Conduct ongoing risk reviews and maintain an up-to-date risk register.
Support risk assessments across business processes and track mitigation plans.
Ensure regulatory compliance, build risk metrics, and support audit readiness.
Radicle Health builds human services software products that foster collaboration and help organizations serve their communities. Teams learn from each other and think holistically, with a culture of meaningful work and genuine care.
Own and support key GRC programme components, including ISO 27001 and SOC 2 audits.
Lead risk assessments, third-party risk oversight, and control assurance activities.
Partner with Engineering, Privacy, Legal, and People teams to embed compliance requirements.
Ping Identity is a cloud identity security company serving more than half the Fortune 100 with secure, seamless digital experiences. Headquartered in Denver with global offices, it fosters a flexible, collaborative culture that champions every individual identity.
Lead information security risk assessments and cyber risk management activities, translating technical findings into business risk.
Perform compliance monitoring and control assessments against policies, frameworks, and regulatory requirements.
Support audits, third-party security assessments, policy governance, and security awareness initiatives.
DriveTime Family of Brands is the largest privately owned used car sales, finance, and servicing company in the U.S., headquartered in Tempe, AZ and Dallas, TX. We're Great Place to Work certified with a culture that values growth, camaraderie, and innovation.
Maintain control frameworks and map controls to SOC 2, ISO 27001, and NIST standards.
Support internal and external audits, evidence collection, and third-party vendor risk reviews.
Build security policy updates, risk register management, and automation for evidence collection.
Gainsight is the AI-powered retention engine behind the world's most customer-centric companies, with a CustomerOS platform that orchestrates the customer journey. Trusted by more than 2,000 companies, Gainsight fosters a Human-First culture centered on collaboration, curiosity, and solving real-world problems.
Take ownership of core GRC activities, including ISO-certified management systems and internal audits.
Coordinate external certification audits and ensure compliance evidence is maintained.
Provide practical advice and collaborate with stakeholders to manage risk across the business.
TwinStream is a technical consultancy delivering high-quality services to clients, bringing together expertise from government and engineering backgrounds. The company has grown to over 100 team members across the UK, with a flexible culture supporting on-site, hybrid, and remote work.
Own end-to-end delivery of GRC engagements across ISO 27001, SOC 2, and GDPR.
Manage multiple concurrent client engagements with high autonomy and consistent quality.
Develop reusable GRC methodologies and AI-assisted compliance workflows.
A GRC consulting firm delivering Governance, Risk, and Compliance programs across ISO 27001, SOC 2, and GDPR for international clients. Operates with a remote, collaborative culture emphasizing trust, transparency, and high-autonomy delivery.
Drive end-to-end audit cycles for SOC 2 Type II and ISO 27001/27701/42001, including evidence collection, control testing, auditor liaison, and remediation tracking.
Support FedRAMP program efforts, vendor risk assessments, and customer security assurance.
Automate compliance processes using Tines and operate continuous control monitoring.
Tines is the intelligent workflow company that powers important workflows by integrating with any API-enabled service for IT and security teams. The company values Simplicity, Speed, and Soundness, fostering a culture of curiosity, growth, and integrity.
Own SOC 2 end to end, run auditor relationships, and keep the program audit-ready year round.
Run risk management, policy, BC/DR, and vendor/subprocessor programs with automated evidence.
Lead security questionnaires and TPRM reviews to close deals and scale compliance across frameworks.
Aegis AI is a security company founded by ex-Google engineers who built Safe Browsing and reCAPTCHA, now stopping adversarial AI attacks. The team is flat, flexible, and fast, with clear KPIs and a focus on owning decisions while moving at real-world speed.
Collect evidence for SOC 2 Type 2 and HITRUST, including internal audit testing of controls.
Update security and privacy policies, manage versions, and track acknowledgements.
Run third-party vendor risk assessments and support the privacy and data program.
Ceresti is a tech-enabled dementia care provider that supports family caregivers and improves outcomes for people living with dementia, delivering cost savings to health plans and ACOs. Our culture is rooted in agility, innovation, and collaboration, where every idea can spark meaningful improvement.
Own customer security reviews and compliance programs, driving fast and accurate responses.
Ensure practical risk decisions and reliable security answers through automation and AI.
Scale the function by building processes and self-service resources."
The company is a technology company that builds quickly and focuses on security and compliance. It is a remote-first small team with a culture of autonomy and growth.
