Location: Dubai, UAE
Workplace: onsite
About us:
Tabby is on a mission to give people power over their money. For too long, financial systems have worked for the institutions that built them, not the people using them. Runaway interest, fine print and limited access have left many behind, feeling shut out of a system that wasn't setting them up for success.
We're building a different kind of system—in a complete money app to send, spend and save. One that's clear, flexible and puts people and businesses in control. Founded in 2019, we serve customers and businesses across Saudi Arabia, the United Arab Emirates and Kuwait. Millions of customers and 65,000 global brands, government services and small businesses rely on us today.
What began as a better way to pay at checkout has grown into a financial system working the way it should have all along.
About the role:
The Senior Information Security Specialist (GRC) independently leads complex governance, risk, and compliance activities and serves as a subject matter expert in one or more GRC domains — enterprise information security governance, risk management frameworks, regulatory compliance, or third-party risk management.
The role produces high-quality GRC deliverables, provides technical mentoring to junior and mid-level team members, and contributes directly to the continuous improvement of the organization's GRC framework, risk treatment processes, and compliance reporting mechanisms. The Senior Specialist bridges technical execution and programme leadership, collaborating with leads, legal, audit, and business stakeholders to deliver mature, effective GRC outcomes aligned with the UAE Fintech regulatory environment.
Key Responsibilities
Information Security Governance Leadership:
Lead the development, review, and continuous improvement of information security policies, standards, procedures, and governance frameworks, ensuring alignment with CSF, NCA ECC, ISO 27001, and PCI-DSS.
Serve as the subject matter expert for assigned regulatory domains, providing authoritative interpretation of requirements and translating them into implementable control objectives.
Monitor and proactively track regulatory and legal developments affecting information security, assessing impact and recommending updates to the governance framework.
Prepare and review governance documentation (RACI matrices, security charter updates, governance committee packs) and present findings to senior stakeholders.
Lead the preparation of regulatory self-assessments and compliance attestations, coordinating evidence gathering and quality-reviewing submissions before senior sign-off.
Mentor junior team members on governance documentation quality, regulatory interpretation, and risk assessment methodology.
Enterprise Risk Management:
Lead the execution of complex enterprise information security risk assessments, applying advanced qualitative and quantitative methodologies to produce risk profiles aligned with the organisation's risk appetite.
Own and maintain the enterprise information security risk register, ensuring accuracy, currency, and appropriate escalation of significant risks.
Lead BIA processes for critical business functions, coordinating with asset owners, analysing recovery requirements, and producing BIA outputs for Business Continuity and Disaster Recovery planning.
Design and execute control effectiveness testing programmes, producing findings reports with gap analysis and risk-ranked remediation recommendations.
Lead third-party information security risk management, designing assessment frameworks, conducting in-depth vendor reviews, and maintaining the third-party risk register.
Produce executive-quality risk reporting with trend analysis, emerging risk identification, and treatment progress tracking for senior management and committee consumption.
Compliance Programme Delivery:
Lead compliance monitoring activities for CSF, NCA ECC, PDPL, ISO 27001, and PCI-DSS, producing gap analyses, treatment plans, and periodic compliance status reports.
Manage internal and external audit cycles, coordinating evidence collection, reviewing evidence quality, engaging with auditors, and tracking remediation to closure.
Design and deliver the security awareness programme, producing targeted content for different staff segments, conducting awareness sessions, and analysing effectiveness metrics.
Develop and maintain GRC programme metrics dashboards, ensuring KPIs and KRIs are accurately measured and presented to senior management on schedule.
Lead the integration of information security requirements into third-party contracts, procurement processes, and major project onboarding.
Contribute to the development of the information security programme strategy, identifying capability improvement opportunities and recommending investment priorities to the Lead.
Cross-Functional Collaboration & Knowledge Leadership:
Serve as the primary GRC point of contact for assigned business and technology teams, providing expert guidance on security requirements, risk treatment, and compliance obligations.
Lead information classification and security requirements reviews for significant IT, product, and business projects.
Contribute to the GRC knowledge base, developing reusable templates, guidance documents, and training materials for internal use.
Represent the GRC function in cross-functional working groups, project steering committees, and regulatory workstreams.
Skills, Knowledge and Expertise
Education:
Bachelor's degree in Information Technology, Computer Science, Software Engineering, Cybersecurity, Risk Management, or a related field.
A Master's degree in Information Security, Risk Management, or Business Administration is an advantage.
Experience:
3+ years of progressive professional experience in information security governance, risk management, or compliance.
Demonstrable experience independently leading risk assessment cycles, regulatory compliance programmes, or audit coordination activities.
In-depth knowledge of at least two regulatory frameworks applicable to Fintech environments (CSF, NCA ECC, PDPL, ISO 27001, PCI-DSS) is required.
Experience in a regulated Fintech or banking environment is strongly preferred.
Certifications & Licences:
ISO 27001 Lead Implementer (required).
CRISC (Certified in Risk and Information Systems Control) or CISM: required or actively working toward.
CDPSE (Certified Data Privacy Solutions Engineer) is an advantage for PDPL specialists.
Benefits
A working environment that gives you autonomy and responsibility from day one.
You should be comfortable with the idea that the quality of your work will influence the shape of your career.
Participation in the company’s employee stock options program.
Health Insurance
Flexi Perks: A monetary benefit that gives you the freedom to use it as you choose—whether for health and well-being, education and professional development or travel needs!
Location: Riyadh, KSA
Workplace: onsite
The Lead Anti-Fraud Officer independently leads complex governance, risk, and compliance activities and serves as a subject matter expert in one or more GRC domains — enterprise information security governance, risk management frameworks, regulatory compliance, or third-party risk management. The role produces high-quality GRC deliverables, provides technical mentoring to junior and mid-level team members, and contributes directly to the continuous improvement of the organization's GRC framework, risk treatment processes, and compliance reporting mechanisms.
