Own the end-to-end continuous control monitoring program across cloud, identity, code, and endpoint systems.
Build centralized common controls frameworks and automated evidence management using Python, APIs, and policy-as-code.
Provide technical leadership during audits and collaborate with security teams to modernize GRC through automation and AI-assisted workflows.
The company is a technology organization focused on secure and compliant cloud operations. It is a globally distributed, remote-first team that emphasizes collaboration, ownership, and professional growth.
Perform activities to measure and monitor compliance with company policies and procedures.
Facilitate certifier requests and information gathering for external and internal audits.
Lead onsite and remote audits, both certification and customer audits, to ensure compliance.
ServiceNow provides the AI control tower for business reinvention, bringing together AI, data, and workflows to help 85% of the Fortune 500 work smarter, faster, and better. The company fosters an AI-native culture where technology and talent are unstoppable together, with a large global employee base.
Actively participate in ISO 27001/27701, ISO 42001, SOC 2, and PCI DSS audits from a technical perspective.
Translate security, compliance, and privacy requirements into scalable, enforceable, and auditable technical controls.
Develop internal security tooling using Python and implement cloud security controls across AWS and GCP.
Yuno builds payment infrastructure that enables companies to participate in the global market through seamless integrations and over 1,000 payment methods. Founded by payments and tech industry experts, it empowers high-performing teams at brands like InDrive, McDonald’s, Rappi, and Viva Aerobus.
Support day-to-day execution of IT risk, compliance, privacy, and governance programs.
Review client agreements and security questionnaires, coordinating redlines with legal.
Manage control evidence, vendor risk, data retention, and compliance policies.
Our partner provides IT risk, compliance, privacy, and governance services for clients. They have a small, collaborative team and value diverse perspectives and authentic contributions.
The company is hiring a Senior GRC and Compliance Manager to lead enterprise security compliance and governance programs through a partner platform. It provides a remote, team-oriented work environment with opportunities for professional growth and a comprehensive benefits package.
Monitor and triage security alerts, coordinate incident response, and run tabletop exercises.
Maintain technical security controls including encryption, key/certificate management, and secrets rotation.
Support SOC 2 and GDPR compliance through vendor reviews, client questionnaires, and evidence collection.
Graphite is a technology-enabled growth agency that helps fast-growing companies like Masterclass, Notion, and BetterUp unlock sustainable revenue through content, SEO, and AEO. We are a fully distributed team across North America, Latin America, and Europe, obsessed with impact and delivering outcomes for clients.
Drive end-to-end audit cycles for SOC 2 Type II and ISO 27001/27701/42001, including evidence collection, control testing, auditor liaison, and remediation tracking.
Support FedRAMP program efforts, vendor risk assessments, and customer security assurance.
Automate compliance processes using Tines and operate continuous control monitoring.
Tines is the intelligent workflow company that powers important workflows by integrating with any API-enabled service for IT and security teams. The company values Simplicity, Speed, and Soundness, fostering a culture of curiosity, growth, and integrity.
Develop and maintain the information security internal audit program, aligning with FedRAMP and CMMC.
Own monthly continuous monitoring assessments and serve as a technical point of contact during audits.
Build automated evidence collection and policy-as-code checks across cloud and CI/CD systems.
Everbridge helps enterprises and government organizations prepare for, respond to and recover from critical events. This role is fully remote, and the company emphasizes collaboration, compliance, and technical excellence across its teams.
Lead external compliance exams (SOC 2, ISO 27001) end-to-end, including evidence, auditor negotiation, and readiness.
Own customer security diligence, questionnaires, audits, and trust-center content while setting response standards.
Manage third-party risk operations and the agent platform for automated customer and vendor assessments.
Chainguard provides hardened, secure, and production-ready builds of open source software, helping organizations build faster, stay compliant, and eliminate risk. It is a venture-backed company serving Fortune 500 enterprises and global industry leaders like OpenAI and Snowflake.
Own security infrastructure: implement, configure, and monitor technical controls supporting SOC 2 and ISO 27001, including Vanta, SSO, endpoint management, and security monitoring.
Manage identity and access: design and operate IAM policies, enforce least-privilege access, and keep SSO configured correctly across the stack.
Run technical incident response: own detection, triage, and technical response, maintaining runbooks that hold up under pressure.
Syllo is defining the Litigation AI category with a unified platform that autonomously manages the entire litigation lifecycle end-to-end. Founded in 2019, the company supports Fortune 500 and AmLaw 200 firms, and its team has doubled in six months with a fast-scaling, enterprise-focused culture.
