and home internet reimbursements, and a number of lifestyle spending accounts. Figma also offers sales incentive compensation for most sales roles and an annual bonus plan for eligible non-sales roles. All compensation and benefits are subject to applicable plan terms and may be modified by Figma at any time, consistent with applicable law. Annual Base Salary Range: $169,000 — $296,000 USD At Figma we celebrate and support our differences. We know employing a team rich in diverse thoughts, experiences, and opinions allows our employees, our product and our community to flourish. Figma is an equal opportunity workplace - we are dedicated to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity/expression, veteran status , or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. We will work to ensure individuals with disabilities are provided reasonable accommodation to apply for a role, participate in the interview process, perform essential job functions, and receive other benefits and privileges of employment. If you require accommodation, please reach out to accommodations-ext@figma.com . These modifications enable an individual with a disability to have an equal opportunity not only to get a job, but successfully perform their job tasks to the same extent as people without disabilities. Examples of accommodations include but are not limited to: Holding interviews in an accessible location Enabling closed captioning on video conferencing Ensuring all written communication be compatible with screen readers Changing the mode or format of interviews To ensure the integrity of our hiring process and facilitate a more personal connection, we require all candidates keep their cameras on during video interviews. Additionally, if hired you will be required to attend in person onboarding. By applying for this job, the candidate acknowledges and agrees that any personal data contained in their application or supporting materials will be processed in accordance with Figma's Candidate Privacy Notice . Application limits: To help candidates focus on the opportunities most relevant to their skills and experience, Figma limits the number and frequency of applications. These limits apply to all roles: Candidates may submit up to 5 applications during any rolling 30-day period. Candidates may not reapply to the same role while an application is active or within 90 days of receiving a rejection. Once the applicable days has passed, candidates are welcome to apply again.

Location: San Francisco, CA | New York City, NY About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Anthropic is growing fast, and our SOX program needs to keep up. Many of the controls that matter for financial reporting run on engineering systems: who can access production and financial systems, how code changes are reviewed and deployed, and how usage is metered and billed. We’re hiring a Technical Program Manager to own the technology side of our SOX program. You'll work across engineering, security, GRC, Finance, and Internal Audit to design and run IT controls, drive gaps to closure, and make compliance lighter for engineering teams. You’ll also use Claude to automate evidence collection and control testing, so the program scales without more manual work. Responsibilities Own the technology side of the SOX program end-to-end, from planning and control design through evidence, testing, remediation, and year-end reporting Work with engineering teams to design and roll out IT general controls and IT application controls Work with engineering teams to build Claude-based workflows, tools, and dashboards to automate evidence collection, control testing, and monitoring that warns engineering teams about compliance issues before an audit finds them Lead large SOX projects, such as bringing new systems into scope, with clear success criteria, dependencies, and delivery dates Turn control requirements into concrete engineering work with clear scope, owners, and deadlines, and a design that fits how our teams already build and ship Build processes to evaluate new products, systems, and major engineering changes for SOX impact before they ship, so the right controls are in place from the start Build strong working relationships with engineering control owners, help them understand what their controls require, and support them in producing evidence for auditor requests Investigate control failures down to root cause, and drive engineering teams to fix them in time for the fix to be tested Help keep an up-to-date list of the systems, apps, and infrastructure in SOX scope, with an owner named for each control Track system migrations and scope changes, and make sure controls are updated as systems move Build metrics and dashboards on control health, open findings, and remediation progress Give regular updates on program status, risks, and remediation to technical leadership Keep improving the program: simplify control processes, remove manual steps, and raise the share of controls that run cleanly You may be a good fit if you Have 7+ years of experience in technical program management, IT audit, or technology compliance, with a focus on SOX and IT general controls Have run or supported a SOX program at a public or pre-IPO company Have used automation or AI tools to make compliance work faster and more reliable Know IT general controls and IT application controls in depth, including access management, change management, and application controls, and how they support financial reporting Have worked closely with external auditors Understand cloud infrastructure and engineering workflows, such as code review, CI/CD, and cloud access, well enough to work through