The Lead Anti-Fraud Officer operates as a bridge between technical execution and programme leadership — collaborating with leads, legal, audit, and business stakeholders to drive mature and effective GRC outcomes aligned with the Saudi Fintech regulatory environment.
Key Responsibilities
Lead the development, review, and continuous improvement of information security policies, standards, procedures, and governance frameworks.
Serve as the subject matter expert for assigned regulatory domains, providing authoritative interpretation of requirements and translating them into implementable control objectives.
Monitor and proactively track regulatory and legal developments affecting information security — assessing impact and recommending updates to the governance framework.
Prepare and review governance documentation — RACI matrices, security charter updates, governance committee packs — and present findings to senior stakeholders.
Lead the preparation of regulatory self-assessments and compliance attestations, coordinating evidence gathering and quality-reviewing submissions before senior sign-off.
Mentor GR1–GR2 team members on governance documentation quality, regulatory interpretation, and risk assessment methodology.
Enterprise Risk Management
Lead the execution of complex enterprise information security risk assessments, applying advanced qualitative and quantitative methodologies to produce risk profiles aligned with the organization's risk appetite.
Own and maintain the enterprise information security risk register — ensuring accuracy, currency, and appropriate escalation of significant risks.
Lead BIA processes for critical business functions — coordinating with asset owners, analysing recovery requirements, and producing BIA outputs for Business Continuity and Disaster Recovery planning.
Design and execute control effectiveness testing programmes, producing findings reports with gap analysis and risk-ranked remediation recommendations.
Lead third-party information security risk management — designing assessment frameworks, conducting in-depth vendor reviews, and maintaining the third-party risk register.
Produce executive-quality risk reporting with trend analysis, emerging risk identification, and treatment progress tracking for senior management and committee consumption.
Compliance Programme Delivery
Lead compliance monitoring activities for CFFR, NCA ECC, PDPL, ISO 27001, and PCI-DSS — producing gap analyses, treatment plans, and periodic compliance status reports.
Manage internal and external audit cycles — coordinating evidence collection, reviewing evidence quality, engaging with auditors, and tracking remediation to closure.
Design and deliver the security awareness programme — producing targeted content for different staff segments, conducting awareness sessions, and analysing effectiveness metrics.
Develop and maintain GRC programme metrics dashboards, ensuring KPIs and KRIs are accurately measured and presented to senior management on schedule.
Lead the integration of information security requirements into third-party contracts, procurement processes, and major project onboarding.
Contribute to the development of the information security programme strategy, identifying capability improvement opportunities and recommending investment priorities to the Lead.
Cross-Functional Collaboration & Knowledge Leadership
Serve as the primary GRC point of contact for assigned business and technology teams — providing expert guidance on security requirements, risk treatment, and compliance obligations.
Lead information classification and security requirements reviews for significant IT, product, and business projects.
Contribute to the GRC knowledge base — developing reusable templates, guidance documents, and training materials for internal use.
Represent the GRC function in cross-functional working groups, project steering committees, and regulatory workstreams.
Perform additional responsibilities as assigned by management.
Skills, Knowledge and Expertise
Bachelor's degree in Information Technology, Computer Science, Software Engineering, Cybersecurity, Risk Management, or a related field.
A Master's degree in Information Security, Risk Management, or Business Administration is an advantage.
3–5 years of progressive professional experience in information security governance, risk management, or compliance. Demonstrable experience independently leading risk assessment cycles, regulatory compliance programmes, or audit coordination activities.
In-depth knowledge of the
CFFR framework
is required.
Experience in a regulated Fintech or banking environment is strongly preferred.
Benefits
We have an inclusive company culture, embracing diversity, integrity and transparency. We strive for work-life balance and cherish the moments you spend with your loved ones, off-work. In the same spirit as for our product, we are caring and nurturing for our employees.
Our people are granted 100% trust and freedom to apply their own vision and come up with their ideas from day 1 at Tabby. You are the one who takes responsibility for your area of work. We encourage everyone to think and make decisions like Tabby was their own business, well because it is. Our employee stock options programme is available for everyone.
You will have an opportunity to learn and grow in one of the fastest growing fintech companies in the region
We offer you relocation support as well as we guide you through all the process.
We’ll set you up with the devices required for your work.
Location: Istanbul, Istanbul Province, Turkey
Are you a bilingual professional looking for a flexible and rewarding career?
We are seeking talented individuals proficient in
Kurdish and English
to join our international team. If you have a passion for languages and a commitment to service, we want to hear from you!
The Role:
As a Remote Interpreter, you will facilitate vital communication between Kurdish and English speakers, primarily within the
healthcare and medical sectors
. You will process information quickly and accurately while maintaining a professional environment.
What We Offer:
Fully Remote:
Work from the comfort of your home office.
Specialized Training:
We provide internal professional training to certify you as a Medical Interpreter.
Stability:
Full-time contractor position with immediate availability.
Professional Growth:
Monthly payments and a supportive team environment with dedicated Team Leaders.
Candidate Qualifications:
Language Skills:
Near-native fluency in both English (90%+) and Kurdish.
Experience:
Minimum 2 years of interpretation experience preferred (but we value linguistic talent and potential!).
Core Skills:
Excellent listening, retention, and note-taking abilities to ensure 100% accuracy without omissions or additions.
Cultural Sensitivity:
Ability to explain cultural concepts to prevent miscommunication when necessary.
Technical Requirements:
Steady
wired
internet connection.
USB wired
headset.
PC/Laptop with Windows 10 or Mac.
A quiet, secure, and distraction-free workspace.
Your Responsibilities:
Handle interpretation calls professionally following the interpreter’s code of conduct.
