Lead SOC 2, TISAX, and DORA audit remediation initiatives to ensure findings are resolved within deadlines.
Manage enterprise risk assessments, control frameworks, and governance metrics including KRIs and dashboards.
Coordinate with business units, executives, and external auditors to strengthen compliance and drive proactive risk management.
The company is a B2B SaaS organization that prioritizes security, governance, and compliance across enterprise frameworks. It operates in a remote-first environment with a collaborative culture focused on innovation, accountability, and data-driven decision-making.
Lead the implementation and certification of Accela's ISO/IEC 27001:2022 program.
Manage risk assessments, controls, audits, and compliance documentation across cross-functional teams.
Drive compliance automation and evidence management using platforms like Drata.
Accela provides a cloud-based government software platform that helps agencies improve efficiency and transparency. For nearly 20 years, it has been an industry leader serving communities of all sizes, with a culture committed to diversity, equity, and inclusion.
Take ownership of core GRC activities, including ISO-certified management systems and internal audits.
Coordinate external certification audits and ensure compliance evidence is maintained.
Provide practical advice and collaborate with stakeholders to manage risk across the business.
TwinStream is a technical consultancy delivering high-quality services to clients, bringing together expertise from government and engineering backgrounds. The company has grown to over 100 team members across the UK, with a flexible culture supporting on-site, hybrid, and remote work.
Lead the group-wide ISMS according to BSI IT-Grundschutz and prepare for ISO 27001 certification.
Implement NIS-2 requirements including reporting processes and corrective actions.
Manage security risks, conduct internal audits, and coordinate with external auditors.
Orcrist builds a next-generation data intelligence platform for defense, law enforcement, and enterprise, handling petabyte-scale data with sub-second queries. The company offers remote-first work across Germany with flexible hours and a focus on security.
Support the implementation and maintenance of client security compliance programs (SOC 2, ISO 27001, NIST CSF).
Manage evidence collection, policy updates, and audit readiness across multiple client engagements.
Collaborate with technical teams and stakeholders to identify risks, address control gaps, and improve security practices.
Our partner is a cybersecurity compliance firm that delivers governance, risk, and compliance programs for diverse clients, helping them establish security frameworks like SOC 2, ISO 27001, and NIST CSF. They are a fast-growing startup with a remote-first global team, emphasizing mentorship and professional development.
Maintain control frameworks and map controls to SOC 2, ISO 27001, and NIST standards.
Support internal and external audits, evidence collection, and third-party vendor risk reviews.
Build security policy updates, risk register management, and automation for evidence collection.
Gainsight is the AI-powered retention engine behind the world's most customer-centric companies, with a CustomerOS platform that orchestrates the customer journey. Trusted by more than 2,000 companies, Gainsight fosters a Human-First culture centered on collaboration, curiosity, and solving real-world problems.
Conduct ongoing risk reviews and maintain an up-to-date risk register.
Support risk assessments across business processes and track mitigation plans.
Ensure regulatory compliance, build risk metrics, and support audit readiness.
Radicle Health builds human services software products that foster collaboration and help organizations serve their communities. Teams learn from each other and think holistically, with a culture of meaningful work and genuine care.
Drive end-to-end audit cycles for SOC 2 Type II and ISO 27001/27701/42001, including evidence collection, control testing, auditor liaison, and remediation tracking.
Support FedRAMP program efforts, vendor risk assessments, and customer security assurance.
Automate compliance processes using Tines and operate continuous control monitoring.
Tines is the intelligent workflow company that powers important workflows by integrating with any API-enabled service for IT and security teams. The company values Simplicity, Speed, and Soundness, fostering a culture of curiosity, growth, and integrity.
Lead information security risk assessments and cyber risk management activities, translating technical findings into business risk.
Perform compliance monitoring and control assessments against policies, frameworks, and regulatory requirements.
Support audits, third-party security assessments, policy governance, and security awareness initiatives.
DriveTime Family of Brands is the largest privately owned used car sales, finance, and servicing company in the U.S., headquartered in Tempe, AZ and Dallas, TX. We're Great Place to Work certified with a culture that values growth, camaraderie, and innovation.
Independently plan and conduct IT and cybersecurity risk assessments across laboratories, regional infrastructure, and central IT services.
Assess technical and organizational controls including network security, IAM, endpoint security, cloud, logging, and backup resilience.
Translate technical findings into clear business risks and pragmatic recommendations, then present results to technical teams and management.
Eurofins Scientific is an international life sciences company providing analytical testing services across industries to make life and the environment safer, healthier, and more sustainable. With about 63,000 staff and over 950 laboratories in 60 countries, it operates as a decentralized, entrepreneurial network committed to diversity, equity, and inclusion.