a control design with an engineer Can explain technical risks and control gaps clearly to executives and other non-technical audiences Are comfortable driving outcomes across engineering, finance, and audit teams that don't report to you Strong candidates may also have A background in software, systems, or security engineering Hands-on experience building with Claude Code or other AI tools Experience with automated controls in revenue or order-to-cash systems, such as billing and usage metering Experience with financial systems such as ERP and billing platforms, and the controls around them Experience building or rebuilding a SOX program at a fast-growing company Familiarity with other security and IT frameworks, such as NIST or ISO 27001 The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $290,000 — $365,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. For roles performing work in California: We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: San Francisco, CA • New York, NY • United States Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! Figma's Governance, Risk, and Compliance team is the foundation of how we build and maintain trust - with our users, regulators, business partners, and the organizations that rely on Figma every day. We work across the organization and drive programs that ensure the effectiveness of our security protections, identify and manage risk, maintain compliance, and build trust with our customers. We're looking for a Governance, Risk and Compliance Director to lead this team through its next phase of growth. You'll own Figma's security compliance, risk management, and governance strategy end to end - setting direction for our certification portfolio, building the risk and controls frameworks that scale with our growing business and product suite, and representing GRC to executives, the board, customers, and regulators. This is a hands-on leadership role where you'll manage and grow a team of GRC professionals while staying close to the programs, infrastructure, audits, and cross-functional relationships needed to both protect and enable the business. If you're a strategist and team builder who is excited to scale Figma's GRC program in a rapidly evolving environment, we'd love to hear from you! This is a full time role that can be held from one of our US hubs or remotely in the United States. What you'll do at Figma: Set the strategy and roadmap for Figma's GRC program, aligning compliance, risk, and governance priorities with company objectives and the Security leadership team Own Figma's certification and compliance portfolio, including SOC 2, ISO 27001, FedRAMP, SOX ITGC, and GDPR, and expand coverage as Figma enters new markets and customer segments Lead and grow a team of compliance, risk, and governance professionals, setting priorities, developing talent, and building a culture of rigor and pragmatism Build and evolve enterprise risk and controls frameworks — including AI Governance, Risk and Compliance initiatives and control effectiveness monitoring — that scale across technical and business stakeholders Manage relationships with external auditors, assessors, and regulators, and oversee audit cycles from planning through remediation Direct the selection and optimization of GRC platforms and tooling, and maintain the lifecycle of security policies, standards, and procedures Partner with Sales, Legal, and Customer Trust on security questionnaires, customer audits, contracts, and trust-related communications that support the sales lifecycle Scale enterprise risk reporting and report on program health, risk posture, and audit readiness to executive and board-level audiences We'd love to hear from you if you have: 10+ years of experience in information security, compliance, or risk management, including at least 4 years leading or managing a GRC, security, or compliance team Deep, hands-on experience with frameworks such as SOC 2 and ISO 27001, including leading programs through multiple audit cycles A track record of building GRC programs from the ground up or scaling them through high-growth stages, ideally at a SaaS or platform company, including experience operating in a public company environment with SOX ITGC requirements Executive presence and exceptional written and verbal communication skills, with demonstrated ability to build cross-functional partnerships across Security, Legal, IT, Sales, and Engineering and translate technical risk into business terms for executives, the board, and customers Experience implementing compliance programs for emerging products, including AI-enabled products, with a strong understanding of cloud-based technologies and their GRC implications, and a builder's mindset comfortable with ambiguity as the program scales While it's not required, it's an added plus if you also have: Supported FedRAMP authorization, SSP development, 3PAO coordination, or continuous monitoring activities Experience with global privacy and data protection regulations, such as GDPR or NIS2 Security or risk certifications such as CISSP, CISA, CISM, or CRISC Hands-on experience implementing or administering GRC platforms such as Vanta, Drata, or similar tools Experience presenting to boards, steering committees, and audit committees At Figma, one of our values is Grow as you go. We believe in hiring smart, curious people who are excited to learn and develop their skills. If you’re excited about this role but your past experience doesn’t align perfectly with the points outlined in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles. Pay Transparency Disclosure Job level and actual compensation will be decided based on factors including, but