Source Job

• Manage and expand Valon's security and privacy compliance program across key frameworks and regulations.
• Build and scale modern Security GRC capabilities that leverage AI-enabled tools and processes, reducing manual overhead while optimizing risk and compliance operations.
• Maintain and evolve Valon's risk management practices; facilitate risk assessments across teams and track remediation of identified issues to closure.

Valon is building the AI-native operating system for regulated finance, starting with mortgage servicing. We're a Series C company backed by a16z, transforming industries that others have written off as too complex to innovate.

• Drive compliance efforts to unlock business capabilities
• Secure Owner by helping teams successfully prevent and remediate vulnerabilities
• Help teams build better and more secure systems by avoiding pitfalls of risk.

Owner is an AI-native system local business owners use to succeed, starting with restaurants. It's building the system that replaces the many tools owners use to run their business and powers everything from the restaurant’s website, online ordering, CRM, POS, and more. The team is in the low hundreds.

• Build the function by creating delivery operating model and reusable IP.
• Deliver and scale service lines, including framework digitization and packaged services.
• Own commercial outcomes by defining service packaging and pricing models.

Sprinto is an AI-native GRC platform that helps organizations manage risks, audits, vendor oversight, and continuous monitoring from a single connected platform. With a team of 350+ employees serving 3,000+ customers across 75+ countries, they combine scale with expertise to deliver trust and compliance.

• Work collaboratively with a team of assessors as a federal compliance specialist, planning and executing assessments for clients.
• Draft audit observations, lead interview walkthroughs, and assess security vulnerabilities against appropriate frameworks.
• Prepare and review assessment reports, educate clients on compliance activities, and manage priorities to achieve delivery targets.

Coalfire is on a mission to make the world a safer place by solving clients’ hardest cybersecurity challenges. They are thought leaders, consultants, and cybersecurity experts, and a team of passionate problem-solvers with offices across the U.S. and U.K.

• You'll partner directly with the Senior Manager of GRC to lead our commercial audit programs, from evidence collection and control testing to deep technical walkthroughs with external auditors and internal SMEs.
• You'll own the question of what "good evidence" looks like across SOC 2 Type II, ISO 27001/27017/27018, and ISO 27701, and you'll know where to find it in the systems that generate it.
• Help build the AI-assisted workflows and automation that make our audit programs more efficient and our compliance posture more continuous.

1Password is building the foundation for a safe, productive digital future. They ensure every identity is authentic, every application sign-in is secure, and every device is trusted. Over 180,000 businesses trust 1Password. We prioritize collaboration, clear and transparent communication, receptiveness to feedback.

• Translate group security frameworks into practical policies, controls, and procedures.
• Build and strengthen a Security-by-Design culture across projects, platforms, and teams.
• Support teams in identifying risks, defining actions, and tracking real progress.

Q8 is a well-respected, reliable, and trustworthy energy supplier that has been operating since 1983, with nearly 5,000 service stations in Europe. They are committed to developing a wide range of innovative and sustainable products and services. Their culture is focused on growing together in a digital and inspiring environment of trust, focused on continuous learning.

• Maintain and improve information security policies, standards, and procedures.
• Support SOC 2, ISO 27001, and HITRUST readiness, audit preparation, and evidence collection.
• Support vendor security reviews, third-party risk assessments, and remediation tracking.

Benepass is making benefits easy through its customizable fintech platform. They enable People teams to implement, administer, and track benefits that meet employees where they are. The company has raised approximately $75 million in equity capital and is backed by leading investors.

• Lead and maintain the IT Compliance Program, ensuring alignment with industry best practices and regulatory requirements.
• Stay abreast of relevant laws, regulations, and industry standards (e.g. GDPR, ISO 27001, NIS2, SOC 2,...).
• Serve as a main point of contact for senior management and stakeholders on regulatory and IT compliance matters.

EcoVadis is the leading provider of business sustainability ratings, offering solutions backed by experts and technology. They analyze data to provide companies with insights into their environmental, social, and ethical risks, fostering a culture of global sustainability change.