Master industry-specific vocabulary (Healthcare/Medical) through our provided training.
Collaborate closely with your Team Leader and participate in ongoing quality sessions.
Note: Based on your location, language testing and background checks may be required.
Join a dynamic team that values your skills and invests in your professional development. Apply today!
Istanbul, Istanbul Province, Turkey
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
Location: Diyarbakır, Turkey
Are you a bilingual professional looking for a flexible and rewarding career?
We are seeking talented individuals proficient in
Kurdish and English
to join our international team. If you have a passion for languages and a commitment to service, we want to hear from you!
The Role:
As a Remote Interpreter, you will facilitate vital communication between Kurdish and English speakers, primarily within the
healthcare and medical sectors
. You will process information quickly and accurately while maintaining a professional environment.
What We Offer:
Fully Remote:
Work from the comfort of your home office.
Specialized Training:
We provide internal professional training to certify you as a Medical Interpreter.
Stability:
Full-time contractor position with immediate availability.
Professional Growth:
Monthly payments and a supportive team environment with dedicated Team Leaders.
Candidate Qualifications:
Language Skills:
Near-native fluency in both English (90%+) and Kurdish.
Experience:
Minimum 2 years of interpretation experience preferred (but we value linguistic talent and potential!).
Core Skills:
Excellent listening, retention, and note-taking abilities to ensure 100% accuracy without omissions or additions.
Cultural Sensitivity:
Ability to explain cultural concepts to prevent miscommunication when necessary.
Technical Requirements:
Steady
wired
internet connection.
USB wired
headset.
PC/Laptop with Windows 10 or Mac.
A quiet, secure, and distraction-free workspace.
Your Responsibilities:
Handle interpretation calls professionally following the interpreter’s code of conduct.
Master industry-specific vocabulary (Healthcare/Medical) through our provided training.
Collaborate closely with your Team Leader and participate in ongoing quality sessions.
Note: Based on your location, language testing and background checks may be required.
Join a dynamic team that values your skills and invests in your professional development. Apply today!
Location: Paris, Île-de-France, France
Are you a bilingual professional looking for a flexible and rewarding career?
We are seeking talented individuals proficient in
Kurdish and English
to join our international team. If you have a passion for languages and a commitment to service, we want to hear from you!
The Role:
As a Remote Interpreter, you will facilitate vital communication between Kurdish and English speakers, primarily within the
healthcare and medical sectors
. You will process information quickly and accurately while maintaining a professional environment.
What We Offer:
Fully Remote:
Work from the comfort of your home office.
Specialized Training:
We provide internal professional training to certify you as a Medical Interpreter.
Stability:
Full-time contractor position with immediate availability.
Professional Growth:
Monthly payments and a supportive team environment with dedicated Team Leaders.
Candidate Qualifications:
Language Skills:
Near-native fluency in both English (90%+) and Kurdish.
Experience:
Minimum 2 years of interpretation experience preferred (but we value linguistic talent and potential!).
Core Skills:
Excellent listening, retention, and note-taking abilities to ensure 100% accuracy without omissions or additions.
Cultural Sensitivity:
Ability to explain cultural concepts to prevent miscommunication when necessary.
Technical Requirements:
Steady
wired
internet connection.
USB wired
headset.
PC/Laptop with Windows 10 or Mac.
A quiet, secure, and distraction-free workspace.
Your Responsibilities:
Handle interpretation calls professionally following the interpreter’s code of conduct.
Master industry-specific vocabulary (Healthcare/Medical) through our provided training.
Collaborate closely with your Team Leader and participate in ongoing quality sessions.
Note: Based on your location, language testing and background checks may be required.
Join a dynamic team that values your skills and invests in your professional development. Apply today!
Location: Stockholm, Sweden
Are you a bilingual professional looking for a flexible and rewarding career?
We are seeking talented individuals proficient in
Kurdish and English
to join our international team. If you have a passion for languages and a commitment to service, we want to hear from you!
The Role:
As a Remote Interpreter, you will facilitate vital communication between Kurdish and English speakers, primarily within the
healthcare and medical sectors
. You will process information quickly and accurately while maintaining a professional environment.
What We Offer:
Fully Remote:
Work from the comfort of your home office.
Specialized Training:
We provide internal professional training to certify you as a Medical Interpreter.
Stability:
Full-time contractor position with immediate availability.
Professional Growth:
Monthly payments and a supportive team environment with dedicated Team Leaders.
Candidate Qualifications:
Language Skills:
Near-native fluency in both English (90%+) and Kurdish.
Experience:
Minimum 2 years of interpretation experience preferred (but we value linguistic talent and potential!).
Core Skills:
Excellent listening, retention, and note-taking abilities to ensure 100% accuracy without omissions or additions.
Cultural Sensitivity:
Ability to explain cultural concepts to prevent miscommunication when necessary.
Technical Requirements:
Steady
wired
internet connection.
USB wired
headset.
PC/Laptop with Windows 10 or Mac.
A quiet, secure, and distraction-free workspace.
Your Responsibilities:
Handle interpretation calls professionally following the interpreter’s code of conduct.
Master industry-specific vocabulary (Healthcare/Medical) through our provided training.
Collaborate closely with your Team Leader and participate in ongoing quality sessions.
Note: Based on your location, language testing and background checks may be required.
Join a dynamic team that values your skills and invests in your professional development. Apply today!
Location: Cologne, North Rhine-Westphalia, Germany
Are you a bilingual professional looking for a flexible and rewarding career?
We are seeking talented individuals proficient in
Kurdish and English
to join our international team. If you have a passion for languages and a commitment to service, we want to hear from you!
The Role:
As a Remote Interpreter, you will facilitate vital communication between Kurdish and English speakers, primarily within the
healthcare and medical sectors
. You will process information quickly and accurately while maintaining a professional environment.