not limited to, individual qualifications objectively assessed during the interview process (including skills and prior relevant experience, potential impact, and scope of role), market demands, and specific work location. Figma offers equity to employees, as well as a competitive package of additional benefits, including health, dental, and vision coverage; retirement benefits with company contributions; parental leave and reproductive or family planning support; mental health and wellness benefits; and paid time off. Figma provides paid sick leave, holidays, and other leave benefits in compliance with applicable federal, state, and local laws, including the requirements of the Washington Minimum Wage Act and related regulations. Exempt employees are eligible for employer‑provided paid flexible PTO in addition to flexible paid sick leave. PTO is subject to manager approval. Additional benefits may include company recharge days, cell phone and home internet reimbursements, and a number of lifestyle spending accounts. Figma also offers sales incentive compensation for most sales roles and an annual bonus plan for eligible non-sales roles. All compensation and benefits are subject to applicable plan terms and may be modified by Figma at any time, consistent with applicable law. Annual Base Salary Range: $235,000 — $317,000 USD At Figma we celebrate and support our differences. We know employing a team rich in diverse thoughts, experiences, and opinions allows our employees, our product and our community to flourish. Figma is an equal opportunity workplace - we are dedicated to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity/expression, veteran status , or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. We will work to ensure individuals with disabilities are provided reasonable accommodation to apply for a role, participate in the interview process, perform essential job functions, and receive other benefits and privileges of employment. If you require accommodation, please reach out to accommodations-ext@figma.com . These modifications enable an individual with a disability to have an equal opportunity not only to get a job, but successfully perform their job tasks to the same extent as people without disabilities. Examples of accommodations include but are not limited to: Holding interviews in an accessible location Enabling closed captioning on video conferencing Ensuring all written communication be compatible with screen readers Changing the mode or format of interviews To ensure the integrity of our hiring process and facilitate a more personal connection, we require all candidates keep their cameras on during video interviews. Additionally, if hired you will be required to attend in person onboarding. By applying for this job, the candidate acknowledges and agrees that any personal data contained in their application or supporting materials will be processed in accordance with Figma's Candidate Privacy Notice . Application limits: To help candidates focus on the opportunities most relevant to their skills and experience, Figma limits the number and frequency of applications. These limits apply to all roles: Candidates may submit up to 5 applications during any rolling 30-day period. Candidates may not reapply to the same role while an application is active or within 90 days of receiving a rejection. Once the applicable days has passed, candidates are welcome to apply again.

Location: United States Workplace: Remote WHO WE ARE GreenLight.ai http://GreenLight.ai provides global, enterprise-grade workforce infrastructure for enterprise contingent workforce programs and talent platforms. We combine Employer of Record (EOR), Agent of Record (AOR), freelancer management (FMS), and intelligent worker classification with technology that connects directly to our clients’ workforce systems. Trusted by some of the world’s most highly recognized and innovative companies, we help clients engage and manage their extended workforce across the US and internationally. Compliance is central to our service, our technology, and the trust our clients place in us. THE OPPORTUNITY You will lead GreenLight’s legal and compliance function and serve as a hands-on member of our leadership team. Your mandate is to protect the business, support growth, and turn complex workforce regulations into practical decisions, scalable processes, and product capabilities. You will work directly with the CEO and partner with product, engineering, HR, payroll, operations, and commercial teams. You will own legal standards and compliance oversight, support functional leaders in implementing them, and manage our US and international outside counsel. This role combines deep workforce expertise with commercial judgment and the ability to build systems that scale. WHAT YOU WILL DO - Lead workforce compliance. Own our compliance framework for EOR, AOR, and independent contractor engagements, including worker classification, wage and hour, exempt status, and co-employment risk. Establish clear policies, controls, escalation routes, and audit processes. - Strengthen classification. Oversee classification assessments, quality review, reassessment triggers, and decision records. Train relevant teams and develop practical guidance for clients and workers. - Shape the product. Translate regulatory requirements into classification rules, onboarding controls, workflows, and audit trails. Partner with product and engineering on AI-enabled compliance features, including validation, explainability, and human review. - Manage commercial legal work. Draft and negotiate client, vendor, worker, and international partner agreements. Develop templates