Вакансии

Location: San Francisco, California; New York, New York Workplace: Hybrid WHO WE ARE Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. ABOUT US: Notion helps you build beautiful tools for your life’s work. In today's world of endless apps and tabs, Notion provides one place for teams to get everything done, seamlessly connecting docs, notes, projects, calendar, and email—with AI built in to find answers and automate work. Millions of users, from individuals to large organizations like Toyota, Figma, and OpenAI, love Notion for its flexibility and choose it because it helps them save time and money. In-person collaboration is essential to Notion's culture. We require all team members to work from our offices on Mondays, Tuesdays, and Thursdays, our designated Anchor Days. Certain teams or positions may require additional in-office workdays. ABOUT THE ROLE: Millions of people rely on Notion to do their most important work. Protecting that trust starts with protecting the people who build Notion: our employees, their laptops, their identities, and the SaaS apps they rely on every day. We are looking for a hands-on Corporate Security Engineer to own and improve the technical controls that keep our workforce and corporate environment safe. This is a security engineering role focused on building scalable controls and automation across identity, endpoints, SaaS, and workforce infrastructure, not a traditional IT support or corporate engineering role. You'll own and evolve core security controls, design systems and automation that scale with the company, and help make security both stronger and easier to use. You'll partner closely with IT, Infrastructure, GRC, and Detection & Response to improve the security foundations that employees rely on every day. WHAT YOU'LL ACHIEVE: - Harden our identity and access management stack, including Okta and Google Workspace, with phishing-resistant MFA, strong SSO and SCIM lifecycles, and least-privilege access across SaaS. - Run our endpoint security program across a macOS-first fleet, including MDM, EDR, and configuration baselines, with working coverage for Windows and ChromeOS. - Secure AI tool usage at the endpoint, including governance of large language models, AI agents, and model context protocol (MCP) integrations; detect and prevent unauthorized or risky AI service access and data exfiltration through AI-enabled tools. - Reduce SaaS risk at scale through SSPM tooling and custom automation, including detection of risky OAuth grants, excessive permissions, shadow IT, and configuration drift. - Write code (Python, Terraform) to automate access reviews, onboarding and offboarding, configuration drift detection, and audit evidence collection. - Partner with Detection & Response to ensure corporate systems produce the telemetry needed to detect identity, endpoint, and SaaS abuse. - Support SOC 2, ISO 27001, and customer audits as a byproduct of good engineering, not a separate workstream. - Partner with Detection & Response on investigation and response for corporate security incidents, including phishing, account compromise, lost devices, and BEC. SKILLS YOU NEED TO BRING: - Have 5+ years of hands-on experience in corporate security, enterprise security, or IT security engineering at a cloud-native company. - Have working knowledge of a major identity provider (Okta, Entra, or Google Workspace) and the underlying protocols (SAML, OIDC, OAuth 2.0, SCIM). - Have hands-on experience operating endpoint management and detection tooling across macOS and enterprise environments. - Write production-quality scripts and automation in Python or Bash, and have shipped Terraform or other infrastructure-as-code for security configuration. - Are familiar with SaaS security risks (OAuth governance, audit logging, SSPM) and the realities of integrating a long tail of vendors. - Have working knowledge of at least one major cloud platform (AWS, GCP, or Azure) at the security configuration level. - Communicate clearly in writing and work effectively across IT, Engineering, Legal, People, and GRC. NICE TO HAVES: - Experience at a fast-growing tech or AI company where the security program had to outpace headcount. - A background in IT engineering, SRE, or production engineering that transitioned into security engineering. - Experience building internal security tooling or workflows that improved employee or developer experience. - Contributions to the security community through open-source tools, blog posts, or conference talks. We hire talented and passionate people from a variety of backgrounds because we want our global employee base to represent the wide diversity of our customers. If you’re excited about a role but your past experience doesn’t align perfectly with every bullet point listed in the job description, we still encourage you to apply. If you’re a builder at heart, share our company values, and enthusiastic about making software toolmaking ubiquitous, we want to hear from you. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know. Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role’s scope and complexity, and the candidate’s experience and expertise, and may vary from the range provided below. For roles based in San Francisco or New York City, the estimated base salary range for this role is $200,000 - $220,000 per year. By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550?pvs=74 and NYLL 144 https://notion.notion.site/Ashby-AI-Bias-Audit-2b0efdeead05803bbbfae159ec86c528. #LI-Onsite A NOTE ON AI You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on. EQUAL OPPORTUNITY & ACCOMMODATIONS We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.