Lead the global risk management process, including risk assessments, treatment plans, and policy exceptions.
Own risk reporting for key areas and collaborate across GRC, security, and business teams.
Build automations and shape tooling to keep the risk register accurate and proactive.
DoorDash is a technology and logistics company that connects local businesses with consumers through on-demand delivery. The company is growing rapidly and emphasizes a culture of empathy, diversity, and employee well-being.
Lead SOC 2, TISAX, and DORA audit remediation initiatives to ensure findings are resolved within deadlines.
Manage enterprise risk assessments, control frameworks, and governance metrics including KRIs and dashboards.
Coordinate with business units, executives, and external auditors to strengthen compliance and drive proactive risk management.
The company is a B2B SaaS organization that prioritizes security, governance, and compliance across enterprise frameworks. It operates in a remote-first environment with a collaborative culture focused on innovation, accountability, and data-driven decision-making.
Manage information security risk assessments and evaluate security issues and controls.
Direct security tasks in business initiatives, including third-party vendor and GRC programs.
Support regulatory compliance (GLBA, PCI, SOX) and supervise a security team.
Pathward is a financial empowerment company that works with innovators to increase financial availability, choice, and opportunity for all. The company fosters an inclusive culture of problem solvers and innovators, embracing a HUMBLE*HUNGRY*SMART approach.
Lead external compliance exams (SOC 2, ISO 27001) end-to-end, including evidence, auditor negotiation, and readiness.
Own customer security diligence, questionnaires, audits, and trust-center content while setting response standards.
Manage third-party risk operations and the agent platform for automated customer and vendor assessments.
Chainguard provides hardened, secure, and production-ready builds of open source software, helping organizations build faster, stay compliant, and eliminate risk. It is a venture-backed company serving Fortune 500 enterprises and global industry leaders like OpenAI and Snowflake.
Own GRC workstreams from initial request through evidence collection, testing, remediation, and completion.
Test security controls and conduct risk assessments to identify meaningful gaps and drive realistic remediation plans.
Translate compliance requirements into clear actions, support audits, vendor reviews, and customer questionnaires.
YipitData is a market research and analytics firm that analyzes billions of alternative data points to provide actionable insights across software, AI, cloud, e-commerce, ridesharing, and payments. The company recently raised $475M from The Carlyle Group, operates globally with offices in the US, APAC, and India, and has an award-winning, people-centric culture recognized by Inc. as a Best Workplace for three consecutive years.
Lead and mentor a growing GRC team, establishing priorities and developing compliance functions.
Oversee SOC 1, SOC 2, and HITRUST CSF compliance programs, audits, and control libraries.
Manage AI governance, privacy, third-party risk, and customer security assurance initiatives.
This partner company operates in healthcare technology, focusing on data protection and compliance. It is a high-growth remote-first organization with a small but growing GRC team, emphasizing practical controls and embedded security.
Own customer security reviews, compliance programs (SOC 2, ISO 27001), and audits with AI-assisted workflows.
Evaluate security requirements, vendor risks, and compliance gaps, and drive remediation to completion.
Build scalable processes, automation, and self-service resources to reduce repetitive GRC work.
A fast-moving technology company building scalable GRC and security processes in a remote-first environment. The organization values autonomy, ownership, and AI-powered efficiency, with a lean team and high-impact roles.
The company is hiring a Senior GRC and Compliance Manager to lead enterprise security compliance and governance programs through a partner platform. It provides a remote, team-oriented work environment with opportunities for professional growth and a comprehensive benefits package.
Partner with business leaders to translate priorities into practical security and risk decisions.
Lead project security assessments, rapid risk reviews, and remediation planning for new products and enterprise changes.
Communicate threats, incidents, and policy changes to leadership using a threat-informed, business-aligned approach.
Experian is a global data and technology company, powering opportunities for people and businesses around the world. We have an amazing team of 25,200 people in 32 countries and invest in new advanced technologies to unlock the power of data.
Lead end-to-end Cyber Governance & Controls operations, including policy lifecycle and risk acceptance governance.
Partner with Cybersecurity, Legal, Privacy, Audit, and Procurement on ownership and decision rights.
Drive governance metrics, dashboards, and GRC tooling automation.
NBCUniversal is one of the world's leading media and entertainment companies, creating and distributing content across film, television, streaming, and theme parks. We are a large, inclusive subsidiary of Comcast, committed to community impact and diversity.