and negotiation guidance that support efficient contracting and appropriate allocation of risk, liability, and indemnities. - Coordinate global compliance. Work with local counsel and partners to assess country requirements, licensing, and engagement restrictions. Strengthen partner diligence and oversight as our international business grows. - Manage outside counsel. Select and coordinate US and international specialists, set priorities and service expectations, manage legal spend, and turn their advice into clear business decisions and operational actions. - Handle material legal escalations. Advise HR and delivery teams on significant employee relations matters, disputes, claims, and investigations. Coordinate responses with outside counsel and relevant insurers. - Build broader compliance controls. Partner with operations and technology on worker identity, fraud prevention, workforce data privacy, and responsible AI use, drawing on specialist advice where needed. - Make legal knowledge actionable. Monitor regulatory developments and ensure relevant changes reach our policies, platform, and operating processes. Use AI and legal technology to improve research, contracting, and knowledge management, with verification and confidentiality controls. - Represent GreenLight credibly. Support enterprise diligence, client presentations, and selected webinars and industry events. Review external claims and help develop useful, accurate compliance content. WHAT YOU BRING - Relevant legal experience. Typically 8 or more years in employment law, workforce compliance, and related commercial matters, with substantial responsibility for practical business advice. We will consider exceptional candidates with less experience. - Legal qualifications. A JD or equivalent law degree and active membership in good standing with a US state bar. - Workforce expertise. Deep knowledge of US employment law and worker classification, including complex multi-state workforces, and experience coordinating international legal advice. - Commercial and operational judgment. Evidence of negotiating business agreements, implementing compliance processes, and making clear, proportionate recommendations under time pressure. - Technology fluency. Ability to translate legal requirements into product and workflow changes, plus practical experience using AI or legal technology and evaluating its outputs. - Leadership and communication. Ability to manage outside counsel, influence colleagues, and explain complex issues clearly to enterprise clients and hiring managers. Willingness to develop a credible public voice in workforce compliance. - Builder mentality. Identify gaps, recommend solutions, and play an active part in implementing improvements. Experience in staffing, EOR/AOR services, contingent workforce programs, talent marketplaces, or workforce technology is particularly valuable. In-house experience and experience building a legal or compliance function are strong advantages. WHAT SUCCESS LOOKS LIKE In your first year, you will establish a prioritized compliance roadmap, strengthen classification and international partner controls, improve enterprise contracting, and make regulatory updates actionable across our platform and operations. Teams will understand their responsibilities and know when and how to escalate material risks. WHY JOIN GREENLIGHT You will have direct access to the CEO, a meaningful voice in product and business decisions, and the opportunity to shape how leading organizations manage their extended workforce. We offer flexible working arrangements, benefits, and a home office stipend. HOW WE WILL ASSESS CANDIDATES We will focus on demonstrated judgment and results: how you have resolved difficult workforce issues, improved processes, managed counsel, and helped a business move forward responsibly. Our process will include discussion of your experience and a short practical case exercise.

Location: Singapore, Singapore OKX will be prioritising applicants who have a current right to work in Singapore, and do not require OKX's sponsorship of a visa. Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About The Opportunity We are looking for Mobile Engineers to join our Compliance engineering team. In this role, you will build secure, regulation-compliant, and high-trust mobile solutions that power global onboarding, identity verification, risk control, and regulatory compliance systems. We are open to candidates across a wide spectrum of experience. Whether you are an engineer early in your career eager to master mobile security and regulatory technology, or a seasoned practitioner who can architect resilient systems and drive technical direction across global markets, you will find high impact and technical depth here. You should be self-driven, hungry to grow, and motivated by solving critical real-world engineering challenges. What You'll Be Doing Build, maintain, and scale native iOS features and user flows using Swift and modern iOS frameworks. Collaborate with Product, Design, and Backend Engineering to translate functional requirements into smooth, responsive mobile experiences. Integrate third-party SDKs, native frameworks, and hardware capabilities (such as camera APIs, biometrics, or local security features) with a focus on UX and performance. Contribute to mobile client architecture, keeping the codebase modular, testable, and maintainable. Participate in code reviews, testing, and continuous optimization to maintain high iOS engineering standards. Leverage modern development tools and AI coding assistants to streamline your daily workflow and accelerate delivery. Diagnose and fix edge cases, performance