Вакансии

Location: Remote - Americas Who We Are: Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more. Amongst our subsidiaries, Alpaca is a licensed financial services company, serving hundreds of financial institutions across 40 countries with our institutional-grade APIs. This includes broker-dealers, investment advisors, wealth managers, hedge funds, and crypto exchanges, totalling over 10 million brokerage accounts. Our global team is a diverse group of experienced engineers, traders, and brokerage professionals who are working to achieve our mission of opening financial services to everyone on the planet. We're deeply committed to open-source contributions and fostering a vibrant community, continuously enhancing our award-winning, developer-friendly API and the robust infrastructure behind it. Alpaca is proudly backed by $400 million in funding from top-tier global investors including Portage Ventures, Spark Capital, Tribe Capital, Social Leverage, Horizons Ventures, Opera Tech Ventures, SBI Group, Derayah Financial, Unbound, Peak XV, Elefund, and Y Combinator. Our Team Members: We're a dynamic team of 400+ globally distributed members who thrive working from our favorite places around the world, with teammates spanning the USA, Canada, Japan, Hungary, Nigeria, Brazil, the UK, and beyond! We're searching for passionate individuals eager to contribute to Alpaca's rapid growth. If you align with our core values—Stay Curious, Have Empathy, and Be Accountable—and are ready to make a significant impact, we encourage you to apply. Your Role: We are seeking an IT Security Engineer to own the security standards and controls that protect Alpaca’s workforce identities, endpoints, and critical business systems. The scope includes identity and access management, single sign-on, privileged access, multi-factor authentication, endpoint security, secure network access, and email security. You will maintain those standards, measure how the controls are working, and partner with IT, who run devices and day-to-day administration. This role reports to the Enterprise Security Architect and works closely with IT, DevOps, Engineering, GRC, and the wider Security team. The Security Team is 100% distributed and remote. Things You Get To Do: The core responsibilities of the IT Security Engineer are focused on identity security, endpoint security, email and domain protection, and measurable control enforcement. Identity and Access Security: IAM and SSO Standards: Define and maintain security standards for SSO and conditional access across cloud, SaaS, and internal systems. Multi-Factor Authentication: Own multi-factor authentication standards, including phishing-resistant methods, and keep them enforced. Privileged Access: Maintain privileged-access standards, approval policies, and periodic access reviews with system owners. Joiner, Mover, Leaver: Partner with IT and People teams so access changes are timely, complete, and auditable. Endpoint, Email, and Domain Security: EDR Policy: Own endpoint detection and response policy and tuning, with IT handling deployment. Device Posture: Maintain device-posture and secure network access requirements for access to business applications. Control Measurement: Measure identity and endpoint controls and follow up where they are not met. Detection Partnership: Work with Security Operations on identity, endpoint, and email detections and response playbooks. Admin Access: Maintain security baselines for administrator access to critical SaaS platforms and vendor accounts. Vendor Security Events: Assess the identity and account impact when a SaaS provider or vendor reports a security event. Email Security: Own email authentication standards and email security configuration. Domain Protection: Maintain security standards for company domains and for monitoring lookalike domains. Phishing Response: Triage reported phishing and coordinate takedowns. Incident Response and Collaboration: Incident Support: Lead the identity, endpoint, and email aspects of security incidents, including account containment. On-Call: Participate in the Security Operations on-call rotation after onboarding and cross-training. Enablement: Give IT and employees clear guidance on security requirements, so controls are adopted without slowing the business. Who You Are (Must-Haves): Excited about Alpaca’s mission and what we’re building 3+ years of experience in IT security, identity security, or security engineering roles Hands-on experience with an identity provider and SSO, including SAML and OIDC Experience enforcing phishing-resistant MFA, such as FIDO2 or hardware security keys Hands-on experience with an endpoint detection and response platform Scripting or automation experience (Python, Bash, or PowerShell) Experience with zero-trust network access or device-posture controls Working knowledge of email authentication (SPF, DKIM, DMARC) and phishing response Experience working closely with IT teams and translating security requirements into operational workflows Experience investigating identity, endpoint, or email security alerts Willing to participate in an on-call rotation Strong written and verbal communication skills, especially during incidents Comfortable working cross-functionally and handling escalations calmly and decisively Who You Might Be ( Nice-to-Haves): Experience securing financial, trading, or other highly regulated platforms Familiarity with compliance frameworks such as SOC 2 or ISO 27001 Experience with just-in-time privileged access tools Experience securing administrator access to SaaS platforms Experience with password managers and secrets management at company scale Experience with MDM platforms for macOS and Windows Experience with cloud IAM in AWS, GCP, or Azure Ability to balance security rigor with operational efficiency and business needs How We Take Care of You: Competitive Salary & Stock Options Health Benefits New Hire Home-Office Setup: One-time USD $500 Monthly Stipend: USD $150 per month via a Brex Card Alpaca is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse workforce. Recruitment Privacy Policy

Location: Remote - Americas Who We Are: Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more. Amongst our subsidiaries, Alpaca is a licensed financial services company, serving hundreds of financial institutions across 40 countries with our institutional-grade APIs. This includes broker-dealers, investment advisors, wealth managers, hedge funds, and crypto exchanges, totalling over 10 million brokerage accounts. Our global team is a diverse group of experienced engineers, traders, and brokerage professionals who are working to achieve our mission of opening financial services to everyone on the planet. We're deeply committed to open-source contributions and fostering a vibrant community, continuously enhancing our award-winning, developer-friendly API and the robust infrastructure behind it. Alpaca is proudly backed by $400 million in funding from top-tier global investors including Portage Ventures, Spark Capital, Tribe Capital, Social Leverage, Horizons Ventures, Opera Tech Ventures, SBI Group, Derayah Financial, Unbound, Peak XV, Elefund, and Y Combinator. Our Team Members: We're a dynamic team of 400+ globally distributed members who thrive working from our favorite places around the world, with teammates spanning the USA, Canada, Japan, Hungary, Nigeria, Brazil, the UK, and beyond! We're searching for passionate individuals eager to contribute to Alpaca's rapid growth. If you align with our core values—Stay Curious, Have Empathy, and Be Accountable—and are ready to make a significant impact, we encourage you to apply. Your Role: We are seeking an AI Security Engineer to own the technical security controls for how Alpaca uses AI. The scope includes identity for AI agents and automations, security requirements for AI tools and integrations, guardrails, and security logging. You will also assist in developing AI-powered security tooling. You will keep those controls consistent as AI adoption grows, and you will work with the teams building with AI so security is part of the design. This role reports to the Enterprise Security Architect and works closely with AI Enablement, Engineering, DevOps, GRC, and the wider Security team. The Security Team is 100% distributed and remote. Things You Get To Do: The core responsibilities of the AI Security Engineer are focused on AI access controls, secure AI platforms, guardrails, visibility into AI usage, and AI-powered security tooling. AI Identity and Access Controls: Agent Identity: Define how AI agents, bots, and automations authenticate, what they can access, and how their actions are attributed and audited. Tool Access: Own security requirements for AI tool integrations, including least-privilege access and credential handling. AI Assistant Controls: Define and enforce security settings for approved AI tools, including data handling and access policy. Least Privilege: Limit each agent and integration to the access it needs, and review that access when the integration changes. Secure AI Platform, Tooling, and Response: Security Requirements: Define security requirements for internal AI applications, including identity, data handling, secrets, and review of new integrations. Guardrails: Design and implement guardrails for AI applications and agents. Design Reviews: Review new AI applications and integrations for security risks, and give builders clear, practical requirements. Security Tooling: Assist Security Operations in developing AI-powered tooling that supports detection, investigation, and response work. Safe Use in Security: Apply the same identity, data handling, and logging requirements to security team AI tools as to the rest of the company. Telemetry Requirements: Define the security logging AI systems must produce, and work with Security Operations on detection. Approved Use: Maintain visibility into AI tool usage and confirm it follows approved configurations. Incident Support: Lead the AI-specific aspects of security incidents, such as agent misuse or data exposure through AI tools. On-Call: Participate in the Security Operations on-call rotation after onboarding and cross-training. Governance: Standards: Turn AI security standards into technical controls. GRC Partnership: Partner with GRC on AI governance and provide technical evidence for control design. Who You Are (Must-Haves): Excited about Alpaca’s mission and what we’re building 2+ years of experience in security engineering, application security, or cloud security roles Hands-on experience securing LLM applications, AI agents, or AI developer tools Understanding of AI-specific risks, such as prompt injection, data leakage, excessive agency, and insecure tool use (for example, the OWASP Top 10 for LLM Applications) Experience with identity and access controls for services and non-human identities, including OAuth, service accounts, and secrets management Programming experience in Python or another general-purpose language Experience with CI/CD security checks and cloud-native deployments Experience with security operations or incident response Strong written and verbal communication skills, especially when explaining risk to non-security builders Comfortable working cross-functionally and making pragmatic security decisions Willing to participate in an on-call rotation Experience building AI-assisted workflows for security operations Experience building security telemetry for AI systems Who You Might Be ( Nice-to-Haves): Experience securing financial, trading, or other highly regulated platforms Experience securing enterprise AI coding tools and AI integrations Experience with policy-as-code and Kubernetes Familiarity with AI governance frameworks, such as the NIST AI Risk Management Framework or ISO 42001 Ability to balance security rigor with operational efficiency and business needs How We Take Care of You: Competitive Salary & Stock Options Health Benefits New Hire Home-Office Setup: One-time USD $500 Monthly Stipend: USD $150 per month via a Brex Card Alpaca is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse workforce. Recruitment Privacy Policy