What We Offer:
Fully Remote:
Work from the comfort of your home office.
Specialized Training:
We provide internal professional training to certify you as a Medical Interpreter.
Stability:
Full-time contractor position with immediate availability.
Professional Growth:
Monthly payments and a supportive team environment with dedicated Team Leaders.
Candidate Qualifications:
Language Skills:
Near-native fluency in both English (90%+) and Kurdish.
Experience:
Minimum 2 years of interpretation experience preferred (but we value linguistic talent and potential!).
Core Skills:
Excellent listening, retention, and note-taking abilities to ensure 100% accuracy without omissions or additions.
Cultural Sensitivity:
Ability to explain cultural concepts to prevent miscommunication when necessary.
Technical Requirements:
Steady
wired
internet connection.
USB wired
headset.
PC/Laptop with Windows 10 or Mac.
A quiet, secure, and distraction-free workspace.
Your Responsibilities:
Handle interpretation calls professionally following the interpreter’s code of conduct.
Master industry-specific vocabulary (Healthcare/Medical) through our provided training.
Collaborate closely with your Team Leader and participate in ongoing quality sessions.
Note: Based on your location, language testing and background checks may be required.
Join a dynamic team that values your skills and invests in your professional development. Apply today!
Location: Berlin, Germany
Are you a bilingual professional looking for a flexible and rewarding career?
We are seeking talented individuals proficient in
Kurdish and English
to join our international team. If you have a passion for languages and a commitment to service, we want to hear from you!
The Role:
As a Remote Interpreter, you will facilitate vital communication between Kurdish and English speakers, primarily within the
healthcare and medical sectors
. You will process information quickly and accurately while maintaining a professional environment.
What We Offer:
Fully Remote:
Work from the comfort of your home office.
Specialized Training:
We provide internal professional training to certify you as a Medical Interpreter.
Stability:
Full-time contractor position with immediate availability.
Professional Growth:
Monthly payments and a supportive team environment with dedicated Team Leaders.
Candidate Qualifications:
Language Skills:
Near-native fluency in both English (90%+) and Kurdish.
Experience:
Minimum 2 years of interpretation experience preferred (but we value linguistic talent and potential!).
Core Skills:
Excellent listening, retention, and note-taking abilities to ensure 100% accuracy without omissions or additions.
Cultural Sensitivity:
Ability to explain cultural concepts to prevent miscommunication when necessary.
Technical Requirements:
Steady
wired
internet connection.
USB wired
headset.
PC/Laptop with Windows 10 or Mac.
A quiet, secure, and distraction-free workspace.
Your Responsibilities:
Handle interpretation calls professionally following the interpreter’s code of conduct.
Master industry-specific vocabulary (Healthcare/Medical) through our provided training.
Collaborate closely with your Team Leader and participate in ongoing quality sessions.
Note: Based on your location, language testing and background checks may be required.
Join a dynamic team that values your skills and invests in your professional development. Apply today!
Location: Poitiers, Vienne, France
Are you a bilingual professional looking for a flexible and rewarding career?
We are seeking talented individuals proficient in
French and English
to join our international team. If you have a passion for languages and a commitment to service, we want to hear from you!
The Role:
As a Remote Interpreter, you will facilitate vital communication between French and English speakers, primarily within the
healthcare and medical sectors
. You will process information quickly and accurately while maintaining a professional environment.
What We Offer:
Fully Remote:
Work from the comfort of your home office.
Specialized Training:
We provide internal professional training to certify you as a Medical Interpreter.
Stability:
Full-time contractor position with immediate availability.
Professional Growth:
Monthly payments and a supportive team environment with dedicated Team Leaders.
Candidate Qualifications:
Language Skills:
Near-native fluency in both English (90%+) and French.
Experience:
Minimum 2 years of interpretation experience preferred (but we value linguistic talent and potential!).
Core Skills:
Excellent listening, retention, and note-taking abilities to ensure 100% accuracy without omissions or additions.
Cultural Sensitivity:
Ability to explain cultural concepts to prevent miscommunication when necessary.
Technical Requirements:
Steady
wired
internet connection.
USB wired
headset.
PC/Laptop with Windows 10 or Mac.
A quiet, secure, and distraction-free workspace.
Your Responsibilities:
Handle interpretation calls professionally following the interpreter’s code of conduct.
Master industry-specific vocabulary (Healthcare/Medical) through our provided training.
Collaborate closely with your Team Leader and participate in ongoing quality sessions.
Note: Based on your location, language testing and background checks may be required.
Join a dynamic team that values your skills and invests in your professional development. Apply today!
Location: Grenoble, Isère, France
Are you a bilingual professional looking for a flexible and rewarding career?
We are seeking talented individuals proficient in
French and English
to join our international team. If you have a passion for languages and a commitment to service, we want to hear from you!
The Role:
As a Remote Interpreter, you will facilitate vital communication between French and English speakers, primarily within the
healthcare and medical sectors
. You will process information quickly and accurately while maintaining a professional environment.
What We Offer:
Fully Remote:
Work from the comfort of your home office.
Specialized Training:
We provide internal professional training to certify you as a Medical Interpreter.
Stability:
Full-time contractor position with immediate availability.
Professional Growth:
Monthly payments and a supportive team environment with dedicated Team Leaders.
Candidate Qualifications:
Language Skills:
Near-native fluency in both English (90%+) and French.
Experience:
Minimum 2 years of interpretation experience preferred (but we value linguistic talent and potential!).
Core Skills:
Excellent listening, retention, and note-taking abilities to ensure 100% accuracy without omissions or additions.
Cultural Sensitivity:
Ability to explain cultural concepts to prevent miscommunication when necessary.
