Own and continuously improve the organization's information security posture with measurable KPIs.
Partner with engineering, IT, legal, and compliance teams to embed secure-by-design practices and lead PCI-DSS and SOC 2 preparations.
Evaluate and implement security technologies, advise stakeholders, and lead a small team toward shared security ownership.
The company is a software-driven organization focused on strengthening its security posture. It fosters a collaborative culture with flexible working arrangements and an emphasis on measurable outcomes.
Lead the implementation and certification of Accela's ISO/IEC 27001:2022 program.
Manage risk assessments, controls, audits, and compliance documentation across cross-functional teams.
Drive compliance automation and evidence management using platforms like Drata.
Accela provides a cloud-based government software platform that helps agencies improve efficiency and transparency. For nearly 20 years, it has been an industry leader serving communities of all sizes, with a culture committed to diversity, equity, and inclusion.
Drive implementation and continuous improvement of ISO 27001 ISMS and SOC 2 Type II compliance.
Own risk management, internal audits, security policies, and vendor security assessments.
Collaborate with engineering and DevOps on AWS security governance, incident response, and AI/LLM risk governance.
Insider One is an AI-powered marketing and customer engagement platform that unifies data, personalization, and journey orchestration across channels. With 1,500+ employees from 50+ nationalities and offices in over 30 countries, it is a diverse, socially progressive B2B SaaS unicorn backed by major investors.
Deliver governance, risk, and compliance engagements aligned with frameworks like ISO 27001, SOC 2, and NIST.
Conduct gap analyses, security posture assessments, and maturity reviews to identify improvement opportunities.
Guide clients through audit preparation, certification processes, and security programme implementation.
Jobgether is an AI-powered job matching platform that lists roles on behalf of partner companies. The hiring partner for this role offers a fully remote working environment and a collaborative culture with opportunities for professional growth.
Lead OT incident response engagements for industrial customers, including investigations, threat hunts, and compromise assessments.
Serve as Incident Commander during active incidents, delivering decision-grade guidance and managing response communications.
Deliver advisory services like IR planning workshops and maturity assessments, while mentoring teammates and improving methodologies.
Dragos is a global leader in OT cybersecurity, protecting critical infrastructure through technology, threat intelligence, and expert services. The company is a remote-first, mission-driven team across North America, Europe, the Middle East, and APAC.
Lead the development and execution of information security strategies, governance, and risk management initiatives.
Coordinate incident response, third-party security assessments, and customer security requirements.
Promote security awareness and monitor performance metrics to strengthen organizational resilience.
The company operates in a dynamic technology environment where security and innovation drive business growth. It values proactive leadership, collaboration, and continuous improvement across its teams.
Partner with business leaders to translate priorities into practical security and risk decisions.
Lead project security assessments, rapid risk reviews, and remediation planning for new products and enterprise changes.
Communicate threats, incidents, and policy changes to leadership using a threat-informed, business-aligned approach.
Experian is a global data and technology company, powering opportunities for people and businesses around the world. We have an amazing team of 25,200 people in 32 countries and invest in new advanced technologies to unlock the power of data.
Lead the development and execution of ATPCO's information security vision and strategy.
Oversee high-impact security projects, ensuring alignment with operational needs and long-term business goals.
Manage security operations, compliance, metrics, budgeting, and a security-first culture across the organization.
ATPCO is the world's primary source for air fare content, holding over 200 million fares across 160 countries. The company has a remote-first culture rooted in trust, transparency, and belonging, with a focus on flexibility, collaboration, and employee wellbeing.
Own the full security program, from application and infrastructure security to vulnerability management and incident response.
Maintain SOC 2 and drive future certifications like ISO 27001, managing evidence collection, auditors, and control assessments.
Oversee corporate IT, identity management, data privacy, and vendor security to build customer trust and support enterprise sales.
FullEnrich provides B2B data enrichment by orchestrating 20+ premium data providers to deliver complete contact information for sales and go-to-market teams. Founded in Paris and now headquartered in San Francisco, the company serves 6,000+ customers and is a team of 50+ across the US, Europe, LATAM, and Israel, with a fast-paced, ownership-driven culture.
Develop and implement enterprise security strategy, governance, and risk management across the organization.
Lead HIPAA compliance, AI security, and security operations, including incident response and customer trust.
Build a high-performing security team, embedding security-by-design across products, cloud, and infrastructure.
Insurity provides configurable, cloud-native insurance software that helps organizations capitalize on new opportunities. As the largest cloud-based software provider for the P&C market, it is trusted by 22 of the top 25 carriers and values innovation, teamwork, and continuous learning.
You'll lead security projects across our programme, including third-party security, governance, and vulnerability management.
You'll represent Security in product launches and help teams identify and manage risks.
You'll write security policies, mentor analysts, and keep up with emerging threats.