bottlenecks, and production bugs to ensure a rock-solid iOS app experience. What We Look For In You Hands-on native iOS engineering experience with Swift, SwiftUI, and UIKit . Solid grasp of software engineering principles, memory management, multithreading, and mobile system design. Experience integrating RESTful APIs into production iOS applications. Commitment to writing clean, well-tested, and maintainable code. Strong problem-solving mindset with a desire to build high-quality software. Openness to using modern developer tools and AI coding assistants (e.g., Claude Code, Codex) in your everyday coding workflow. Nice-To-Haves Exposure to mobile CI/CD pipelines (e.g., Fastlane, GitHub Actions, Xcode Cloud). Experience working with modular iOS architectures or building internal shared SDKs/frameworks. Familiarity with unit testing frameworks (XCTest) and UI testing on iOS. Experience with feature flagging, analytics, or A/B experimentation frameworks. Perks & Benefits Competitive total compensation package L&D programs and Education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! #LI-ML1 #LI-ONSITE Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Location: EMEA; Remote Roles - EMEA Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OK Pay and more. About the Team The Compliance Department at OKX is responsible for promoting a strong compliance culture and supporting the business in meeting its regulatory obligations and managing enterprise risk. The Marketing Compliance function develops and applies standards for marketing and external communications across the markets in which OKX operates. Its remit covers advertising, promotions, social media, influencers and affiliates activity, and product launch communications for CeFi and DeFi offerings, from campaign planning through approval and post-campaign review. We work with Marketing, Product, Legal, Risk, and Compliance teams to assess regulatory requirements, put practical risk-based controls in place, and support timely and compliant go-to-market execution. About the Opportunity We are looking for a strong leader to join our compliance team and continue building out our marketing compliance function. This role will involve building a marketing control framework supported by policies and procedures, developing review and approval processes, and working closely with Product, Marketing, and Legal teams to ensure marketing communications and initiatives comply with applicable laws, regulations, and internal standards. This role blends strategic oversight with hands-on involvement in marketing lifecycle governance, from ideation through execution and post-campaign review and ongoing monitoring. The ideal candidate is a forward-thinking compliance leader who can balance regulatory rigor with business enablement in a fast-paced, high-growth environment. What You’ll Be Doing Lead a marketing compliance function and scale up the team. Design and implement a scalable global compliance framework supported by policies and procedures governing marketing and external communications, including advertising, promotions, social media, and product launch communications. Develop and maintain marketing compliance policies and procedures tailored to the unique risks associated with both CeFi and DeFi offerings. Work closely with Legal and Compliance teams to define and operationalize a review and approval process for marketing and product communications, ensuring timely and compliant go-to-market execution. Establish a robust and effective ongoing post-publication monitoring program to ensure that post-campaign marketing materials (including social media and engagement with influencers/KOLs and affiliates) and lookbacks adhere to global and local marketing standards. Leverage AI-enabled technological solutions to develop a holistic global marketing compliance controls framework that can scale appropriately with the business’ growth. Track, report, and remediate incidents or issues arising from marketing activities. Monitor global regulatory developments relevant to crypto marketing and advertising. Proactively assess and implement required changes to the marketing compliance program based on regulatory updates. Partner with Product, Legal, Risk, Central Compliance and Marketing teams to ensure all product launch communications and campaigns are fully compliant with global regulations and company policies. Support the business in making decisions while considering regulatory risks and compliance obligations. Develop materials to improve understanding of compliance and regulatory risks across teams and deliver regular training and knowledge-sharing sessions. What We Look For Experience as a lead in compliance, legal, or marketing compliance roles, ideally within financial services or fintech. Ability to multi-task and work in a high-paced environment. Deep understanding of marketing regulations and standards across key jurisdictions (e.g., US, UK, EU, APAC). Experience in crypto, blockchain, or digital assets, with strong familiarity with both CeFi and DeFi ecosystems. Proven ability to design and implement compliance frameworks and controls from scratch. Excellent stakeholder management and communications skills across global and cross-functional teams. Experience engaging with regulatory bodies or supporting regulatory audits or exams. Prior experience in a high-growth tech or startup environment. Perks & Benefits Competitive total compensation package L&D programs and Education subsidy for employees' growth and development Various team building programs and company events More that we love to tell you along the process! Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Location: Subang Jaya, Malaysia Workplace: hybrid Knauf stands for opportunity. We know that opportunity looks different to each person, and we are proud that we see opportunity in everyone. This exciting role within the Legal department could be the perfect next opportunity for you to build a unique career, in a values-led culture with a clear purpose of making tomorrow a home for all of us. We are a family-owned global manufacturer of construction materials and within our Group, our 43,500 team members in 90 countries across 320 sites provide a huge opportunity for anyone with ambition and energy. We value everyone's contribution equally and we ask that you bring your whole self to work, to enrich the business further, as together we achieve more in a safe and inclusive environment. In Asia Pacific, since the 1990s Knauf has been established as a leading and trusted brand for drywall products and system solutions. Today, with over 5,500 experienced, talented, and diversified people operating nearly 35 production facilities and offices across the region, coupled with an extensive expertise-backed sales and support network, our teams deliver the best of Knauf to our customers, while supporting positive changes to the industry and communities where we operate – in Australia, China, Korea, Japan, India, Thailand, Indonesia, Vietnam, Philippines, Malaysia, Singapore, Central Asia, and the Caucasus. Reporting into APAC General Counsel, we are searching for a team member to join us as Legal and Compliance Counsel . Can you say yes? Reporting to the APAC General Counsel, the APAC Legal and Compliance Counsel is pivotal in navigating complex local regulations and ensuring the company’s adherence to legal standards. Key responsibilities include providing advice and pragmatic solutions to pre-empt and address legal challenges unique to the company, conducting thorough risk assessments, managing compliance audits, and implementing effective legal strategies. Acting as a business partner and working with stakeholders from all levels in the Gypsum APAC region. The role will help those seeking to develop leadership and project management skills to lead legal and compliance initiatives and interact cross-functionally, enhancing both legal acumen and managerial expertise. What you will be doing Legal Advice and Guidance: Provide pragmatic legal advice and support to the company on various legal matters, including contract review, negotiation, dispute resolution, intellectual property and company secretarial related. Policy Support and Implementation: Draft, update, and implement policies for key compliance areas, including personal data protection, anti-trust, anti-bribery and corruption, sanctions, gift and donations, conflict of interest and other compliance matters etc. under the guidance of the APAC General Counsel. Develop and implement Compliance framework and programs across the APAC region. Legal and Compliance Processes Development: Establish and implement related procedures and processes tailored to the company’s businesses and operations, to enhance efficiency, effectiveness, and alignment with best practices. Provide trainings to the stakeholders and local markets for adoption. Regulatory Monitoring: Conduct and keep abreast of any new or emerging laws and regulations applicable to the APAC region, notify such changes to the relevant stakeholders including preparing regular updates, and recommend any necessary actions for compliance purpose. Risks Mitigation: Proactively identify emerging legal and compliance risks, providing strategic recommendations to minimize potential impacts on the business. Compliance Culture Building and Strengthening: Foster a strong compliance culture and raise compliance awareness across the APAC region. Develop and initiate engagement activity to increase employees’ awareness. Legal and Compliance Training: Prepare training materials and conduct effective training on legal and compliance topics from time to time. Compliance Audits: Conduct regular reviews and audits to assess level of compliance, identify gaps and areas for improvement. Local Business Units Collaboration and Support: Act as the point of contact as the legal and compliance personnel in the local business units and provide support as and when required. Legal and Compliance Reporting: Prepare and compile the APAC legal and compliance reports for senior management. What we would love for you to have Bachelor’s degree in law (LLB) or equivalent Solid general legal background, with between 5 to 8 years of experience in a reputable law firm and/or in-house. Strong technical, drafting, research and analytical skills with practical commercial acumen. Experience in implementing Compliance programs, policies and procedures is an added advantage. Able to collaborate and influence stakeholders positively. Able to work independently, Highly detail-oriented and meticulous. Ability to engage confidently and effectively with different people across different seniorities, expertise, roles and culture. Willingness to take on leadership roles in Legal and Compliance projects. Good presentation and training skills – able to present Legal and Compliance related topics clearly to non-legal stakeholders. Skill in content creation tool (such as Canva) would be an added advantage. Uses creative approaches to present legal and compliance knowledge in an engaging, user-friendly way. What happens next? Your application will be reviewed by our Hiring Team to determine if your experiences and skills are what we are looking for in the role. If you are, our Talent Acquisition representative will contact you promptly to arrange for next steps.

