Build and maintain technical controls across security and compliance frameworks such as SOC 2, ISO 27001, HIPAA, and other enterprise requirements.
Automate compliance workflows, evidence collection, access reviews, and security checks.
Partner with Engineering and Security to implement controls around access management, infrastructure, data protection, logging, and vulnerability management.
Retell AI is reimagining the call center with cutting-edge voice AI. Backed by Y Combinator, the company has scaled to $60M ARR with a team of 40 people, and is looking for ambitious builders to tackle hard technical problems.
Lead and mature Fullscript's security compliance program across SOC 2, PCI DSS, and HITRUST frameworks.
Manage internal and external audits, coordinate remediation efforts, and maintain continuous audit-readiness.
Partner cross-functionally with Security, Engineering, Privacy, Legal, and Product to translate compliance requirements into scalable practices.
Fullscript is a health technology company that powers every part of care by providing practitioners with clinical insights, lab interpretations, and high-quality supplements. With over 125,000 practitioners and 10 million patients, they foster a culture of curiosity, collaboration, and putting people first.
Own the compliance programs and audits end to end, including SOC 2, PCI DSS, GDPR, and ISO 27001.
Manage identity and access, device fleet, and vendor security with ownership over control state.
Drive compliance as a sales enabler and own the customer-facing security package.
Footprint is the agentic platform that learns compliance programs and runs them end to end for banks and fintechs. The team is small, senior, and ships fast.
Lead the design and implementation of a comprehensive identity governance program for human and non-human identities.
Partner with IAM, security, and AI governance teams to assess current systems and align with Hyland's AI-first strategy.
Establish governance frameworks, role-based access controls, and compliance standards for ISO 27001, 42001, and SOC2.
Hyland is the pioneer of the Content Innovation Cloud, delivering enterprise intelligence to organizations worldwide. With nearly 4,000 employees, Hyland fosters an employee-centric, inclusive culture that values diversity and community impact.
Own and operationalize Avandra's compliance roadmap across HIPAA, HITRUST, and SOC 2, driving certifications and risk management.
Coordinate audit evidence, vendor security assessments, and customer due diligence while keeping audit-ready documentation.
Lead M&A compliance integration, including gap analyses and remediation plans for acquired entities.
Avandra Imaging is building the largest indexed data cloud of medical imaging to unlock clinical data for healthcare research. With over 5,000 customer integrations and roughly 70% market share, it is a growth-stage startup with a values-driven culture.
Lead a team of 10–20 associates in employment and education verification processes.
Drive SLA, TAT, quality, and productivity targets consistently.
Ensure compliance with U.S. verification standards and manage escalations.
The company provides employment and education verification services supporting U.S. background screening. It is a compliance-driven organization with a focus on accuracy and team engagement.
Own and maintain AML/BSA, Sanctions, and KYC/KYB policies across all markets, ensuring compliance with local regulations and partner requirements.
Serve as primary compliance point of contact for issuing bank and card network partners, managing audits, exams, and remediation.
Build and run governance structure for the compliance program, including reporting, escalation paths, and risk committees.
Motive empowers the people who run physical operations with tools to make their work safer, more productive, and more profitable. Motive serves nearly 100,000 customers across a wide range of industries, from Fortune 500 enterprises to small businesses.
Support governance, risk, privacy, and compliance programs to ensure alignment with regulatory requirements.
Conduct risk assessments for vendors and new technologies, and maintain compliance with GDPR and other regulations.
Manage data governance, privacy evaluations, and cybersecurity awareness training.
RMI is an independent nonprofit transforming global energy systems for a zero-carbon future. Founded in 1982, the organization has a global team and a remote-ready culture.
Guide customers through setup and go-live, ensuring they reach their first audit milestone.
Collaborate with founders, CTOs, and security teams to map goals to actionable milestones.
Own next steps when stuck, partnering with internal teams to keep the project moving.
Sprinto is an autonomous trust platform that centralizes compliance, audits, risk management, and more for organizations worldwide. Backed by top investors, it serves over 4,000 companies in 75+ countries and fosters a remote-first, ownership-driven culture.
Own GRC workstreams from initial request through evidence collection, testing, and remediation.
Test security controls and conduct risk assessments to identify gaps and drive realistic remediation.
Support audits, vendor reviews, customer questionnaires, and policy maintenance across teams.
YipitData is a leading market research and analytics firm for the disruptive economy, providing actionable insights from alternative data. The company has a global presence with offices in the US, APAC, and India, and is recognized as an Inc. Best Workplace for three consecutive years, emphasizing transparency, ownership, and continuous mastery.
Support multiple regulatory exams and external audits for licensed jurisdictions, providing a standardized framework and preparing data requests.
Understand applicable regulations to ensure audits are designed to identify control gaps and non-compliance with laws.
Assist in driving compliance initiatives to completion and preparing status reports for management updates.
