Own and drive Sourcegraph's governance, risk, and compliance program, including SOC 2 and ISO 27001 certifications.
Manage audits end-to-end: evidence collection, control testing, stakeholder coordination, and remediation.
Support customer-facing compliance activities and tailor controls to fit Sourcegraph's fast-moving environment.
Sourcegraph builds AI-powered code search and batch change tools for engineering teams to manage complex codebases. It is a globally distributed team backed by a16z, Sequoia, and Redpoint, valuing high agency and customer love.
The company is hiring a Senior GRC and Compliance Manager to lead enterprise security compliance and governance programs through a partner platform. It provides a remote, team-oriented work environment with opportunities for professional growth and a comprehensive benefits package.
Own and drive the US and Canada regulatory and compliance strategy.
Lead licensing, regulatory exams, and audits while partnering with business and product teams.
Oversee AML/CTF and sanctions programs, ensuring compliant innovation across GoCardless products.
GoCardless, a Mollie company, is a global leader in bank payments, helping 100,000+ businesses send and collect payments via Direct Debit and open banking. With 806 employees globally, we process $130bn+ annually and foster a humble, integrity-driven culture.
Drive end-to-end audit cycles for SOC 2 Type II and ISO 27001/27701/42001, including evidence collection, control testing, auditor liaison, and remediation tracking.
Support FedRAMP program efforts, vendor risk assessments, and customer security assurance.
Automate compliance processes using Tines and operate continuous control monitoring.
Tines is the intelligent workflow company that powers important workflows by integrating with any API-enabled service for IT and security teams. The company values Simplicity, Speed, and Soundness, fostering a culture of curiosity, growth, and integrity.
Own the compliance function as its sole occupant, reporting to the Head of Engineering and partnering with the Security Lead on policies, audits, and evidence.
Manage the Q&A library, customer security reviews, audit calendar, and third-party risk to keep Duvo reviewable for buyers and auditors.
Deliver precise, evidenced answers that stand up to hostile reviewers and keep the trust center and subprocessor list current.
Duvo builds an AI operations platform for large enterprises, enabling customers to create AI agents that automate business-critical processes across systems like SAP, spreadsheets, and supplier portals. The company is growing fast and values velocity, direct feedback, autonomy, and heavy use of AI tools.
Own the day-to-day operation and continuous improvement of ISO 27001, SOC 2, and GDPR compliance programs.
Lead the pursuit of CMMC certification, agency-specific ATOs, and NIST SP 800-171 compliance.
Serve as the organization's DPO and oversee vendor risk, audits, and security awareness training.
Mechanical Orchard specializes in safely rewriting the most critical and complex business applications to make them adaptable and resilient. The company is an experienced Agile software consultancy that values cross-functional teams, collective ownership, and continuous improvement, and is bringing joy to beleaguered IT teams.
Perform activities to measure and monitor compliance with company policies and procedures.
Facilitate certifier requests and information gathering for external and internal audits.
Lead onsite and remote audits, both certification and customer audits, to ensure compliance.
ServiceNow provides the AI control tower for business reinvention, bringing together AI, data, and workflows to help 85% of the Fortune 500 work smarter, faster, and better. The company fosters an AI-native culture where technology and talent are unstoppable together, with a large global employee base.
Own SOC 2 end to end, run auditor relationships, and keep the program audit-ready year round.
Run risk management, policy, BC/DR, and vendor/subprocessor programs with automated evidence.
Lead security questionnaires and TPRM reviews to close deals and scale compliance across frameworks.
Aegis AI is a security company founded by ex-Google engineers who built Safe Browsing and reCAPTCHA, now stopping adversarial AI attacks. The team is flat, flexible, and fast, with clear KPIs and a focus on owning decisions while moving at real-world speed.
Lead compliance programs including SOC 2, GDPR, CCPA/CPRA, and Shopify partner security requirements.
Own security policies, risk management, business continuity, and incident response.
Manage IT operations, endpoint security, and cloud security across the company.
Rebuy revolutionizes shopping with intelligent, personalized experiences for DTC brands. They are a fully remote team with a culture rooted in ownership, drive, and empathy.
Represent the practice directly with customers through calls, webinars, and conferences to drive deals.
Map compliance frameworks like GDPR, NIST, PCI, and HIPAA to Zscaler capabilities control by control.
Build reusable playbooks and educate field teams to handle compliance conversations while protecting data.
Zscaler accelerates digital transformation by securing users, devices, and applications anywhere with its Zero Trust Exchange platform. The company operates the world's largest in-line cloud security platform across 200+ data centers, fostering a culture of ownership, collaboration, and customer obsession.