Location: Dubai, United Arab Emirates; Riyadh, Saudi Arabia; Beirut, Lebanon; Amman, Jordan; Cairo, Egypt Summary: Müller’s Solutions is looking for a certified SAP Authorization Consultant to join an SAP S/4HANA Public Cloud implementation. You will design and manage user access and security, making sure business roles, restrictions and identity setup are secure, compliant and in line with client job functions. You will work closely with functional consultants and client stakeholders from design through go-live. This is a remote role. Description: Design business roles from SAP templates, based on client job functions and processes Configure business catalogs, business role templates and read/write/value help restrictions Set up SAP Cloud Identity Services (IAS/IPS) for SSO, user provisioning and integration with the client’s identity provider Run segregation of duties (SoD) checks and fix access conflicts Manage user creation, role assignment and access changes through go-live and hypercare Support internal and external audits with access reviews and documentation Document role designs and the security setup, and handle authorization issues and support requests Requirements Requirements: 4+ years of SAP security/authorization experience, with hands-on S/4HANA Public Cloud IAM exposure Valid SAP S/4HANA Cloud Public Edition certification (security certification preferred) Solid knowledge of SAP Cloud Identity Services (IAS/IPS) and SSO setup (SAML, Azure AD / Entra ID) Good understanding of SoD, compliance and audit requirements Experience on at least one S/4HANA Cloud Public Edition implementation Strong communication skills in English and able to work directly with clients remotely Experience with SAP GRC or SAP Cloud IAG is a plus

Location: Remote - US About the Job: LaunchDarkly's Governance, Risk, and Compliance team is hiring a Security Analyst III to facilitate the definition, implementation, and operation of security and privacy programs at LaunchDarkly. LaunchDarkly is critical infrastructure. Our security team keeps it safe for the global systems that depend on us and the GRC team demonstrates that to earn the trust of our customers. As a member of the team, you'll drive initiatives to assess and reduce security risks to the company, advise stakeholders, and maintain compliance with the frameworks that we adhere to including ISO 27001, SOC 2 Type II, and FedRAMP. You'll report to the Director of Security and partner closely with stakeholders in Legal, Revenue, and other members of our security team. We expect you to bring a sharp point of view on where AI can take work off the team's plate and make our coverage deeper. Responsibilities: Collaborate with stakeholders to design and operate security controls that comprise the LaunchDarkly GRC program Use technology to automate compliance activities like gathering evidence and verifying controls Operationalize the health and maturity of the program by tracking metrics based on quantitative and qualitative data Drive progress towards results for GRC -related continuous improvement projects Contribute to documentation for security standards, policies, and processes Support audits and assessments with internal and external stakeholders Work with product and infrastructure delivery teams on engineering projects related to GRC requirements Qualifications: Deep cybersecurity, privacy, and risk management knowledge and skill Excellent communication skills - written and verbal Experience working on collaborative projects Depth with modern cloud-based SaaS organizations - specifically AWS control environments Information security experience at an organization with significant compliance requirements Strong familiarity with security standards (SOC 2, ISO 27001, ISO 27701, FedRAMP) as well as privacy laws ( CCPA and GDPR ) Familiarity with LaunchDarkly’s collaboration tools like Confluence, Slack, and Github Nice to Have: Considerable knowledge of software development and architecture CCSP, PCI QSA , CISSP , or CISA / CISM certifications Qualifications: You're proactive by default. You'd rather spot compliance drift early and fix the cause rather than chase symptoms during an audit. You believe good governance is a craft of habits and systems. Small consistent improvements beat heroic one-offs. You invest in relationships with the teams you work with. You know good governance and compliance relies heavily on trust and communication. You're a good partner. You're helpful and direct, you say no with reasons and alternatives, and you don't mistake gatekeeping for rigor. You're engineering-curious by nature. You want to understand how the systems work and how to adapt for compliance frameworks. You treat AI as part of the toolkit. You're skeptical where you should be, aggressive where it pays off, and you want to work somewhere that's serious about both. Pay: Target pay ranges based on Geographic Zones* for Level 4: Zone 1: San Francisco/Bay Area or NYC Metropolitan Area: $152,900 - $210,210** Zone 2: Boston, DC, Irvine, LA, Monterey, Santa Barbara, Santa Rosa, Seattle: $137,600 - $189,200** Zone 3: All other US locations: $129,900 - $178,640** LaunchDarkly operates from a place of high trust and transparency; we are happy to state the pay range for our open roles to best align with your needs. Exact compensation may vary based on skills, experience, and location. *Within the United States, our geographic pay zones are defined by counties surrounding major metropolitan areas. **Restricted Stock Units (RSUs), health, vision, and dental insurance, and mental health benefits in addition to salary. About LaunchDarkly: Modern software delivery was supposed to be the foundation for a thriving digital business but reality has proven otherwise. Slow, inefficient development cycles, costly outages, and fragmented customer experiences are preventing developers from building their best software. The LaunchDarkly platform helps developers innovate on new features faster while protecting them with a safety valve to instantly rewind when things go wrong. Developers can target product experiences to any customer segment and maximize the business impact of every feature. And by gradually rolling out new application components, they escape nightmare "big-bang" technology migrations. The LaunchDarkly platform was built to guide engineers to the next frontier of DevOps by: Improving the velocity and stability of software releases, without the fear of end customer outages Delivering targeted experiences by easily personalizing features to customer cohorts Maximizing the business impact of every feature through the ability to experiment and optimize Coordinating the release and optimization of software to provide consistent experiences across mobile platforms and device types Improving the effectiveness and productivity of engineering teams, by providing insights into engineering cadence and stability At LaunchDarkly, we believe in the power of teams. We're building a team that is humble, open, collaborative, respectful and kind. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, gender identity, sexual orientation, age, marital status, veteran status, or disability status. LD invites any applicant to review our written Affirmative Action Plan. To do so, contact People Ops at hr@launchdarkly.com . Do you need a disability accommodation? Fill out this accommodations request form and someone from our People Operations team will contact you for assistance.

Location: Remote - EMEA Who We Are: Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more. Amongst our subsidiaries, Alpaca is a licensed financial services company, serving hundreds of financial institutions across 40 countries with our institutional-grade APIs. This includes broker-dealers, investment advisors, wealth managers, hedge funds, and crypto exchanges, totalling over 10 million brokerage accounts. Our global team is a diverse group of experienced engineers, traders, and brokerage professionals who are working to achieve our mission of opening financial services to everyone on the planet. We're deeply committed to open-source contributions and fostering a vibrant community, continuously enhancing our award-winning, developer-friendly API and the robust infrastructure behind it. Alpaca is proudly backed by $400 million in funding from top-tier global investors including Portage Ventures, Spark Capital, Tribe Capital, Social Leverage, Horizons Ventures, Opera Tech Ventures, SBI Group, Derayah Financial, Unbound, Peak XV, Elefund, and Y Combinator. Our Team Members: We're a dynamic team of 400+ globally distributed members who thrive working from our favorite places around the world, with teammates spanning the USA, Canada, Japan, Hungary, Nigeria, Brazil, the UK, and beyond! We're searching for passionate individuals eager to contribute to Alpaca's rapid growth. If you align with our core values—Stay Curious, Have Empathy, and Be Accountable—and are ready to make a significant impact, we encourage you to apply. Your Role: As a Cyber & AI Risk Analyst, you will play a critical role in strengthening Alpaca’s security, compliance, and AI risk posture across the organization. Reporting to the Cyber GRC Lead, you will support the identification, assessment, and documentation of cybersecurity and AI-related risks that impact our infrastructure, products, trading systems, and internal operations. You will contribute to the design and execution of our risk management framework across traditional cyber domains (cloud security, infrastructure, application security, third-party risk, regulatory compliance) while also helping establish foundational governance controls for AI systems, models, and AI-enabled product features. This role sits at the intersection of cybersecurity, emerging AI governance, regulatory expectations, and financial services risk management. You’ll collaborate closely with Engineering, Product, Legal, Compliance, and IT teams to ensure Alpaca remains resilient, compliant, and forward-looking in how we manage both Cyber and AI risk. We’re looking for someone curious, organized, and eager to grow. If you enjoy learning how technical systems work, translating risk into clear language, and building structured programs from the ground up, then this role is for you. Prior GRC experience is a plus, but not required; we’re happy to invest in the right candidate. Things You Get To Do: Support the execution of Alpaca’s cybersecurity risk management program Conduct cyber risk assessments across cloud infrastructure , APIs, trading systems, and internal platforms Assist in identifying, documenting, and evaluating AI-related risks (model risk, data privacy, bias, explainability, adversarial threats, model misuse) Help develop and maintain AI governance controls aligned with evolving regulatory expectations such as the EU AI Act Perform third-party/vendor security and AI risk assessments Contribute to control testing across frameworks such as SOC 2, ISO 27001, CSA Star, NIST CSF, and emerging AI governance standards Track remediation efforts and maintain risk registers and reporting dashboards Support internal and external audits by preparing documentation and evidence Monitor regulatory developments related to cybersecurity, financial services, and AI governance Help mature policies, standards, and procedures for both cyber and AI domains Support the development of a repeatable AI tool/model evaluation process (intake → review → decision) for new and in-use AI tools Support Alpaca's AI usage guidance and standards, including safe use of AI-enabled developer tools and assistants Help maintain AI logging/monitoring standards (audit logging, evidence) for AI systems Use AI tools in day-to-day work and help test how well AI-related controls are working Who You Are (Must-Haves): 1+  years of experience in cybersecurity, risk management, IT audit, GRC, or a related field - internships, coursework, or equivalent experience is welcome Foundational understanding of cybersecurity principles (network security, cloud security, IAM, application security, vulnerability management) Familiarity with common frameworks such as NIST CSF, ISO 27001, SOC 2, or similar Understanding of AI/ML concepts and associated risks (data governance, model bias, hallucinations, prompt injection, model misuse, etc.) - you don’t need to be an expert, just curious Strong written communication and documentation skills Ability to assess technical risks and clearly communicate them to non-technical stakeholders Experience working cross-functionally with engineering and product teams Highly organized with strong attention to detail Comfort working in a fast-paced environment Genuine curiosity about AI and a strong desire to learn, actively experiments with AI tools, and wants to grow AI fluency as the field evolves Comfort using AI tools daily and willingness to learn newer agentic / assistant-based tooling Who You Might Be (Nice-to-Haves): Academic background, personal interest, or real world experience in fintech, financial services, or trading platforms Exposure to AI governance, model risk management, or responsible AI programs Familiarity with emerging AI regulatory frameworks (e.g., NIST AI RMF, EU AI Act concepts, model governance practices) Experience with GCP or other major cloud platforms Experience supporting or observing SOC 2, ISO 27001, or regulatory audits Security certifications (e.g., Security+, SSCP) or early-stage GRC certifications Interest in pursuing advanced certifications (CISA, CRISC, CISSP, or AI governance certifications) Experience working remotely or in distributed teams Hands-on experience with AI/agentic tooling (e.g., AI coding assistants, LLM apps, or similar) Personal projects or self-study in AI/ML that show initiative and interest How We Take Care of You: Competitive Salary & Stock Options Health Benefits New Hire Home-Office Setup: One-time USD $500 Monthly Stipend: USD $150 per month via a Brex Card Alpaca is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse workforce. Recruitment Privacy Policy

