Lead the global risk management process, including risk assessments, treatment plans, and policy exceptions.
Own risk reporting for key areas and collaborate across GRC, security, and business teams.
Build automations and shape tooling to keep the risk register accurate and proactive.
DoorDash is a technology and logistics company that connects local businesses with consumers through on-demand delivery. The company is growing rapidly and emphasizes a culture of empathy, diversity, and employee well-being.
Lead information security risk assessments and cyber risk management activities, translating technical findings into business risk.
Perform compliance monitoring and control assessments against policies, frameworks, and regulatory requirements.
Support audits, third-party security assessments, policy governance, and security awareness initiatives.
DriveTime Family of Brands is the largest privately owned used car sales, finance, and servicing company in the U.S., headquartered in Tempe, AZ and Dallas, TX. We're Great Place to Work certified with a culture that values growth, camaraderie, and innovation.
Develop and own the risk framework, including risk appetite and exposure limits.
Monitor market, liquidity, and counterparty risk and analyze P&L to distinguish performance drivers from risk exposure.
Collaborate with trading, quant, strategy, ops, and engineering teams to ensure comprehensive risk identification and mitigation.
WhiteBIT is a global blockchain platform providing transparency and security for over 8 million users worldwide. The company is a team of over 1,200 professionals united by the mission to shape the new world order in the Web3 era.
Lead and develop the Information Security GRC strategy and governance in a growing FinTech environment.
Oversee cyber risk, regulatory assurance, and third-party risk with cross-functional collaboration.
Build and manage the GRC team, driving automation and efficiency in compliance processes.
JustMarkets is an international FinTech company. They are a growing organization with a hands-on, collaborative culture focused on security and compliance.
Conduct ongoing risk reviews and maintain an up-to-date risk register.
Support risk assessments across business processes and track mitigation plans.
Ensure regulatory compliance, build risk metrics, and support audit readiness.
Radicle Health builds human services software products that foster collaboration and help organizations serve their communities. Teams learn from each other and think holistically, with a culture of meaningful work and genuine care.
Own and support key GRC programme components, including ISO 27001 and SOC 2 audits.
Lead risk assessments, third-party risk oversight, and control assurance activities.
Partner with Engineering, Privacy, Legal, and People teams to embed compliance requirements.
Ping Identity is a cloud identity security company serving more than half the Fortune 100 with secure, seamless digital experiences. Headquartered in Denver with global offices, it fosters a flexible, collaborative culture that champions every individual identity.
Partner with business leaders to translate priorities into practical security and risk decisions.
Lead project security assessments, rapid risk reviews, and remediation planning for new products and enterprise changes.
Communicate threats, incidents, and policy changes to leadership using a threat-informed, business-aligned approach.
Experian is a global data and technology company, powering opportunities for people and businesses around the world. We have an amazing team of 25,200 people in 32 countries and invest in new advanced technologies to unlock the power of data.
Perform security risk assessments for various IT solutions and identify remediation or mitigation requirements.
Apply guidance from policies and best practices to support internal and external customers on security safeguards.
Collaborate with teams across IT, privacy, compliance, legal, and procurement to protect institutional assets.
Emory University is a leading research university that fosters excellence and attracts world-class talent to innovate today and prepare leaders for the future. It offers a diverse and inclusive culture with many employees supporting academic and healthcare missions.
Onboard and manage UpGuard customers to ensure they effectively use the platform to meet their goals.
Provide resources including success plans, training sessions, and regular check-in calls.
Translate customer requirements from risk management frameworks into tailored solutions on UpGuard.
UpGuard is redefining cyber risk management with its AI-driven CRPM platform, helping organizations manage their attack surface. The company has raised $75M Series C, scales to process 100 billion risk signals daily, and fosters a culture of autonomy and remote work.
Partner with external teams to ensure partner risk standards are consistently applied across global operations and controls.
Conduct risk assessments, maintain accurate records, and oversee control reviews to guarantee effectiveness.
Drive remediation of issues and incidents, challenging progress and ensuring closure evidence meets standards.
Monzo is a digital bank on a mission to make money work for everyone, offering personal and business bank accounts, savings, investments, and credit cards with a focus on financial education and award-winning customer service. With a long history of innovation, the company operates across the UK and is expanding globally, supported by a diverse and inclusive team.
Operate recurring vulnerability and compliance reporting, advise on remediation, and track issues to closure.
Monitor cloud security posture, triage misconfigurations, and support endpoint security compliance.
Build dashboards, automate tasks, and support vendor risk management and data loss prevention.
