Own and mature security, privacy, and compliance programs across HIPAA, SOC 2, and HITRUST.
Lead HITRUST certification end to end, including scoping, evidence collection, and assessor coordination.
Partner with Engineering, Product, SRE, and IT to integrate security into architecture, SDLC, and cloud infrastructure.
IntusCare is an end-to-end ecosystem built specifically to help PACE programs deliver exceptional care, strengthen financial performance, and stay compliant. It is a growing healthcare SaaS organization that empowers teams to improve outcomes for dual-eligible seniors.
Own the end-to-end continuous control monitoring program across cloud, identity, code, and endpoint systems.
Build centralized common controls frameworks and automated evidence management using Python, APIs, and policy-as-code.
Provide technical leadership during audits and collaborate with security teams to modernize GRC through automation and AI-assisted workflows.
The company is a technology organization focused on secure and compliant cloud operations. It is a globally distributed, remote-first team that emphasizes collaboration, ownership, and professional growth.
Maintain and enhance Anovia's ISO/IEC 27001 ISMS, including policies, controls, risks, and audit coordination.
Support SOC 2, HIPAA, and other compliance programs, including vendor assessments, vulnerability management, and incident response.
Lead ambiguous technical and operational initiatives from planning through implementation, coordinating stakeholders and driving completion.
Anovia is an industry-leading technology outsourcing support provider specializing in workflow and knowledge processes, technical support, helpdesk, and multilingual services. With over 200 experts globally, we serve Fortune 500 companies and value growth, learning, and work-life balance.
Act as part vCISO and account manager, guiding clients through security and compliance programs.
Assess security posture, provide recommendations, and design programs using NIST, SOC 2, and ISO 27001.
Liaise with auditors and internal teams to translate programs into policies, procedures, and configurations.
Oneleet provides a platform for companies to build, manage, and monitor cybersecurity programs and achieve SOC 2 and ISO 27001. It raised a $33M Series A and is a fast-growing, remote-first team with an opinionated culture.
Own and drive Sourcegraph's governance, risk, and compliance program, including SOC 2 and ISO 27001 certifications.
Manage audits end-to-end: evidence collection, control testing, stakeholder coordination, and remediation.
Support customer-facing compliance activities and tailor controls to fit Sourcegraph's fast-moving environment.
Sourcegraph builds AI-powered code search and batch change tools for engineering teams to manage complex codebases. It is a globally distributed team backed by a16z, Sequoia, and Redpoint, valuing high agency and customer love.
Own the overall security posture, including policy, standards, and risk framework.
Manage ISO 27001, SOC 2, FedRAMP, and CMMC compliance programs.
Lead incident response, vulnerability management, and customer security assurance.
RapidFort is a cybersecurity company that helps organizations secure and optimize their software supply chain and containerized environments. As a fast-growing startup, we foster a culture of ownership and direct communication, where every team member contributes to our mission of securing cloud-native applications for regulated industries.
Build and maintain compliance frameworks in the Secfix platform, including ISO 27001, TISAX, SOC 2, GDPR, and more.
Own internal audits end-to-end for customers, ensuring they are prepared for external audits.
Collaborate with product and engineering to translate compliance gaps into structured product work and enhance platform quality.
Secfix automates security compliance for European companies, helping them achieve ISO 27001, GDPR, TISAX, and SOC 2 efficiently. They are a 100% remote team with hubs in Munich, Berlin, and London, recently raised a $12M Series A, and are backed by top VCs.
Lead ISO 27001 and SOC 2 audit cycles end-to-end, owning compliance and audit.
Own customer trust by responding to security questionnaires and representing InfoSec to enterprise clients.
Drive risk management, vendor security, and incident response while building AI-assisted workflows.
We are the first AI-native Employee Experience Platform, helping organizations unlock inspirational communication. Our diverse team of 550+ employees supports over 1,500 customers, and we are a unicorn company valued at over $1 billion.
Lead and mature the organization's governance, risk management, compliance, and audit programs.
Own cybersecurity compliance initiatives including CMMC Level 2, SOC audits, and SOX IT General Controls.
Partner with business, technology, and executive stakeholders to align security controls with regulatory and business requirements.
Loenbro is a trusted construction lifecycle partner serving thousands of customers across the U.S. with services including electrical, mechanical, structural, inspection, and fabrication. The company has a national presence with a local approach and fosters a culture of integrity, teamwork, and purpose.
Lead and mature cybersecurity compliance programs including SOC 2 Type 2 and ISO 27001 readiness.
Drive cloud and application security across AWS and Azure, integrating secure SDLC and DevSecOps practices.
Manage corporate IT operations, identity and access, and build the cybersecurity team as the organization grows.
Genea is a leader in property technology, providing cloud-based physical security, submeter billing, and on-demand HVAC solutions to over 1 million users across 39 countries. It has been recognized as a Top Workplace from 2021-2025 with a 4.3 Glassdoor rating, fostering a team-oriented and transparent culture.
