Own Garner's annual information security risk assessment and risk register, driving risk identification, scoring, treatment, and reporting.
Run third-party and vendor risk reviews, manage security findings to resolution, and enforce SLAs with Engineering.
Manage compliance policies, training, and reporting to leadership while scaling GRC with AI and automation.
Garner partners with employers to transform U.S. healthcare by using clinical data and incentives to steer members to higher-quality, lower-cost care. The company has raised a Series E, served over 2.5 million people, and is known for a mission-driven, high-performing culture.
Lead information security risk assessments and cyber risk management activities, translating technical findings into business risk.
Perform compliance monitoring and control assessments against policies, frameworks, and regulatory requirements.
Support audits, third-party security assessments, policy governance, and security awareness initiatives.
DriveTime Family of Brands is the largest privately owned used car sales, finance, and servicing company in the U.S., headquartered in Tempe, AZ and Dallas, TX. We're Great Place to Work certified with a culture that values growth, camaraderie, and innovation.
Manage information security risk assessments and evaluate security issues and controls.
Direct security tasks in business initiatives, including third-party vendor and GRC programs.
Support regulatory compliance (GLBA, PCI, SOX) and supervise a security team.
Pathward is a financial empowerment company that works with innovators to increase financial availability, choice, and opportunity for all. The company fosters an inclusive culture of problem solvers and innovators, embracing a HUMBLE*HUNGRY*SMART approach.
Conduct ongoing risk reviews and maintain an up-to-date risk register.
Support risk assessments across business processes and track mitigation plans.
Ensure regulatory compliance, build risk metrics, and support audit readiness.
Radicle Health builds human services software products that foster collaboration and help organizations serve their communities. Teams learn from each other and think holistically, with a culture of meaningful work and genuine care.
Lead the technology audit function, developing a risk-based IT audit plan aligned with business objectives and regulations.
Direct audits covering cybersecurity, cloud architecture, IAM, data privacy, and compliance with ISO 27001, NIST, COBIT, and SOC 2.
Mentor a high-performing IT audit team and present findings to executive leadership and the Audit Committee.
Moniepoint Inc. is Africa's all-in-one financial platform, helping 20 million businesses and individuals access payments, banking, credit, and business tools monthly. As Nigeria's largest merchant acquirer, we process over $250 billion annually and offer a fully remote work culture.
Take ownership of core GRC activities, including ISO-certified management systems and internal audits.
Coordinate external certification audits and ensure compliance evidence is maintained.
Provide practical advice and collaborate with stakeholders to manage risk across the business.
TwinStream is a technical consultancy delivering high-quality services to clients, bringing together expertise from government and engineering backgrounds. The company has grown to over 100 team members across the UK, with a flexible culture supporting on-site, hybrid, and remote work.
Lead the global risk management process, including risk assessments, treatment plans, and policy exceptions.
Own risk reporting for key areas and collaborate across GRC, security, and business teams.
Build automations and shape tooling to keep the risk register accurate and proactive.
DoorDash is a technology and logistics company that connects local businesses with consumers through on-demand delivery. The company is growing rapidly and emphasizes a culture of empathy, diversity, and employee well-being.
Lead SOC 2, TISAX, and DORA audit remediation initiatives to ensure findings are resolved within deadlines.
Manage enterprise risk assessments, control frameworks, and governance metrics including KRIs and dashboards.
Coordinate with business units, executives, and external auditors to strengthen compliance and drive proactive risk management.
The company is a B2B SaaS organization that prioritizes security, governance, and compliance across enterprise frameworks. It operates in a remote-first environment with a collaborative culture focused on innovation, accountability, and data-driven decision-making.
Partner with business leaders to translate priorities into practical security and risk decisions.
Lead project security assessments, rapid risk reviews, and remediation planning for new products and enterprise changes.
Communicate threats, incidents, and policy changes to leadership using a threat-informed, business-aligned approach.
Experian is a global data and technology company, powering opportunities for people and businesses around the world. We have an amazing team of 25,200 people in 32 countries and invest in new advanced technologies to unlock the power of data.
Lead end-to-end Cyber Governance & Controls operations, including policy lifecycle and risk acceptance governance.
Partner with Cybersecurity, Legal, Privacy, Audit, and Procurement on ownership and decision rights.
Drive governance metrics, dashboards, and GRC tooling automation.
NBCUniversal is one of the world's leading media and entertainment companies, creating and distributing content across film, television, streaming, and theme parks. We are a large, inclusive subsidiary of Comcast, committed to community impact and diversity.
Lead IT internal audit functions to provide assurance on technology-related risks, controls, and governance.
Collaborate with teams across multiple business locations to enhance risk management and operational resilience.
