Вакансии

Location: Spain (Remote) Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale. Built on open source and open standards and designed for interoperability across any stack, Grafana Cloud brings AI to observability and observability to AI, giving teams (and their agents) unified visibility so they can see, understand, and act on all their disparate data, wherever it lives, and move at the speed of their ambitions. Customers, including Anthropic, Bloomberg, NVIDIA, Microsoft, and Salesforce, rely on Grafana Labs. We are a 100% remote company with team members across 40+ countries, backed by leading investors including Lightspeed Venture Partners, Sequoia Capital, GIC, Coatue, J.P. Morgan, CapitalG, and Lead Edge Capital. Learn more at grafana.com and follow us on LinkedIn and X . We’re scaling fast and staying true to what makes us different: an open-source legacy, a global collaborative culture, and a passion for meaningful work. Our team thrives in an innovation-driven environment where transparency, autonomy, and trust fuel everything we do. You may not meet every requirement, and that’s okay. If this role excites you, we’d love you to raise your hand for what could be a truly career-defining opportunity. This is a remote position. We are looking for candidates in the UK, Ireland, Spain, Germany or Sweden. Senior Software Engineer - Security Assurances We are looking for a Senior Software Engineer, Security Assurance to join our GRC engineering team. We are building a security system that’s automated at scale, rigorously data-driven, and built from the ground up with defense-in-depth and self-healing in mind. We support a highly autonomous, remote-first, cloud-native organization. We are a technical team that can build any tool we need, while knowing when to buy to improve velocity. To support our growth and ambitious vision, we embrace agile principles and values, share openly, apply context-driven security mechanisms, default to action, and have an OSS-first mindset. We are a 100% remote company. We believe in high-velocity but sustainable expectations and timeframes, giving people the room to do great work. The Opportunity: You will work to build out our security observability, compliance, and control management systems and tools. You will develop services and tools to proactively defend our systems, provide visibility to our security state, and give engineers and stakeholders guardrails and paved roads to behave securely. You will collaborate across your team, the security department, and wider Grafana to write and deploy security policies across all of our SDLC, applications, and infrastructure. This is a very technical, hands-on keyboard software engineering, so development experience is critical. You will ideally have some experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations. Knowledge of security standards and frameworks (ISO, FedRAMP, PCI-DSS, GDPR, etc) is useful, but the disposition to quickly learn new things is more important than rote knowledge. You will work alongside other security engineers, full-stack developers, and customer-facing teams. Experience guiding and negotiating with peers, stakeholders, customers, and auditors is a plus. What You’ll Be Doing: Be a technical contributor on our GRC team covering a range of areas, including certifications, application, build, cloud, and supply chain security, and internal security tooling development Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us) Develop systems, automations, and methods of security observability to push the GRC engineering organization beyond just meeting certification requirements Deploy security and compliance checks in an employee-enabling way (guardrails and paved roads) in their daily workflows and build pipelines Collaborate with cross-functional teams to integrate security controls into the software development lifecycle and operational processes. Respond to customer security issues, security alerts, and potential incidents What Makes You a Great Fit: Experience developing in a production environment with at least one programming language. We primarily use Go, TypeScript, and Python but most languages translate well. You will take a code screen and be expected to discuss programming principles such as algorithms, data structures, and optimization Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes. Experience with multiple cloud providers is a strong plus Experience in automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows Strong interpersonal skills, as this position will require communication with peers, stakeholders, auditors, and customers Understanding of industry-recognized security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burden. You can gain this by reading the standards documents and audit guidance A degree in Computer Science, Information Security, or related field (or equivalent experience) Bonus Points For: Working knowledge of Grafana Labs OSS projects and products. Experience in using observability tooling to solve security problems. Experience working with OSS communities Experience in using technical automations to prove infrastructure compliance Experience securing large-scale distributed systems running in public clouds In Ireland, the base compensation range for this role is € 82,988 - €99,586 . Actual compensation may vary based on level, experience, and skillset as assessed throughout the interview process. All of our roles include Restricted Stock Units (RSUs), giving every team member ownership in Grafana Labs' success. We believe in shared outcomes—RSUs help us stay aligned and invested as we scale globally. *Compensation ranges are country specific. If you are applying for this role from a different location than listed above, your recruiter will discuss your specific market’s defined pay range & benefits at the beginning of the process. Why You’ll Thrive at Grafana Labs: 100% Remote, Global Culture - As a remote-only company, we bring together talent from around the world, united by a culture of collaboration and shared purpose. Scaling Organization – Tackle meaningful work in a high-growth, ever-evolving environment. Transparent Communication – Expect open decision-making and regular company-wide updates. Innovation-Driven – Autonomy and support to ship great work and try new things. Open Source Roots – Built on community-driven values that shape how we work. Empowered Teams – High trust, low ego culture that values outcomes over optics. Career Growth Pathways – Defined opportunities to grow and develop your career. Approachable Leadership – Transparent execs who are involved, visible, and human. Passionate People – Join a team of smart, supportive folks who care deeply about what they do. In-Person onboarding - We want you to thrive from day 1 with your fellow new ‘Grafanistas’ to learn all about what we do and how we do it. Balance is Key - We operate a global annual leave policy of 30 days per annum. 3 days of your annual leave entitlement are reserved for Grafana Shutdown Days to allow the team to really disconnect. *We will comply with local legislation where applicable. Equal Opportunity Employer: Grafana Labs is an equal opportunities employer. We welcome applications from everyone regardless of race, colour, nationality, origin, caste, sex, gender reassignment identity or expression, sexual orientation, age, religion or belief, disability, veteran status, genetic information, pregnancy, maternity, marital, family or carer status, or any other characteristic which is protected by local law. We believe that equality and diversity build a strong organisation, and we work hard to ensure that is the foundation of our organisation as we grow. Grafana Labs may utilize AI tools in its recruitment process to assist in matching information provided in CVs to job postings. The recruitment team will continue to review inbound CVs manually to identify alignment with current openings. #LI-Remote For information about how your personal data is used once you’ve applied to a job, check out our privacy policy .

Location: Republic of Ireland (Remote) Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale. Built on open source and open standards and designed for interoperability across any stack, Grafana Cloud brings AI to observability and observability to AI, giving teams (and their agents) unified visibility so they can see, understand, and act on all their disparate data, wherever it lives, and move at the speed of their ambitions. Customers, including Anthropic, Bloomberg, NVIDIA, Microsoft, and Salesforce, rely on Grafana Labs. We are a 100% remote company with team members across 40+ countries, backed by leading investors including Lightspeed Venture Partners, Sequoia Capital, GIC, Coatue, J.P. Morgan, CapitalG, and Lead Edge Capital. Learn more at grafana.com and follow us on LinkedIn and X . We’re scaling fast and staying true to what makes us different: an open-source legacy, a global collaborative culture, and a passion for meaningful work. Our team thrives in an innovation-driven environment where transparency, autonomy, and trust fuel everything we do. You may not meet every requirement, and that’s okay. If this role excites you, we’d love you to raise your hand for what could be a truly career-defining opportunity. This is a remote position. We are looking for candidates in the UK, Ireland, Spain, Germany or Sweden. Senior Software Engineer - Security Assurances We are looking for a Senior Software Engineer, Security Assurance to join our GRC engineering team. We are building a security system that’s automated at scale, rigorously data-driven, and built from the ground up with defense-in-depth and self-healing in mind. We support a highly autonomous, remote-first, cloud-native organization. We are a technical team that can build any tool we need, while knowing when to buy to improve velocity. To support our growth and ambitious vision, we embrace agile principles and values, share openly, apply context-driven security mechanisms, default to action, and have an OSS-first mindset. We are a 100% remote company. We believe in high-velocity but sustainable expectations and timeframes, giving people the room to do great work. The Opportunity: You will work to build out our security observability, compliance, and control management systems and tools. You will develop services and tools to proactively defend our systems, provide visibility to our security state, and give engineers and stakeholders guardrails and paved roads to behave securely. You will collaborate across your team, the security department, and wider Grafana to write and deploy security policies across all of our SDLC, applications, and infrastructure. This is a very technical, hands-on keyboard software engineering, so development experience is critical. You will ideally have some experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations. Knowledge of security standards and frameworks (ISO, FedRAMP, PCI-DSS, GDPR, etc) is useful, but the disposition to quickly learn new things is more important than rote knowledge. You will work alongside other security engineers, full-stack developers, and customer-facing teams. Experience guiding and negotiating with peers, stakeholders, customers, and auditors is a plus. What You’ll Be Doing: Be a technical contributor on our GRC team covering a range of areas, including certifications, application, build, cloud, and supply chain security, and internal security tooling development Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us) Develop systems, automations, and methods of security observability to push the GRC engineering organization beyond just meeting certification requirements Deploy security and compliance checks in an employee-enabling way (guardrails and paved roads) in their daily workflows and build pipelines Collaborate with cross-functional teams to integrate security controls into the software development lifecycle and operational processes. Respond to customer security issues, security alerts, and potential incidents What Makes You a Great Fit: Experience developing in a production environment with at least one programming language. We primarily use Go, TypeScript, and Python but most languages translate well. You will take a code screen and be expected to discuss programming principles such as algorithms, data structures, and optimization Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes. Experience with multiple cloud providers is a strong plus Experience in automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows Strong interpersonal skills, as this position will require communication with peers, stakeholders, auditors, and customers Understanding of industry-recognized security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burden. You can gain this by reading the standards documents and audit guidance A degree in Computer Science, Information Security, or related field (or equivalent experience) Bonus Points For: Working knowledge of Grafana Labs OSS projects and products. Experience in using observability tooling to solve security problems. Experience working with OSS communities Experience in using technical automations to prove infrastructure compliance Experience securing large-scale distributed systems running in public clouds In Ireland, the base compensation range for this role is € 104,000 - €124,800. Actual compensation may vary based on level, experience, and skillset as assessed throughout the interview process. All of our roles include Restricted Stock Units (RSUs), giving every team member ownership in Grafana Labs' success. We believe in shared outcomes—RSUs help us stay aligned and invested as we scale globally. *Compensation ranges are country specific. If you are applying for this role from a different location than listed above, your recruiter will discuss your specific market’s defined pay range & benefits at the beginning of the process. Why You’ll Thrive at Grafana Labs: 100% Remote, Global Culture - As a remote-only company, we bring together talent from around the world, united by a culture of collaboration and shared purpose. Scaling Organization – Tackle meaningful work in a high-growth, ever-evolving environment. Transparent Communication – Expect open decision-making and regular company-wide updates. Innovation-Driven – Autonomy and support to ship great work and try new things. Open Source Roots – Built on community-driven values that shape how we work. Empowered Teams – High trust, low ego culture that values outcomes over optics. Career Growth Pathways – Defined opportunities to grow and develop your career. Approachable Leadership – Transparent execs who are involved, visible, and human. Passionate People – Join a team of smart, supportive folks who care deeply about what they do. In-Person onboarding - We want you to thrive from day 1 with your fellow new ‘Grafanistas’ to learn all about what we do and how we do it. Balance is Key - We operate a global annual leave policy of 30 days per annum. 3 days of your annual leave entitlement are reserved for Grafana Shutdown Days to allow the team to really disconnect. *We will comply with local legislation where applicable. Equal Opportunity Employer: Grafana Labs is an equal opportunities employer. We welcome applications from everyone regardless of race, colour, nationality, origin, caste, sex, gender reassignment identity or expression, sexual orientation, age, religion or belief, disability, veteran status, genetic information, pregnancy, maternity, marital, family or carer status, or any other characteristic which is protected by local law. We believe that equality and diversity build a strong organisation, and we work hard to ensure that is the foundation of our organisation as we grow. Grafana Labs may utilize AI tools in its recruitment process to assist in matching information provided in CVs to job postings. The recruitment team will continue to review inbound CVs manually to identify alignment with current openings. #LI-Remote For information about how your personal data is used once you’ve applied to a job, check out our privacy policy .