Location: San Francisco, CA | New York City, NY | Seattle, WA About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role The Security Risk team is responsible for how Anthropic identifies, prioritizes, and drives treatment of its most important security risks. We are rebuilding risk management to operate as an engineering function through automation and AI-native platforms to enable decision making. The systems we assess span Anthropic’s full security landscape, from authorization primitives to cryptographic foundations, so the team needs breadth across domains and the ability to go deep in any of them. Security Risk, in deep partnership with Security Engineering, will help define the security program to shape how both engineers and non-engineers build and ship software. The conventional GRC playbook was not built for a company shipping frontier AI. You will help define what replaces it, with a direct line to CISO-level decisions and the mandate to build the AI-native platform underneath. You’ll work across a breadth of areas from identity and secrets management to infrastructure security, with your focus shaped by your strengths, ability to learn quickly, and the team’s priorities. This is largely greenfield work, and you will help define the architecture and discipline. Key responsibilities Take ownership of Anthropic’s most complex security risk problems and drive them end to end with minimal oversight, turning ambiguous signals into a defensible view of severity and likelihood and seeing them through escalation, treatment decisions, and remediation Build the systems that make risk measurable and let risk work scale, including quantification tooling, automated intake and triage, and the observability that partner teams use to understand their own risk posture Work alongside Security Engineering as a calibrated technical peer who pressure tests architectures and treatment plans, translates findings into prioritized remediation roadmaps, and makes the investment case for what to fix now, what to accept and track, and what to defer Mentor engineers and risk practitioners across Security and the broader engineering organization, and help build a risk engineering culture in which teams own their risks and our team provides the visibility and judgment that supports the Security risk engineering Work across the breadth of Anthropic’s security landscape, spanning areas like identity and secrets management, developer security and supply chain, infrastructure security, and secure frameworks, and build the context needed to reason about risk credibly in each Go deep where a risk demands it, understanding how these systems are built and how they fail so that assessments and treatment plans reflect engineering reality rather than abstraction Risk assessment and quantification Identify systematic risks through threat modeling and structured assessment, then drive the severity calibration and escalation conversations that follow, bringing leadership a defensible position and a clear recommendation that holds up under pointed questions Contribute to the team’s quantitative risk work, applying methods such as calibrated estimation and Monte Carlo simulation where they meaningfully change a resource or treatment decision Risk platform and automation Design and build AI-native risk tooling that uses Claude to classify incoming risks, augment triage, and continuously sense changes in our risk landscape as teams ship Create the dashboards and data pipelines that give engineering and product teams real-time visibility into their risk posture and make distributed ownership of risk practical Remediation strategy and investment Partner with Security Engineering and risk owners to design remediation roadmaps that are explicit about sequencing, ownership, and the investment required Measure outcomes rather than activity, focusing on decisions made and risk reduced Minimum qualifications At least 8 years of software engineering or security engineering experience, including leading and remediating complex security risks independently Bachelor’s degree in a related field or equivalent experience Strong programming skills in Python or at least one systems language such as Go, Rust, or C/C++ Broad knowledge across the core security engineering domains, with depth in at least one, including identity and secrets management, developer security and supply chain, infrastructure and cloud security, and secure frameworks Calibrated risk judgment, meaning you can put a defensible severity and likelihood on an ambiguous problem and change your position when the evidence changes Experience leading cross-functional security initiatives and navigating complex organizational dynamics Outstanding communication skills, translating technical concepts effectively across all levels of the organization A track record of bringing clarity and ownership to ambiguous technical problems and driving them to resolution Low ego and high empathy, with a history of growing the engineers around you and supporting diverse, inclusive teams Passion for AI safety and the role security and risk management play in building trustworthy AI systems Preferred qualifications Owned a named security risk and driven it from discovery through remediation across multiple teams Briefed executives on risk decisions and defended accept, remediate, or transfer recommendations under challenge Built security automation, detection, or risk platforms adopted across an engineering organization Shipped LLM or agent-powered tooling and workflows that automate security or risk activities A security engineering, detection engineering, or offensive security background with a risk-based prioritization mindset Built or operated a quantified security risk program (FAIR-style decomposition, Monte Carlo simulation, loss exceedance analysis) whose outputs changed real resource decisions Enough familiarity with SOC 2, ISO 27001, or FedRAMP to know what compliance does and does not buy you The annual compensation range for this role is listed below. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. Annual Salary: $320,000 — $405,000 USD Logistics Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position Location-based hybrid policy: Currently, we expect all staff to be in one of our offices at least 25% of the time. However, some roles may require more time in our offices. Visa sponsorship: We do sponsor visas! However, we aren't able to successfully sponsor visas for every role and every candidate. But if we make you an offer, we will make every reasonable effort to get you a visa, and we retain an immigration lawyer to help with this. For roles performing work in California: We will consider for employment all qualified applicants, including those with arrest or conviction records or criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the San Francisco Fair Chance Ordinance, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act. We encourage you to apply even if you do not believe you meet every single qualification. Not all strong candidates will meet every single qualification as listed.  Research shows that people who identify as being from underrepresented groups are more prone to experiencing imposter syndrome and doubting the strength of their candidacy, so we urge you not to exclude yourself prematurely and to submit an application if you're interested in this work. We think AI systems like the ones we're building have enormous social and ethical implications. We think this makes representation even more important, and we strive to include a range of diverse perspectives on our team. Your safety matters to us. To protect yourself from potential scams, remember that Anthropic recruiters only contact you from @anthropic.com email addresses. In some cases, we may partner with vetted recruiting agencies who will identify themselves as working on behalf of Anthropic. Be cautious of emails from other domains. Legitimate Anthropic recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit anthropic.com/careers directly for confirmed position openings. How we're different We believe that the highest-impact AI research will be big science. At Anthropic we work as a single cohesive team on just a few large-scale research efforts. And we value impact — advancing our long-term goals of steerable, trustworthy AI — rather than work on smaller and more specific puzzles. We view AI research as an empirical science, which has as much in common with physics and biology as with traditional efforts in computer science. We're an extremely collaborative group, and we host frequent research discussions to ensure that we are pursuing the highest-impact work at any given time. As such, we greatly value communication skills. The easiest way to understand our research directions is to read our recent research. This research continues many of the directions our team worked on prior to Anthropic, including: GPT-3, Circuit-Based Interpretability, Multimodal Neurons, Scaling Laws, AI & Compute, Concrete Problems in AI Safety, and Learning from Human Preferences. Come work with us! Anthropic is a public benefit corporation headquartered in San Francisco. We offer competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and a lovely office space in which to collaborate with colleagues. Guidance on Candidates' AI Usage: Learn about our policy for using AI in our application process.

Location: Remote US At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most. Affirm values security as being critical to the company’s continued success. Our mission is to cultivate a culture of security at Affirm, enabling the company to succeed in building honest financial products. The Security Risk Management team is evolving beyond traditional governance, risk, and compliance; we are building an engineering driven program that designs, automates, and scales the controls, workflows, and tooling that protect Affirm and our customers. The ideal candidate will design, develop, configure, and implement solutions to complex technical and business problems across the Security Third Party Program and the broader Security Risk Management program. They are equally comfortable shaping policy and shipping automation using modern tooling (Python, Cursor, Claude, and other agentic coding platforms) to replace manual GRC work with scalable, code-defined workflows. They will operate as a subject matter expert, interface with business and engineering stakeholders, and play a key role in transforming Security Risk Management from a compliance oriented function into a security engineering discipline. What You'll Do Lead and mature Affirm's Security Third Party Program, including the design, implementation, and continuous improvement of processes, controls, and operational workflows Build and maintain automation that replaces manual GRC tasks: intake, triage, evidence collection, control validation, tracking, escalations, and reporting, using either Python, low code platforms, and agentic coding tools (Cursor, Claude, etc.) Design and operate workflow orchestration and integrations across systems like ticketing, GRC platforms, vendor management tools, identity providers, and cloud control planes Partner closely with Procurement, Legal, Engineering, IT, Compliance, Privacy, and business stakeholders to assess and manage security risk across third party relationships Translate ambiguous business and security requirements into practical, scalable program solutions and decision frameworks Identify opportunities to automate manual processes across the program and prototype solutions yourself rather than waiting on an engineering backlog Drive program operational excellence by establishing repeatable processes, service-level expectations, metrics, and reporting for third party security risk management Evaluate third party security controls, cloud architectures (AWS/GCP), integration patterns, and risk posture, and provide clear recommendations to stakeholders and leadership Conduct light threat models on high risk integrations and partner with Security SMEs for deeper diligence Manage and prioritize a portfolio of complex security risk reviews and initiatives simultaneously, balancing business enablement with risk reduction Partner with technical teams to implement or optimize systems and tools that support program automation and workflow orchestration Develop dashboards, reporting mechanisms, and program insights (SQL, BI tools, or custom tooling) that improve visibility into risk trends, bottlenecks, and program performance Act as a trusted advisor and SME on third party security risk management, helping stakeholders make informed, risk based decisions Contribute to the broader Security Risk Management strategy