Technical Requirements:
Steady
wired
internet connection.
USB wired
headset.
PC/Laptop with Windows 10 or Mac.
A quiet, secure, and distraction-free workspace.
Your Responsibilities:
Handle interpretation calls professionally following the interpreter’s code of conduct.
Master industry-specific vocabulary (Healthcare/Medical) through our provided training.
Collaborate closely with your Team Leader and participate in ongoing quality sessions.
Note: Based on your location, language testing and background checks may be required.
Join a dynamic team that values your skills and invests in your professional development. Apply today!
Location: Marseille, Bouches-du-Rhône, France
Are you a bilingual professional looking for a flexible and rewarding career?
We are seeking talented individuals proficient in
French and English
to join our international team. If you have a passion for languages and a commitment to service, we want to hear from you!
The Role:
As a Remote Interpreter, you will facilitate vital communication between French and English speakers, primarily within the
healthcare and medical sectors
. You will process information quickly and accurately while maintaining a professional environment.
What We Offer:
Fully Remote:
Work from the comfort of your home office.
Specialized Training:
We provide internal professional training to certify you as a Medical Interpreter.
Stability:
Full-time contractor position with immediate availability.
Professional Growth:
Monthly payments and a supportive team environment with dedicated Team Leaders.
Candidate Qualifications:
Language Skills:
Near-native fluency in both English (90%+) and French.
Experience:
Minimum 2 years of interpretation experience preferred (but we value linguistic talent and potential!).
Core Skills:
Excellent listening, retention, and note-taking abilities to ensure 100% accuracy without omissions or additions.
Cultural Sensitivity:
Ability to explain cultural concepts to prevent miscommunication when necessary.
Technical Requirements:
Steady
wired
internet connection.
USB wired
headset.
PC/Laptop with Windows 10 or Mac.
A quiet, secure, and distraction-free workspace.
Your Responsibilities:
Handle interpretation calls professionally following the interpreter’s code of conduct.
Master industry-specific vocabulary (Healthcare/Medical) through our provided training.
Collaborate closely with your Team Leader and participate in ongoing quality sessions.
Note: Based on your location, language testing and background checks may be required.
Join a dynamic team that values your skills and invests in your professional development. Apply today!
Location: Remote - US
Founded in 2012, Bugcrowd is the preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight to help organizations avoid, discover, and validate real-world risk. Bugcrowd helps security teams move faster by identifying the exposures that matter most so they can act first and stay ahead of attackers. By combining the power of humans and AI, teams can preempt attack paths and prevent breaches. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others. Visit
www.bugcrowd.com
.
Job Summary
The Bugcrowd RL and Reasoning Team focuses on pushing the boundaries of autonomous cybersecurity by building authentic, verifiable reinforcement learning environments for world-leading foundational AI companies. As a Reinforcement Learning Engineer specializing in Reinforcement Learning from Verifiable Rewards (RLVR), you will design and scale automated verification pipelines that transform real-world software vulnerabilities into deterministic reward functions. In this role, you will bridge the gap between low-level security analysis and modern LLM reasoning models, engineering environments where AI agents learn to discover, exploit, and remediate software vulnerabilities with mathematical certainty. Instead of relying on subjective human feedback, your work directly powers the rigorous, verifiable reward signals that teach next-generation frontier AI models how to master complex cybersecurity domain logic. You will work at the intersection of fuzzing, dynamic program analysis, system exploitation, and scalable ML infrastructure to shape the safety and offensive/defensive capabilities of future artificial intelligence.
Essential Duties and Responsibilities
Design, build, and deploy high-throughput RLVR (Reinforcement Learning from Verifiable Rewards) environments that evaluate LLM action sequences against deterministic execution outcomes.
Develop automated test harnesses, sandboxes, and verification engines that convert complex vulnerability research (e.g., memory corruption, web security, logic bugs) into binary pass/fail reward signals.
Integrate Bugcrowd’s Mayhem automated analysis platform and real-world vulnerability feeds into continuous, scalable RL environment generation pipelines.
Architect safe, isolated, and highly reproducible execution environments (using Docker, BuildKit, or Nix) capable of running thousands of simultaneous agent-driven exploitation and patching trajectories.
Collaborate directly with researchers at frontier AI labs including Anthropic, OpenAI, and Cohere to define standard benchmark formats, observation spaces, and verifiable evaluation metrics for cybersecurity tasks.
Implement precise telemetry, ground-truth verification algorithms, and trajectory logging to analyze agent reasoning paths and prevent reward hacking or false positives.
Build low-level instrumentation and debugging tools to monitor memory states, process executions, and network behaviors during agent interaction cycles.
Optimize infrastructure performance and environment reset latency to support massive-scale parallel sampling and distributed RL training workflows.
Benchmark and evaluate frontier AI model performance across diverse offensive and defensive security challenges, such as automated fuzzing, exploit payload generation, and patch validation.
Education, Experience, Knowledge, Skills, and Abilities
Understanding of RL training workflows used by modern LLM systems, specifically execution-based feedback or Reinforcement Learning from Verifiable Rewards (RLVR).
Proficiency developing applications in Python and low-level systems programming in C, with Rust experience being a strong plus.
Solid understanding of software vulnerabilities, binary exploitation, fuzzing methodologies, or program analysis.
Experience with DevOps pipelines (e.g., GitHub Actions), reproducible builds (Docker, BuildKit, Nix), and comfort working with Linux systems and low-level debugging.
Experience working with or building benchmark environments (e.g., CTFs, SWE-bench, security challenges, or execution sandboxes).
Preferred Experience
Experience designing custom reward functions, ground-truth verifiers, or automated grading engines for AI safety and reasoning models.
Background in low-level program analysis tools, sanitizers (e.g., ASan/MSan), compiler instrumentation, or automated exploit generation tools.