Location: Tel Aviv, Israel About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role The Legal Counsel provides senior, practical, risk-based legal counsel at the intersection of cybersecurity, Artificial Intelligence, cloud compute and services, physical security, supply chain and technology oriented regulatory compliance. The counsel will work closely with Security teams to support their efforts to address the needs of t he c ompany 's various business units , and enable the attainment of the company's business and product objectives while protecting the company from obligations that are unclear, disproportionate, operationally unachievable, or inconsistent with the company’s security posture. The role is expected to lead cross-functional initiatives, not only respond to individual legal requests. Your responsibilities will include Security terms in c ustomer contracts Review, draft, and negotiate cybersecurity, physical security compliance , , supply chain and resilience provisions in customer documents , including MSAs, DPAs, security addenda, order forms, and related schedules. Advise on security-control commitments, audit and assessment rights, incident-notification obligations . penetration testing, business continuity, data retention and deletion, subcontractors, cloud services, and allocation of liability. Translate technical controls and architecture into clear, supportable contractual language without overstating capabilities or creating unbounded obligations. Advise Product and Engineering on customer-driven requirements and translate recurring negotiations into scalable product, policy, and commercial positions. Support Sales and Customer Success with timely, commercially pragmatic guidance during strategic and high-value transactions. Certifications, audits, and external assurance Provide legal support for security certifications, attestations, and assurance programs, such as ISO 27001, SOC 2, PCI DSS, or other frameworks relevant to the company. Review certification scope, statements, evidence-sharing terms, management representations, auditor engagement terms, confidentiality obligations, and external communications. Help ensure that customer-facing descriptions of certifications and controls are accurate, current, and do not imply broader coverage than the underlying assessment supports. Partner with Security and Compliance on remediation plans, audit findings, regulator or customer inquiries, and the controlled disclosure of reports and evidence. Security governance, regulatory advice, and risk Managing DORA, NIS2, CRA frameworks, serving as principal point of contact with authorit ies in this respect. Monitor and interpret cybersecurity, operational resilience digital-services, and technology requirements applicable to the company’s products, services, customers, and geographic footprint. Assist in supporting physical security units A ssist the company GRC to a dvise on security policies, standards, risk acceptance, third-party risk, cloud governance, secure development practices, vulnerability disclosure, and responsible use of emerging technologies, including AI where applicable. Participate in security and product governance forums and provide legal input to material risk decisions, secure development practices, control exceptions, product launches, vendor onboarding, and significant architecture or service changes. Incident readiness and response Support preparation and maintenance of cyber-incident response plans, notification matrices, decision logs, tabletop exercises, and external communication protocols. Operations and enablement Assessment and adoption of  reference to specific legislation and regimes. Develop playbooks, clause libraries, decision trees, intake forms, templates, and training that enable consistent handling of security-related legal work. Define service levels and prioritization rules with Legal and Security; track volume, cycle time, recurring negotiation themes, exceptions, and material commitments. Deliver practical training to Security, Sales, Product, Engineering, Procurement, and Customer Success teams. Recommend process and tooling improvements that reduce manual work while maintaining appropriate legal and security review. We expect you to have Law degree and admission to practice, or equivalent professional legal qualification in a relevant jurisdiction. 5+ years of relevant legal experience, including significant in-house responsibility for technology, cybersecurity, cloud services, product counseling, commercial contracts, or regulated products. Demonstrated progression into a senior counsel, legal director, or comparable leadership role with ownership of complex, business-critical matters. Demonstrated experience negotiating customer security and data-protection terms and advising Security, Product, Engineering, and executive stakeholders. Working knowledge of common security and assurance frameworks and the ability to understand technical concepts sufficiently to assess legal and contractual implications. Strong judgment, concise drafting, executive communication, strategic project management, and the ability to prioritize multiple time-sensitive matters in a commercial environment. High integrity and discretion when handling privileged, confidential, security-sensitive, or incident-related information. It will be an added bonus if you have: Senior in-house experience with a SaaS, cloud, cybersecurity, enterprise technology, or other business-to-business technology company. Experience supporting security certifications, external audits, trust centers, public-sector customers, or highly regulated customers. Experience with global cybersecurity and resilience regimes and with coordinating advice across multiple jurisdictions. Experience building scalable legal intake, contract playbooks, knowledge bases, workflow automation, or legal-operations programs. Prior work involving cyber affairs, government, defense, international or regional legal matters, or other high-stakes regulated environments. An advanced degree or formal specialization in international law, technology law, cybersecurity, privacy, or a related discipline. Benefits & Perks: Competitive compensation Career growth and learning opportunities Flexibility and ownership Collaborative and innovative culture Opportunity to work on impactful AI projects International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

Location: San Francisco, CA | Seattle, WA | New York City, NY | Washington, DC About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Anthropic's Security Governance, Risk, and Compliance (GRC) team is the connective tissue that holds the company accountable to its security and control commitments. We translate regulatory, customer, and voluntary obligations into controls that teams act on, and give leadership a bird's-eye view of how well we're meeting them. We're building continuous assurance, to challenge and evidence the performance of controls continuously rather than through periodic audits. As Anthropic scales to meet public-company standards, the Sarbanes-Oxley (SOX) control environment over our technology stack is one of the most consequential things this team will drive. Within Security GRC's technical controls assurance function, you will be a hands-on senior contributor on what the IT general controls must achieve to support SOX 404 compliance. You will work as a peer to Internal Audit's IT SOX team: Internal Audit tests independently, and you define the control requirements, monitor that controls operate, and make sure evidence is audit-ready before Internal Audit and our external auditors test it. You will pair with Engineering, Security, IT, and Finance as they design and implement against those requirements, and validate that what ships actually meets the bar. You will also work with GRC engineering to automate evidence collection and continuous monitoring, starting with ITGCs and extending into other areas of security and compliance. This role reports to the Head of Security Controls Assurance and is well suited to someone who wants to stay close to the work and change how a frontier AI company builds its compliance infrastructure. Key responsibilities Define control requirements and acceptance criteria across the core ITGC domains of logical access, change management, operations, and program development for SOX in-scope systems, including home-built platforms where the control has to be designed into the system. Set the bar for in-scope systems from day one. As financially significant systems are built, migrated, or replaced, define what the system must provide before go-live, and assess SDLC controls for new system implementations and changes so controls are not retrofitted after the fact. Pressure-test changes for SOX impact during design. Review major infrastructure, system, and agent framework changes for control impact while decisions are still cheap, and keep a clear view of which changes alter the SOX scope, key control population, or evidence requirements. Perform second-line monitoring and readiness testing. Test key ITGCs and IT automated controls (ITACs) ahead of Internal Audit and the external auditors, including walkthrough preparation and validation that populations are complete and accurate, and support the move from manual to automated control reliance. Build continuous monitoring and evidence readiness with GRC engineering. Stand up automated evidence collection and monitoring for ITGCs, map controls to the common controls framework, and materially raise automated evidence coverage while cutting audit prep time. Run system and process risk assessments. Identify control gaps in in-scope systems and processes, and recommend remediation that engineering owners can act on. Drive control deficiency remediation with cross-functional partners. Track and root-cause ITGC deficiencies surfaced by monitoring, Internal Audit, or external audit; partner with engineering owners on remediation design; and assess whether remediation actually closes the gap before re-testing. Support the external audit with Finance and Internal Audit. Prepare walkthroughs, evidence requests, and testing schedules on management's side, and keep the line clear between your monitoring and Internal Audit's independent testing. Assess scope changes through a SOX lens. When new products, entities, systems, or integrations come into scope, assess their impact on control design, evidence requirements, and engineering effort before commitments are made. Maintain alignment with the broader compliance portfolio. Support the controls and evidence behind SEC cybersecurity disclosure requirements. You may be a good fit if you Thrive at the pace of a hypergrowth company. You're comfortable making calls with incomplete information and reprioritizing as scope shifts. Have been a senior contributor to an ITGC program through SOX 404 readiness and/or at a public company, with a working command of PCAOB AS 2201, COSO 2013, and how external auditors scope, test, and evaluate technology controls and deficiencies. Have hands-on IT audit or IT SOX experience designing, testing, and documenting controls across access management, change management, and operations. Have hands-on engineering fluency, possibly from an earlier engineering career: you can read code and Terraform, follow a CI/CD pipeline end to end, and challenge a design on its technical merits. Have deep familiarity with developer platforms, release engineering, cloud infrastructure, or ERP/financial systems control domains. Are a strong collaborator and communicator across Finance, Engineering, Internal Audit, and external auditors, and can work independently on complex workstreams while keeping senior stakeholders informed. Use Claude and other LLMs as daily working tools, and have grounded, specific views on which SOX assurance workflows AI can run today and which it can't yet. Translate SOX and framework language into acceptance criteria engineers can build against, and translate engineering reality back into assurance language auditors and leadership can rely on. Default to getting the requirement designed into the system rather than papering over the gap with procedure. Strong candidates may have A combination of audit or advisory experience (Big 4 or equivalent, ideally IT audit) with in-house experience at an AI-forward tech company, in either order. 12+ years of hands-on IT audit and SOX compliance experience. Taken a company through a first-year SOX 404(a) and 404(b) assessment, including a first external ITGC audit. Experience at a pre-IPO or newly public technology company. Defined or assessed controls over home-built financially significant systems, usage-based billing, or revenue metering pipelines. Defined or assessed controls for AI/ML systems or agents acting in production environments. Stood up continuous controls monitoring or automated evidence programs. Experience with SOC 1 reliance, service organization control mapping, and complementary user entity controls. Deadline to apply: None. Applications will be received on a rolling basis. The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $270,000 — $345,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. For roles performing work in California: We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Bitpanda is looking for a Senior Specialist Assurance and Audit Coordination to coordinate audits, evidence collection, and remediation tracking.