by identifying opportunities to scale, simplify, and strengthen security governance processes through engineering What We Look For 5+ years of experience in Information Security, Risk Management, Engineering and/or relevant roles Hands-on experience using agentic coding tools (Cursor, Claude Code, Copilot, etc.) and a working knowledge of Python; you don't need to be a software engineer, but you should be fluent enough to read, modify, and run scripts, build automations, and ship small tools end-to-end Familiarity with cloud environments (AWS, GCP, or Azure) — IAM, logging, common services, and the security risks/controls that apply to cloud-deployed third parties and integrations Excellent written and verbal communications skills Experience engineering solutions via Python, Claude, Cursor or other agentic coding tooling Experience with industry based information security & control frameworks (NIST Cyber Security Framework, ISO 2700x, SOC1&2(SSAE18), PCI DSS, NIST-800-53, FFIEC Cybersecurity Assessment Tool, SANS Top 20, etc.) BA or BS degree in Information Security, Cyber Security, Computer Science or related field or commensurate experience Attention to detail and experience with security practices and security tooling Demonstrated ability to drive projects towards completion Ability to understand and communicate technical issues to non-technical teams Professional certification in Information Security or Risk Management (such as CISSP, CISM, CISA, CRISC, etc.) is a plus Base Pay Grade - L Equity Grade - 5 Employees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills. Base pay is part of a total compensation package that may include equity rewards, monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents.) USA Pacific base pay range (CA, WA, NY, NJ, CT) per year: $165,000 - $225,000 USA Sapphire base pay range (all other U.S. states) per year: $146,000 - $206,000 Please note that visa sponsorship is not available for this position. #LI-Remote Remote-first with flexibility built in Affirm is proud to be a remote-first company. Most roles can be done from almost anywhere within the country of employment. Some positions may occasionally require in-person work at an Affirm office, and a few are office-based due to the nature of the work. All new hires will be invited to attend an in-person onboarding experience. Benefits designed for you Our benefits reflect our commitment to care, transparency, and flexibility. Here are a few highlights: Health coverage at no cost: We cover 100% of premiums for employees and their dependents. Spending stipends: Monthly stipends support your tech setup, and the ability to choose health and wellness options that are right for you. Time off to recharge: Flexible time off and generous holiday calendars help you rest when you need to. Own a piece of what you build: Our employee stock purchase plan (ESPP) lets you buy Affirm stock at a discount. We’re committed to providing an inclusive interview process, including accommodations for candidates with disabilities. If you need support, we’re happy to help. For positions based in San Francisco or Los Angeles: Affirm considers qualified applicants with arrest and conviction records, as required by law. By clicking "Submit Application," you acknowledge that you have read Affirm's Global Candidate Privacy Notice and consent to the use of your personal information as described.

Location: Mumbai, India; New Delhi, India We are seeking an experienced Senior Data & AI Governance Lead to join our team in Saudi Arabia. This leadership role is critical in establishing and driving the data and AI governance frameworks across the organization to ensure ethical, compliant, and effective use of data and artificial intelligence technologies. As the Senior Data & AI Governance Lead, you will oversee the development and implementation of governance policies, standards, and practices that ensure data quality, privacy, security, and responsible use of AI. You will collaborate closely with stakeholders across business, technology, legal, and compliance teams to embed governance principles within data and AI initiatives and to manage risks effectively. This position offers a unique opportunity to lead in an evolving technological landscape and help organizations harness the power of data and AI while maintaining trust and compliance. Key Responsibilities Develop and implement data and AI governance frameworks, policies, and standards aligned with business objectives and regulatory requirements. Lead cross-functional teams to embed governance practices in AI/ML development and data management processes. Ensure compliance with relevant data privacy, security, and ethical standards, including KSA regulations. Collaborate with legal and compliance teams to monitor regulatory changes and adjust governance frameworks accordingly. Define metrics and KPIs to measure the effectiveness of data and AI governance initiatives. Provide guidance and training to stakeholders on governance policies, ethical AI use, and data stewardship responsibilities. Oversee risk assessment related to data and AI projects and implement mitigation strategies. Drive continuous improvement in governance processes and keep abreast of emerging trends in data, AI, and regulatory landscapes. Facilitate communication between technical teams, business units, and senior management regarding governance issues and compliance status. Lead audits and reviews related to data and AI governance compliance. Requirements Bachelor's degree in Computer Science , Information Systems , or a related field. 5–20 years of experience in Data Governance, Data Privacy, Data Architecture, AI Governance, AI/ML, or related disciplines. Strong understanding of data governance regulatory requirements and industry-leading data quality frameworks. Knowledge of KSA Personal Data Protection Law (PDPL). Experience in Governance, Risk & Compliance (GRC), Responsible AI, and AI regulations. Hands-on experience with Informatica Suite (EDC, IDQ, Axon, MDM). Strong knowledge of Data Governance Frameworks, Operating Models, Data Quality Management, Data Privacy, Data Architecture, and Data Modeling. Experience in AI Governance, AI Auditing, AI Engineering, and Data Science. CDMP certification preferred. Data Privacy certifications preferred. TOGAF or equivalent Architecture certification is a plus.