We're Monzo, a digital bank on a mission to make money work for everyone, offering personal and business accounts, savings, investments, and more. We've grown a lot in the UK over the last 10 years and pride ourselves on award-winning customer service and a diverse, welcoming team.
Support the implementation and maintenance of client security compliance programs (SOC 2, ISO 27001, NIST CSF).
Manage evidence collection, policy updates, and audit readiness across multiple client engagements.
Collaborate with technical teams and stakeholders to identify risks, address control gaps, and improve security practices.
Our partner is a cybersecurity compliance firm that delivers governance, risk, and compliance programs for diverse clients, helping them establish security frameworks like SOC 2, ISO 27001, and NIST CSF. They are a fast-growing startup with a remote-first global team, emphasizing mentorship and professional development.
Take ownership of core GRC activities, including ISO-certified management systems and internal audits.
Coordinate external certification audits and ensure compliance evidence is maintained.
Provide practical advice and collaborate with stakeholders to manage risk across the business.
TwinStream is a technical consultancy delivering high-quality services to clients, bringing together expertise from government and engineering backgrounds. The company has grown to over 100 team members across the UK, with a flexible culture supporting on-site, hybrid, and remote work.
Lead Carrot's security strategy and roadmap, aligning corporate and product security with business priorities.
Own GRC, incident response, cloud and application security, and compliance certifications including SOC 2 and HITRUST.
Represent security posture to enterprise customers and partner with Engineering to embed secure practices across the platform.
Carrot is a global fertility and family care platform providing intelligent clinical guidance and comprehensive support. Trusted by more than 1,000 employers and health plans, it serves millions of members across 195 countries and is celebrated for its innovative, inclusive, and mission-driven culture.
Serve as subject matter expert and working lead for IEC 62443 certifications, owning the gap between standards and practice.
Maintain SDLC process documentation, traceability, and compliance evidence for audits, certifications, and regulatory obligations.
Coordinate the Coordinated Vulnerability Disclosure (CVD) and incident management program, including CISA and ENISA reporting readiness.
Inductive Automation provides industrial automation software solutions, empowering customers to turn great ideas into reality by removing technological and economic obstacles. The company fosters a collaborative, flexible culture with an emphasis on work-life balance, personal growth, and social connection.
Lead enterprise security awareness and human risk management strategy to reduce behavioral risk and strengthen security culture.
Design engaging campaigns, phishing simulations, and training programs that translate complex cybersecurity and compliance topics into clear, memorable experiences.
Partner with Security, GRC, Fraud, Privacy, Legal, HR, Marketing, and executive leadership to embed security expectations across the organization.
HealthEquity is a healthcare financial technology company on a mission to save and improve lives by empowering healthcare consumers with HSA and health savings solutions. The company values authenticity, innovation, and a culture focused on connecting health and wealth for American families.
Independently plan and conduct IT and cybersecurity risk assessments across laboratories, regional infrastructure, and central IT services.
Assess technical and organizational controls including network security, IAM, endpoint security, cloud, logging, and backup resilience.
Translate technical findings into clear business risks and pragmatic recommendations, then present results to technical teams and management.
Eurofins Scientific is an international life sciences company providing analytical testing services across industries to make life and the environment safer, healthier, and more sustainable. With about 63,000 staff and over 950 laboratories in 60 countries, it operates as a decentralized, entrepreneurial network committed to diversity, equity, and inclusion.
Own the day-to-day operation and continuous improvement of ISO 27001, SOC 2, and GDPR compliance programs.
Lead the pursuit of CMMC certification, agency-specific ATOs, and NIST SP 800-171 compliance.
Serve as the organization's DPO and oversee vendor risk, audits, and security awareness training.
Mechanical Orchard specializes in safely rewriting the most critical and complex business applications to make them adaptable and resilient. The company is an experienced Agile software consultancy that values cross-functional teams, collective ownership, and continuous improvement, and is bringing joy to beleaguered IT teams.
Perform activities to measure and monitor compliance with company policies and procedures.
Facilitate certifier requests and information gathering for external and internal audits.
Lead onsite and remote audits, both certification and customer audits, to ensure compliance.
ServiceNow provides the AI control tower for business reinvention, bringing together AI, data, and workflows to help 85% of the Fortune 500 work smarter, faster, and better. The company fosters an AI-native culture where technology and talent are unstoppable together, with a large global employee base.
Lead and develop the security governance, risk, and compliance organization, including FedRAMP, SOC 2, and PCI DSS programs.
Own security risk management, third-party risk, and customer assurance, evaluating technical and contractual security requirements.
Drive program maturity and scalability, identifying emerging risks and translating them into actionable organizational plans.
SentiLink helps institutions and protects customers by accurately resolving identities and flagging fraud risk. The company is well capitalized, growing quickly, and serves 13 of the top 15 U.S. banks.