Own SOC 2 end to end, run auditor relationships, and keep the program audit-ready year round.
Run risk management, policy, BC/DR, and vendor/subprocessor programs with automated evidence.
Lead security questionnaires and TPRM reviews to close deals and scale compliance across frameworks.
Aegis AI is a security company founded by ex-Google engineers who built Safe Browsing and reCAPTCHA, now stopping adversarial AI attacks. The team is flat, flexible, and fast, with clear KPIs and a focus on owning decisions while moving at real-world speed.
Drive end-to-end audit cycles for SOC 2 Type II and ISO 27001/27701/42001, including evidence collection, control testing, auditor liaison, and remediation tracking.
Support FedRAMP program efforts, vendor risk assessments, and customer security assurance.
Automate compliance processes using Tines and operate continuous control monitoring.
Tines is the intelligent workflow company that powers important workflows by integrating with any API-enabled service for IT and security teams. The company values Simplicity, Speed, and Soundness, fostering a culture of curiosity, growth, and integrity.
The company is hiring a Senior GRC and Compliance Manager to lead enterprise security compliance and governance programs through a partner platform. It provides a remote, team-oriented work environment with opportunities for professional growth and a comprehensive benefits package.
Take ownership of core GRC activities, including ISO-certified management systems and internal audits.
Coordinate external certification audits and ensure compliance evidence is maintained.
Provide practical advice and collaborate with stakeholders to manage risk across the business.
TwinStream is a technical consultancy delivering high-quality services to clients, bringing together expertise from government and engineering backgrounds. The company has grown to over 100 team members across the UK, with a flexible culture supporting on-site, hybrid, and remote work.
Collect evidence for SOC 2 Type 2 and HITRUST, including internal audit testing of controls.
Update security and privacy policies, manage versions, and track acknowledgements.
Run third-party vendor risk assessments and support the privacy and data program.
Ceresti is a tech-enabled dementia care provider that supports family caregivers and improves outcomes for people living with dementia, delivering cost savings to health plans and ACOs. Our culture is rooted in agility, innovation, and collaboration, where every idea can spark meaningful improvement.
Support day-to-day execution of IT risk, compliance, privacy, and governance programs.
Review client agreements and security questionnaires, coordinating redlines with legal.
Manage control evidence, vendor risk, data retention, and compliance policies.
Our partner provides IT risk, compliance, privacy, and governance services for clients. They have a small, collaborative team and value diverse perspectives and authentic contributions.
Own Abnormal's governance committees, including AI, Data, and Security Governance.
Manage the enterprise policy program end-to-end, from drafting to stakeholder acknowledgment.
Oversee risk management operations, including risk assessments, exceptions, and audits.
Abnormal AI protects the humans behind the world's most critical organizations from AI-powered cybercrime. Over 5,000 enterprises trust our behavioral AI platform, and we offer a collaborative, fast-paced security culture.
Own customer security reviews and compliance programs, driving fast and accurate responses.
Ensure practical risk decisions and reliable security answers through automation and AI.
Scale the function by building processes and self-service resources."
The company is a technology company that builds quickly and focuses on security and compliance. It is a remote-first small team with a culture of autonomy and growth.
Perform activities to measure and monitor compliance with company policies and procedures.
Facilitate certifier requests and information gathering for external and internal audits.
Lead onsite and remote audits, both certification and customer audits, to ensure compliance.
ServiceNow provides the AI control tower for business reinvention, bringing together AI, data, and workflows to help 85% of the Fortune 500 work smarter, faster, and better. The company fosters an AI-native culture where technology and talent are unstoppable together, with a large global employee base.
Lead information security risk assessments and cyber risk management activities, translating technical findings into business risk.
Perform compliance monitoring and control assessments against policies, frameworks, and regulatory requirements.
Support audits, third-party security assessments, policy governance, and security awareness initiatives.
DriveTime Family of Brands is the largest privately owned used car sales, finance, and servicing company in the U.S., headquartered in Tempe, AZ and Dallas, TX. We're Great Place to Work certified with a culture that values growth, camaraderie, and innovation.
Own end-to-end delivery of GRC engagements across ISO 27001, SOC 2, and GDPR.
Manage multiple concurrent client engagements with high autonomy and consistent quality.
Develop reusable GRC methodologies and AI-assisted compliance workflows.
A GRC consulting firm delivering Governance, Risk, and Compliance programs across ISO 27001, SOC 2, and GDPR for international clients. Operates with a remote, collaborative culture emphasizing trust, transparency, and high-autonomy delivery.