Location: United Kingdom (Remote) Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale. Built on open source and open standards and designed for interoperability across any stack, Grafana Cloud brings AI to observability and observability to AI, giving teams (and their agents) unified visibility so they can see, understand, and act on all their disparate data, wherever it lives, and move at the speed of their ambitions. Customers, including Anthropic, Bloomberg, NVIDIA, Microsoft, and Salesforce, rely on Grafana Labs. We are a 100% remote company with team members across 40+ countries, backed by leading investors including Lightspeed Venture Partners, Sequoia Capital, GIC, Coatue, J.P. Morgan, CapitalG, and Lead Edge Capital. Learn more at grafana.com and follow us on LinkedIn and X . We’re scaling fast and staying true to what makes us different: an open-source legacy, a global collaborative culture, and a passion for meaningful work. Our team thrives in an innovation-driven environment where transparency, autonomy, and trust fuel everything we do. You may not meet every requirement, and that’s okay. If this role excites you, we’d love you to raise your hand for what could be a truly career-defining opportunity. This is a remote position. We are looking for candidates in the UK, Ireland, Spain, Germany or Sweden. Senior Software Engineer - Security Assurances We are looking for a Senior Software Engineer, Security Assurance to join our GRC engineering team. We are building a security system that’s automated at scale, rigorously data-driven, and built from the ground up with defense-in-depth and self-healing in mind. We support a highly autonomous, remote-first, cloud-native organization. We are a technical team that can build any tool we need, while knowing when to buy to improve velocity. To support our growth and ambitious vision, we embrace agile principles and values, share openly, apply context-driven security mechanisms, default to action, and have an OSS-first mindset. We are a 100% remote company. We believe in high-velocity but sustainable expectations and timeframes, giving people the room to do great work. The Opportunity: You will work to build out our security observability, compliance, and control management systems and tools. You will develop services and tools to proactively defend our systems, provide visibility to our security state, and give engineers and stakeholders guardrails and paved roads to behave securely. You will collaborate across your team, the security department, and wider Grafana to write and deploy security policies across all of our SDLC, applications, and infrastructure. This is a very technical, hands-on keyboard software engineering, so development experience is critical. You will ideally have some experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations. Knowledge of security standards and frameworks (ISO, FedRAMP, PCI-DSS, GDPR, etc) is useful, but the disposition to quickly learn new things is more important than rote knowledge. You will work alongside other security engineers, full-stack developers, and customer-facing teams. Experience guiding and negotiating with peers, stakeholders, customers, and auditors is a plus. What You’ll Be Doing: Be a technical contributor on our GRC team covering a range of areas, including certifications, application, build, cloud, and supply chain security, and internal security tooling development Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us) Develop systems, automations, and methods of security observability to push the GRC engineering organization beyond just meeting certification requirements Deploy security and compliance checks in an employee-enabling way (guardrails and paved roads) in their daily workflows and build pipelines Collaborate with cross-functional teams to integrate security controls into the software development lifecycle and operational processes. Respond to customer security issues, security alerts, and potential incidents What Makes You a Great Fit: Experience developing in a production environment with at least one programming language. We primarily use Go, TypeScript, and Python but most languages translate well. You will take a code screen and be expected to discuss programming principles such as algorithms, data structures, and optimization Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes. Experience with multiple cloud providers is a strong plus Experience in automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows Strong interpersonal skills, as this position will require communication with peers, stakeholders, auditors, and customers Understanding of industry-recognized security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burden. You can gain this by reading the standards documents and audit guidance A degree in Computer Science, Information Security, or related field (or equivalent experience) Bonus Points For: Working knowledge of Grafana Labs OSS projects and products. Experience in using observability tooling to solve security problems. Experience working with OSS communities Experience in using technical automations to prove infrastructure compliance Experience securing large-scale distributed systems running in public clouds In the UK, the base compensation range for this role is £ 91,755 - £110,106. Actual compensation may vary based on level, experience, and skillset as assessed throughout the interview process. All of our roles include Restricted Stock Units (RSUs), giving every team member ownership in Grafana Labs' success. We believe in shared outcomes—RSUs help us stay aligned and invested as we scale globally. *Compensation ranges are country specific. If you are applying for this role from a different location than listed above, your recruiter will discuss your specific market’s defined pay range & benefits at the beginning of the process. Why You’ll Thrive at Grafana Labs: 100% Remote, Global Culture - As a remote-only company, we bring together talent from around the world, united by a culture of collaboration and shared purpose. Scaling Organization – Tackle meaningful work in a high-growth, ever-evolving environment. Transparent Communication – Expect open decision-making and regular company-wide updates. Innovation-Driven – Autonomy and support to ship great work and try new things. Open Source Roots – Built on community-driven values that shape how we work. Empowered Teams – High trust, low ego culture that values outcomes over optics. Career Growth Pathways – Defined opportunities to grow and develop your career. Approachable Leadership – Transparent execs who are involved, visible, and human. Passionate People – Join a team of smart, supportive folks who care deeply about what they do. In-Person onboarding - We want you to thrive from day 1 with your fellow new ‘Grafanistas’ to learn all about what we do and how we do it. Balance is Key - We operate a global annual leave policy of 30 days per annum. 3 days of your annual leave entitlement are reserved for Grafana Shutdown Days to allow the team to really disconnect. *We will comply with local legislation where applicable. Equal Opportunity Employer: Grafana Labs is an equal opportunities employer. We welcome applications from everyone regardless of race, colour, nationality, origin, caste, sex, gender reassignment identity or expression, sexual orientation, age, religion or belief, disability, veteran status, genetic information, pregnancy, maternity, marital, family or carer status, or any other characteristic which is protected by local law. We believe that equality and diversity build a strong organisation, and we work hard to ensure that is the foundation of our organisation as we grow. Grafana Labs may utilize AI tools in its recruitment process to assist in matching information provided in CVs to job postings. The recruitment team will continue to review inbound CVs manually to identify alignment with current openings. #LI-Remote For information about how your personal data is used once you’ve applied to a job, check out our privacy policy .