Location: The Netherlands; Poland; Portugal; United Kingdom; Spain; Italy; Israel Workplace: Remote The Security Team is responsible for providing key security capabilities covering application, cloud and enterprise security, incident response, detection and GRC. Our team is looking for experienced, hands-on security practitioners, who will drive the adoption of modern security processes and tooling, with focus on automation and backed up by data-driven decisions. What you will do: - Secure cloud infrastructure supporting the ClickHouse products and services (AWS, GCP and Azure) - Collaborate with product and engineering teams to facilitate safe and secure use of public cloud infrastructure and resources - Develop and implement security systems (e.g. CSPM, infrastructure as code, secrets management) to secure and harden ClickHouse cloud infrastructure - Identify and respond to identified security issues, vulnerabilities, and incidents - Identify security gaps and vulnerabilities in ClickHouse assets - Develop processes, tooling and automation to scale security processes and mitigate risks to the business What you bring along: - Strong knowledge of and experience with multiple cloud service providers (AWS, GCP, Azure) - Experience securing large-scale customer-facing cloud infrastructures based on Kubernetes - Expertise in common cloud-based DevOps practices (e.g. CI/CD, infrastructure as code, secrets management) - Development and automation experience Bonus Points: - BS, MS, or PhD in Computer Science or related field - Previous contributions to open source projects - Security or cloud related certifications (AWS, GCP, Azure) #LI-JL1 PERKS - Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 25 countries. - Healthcare - Employer contributions towards your healthcare. - Equity in the company - Every new team member who joins our company receives stock options. - Time off - Flexible time off in the US, generous entitlement in other countries. - A USD$500 Home office setup if you’re a remote employee. - Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites. CULTURE - WE ALL SHAPE IT As part of a rapidly scaling start-up, you will be instrumental in shaping our culture. Are you interested in finding out more about our culture? Learn more about our values here https://clickhouse.com/company/careers. Check out our blog posts https://clickhouse.com/blog or follow us on LinkedIn https://www.linkedin.com/company/clickhouseinc/life/0c1ee7f4-2129-488d-b413-e7f6270659fd/?viewAsMember=true to find out more about what’s happening at ClickHouse. EQUAL OPPORTUNITY & PRIVACY ClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Please see here https://clickhouse.com/legal/applicant-privacy-notice for our Privacy Statement.

Location: Berlin, Germany Workplace: hybrid At TechBiz Global, we are providing recruitment service to our TOP clients from our portfolio. We are currently seeking a Founding Product Manager to join one of our clients ' team. If you're looking for an exciting opportunity to grow in a innovative environment, this could be the perfect fit for you. Berlin • Cybersecurity & AI Startup • Recently Funded A newly funded cybersecurity startup in Berlin is looking for a Founding Product Manager to join as a founding team member and help design the core security, identity, and enforcement foundations of a next-generation AI-powered security risk management platform. It’s an early-stage startup founded by experienced cybersecurity leaders with backgrounds in Israeli Intelligence units. We are looking for a hands-on Founding Product Manager for a hybrid role based in central of Berlin. If you are passionate about cybersecurity and AI tech, thrive in fast-paced startup environments, and enjoy building complex platforms from the ground up, this is an opportunity to make a real impact. They’re building a next-generation cyber risk platform that helps enterprises understand, measure, and reduce identity risk at scale. Our goal is to turn complex identity and security data into clear, actionable risk insights that CISOs and CTOs can trust. You will work from scratch on core platform components from day one, shaping how modern enterprises manage and reason about risk using cloud-native systems and AI-driven analysis and automated enforcement through AI Agents. Key Responsibilities: Define and build product for new cyber security product from scratch Design end-to-end user journeys across the entire platform, from onboarding to daily usage and advanced workflows Define platform information architecture, navigation, and core UX principles Own wireframes, user flows , and interaction logic (from low-fidelity to production-ready concepts) Prepare tickets and own backlog Translate user needs, risk scenarios, and business goals into intuitive UI/UX decisions Contribute the product vision and translate it into a clear, actionable roadmap Ensure complex security and risk concepts are expressed in simple, usable interfaces Drive product discovery , validation, and prioritization from day zero Work closely with engineering, security, and data teams to ship the right product fast Define MVP scope, iterate based on real customer feedback, and avoid over-engineering Balance security, usability, and scalability in a complex cyber risk platform Represent the product internally and externally with customers, partners, and investors Build whole platform from scratch Must have skills: 10+ years of hands-on experience designing complex B2B SaaS web platforms for technical products Proven ability to scatch end-to-end user journeys using Figma (flows, wireframes, interactive prototypes) Strong experience with design systems and component-based UX (Figma libraries, tokens, variants) Ability to write clear PRDs, user stories, and acceptance criteria in Notion, Confluence, or similar Experience working closely with engineering teams using Jira, Linear, or GitHub Projects Solid understanding of REST APIs of SaaS integrations and backend-driven UIs (can read OpenAPI / Swagger specs) Experience defining data-heavy dashboards (tables, filters, charts, drill-downs) Strong grasp of UX for complex domains (security, risk, finance, compliance, or enterprise admin tools) Familiarity with event tracking and product analytics