Location: Jazan, Saudi Arabia To support the development, implementation, and continuous improvement of the organization's Cybersecurity Governance, Risk, and Compliance (GRC) framework. The role involves conducting cybersecurity risk assessments, developing and maintaining policies and procedures, monitoring compliance, and implementing security awareness initiatives to ensure the organization's IT, Information Systems (IS), and Operational Technology (OT) environments remain secure and compliant with applicable regulatory requirements and industry standards. Key Responsibilities Develop, review, and maintain cybersecurity policies, procedures, and standards. Conduct cybersecurity risk assessments, compliance audits, and identify security gaps. Maintain cybersecurity risk registers and monitor mitigation actions. Perform third-party and vendor cybersecurity risk assessments. Ensure compliance with Saudi NCA and HCIS cybersecurity requirements. Support cybersecurity awareness programs, phishing simulations, and incident response activities. Monitor IT/OT security controls and prepare compliance reports and KPIs. Mandatory Requirements Bachelor's degree in Cybersecurity, Information Security, Computer Science, or Information Technology. 5–6 years of experience in Cybersecurity GRC, IT GRC, or Information Security. Experience in Oil & Gas, Petrochemical, Power Generation, or related industrial projects. Strong knowledge of Saudi NCA and HCIS cybersecurity requirements. Hands-on experience in cybersecurity risk assessments, audits, policy development, and compliance management. Good understanding of IT and OT cybersecurity environments. Preferred Certifications CISA, CRISC, CISM, CISSP, ISO 27001 Lead Implementer/Lead Auditor, Security+, or CEH. Candidate Preferences

Location: United States (Remote) Workplace: Remote ABOUT ONEPAY OnePay is the consumer fintech trusted by millions of Americans to make money better. Our financial system is broken. High fees, low rates, and too few ways to actually grow your money. We’re fixing it. And we’re moving fast. We’re an all-in-one financial services platform that brings together banking, high-yield savings, credit cards, point-of-sale lending, investing, and crypto in one place. We also partner with employers, HCM providers, gig platforms, and others to deliver embedded financial services to millions of employees and frontline workers. We’re backed by Walmart, the world’s largest retailer, and Ribbit Capital, one of fintech’s most respected investors, giving us rare scale, distribution, and the opportunity to build something truly category-defining. But what really sets OnePay apart is how we move. Our customers don’t have time to wait… and neither do we. This place moves fast, and we’re looking for people who are: - Ready to run - Hungry and driven by urgency - Exceptional at what they do, with low ego - Comfortable operating in motion THE ROLE Compliance Controls & Monitoring (C&M) is OnePay’s second line of defense, responsible for establishing and overseeing the firm's compliance control environment. Distinct from independent Compliance Testing, C&M identifies and assesses regulatory risks, evaluates controls, and drives compliant product and operational outcomes across the product lifecycle. This role requires an experienced compliance professional who can independently evaluate complex regulatory matters, recommend practical solutions, and execute compliance oversight activities in a fast-paced, evolving financial services environment. What Makes This Role Different: OnePay is a growing company with a broad and evolving product set, and our regulatory landscape evolves alongside it. This role sits at the center of that growth. You'll assess new and changing products, apply regulatory requirements to situations that don't always have clear precedent, and help the business find compliant paths forward. Strong partnerships with Product, Legal, and Operations is a given, and your goal is to bring a clear, well-reasoned compliance perspective to that table. The best fit is someone who is energized by that kind of work: exercising sound judgment on complex questions, communicating risk clearly and constructively, and advocating independently for the right controls. You will: - Regulatory Advisory & Business Partnership: Build trusted relationships across Product, Operations, Engineering, Marketing, Legal, and Compliance. Independently evaluate business practices and controls against applicable regulatory requirements, provide practical compliance guidance, and confidently challenge potential noncompliance while influencing appropriate corrective actions. - Compliance Controls: Evaluate compliance control design and adequacy, identify gaps in regulatory coverage, and recommend and drive enhancements. Support control development, risk-to-control mapping, documentation, and maintenance of the centralized compliance control inventory within the firm's GRC platform. - Compliance Risk Assessment: Execute and maintain compliance risk assessments across products, processes, and regulatory requirements. Evaluate inherent risk, control coverage, and residual risk; recommend appropriate mitigation; and support implementation and ongoing maintenance of compliance risk assessment processes within the firm's GRC platform. - Execution & Continuous Improvement: Independently manage assigned compliance activities and initiatives through completion while balancing competing priorities and deadlines. Identify opportunities to improve processes, increase efficiency, and enhance operational effectiveness. - Change Management: Assess regulatory compliance implications of new or modified products, business processes, systems, and operational changes. Partner with stakeholders to evaluate control impacts and support appropriate compliance measures throughout implementation. YOU BRING - Mid Career (5-10 Years) with progressively responsible advisory experience within banking, fintech, or consumer financial services, with strong knowledge of applicable federal and state consumer financial protection laws and regulations. - Demonstrated ability to independently interpret regulatory requirements, provide credible challenge, and influence decisions across cross-functional stakeholders, including comfort making and defending well-reasoned judgment calls on nuanced questions and evolving regulatory guidance. - Hands-on experience conducting compliance risk assessments, evaluating control design and effectiveness, and working with risk registers or GRC platforms. - Strong critical thinking and communication skills, with the ability to explain regulatory risk clearly and constructively to business partners, and to advocate independently for the right controls. - Proven ability to manage competing priorities and drive work to completion with a high degree of ownership. - Experience in a fintech, startup, or similarly dynamic financial services environment preferred. - CRCM, CIA or equivalent certification preferred. WHAT WE OFFER - Competitive base salary, stock options, and health benefits from Day 1 - 401(k) plan with company match - Remote-friendly (US), flexible time off (FTO), and opportunities for growth - A high-growth, mission-driven, inclusive culture where your work has real impact STANDARD INTERVIEW PROCESS Our process varies by role. Most candidates go through: - AI-assisted initial screen - Interview with Talent Partner - Technical or Hiring Manager Interview - Team Interview - Executive Interview - Offer! EQUAL EMPLOYMENT OPPORTUNITY To build technology and products that are used and loved by people and solve real-world problems, we need to build a team with many different perspectives and experiences. We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We encourage candidates from all backgrounds to apply. Applicants in need of special assistance or accommodation during the interview process or in accessing our website may contact us at talent@onepay.com.

Location: Remote Who We Are: Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more. Amongst our subsidiaries, Alpaca is a licensed financial services company, serving hundreds of financial institutions across 40 countries with our institutional-grade APIs. This includes broker-dealers, investment advisors, wealth managers, hedge funds, and crypto exchanges, totalling over 10 million brokerage accounts. Our global team is a diverse group of experienced engineers, traders, and brokerage professionals who are working to achieve our mission of opening financial services to everyone on the planet. We're deeply committed to open-source contributions and fostering a vibrant community, continuously enhancing our award-winning, developer-friendly API and the robust infrastructure behind it. Alpaca is proudly backed by $400 million in funding from top-tier global investors including Portage Ventures, Spark Capital, Tribe Capital, Social Leverage, Horizons Ventures, Opera Tech Ventures, SBI Group, Derayah Financial, Unbound, Peak XV, Elefund, and Y Combinator. Our Team Members: We're a dynamic team of 400+ globally distributed members who thrive working from our favorite places around the world, with teammates spanning the USA, Canada, Japan, Hungary, Nigeria, Brazil, the UK, and beyond! We're searching for passionate individuals eager to contribute to Alpaca's rapid growth. If you align with our core values—Stay Curious, Have Empathy, and Be Accountable—and are ready to make a significant impact, we encourage you to apply. About the Role Alpaca is looking for a collaborative and detail-oriented Due Diligence Analyst - Americas (ET hours) to join our Risk team. In this role, you will support the onboarding of new partners, including international fintechs and financial institutions, by helping ensure that required due diligence, risk, compliance, and AML standards are met before launch. This is a hands-on, partner-facing role that sits at the intersection of risk management, third-party due diligence, compliance, operations, and project execution. You will help evaluate prospective partners, review key documentation, coordinate internal requirements, and guide partners through the onboarding process. The ideal candidate is organized, analytical, comfortable communicating with external stakeholders, and able to manage multiple onboarding workstreams in a fast-paced environment. What You’ll Be Doing: Support due diligence reviews for new and existing partners, including fintech companies, financial institutions, vendors, and other third-party service providers. Communicate regularly with prospective and onboarding partners globally to help them understand requirements, timelines, and outstanding documentation needs. Conduct and support third-party risk management processes, including KYC, KYB, enhanced due diligence, policy and procedure reviews, customer onboarding flow reviews, and risk assessments. Review partner-provided documentation for completeness, consistency, and potential risk indicators. Track partner onboarding progress, follow up on outstanding items, and help ensure required documents are submitted ahead of launch deadlines. Respond to partner questions related to the onboarding and due diligence process, escalating requests or issues as appropriate. Work closely with internal teams, including Operations, Compliance, AML, Legal, Product, and Project Management, to ensure partner integrations meet internal requirements. Identify process gaps, recurring partner questions, or documentation issues, and contribute to improvements in the partner onboarding and diligence process. Maintain accurate records of diligence reviews, decisions, approvals, and supporting documentation. What You’ll Need: Experience: 2–3+ years of experience in risk management, operational risk, third-party risk, compliance, AML, financial crime, or related functions within financial services, fintech, brokerage, or another regulated industry. International Mindset: Comfort working with international partners and reviewing diligence materials across different jurisdictions and regulatory environments. Analytical Skills: Strong critical thinking skills with the ability to identify anomalies, inconsistencies, gaps, and potential risk indicators in documentation, data, and partner responses. Organizational Skills: Strong project management and prioritization skills, with the ability to manage multiple partner onboarding processes simultaneously. Communication Skills: Excellent written and verbal communication skills, including the ability to explain requirements clearly to external partners and internal stakeholders. Cross-Functional Collaboration: Ability to work effectively across Risk, Compliance, AML, Operations, Legal, Product, and Project Management teams. Proactive Ownership: A self-starter mindset with strong accountability, sound judgment, and the ability to operate independently in a rapidly evolving environment. Education: Bachelor’s degree in Finance, Business, Economics, Risk Management, Criminal Justice, International Relations, or a related field. Nice to Haves: Familiarity with financial services regulatory expectations, including BSA/AML, KYC, KYB, enhanced due diligence, and third-party risk management practices. Experience supporting partner, vendor, or third-party onboarding in a fintech, brokerage, payments, banking, or financial services environment. Understanding of operational resilience, business continuity, cybersecurity, data protection, or outsourcing risk frameworks. Experience reviewing policies and procedures related to AML, sanctions, customer onboarding, fraud, compliance, or operational controls. Familiarity with broker-dealer, introducing broker, or embedded finance models. Experience using case management, GRC, CRM, or project tracking tools. How We Take Care of You: Competitive Salary & Stock Options Health Benefits New Hire Home-Office Setup: One-time USD $500 Monthly Stipend: USD $150 per month via a Brex Card Alpaca is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse workforce. Recruitment Privacy Policy