Задачи: — строить и поддерживать кросс-функциональные программы соответствия, контрольные механизмы, документацию и регуляторные рабочие потоки. Требования: — знание vendor risk, ISO 27001, Vanta, GRC, SOP, экспортного контроля, TPRM, compliance, NIST, CCPA, Privacy, CMMC, AI governance, SOC 2, policy, GDPR, аудит. Условия: — работа в офисе в Нью-Йорке.

Location: United States, San Diego, CA Why Sony Interactive Entertainment? Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity. Job Overview: Sony Interactive Entertainment (SIE) is part of the Sony Group and responsible for the marketing, sales, and distribution of PlayStation hardware, software, services, and digital content. We are seeking an experienced and strategic Sr. IT SOX Governance Lead to establish and drive end-to-end ownership of IT SOX governance within DTIS Global Service Operations (GSO). This role will serve as the primary lead responsible for IT General Controls (ITGC) governance, control framework ownership, audit coordination, onboarding of new systems, and governance standardization across the enterprise. This position is critical to scaling IT governance capabilities, reducing operational risk, and enabling sustainable compliance operations as SIE continues to grow. The ideal candidate will combine deep SOX and ITGC expertise with strong governance leadership, operational execution, and cross-functional collaboration skills. Key Responsibilities: IT SOX Governance Ownership Own and manage the IT SOX governance framework and ITGC program. Establish standardized governance processes, methodologies, and control design practices. Lead end-to-end ownership of ITGC lifecycle activities including design, implementation, onboarding, testing support, remediation tracking, and reporting. Drive governance consistency across systems, applications, and operational teams. Control Design & Framework Management Design, document, and maintain ITGCs and application controls aligned to SOX requirements. Develop scalable governance standards for onboarding new systems and processes into SOX scope. Maintain control narratives, process documentation, data flows, and supporting evidence standards. Partner with control owners to improve effectiveness and operational maturity. Audit & Compliance Leadership Serve as the primary IT interface for external and internal audit stakeholders. Coordinate walkthroughs, evidence collection, testing support, and remediation activities. Manage audit findings, deficiencies, and corrective action plans through resolution. Ensure timely and accurate delivery of audit artifacts and reporting. Risk Assessment & Operational Governance Conduct risk assessments and identify control gaps, process inefficiencies, and governance risks. Develop remediation and mitigation strategies for identified deficiencies. Monitor compliance status, control performance, and governance metrics. Support continuous improvement initiatives focused on automation, scalability, and operational efficiency. Cross-Functional Collaboration Partner closely with engineering, infrastructure, platform operations, Finance Governance (FinGov), and Risk & Compliance teams. Support alignment between SOX governance and other compliance programs including PCI, GDPR, and security governance initiatives. Drive governance accountability and awareness across technical and operational stakeholders. Governance Transformation & Continuous Improvement Identify opportunities for automation and process optimization within SOX operations and evidence management. Contribute to long-term governance roadmap initiatives including continuous monitoring capabilities and scalable onboarding models. Stay current on regulatory requirements, industry trends, and governance best practices. Qualifications: Bachelor’s degree in Information Systems, Information Technology, Accounting, Computer Science, or related field. 7+ years of experience in IT SOX, IT audit, IT governance, compliance, or risk management. Strong expertise in SOX compliance, IT General Controls (ITGCs), and audit coordination. Experience leading governance programs and working directly with external/internal auditors. Demonstrated experience with control design, system scope assessments, system onboarding, and remediation management. Experience with system implementation framework (SDLC). Preferred Qualifications: Big 4 experience supporting SOX audits and IT General Controls (ITGC) assessments preferred. Professional certifications such as CISA, CISSP, CISM, CRISC, or CPA. Experience with Optro SoxHub or similar governance/audit platforms. Strong experience with cloud services and environments, along with knowledge of microservices architecture and CI/CD development techniques is preferred. Prior experience auditing SAP ERP systems is preferred. Experience with S/4, GRC, BW and HANA databases in cloud deployments is a plus. Prior experience in ITGC reviews of complex architectures, across the many IT layers (Networking/OS/DB/App/Tools), and with broad practice in various technologies. Experience supporting large-scale enterprise environments and operational governance transformation initiatives. Experience with process automation and governance tooling. At PlayStation, we value diversity and believe that a diverse workforce leads to a more successful and innovative company. We are an equal opportunity employer (EOE) and welcome applicants from all backgrounds. If you require any reasonable accommodations or adjustments throughout the application process, please let us know and we will be happy to assist you. Join us at PlayStation and be part of a team that is dedicated to delivering exceptional gaming experiences to millions of players worldwide. Apply now and embark on a journey of professional growth and fulfillment! At SIE, we consider several factors when setting each role’s base pay range, including the competitive benchmarking data for the market and geographic location. Please note that the base pay range may vary in line with our hybrid working policy and individual base pay will be determined based on job-related factors which may include knowledge, skills, experience, and location. In addition, this role is eligible for SIE’s top-tier benefits package that includes medical, dental, vision, matching 401(k), paid time off, wellness program and coveted employee discounts for Sony products. This role also may be eligible for a bonus package. Click here to learn more. The estimated base pay range for this role is listed below. $127,000 — $190,600 USD Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks. Please refer to our Candidate Privacy Notice (where applicable) for more information about what personal information we collect, how we use it, who we share it with, and your data protection rights. Equal Opportunity Statement: Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy, maternity or parental status, trade union membership or membership in any other legally protected category. We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond. Sony Interactive Entertainment is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.

Location: San Francisco, CA | New York City, NY About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Anthropic is growing fast, and our SOX program needs to keep up. Many of the controls that matter for financial reporting run on engineering systems: who can access production and financial systems, how code changes are reviewed and deployed, and how usage is metered and billed. We’re hiring a Technical Program Manager to own the technology side of our SOX program. You'll work across engineering, security, GRC, Finance, and Internal Audit to design and run IT controls, drive gaps to closure, and make compliance lighter for engineering teams. You’ll also use Claude to automate evidence collection and control testing, so the program scales without more manual work. Responsibilities Own the technology side of the SOX program end-to-end, from planning and control design through evidence, testing, remediation, and year-end reporting Work with engineering teams to design and roll out IT general controls and IT application controls Work with engineering teams to build Claude-based workflows, tools, and dashboards to automate evidence collection, control testing, and monitoring that warns engineering teams about compliance issues before an audit finds them Lead large SOX projects, such as bringing new systems into scope, with clear success criteria, dependencies, and delivery dates Turn control requirements into concrete engineering work with clear scope, owners, and deadlines, and a design that fits how our teams already build and ship Build processes to evaluate new products, systems, and major engineering changes for SOX impact before they ship, so the right controls are in place from the start Build strong working relationships with engineering control owners, help them understand what their controls require, and support them in producing evidence for auditor requests Investigate control failures down to root cause, and drive engineering teams to fix them in time for the fix to be tested Help keep an up-to-date list of the systems, apps, and infrastructure in SOX scope, with an owner named for each control Track system migrations and scope changes, and make sure controls are updated as systems move Build metrics and dashboards on control health, open findings, and remediation progress Give regular updates on program status, risks, and remediation to technical leadership Keep improving the program: simplify control processes, remove manual steps, and raise the share of controls that run cleanly You may be a good fit if you Have 7+ years of experience in technical program management, IT audit, or technology compliance, with a focus on SOX and IT general controls Have run or supported a SOX program at a public or pre-IPO company Have used automation or AI tools to make compliance work faster and more reliable Know IT general controls and IT application controls in depth, including access management, change management, and application controls, and how they support financial reporting Have worked closely with external auditors Understand cloud infrastructure and engineering workflows, such as code review, CI/CD, and cloud access, well enough to work through a control design with an engineer Can explain technical risks and control gaps clearly to executives and other non-technical audiences Are comfortable driving outcomes across engineering, finance, and audit teams that don't report to you Strong candidates may also have A background in software, systems, or security engineering Hands-on experience building with Claude Code or other AI tools Experience with automated controls in revenue or order-to-cash systems, such as billing and usage metering Experience with financial systems such as ERP and billing platforms, and the controls around them Experience building or rebuilding a SOX program at a fast-growing company Familiarity with other security and IT frameworks, such as NIST or ISO 27001 The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $290,000 — $365,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. For roles performing work in California: We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: US - Headquarters - Maryland - Columbia Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey! What makes Tenable such a great place to work? Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together! Your Role: Tenable's InfoSec team is looking for a Security Engineer to join our Security Engineering & Architecture group. This role was built deliberately to span disciplines rather than specialize in one: you'll split your time between securing our cloud environments and supporting general security engineering disciplines across the business — covering cloud and non-cloud systems alike. If you're early-career but curious across the breadth of InfoSec rather than narrowly focused on one domain, this role is built for you. Your Opportunity: Support day-to-day cloud security operations — monitoring, triage, and remediation of findings across AWS, Azure, and/or GCP environments using CNAPP/CSPM tooling. Contribute to Security Architecture Reviews for new systems, integrations, and vendor onboarding — regardless of whether the system in question is cloud-hosted, on-prem, or SaaS. You'll work directly with the architects and engineers who own this process today, learning the methodology and eventually taking reviews from intake to sign-off. Help identify and document misconfigurations, excessive permissions, and insecure IaC patterns (Terraform/CloudFormation), and help track remediation through to closure. Participate in risk assessments and threat modeling exercises for new projects — applying the same core analysis skills whether the subject is a cloud workload, an internal application, or a third-party integration. Assist with IAM/RBAC reviews and least-privilege efforts; flag static credentials, over-broad roles, and gaps in audit logging wherever they appear in the environment. Build foundational familiarity with how AI/agentic systems intersect with our environment — cloud-hosted LLM services (AWS Bedrock, Azure OpenAI, GCP Vertex AI), the Model Context Protocol (MCP), and the basic risk surface of agent/tool-calling architectures and apply that awareness during reviews when these systems show up in scope. Work cross-functionally with engineering, GRC, and TPRM to keep architecture reviews and cloud findings moving — this role is a connective thread between teams, not a silo. What You'll Need: 2–3 years of experience in a security engineering, cloud security, IT security, or related technical role (internships and adjacent IT/ops experience count). Working knowledge of at least one major cloud provider (AWS, Azure, or GCP) — IAM fundamentals, networking basics, and common misconfiguration patterns. Basic understanding of security architecture review or threat modeling concepts (e.g., STRIDE, data flow diagrams) — or clear aptitude and interest in learning them. Familiarity with core security engineering practices: least-privilege access, audit logging, secrets management (no static credentials), and secure configuration baselines. Comfort reading documentation and asking good questions across unfamiliar systems — this role touches a lot of different architectures, so curiosity matters more than deep specialization in any one of them. Strong written communication — you'll be documenting review findings and cloud remediation guidance for technical and non-technical audiences alike. And Ideally: Exposure to IaC security scanning (Terraform/CloudFormation) or CNAPP/CSPM/CIEM platforms. Some hands-on exposure to a formal architecture/design review process, even informally (e.g., reviewing a peer's system design for security gaps). Basic familiarity with AI/LLM concepts — prompts, context windows, tool/function calling, RAG — and awareness of frameworks like the OWASP Top 10 for LLM Applications or the NIST AI RMF. A relevant certification (Security+, AWS/Azure/GCP security certs, or similar) or equivalent self-directed learning. Prior exposure to compliance frameworks (SOC 2, FedRAMP, ISO 27001) relevant to architecture review sign-off #LI-Hybrid #LI-MS1 This is the base pay range for this position. Compensation for the role will depend on a number of factors, including the candidate's qualifications, skills, competencies, location and experience, and may fall outside of the range shown. Employees are also eligible for variable compensation in addition to base pay (commission for sales roles, bonus for non-sales roles), depending on company and individual performance. Tenable also offers a variety of comprehensive and competitive benefits which include: medical, dental, vision, disability and life insurance; 401(k) retirement savings with company match; an employee stock purchase plan; an employee referral program; flexible spending accounts; an Employee Assistance Program (EAP); education assistance; parental leave; paid time off (PTO); company-paid holidays; health and wellness events; and community programs. US Pay Range $102,500 — $136,500 USD We’re committed to promoting Equal Employment Opportunity (EEO) at Tenable - through all equal employment opportunity laws and regulations at the international, federal, state and local levels.  If you need a reasonable accommodation due to a disability during the application or recruiting process, please contact Recruiting@Tenable.com for further assistance. Tenable Data Consent Statement Tenable is committed to protecting the privacy and security of your personal data. Depending on your location, one or more of the following notices may apply to you: General Applicant Privacy Notice California Applicant Privacy Notice EU/EEA/UK Applicant Privacy Notice