Location: Remote Who we are Our mission is to bring clarity and control to the world's most complex codebases. AI is accelerating code creation, but the infrastructure to understand, oversee, and evolve that code hasn't kept pace. Sourcegraph gives engineering organizations full visibility across their systems, precise context for their agents, and the ability to execute coordinated code changes at scale. As agentic development becomes the dominant engineering paradigm, we provide the context layer teams need to take control of their codebase. With Code Search, Deep Search, MCP, and Agentic Batch Changes, we deliver on that mission today - giving engineering teams and their AI tools the cross-repo context to navigate massive codebases with confidence, and the ability to make changes across hundreds of repositories at once. Companies like Stripe, Reddit, and Leidos rely on Sourcegraph to ship faster and with higher quality. We're backed by a16z, Sequoia, and Redpoint, and proud to operate as a globally distributed team that values high agency, direct communication, and customer love. If you want to build the infrastructure that lets every engineering team - and every agent they deploy - operate on their codebase with confidence, join us. Hours & location 🌎 While we hire almost anywhere in the world, we have a preference for someone to reside in the following locations for this role. However, if you feel qualified, we welcome you to apply regardless of location. No matter what, working hours must overlap with GMT-3 for at least 20 hours/week. Preferred locations: USA Why this job is exciting As our Compliance Manager, you will own and drive Sourcegraph’s governance, risk, and compliance program, with a primary focus on compliance. This is a highly cross-functional role that works closely with Security, Engineering, IT, Legal, People, Sales, and other teams across the company. You will be responsible for maintaining and evolving our compliance program, including owning certifications such as SOC 2 and ISO 27001 and preparing Sourcegraph for additional frameworks as the business grows. This is not a role where you will simply coordinate work across a large compliance organization. We are looking for someone who has personally owned audit and certification programs end to end: designing and tailoring controls, collecting evidence, training internal teams, working directly with auditors, managing remediation, and driving follow-up work through completion. 📅 Within one month, you will… You will build strong working relationships across Security, Engineering, IT, Legal, People, Sales, and other key stakeholders. You will develop a clear understanding of Sourcegraph’s existing governance, risk, and compliance program, including our ISMS, risk register, controls, certifications, audit processes, and current areas of focus. You will understand how our SOC 2 and ISO 27001 programs operate today, including key owners, evidence requirements, open risks, and upcoming milestones. You will begin participating directly in day-to-day compliance activities and identify opportunities to improve or simplify existing processes. 📅 Within three months, you will… You will have taken ownership of Sourcegraph’s ongoing SOC 2 and ISO 27001 compliance programs. You will independently manage key audit activities, including control testing, evidence collection, stakeholder coordination, auditor requests, findings, and remediation. You will evaluate existing controls and tailor them to Sourcegraph’s environment rather than relying on overly prescriptive or generic auditor recommendations. You will actively maintain Sourcegraph’s risk register, ISMS processes, policies, and compliance documentation. You will help internal teams understand their compliance responsibilities and provide practical guidance that allows them to meet requirements without creating unnecessary process. You will support customer-facing compliance activities, including security questionnaires and compliance-related questions from prospective and existing customers. 📅 Within six months, you will… You will have successfully led Sourcegraph through an audit or major certification milestone. You will own the operating rhythm of the GRC program, including ISMS meetings, risk management activities, control reviews, documentation updates, and audit preparation. You will have established a forward-looking compliance roadmap covering renewals, upcoming audits, new frameworks, regulatory requirements, and opportunities to improve how the program operates. You will be able to independently identify control gaps or deficiencies, assess their risk, recommend practical solutions, and drive remediation with both technical and non-technical stakeholders. You will have introduced automation, AI, or other process improvements that reduce manual compliance work while maintaining or improving program quality. About you You have built or operated compliance programs in a fast-moving technology environment and have personally owned major compliance initiatives from beginning to end. You are comfortable operating independently, getting into the details, and doing the work yourself while coordinating with stakeholders across the organization. You understand that frameworks such as SOC 2 and ISO 27001 define requirements but often leave significant flexibility in how an organization satisfies them, and you know how to translate those requirements into controls that fit the business. You are also comfortable working with technical teams and modern cloud environments. You can understand enough about infrastructure, systems, access controls, software development, and security processes to ask the right questions and effectively translate between auditors and technical teams. 