Lead SOC 2, TISAX, and DORA audit remediation initiatives to ensure findings are resolved within deadlines.
Manage enterprise risk assessments, control frameworks, and governance metrics including KRIs and dashboards.
Coordinate with business units, executives, and external auditors to strengthen compliance and drive proactive risk management.
The company is a B2B SaaS organization that prioritizes security, governance, and compliance across enterprise frameworks. It operates in a remote-first environment with a collaborative culture focused on innovation, accountability, and data-driven decision-making.
Own end-to-end delivery of GRC engagements across ISO 27001, SOC 2, and GDPR.
Manage multiple concurrent client engagements with high autonomy and consistent quality.
Develop reusable GRC methodologies and AI-assisted compliance workflows.
A GRC consulting firm delivering Governance, Risk, and Compliance programs across ISO 27001, SOC 2, and GDPR for international clients. Operates with a remote, collaborative culture emphasizing trust, transparency, and high-autonomy delivery.
Own the day-to-day operation and continuous improvement of ISO 27001, SOC 2, and GDPR compliance programs.
Lead the pursuit of CMMC certification, agency-specific ATOs, and NIST SP 800-171 compliance.
Serve as the organization's DPO and oversee vendor risk, audits, and security awareness training.
Mechanical Orchard specializes in safely rewriting the most critical and complex business applications to make them adaptable and resilient. The company is an experienced Agile software consultancy that values cross-functional teams, collective ownership, and continuous improvement, and is bringing joy to beleaguered IT teams.
Drive implementation and continuous improvement of ISO 27001 ISMS and SOC 2 Type II compliance.
Own risk management, internal audits, security policies, and vendor security assessments.
Collaborate with engineering and DevOps on AWS security governance, incident response, and AI/LLM risk governance.
Insider One is an AI-powered marketing and customer engagement platform that unifies data, personalization, and journey orchestration across channels. With 1,500+ employees from 50+ nationalities and offices in over 30 countries, it is a diverse, socially progressive B2B SaaS unicorn backed by major investors.
Own day-to-day compliance operations across SOC/PCI audits, GDPR/privacy, and BSA/AML/OFAC oversight.
Coordinate audits, evidence collection, and remediation with external auditors, control owners, and bank partners.
Develop risk-based compliance monitoring, testing, and documentation to maintain continuous audit readiness.
Zact is a fintech innovator dedicated to helping organizations simplify expense and payment management. It provides a fast-moving, hands-on environment where team members take ownership of execution.
Maintain control frameworks and map controls to SOC 2, ISO 27001, and NIST standards.
Support internal and external audits, evidence collection, and third-party vendor risk reviews.
Build security policy updates, risk register management, and automation for evidence collection.
Gainsight is the AI-powered retention engine behind the world's most customer-centric companies, with a CustomerOS platform that orchestrates the customer journey. Trusted by more than 2,000 companies, Gainsight fosters a Human-First culture centered on collaboration, curiosity, and solving real-world problems.
Own and mature security, privacy, and compliance programs across HIPAA, SOC 2, and HITRUST.
Lead HITRUST certification end to end, including scoping, evidence collection, and assessor coordination.
Partner with Engineering, Product, SRE, and IT to integrate security into architecture, SDLC, and cloud infrastructure.
IntusCare is an end-to-end ecosystem built specifically to help PACE programs deliver exceptional care, strengthen financial performance, and stay compliant. It is a growing healthcare SaaS organization that empowers teams to improve outcomes for dual-eligible seniors.
Lead end-to-end compliance efforts for U.S. Federal customers, including readiness assessments, audits, and continuous monitoring.
Serve as the compliance lead for federal authorization efforts, including Agency ATOs, FedRAMP initiatives, and security assessments.
Drive adoption of continuous compliance automation and cross-functional program leadership across engineering, cloud, and security teams.
Entrust is an industry leader in identity-centric security solutions, serving over 150 countries with cutting-edge, scalable technologies. The company values curiosity, dedication, and innovation, fostering a culture built on diversity, inclusion, and respect.
Take primary responsibility for overseeing PlanetScale's FedRAMP readiness and ATO process from start to finish.
Act as the main compliance point of contact for all audits/assessments, including SOC 1 & 2, PCI, and FedRAMP, from preparation through external walkthroughs.
Establish, track, and report on key performance indicators and maturity metrics for audit and compliance programs.
PlanetScale offers developers the fastest and most reliable Postgres and Vitess/MySQL databases, enabling businesses to handle data and workloads of all sizes. Backed by over $100M in venture financing and serving innovative companies like Block and Etsy, PlanetScale is a profitable, fast-growing company that builds small teams of top-tier individuals.