Location: Remote Workplace: Remote About Prefect Prefect builds automation for an unpredictable world. The last decade of automation was about protecting workflows from unpredictability; in the agentic era, unpredictability is the point. Our mission is to give people confidence in automated work, whether that work is a mission-critical data pipeline or a fleet of AI agents. In August 2026, Prefect and Dagster, competitors for eight years, joined forces to build the next generation of automation infrastructure. Today, our ecosystem includes Dagster, the data platform; Prefect, the agent platform; and FastMCP, the leading open-source developer framework for the MCP ecosystem. Together, our open-source and commercial products are trusted by Fortune 500 companies, data innovators, and high-growth technology companies around the world. We think of our culture as the operating system of the company. We’ve carefully created a supportive, high-performance environment that empowers our team to do the best work of their careers, have meaningful impact, and continue growing personally and professionally. We’re a remote-first team that values high standards, ownership, and thoughtful collaboration. THE ROLE In August, Dagster and Prefect became one company. Behind the scenes, that left us with two of nearly everything: two SOC 2 programs, two ways of managing laptops, overlapping tools and accounts, and a long list of tools that each need one clear owner. We're hiring a Security & IT Operations Engineer to turn all of it into one setup that runs well and gets easier to run every quarter. You'll own the day-to-day of our security compliance program and our corporate IT. You'll report to our Security & Systems Lead as the first hire on this new team. Our customers are enterprise data, infrastructure, ML and AI teams, and our products run code inside their data infrastructure. AI has made attacks cheap and fast, so customers look hard at how we protect them, and a well-run security and compliance program is a big part of our answer. You won’t be pushing security uphill here. More engineers volunteered for our new Security Guild than its first sprint had room for. Building on both companies’ existing security work, the guild is implementing shared product security tools and consistent vulnerability management and incident response processes across Prefect and Dagster. That commitment is helping us stay ahead of AI-accelerated attacks. You’ll enjoy this role if you like a mix of hands-on work and longer-term improvements, and want a meaningful say in how our IT and compliance programs run. WHAT YOU’LL OWN - Run day-to-day compliance. Keep SOC 2 controls, evidence collection, access reviews, policy acknowledgments and training on track. Work directly with auditors and control owners, and follow findings through to resolution. - Help consolidate our compliance programs. With our team lead and consultant, choose a GRC platform and set up both programs. Help adapt control descriptions across environments and design activities that minimize manual work. - Own corporate IT. Run Google Workspace and our SaaS apps, handle onboarding and offboarding with People Operations, and manage our Mac fleet in Rippling. Help employees with laptop and access issues, and improve the setup as you learn where people get stuck. - Improve access management. Work with our identity partner on how access is requested, approved, granted and removed. Own the daily processes and keep them documented. - Protect corporate systems. Manage macOS and application updates, investigate endpoint alerts, and track vulnerabilities through remediation. Verify fixes and participate in phishing and other corporate incident response with our team lead. - Automate repetitive work. Use scripts, APIs, workflow tools or AI to reduce manual IT and compliance tasks and make common requests self-service. Recently completed projects include consolidating Mac device management into Rippling, running access reviews that support both SOC 2 programs, and working with teams to assign tool owners and retire duplicates. WHERE THE ROLE CAN GROW We’re building the Security & Systems function for the combined company, and this role will help shape it. Starting with ownership of day-to-day IT and compliance, you can grow toward broader security operations and engineering—including vulnerability management, corporate incident response, and corporate security engineering—or toward risk management and AI governance. The direction will depend on your strengths, interests, and the company’s needs, with opportunities to take on more program ownership and planning as the function develops. WHAT YOU’LL BRING We’re looking for hands-on IT and compliance experience, practical technical judgment, and the ability to take ownership. Your experience may be deeper in one area, but you should be comfortable across both. - You’ve owned recurring SOC 2 activities and worked directly with external auditors, or bring auditing experience. You understand how controls work, what evidence demonstrates they’re operating, and how to adapt them across systems and teams. - You’ve administered and secured corporate IT systems, including account management, onboarding/ offboarding and Macs managed through an MDM. You’re comfortable with patching, endpoint alerts, remediation tracking, phishing or suspicious account activity, and helping employees troubleshoot problems. - You’re comfortable automating recurring tasks with scripts, APIs, workflow tools or AI, and can explain something you’ve built. A small, useful improvement is a good example. - You drive work across teams: establish owners and deadlines, work through blockers, and follow through until tasks are completed and documented. You know when to resolve something yourself and when to escalate. NICE TO HAVE - Experience with Google Workspace, Rippling, or a GRC platform such as Vanta, Drata or Thoropass. - Familiarity with SSO, SCIM provisioning or other ways to automate account access. - Experience helping implement or migrate an IT or compliance system, or improving a process that involved several teams. WHO THIS ROLE IS NOT FOR - You’re looking to leave hands-on IT support behind. Helping someone with a laptop or access problem is part of the job, alongside larger projects and automation work. - You need a settled, fully documented environment from day one. We’re still bringing two companies’ systems together, and you’ll help work out how the combined setup should run. WHAT YOU'LL GET IN RETURN: Base Salary Ranges: - San Francisco Bay Area and NYC metro: $165,000 - $219,000 - Washington, D.C., Boston, LA metro and Seattle: $150,000 - $194,000 - Denver, Chicago, Atlanta and all other US metros: $149,000 - $193,000 Actual base salary within each range depends on the candidate's location, experience, and qualifications. Equity and benefits are not included in the range above. Your recruiter can share more about the salary range for your preferred location during the hiring process. Perks and Benefits: - Remote-first team with flexible-first culture - Equity Stock Options - 401(k) with 5% company match (vests immediately!) - Unlimited PTO - Medical, Dental and Vision insurance - Generous Parental Leave - Life Insurance and Disability benefits - $800/month remote work stipend And that's just the start — for more info check out our benefits and perks on our careers page. BELONGINGNESS AT PREFECT: Belongingness at Prefect is our commitment to ensuring mutual power, access, and opportunity among all groups and individuals who make up our community. We operationalize belongingness through actions large and small on a daily basis, but always with the goal that all groups and individuals can contribute as their most authentic self to the evolution of our product, our team, and our community. Belongingness is also our commitment to bridge with individuals or groups not yet established in our community, acknowledge differences in a way that affirms distinct identities, and allows for a new, more expansive group identity to form. EQUAL OPPORTUNITY AT PREFECT: Prefect is an equal opportunity employer and encourages applications from people of all backgrounds. All applicants will be considered for employment without attention to race, religion, color, sex (including pregnancy, sexual orientation and gender identity/expression), national origin, disability or any other status protected under applicable federal, state, or local laws. Delaney is a real live person (👋🏻) and is looking forward to learning more about you through your application.

• Design expert-level Terminal-Bench cryptography tasks by turning real, paid work from your own experience into challenges that an AI agent must solve end to end.