Location: Boston, MA Workplace: OnSite At WHOOP, we're on a mission to unlock and inspire performance for life. WHOOP empowers members to perform at a higher level through a deeper understanding of their bodies and daily lives. WHOOP is a data company, and data is our most valuable asset. The Data, Analytics & AI (DAA) organization turns WHOOP data into trusted intelligence that sharpens every team's decisions. As the data and AI ecosystem grows, making that data trustworthy and safe by default has become a strategic capability, so every product built on it can be relied on. We are seeking a Director, Data Governance to lead the function as a new pillar within the DAA organization. You will report to our VP of Data, Analytics and AI Acceleration. As the first dedicated leader of this function, you will define the strategy, operating model, and roadmap for data ownership, contracts, event taxonomy, cataloging, access policy, data quality standards, and privacy and compliance. Governance sets the policy and standards; the Data Platform & Engineering pillar engineers and implements them, so this role leads through influence, clear standards, and strong cross-functional partnership. WHOOP operates a mature data platform. This role builds the governance layer on top of it: formal ownership models, data contracts, an event taxonomy, cataloging and discovery, classification frameworks, and the policies that let the company scale into regulated environments without slowing down. You will build and lead a team and champion intelligent, AI powered approaches to continuously monitor the health and trust of our data. You should be equally comfortable setting strategy and rolling up your sleeves, and as effective presenting a data classification framework to senior leadership as you are working through a data quality standard with an engineer. Working across Data Platform & Engineering, Analytics, Data Science, Product, GRC, Legal, InfoSec, and RAD, you will earn trust across technical and business teams, drive adoption, and ship enforceable governance outcomes. RESPONSIBILITIES - Define and lead the data governance strategy, operating model, and roadmap spanning data ownership, contracts, event taxonomy, cataloging, access policy, data quality standards, and privacy and compliance (HIPAA, GDPR, CCPA), aligned with the DAA strategy. - Build, lead, and coach a small, senior team, developing your people while partnering closely with Staff level technical leaders across the org. - Establish a formal data ownership model, partnering with engineering and business stakeholders to assign stewardship and accountability for critical datasets. - Define the standards for data contracts between producing and consuming teams, covering schema stability, SLA adherence, and breaking-change management, with implementation owned by Data Platform & Engineering. - Own the event taxonomy governance framework, bringing structure to event tracking and standardizing how product and engineering teams define, name, and instrument events across platforms. - Set data quality standards (freshness, validation, monitoring) and the incident response expectations, partnering with Platform to operationalize automated testing and anomaly detection. - Champion AI powered governance approaches that proactively surface quality issues, ownership gaps, policy violations, and compliance risks. - Partner with GRC, Legal, and InfoSec to define the privacy, HIPAA, and compliance standards for how sensitive data is handled, which the platform then implements. - Define role-based access policy across the data platform, balancing security with self-service accessibility, with enforcement engineered by Platform. - Embed governance standards directly into engineering and developer workflows so the right way is the easy way, rather than relying on manual processes. - Develop governance metrics and reporting to track adoption, compliance, and data health across the organization. - Build a culture where trusted data is a shared responsibility across technical and business functions. QUALIFICATIONS - 10+ years in data, engineering, or data governance roles, with a strong background in data governance, data quality, data engineering, or data platform. - 4+ years of experience leading and building teams. - Direct experience building data governance programs or frameworks, ideally in a high-growth environment where governance was not yet formalized. - Hands-on experience with modern data stack tooling: Snowflake, dbt, Airflow/orchestration, and data catalog/lineage tools. - Working knowledge of healthcare data regulations (HIPAA), or willingness to develop deep expertise quickly given the WHOOP expansion into regulated healthcare products. - Experience implementing data quality frameworks with automated monitoring and alerting. - Experience with access control design and administration in cloud data platforms (Snowflake RBAC, row-level security, dynamic data masking). - Ability to drive cross-functional alignment on data standards and policies, and to lead highly cross-functional initiatives. Comfortable influencing engineering, product, and business teams. - Experience operating in regulated environments. - Proven track record managing data oversight for complex research initiatives, such as IRB-regulated studies or trials or regulatory filings for the FDA. - Excellent executive communication and organizational leadership. Able to translate technical governance concepts into business value for non-technical stakeholders and senior leadership. - A player-coach orientation. Willing to be deeply hands-on while building repeatable processes and growing a team. - Strong commitment to embracing and leveraging AI tools in day-to-day tasks, ensuring AI-assisted work aligns with the same high-quality standards as personal contributions. *This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office. Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply. WHOOP is an Equal Opportunity Employer and participates in E-verify to determine employment eligibility. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values. At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success. The U.S. base salary range for this full-time position is $190,000 - $230,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training. In addition to the base salary, the successful candidate will also receive benefits and a generous equity package. These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements.