5+ years of experience in governance, risk, compliance, information security compliance, or a related role. Demonstrated end-to-end ownership of SOC 2 and ISO 27001 programs, ideally within a SaaS, technology startup, or similarly fast-moving environment. Experience personally managing external audits and certification processes, including audit preparation, evidence collection, control testing, stakeholder training, auditor interaction, remediation, and follow-up. Strong understanding of risk management, control design, ISMS governance, and compliance program operations. Experience adapting compliance controls to an organization's actual environment rather than applying generic or overly prescriptive requirements. Familiarity with cloud-based technology environments and the security and compliance considerations associated with a distributed or remote workforce. Strong project management and organizational skills with the ability to drive cross-functional initiatives from inception through completion. Excellent written and verbal communication skills and the ability to explain compliance requirements clearly to both technical and non-technical audiences. A hands-on mindset and willingness to personally execute the work required to keep the compliance program operating effectively. Curiosity about AI, automation, and emerging technology, with an interest in using new tools to improve compliance workflows. Nice-to-haves: Experience with additional security, privacy, or compliance frameworks such as GDPR, HIPAA, HITRUST, FedRAMP, FISMA, PCI DSS, or related standards. Experience supporting security questionnaires, customer assurance processes, or sales-related compliance activities. Experience with GRC platforms, compliance automation tools, or building internal automation for evidence collection and control monitoring. Relevant certifications such as CISA, CISSP, ISO 27001 Lead Implementer or Lead Auditor, CRISC, or similar credentials. Level 📊 This job is an IC3. You can read more about our job leveling philosophy in our Handbook. Compensation We pay above-market salaries because we want to hire exceptional people who can focus on building great products, not worrying about paying bills. As an open and transparent company, our compensation philosophy and pay bands are visible to every Sourcegraph teammate, and we strive to make our approach equitable, explainable, and competitive. Your base salary is determined by the IC3 pay band for your location zone (1-4). Our pay bands are informed by market data and designed to ensure competitive compensation wherever you live. During the recruiting process, we'll discuss the range applicable to you based on job level, relevant skills, experience, qualifications, and location zone. The starting salary for the IC3 pay band in each zone is: Zone 2: $137,718 USD Zone 3: $102,899 USD In addition to competitive cash compensation, we offer meaningful equity (because when Sourcegraph succeeds, we want you to succeed, too) and generous perks & benefits . Interview process Below is the interview process you can expect for this role (you can read more about the types of interviews in our Handbook). It may look like a lot of steps, but rest assured that we move quickly and the steps are designed to help you get the information needed to determine if we’re the right fit for you… Interviewing is a two-way street, after all! We expect the interview process to take 5 hours in total. 👋 Introduction Stage - we have initial conversations to get to know you better… [30m] Recruiter Screen [30m] Hiring Manager Screen 🧑‍💻 Team Interview Stage - we then delve into your experience in more depth and introduce you to members of the team, including cross-functional partners… [Async] Working assignment [60m] Assignment Walkthrough + Review [60m] Resume Deep Dive [60m] Technical Interview 🎉 Final Interview Stage - we move you to our final round, where you gain a better understanding of our business and values holistically… [30m] Values [30m] Leadership We check references and conduct your background check Please note - you are welcome to request additional conversations with anyone you would like to meet, but didn’t get to meet during the interview process. Learn more about us You can learn more about what it is like to work at Sourcegraph by reading our handbook . We are an ambitious team who are collectively working hard to build the most influential company in the world. You can read more about our culture , competitive compensation and benefits here. Sourcegraph is an equal opportunity workplace; we welcome people from all backgrounds. Sourcegraph participates in E-Verify for U.S. Employees.

Задачи: — Работа в Legal Department. Требования: — Опыт 3–5 лет в legal/compliance, желательно в fintech, financial services или brokerage. — Юридическое образование. — Опыт работы с договорами. — Знания Compliance, KYC/AML, due diligence. — Знания GDPR / Data Protection. — Хороший уровень английского языка. — Опыт работы с regulatory matters. Будет плюсом: — Опыт с Cyprus/EU regulation, licensing, M&A и несколькими юридическими лицами.

Задачи: • Работа с коммерческими соглашениями и контрактами • Вопросы корпоративного и регуляторного характера • KYC/AML и проверка контрагентов • GDPR и защита данных • Лицензирование и регуляторные запросы • ICT и аутсорсинговые соглашения • Внутренние политики и документация по комплаенсу • Поддержка нескольких групп компаний в разных юрисдикциях Требования: • 3–5 лет релевантного юридического опыта • Диплом в области права • Опыт составления и проверки коммерческих договоров • Практический опыт в области комплаенса, KYC/AML и проверки контрагентов • Хорошее знание GDPR / защиты данных • Опыт работы с регуляторными требованиями в финтехе, финансовых услугах, брокерских или смежных технологических компаниях • Свободное владение английским языком (письменно и устно) • Практический, самостоятельный и ориентированный на бизнес подход Условия: • Конкурентная зарплата • Частная медицинская страховка • Поддержка при релокации • Помощь с адаптацией на Кипре • Компенсация спортивных и оздоровительных расходов • Занятия по греческому языку • Дополнительные льготы и комфортная офисная среда Дополнительно приветствуется опыт работы с регулированием инвестиционных фирм Кипра/ЕС, лицензированием, регуляторными подачами, сделками M&A или мультиюрисдикционными юридическими лицами.