Harvard Medical School is dedicated to alleviating suffering and improving health through excellence in teaching, learning, discovery, and service, working alongside world-renowned faculty. The Information Technology Department enables this mission by delivering secure and scalable services, fostering a diverse and inclusive community.
Independently plan and conduct IT and cybersecurity risk assessments across laboratories, regional infrastructure, and central IT services.
Assess technical and organizational controls including network security, IAM, endpoint security, cloud, logging, and backup resilience.
Translate technical findings into clear business risks and pragmatic recommendations, then present results to technical teams and management.
Eurofins Scientific is an international life sciences company providing analytical testing services across industries to make life and the environment safer, healthier, and more sustainable. With about 63,000 staff and over 950 laboratories in 60 countries, it operates as a decentralized, entrepreneurial network committed to diversity, equity, and inclusion.
Collaborate with stakeholders to design and operate security controls for the GRC program.
Use technology to automate compliance activities like evidence gathering and control verification.
Drive progress on GRC continuous improvement projects and support audits with internal and external stakeholders.
LaunchDarkly provides a feature management platform that enables developers to release software faster and more safely. The company values high trust, transparency, and building diverse, collaborative teams.
Design and manage implementation of risk management processes, including complex risk assessments and variance trend analysis.
Ensure compliance with risk policies, facilitate independent assessments, and develop reports for different audiences.
Monitor, review, and escalate issues while acting as a subject matter expert in a designated risk discipline.
Pathward is a financial empowerment company that removes barriers to financial access and promotes economic mobility. The culture celebrates diverse perspectives through a HUMBLE*HUNGRY*SMART approach and values employee, customer, partner, and community voices.
Support the execution of Alpaca’s cybersecurity risk management program and conduct risk assessments across cloud infrastructure, APIs, and trading systems.
Help develop and maintain AI governance controls aligned with evolving regulatory expectations such as the EU AI Act.
Perform third-party/vendor security and AI risk assessments, and contribute to control testing across frameworks like SOC 2, ISO 27001, and NIST CSF.
Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, fixed income, and 24/5 trading, serving hundreds of financial institutions across 40 countries. Backed by $400 million in funding from top-tier global investors, our dynamic team of 400+ globally distributed members thrives working from favorite places around the world, committed to open-source contributions and fostering a vibrant community.
Own Garner's annual information security risk assessment and risk register, driving risk identification, scoring, treatment, and reporting.
Run third-party and vendor risk reviews, manage security findings to resolution, and enforce SLAs with Engineering.
Manage compliance policies, training, and reporting to leadership while scaling GRC with AI and automation.
Garner partners with employers to transform U.S. healthcare by using clinical data and incentives to steer members to higher-quality, lower-cost care. The company has raised a Series E, served over 2.5 million people, and is known for a mission-driven, high-performing culture.
Deliver governance, risk, and compliance engagements aligned with frameworks like ISO 27001, SOC 2, and NIST.
Conduct gap analyses, security posture assessments, and maturity reviews to identify improvement opportunities.
Guide clients through audit preparation, certification processes, and security programme implementation.
Jobgether is an AI-powered job matching platform that lists roles on behalf of partner companies. The hiring partner for this role offers a fully remote working environment and a collaborative culture with opportunities for professional growth.
Lead external compliance exams (SOC 2, ISO 27001) end-to-end, including evidence, auditor negotiation, and readiness.
Own customer security diligence, questionnaires, audits, and trust-center content while setting response standards.
Manage third-party risk operations and the agent platform for automated customer and vendor assessments.
Chainguard provides hardened, secure, and production-ready builds of open source software, helping organizations build faster, stay compliant, and eliminate risk. It is a venture-backed company serving Fortune 500 enterprises and global industry leaders like OpenAI and Snowflake.
Own security governance, risk, and compliance for all acquired companies, from diligence through integration.
Assess targets against security baselines, map controls to frameworks, and set achievable remediation milestones.
Prepare entities for external audit and manage risk registers for seamless handoff to central GRC.
Payward, the parent company of Kraken, NinjaTrader, and other platforms, builds modern financial infrastructure for open finance. Founded in 2011, Kraken is a leading crypto platform trusted by over 10 million users globally, with a remote-first, international team.
Own global risk controls for Exit & Defunds, Law Enforcement, and Acceptable Use Standard across MBL and MBEU.
Use data and trend analysis to monitor control effectiveness, identify emerging threats, and strengthen controls.
Act as a domain expert, leading cross-functional initiatives with Product, Operations, and Engineering teams.
Monzo is a digital bank on a mission to make money work for everyone, offering personal and business bank accounts, savings, investments, and pensions. With over 10 years of growth in the UK and award-winning customer service, we thrive on solving problems and changing lives through innovative financial products.