Maintain control frameworks and map controls to SOC 2, ISO 27001, and NIST standards.
Support internal and external audits, evidence collection, and third-party vendor risk reviews.
Build security policy updates, risk register management, and automation for evidence collection.
Gainsight is the AI-powered retention engine behind the world's most customer-centric companies, with a CustomerOS platform that orchestrates the customer journey. Trusted by more than 2,000 companies, Gainsight fosters a Human-First culture centered on collaboration, curiosity, and solving real-world problems.
Lead SOC 2, TISAX, and DORA audit remediation initiatives to ensure findings are resolved within deadlines.
Manage enterprise risk assessments, control frameworks, and governance metrics including KRIs and dashboards.
Coordinate with business units, executives, and external auditors to strengthen compliance and drive proactive risk management.
The company is a B2B SaaS organization that prioritizes security, governance, and compliance across enterprise frameworks. It operates in a remote-first environment with a collaborative culture focused on innovation, accountability, and data-driven decision-making.
The company is hiring a Senior GRC and Compliance Manager to lead enterprise security compliance and governance programs through a partner platform. It provides a remote, team-oriented work environment with opportunities for professional growth and a comprehensive benefits package.
Support the implementation and maintenance of client security compliance programs (SOC 2, ISO 27001, NIST CSF).
Manage evidence collection, policy updates, and audit readiness across multiple client engagements.
Collaborate with technical teams and stakeholders to identify risks, address control gaps, and improve security practices.
Our partner is a cybersecurity compliance firm that delivers governance, risk, and compliance programs for diverse clients, helping them establish security frameworks like SOC 2, ISO 27001, and NIST CSF. They are a fast-growing startup with a remote-first global team, emphasizing mentorship and professional development.
Own Garner's annual information security risk assessment and risk register, driving risk identification, scoring, treatment, and reporting.
Run third-party and vendor risk reviews, manage security findings to resolution, and enforce SLAs with Engineering.
Manage compliance policies, training, and reporting to leadership while scaling GRC with AI and automation.
Garner partners with employers to transform U.S. healthcare by using clinical data and incentives to steer members to higher-quality, lower-cost care. The company has raised a Series E, served over 2.5 million people, and is known for a mission-driven, high-performing culture.
Conduct ongoing risk reviews and maintain an up-to-date risk register.
Support risk assessments across business processes and track mitigation plans.
Ensure regulatory compliance, build risk metrics, and support audit readiness.
Radicle Health builds human services software products that foster collaboration and help organizations serve their communities. Teams learn from each other and think holistically, with a culture of meaningful work and genuine care.
Lead external compliance exams (SOC 2, ISO 27001) end-to-end, including evidence, auditor negotiation, and readiness.
Own customer security diligence, questionnaires, audits, and trust-center content while setting response standards.
Manage third-party risk operations and the agent platform for automated customer and vendor assessments.
Chainguard provides hardened, secure, and production-ready builds of open source software, helping organizations build faster, stay compliant, and eliminate risk. It is a venture-backed company serving Fortune 500 enterprises and global industry leaders like OpenAI and Snowflake.
Partner with business leaders to translate priorities into practical security and risk decisions.
Lead project security assessments, rapid risk reviews, and remediation planning for new products and enterprise changes.
Communicate threats, incidents, and policy changes to leadership using a threat-informed, business-aligned approach.
Experian is a global data and technology company, powering opportunities for people and businesses around the world. We have an amazing team of 25,200 people in 32 countries and invest in new advanced technologies to unlock the power of data.
Perform activities to measure and monitor compliance with company policies and procedures.
Facilitate certifier requests and information gathering for external and internal audits.
Lead onsite and remote audits, both certification and customer audits, to ensure compliance.
ServiceNow provides the AI control tower for business reinvention, bringing together AI, data, and workflows to help 85% of the Fortune 500 work smarter, faster, and better. The company fosters an AI-native culture where technology and talent are unstoppable together, with a large global employee base.
Drive end-to-end audit cycles for SOC 2 Type II and ISO 27001/27701/42001, including evidence collection, control testing, auditor liaison, and remediation tracking.
Support FedRAMP program efforts, vendor risk assessments, and customer security assurance.
Automate compliance processes using Tines and operate continuous control monitoring.
Tines is the intelligent workflow company that powers important workflows by integrating with any API-enabled service for IT and security teams. The company values Simplicity, Speed, and Soundness, fostering a culture of curiosity, growth, and integrity.