Location: Remote / Germany Orcrist is building a next generation data intelligence platform using cutting-edge technologies. We're handling petabyte-scale data with sub-second queries. Our product is a Kubernetes‑based platform delivered as B2B SaaS or as a self‑hosted on‑prem solution, including air‑gapped deployments. We enable customers across defense, law enforcement, and enterprise to turn mission-critical data into actionable intelligence. Role As Data Protection & Quality Management Officer at Orcrist Technologies, you own our data protection framework and build and operate our ISO 9001 quality management system. You act as our appointed Data Protection Officer under GDPR and lead the development, maintenance, and continuous improvement of our QMS. Both are independent staff functions reporting directly to the C-Level Management. You advise, monitor, audit, and document; the business remains responsible for operational decisions and implementation. We build AI platforms for customers in the defence and government sector. Data protection and quality management are essential to our business and customer trust. As the company grows, you will build these structures hands-on, working closely with engineering, product, people, IT, and our Information Security Officer. What you'll do Build and maintain our data protection management system, including policies, processes, and documentation. Act as our appointed DPO under Art. 37–39 GDPR and § 38 BDSG, advising management and teams on GDPR, BDSG, and TDDDG requirements. Monitor compliance, including records of processing activities, processor agreements, TOMs, data protection impact assessments, and data subject requests. Advise on privacy by design, international data transfers, retention, and personal data breaches. Build and maintain our ISO 9001 QMS, including process documentation, quality objectives, risk-based thinking, and continual improvement. Own the internal audit programme, track nonconformities and corrective actions, and coordinate certification and surveillance audits. Prepare the annual management review and report on data protection risks, audit findings, and improvement priorities. Train teams on data protection and quality management requirements. Work closely with the ISB to align overlapping requirements while maintaining clear responsibilities and independence. Travel occasionally to our offices in Berlin, Dresden, and Hamburg, as well as to other workshop locations across Germany, to facilitate workshops, training sessions, and audits. On-site presence is expected to be more frequent during the initial implementation phase and primarily driven by audits and specific business needs thereafter. About you Certified DPO training (GDD, TÜV, DEKRA, or equivalent) and at least 3 years of hands-on GDPR experience. At least 2 years of practical ISO 9001 experience and an internal auditor qualification based on ISO 19011. Experience building and maintaining data protection management systems and QMS documentation. The independence to challenge management, the judgement to prioritise risks, and a pragmatic approach to implementation. Hands-on mindset and confidence working with technical and non-technical stakeholders. Willingness to travel occasionally within Germany and work in a hybrid setup, combining remote work with on-site activities. German and English at C1 level or above. Nice-to-haves Experience in a software, SaaS, or AI company. Familiarity with ISO/IEC 27001. Familiarity with AQAP-Standards. CIPP/E or comparable certification. Experience leading a first ISO 9001 certification. Experience with GRC platforms or document control systems. What we offer Remote-first, Germany-wide: Work from wherever you do your best work, with regular team gatherings in Berlin and other off-site locations. Flexibility by default: Flexible working hours help you make work fit your life. Your setup, your way: Get a personal home-office equipment budget to create a workspace that works for you. 30 days of vacation: Take the time you need to recharge and come back with fresh energy. Keep growing: We invest in your personal and professional development. Get rewarded for impact: Performance bonuses are tied to agreed objectives and key results. A warm welcome: Every new team member gets a welcome goodie bag. Good people, good times: From summer and Christmas parties to regular team gatherings, we make time to celebrate together. A mission that matters: Work on challenges with tangible impact on public safety and national security.

Location: London, England, United Kingdom Graham Capital Management, L.P. (collectively with its affiliates, "Graham") is an alternative investment manager founded in 1994 by Kenneth G. Tropin. Specializing in discretionary and quantitative macro strategies, Graham is dedicated to delivering strong, uncorrelated returns across a wide range of market environments. As one of the industry’s longest-standing global macro and trend-following managers, Graham remains committed to innovation, evolving its strategies through a robust investment, technology, and operational infrastructure. Graham harnesses the synergies between its discretionary and quantitative trading businesses to offer a broad suite of complementary alpha strategies, each built on the principles of thoughtful portfolio construction, active risk management, and diversification by design. Graham invests significant proprietary capital alongside its clients – including global institutions, endowments, foundations, family offices, sovereign wealth funds, investment management advisors, and qualified individual investors – reinforcing alignment of interests across all strategies. The foundation of Graham’s sustainability and success is the experience and contributions of its people. The firm seeks to cultivate talent, encourage the diversity of ideas, and respect the contributions of all. In turn, each employee shares in the responsibility of strengthening those around them. Description Graham is seeking a full-time UK Compliance Officer to assume responsibility for the firm's UK regulatory compliance program, currently supported by a part-time compliance resource. The role will serve as the primary point of contact for FCA, Companies House, and ICO matters affecting the UK entity, and will work closely with the Chief Compliance Officer (CCO) and global compliance team to ensure consistency with Graham's broader compliance framework across its FCA, SEC, and CFTC/NFA obligations. The role reports functionally to the Chief Compliance Officer, with regular interaction with Graham's global compliance, legal, and finance teams, as well as the UK entity's board. Responsibilities Manage the UK entity’s FCA regulatory filings and ongoing reporting obligations, including coordinating with finance, external auditors, and other advisors, as needed, in the preparation of financial statements filed with the FCA and Companies House. Prepare and submit all required statutory and corporate filings for the UK entity with UK Companies House. Manage data protection compliance and required filings with the Information Commissioner's Office (ICO), including maintenance of registration and oversight of applicable data protection obligations. Prepare materials for periodic UK corporate board meetings, including compliance reporting, regulatory updates, and risk and control matters. Administer the Senior Managers and Certification Regime (SM&CR), including annual certification, fitness and propriety assessments, Conduct Rules training, and maintenance of the Senior Managers Regime (SMR) and Certification Regime population tracking. Develop, coordinate, and deliver compliance training for the UK office, including new joiner onboarding and periodic training on AML, market abuse (UK MAR), and other applicable regulatory requirements. Develop and conduct periodic compliance testing and monitoring in coordination with the global Compliance team, including testing of UK-specific policies and procedures. Monitor UK and EU regulatory developments relevant to the firm's business (e.g., FCA Handbook changes, UK MAR, SYSC, SM&CR, data protection/UK GDPR) and advise management on implementation. Administer the firm’s Code of Ethics requirements, including reviewing and preclearing personal securities transactions, reviewing personal account statements and transaction activity, monitoring and resolving compliance alerts, and following up on potential exceptions or violations. Requirements Bachelor's degree and minimum of 7 years of compliance experience at an FCA-authorised buy-side firm (asset manager, hedge fund, or similar alternative investment manager); global macro, managed futures, or systematic/quantitative strategy experience a plus. Demonstrated working knowledge of the FCA Handbook, including SYSC, COBS, and SM&CR requirements. Hands-on experience with UK Companies House filings and familiarity with UK financial statement filing requirements. Experience with ICO data protection registration and UK GDPR compliance obligations. Experience developing and delivering AML and K MAR) training programs. Experience supporting board and governance processes, including preparation of board materials. Relevant professional qualification preferred (e.g., ICA Diploma in Compliance, CISI qualifications, or equivalent). Strong working knowledge of UK regulatory requirements applicable to investment managers, with the judgment to identify when to escalate to the CCO or external counsel. Excellent written and verbal communication skills, with the ability to prepare clear, concise materials for senior management and the board. High degree of integrity, discretion, and sound judgment in handling confidential information. Strong organizational skills and the ability to manage multiple regulatory deadlines independently. Comfortable working within a small, hands-on UK office while coordinating closely with a global Compliance team based in the US. Proficiency with Microsoft Office; familiarity with compliance monitoring or GRC systems a plus. This role requires commuting into our London office Mondays through Fridays.