Experience in using TOP product AI tools Ability to run user interviews and usability testing and translate findings into product decisions Strong understanding Ability to build things from scratch at early stage startup High ownership mentality, startup mindset, and ability to move quickly. Experience in startup or scale-up environments Low ego, high commitment, and a true tech startup mentality . Strong problem-solving skills and ability to work in a collaborative environment. Excellent English communication skills Nice-to-have requirements: Experience with cybersecurity, IAM, GRC, or risk management platforms Understanding of RBAC / ABAC , permissions modeling, and role-based UX Experience working with AI-powered features (recommendations, scoring, summaries, user flow generators) Familiarity with data visualization libraries Exposure to frontend frameworks such as React, Next.js , or Vue (no coding required) Experience collaborating with teams using Go, Java, or Python backends Understanding of enterprise buying personas (CISO, CTO, Security, Risk teams) Experience designing multi-tenant SaaS platforms Familiarity with compliance frameworks (NIS2, DORA, ISO 27001, SOC 2) Experience in security or risk management products Experience designing permission models, identity graphs, or access control frameworks . Exposure to graph-based modeling (identity graph, access graph, risk graph) Familiarity with AI agents implementations Previous experience in cybersecurity , identity startups. You are a fan of rock or metal music. Excellent German communication skills Benefits: Founding Team Member Equity — ESOPs in a cybersecurity company Competitive Compensation — salary aligned with market, flexible early-stage arrangements possible Founding Team Member Status — shape the company from day one and own critical product decisions Fresh Funding Secured — immediate runway to build, hire, and execute fast Security Contribution — contribute to security product across identity, AI agents, and enforcement High Autonomy — freedom to design and build without corporate overhead Work with a Technical CEO and CPTO — fast iteration, strong alignment, clear direction Cutting-Edge Domain — identity security, SaaS-to-SaaS access, AI agent governance Massive Learning Curve — quickly gain depth in cybersecurity, identity, and AI systems Fast Career Path — opportunity evolve into leadership as we scale the product team Berlin Location — top-tier tech environment with strong cybersecurity and AI ecosystems Direct Impact — your product vision become the foundation of the entire platform Best Equipment and Tools - High quality equipment and modern tools to help you do your best work from day one Team Offsites - Regular team offsites designed to build strong connections, alignment, and shared momentum

Location: New York, NY Workplace: OnSite ABOUT THE COMPANY Rain is the global stablecoin payments platform for enterprises, neobanks, platforms, developers, and AI agents. Our technology allows partners to move, store, and use stablecoins instantly and compliantly through global payment cards, rewards, on/offramps, wallets, and cross-border rails. As both a Visa and Mastercard Principal Member, Rain issues cards that work at more than 175 million merchant locations in over 220 countries and territories. Built natively for stablecoins and trusted by more than 100 organizations worldwide, Rain delivers secure, scalable infrastructure that makes money move freely and instantly around the world. You will have the opportunity to deliver massive impact at a hypergrowth company backed by some of the top investors in fintech, crypto, and SaaS. In January 2026, we closed a $250M Series C led by ICONIQ, valuing Rain at $1.95B, with Sapphire Ventures, Dragonfly, Bessemer Venture Partners, Galaxy Ventures, FirstMark, Lightspeed, Norwest, and Endeavor Catalyst also participating. If you're curious, bold, and excited to help shape a borderless financial future, we'd love to talk. OUR ETHOS We believe in an open and flat structure. You will be able to grow into the role that most aligns with your goals. Our team members at all levels have the freedom to explore ideas and to influence our company's roadmap and vision. WHAT YOU’LL DO As CISO, you will own Rain’s security governance, risk, and compliance strategy, with a particular focus on ISO certification and regulatory readiness, while partnering closely with engineering, infrastructure, legal, and operations teams. - Own and drive Rain’s information security and compliance strategy, with a primary focus on ISO 27001 (and related standards) readiness, certification, and ongoing maintenance - Serve as the executive owner for security compliance programs (e.g., ISO 27001, SOC 2, vendor risk, customer security reviews) - Design, implement, and continuously improve Rain’s security governance framework, including policies, standards, and risk management processes - Partner closely with Engineering, Infrastructure, Product, Legal, and Operations to embed compliance and security requirements into technical and business workflows - Lead and manage external audits, certifications, and assessments, acting as the primary point of contact for auditors and assessors - Translate regulatory, customer, and partner security requirements into practical, scalable controls that align with Rain’s architecture and operating model - Own the risk management lifecycle, including risk identification, assessment, prioritization, and executive reporting - Establish and track security and compliance metrics, reporting posture, progress, and risk to executive leadership and the board as needed - Oversee incident response governance, ensuring policies, playbooks, and escalation paths meet compliance and regulatory expectations WHAT WE'RE LOOKING FOR - 8–12+ years of experience in information security, GRC, or security leadership roles, with demonstrated ownership of compliance programs - Hands-on experience leading ISO 27001 certification efforts (initial certification and/or ongoing surveillance audits) - Experience operating as a security leader in a high-growth, technology-driven company, ideally in fintech, payments, or regulated environments - Strong understanding of security governance, risk management, and control