Play a critical role in the technical development, implementation, and maintenance of the GRC platform.
Drive integration strategies between GRC platforms and enterprise systems for automated data sharing and reporting.
Provide expert guidance and leadership on GRC technical matters to senior leadership and business stakeholders.
Jobgether is a platform helping candidates find jobs. They use AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements.
Responsible for leading the strategic direction, management, and oversight of the organization’s regulatory compliance program.
Manage a team of compliance professionals, ensuring that the company operates in full adherence to applicable laws, regulations, and industry standards.
Drive the development and implementation of enterprise-wide compliance frameworks, oversee risk assessments, support regulatory interactions, and champion a culture of compliance across the organization.
Truelogic is a leading provider of nearshore staff augmentation services headquartered in New York. Their team of 600+ highly skilled tech professionals, based in Latin America, drives digital disruption by partnering with U.S. companies on their most impactful projects.
Coordinate compliance with standards (PCI, HIPAA, ISO 27002, SOC 1/2/3, FISMA/FedRAMP, etc.) under guidance.
Maintain evidence repositories and partner with SMEs to refresh artifacts.
Coordinate audits and certification efforts, partnering with support teams on timelines and resourcing.
Experian is a global data and technology company, powering opportunities for people and businesses around the world. As a FTSE 100 Index company listed on the London Stock Exchange (EXPN), they have a team of 22,500 people across 32 countries.
Lead IT compliance initiatives ensuring adherence to regulations and standards.
Manage validation of cloud-based applications, including risk assessments and testing.
Develop and maintain key compliance documents such as validation protocols.
Jobgether is a company that that uses an AI-powered matching process to ensure applications are reviewed objectively and fairly. They identify the top-fitting candidates and share this shortlist directly with the hiring company.
Monitor SIEM alerts, triage incidents, and escalate as needed to ensure timely resolution
Conduct third-party and supply chain risk management reviews, including audit report analysis
Collaborate with engineering, IT, and operations teams to integrate and maintain security controls
Jobgether uses an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. It identifies top-fitting candidates and shares this shortlist with the hiring company.
Own vulnerability management, SIEM tuning and monitoring, incident response, and threat investigation.
Maintain secure baseline configurations based on industry standards.
Oversee AWS security controls and enforce cloud security guardrails.
Jobgether posts this position on behalf of a partner company. They use an AI-powered matching process to ensure applications are reviewed quickly and fairly.
Provide guidance to teams on the application of compliance requirements.
Maintain subject matter expertise on U.S. federal and state consumer protection and privacy laws and regulations.
Conduct and document assessments of compliance and privacy risks and controls for targeted processes, products and regulatory changes.
Experian is a global data and technology company, powering opportunities for people and businesses around the world. As a FTSE 100 Index company listed on the London Stock Exchange (EXPN), they have a team of 22,500 people across 32 countries.
Protecting cybersecurity cloud assets and delivering cybersecurity threat assessment, cyber intelligence, software security, and vulnerability assessment services.
Identifying and prioritizing critical business functions in collaboration with organizational stakeholders by performing security reviews, identifying gaps in security architecture, and developing security risk management plans and system security plans.
Evaluating cloud security architectures and designs to determine the adequacy of security design and architecture proposed or provided in response to requirements contained in acquisition documents.
Allied Consultants, Inc. is an Austin-based firm delivering technical and business professionals within Texas State Agencies for over 33 years. They value their consultants and are committed to providing an exceptional experience.
Drive execution of complex technical programs at the intersection of Security, Engineering, and Compliance.
Translate complex technical initiatives into clear programs that meet security and regulatory obligations.
Influence security strategy and drive alignment across Engineering, Compliance, and People Ops.
Rula is dedicated to treating the whole person and creating a world where mental health is embraced. They are a remote-first company that strives to be a force for positive change in the field of mental healthcare and hire in most U.S. states.
Own our information security strategy and build our security roadmap.
Maintain our ISO 27001 certification, preparing for SOC 2 readiness.
Operate strategically and tactically, developing policy and reviewing cloud configurations.