Partner with business leaders to translate priorities into practical security and risk decisions.
Lead project security assessments, rapid risk reviews, and remediation planning for new products and enterprise changes.
Communicate threats, incidents, and policy changes to leadership using a threat-informed, business-aligned approach.
Experian is a global data and technology company, powering opportunities for people and businesses around the world. We have an amazing team of 25,200 people in 32 countries and invest in new advanced technologies to unlock the power of data.
Own and support key GRC programme components, including ISO 27001 and SOC 2 audits.
Lead risk assessments, third-party risk oversight, and control assurance activities.
Partner with Engineering, Privacy, Legal, and People teams to embed compliance requirements.
Ping Identity is a cloud identity security company serving more than half the Fortune 100 with secure, seamless digital experiences. Headquartered in Denver with global offices, it fosters a flexible, collaborative culture that champions every individual identity.
Own the full security program, from application and infrastructure security to vulnerability management and incident response.
Maintain SOC 2 and drive future certifications like ISO 27001, managing evidence collection, auditors, and control assessments.
Oversee corporate IT, identity management, data privacy, and vendor security to build customer trust and support enterprise sales.
FullEnrich provides B2B data enrichment by orchestrating 20+ premium data providers to deliver complete contact information for sales and go-to-market teams. Founded in Paris and now headquartered in San Francisco, the company serves 6,000+ customers and is a team of 50+ across the US, Europe, LATAM, and Israel, with a fast-paced, ownership-driven culture.
Deliver governance, risk, and compliance engagements aligned with frameworks like ISO 27001, SOC 2, and NIST.
Conduct gap analyses, security posture assessments, and maturity reviews to identify improvement opportunities.
Guide clients through audit preparation, certification processes, and security programme implementation.
Jobgether is an AI-powered job matching platform that lists roles on behalf of partner companies. The hiring partner for this role offers a fully remote working environment and a collaborative culture with opportunities for professional growth.
Lead end-to-end Cyber Governance & Controls operations, including policy lifecycle and risk acceptance governance.
Partner with Cybersecurity, Legal, Privacy, Audit, and Procurement on ownership and decision rights.
Drive governance metrics, dashboards, and GRC tooling automation.
NBCUniversal is one of the world's leading media and entertainment companies, creating and distributing content across film, television, streaming, and theme parks. We are a large, inclusive subsidiary of Comcast, committed to community impact and diversity.
Own Garner's annual information security risk assessment and risk register, driving risk identification, scoring, treatment, and reporting.
Run third-party and vendor risk reviews, manage security findings to resolution, and enforce SLAs with Engineering.
Manage compliance policies, training, and reporting to leadership while scaling GRC with AI and automation.
Garner partners with employers to transform U.S. healthcare by using clinical data and incentives to steer members to higher-quality, lower-cost care. The company has raised a Series E, served over 2.5 million people, and is known for a mission-driven, high-performing culture.
Lead the development and execution of information security strategies, governance, and risk management initiatives.
Coordinate incident response, third-party security assessments, and customer security requirements.
Promote security awareness and monitor performance metrics to strengthen organizational resilience.
The company operates in a dynamic technology environment where security and innovation drive business growth. It values proactive leadership, collaboration, and continuous improvement across its teams.
Own day-to-day compliance operations across SOC/PCI audits, GDPR/privacy, and BSA/AML/OFAC oversight.
Coordinate audits, evidence collection, and remediation with external auditors, control owners, and bank partners.
Develop risk-based compliance monitoring, testing, and documentation to maintain continuous audit readiness.
Zact is a fintech innovator dedicated to helping organizations simplify expense and payment management. It provides a fast-moving, hands-on environment where team members take ownership of execution.
Collaborate with stakeholders to design and operate security controls for the GRC program.
Use technology to automate compliance activities like evidence gathering and control verification.
Drive progress on GRC continuous improvement projects and support audits with internal and external stakeholders.
LaunchDarkly provides a feature management platform that enables developers to release software faster and more safely. The company values high trust, transparency, and building diverse, collaborative teams.
Lead and develop the security governance, risk, and compliance organization, including FedRAMP, SOC 2, and PCI DSS programs.
Own security risk management, third-party risk, and customer assurance, evaluating technical and contractual security requirements.
Drive program maturity and scalability, identifying emerging risks and translating them into actionable organizational plans.
SentiLink helps institutions and protects customers by accurately resolving identities and flagging fraud risk. The company is well capitalized, growing quickly, and serves 13 of the top 15 U.S. banks.