Drive continuous improvement and accountability in technology risk oversight and practices.
Our partner is a technology-driven organization focused on strengthening technology risk oversight and internal audit practices. It operates with a flexible, distributed environment and fosters a culture of accountability, operational resilience, and continuous improvement.
Lead Carrot's security strategy and roadmap, aligning corporate and product security with business priorities.
Own GRC, incident response, cloud and application security, and compliance certifications including SOC 2 and HITRUST.
Represent security posture to enterprise customers and partner with Engineering to embed secure practices across the platform.
Carrot is a global fertility and family care platform providing intelligent clinical guidance and comprehensive support. Trusted by more than 1,000 employers and health plans, it serves millions of members across 195 countries and is celebrated for its innovative, inclusive, and mission-driven culture.
Lead discovery and solution workshops to define requirements and recommend practical approaches to security, risk, and compliance challenges.
Configure and demonstrate RegScale workflows, manage delivery commitments, and validate configurations against agreed requirements.
Deliver customer training and coordinate production readiness, securing acceptance and completing project documentation.
RegScale is a continuous controls monitoring platform that delivers fast and efficient GRC outcomes by bridging security, risk, and compliance through controls lifecycle management. As a leader in the CCM space, they help organizations achieve process improvements like 90% faster certification times.
Lead and develop the security governance, risk, and compliance organization, including FedRAMP, SOC 2, and PCI DSS programs.
Own security risk management, third-party risk, and customer assurance, evaluating technical and contractual security requirements.
Drive program maturity and scalability, identifying emerging risks and translating them into actionable organizational plans.
SentiLink helps institutions and protects customers by accurately resolving identities and flagging fraud risk. The company is well capitalized, growing quickly, and serves 13 of the top 15 U.S. banks.
Maintain control frameworks and map controls to SOC 2, ISO 27001, and NIST standards.
Support internal and external audits, evidence collection, and third-party vendor risk reviews.
Build security policy updates, risk register management, and automation for evidence collection.
Gainsight is the AI-powered retention engine behind the world's most customer-centric companies, with a CustomerOS platform that orchestrates the customer journey. Trusted by more than 2,000 companies, Gainsight fosters a Human-First culture centered on collaboration, curiosity, and solving real-world problems.
Lead first line control testing, plan, design, and execute control testing in accordance with enterprise standards.
Manage training and outreach programs for Compliance and ERM, coordinating content and delivery across 15 internal training requirements.
Oversee enterprise responses to GSE Vendor Assessments, government surveys, and PwC financial audit requests.
U.S. Financial Technology built and operates the largest and most advanced mortgage securitization platform in the world, supporting the Uniform Mortgage-Backed Security (UMBS) of Fannie Mae and Freddie Mac. The company supports 70% of mortgage-backed securities and provides best-in-class single-family issuance, bond administration, disclosure, and tax services with a team of talented professionals.
Drive end-to-end audit cycles for SOC 2 Type II and ISO 27001/27701/42001, including evidence collection, control testing, auditor liaison, and remediation tracking.
Support FedRAMP program efforts, vendor risk assessments, and customer security assurance.
Automate compliance processes using Tines and operate continuous control monitoring.
Tines is the intelligent workflow company that powers important workflows by integrating with any API-enabled service for IT and security teams. The company values Simplicity, Speed, and Soundness, fostering a culture of curiosity, growth, and integrity.
Manage SAP GRC activities and develop expertise in governance, risk, and compliance solutions.
Troubleshoot and resolve technical issues within SAP GRC environments while collaborating with cross-functional teams.
Provide technical guidance and ensure SAP security implementations align with security protocols and compliance standards.
Jobgether is an AI-powered job matching platform that connects candidates with hiring companies through objective, fair application reviews. It partners with organizations to streamline recruitment and uses AI tools to support the hiring process.
Lead and mentor a growing GRC team, establishing priorities and developing compliance functions.
Oversee SOC 1, SOC 2, and HITRUST CSF compliance programs, audits, and control libraries.
Manage AI governance, privacy, third-party risk, and customer security assurance initiatives.
This partner company operates in healthcare technology, focusing on data protection and compliance. It is a high-growth remote-first organization with a small but growing GRC team, emphasizing practical controls and embedded security.
Own and support key GRC programme components, including ISO 27001 and SOC 2 audits.
Lead risk assessments, third-party risk oversight, and control assurance activities.
Partner with Engineering, Privacy, Legal, and People teams to embed compliance requirements.
Ping Identity is a cloud identity security company serving more than half the Fortune 100 with secure, seamless digital experiences. Headquartered in Denver with global offices, it fosters a flexible, collaborative culture that champions every individual identity.