ApprovalMax is redefining how finance teams manage the Money Out cycle — from purchase orders and supplier bills to employee expense management and payroll. Trusted by 18,000+ businesses worldwide, our platform empowers companies to automate financial controls, ensure compliance, and scale efficiently.
Acting as the primary subject matter expert for all security and compliance inquiries.
Taking end-to-end ownership of certification lifecycles, such as ISO 27001 and Cyber Essentials.
Working closely with the GRC team to improve existing programs.
Sword Health is shifting healthcare from human-first to AI-first through its AI Care platform, making world-class healthcare available anytime, anywhere. They have over 1,000 enterprise clients and are backed by 42 clinical studies and over 44 patents.
Assist in designing and maintaining secure infrastructure in cloud and on-premises environments.
Lead incident response activities, managing the lifecycle from detection to recovery.
Support detection engineering and refine detection rules for cloud, endpoint, and network environments.
Jobgether is a platform that connects job seekers with potential employers. They use AI-powered matching to ensure applications are reviewed quickly and fairly, then share the shortlist with the hiring company.
Use security and compliance tools (GRC tools) to help the company stay audit-ready
Manage IT assets and access permissions for team members and internal systems
Support daily security operations related to ISO 27001 / SOC 2
Hopae is building the world’s most trusted digital identity platform — private, secure, and built for real life. Backed by top global investors, Hopae operates across Seoul, Paris, and San Francisco, bringing together exceptional talent from over 10 nationalities.
Drive the implementation of technical controls and evidence gathering in collaboration with engineering for compliance standards.
Manage the daily operational reality of audits, customer questionnaires, and internal IT/Security support requests.
Rapidly prototype and ship internal tools, custom Vanta integrations, and scripts using AI-assisted development to close automation gaps.
Sayari is a risk intelligence provider equipping public and private sectors with visibility into complex commercial relationships. They deliver corporate and trade data from over 250 jurisdictions and are headquartered in Washington, D.C. They were also featured as one of Inc.’s “Best Workplaces” for 2025.
Oversee security, compliance, and risk management of network infrastructure, ensuring the protection of critical assets and alignment with DoD standards.
Design and implement security measures that safeguard the network from unauthorized access, vulnerabilities, and advanced threats.
Manage the Risk Management Framework (RMF) process, ensuring systems remain secure and compliant with DoD requirements throughout their lifecycle.
TekSynap is a fast-growing high-tech company that understands both the pace of technology today and the need to have a comprehensive well-planned information management environment. They focus on nimbly utilizing the best that information technology offers to meet the business needs of Federal Government customers.
Monitor and enforce security policies for data storage and access.
Support the Authority to Operate (ATO) process and security assessments.
Coordinate with cybersecurity teams to track security incidents.
NV5 Geospatial is a global technology solutions and consulting services company. They employ over 4,500 professionals in more than 100 offices worldwide and value diversity and collaboration.
Collaborate with cross-functional teams to maintain and improve the company's comprehensive compliance program.
Manage the end-to-end audit process for SOC 2 compliance, ensuring timely and accurate completion.
Oversee the Information Security Risk Management Program, documenting identified risks, coordinating mitigation efforts.
airSlate is a global SaaS technology company that develops no-code workflow automation, electronic signature, and document management solutions. They have teammates in more than 20 countries across three continents and main hubs in the United States, Poland, Romania, Ukraine and Philippines.
Respond to customer and prospect security questions.
Maintain knowledge repository and artifacts for customer due diligence.
Improve security content with a customer-first mindset.
Webflow is building the world’s leading AI-native Digital Experience Platform as a remote-first company built on trust, transparency, and creativity. From entrepreneurs to global enterprises, they empower teams to design, launch, and optimize for the web without barriers.
Own the end-to-end process for client and prospect security questionnaires.
Collaborate with internal stakeholders, managing timelines to ensure accurate responses.
Develop and maintain a "Trust Center" to proactively address common security questions.
Included Health is a healthcare company that delivers integrated virtual care and navigation. They aim to break down barriers to provide high-quality care for every person, offering care guidance, advocacy, and access to personalized virtual and in-person care.