Location: Remote, Massachusetts, United States, AMER From Fivetran’s founding until now, our mission has remained the same: to make access to data as simple and reliable as electricity. With Fivetran, customer data arrives in their warehouses, canonical and ready to query, with no engineering or maintenance required. We’re proud that more organizations continue to leverage our technology every day to become truly data-driven. About Us Fivetran and dbt Labs are bringing together two industry-leading companies with a shared mission: helping organizations unlock the full value of their data. Together, we’re delivering the data infrastructure layer that helps organizations move, transform, and trust their data — from the moment data moves, through every transformation, to the context teams and AI systems rely on. Fivetran helps organizations automate data movement across the systems, clouds, engines, and tools they rely on. dbt Labs pioneered analytics engineering, helping teams transform data into reliable, governed insights. Together, we support thousands of organizations as they build a trusted foundation for analytics, AI, and better business decisions. As we bring our teams and technology together, we’re building on the strengths of both companies while continuing to deliver the products and experiences our customers know and trust. It’s an exciting time to join us: we’re creating a company with the scale, talent, and technology to help more organizations put their data to work with greater speed, confidence, and impact. During this transition period, you may see references to both Fivetran and dbt Labs throughout our recruiting process as we integrate our teams, systems, and career sites. About the Role Fivetran + dbt  is seeking a Manager of Security Operations, Incident Detection and Response, to bolster and improve the robustness and security of the platform and the entire enterprise. This people-leadership role is hands-on and execution-focused, requiring deep expertise in security operations, incident detection and response, AI-driven security automation, and securing multi-tenant SaaS environments. You'll build and lead a high-performing team, own the detection and response technology stack, and serve as the accountable leader for incident response across the entire enterprise, ensuring threats are detected, contained, and remediated quickly from endpoint to cloud to production. This is a full-time remote position based out of the US (EST Time Zone). Technologies You’ll Use Crowdstrike, Okta, Google Workspace, Wiz, Open Source, Notion, JIRA What You’ll Do People Leadership: Lead, mentor, and develop a team of detection and response engineers and analysts. Set clear goals, manage performance, and grow careers while fostering a culture of ownership, curiosity, and urgency. Hiring & Team Building: Recruit, hire, and onboard top security talent. Define team structure, roles, on-call rotations, and hiring plans to scale the team alongside the business. Enterprise Incident Response: Own the incident response program for the entire enterprise, including investigation, containment, eradication, remediation, and post-incident review. Act as incident commander for major security events and coordinate with Legal, Privacy, Communications, and executive leadership. Detection Engineering: Build, optimize, and maintain high-fidelity detections across cloud, identity, endpoint, SaaS, and application layers, using threat-informed approaches such as MITRE ATT&CK to close coverage gaps. AI-Driven Security Operations: Drive the adoption of AI, including LLMs and AI agents, to automate alert triage, enrichment, investigation, and response. Evaluate and integrate AI capabilities to scale the team, and build detections for threats targeting AI systems and AI usage across the enterprise. Multi-Tenant SaaS Security: Design detection and response strategies tailored to a multi-tenant SaaS platform, including tenant isolation, cross-tenant access, and customer data protection. Lead customer-impacting incident response and coordinate customer notifications. Security Technology Ownership: Own the security operations technology stack, including SIEM, SOAR, EDR/XDR, cloud detection and response, and log pipelines. Manage the roadmap, budget, and vendor relationships. Threat Hunting & Intelligence: Lead proactive threat hunting and integrate threat intelligence to identify and mitigate emerging threats before they impact the business. Cross-Team Collaboration: Work directly with engineering, infrastructure, IT, application security, and GRC teams to integrate detection and response practices and remediate risks across build pipelines, runtime environments, and corporate systems. Tooling & Automation: Develop and maintain automation, playbooks, and integrations to streamline security processes and provide self-service security tools to the organization. Security Standards & Metrics: Implement consistent security controls, monitoring, and alerting across the enterprise. Define and report on key metrics such as mean time to detect (MTTD) and mean time to respond (MTTR), and support compliance requirements. Knowledge Sharing: Stay up to date with trends in security operations, incident response, cloud security, and AI security, applying this knowledge to improve the Fivetran platform's security posture. Skills We’re Looking For Security Operations & Incident Response Expertise: Deep expertise in detecting, investigating, and responding to security incidents, with a track record of leading enterprise-wide incident response. People Management: Proven experience managing, hiring, and developing security teams, including setting priorities, managing performance, and building a strong team culture. Multi-Tenant SaaS Experience: Extensive experience securing and responding to incidents in multi-tenant SaaS environments at scale, with a strong understanding of tenant isolation and customer data protection. AI Proficiency: Hands-on experience applying AI, including LLMs and AI agents, to security operations to automate detection, triage, and response, and a strong understanding of the risks AI introduces. Cloud & Infrastructure Security: Strong experience with cloud platforms (e.g., AWS, GCP, Azure), Kubernetes, and containerized environments, including cloud-native logging and detection. Detection & Response Tooling: Proficiency with SIEM, SOAR, EDR/XDR, identity, and cloud detection tools, and experience integrating them into automated workflows. Technology Ownership: Experience owning a security technology roadmap, including tool selection, budgets, and vendor management. Problem-Solving: Excellent problem-solving and troubleshooting skills, with the ability to make sound decisions under pressure in fast-paced environments. Communication: Strong communication skills with the ability to effectively collaborate with and educate engineering teams, and to communicate clearly with executives and customers during incidents. Curiosity & Urgency: Demonstrates strong curiosity, a sense of urgency, and a hands-on approach to diving deep into complex technical problems to drive timely and effective solutions. #LI-Remote #LI-AM1 The compensation range displayed on this job posting reflects the minimum and maximum target for new hire compensation for the target position and level, and may include sales incentives or target bonuses depending on the role.  Our compensation ranges are determined by role, level, and location. Our job titles may span more than one career level. Within the range, individual compensation is determined by additional factors, including job-related skills, experience, relevant education or training, business need, market demands. The compensation range is subject to change and may be modified in the future. Your recruiter can share more about the specific compensation range for your location during the hiring process. Pay Range $186,701 — $233,376 USD Perks and Benefits 100% employer-paid medical insurance * Generous paid time away from work, including paid vacation or flexible/unlimited vacation depending on role and country, plus paid sick time, inclusive parental leave, paid holidays, including a year-end Global Week of Rest, and volunteer days off. RSU stock grants* Professional development and training opportunities Company virtual happy hours, free food, and fun team-building activities Monthly cell phone stipend Access to an innovative mental health support platform that offers personalized care and resources in areas such as: therapy, coaching, and self-guided mindfulness exercises for all covered employees and their covered dependents. * May vary by country and worker type - please reach out to your recruiter for more information Click here to learn more about Fivetran's Benefits by Region. We’re honored to be valued at over $5.6 billion , but more importantly, we’re proud of our core values of Get Stuck In, Do the Right Thing, and One Team, One Dream . Read about us in Forbes . Fivetran brings together high-quality talent across the globe to make data access as easy and reliable as electricity for our customers. We value and recognize that our customers benefit from having innovative teams made of people from many backgrounds, experiences, and identities. Fivetran promotes diversity, equity, inclusion & belonging through attracting, recruiting, developing, and retaining a diverse workforce, not only because it is the right thing to do, but because it helps us build a world-class company to better serve our customers, our people and our communities. To learn more about Fivetran’s culture and what it’s like to be part of the team, click here and enjoy our video. To learn more about our candidate privacy policy, you can read our statement here . We are committed to ensuring that all candidates have an equal opportunity to participate in our interview process. If you require accommodations at any stage of the process due to a disability, medical condition, or any other circumstance, please don't hesitate to submit your request by filling out this form . We will work with you to provide reasonable accommodations to facilitate your participation and ensure a fair and accessible interview experience. Your request and any information provided will be kept confidential and will not impact your candidacy. We look forward to hearing from you and accommodating your needs to the best of our ability.

Location: Remote, New York, United States, AMER From Fivetran’s founding until now, our mission has remained the same: to make access to data as simple and reliable as electricity. With Fivetran, customer data arrives in their warehouses, canonical and ready to query, with no engineering or maintenance required. We’re proud that more organizations continue to leverage our technology every day to become truly data-driven. About Us Fivetran and dbt Labs are bringing together two industry-leading companies with a shared mission: helping organizations unlock the full value of their data. Together, we’re delivering the data infrastructure layer that helps organizations move, transform, and trust their data — from the moment data moves, through every transformation, to the context teams and AI systems rely on. Fivetran helps organizations automate data movement across the systems, clouds, engines, and tools they rely on. dbt Labs pioneered analytics engineering, helping teams transform data into reliable, governed insights. Together, we support thousands of organizations as they build a trusted foundation for analytics, AI, and better business decisions. As we bring our teams and technology together, we’re building on the strengths of both companies while continuing to deliver the products and experiences our customers know and trust. It’s an exciting time to join us: we’re creating a company with the scale, talent, and technology to help more organizations put their data to work with greater speed, confidence, and impact. During this transition period, you may see references to both Fivetran and dbt Labs throughout our recruiting process as we integrate our teams, systems, and career sites. About the Role Fivetran + dbt  is seeking a Manager of Security Operations, Incident Detection and Response, to bolster and improve the robustness and security of the platform and the entire enterprise. This people-leadership role is hands-on and execution-focused, requiring deep expertise in security operations, incident detection and response, AI-driven security automation, and securing multi-tenant SaaS environments. You'll build and lead a high-performing team, own the detection and response technology stack, and serve as the accountable leader for incident response across the entire enterprise, ensuring threats are detected, contained, and remediated quickly from endpoint to cloud to production. This is a full-time remote position based out of the US (EST Time Zone). Technologies You’ll Use Crowdstrike, Okta, Google Workspace, Wiz, Open Source, Notion, JIRA What You’ll Do People Leadership: Lead, mentor, and develop a team of detection and response engineers and analysts. Set clear goals, manage performance, and grow careers while fostering a culture of ownership, curiosity, and urgency. Hiring & Team Building: Recruit, hire, and onboard top security talent. Define team structure, roles, on-call rotations, and hiring plans to scale the team alongside the business. Enterprise Incident Response: Own the incident response program for the entire enterprise, including investigation, containment, eradication, remediation, and post-incident review. Act as incident commander for major security events and coordinate with Legal, Privacy, Communications, and executive leadership. Detection Engineering: Build, optimize, and maintain high-fidelity detections across cloud, identity, endpoint, SaaS, and application layers, using threat-informed approaches such as MITRE ATT&CK to close coverage gaps. AI-Driven Security Operations: Drive the adoption of AI, including LLMs and AI agents, to automate alert triage, enrichment, investigation, and response. Evaluate and integrate AI capabilities to scale the team, and build detections for threats targeting AI systems and AI usage across the enterprise. Multi-Tenant SaaS Security: Design detection and response strategies tailored to a multi-tenant SaaS platform, including tenant isolation, cross-tenant access, and customer data protection. Lead customer-impacting incident response and coordinate customer notifications. Security Technology Ownership: Own the security operations technology stack, including SIEM, SOAR, EDR/XDR, cloud detection and response, and log pipelines. Manage the roadmap, budget, and vendor relationships. Threat Hunting & Intelligence: Lead proactive threat hunting and integrate threat intelligence to identify and mitigate emerging threats before they impact the business. Cross-Team Collaboration: Work directly with engineering, infrastructure, IT, application security, and GRC teams to integrate detection and response practices and remediate risks across build pipelines, runtime environments, and corporate systems. Tooling & Automation: Develop and maintain automation, playbooks, and integrations to streamline security processes and provide self-service security tools to the organization. Security Standards & Metrics: Implement consistent security controls, monitoring, and alerting across the enterprise. Define and report on key metrics such as mean time to detect (MTTD) and mean time to respond (MTTR), and support compliance requirements. Knowledge Sharing: Stay up to date with trends in security operations, incident response, cloud security, and AI security, applying this knowledge to improve the Fivetran platform's security posture. Skills We’re Looking For Security Operations & Incident Response Expertise: Deep expertise in detecting, investigating, and responding to security incidents, with a track record of leading enterprise-wide incident response. People Management: Proven experience managing, hiring, and developing security teams, including setting priorities, managing performance, and building a strong team culture. Multi-Tenant SaaS Experience: Extensive experience securing and responding to incidents in multi-tenant SaaS environments at scale, with a strong understanding of tenant isolation and customer data protection. AI Proficiency: Hands-on experience applying AI, including LLMs and AI agents, to security operations to automate detection, triage, and response, and a strong understanding of the risks AI introduces. Cloud & Infrastructure Security: Strong experience with cloud platforms (e.g., AWS, GCP, Azure), Kubernetes, and containerized environments, including cloud-native logging and detection. Detection & Response Tooling: Proficiency with SIEM, SOAR, EDR/XDR, identity, and cloud detection tools, and experience integrating them into automated workflows. Technology Ownership: Experience owning a security technology roadmap, including tool selection, budgets, and vendor management. Problem-Solving: Excellent problem-solving and troubleshooting skills, with the ability to make sound decisions under pressure in fast-paced environments. Communication: Strong communication skills with the ability to effectively collaborate with and educate engineering teams, and to communicate clearly with executives and customers during incidents. Curiosity & Urgency: Demonstrates strong curiosity, a sense of urgency, and a hands-on approach to diving deep into complex technical problems to drive timely and effective solutions. #LI-Remote #LI-AM1 The compensation range displayed on this job posting reflects the minimum and maximum target for new hire compensation for the target position and level, and may include sales incentives or target bonuses depending on the role.  Our compensation ranges are determined by role, level, and location. Our job titles may span more than one career level. Within the range, individual compensation is determined by additional factors, including job-related skills, experience, relevant education or training, business need, market demands. The compensation range is subject to change and may be modified in the future. Your recruiter can share more about the specific compensation range for your location during the hiring process. Pay Range $186,701 — $233,376 USD Perks and Benefits 100% employer-paid medical insurance * Generous paid time away from work, including paid vacation or flexible/unlimited vacation depending on role and country, plus paid sick time, inclusive parental leave, paid holidays, including a year-end Global Week of Rest, and volunteer days off. RSU stock grants* Professional development and training opportunities Company virtual happy hours, free food, and fun team-building activities Monthly cell phone stipend Access to an innovative mental health support platform that offers personalized care and resources in areas such as: therapy, coaching, and self-guided mindfulness exercises for all covered employees and their covered dependents. * May vary by country and worker type - please reach out to your recruiter for more information Click here to learn more about Fivetran's Benefits by Region. We’re honored to be valued at over $5.6 billion , but more importantly, we’re proud of our core values of Get Stuck In, Do the Right Thing, and One Team, One Dream . Read about us in Forbes . Fivetran brings together high-quality talent across the globe to make data access as easy and reliable as electricity for our customers. We value and recognize that our customers benefit from having innovative teams made of people from many backgrounds, experiences, and identities. Fivetran promotes diversity, equity, inclusion & belonging through attracting, recruiting, developing, and retaining a diverse workforce, not only because it is the right thing to do, but because it helps us build a world-class company to better serve our customers, our people and our communities. To learn more about Fivetran’s culture and what it’s like to be part of the team, click here and enjoy our video. To learn more about our candidate privacy policy, you can read our statement here . We are committed to ensuring that all candidates have an equal opportunity to participate in our interview process. If you require accommodations at any stage of the process due to a disability, medical condition, or any other circumstance, please don't hesitate to submit your request by filling out this form . We will work with you to provide reasonable accommodations to facilitate your participation and ensure a fair and accessible interview experience. Your request and any information provided will be kept confidential and will not impact your candidacy. We look forward to hearing from you and accommodating your needs to the best of our ability.