frameworks (ISO 27001/27002, SOC 2, NIST, etc.) - Proven ability to partner effectively with engineering and technical teams to implement controls in cloud-native and application-driven environments - Experience managing third-party risk, customer security questionnaires, and enterprise security reviews - Ability to clearly communicate risk, tradeoffs, and priorities to executives and non-technical stakeholders NICE TO HAVE, BUT NOT MANDATORY - Experience with additional frameworks such as SOC 2 Type II, PCI DSS, ISO 22301, or regional regulatory requirements - Prior experience acting as a first or early security leader at a scaling company - Familiarity with cloud security and modern application architectures, even if not hands-on day-to-day - Experience supporting global customers or international compliance requirements - Security or compliance certifications (e.g., CISSP, CISM, ISO 27001 Lead Implementer / Auditor) - Experience presenting security posture or risk assessments to boards or executive committees THINGS THAT ENABLE A FULFILLING, HEALTHY, AND HAPPY EXPERIENCE AT RAIN: Unlimited time off 🌴 Unlimited vacation can be daunting, so we require Rainmakers to take 10 days minimum for themselves. Flexible working ☕ We support a flexible workplace – work from home, come into an office, or both. We want everyone to work in an environment where they're their most confident and productive selves. New Rainmakers receive a stipend to set up a comfortable home workspace. Easy to access benefits 🧠 For US Rainmakers, we cover 95% of your health, dental, and vision plan costs and 90% for your dependents, plus a 100% company-subsidized life insurance plan. Retirement goals💡 Plan for the future with confidence. We offer a 401(k) with a 4% company match. Equity plan 📦 Every Rainmaker gets an equity option plan so we all benefit from our success. Health and Wellness 📚 High performance begins from within. Rainmakers receive a monthly stipend to be used for eligible health and wellness spending like gym memberships/fitness classes, massages, acupuncture - whatever recharges you! In-office meals 🍜 Rainmakers working from the office enjoy lunch and dinner on us, covered with a DoorDash credit. Team summits ✨ Summits play an important role at Rain. Time together helps us build relationships and a common destiny. Expect team and company offsites, both domestic and international.

Location: Amsterdam, Netherlands; Berlin, Germany; Finland; London, United Kingdom; Prague, Czech Republic; Remote - Europe About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D. The role We’re looking for a Security Product Manager to join our team. Security Product Manager is responsible for conveying the company’s security strengths to customers, partners and the market at large. This includes participating in relevant security partnership initiatives , influencing security positioning and branding, and working closely with internal teams to ensure company’s security posture and security products is communicated effectively to all stakeholders. By combining expertise in complia nce requirements with a customer-centric approach, Security Product Manager helps position security as a competitive advantage rather than just an internal obligation. Your responsibilities will include: 1. Product Management Define the vision and roadmap for Nebius’ security products. Owning the ideation, postmortem, prioritization, backlog, and customer feedback processes. Guiding new features, systems and services from inception to launch, while keeping customers at the center of everything. 2. Customer-facing communications Lead public-facing communications around security updates or changes in compliance status. In the event of a security incident, coordinate user messaging (email notifications, press releases, FAQs) with support from the Head of Security Products and CISO. Gather user feedback on user experience and security to guide continuous improvements. 3. Competitive analysis and market research Conduct ongoing research on industry benchmarks, emerging security standards and technologies, and competitor certifications. Identify gaps and opportunities in organization’s product security posture; propose strategic initiatives that differentiate the company’s security story in the market. Stay informed about new regulations or frameworks that may influence future product certifications or transparency requirements (e.g., privacy laws, data sovereignty standards). 4. Certification and audit support, service ownership Collaborate with the CISO office to gather technical evidence or make necessary product enhancements that satisfy certification requirements. Take ownership of some security-related services of Cloud platform. Track and maintain a certification roadmap (ISO 27001, SOC 2, HIPPA, etc.), working closely with CISO, GRC & Compliance, Corporate Security departments. Communicate timelines, goals and status updates to leadership and sales representatives. 5. Cross-functional collaboration Coordinate with multiple Product Managers to align security goals with other product roadmaps, ensuring a consistent narrative between product security and external messaging. Work with Platform Security, GRC & Corporate Security and legal teams to gather essential information for security products enhancements (e.g., penetration test summaries, compliance reports). Work with Customer-facing teams to address client inquiries about security posture and guide them on using security features optimally. We expect you to have: 3+ years of Product Management or Program Management experience with a focus on security initiatives. Basic knowledge of compliance frameworks (e.g., SOC 2, ISO 27001, GDPR) and familiarity with how they translate into business value. Proven ability to communicate technical concepts in a clear, customer-friendly manner (e.g., writing content, speaking at webinars or conferences). Stakeholder management skills to align with other Product Managers, CISO staff, engineering, marketing, and customer-facing teams. Analytical mindset: comfortable defining success metrics (e.g., security feature adoption, NPS around trust, certification progress) and making data-driven decisions. Project management skills: demonstrated ability to manage