Location: San Francisco, CA • New York, NY • United States Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! Figma's Governance, Risk, and Compliance team is the foundation of how we build and maintain trust - with our users, regulators, business partners, and the organizations that rely on Figma every day. We work across the organization and drive programs that ensure the effectiveness of our security protections, identify and manage risk, maintain compliance, and build trust with our customers. We're looking for a Governance, Risk and Compliance Director to lead this team through its next phase of growth. You'll own Figma's security compliance, risk management, and governance strategy end to end - setting direction for our certification portfolio, building the risk and controls frameworks that scale with our growing business and product suite, and representing GRC to executives, the board, customers, and regulators. This is a hands-on leadership role where you'll manage and grow a team of GRC professionals while staying close to the programs, infrastructure, audits, and cross-functional relationships needed to both protect and enable the business. If you're a strategist and team builder who is excited to scale Figma's GRC program in a rapidly evolving environment, we'd love to hear from you! This is a full time role that can be held from one of our US hubs or remotely in the United States. What you'll do at Figma: Set the strategy and roadmap for Figma's GRC program, aligning compliance, risk, and governance priorities with company objectives and the Security leadership team Own Figma's certification and compliance portfolio, including SOC 2, ISO 27001, FedRAMP, SOX ITGC, and GDPR, and expand coverage as Figma enters new markets and customer segments Lead and grow a team of compliance, risk, and governance professionals, setting priorities, developing talent, and building a culture of rigor and pragmatism Build and evolve enterprise risk and controls frameworks — including AI Governance, Risk and Compliance initiatives and control effectiveness monitoring — that scale across technical and business stakeholders Manage relationships with external auditors, assessors, and regulators, and oversee audit cycles from planning through remediation Direct the selection and optimization of GRC platforms and tooling, and maintain the lifecycle of security policies, standards, and procedures Partner with Sales, Legal, and Customer Trust on security questionnaires, customer audits, contracts, and trust-related communications that support the sales lifecycle Scale enterprise risk reporting and report on program health, risk posture, and audit readiness to executive and board-level audiences We'd love to hear from you if you have: 10+ years of experience in information security, compliance, or risk management, including at least 4 years leading or managing a GRC, security, or compliance team Deep, hands-on experience with frameworks such as SOC 2 and ISO 27001, including leading programs through multiple audit cycles A track record of building GRC programs from the ground up or scaling them through high-growth stages, ideally at a SaaS or platform company, including experience operating in a public company environment with SOX ITGC requirements Executive presence and exceptional written and verbal communication skills, with demonstrated ability to build cross-functional partnerships across Security, Legal, IT, Sales, and Engineering and translate technical risk into business terms for executives, the board, and customers Experience implementing compliance programs for emerging products, including AI-enabled products, with a strong understanding of cloud-based technologies and their GRC implications, and a builder's mindset comfortable with ambiguity as the program scales While it's not required, it's an added plus if you also have: Supported FedRAMP authorization, SSP development, 3PAO coordination, or continuous monitoring activities Experience with global privacy and data protection regulations, such as GDPR or NIS2 Security or risk certifications such as CISSP, CISA, CISM, or CRISC Hands-on experience implementing or administering GRC platforms such as Vanta, Drata, or similar tools Experience presenting to boards, steering committees, and audit committees At Figma, one of our values is Grow as you go. We believe in hiring smart, curious people who are excited to learn and develop their skills. If you’re excited about this role but your past experience doesn’t align perfectly with the points outlined in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles. Pay Transparency Disclosure Job level and actual compensation will be decided based on factors including, but not limited to, individual qualifications objectively assessed during the interview process (including skills and prior relevant experience, potential impact, and scope of role), market demands, and specific work location. Figma offers equity to employees, as well as a competitive package of additional benefits, including health, dental, and vision coverage; retirement benefits with company contributions; parental leave and reproductive or family planning support; mental health and wellness benefits; and paid time off. Figma provides paid sick leave, holidays, and other leave benefits in compliance with applicable federal, state, and local laws, including the requirements of the Washington Minimum Wage Act and related regulations. Exempt employees are eligible for employer‑provided paid flexible PTO in addition to flexible paid sick leave. PTO is subject to manager approval. Additional benefits may include company recharge days, cell phone and home internet reimbursements, and a number of lifestyle spending accounts. Figma also offers sales incentive compensation for most sales roles and an annual bonus plan for eligible non-sales roles. All compensation and benefits are subject to applicable plan terms and may be modified by Figma at any time, consistent with applicable law. Annual Base Salary Range: $235,000 — $317,000 USD At Figma we celebrate and support our differences. We know employing a team rich in diverse thoughts, experiences, and opinions allows our employees, our product and our community to flourish. Figma is an equal opportunity workplace - we are dedicated to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity/expression, veteran status , or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. We will work to ensure individuals with disabilities are provided reasonable accommodation to apply for a role, participate in the interview process, perform essential job functions, and receive other benefits and privileges of employment. If you require accommodation, please reach out to accommodations-ext@figma.com . These modifications enable an individual with a disability to have an equal opportunity not only to get a job, but successfully perform their job tasks to the same extent as people without disabilities. Examples of accommodations include but are not limited to: Holding interviews in an accessible location Enabling closed captioning on video conferencing Ensuring all written communication be compatible with screen readers Changing the mode or format of interviews To ensure the integrity of our hiring process and facilitate a more personal connection, we require all candidates keep their cameras on during video interviews. Additionally, if hired you will be required to attend in person onboarding. By applying for this job, the candidate acknowledges and agrees that any personal data contained in their application or supporting materials will be processed in accordance with Figma's Candidate Privacy Notice . Application limits: To help candidates focus on the opportunities most relevant to their skills and experience, Figma limits the number and frequency of applications. These limits apply to all roles: Candidates may submit up to 5 applications during any rolling 30-day period. Candidates may not reapply to the same role while an application is active or within 90 days of receiving a rejection. Once the applicable days has passed, candidates are welcome to apply again.

Location: Poland Workplace: remote About Finom   Finom is a European tech startup headquartered in Amsterdam, and we’re on a journey towards revolutionizing the financial landscape for entrepreneurs worldwide. Our mission is to develop an all-in-one financial B2B solution that integrates banking functions, accounting, financial management, and invoicing into a seamless, mobile-first platform.   We recently closed a €115 million Series C equity round (around $133 million), bringing our total funding to approximately $346 million. This significant investment follows a $105 million growth funding round from General Catalyst, a long-term backer since 2021 known for supporting companies like Airbnb, HubSpot, KAYAK, and Stripe.   Finom's platform goes beyond traditional banking, offering invoicing and a growing suite of features, including AI-enabled accounting, aiming to simplify financial management for entrepreneurs. We're actively expanding our reach across key EU markets like Germany, France, the Netherlands, Italy, and Spain.   At Finom, we’re not just redefining the entrepreneurial experience — we’re empowering our employees to make a real difference. Your work matters, and your impact extends far beyond product metrics. We nurture innovation and an inspiring work environment where bold ideas thrive, prioritizing thorough research, swift implementation of solutions, and ensuring that every effort we make benefits our users, employees, partners, and our business as a whole.   Maintaining our start-up spirit, we prioritize thorough research, swift implementation of solutions, and ensuring that every effort we make benefits our users, employees, partners, and, of course, our business. About the role Finom is a licensed EMI operating across several EU markets, where information security and compliance are a big part of how we work. We're looking for an Information Security Officer to join our Cyber Security team and take ownership of security compliance and risk management day to day. You won't be starting from a blank page. We already have a mature, certified ISMS and established processes for risk management, audits, vendor assessments and reporting. Your role is to get to know what we have, keep it running well, spot opportunities to make it better and make sure compliance works in practice, not just on paper. You'll report directly to the CISO and work closely with our Cyber Security and Engineering teams, as well as Risk, Legal & Compliance, Internal Audit and other teams across the company. What You Will Be Doing - Maintain the ISMS and ICT risk management framework records: document and records register, control ownership and evidence repository. - Perform and refresh information security risk assessments, maintain the risk register, prepare risk treatment plans and track their implementation with control owners. - Prepare for and go through internal and external audits, certifications and assessments: own the calendar, collect evidence, work directly with auditors and track findings to closure. - Run periodic checks of control design and operating effectiveness and raise gaps for remediation. - Draft and maintain information security policies, procedures and guidelines and prepare them for annual review and approval. - Collect and analyse ISMS KPIs and KRIs and prepare the regular security and risk reporting for management. - Perform security assessments of new suppliers and periodic reassessments of existing ones together with Risk, Legal and the DPO. - Prepare responses to security and compliance questionnaires from partners, customers and regulators. - Review new projects, products and vendors from an information security and compliance perspective. - Track changes in cybersecurity, ICT risk and privacy regulation and supervisory guidance, assess impact and propose required changes. - Keep company-wide security awareness and training materials relevant and up to date. - Automate evidence collection, control checks, questionnaire answering and reporting with templates, scripts and AI tooling. Who You Are - 4+ years of experience in information security compliance, ISMS, GRC or related areas. - Practical experience with ISO/IEC 27001: working with an ISMS and preparing for and going through certification or surveillance audits. - Experience with information security risk assessments, risk registers and risk treatment plans. - Experience answering security questionnaires and due diligence requests from partners, customers or regulators. - Able to translate standards and regulatory requirements into practical controls, procedures and evidence that people actually follow. - Hands-on and self-driven: you own tasks end to end, work directly with people to solve problems and do not wait for a perfect methodology before acting. - Open to AI tools and automation and actively use them in day-to-day work. - Strong written English and clear documentation skills. Nice to Have - Experience in banking, payments or an EMI. - PCI DSS, SWIFT CSP or payment scheme assessments. - Knowledge of DORA, NIS2 and GDPR, including working with a DPO on RoPA and DPIA. - Vendor security assessment and third-party risk experience. - Certifications such as ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, CRISC or CISM. What You Will Get In Return   Make a genuine impact on the product   Join our upward trajectory, and grow with us. We provide the resources and opportunities for continuous personal and professional development, empowering you to make a genuine impact on our evolving product.   Work in the EU   Embark on this exciting journey with us and enjoy the flexibility of traveling and working remotely or in a hybrid model across Europe.   Become a stock options holder   Unlock your inner entrepreneur and align your aspirations with ours through our Stock Options Program. This exciting opportunity is available to every team member, from junior team members to our founders.   Receive unwavering support and care   Finom stands by you at every step, embodying our commitment to your well-being and success reflected in our modern, friendly, and eco-conscious corporate culture. We offer constant support and care to ensure your Finom experience is successful and fulfilling.   Work & Swim program   Immerse yourself in our exclusive Work & Swim Program. Spend one month in a comfortable corporate apartment in enchanting Cyprus. It's the ideal opportunity to strike the perfect work-life balance while enjoying breathtaking Mediterranean views.   Equal Opportunity Statement    At Finom, we're an equal opportunity employer and value diversity at our company. We embrace diversity and invite applications from all walks of life. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, disability status, or other applicable legally protected characteristics.