Proven track record of participating in or developing competitive cybersecurity benchmarks, CTFs, or open-source AI evaluation frameworks.
Working Conditions and Physical Requirements
The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation.
Sitting and / or standing - Must be able to remain in a stationary position 50% of the time
Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day.
Environment - remote, work-from-home 100% of the time.
Pay Range Disclosure
At Bugcrowd, we strive for fairness, equality and to create an environment that allows our people to perform at their very best. Our compensation philosophy is to foster a collaborative community that rewards, attracts and retains the best possible talent. The provided salary details are based on US national averages and we retain the flexibility to tailor to the needs of the business.
The national estimate for the current base range for the position of $176,400 - $242,550.
This position may also be eligible to participate in a discretionary bonus program or commission plan, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Culture
At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work.
We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well.
Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point.
At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring.
Disclaimer
This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence.
The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets).
Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by
law.
Any personal data you submit in connection with your application will be processed in compliance with Bugcrowd's Privacy Policy, which you may review here:
https://www.bugcrowd.com/privacy
.
Equal Employment Opportunity:
Bugcrowd is EOE, Disability/Age Employer.
Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation.
Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com.
Apply at:
https://www.bugcrowd.com/about/careers/
Location: UK, London
Workplace: OnSite
Here at Humanoid, we believe in a future where robots amplify human potential. That’s why we’ve set out on a mission to build the world’s most capable, commercially-scalable, and safe humanoid robots. We’re bringing that mission to life with HMND‑01 - our rapidly developed humanoid platform being deployed in real industrial environments - and we’re growing the team to take it even further.
ABOUT THE ROLE
Humanoid is seeking a Director of Contracts & Business Support to lead commercial contracting across the business and to build the processes, standards, and systems that support it. This is the company's senior commercial legal role, reporting directly to the CLO. It carries a global remit covering the markets Humanoid sells into, the partners it builds with, and the suppliers from which it sources.
The role works in close partnership with the go-to-market (GTM) and supply chain functions, supporting transactions from initial structuring through negotiation to signature. This includes customer and reseller agreements, master supply and manufacturing contracts, technology partnerships incorporating revenue share and other non-standard commercial models, and the confidentiality and data protection arrangements that sit alongside them.
Alongside transactional work, the role owns the contracting operating model: standard templates, negotiation playbooks and fallback positions, delegation of authority, escalation routes, and the selection and implementation of contract lifecycle management (CLM) and AI-assisted contract review tooling.
WHAT YOU'LL DO
- Own commercial contracting end to end, drafting, negotiating, and closing customer, partner, and supplier agreements across every country we operate in.
- Act as the legal partner to our GTM and supply chain teams, from early deal shaping through to signature, with fast and commercially practical answers.
- Negotiate supply chain and manufacturing agreements, and technology partnerships including revenue share and other non-standard commercial models.
- Build and own the contracting operating model: templates, playbooks, guidelines, delegation of authority, escalation paths, and the internal processes that keep deals moving.
- Select, implement, and get real value from CLM and AI-assisted contract review tooling to manage a pipeline in the hundreds without simply adding headcount.
- Protect and commercialise our intellectual property (IP), advising on ownership, licensing, and confidentiality across customer, partner, and supplier arrangements.
- Manage commercial disputes and pre-litigation matters, working with the Head of Compliance and outside counsel where it makes sense.
- Work with the Head of Compliance and the CLO to make sure commercial terms reflect our regulatory obligations.
- Instruct and manage outside counsel with a clear view of cost and value.
- Build, manage, and develop the contracts team as it grows, while staying hands-on yourself.
- Be a trusted advisor to senior stakeholders across Sales, Supply Chain, Finance, and the executive team.
WHAT WE'RE LOOKING FOR
- 10+ years' post-qualification experience (PQE); qualified solicitor in England and Wales (or equivalent), with a current practising certificate.
- 5+ years in highly regulated or safety-critical sectors, such as robotics, AI, automotive, aerospace, medical devices, or comparable technology.
- 5+ years of in-house experience.
- 5+ years of people management experience.
- A strong track record on supply chain contracts and technology partnerships, including revenue share arrangements.
- Solid IP and dispute resolution experience.
- Proficiency with contract management systems and AI contract review tools.
- Comfortable managing senior stakeholders and holding your own with commercial leadership.
- Hands-on and execution-oriented. You draft and negotiate yourself rather than only overseeing others.
- Comfortable operating in ambiguity and driving clarity in a fast-moving environment.
- Motivated by a long-term in-house role. This is a demanding position in a company building at pace, where priorities shift and no two weeks look the same.
NICE TO HAVE
- Dual UK/US qualification.
- Experience in deep-tech, robotics, hardware, or advanced manufacturing organisations.
- Experience implementing a CLM platform from scratch, ideally an AI-enabled one.
- Experience scaling a legal function through rapid commercial growth or a funding round.
WHAT WE OFFER
- Competitive equity: stock options with meaningful upside as we scale.
- 30+ days off, including 23 days annual leave, all UK bank holidays, and additional company closure days (including Christmas–New Year shutdown).
- Private healthcare, including virtual and in-person care.
- Pension scheme with 8% total contribution (5% employee, 3% employer) on full earnings.
- Free daily breakfast, catered lunch, and snacks in-office.
- Work at the frontier - collaborate daily with world-class engineers, researchers, and product experts building the next generation of AI and humanoid robotics.
- Real ownership - direct access to founding leadership, meaningful input on product direction, and the ability to drive key initiatives from day one.
Location: Poland; Warszawa, Польща
On behalf of
CloudTech Client #1
, SD Solutions is looking for a talented
Senior DevOps Engineer - MSP
to design, build, deploy, and maintain complex cloud environments for our customers using innovative automation tools and cutting-edge technologies.