• Deliver world-class cyber security assessment and advisory services while ensuring customer satisfaction.
• Work effectively as a team member on large engagements and remain current on technical knowledge.
• Demonstrate GuidePoint’s Core Values at all times: Take Charge and Complete Our Mission.

GuidePoint Security provides trusted cybersecurity expertise, solutions, and services to help organizations make better decisions and minimize risk. They have over 1,200 employees and focus on core values to establish an enjoyable workplace atmosphere.

• Build detections and security signal pipelines in Datadog.
• Serve as the subject matter expert on AWS Cloud and on-prem infrastructure security.
• Act as the technical lead during security incidents, including investigation and remediation.

Voltus is the leading platform connecting distributed energy resources to electricity markets, delivering less expensive, more reliable, and more sustainable electricity. Our company appears to be a remote-first company, and values diversity and inclusion.

• Provide senior-level compliance consulting services to investment advisors.
• Manage ongoing client relationships and deliver high-quality service.
• Serve as a senior subject matter resource for consultants across the organization.

Comply is a leading provider of compliance SaaS and consulting services for the global financial services sector. With more than 5,000 clients and hundreds of employees across the globe, Comply empowers Chief Compliance Officers and their teams to proactively manage regulatory obligations, mitigate risk, and scale with efficiency and confidence.

• Lead security strategy across infrastructure, cloud systems, and enterprise applications.
• Drive SOC 2, ISO 27001, and ISO 42001 readiness/certifications.
• Own vulnerability management, threat monitoring, and incident response workflows.

SaaS Talent is a recruiting company, and a hiring, business development and growth partner with 20+ years of experience in SaaS and Hi-Tech that helps you scale and transform your business. They've worked with 100+ companies and helped them achieve their goals.

• Partner with Security Engineering, Risk, Product, and Infrastructure teams to bake security and compliance into the process.
• Dive deep into the security stack to identify execution blockers and actively architect the technical solutions to implement them.
• Define the technical milestones for high-stakes initiatives like Zero Trust and IAM overhauls, translating a broad vision into a precise execution roadmap.

Human Interest aims to provide all workers access to retirement benefits. They are a high-growth fintech company that is financially backed by investors such as BlackRock, TPG, and SoftBank.

• Design and implement comprehensive security architectures for network, application, data protection, and identity management.
• Identify and assess security risks, developing mitigation strategies to reduce organizational risk.
• Leverage automation across the technology stack to ensure best practices in Identity and Access Management.

HealthEdge provides software solutions for the healthcare industry. The company fosters a positive, fun, and collaborative work environment with an emphasis on mentoring and building influence.

• Lead the development of security architecture guidance, standards, and reference diagrams for on-premise and cloud platforms.
• Assess and evaluate security postures, review candidate architectures, and identify protection needs.
• Support risk management and compliance, performing architecture reviews and maintaining documentation throughout the acquisition lifecycle.

Valiant Solutions is a security-focused IT solutions provider with public clients nationwide. Named one of the Best Places to Work in the Washington DC area for 12 consecutive years, the company prides itself on an employee-centric culture and commitment to excellence.

• Diagnose, prioritize, and drive security program maturity.
• Translate security requirements into engineering practice.
• Own the compliance surface without losing sight of real risk.

Aledade helps independent primary care practices survive and thrive, aiming to bend the healthcare cost curve. They are the largest network of independent primary care in the country.

• Design and implement automation, dashboards, and integrations that power our Governance, Risk, and Compliance (GRC) operations.
• Operationalizing and expanding our GRC platform (Drata), building AI-assisted workflows that automate evidence collection, control monitoring, and vendor risk.
• Manage project delivery across multiple GRC automation initiatives simultaneously — maintaining clear scope, milestones, and stakeholder visibility without sacrificing quality.

1Password is building the foundation for a safe, productive digital future. They innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. 1Password has surpassed $400M in ARR and has over 180,000 businesses using their product.

• Monitor and ensure compliance with international sanctions regulations.
• Manage data protection matters both internally and externally.
• Supervise internal compliance processes, including conducting KYC and KYS procedures.

Gcore provides infrastructure and software solutions for AI, cloud, network, and security. They are a global team of 550+ professionals building infrastructure and software that supports the entire digital ecosystem.