Lead and develop the Information Security GRC strategy and governance in a growing FinTech environment.
Oversee cyber risk, regulatory assurance, and third-party risk with cross-functional collaboration.
Build and manage the GRC team, driving automation and efficiency in compliance processes.
JustMarkets is an international FinTech company. They are a growing organization with a hands-on, collaborative culture focused on security and compliance.
You will conduct security control testing and evaluations across SOC 2, ISO 27001, and PCI DSS frameworks.
You will coordinate evidence collection and technical walkthroughs with Engineering, DevOps, IT, and system owners.
You will identify control gaps, assess risks, and support remediation plans in the GRC platform.
Jobgether is an AI-powered job matching platform that connects candidates with hiring companies through objective, skills-based reviews. It operates with a remote-first approach and uses technology to streamline recruitment and improve hiring outcomes.
Collaborate with stakeholders to design and operate security controls for the GRC program.
Use technology to automate compliance activities like evidence gathering and control verification.
Drive progress on GRC continuous improvement projects and support audits with internal and external stakeholders.
LaunchDarkly provides a feature management platform that enables developers to release software faster and more safely. The company values high trust, transparency, and building diverse, collaborative teams.
Lead and develop the security governance, risk, and compliance organization, including FedRAMP, SOC 2, and PCI DSS programs.
Own security risk management, third-party risk, and customer assurance, evaluating technical and contractual security requirements.
Drive program maturity and scalability, identifying emerging risks and translating them into actionable organizational plans.
SentiLink helps institutions and protects customers by accurately resolving identities and flagging fraud risk. The company is well capitalized, growing quickly, and serves 13 of the top 15 U.S. banks.
Own the full security program, from application and infrastructure security to vulnerability management and incident response.
Maintain SOC 2 and drive future certifications like ISO 27001, managing evidence collection, auditors, and control assessments.
Oversee corporate IT, identity management, data privacy, and vendor security to build customer trust and support enterprise sales.
FullEnrich provides B2B data enrichment by orchestrating 20+ premium data providers to deliver complete contact information for sales and go-to-market teams. Founded in Paris and now headquartered in San Francisco, the company serves 6,000+ customers and is a team of 50+ across the US, Europe, LATAM, and Israel, with a fast-paced, ownership-driven culture.
Take ownership of core GRC activities, including ISO-certified management systems and internal audits.
Coordinate external certification audits and ensure compliance evidence is maintained.
Provide practical advice and collaborate with stakeholders to manage risk across the business.
TwinStream is a technical consultancy delivering high-quality services to clients, bringing together expertise from government and engineering backgrounds. The company has grown to over 100 team members across the UK, with a flexible culture supporting on-site, hybrid, and remote work.
Manage information security risk assessments and evaluate security issues and controls.
Direct security tasks in business initiatives, including third-party vendor and GRC programs.
Support regulatory compliance (GLBA, PCI, SOX) and supervise a security team.
Pathward is a financial empowerment company that works with innovators to increase financial availability, choice, and opportunity for all. The company fosters an inclusive culture of problem solvers and innovators, embracing a HUMBLE*HUNGRY*SMART approach.
Own and drive the SOC 2 compliance program, including annual audits and certification.
Manage the risk register, vendor risk, BCP/DR, and policy lifecycles.
Lead customer security reviews and respond to complex security questionnaires.
Bluesight creates groundbreaking solutions that increase efficiency, safety, and visibility for health systems, hospital pharmacies, and pharmaceutical manufacturers. It is a high-growth healthcare IT company with a start-up vibe and over 3,000 customers.
Lead the implementation and certification of Accela's ISO/IEC 27001:2022 program.
Manage risk assessments, controls, audits, and compliance documentation across cross-functional teams.
Drive compliance automation and evidence management using platforms like Drata.
Accela provides a cloud-based government software platform that helps agencies improve efficiency and transparency. For nearly 20 years, it has been an industry leader serving communities of all sizes, with a culture committed to diversity, equity, and inclusion.
Act as the engineering voice of security and compliance, turning regulatory standards into practical controls you ship to production.
Own certifications, audits and attestations like ISO 27001, SWIFT and SOC 2, driving findings to closure.
Improve release, change, post-incident and operational resilience processes with automation and clear documentation.
Griffin is a fully regulated UK bank providing banking infrastructure and payments for fintechs and platforms. They are a remote-first, high-trust company with a small, cross-functional engineering culture and a mission-driven approach.