As a Senior DevOps Engineer, you will be responsible for architecting, maintaining, and evolving AWS cloud infrastructures, implementing and optimizing monitoring and alerting, troubleshooting issues, and developing automation to improve efficiency and reliability across environments.
At AllCloud, our DevOps Engineers work with the latest and most advanced technologies. Some of the stacks we master daily for our customers include AWS, Docker, Kubernetes, Jenkins, CI/CD, Terraform, Ansible, Lambda, Python, Go, AI/ML, Big Data, IoT, and more - all while occasionally enjoying a game of 8-Ball or Nintendo Switch to keep things fun and collaborative.
SD Solutions is a staffing company operating globally. Contact us to get more details about the benefits we offer.
Responsibilities:
Design and implement tailor-made cloud architectures based on customer needs.
Manage multiple customer environments while adhering to industry best practices.
Act as a trusted technical advisor to customers, ensuring alignment with business goals.
Deploy advanced cloud services and automation solutions.
Implement and maintain infrastructure automation and configuration management tools.
Maintain a continuous feedback loop with customers to ensure deliveries meet expectations.
Debug, troubleshoot, and resolve complex technical issues.
Design, set up, and maintain large-scale monitoring and logging solutions.
Requirements:
3+ years of hands-on experience with cloud providers (e.g., AWS, GCP).
3+ years of professional IT experience, with a strong Linux and networking background.
Proven experience in a customer-facing role.
Experience with security products (e.g., Firewalls, Web Gateways, Proxies).
Strong experience with container technologies (Kubernetes, EKS, ECS, Swarm, Docker, etc.).
Familiarity with Agile methodology.
Proficiency in scripting with at least two languages: Python, Java, Bash, or PowerShell.
Demonstrated creative troubleshooting and problem-solving skills.
Fast learner with the ability to adapt to new technologies and domains.
Strong foundations in Git and GitFlow methodologies.
Experience with CI/CD platforms (Jenkins, CircleCI, CodePipeline, etc.).
Hands-on experience with Infrastructure as Code (IaC) tools (Terraform, CloudFormation, CDK, Serverless
Framework).
Knowledge of serverless architectures
.
Advantages:
Experience with system monitoring platforms (Datadog, Prometheus).
Experience with centralized logging platforms (ELK / OpenSearch).
Familiarity with GitOps methodologies (ArgoCD, Flux).
Strong information security orientation.
AWS certifications (Associate, Professional, or Specialty).
Experience managing production-grade environments.
Knowledge of AWS security tools and best practices (Security Hub, AWS Config, WAF, Shield, etc.).
Familiarity with AWS Landing Zone and multi-account strategy.
CKA / CKAD certifications.
Eligible for or holding a security clearance.
About the company:
A global professional services company specializing in cloud enablement and digital transformation. An accredited partner at the highest tier with leading cloud, CRM, and data platform providers, the company helps organizations connect front and back offices through cloud adoption, data strategy, and analytics — delivering end-to-end managed services and consulting.
By applying for this position, you agree to the terms outlined in our Privacy Policy. Please take a moment to review our Privacy Policy
https://sd-solutions.breezy.hr/privacy-notice
, and make sure you understand its contents. If you have any questions or concerns regarding our Privacy Policy, please feel free to contact us.
Location: EMEA
Who We Are
At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. Across our multiple offices globally, we are united by our core principles: We Before Me, Do the Right Thing, and Get Things Done. These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more.
About The Team
OKX’s Legal team provides legal advice and guidance to the Company across all coverage areas and geographic locations, and supports business growth and development by working with all teams within the company to help them achieve their goals. We are a high-functioning, collaborative, and fast-paced team who enjoys the cutting-edge nature of our work and our industry.
About The Opportunity
As a Senior Legal Analyst, you will report to the Deputy General Counsel and work closely with all members of the legal team and business leaders throughout the company.
The right candidate will have strong, prior contract management experience working with a variety of internal stakeholders and various business teams providing general legal support to a diverse and global organization. They should also have strong interpersonal skills, sound judgment and decision-making skills, the ability and desire to work collaboratively with a high-functioning legal team, and ideally, an interest in the cryptocurrency and fintech industries.
What You'll Be Doing
Draft, review, and negotiate contracts, including, but not limited to, NDAs, Master Service Agreements, Statements of Work, Data Processing Agreements, marketing services agreements, and amendments.
Work closely with business stakeholders and vendors to negotiate and execute contracts that are key to OKX's future growth.
Apply OKX's SOP or design new SOPs to support OKX's commercial objectives while following applicable regulations and otherwise managing legal and regulatory risk.
Maintain organised records of contracts and various legal documents across multiple group entities and jurisdictions.
Collaborate with business units and legal team members to design, develop, and implement legal processes, training programmes, internal guidelines, and playbooks to drive efficiencies and build for scale.
Assist with special projects as needed.
What We Look For In You
Bachelor's degree or above from an accredited college or university; a law degree (LLB, JD, or equivalent) is strongly preferred.
Candidates without a law degree but with substantial prior law firm and/or in-house paralegal/legal analyst experience will also be considered.
Demonstrated ability to independently develop and implement various legal processes, policies, and playbooks.
Proven ability to thrive in a fast-paced environment where priorities shift rapidly while maintaining accuracy and sound legal judgement
Experience working across multiple jurisdictions and with cross-border commercial agreements is an advantage.
Excellent analytical skills, attention to detail, and sound commercial judgment.
Strong written and oral communication skills in English
Experience with contract lifecycle management platforms (e.g. Ironclad) and e-signature tools (e.g. Docusign) is preferred.
Perks & Benefits
Competitive total compensation package.
L&D programs and education subsidy for employees' growth and development.