Lead compliance programs including SOC 2, GDPR, CCPA/CPRA, and Shopify partner security requirements.
Own security policies, risk management, business continuity, and incident response.
Manage IT operations, endpoint security, and cloud security across the company.
Rebuy revolutionizes shopping with intelligent, personalized experiences for DTC brands. They are a fully remote team with a culture rooted in ownership, drive, and empathy.
Own global certification programs like ISO 27001 and SOC 2, and advise engineering teams on secure development.
Collaborate directly with engineers to audit cloud infrastructure, CI/CD pipelines, and AI-driven security controls.
Assess risks of emerging technologies and drive continuous compliance improvements across the organization.
Picus Security is an exposure validation company that proves what attackers can exploit and what defenses stop, turning exposures into defensible decisions. As a fast-growing global remote team, it values continuous security validation and has a 95% recommendation rate.
Lead and mature the information security program, building on ISO 27001 and SOC 2 foundations.
Develop and operationalize security policies, risk management, and incident response.
Partner with Engineering and Product to integrate security into software development.
This is a partner company role managed by Jobgether, a platform that uses AI-powered matching to connect candidates with hiring companies. The partner is a rapidly scaling SaaS and cloud technology environment, with a growing security team and established ISO 27001 and SOC 2 programs.
Own SOC 2 end to end, run auditor relationships, and keep the program audit-ready year round.
Run risk management, policy, BC/DR, and vendor/subprocessor programs with automated evidence.
Lead security questionnaires and TPRM reviews to close deals and scale compliance across frameworks.
Aegis AI is a security company founded by ex-Google engineers who built Safe Browsing and reCAPTCHA, now stopping adversarial AI attacks. The team is flat, flexible, and fast, with clear KPIs and a focus on owning decisions while moving at real-world speed.
Lead projects from client acquisition to final delivery and oversee client service teams on multiple engagements.
Perform technical security assessments, audits, and risk evaluations across applications and infrastructure.
Mentor and develop staff while cultivating client relationships and cross-selling firm services.
The Bonadio Group is a leading accounting, advisory, and consulting firm providing next-level solutions to clients across industries. The firm values diversity, innovation, and professional growth, offering mentoring and training programs with a path to partnership.
Lead civil aviation cyber certification, defining processes, procedures, and artifacts for airworthiness security.
Perform security risk assessments per DO-326A/ED-202A, ARP4754B, and DO-356A/ED-203A, and develop certification evidence.
Interface with FAA/EASA and integrate security requirements with systems, software, and safety teams.
Merlin is a publicly traded aerospace and defense company building a non-human pilot to deliver full-stack autonomy for any aircraft. Headquartered in Boston, the company is expanding its organization and offers an innovative, entrepreneurial, and team-focused startup environment.
Lead and execute Delinea's Product Security Program, including secure design reviews, threat modeling, and security consulting.
Collaborate with Enterprise Architecture, Development, DevOps, and Cloud engineering teams to balance security with business objectives.
Define baseline cloud, container, application, and infrastructure security standards and integrate them into CI/CD pipelines.
Delinea is a pioneer in securing human and machine identities through intelligent, centralized authorization, with a cloud-native Identity Security Platform that applies AI-powered context across the entire identity lifecycle. We are a passionate, global team driven by world-class product leadership, outstanding engineers, and strategic investment from TPG, valuing diversity, innovation, and a culture of respect and fairness.
Implement and configure security applications and infrastructure to support corporate policies and federal and state regulations.
Serve as an information security subject matter expert, including familiarity with cloud implementations.
Lead infrastructure security assessments and incident response efforts across networking, servers, databases, and applications.
KnitWell Group is a specialty retail operating company comprising iconic American brands such as Ann Taylor, Chico's, LOFT, and Talbots. Our associates are innovators who thrive through collaboration and are dedicated to excellence, creating fashion that makes customers feel good.
Plan, implement, and upgrade security controls and architecture to safeguard systems and sensitive information.
Conduct risk assessments, penetration testing, and vulnerability assessments, then track mitigation plans.
Support compliance with NIST 800-171, develop governance documentation, and deliver security awareness training.
Insitu, a Boeing Company, provides unmanned air systems and software solutions for collecting, processing, and understanding sensor data to support critical decision-making. With over 1 million operational flight hours, the company values integrity, collaboration, and adaptability in a fast-paced, mission-driven environment.
Lead and grow a small security team while owning Canary's security and compliance program end-to-end.
Serve as the primary security voice to customers, partners, and auditors, translating security posture for varied audiences.
Set technical direction for security tooling and stay hands-on in architecture and threat-model reviews.
Canary Technologies is a leading agentic AI platform for hotel and guest management, powering digital infrastructure for over 20,000 hotels in 125+ countries. With nearly $200M raised, they are a top-funded hotel tech company, recognized for growth and workplace excellence.