Perform ongoing compliance testing and reporting on adherence to compliance program and federal/state regulatory requirements.
Collaborate cross-functionally with departments like Compliance, Legal, Risk, and Product while completing reviews.
Coordinate the execution of the compliance risk assessment and control inventory, including collecting and documenting results.
Affirm provides transparent, flexible payment solutions, allowing consumers to pay over time with no hidden fees. The company is a remote-first organization with diverse teams across legal, compliance, product, and engineering that collaborate to build trust in its ecosystem.
Serve as the primary compliance point of contact for strategic partnerships and clients.
Lead the compliance workstream for major brand migrations and become an expert on the Regulated Compliance product.
Monitor compliance processes, ensure accurate documentation, and deliver presentations on compliance matters.
impact.com is the world's leading commerce partnership marketing platform, helping brands manage partnerships with affiliates, influencers, and creators. With over 5,000 global brands relying on the platform, the company fosters a flexible, performance-driven culture.
Conduct compliance reviews, monitoring, and testing across regulatory obligations.
Review and investigate potential compliance issues, document findings, and escalate as needed.
Support vendor compliance, customer due diligence, and AI governance programs.
April is an embedded, year-round tax platform that brings real-time tax intelligence into the platforms people already use. The company's AI-powered engine and API-first infrastructure serve complex tax situations, with a culture emphasizing ownership, judgment, and professionalism.
Serve as the primary compliance partner to Sales, Partnerships, and Underwriting, providing fast, practical guidance on prospects and deals.
Lead compliance strategy for gaming and gambling verticals and shape underwriting standards for high-risk sectors like nutraceuticals, wellness, and CBD.
Translate laws, card network rules, and sponsor bank requirements into clear procedures and playbooks for business and product teams.
Finix builds the global operating system for fintech, starting with payments, processing tens of billions of dollars annually for businesses from startups to public companies. Founded in 2015 and headquartered in San Francisco, Finix has raised over $200M and is backed by major investors.
Own customer security reviews and compliance programs, driving fast and accurate responses.
Ensure practical risk decisions and reliable security answers through automation and AI.
Scale the function by building processes and self-service resources."
The company is a technology company that builds quickly and focuses on security and compliance. It is a remote-first small team with a culture of autonomy and growth.
Conduct ongoing risk reviews and maintain an up-to-date risk register.
Support risk assessments across business processes and track mitigation plans.
Ensure regulatory compliance, build risk metrics, and support audit readiness.
Radicle Health builds human services software products that foster collaboration and help organizations serve their communities. Teams learn from each other and think holistically, with a culture of meaningful work and genuine care.
Serve as SME on North American AML, BSA, KYC, KYB, sanctions, and financial crimes regulations.
Partner with Product, Engineering, and Data Science to align solutions with regulatory expectations and compliance workflows.
Produce regulatory briefings, support compliance management systems, and leverage AI to improve productivity.
Trulioo provides an identity verification platform that enables organizations to onboard customers and combat fraud, verifying over 5 billion people worldwide. Headquartered in Vancouver, it is a people-first company recognized as a BC Top Employer.
Own global certification programs like ISO 27001 and SOC 2, and advise engineering teams on secure development.
Collaborate directly with engineers to audit cloud infrastructure, CI/CD pipelines, and AI-driven security controls.
Assess risks of emerging technologies and drive continuous compliance improvements across the organization.
Picus Security is an exposure validation company that proves what attackers can exploit and what defenses stop, turning exposures into defensible decisions. As a fast-growing global remote team, it values continuous security validation and has a 95% recommendation rate.
Actively participate in ISO 27001/27701, ISO 42001, SOC 2, and PCI DSS audits from a technical perspective.
Translate security, compliance, and privacy requirements into scalable, enforceable, and auditable technical controls.
Develop internal security tooling using Python and implement cloud security controls across AWS and GCP.
Yuno builds payment infrastructure that enables companies to participate in the global market through seamless integrations and over 1,000 payment methods. Founded by payments and tech industry experts, it empowers high-performing teams at brands like InDrive, McDonald’s, Rappi, and Viva Aerobus.
Own end-to-end delivery of GRC engagements across ISO 27001, SOC 2, and GDPR.
Manage multiple concurrent client engagements with high autonomy and consistent quality.
Develop reusable GRC methodologies and AI-assisted compliance workflows.
A GRC consulting firm delivering Governance, Risk, and Compliance programs across ISO 27001, SOC 2, and GDPR for international clients. Operates with a remote, collaborative culture emphasizing trust, transparency, and high-autonomy delivery.