Location: Spain Workplace: remote About Finom   Finom is a European tech startup headquartered in Amsterdam, and we’re on a journey towards revolutionizing the financial landscape for entrepreneurs worldwide. Our mission is to develop an all-in-one financial B2B solution that integrates banking functions, accounting, financial management, and invoicing into a seamless, mobile-first platform.   We recently closed a €115 million Series C equity round (around $133 million), bringing our total funding to approximately $346 million. This significant investment follows a $105 million growth funding round from General Catalyst, a long-term backer since 2021 known for supporting companies like Airbnb, HubSpot, KAYAK, and Stripe.   Finom's platform goes beyond traditional banking, offering invoicing and a growing suite of features, including AI-enabled accounting, aiming to simplify financial management for entrepreneurs. We're actively expanding our reach across key EU markets like Germany, France, the Netherlands, Italy, and Spain.   At Finom, we’re not just redefining the entrepreneurial experience — we’re empowering our employees to make a real difference. Your work matters, and your impact extends far beyond product metrics. We nurture innovation and an inspiring work environment where bold ideas thrive, prioritizing thorough research, swift implementation of solutions, and ensuring that every effort we make benefits our users, employees, partners, and our business as a whole.   Maintaining our start-up spirit, we prioritize thorough research, swift implementation of solutions, and ensuring that every effort we make benefits our users, employees, partners, and, of course, our business. About the role Finom is a licensed EMI operating across several EU markets, where information security and compliance are a big part of how we work. We're looking for an Information Security Officer to join our Cyber Security team and take ownership of security compliance and risk management day to day. You won't be starting from a blank page. We already have a mature, certified ISMS and established processes for risk management, audits, vendor assessments and reporting. Your role is to get to know what we have, keep it running well, spot opportunities to make it better and make sure compliance works in practice, not just on paper. You'll report directly to the CISO and work closely with our Cyber Security and Engineering teams, as well as Risk, Legal & Compliance, Internal Audit and other teams across the company. What You Will Be Doing - Maintain the ISMS and ICT risk management framework records: document and records register, control ownership and evidence repository. - Perform and refresh information security risk assessments, maintain the risk register, prepare risk treatment plans and track their implementation with control owners. - Prepare for and go through internal and external audits, certifications and assessments: own the calendar, collect evidence, work directly with auditors and track findings to closure. - Run periodic checks of control design and operating effectiveness and raise gaps for remediation. - Draft and maintain information security policies, procedures and guidelines and prepare them for annual review and approval. - Collect and analyse ISMS KPIs and KRIs and prepare the regular security and risk reporting for management. - Perform security assessments of new suppliers and periodic reassessments of existing ones together with Risk, Legal and the DPO. - Prepare responses to security and compliance questionnaires from partners, customers and regulators. - Review new projects, products and vendors from an information security and compliance perspective. - Track changes in cybersecurity, ICT risk and privacy regulation and supervisory guidance, assess impact and propose required changes. - Keep company-wide security awareness and training materials relevant and up to date. - Automate evidence collection, control checks, questionnaire answering and reporting with templates, scripts and AI tooling. Who You Are - 4+ years of experience in information security compliance, ISMS, GRC or related areas. - Practical experience with ISO/IEC 27001: working with an ISMS and preparing for and going through certification or surveillance audits. - Experience with information security risk assessments, risk registers and risk treatment plans. - Experience answering security questionnaires and due diligence requests from partners, customers or regulators. - Able to translate standards and regulatory requirements into practical controls, procedures and evidence that people actually follow. - Hands-on and self-driven: you own tasks end to end, work directly with people to solve problems and do not wait for a perfect methodology before acting. - Open to AI tools and automation and actively use them in day-to-day work. - Strong written English and clear documentation skills. Nice to Have - Experience in banking, payments or an EMI. - PCI DSS, SWIFT CSP or payment scheme assessments. - Knowledge of DORA, NIS2 and GDPR, including working with a DPO on RoPA and DPIA. - Vendor security assessment and third-party risk experience. - Certifications such as ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, CRISC or CISM. What You Will Get In Return   Make a genuine impact on the product   Join our upward trajectory, and grow with us. We provide the resources and opportunities for continuous personal and professional development, empowering you to make a genuine impact on our evolving product.   Work in the EU   Embark on this exciting journey with us and enjoy the flexibility of traveling and working remotely or in a hybrid model across Europe.   Become a stock options holder   Unlock your inner entrepreneur and align your aspirations with ours through our Stock Options Program. This exciting opportunity is available to every team member, from junior team members to our founders.   Receive unwavering support and care   Finom stands by you at every step, embodying our commitment to your well-being and success reflected in our modern, friendly, and eco-conscious corporate culture. We offer constant support and care to ensure your Finom experience is successful and fulfilling.   Work & Swim program   Immerse yourself in our exclusive Work & Swim Program. Spend one month in a comfortable corporate apartment in enchanting Cyprus. It's the ideal opportunity to strike the perfect work-life balance while enjoying breathtaking Mediterranean views.   Equal Opportunity Statement    At Finom, we're an equal opportunity employer and value diversity at our company. We embrace diversity and invite applications from all walks of life. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, disability status, or other applicable legally protected characteristics.

Location: Cyprus Workplace: remote About Finom   Finom is a European tech startup headquartered in Amsterdam, and we’re on a journey towards revolutionizing the financial landscape for entrepreneurs worldwide. Our mission is to develop an all-in-one financial B2B solution that integrates banking functions, accounting, financial management, and invoicing into a seamless, mobile-first platform.   We recently closed a €115 million Series C equity round (around $133 million), bringing our total funding to approximately $346 million. This significant investment follows a $105 million growth funding round from General Catalyst, a long-term backer since 2021 known for supporting companies like Airbnb, HubSpot, KAYAK, and Stripe.   Finom's platform goes beyond traditional banking, offering invoicing and a growing suite of features, including AI-enabled accounting, aiming to simplify financial management for entrepreneurs. We're actively expanding our reach across key EU markets like Germany, France, the Netherlands, Italy, and Spain.   At Finom, we’re not just redefining the entrepreneurial experience — we’re empowering our employees to make a real difference. Your work matters, and your impact extends far beyond product metrics. We nurture innovation and an inspiring work environment where bold ideas thrive, prioritizing thorough research, swift implementation of solutions, and ensuring that every effort we make benefits our users, employees, partners, and our business as a whole.   Maintaining our start-up spirit, we prioritize thorough research, swift implementation of solutions, and ensuring that every effort we make benefits our users, employees, partners, and, of course, our business. About the role Finom is a licensed EMI operating across several EU markets, where information security and compliance are a big part of how we work. We're looking for an Information Security Officer to join our Cyber Security team and take ownership of security compliance and risk management day to day. You won't be starting from a blank page. We already have a mature, certified ISMS and established processes for risk management, audits, vendor assessments and reporting. Your role is to get to know what we have, keep it running well, spot opportunities to make it better and make sure compliance works in practice, not just on paper. You'll report directly to the CISO and work closely with our Cyber Security and Engineering teams, as well as Risk, Legal & Compliance, Internal Audit and other teams across the company. What You Will Be Doing - Maintain the ISMS and ICT risk management framework records: document and records register, control ownership and evidence repository. - Perform and refresh information security risk assessments, maintain the risk register, prepare risk treatment plans and track their implementation with control owners. - Prepare for and go through internal and external audits, certifications and assessments: own the calendar, collect evidence, work directly with auditors and track findings to closure. - Run periodic checks of control design and operating effectiveness and raise gaps for remediation. - Draft and maintain information security policies, procedures and guidelines and prepare them for annual review and approval. - Collect and analyse ISMS KPIs and KRIs and prepare the regular security and risk reporting for management. - Perform security assessments of new suppliers and periodic reassessments of existing ones together with Risk, Legal and the DPO. - Prepare responses to security and compliance questionnaires from partners, customers and regulators. - Review new projects, products and vendors from an information security and compliance perspective. - Track changes in cybersecurity, ICT risk and privacy regulation and supervisory guidance, assess impact and propose required changes. - Keep company-wide security awareness and training materials relevant and up to date. - Automate evidence collection, control checks, questionnaire answering and reporting with templates, scripts and AI tooling. Who You Are - 4+ years of experience in information security compliance, ISMS, GRC or related areas. - Practical experience with ISO/IEC 27001: working with an ISMS and preparing for and going through certification or surveillance audits. - Experience with information security risk assessments, risk registers and risk treatment plans. - Experience answering security questionnaires and due diligence requests from partners, customers or regulators. - Able to translate standards and regulatory requirements into practical controls, procedures and evidence that people actually follow. - Hands-on and self-driven: you own tasks end to end, work directly with people to solve problems and do not wait for a perfect methodology before acting. - Open to AI tools and automation and actively use them in day-to-day work. - Strong written English and clear documentation skills. Nice to Have - Experience in banking, payments or an EMI. - PCI DSS, SWIFT CSP or payment scheme assessments. - Knowledge of DORA, NIS2 and GDPR, including working with a DPO on RoPA and DPIA. - Vendor security assessment and third-party risk experience. - Certifications such as ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, CRISC or CISM. What You Will Get In Return   Make a genuine impact on the product   Join our upward trajectory, and grow with us. We provide the resources and opportunities for continuous personal and professional development, empowering you to make a genuine impact on our evolving product.   Work in the EU   Embark on this exciting journey with us and enjoy the flexibility of traveling and working remotely or in a hybrid model across Europe.   Become a stock options holder   Unlock your inner entrepreneur and align your aspirations with ours through our Stock Options Program. This exciting opportunity is available to every team member, from junior team members to our founders.   Receive unwavering support and care   Finom stands by you at every step, embodying our commitment to your well-being and success reflected in our modern, friendly, and eco-conscious corporate culture. We offer constant support and care to ensure your Finom experience is successful and fulfilling.   Work & Swim program   Immerse yourself in our exclusive Work & Swim Program. Spend one month in a comfortable corporate apartment in enchanting Cyprus. It's the ideal opportunity to strike the perfect work-life balance while enjoying breathtaking Mediterranean views.   Equal Opportunity Statement    At Finom, we're an equal opportunity employer and value diversity at our company. We embrace diversity and invite applications from all walks of life. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, disability status, or other applicable legally protected characteristics.