Own and mature internal and Managed GRC programs, including federal SSPs, POA&Ms, audits, and risk assessments.
Collaborate with CISOs, engineers, and control owners to translate compliance requirements into practical technical controls.
Lead and develop a GRC team while introducing automation and AI to improve scalability and consistency.
The company provides managed Governance, Risk & Compliance (GRC) and security assurance services, with a strong focus on federal security programs and frameworks like NIST, SOC 2, and CMMC. It supports a growing GRC team and emphasizes low-ego collaboration, automation, and AI-enabled approaches to scale delivery.
Lead and mentor a growing GRC team, establishing priorities and developing compliance functions.
Oversee SOC 1, SOC 2, and HITRUST CSF compliance programs, audits, and control libraries.
Manage AI governance, privacy, third-party risk, and customer security assurance initiatives.
This partner company operates in healthcare technology, focusing on data protection and compliance. It is a high-growth remote-first organization with a small but growing GRC team, emphasizing practical controls and embedded security.
Own GRC workstreams from initial request through evidence collection, testing, remediation, and completion.
Test security controls and conduct risk assessments to identify meaningful gaps and drive realistic remediation plans.
Translate compliance requirements into clear actions, support audits, vendor reviews, and customer questionnaires.
YipitData is a market research and analytics firm that analyzes billions of alternative data points to provide actionable insights across software, AI, cloud, e-commerce, ridesharing, and payments. The company recently raised $475M from The Carlyle Group, operates globally with offices in the US, APAC, and India, and has an award-winning, people-centric culture recognized by Inc. as a Best Workplace for three consecutive years.
Own customer security reviews, compliance programs (SOC 2, ISO 27001), and audits with AI-assisted workflows.
Evaluate security requirements, vendor risks, and compliance gaps, and drive remediation to completion.
Build scalable processes, automation, and self-service resources to reduce repetitive GRC work.
A fast-moving technology company building scalable GRC and security processes in a remote-first environment. The organization values autonomy, ownership, and AI-powered efficiency, with a lean team and high-impact roles.
Own global certification programs like ISO 27001 and SOC 2, and advise engineering teams on secure development.
Collaborate directly with engineers to audit cloud infrastructure, CI/CD pipelines, and AI-driven security controls.
Assess risks of emerging technologies and drive continuous compliance improvements across the organization.
Picus Security is an exposure validation company that proves what attackers can exploit and what defenses stop, turning exposures into defensible decisions. As a fast-growing global remote team, it values continuous security validation and has a 95% recommendation rate.
Lead and mature the organization's governance, risk management, compliance, and audit programs.
Own cybersecurity compliance initiatives including CMMC Level 2, SOC audits, and SOX IT General Controls.
Partner with business, technology, and executive stakeholders to align security controls with regulatory and business requirements.
Loenbro is a trusted construction lifecycle partner serving thousands of customers across the U.S. with services including electrical, mechanical, structural, inspection, and fabrication. The company has a national presence with a local approach and fosters a culture of integrity, teamwork, and purpose.
Lead the implementation and certification of Accela's ISO/IEC 27001:2022 program.
Manage risk assessments, controls, audits, and compliance documentation across cross-functional teams.
Drive compliance automation and evidence management using platforms like Drata.
Accela provides a cloud-based government software platform that helps agencies improve efficiency and transparency. For nearly 20 years, it has been an industry leader serving communities of all sizes, with a culture committed to diversity, equity, and inclusion.
Lead the global risk management process, including risk assessments, treatment plans, and policy exceptions.
Own risk reporting for key areas and collaborate across GRC, security, and business teams.
Build automations and shape tooling to keep the risk register accurate and proactive.
DoorDash is a technology and logistics company that connects local businesses with consumers through on-demand delivery. The company is growing rapidly and emphasizes a culture of empathy, diversity, and employee well-being.
Maintain and enhance Anovia's ISO/IEC 27001 ISMS, including policies, controls, risks, and audit coordination.
Support SOC 2, HIPAA, and other compliance programs, including vendor assessments, vulnerability management, and incident response.
Lead ambiguous technical and operational initiatives from planning through implementation, coordinating stakeholders and driving completion.
Anovia is an industry-leading technology outsourcing support provider specializing in workflow and knowledge processes, technical support, helpdesk, and multilingual services. With over 200 experts globally, we serve Fortune 500 companies and value growth, learning, and work-life balance.