Location: United States About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role: Nebius is building the AI infrastructure that financial institutions will run AI on in production, from quantitative research and real-time risk to agentic workflows in banks and insurers. The Field CTO for Financial Services is a senior technical leadership role at the intersection of production GPU infrastructure and the regulated business of financial services. You will lead the technical side of the vertical: the architecture conversation with CTOs and heads of research infrastructure, the technical content of regulated-buyer diligence, the reference architectures for financial workloads, and the product requirements that come out of the field. Financial institutions buy AI infrastructure differently from most customers. Quantitative funds and AI-native fintechs buy GPU capacity directly and judge it on price-performance, availability, and how the cluster behaves under their own workloads. Banks and insurers add a second review: security, third-party risk, data residency, and exit planning are assessed before a deal reaches architecture discussions. You will earn the trust of both kinds of buyer and help make Nebius an approved supplier to financial institutions. You will work alongside the Head of Financial Services, Sales, Security and GRC, Product, and Engineering. The role begins as a hands-on individual contributor, with a clear path to building and leading forward deployed engineers as the vertical scales. This is a ground-floor opportunity to define how financial institutions run AI in production on a specialized AI cloud. You are welcome to work remotely from the United States (New York City preferred). Travel expectations are 10% to 20% for customer visits, executive meetings, and key industry events. Your responsibilities will include: Executive Technical Leadership: Serve as the technical face of Nebius to financial services customers, partners, and ecosystem stakeholders. Lead architecture workshops and technical discovery with CTOs, heads of quant and ML platforms, and CIOs, showing technical buyers how Nebius performs on their own workloads and institutions how the architecture fits their control framework. Lighthouse Deal Support: Partner with Sales leadership on strategic financial services deals, including workload-level cost comparisons against on-premises and hyperscaler options. Regulated-Buyer Diligence: Work with Security, GRC, and Legal to turn our SOC 2 Type II and ISO 27001 certifications, and our alignment with frameworks such as DORA, into answers that third-party risk teams accept. Cover data residency, tenant isolation, key management, audit logging, resilience evidence, concentration risk, and exit and portability plans. Flag gaps early and bring them to Product as requirements. Architectural Guidance: Define reference architectures for financial workloads: quantitative research and backtesting, real-time risk and fraud inference, LLM and agentic workflows in KYC, AML, and document processing, and fine-tuning on sensitive proprietary data. Technical Product Strategy: Translate what you learn in accounts into prioritized, evidence-backed requirements for Product, Engineering, and Infrastructure teams, and keep a structured feedback loop so R&D can act on them. Field Enablement: Act as a force multiplier for the sales organization by creating the technical narrative, reference architectures, and training materials that help Field SAs and sellers engage financial services buyers credibly. Ecosystem & M&A: Partner with ecosystem vendors (market and reference data providers, model risk and AI governance tooling, trading and risk platforms, systems integrators) to identify integration opportunities and evaluate potential technical M&A targets. Team Building: Build and lead forward deployed engineers as the vertical grows, setting how they scope, deliver, and hand learnings back to Product. We expect you to have: 10+ years of experience in cloud infrastructure, platform engineering, distributed systems, or a closely related technical domain, including 5+ years in AI, ML, or MLOps with exposure to production or large-scale systems. Prior experience in a senior technical leadership role, for example Field CTO, CTO or technical co-founder of a fintech or AI-native company, head of quant or ML platform, or principal-level architect on a cloud vendor financial services team. Dual Competency: You can draw a distributed system on a whiteboard for engineers and explain its value and risk profile to a CIO or a Chief Risk Officer. GTM Fluency: Experience partnering with Sales to close large enterprise deals and enabling field teams with technical assets. Product-Minded Leadership: You have defined requirements from field evidence and shaped platform strategy. You are comfortable telling a customer no when a request would create technical debt, and proposing a better alternative. Mastery of the Stack: Expert-level, production-grade knowledge of GPU architectures, Kubernetes and Slurm orchestration including Soperator, high-performance and parallel file systems, and networking constraints (InfiniBand and Ethernet). Inference Optimization: You understand the nuances of model serving, including batch sizes, quantization, KV caching, and latency tradeoffs, and can architect for both massive throughput and latency-sensitive demands such as real-time risk and fraud scoring. Financial Services Fluency: First-hand experience in at least one of capital markets and quant research infrastructure, bank or insurer AI platforms, AI-native fintech, or an FSI technical role at a cloud or GPU provider, plus working knowledge of how regulated buyers review vendors: data residency, third-party and concentration risk, and model risk management expectations (for example SR 11-7 in the US). Builder Mentality: You arrive with your own point of view on where financial institutions are heading with AI infrastructure and pursue it without waiting to be directed. You are comfortable starting as a hands-on individual contributor and growing into a team. Public Technical Voice: Conference talks, writing, or open-source work that shows credibility with engineering and executive audiences. Communication: Strong executive presence, capable of influencing product teams and leadership through clarity and credibility. Comfort in Ambiguity: Experience operating in fast-moving environments (hyperscalers, cloud platforms, or advanced AI startups) where requirements are evolving. Preferred Qualifications: Hands-on experience with quantitative research infrastructure, low-latency trading systems, or model risk management in a regulated institution. Familiarity with the hybrid and on-premises GPU environments financial institutions run. Strategic Empathy: The ability to distinguish customers who need raw cluster access from those who need managed endpoints, and the judgment to prescribe the right path. Why Nebius: Build Solutions: You will shape how financial institutions run AI in production on a specialized AI cloud. Scale: Opportunity to help build the Financial Services vertical from the ground up. Frontier Technology: Work at the frontier of AI infrastructure, agentic workflows, and financial intelligence alongside leading customers and partners. Strategic Impact: Real influence over product direction, platform strategy, and ecosystem development. Ownership: Join a team that values technical depth, ownership, and speed of execution. Mission: Help define how intelligence moves from the data center into trading desks, risk engines, and the operations of banks and insurers. What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Key employee benefits in the US: #LI-LG1 Health insurance: 100% company-paid medical, dental, and vision coverage for employees and families. 401(k) plan: Up to 4% company match with immediate vesting. Parental leave: 20 weeks paid for primary caregivers, 12 weeks for secondary caregivers. Remote work reimbursement: Up to $85/month for mobile and internet. Disability & life insurance : Company-paid short-term, long-term and life insurance coverage. Pay Transparency We offer competitive compensation and benefits packages. Actual compensation will be determined based on job-related factors, including experience, skills, qualifications, the level at which the candidate is hired, and geographic location, consistent with applicable law. Base Compensation Range $210,000 — $260,000 USD Benefits & Perks: Competitive compensation Career growth and learning opportunities Flexibility and ownership Collaborative and innovative culture Opportunity to work on impactful AI projects International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.