Role Overview: We're looking for a Business Risk Officer to help scale the way Mercury builds products. In this role you will report to our Head of Business Risk & Enablement and will partner with Product, Operations, Compliance and many other support and oversight teams to ensure that products and features are delivered “best-in-class” in a safe and sound manner. Your success in this role will rely on subject matter expertise in one or more of Mercury’s core product offerings and associated risks. You will also be primarily responsible for the facilitation of non-financial risk management programs. Key Responsibilities: — Identify any potential blind spots in processes and controls, and suggest commercial improvements/enhancements — Facilitate pre-launch and new activity initiatives/reviews, tracking items to closure and escalating where/when necessary — Facilitate execution of risk self assessments and similar exercises within the non-financial risk frameworks — Event/incident, issues, and remediations management - ensuring that incidents and issues are recorded and managed through to remediation in line with any and all relevant frameworks in the company — Develop and enhance iteratively KPIs/KRIs to be monitored by yourself, product/process owners, and other stakeholders in order to mitigate risk — Coordinate interactions and responses between Product and Operations teams vs. other stakeholders for audits, exams and similar reviews (internal and external) — Engage and partner deeply with stakeholders across the organization including Product, Operations, Risk, Compliance, Legal, Finance, etc. — Help design / provide feedback on certain enterprise/firm-wide trainings and deliver trainings as needed Qualifications: — Have at least 5 - 7+ years of experience in a banking, fintech, or other financial services firms in a product/business, business risks and/or controls, operational risk, or other similar roles — Track record of balancing risk, compliance, and customer experience in cross-functional settings — Excellent communication skills to simplify complex business, reg and/or risk concepts into clear explanations and/or recommendations — Familiarity with Governance, Risk and Compliance (GRC) practices and non-financial risk frameworks — Curious, growth-oriented, and motivated to work on risk and controls at all lifecycle stages (new product launches, scaling, and legacy optimization) — Bring a collaborative, problem-solving mindset to your work, have strong stakeholder management skills, and an ability to influence without direct authority — Approach your work with a high quality bar and a strong sense of ownership - you see things through to completion, knowing when to be pragmatic vs. when not to settle — Proficient with AI tools, or eager to get there, to drive efficiency in risk and controls work — a growth mindset is enough if you're not an expert day one. Preferred Qualifications: — Exposure to product or technology development lifecycles (e.g., involvement in pre-launch reviews, feature rollouts, or cross-functional builds) — doesn't need to be a formal PM background, just familiarity with how products move from idea to launch Total Rewards: The total rewards package at Mercury includes base salary, equity (stock options/RSUs), and benefits. Our salary and equity ranges are highly competitive within the SaaS and fintech industry and are updated regularly using the most reliable compensation survey data for our industry. New hire offers are made based on a candidate’s experience, expertise, geographic location, and internal pay equity relative to peers. Our target new hire base salary ranges for this role are the following: US employees in New York City, Los Angeles, Seattle, or the San Francisco Bay Area: $163,000 — $203,800 USD US employees outside of New York City, Los Angeles, Seattle, or the San Francisco Bay Area: $146,000 — $183,400 USD Canadian employees (any location): $154,100 — $192,600 USD

OpenRouter ищет инженера по решениям в области безопасности, который будет отвечать за проведение обзоров безопасности для клиентов и предоставление точных технических рекомендаций по безопасности для корпоративных покупателей. В обязанности входит анализ инфраструктуры, архитектуры и процессов безопасности, включая вопросы, связанные с большими языковыми моделями (LLM), управлением рисками и соответствием (GRC), а также контрактной документацией и анкетами по безопасности. Кандидат должен обладать знаниями в области безопасности приложений, облачной безопасности и инфраструктуры искусственного интеллекта, а также иметь опыт работы с инструментами и процессами, направленными на обеспечение безопасности и доверия клиентов.

Задачи: — Быть экспертом по продуктам безопасности Datadog в целевых аккаунтах — Тесно сотрудничать с Enterprise Account Executives для привлечения новых клиентов и расширения в стратегических аккаунтах — Вести цикл продаж безопасности от выявления потребностей до технического закрытия, работая с инженерами продаж — Продвигать историю безопасности Datadog среди лидеров безопасности (CISO, Security Architects, SecOps) — Работать кросс-функционально с партнерами, каналами и альянсами для совместных маркетинговых действий — Эффективно совместно продавать с AEs и партнерами, участвуя в стратегии сделок, согласовании решений и взаимодействии с заинтересованными сторонами — Следить за тенденциями в области безопасности и конкурентными предложениями для выделения Datadog Требования: — Успешный опыт продаж решениям для безопасности (CISO, SecOps, GRC и др.) — Опыт совместных продаж в матричной среде, поддержка или партнерство с AEs и кросс-функциональными командами — Глубокое понимание модели продаж через партнеров/каналы, умение ориентироваться и влиять на совместные продажи — Знание современных решений безопасности, таких как SIEM, CSPM, CWPP, безопасность контейнеров/Kubernetes — Способность строить крепкие отношения с внутренними заинтересованными сторонами, партнерами и техническими командами клиентов Условия: — Высокие возможности заработка, основанные на личных результатах — Акции для новых сотрудников (RSU) и программа покупки акций для сотрудников (ESPP) — Непрерывное профессиональное развитие, обучение продукту и карьерное планирование — Обучение продажам по методологиям MEDDIC и Command of the Message — Программа наставничества и внутреннего нетворкинга — Инклюзивная корпоративная культура и возможность участия в сообществах — Конкурентный пакет медицинских льгот — Пенсионные накопления с соответствием работодателя — Программа страхования и усыновления домашних животных Дополнительно: — Зарплата и пакет акций конкурентоспособны и могут включать переменную часть — Конкретная компенсация зависит от навыков, квалификации и опыта кандидата — Широкий спектр льгот, включая медицинское страхование, стоматологию, планирование семьи, психическое здоровье, 401(k) с соответствием, оплачиваемый отпуск, компенсацию фитнеса и скидки на покупку акций О компании: Datadog — ведущая платформа наблюдения и безопасности для эпохи ИИ, объединяющая приложения, инфраструктуру, данные, модели и безопасность в одном месте с использованием ИИ для обнаружения и решения проблем до того, как они повлияют на клиентов. Компания обслуживает Fortune 500 и лидеров в области ИИ по всему миру. Равные возможности: Datadog предоставляет равные возможности трудоустройства всем кандидатам независимо от расы, цвета кожи, происхождения, религии, пола, национальности, сексуальной ориентации, возраста, гражданства, семейного положения, инвалидности, гендерной идентичности, статуса ветерана и других защищенных законом характеристик. Рассматриваются кандидаты с уголовным прошлым в соответствии с законодательством. Политика конфиденциальности и ИИ: Информация, предоставленная в процессе подачи заявки, обрабатывается согласно политике конфиденциальности Datadog. Для информации о политике ИИ посетите соответствующую страницу. Формат работы: гибридный, с возможностью удалённой работы.