inter-team collaboration within company-wide projects, ensuring timely delivery of cross-functional tasks and alignment with compliance goals. It will be an added bonus if you have: Certifications such as CISSP, CISM, or PMP; prior experience in regulated industries; prior experience working for Cloud Service Provider. About Nebius Nebius AI is an AI cloud platform with one of the largest GPU capacities in Europe. Launched in November 2023, the Nebius AI platform provides high-end, training-optimized infrastructure for AI practitioners. As an NVIDIA preferred cloud service provider, Nebius AI offers a variety of NVIDIA GPUs for training and inference, as well as a set of tools for efficient multi-node training. Nebius AI owns a data center in Finland, built from the ground up by the company’s R&D team and showcasing our commitment to sustainability. The data center is home to ISEG, the most powerful commercially available supercomputer in Europe and the 16th most powerful globally (Top 500 list, November 2023). Nebius’s headquarters are in Amsterdam, Netherlands, with teams working out of R&D hubs across Europe and the Middle East. Nebius AI is built with the talent of more than 500 highly skilled engineers with a proven track record in developing sophisticated cloud and ML solutions and designing cutting-edge hardware. This allows all the layers of the Nebius AI cloud – from hardware to UI – to be built in-house, distictly differentiating Nebius AI from the majority of specialized clouds: Nebius customers get a true hyperscaler-cloud experience tailored for AI practitioners. We’re growing and expanding our products every day. If you’re up to the challenge and are excited about AI and ML as much as we are, join us! Benefits & Perks: Competitive compensation Career growth and learning opportunities Flexibility and ownership Collaborative and innovative culture Opportunity to work on impactful AI projects International environment and talented teams What's it like to work at Nebius: Fast moving - Bold thinking - Constant growth - Meaningful impact - Trust and real ownership - Opportunity to shape the future of AI Equal Opportunity Statement: Nebius is an equal opportunity employer. We are committed to fostering an inclusive and diverse workplace and to providing equal employment opportunities in all aspects of employment. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, ancestry, age, disability, genetic information, marital status, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable law. Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire. If you need accommodations during the application process, please let us know.

Location: Limassol; Nicosia; Athens; Thessaloniki Workplace: hybrid The role:    Join our dynamic Information Security GRC team to play a crucial role in strengthening our business operations. As a key member, you'll enforce our Information Security Framework, conduct internal risk assessments, and collaborate your line manager to define assessment scopes. Your responsibilities will include: review internal systems, processes, and procedures, record risks, and prepare insightful reports. Additionally, you'll contribute to Information Security projects, ensuring state-of-the-art solutions in line with regulatory requirements and best practices. This is an opportunity to make a significant impact in a forward-thinking environment, safeguarding our business while driving innovation in Information Security. Join us for a fulfilling journey! The main responsibilities of the position include: Plan and execute technical and targeted risk assessments in IT infrastructure, applications, technologies, and third parties Assess internal controls, processes, and policies related to Information Technology and Security, identify deficiencies, and develop remediation strategies Perform risk analysis on current risks and identify potential risks at operational, tactical, and strategic level Perform risk evaluation on previously handled risks and compare mitigation approaches to potential risks Maintain the risk register and the Information Security Risk Management Program Identify information security risks and make recommendations that are appropriate, practical, and cost-effective Manage and monitor the progress of remediation steps on risk assessment findings Prepare comprehensive reports summarising the actions taken for to remediate identified risks Provide regular reports and metrics on the security posture of the company Act as the escalation point of the information security department for any information security related risks Main requirements: BSc/MSc in Information Security or any other relevant degree At least 3 years of work experience in information security risk management and information security risk assessment Technical knowledge of operations, physical, network, host and application security, as well as security architecture, virtualisation, and cloud infrastructures Good understanding of security regulations and frameworks, such as ISO 27005, ISO 27001, NIST CSF and 800-53, DORA, GDPR, etc Risk-related certifications, such as CRISC, CGRC, and CISSP, are a plus Ability to work autonomously with minimum supervision and to integrate well within a team Ability to articulate security risks and communicate effectively to various levels of management Self-motivated, proactive, and efficient Ability to work under pressure in a fast paced environment Strong interpersonal, organisational, and project management skills Excellent communication skills with the ability to explain technical concepts to a non-technical audience. Excellent written and verbal skills in English Benefit from: Attractive remuneration package Private health insurance Corporate pension fund Intellectually stimulating work environment Continuous personal development and international training opportunities The Hiring Experience: What Awaits You Let’s Connect – Intro Chat with Talent Acquisition Deep Dive – First Interview with Your Future Team Final Connection – Final Interview All applications will be treated with strict confidentiality!   By submitting this application, I confirm that I have read and agree to the terms of the Privacy and Data Protection Notice and the Confidentiality Undertaking.