Various team building programs and company events.
Notice:
All official
OKX
vacancies are published on this website.
While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated.
If in doubt, please apply directly through our official careers website.
Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to
OKX
's
Candidate Privacy Notice
.
#LI-SK1
#LI-REMOTE
Notice:
All official
OKX
vacancies are published on this website.
While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated.
If in doubt, please apply directly through our official careers website.
Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to
OKX
's
Candidate Privacy Notice
.
Location: Paris, Remote
Workplace: remote
The Trainer is our pedagogical and platform expert within the Professional Services (PS) team. Your mission is to empower our clients to build Collaborative Learning organizations by mastering our platform and methodology. You aren't a technical expert; you are a pedagogical and platform expert who ensures that clients don’t just "use" the software, but master it to drive long-term engagement.
By owning our "One-to-Many" offer (Engagement Academy & Stadium webinars), you ensure that every client, from their first day of implementation, has the knowledge and confidence to make their project a success. You don't just deliver content; you develop a scalable learning ecosystem that ensures every client gets the best start possible by mastering our Collaborative Learning methodology.
You will work closely with the Customer Success Team and Product teams to ensure our training offer addresses the actual friction points and needs of our client base.
Within 1 month, you will:
Master our Platform's core user experience and the Collaborative Learning methodology
Become a platform expert (from a user & admin perspective) and get certified on our methodology.
Shadow existing Stadium webinars and Academy workflows to understand the current "One-to-Many" engine.
Connect with colleagues worldwide through virtual coffee chats and team-building activities.
Within 3 months, you will:
Host your Stadium webinars and receive peer feedback on your ability to drive platform engagement.
Identify and execute your updates on the Engagement Academy to align with the latest product releases.
Define your quarterly priorities in relation to the Support & Services roadmap with your coach.
Actively contribute to our internal knowledge base (Confluence) to share best practices on platform usage and client engagement.
Within 6 months, you will:
Lead a project to improve the One-to-Many strategy (e.g., new webinar formats, gamification of the Academy, or localized content).
Participate in Discovery Meetings with Product Managers to share insights on how clients actually
use
and
adopt
the platform.
Analyze Academy completion rates and Stadium satisfaction scores to iterate on the training Catalog.
Build new processes and update Confluence with the information needed for the team's daily work.
Within 12 months, you will:
Onboard and mentor new Trainers, teaching them how to turn platform features into compelling learning stories.
Take full ownership of a recurring team pillar (e.g.,being the internal referral for complex solution training).
Develop advanced toolkits and training paths based on the most successful client use cases.
The Skills Set:
3+ years of successful experience as a Trainer OR successful client-facing experience in Customer Success/Care
You have excellent overall writing skills in a number of different styles/tones, and impeccable spelling and grammar in German, English, and French.
You are recognized for your listening and teaching skills
You express your ideas in a clear and concise manner, both in writing and orally
You are proactive and prefer working in a strong results-oriented culture
A past experience in the learning industry is a plus
You have excellent overall writing skills in a number of different styles/tones, and impeccable spelling and grammar in German, English, and French.
Enthusiasm for our working environment explained here:
https://bit.ly/Convexity360L
Interview Process:
Phone Screen with our Talent Acquisition Manager
Discovery Meeting with our LEC Coach
Case Study Meeting with our LEC Coach and a member of the team
Clarification Meeting with our Head of professional Services EMEA
Culture Fit Meeting with our VP Global Professional Services
Offer !
What we offer:
Compensation
: Package includes base salary, a variable component and equity 📈Benefits/Perks: Work From Home stipend, RTT, lunch vouchers, medical insurance, gym subscription, 1 month parental leave for the second parent
Balance:
Flexible hours, full remote work possible anywhere in France 🏠
Diversity, Equity, and Inclusion:
We have 6 active ERGs including Mental Health, Environmental/Sustainability, Women, Parents, LGBTQIA2S+, and Ethnic Diversity. Each group has at least one executive team member serving as a member of the group, bringing greater awareness to each group’s activities and providing a quick path to impact 🤝
Corporate Social Responsibility:
Review our CSR Charter:
360learning.com/blog/corporate-social-responsibility-charter
🌎🌏🌍
Culture:
A framework that will help you make an impact - envision our way of working and our Convexity Culture:
https://bit.ly/Convexity360L
& find out more about the teams, product and processes
https://bit.ly/42H1ggC
🚀👩🏻💻🏆
Who We Are
360Learning enables companies to upskill from within by turning their experts into champions for employee, customer, and partner growth. With our LMS for collaborative learning, Learning & Development teams can accelerate upskilling with the help of internal experts instead of slow top-down training. 360Learning is the easiest way to onboard and upskill employees, train customer-facing teams, and enable customers and partners–all from one place.
360Learning powers the future of work at 1,700 organizations. Founded in 2013, 360Learning has raised $240 million with 400+ team members across North America and EMEA.
Learning Includes Everyone.
In concert with our culture, 360Learning believes learning includes everyone and that means embracing the strengths of diversity, connectedness, and inclusion. Through conscientious efforts, our global footprint celebrates cultures, perspectives, and experiences from all over the world to support our platform that is built for all regardless of race, ethnicity, gender identity or expression, sexual orientation, religion, age, neurodiversity, disability status, citizenship, veteran status or any other aspect which makes an individual unique or protected by laws and regulations in the locations where we operate. Thus, 360Learning is proud to be an equal opportunity workplace, and we commit to continue this throughout our processes for recruitment, compensation, benefits, performance, promotion, and all other conditions and terms of employment. We want to learn from and with you!
- Maintain, scrub, and organize large sets of financial records to ensure data integrity across ledgers and reporting systems. - Perform detailed weekly and monthly reconciliations (bank, revenue, crypto balances) and investigate variances.