Location: Vienna, Austria About Us Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance. Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution. Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services. A junior Controls Analyst sits in the second line and does the groundwork that keeps the control environment visible — maintaining the inventory, gathering evidence, testing controls. Core responsibilities Risk and control framework Maintain the approved control inventory, including control descriptions, owners, frequency and evidence requirements; process additions through the agreed governance process. Map controls to processes, risks and applicable obligations. Identify control gaps, duplicate controls, outdated records and missing ownership for review. Support Risk and Control Self-Assessment (RCSA) cycles by collecting inputs, checking completeness and recording changes to risks, controls and action plans. Evidence and control testing Request and organise evidence from control owners across departments, maintain an accessible audit trail and follow up on overdue submissions. Perform sample-based second-line testing under an approved test plan, assessing control design and operating effectiveness as applicable. Document the test scope, sample, evidence, results and conclusion. Distinguish control failures from cases that cannot be tested because evidence is unavailable, and escalate material findings. Issues and remediation Record control deficiencies and agreed actions with clear descriptions, owners, due dates and status; follow up on overdue or recurring issues. Review evidence of completed actions and, where required, retest before recommending closure. Escalate unresolved matters through the agreed process. Cross-department control monitoring dashboards Build and maintain dashboards that monitor key controls across departments against agreed thresholds, including control performance, overdue evidence, testing exceptions, open issues and remediation timeliness. Work with risk and control owners to document approved indicators, thresholds, data sources, review frequency and escalation triggers. Check that dashboard data is consistent, complete and traceable to the underlying records. Monitor threshold breaches and adverse trends, investigate anomalies with control owners, and escalate exceptions with clear context and action status through periodic risk reports and governance meetings. GRC records and audit support Keep risk, control, process, evidence and issue records current in the GRC tool; run data quality checks and prepare standard reporting extracts. Prepare relevant records and evidence for internal audit, external audit and regulatory reviews in coordination with the wider team. Requirements Attention to the details and result oriented One to three years of relevant experience in operational risk, internal controls, internal audit, compliance or a regulated operating environment. Strong Excel skills, including the ability to consolidate and check data, use formulas and pivot tables, and build clear dashboards or management reports. Ability to understand process flows and risk and control relationships, apply a defined testing method, and write clear findings supported by evidence. Clear written and spoken English, German language nice to have Why Join Us At Bybit, we are committed to fostering a supportive and enriching work environment. Our benefits include: - Study Growth Fund: We support your professional development and continuous learning. - Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation. - Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world. - Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company. - Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.

Location: Tel Aviv, Israel About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role The Security Compliance Coordinator supports the day-to-day execution and scaling of the company's security compliance program. This hands-on role coordinates audits and certifications, performs control and evidence reviews, supports supplier compliance reviews within Third Party Risk Management ( TPRM ) , and drives assigned actions to closure across multiple stakeholders. The coordinator works alongside other team members and is expected to contribute professional judgment, not only administrative tracking. Your responsibilities will include : Compliance and Audit Operations Coordinate external audits, certifications, and readiness activities, including SOC 2 and ISO-based programs, evidence collection, control populations, sampling, and auditor requests. Perform recurring control testing and evidence reviews; identify gaps and inconsistencies and track findings, corrective actions, and remediation commitments through closure. Maintain organized, audit-ready records and provide clear status reporting on milestones, risks, dependencies, and overdue actions. TPRM and Supplier Compliance Reviews Conduct compliance reviews of new and existing suppliers as part of the TPRM process, assessing questionnaires, SOC reports, ISO certifications, policies, and other security and compliance evidence against applicable requirements. Identify missing, expired, or insufficient supplier evidence and material compliance gaps; coordinate clarifications and remediation and document the resulting assessment, decision, escalation, or accepted exception. Governance and Compliance Projects Support the policy and procedure lifecycle, including inventory maintenance, owner coordination, scheduled reviews, approval tracking, publication, and reporting. Support the implementation and operation of the GRC platform, including workflows, evidence automation, integrations, data quality, reporting, and user adoption. Support the integration of new entities, services, and sites into the compliance program, including scope extensions and data-center documentation and evidence coordination. Maintain workplans and Jira tasks and develop practical templates, metrics, and reporting that improve visibility and consistency across assigned workstreams. We expect you to have : 2-3 years of experience in information security compliance, GRC, IT audit, IT risk, or a closely related field. Working knowledge of information security controls, audit and certification cycles, and frameworks such as ISO 27001 or SOC 2. Ability to review evidence critically, identify missing or inconsistent information, and follow issues through to a clear and documented resolution. Prior exposure to TPRM, supplier security or compliance assessments, or review of third-party assurance documentation is an advantage. Strong organizational and English communication skills, with the ability to manage multiple workstreams and summarize requirements, findings, and status accurately. Proficiency with Jira, Confluence, and Excel or equivalent spreadsheet tools; experience with GRC platforms is an advantage. Benefits & Perks: Competitive compensation Career growth and learning opportunities Flexibility and ownership Collaborative and innovative culture Opportunity to work on impactful AI projects International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

Location: Remote - Americas Who We Are: Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more. Amongst our subsidiaries, Alpaca is a licensed financial services company, serving hundreds of financial institutions across 40 countries with our institutional-grade APIs. This includes broker-dealers, investment advisors, wealth managers, hedge funds, and crypto exchanges, totalling over 10 million brokerage accounts. Our global team is a diverse group of experienced engineers, traders, and brokerage professionals who are working to achieve our mission of opening financial services to everyone on the planet. We're deeply committed to open-source contributions and fostering a vibrant community, continuously enhancing our award-winning, developer-friendly API and the robust infrastructure behind it. Alpaca is proudly backed by $400 million in funding from top-tier global investors including Portage Ventures, Spark Capital, Tribe Capital, Social Leverage, Horizons Ventures, Opera Tech Ventures, SBI Group, Derayah Financial, Unbound, Peak XV, Elefund, and Y Combinator. Our Team Members: We're a dynamic team of 400+ globally distributed members who thrive working from our favorite places around the world, with teammates spanning the USA, Canada, Japan, Hungary, Nigeria, Brazil, the UK, and beyond! We're searching for passionate individuals eager to contribute to Alpaca's rapid growth. If you align with our core values—Stay Curious, Have Empathy, and Be Accountable—and are ready to make a significant impact, we encourage you to apply. Your Role This is a hands-on operator role. You will update risk registers yourself, run functional risk lead check-ins, and produce board materials. No direct reports. Alpaca has the ERM framework, taxonomy, and scoring model. As ERM Program Manager, you will own execution: intake from functional risk leads, risk register hygiene, residual scoring with risk owners, and board-ready reporting on schedule. You report to the CISO / ERM Lead and work closely with the ERM Working Group, functional risk leads, and local entity leaders. Things You Get To Do Run the ERM intake cycle end to end: Ticket ingestion, functional interviews, surveys, and ad hoc signals from incidents or operational channels. Maintain functional and enterprise risk registers in Vanta: owners, inherent and residual scores, mitigations, and status. Coordinate functional risk lead check-ins, chase blockers, and normalize inputs into the enterprise view. Map risks to Alpaca's 15 L1 categories and Appendix C L2 subcategories to enterprise scenarios for reporting. Apply the ERM Risk Scoring Model and push residual validation with risk owners. Track mitigation plans, action owners, target dates, and escalations. Define KRIs with data owners; use proxy metrics where instrumentation is still maturing. Produce leadership and board ERM materials. Support ERM Working Group agendas, minutes, and action tracking. Operate the intake triage workflow: score, dedupe, register action. Build playbooks and templates for functional leads. Support local entity quarterly risk updates and escalation hygiene. Surface emerging risks (crypto, AI, multi-jurisdiction) for review. Who You Are (Must-Haves) Mid-career (roughly 5 to 10 years) in operational risk, ERM, GRC , or compliance program management at a regulated financial institution (broker-dealer, fintech, or capital markets). Built or run a risk register from intake through reporting. Not framework design only. Can coordinate Legal, Compliance, Finance, Product, Security, and Operations stakeholders without direct authority. Hands-on GRC platform experience Clear writing: risk statements, executive summaries, board-ready tables. SEC/ FINRA familiarity or equivalent regulated-environment experience. Who You Might Be (Nice-To-Haves) Broker-dealer, clearing, or custody operations context. High-growth fintech where you stood up ERM while the business scaled. Crypto / digital assets risk register exposure. Multi-entity, multi-jurisdiction risk consolidation. Jira service desk or structured intake workflow design. COSO ERM / ISO 31000 implementation as an operator. Prior work drafting board or risk committee reporting. How We Take Care of You: Competitive Salary & Stock Options Health Benefits New Hire Home-Office Setup: One-time USD $500 Monthly Stipend: USD $150 per month via a Brex Card Alpaca is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse workforce. Recruitment Privacy Policy