Binance is a leading global blockchain ecosystem behind the world’s largest cryptocurrency exchange by trading volume and registered users. With a presence in 100+ countries and trusted by 300+ million people, we offer a flat, user-centric structure that values autonomy and innovation.
Own the audit journey for a portfolio of global customers from gap assessment through external audit closure.
Identify security and compliance gaps, turning them into practical remediation plans with engineering and leadership teams.
Serve as the coordination point between customers and independent auditors, facilitating evidence requests and communication.
Sprinto is an autonomous trust platform that centralizes compliance and security requirements across frameworks, vendors, and customers. Backed by Accel and Elevation, with $31.8M in funding, Sprinto serves over 4,000 organizations and fosters a remote-first culture of ownership and impact.
Process verifications using telephone, email and fax to confirm employment, education, and credentials.
Provide professional service to third-party verifiers and applicants while handling personal identifying information confidentially.
Log detailed notes, analyze collected data, and prepare accurate screenings to meet production and quality goals.
Mitratech builds world-class products that simplify operations in Legal, Risk, Compliance, and HR functions. The company serves 20,000 client companies globally, with a diverse and inclusive culture that supports individual excellence.
Independently execute endpoint security, identity management, and vulnerability remediation across Windows, macOS, Linux, and cloud platforms.
Monitor and analyze alerts within SIEM and EDR, conduct initial investigations, and escalate complex findings as needed.
Partner with IT, Engineering, DevOps, and IAM teams to maintain security controls and support compliance frameworks like SOC 2, HIPAA, and ISO 27001.
Accela is an industry leader in designing and delivering government software to improve efficiency, increase citizen engagement, and enable the development of thriving communities. The company has been operating for nearly 20 years, fosters a diverse and inclusive culture, and is committed to equity and belonging.
Assess and mitigate privacy risks across enterprise operations and third-party relationships, including PIAs and DPAs.
Support responsible AI governance by conducting AI risk assessments and monitoring emerging regulations.
Collaborate with Legal, Security, IT, and business stakeholders to ensure compliance with global privacy laws like HIPAA and GDPR.
Accuray develops, manufactures, and sells radiotherapy systems for alternative cancer treatments. With a global presence, they foster an inclusive and collaborative work environment focused on patient-first outcomes.
Handle identity verification (IDV) and identity account recovery (IDAR) for external users of FSA IAM systems.
Monitor and respond to support mailboxes, process identity documents, and update case notes in the PAS Admin Tool.
Manage data related to user identities, support fraud analysis, and maintain accurate records for reporting.
PingWind delivers outstanding services to the federal government, specializing in cybersecurity, development, IT infrastructure, and supply chain management. As an SBA-certified Service-Disabled Veteran-Owned Small Business (SDVOSB) with offices in Northern Virginia and Huntsville, AL, they emphasize a supportive culture and veteran hiring.
You'll drive the end-to-end design lifecycle from planning through implementation to ensure successful delivery of design objectives.
Provide clear communication to cross-functional team leads and management regarding project status, resource requirements, issues, and priorities.
Collaborate with a wide variety of internal cross-functional stakeholders to increase the efficiency and efficacy of our product development organization.
Veza is a pioneer in identity security, helping enterprises answer who can take what action on data. Founded in 2020 and now part of ServiceNow, it combines AI-native access graphs with enterprise platform resources and a security innovator's focus.
Own the technical roadmap for physical document IDV, including accuracy, coverage, fraud detection, and conversion.
Partner with ML engineers and data scientists to define model improvements and measure success.
Be the voice of Veriff in complex customer calls, running technical deep-dives and answering detailed accuracy questions.
Veriff is the preferred identity verification platform for growth-driven organizations, helping verify and safeguard users globally. We have a diverse team across the US, UK, Spain, and Estonia, with robust backing from investors including Accel, Alkeon, IVP, Tiger Capital, and Y Combinator.
Own assigned federal security and compliance workstreams from requirement interpretation through implementation, evidence collection, and remediation.
Drive recurring continuous monitoring and evidence workflows across multiple teams.
Support vulnerability detection and response, including reconciling findings from tools like Wiz, Nessus, and Burp.
Abnormal protects the humans behind the world's most critical organizations from AI-powered cybercrime. 4,500+ enterprises trust their behavioral AI platform.
Serve as the security subject matter expert on customer calls, owning responses to security questionnaires and due diligence requests.
Operate and tune security tools including CrowdStrike EDR, Entra ID identity controls, and vulnerability management.
Drive the SOC 2 Type 2 compliance program using Vanta, maintaining controls, policies, and vendor risk reviews.
AssetWatch is a remote-first industrial condition monitoring company that helps manufacturers predict equipment failure before it happens. The team includes world-renowned engineers and distinguished business leaders, united by a goal to build the future of predictive maintenance.