Lead the design and evolution of a multi-framework compliance offering for European businesses.
Drive end-to-end ISO 27001 implementations and manage a team of compliance specialists.
Act as a senior security partner to customers, sales, and product teams.
This company provides a security and compliance platform that helps modern businesses achieve certifications across frameworks like ISO 27001 and SOC 2. It is a fast-growing, remote-first technology environment with a strong emphasis on collaboration and team connection.
Own the IT evidence program across ISO 27001, SOC 1, SOC 2, PCI DSS, and HIPAA for approximately 13 operating sites, managing audits and remediation.
Manage vulnerability management end to end, oversee endpoint detection and response, and lead security incident response through to conclusion.
Contribute to identity governance across a hybrid cloud and on-premises IdP, overseeing access review and privileged access controls.
Serverfarm is a leading developer and operator of data centers with over 750 locations and key customer relationships in 45 countries. With Manulife Investment Management's acquisition in 2023, the company is positioned for explosive growth and offers a culture of innovation and career development.
Take ownership of information security governance, including policies, risk registers, and control documentation.
Manage day-to-day security program operations, mentor analysts, and coordinate cross-functional initiatives.
Lead incident response, compliance support, and serve as primary counterpart to the vCISO.
Aries is a financial technology company building modern infrastructure and products for active investors and traders. As a growing organization, they are investing in a practical, accountable security program deeply integrated into how the company operates.
Maintain and mature the ISMS, including the Statement of Applicability, risk treatment plans, and Management Review Meetings.
Support ISO 27001 and SOC 2 Type 2 audits from readiness through certification, including evidence preparation.
Lead the security policy program and collaborate across teams to translate compliance requirements into practical practices.
Mozilla Corporation is a non-profit-backed tech company behind Firefox, focused on making the internet better. With 225+ million monthly users, it is a wholly owned subsidiary of the Mozilla Foundation, promoting privacy, AI, and open-source.
Monitor and enforce compliance with security frameworks like NIST CSF, ISO 27001, SOC 2, and regulations such as GLBA, CCPA, and GDPR.
Conduct comprehensive risk assessments, develop security policies, and lead internal and external security audits with cross-functional teams.
Evaluate third-party vendor security posture, maintain compliance records, and define metrics to assess the success of the security program.
Clear Capital is a national real estate analytics, data solutions and valuation technology company with a simple purpose: to build confidence in real estate decisions to strengthen communities and improve lives. The company values integrity, kindness, and grit, and has been committed to excellence since 2001.
Coordinate cybersecurity awareness campaigns and training programs.
Maintain documentation for data classification, retention, and security controls.
Support compliance with frameworks like ISO and NIST.
Our partner is a mission-driven organization focused on strengthening information security and compliance. They foster a collaborative, remote-first culture with emphasis on professional growth and continuous learning.
Improve perimeter and network-layer defenses (WAF, DDoS mitigation, anti-bot) and secure product APIs against abuse.
Manage vulnerability identification, prioritization, remediation, and coordinate external pentests.
Lead incident response, run the Security Champions program, and manage the Bug Bounty program.
Social Discovery Group (SDG) solves problems of loneliness, isolation, and disconnection by providing social entertainment platforms that connect people across cultures. The company is an international team of digital nomads working remotely worldwide and has been named a Great Place to Work (USA & Japan, 2024–2025).
Own and build Flodesk's security program end to end, including policies, controls, and governance.
Lead SOC 2, ISO 27001, and CCPA readiness while partnering with engineering on secure development.
Manage IT operations, vendor vetting, and security tooling to scale the program.
Flodesk is a fast-growing email marketing company that helps creators and small businesses design emails and monetize their email lists. It is a remote-first company with a globally distributed team and offices in San Francisco, Menlo Park, and Da Nang.
Automate governance, risk, and compliance frameworks including ISO 27001, PCI-DSS, DORA, and UK Cyber Essentials.
Engineer GRC workflows with internal systems to support compliance by design.
Translate compliance requirements into technical specifications for engineering teams and non-technical stakeholders.
Pleo builds spend solutions that make managing money seamless for finance teams and employees. They are a driven, progressive team of 850+ people from over 100 nationalities, committed to delivering the future of business spending.
Serve as acting CISO for multiple client organizations and SGP, providing strategic security leadership and executive guidance.
Lead cybersecurity and compliance programs aligned with NIST SP 800-171, CMMC Levels 1-2, and ISO/IEC 27001.
Conduct security assessments, gap analyses, and risk reviews; develop SSPs, POA&Ms, and policies.
Strategic Growth Partners provides cybersecurity and compliance services to clients across multiple time zones. They foster a collaborative, innovative, and diverse work environment.
Own the full technology and security remit, including enterprise infrastructure, security, identity, applications, and workplace technology.
Lead and grow three functions: IT & Security Operations, Cloud Platform Engineering, and GRC.
Mature security operations with automation and serve as customer zero for the company's own platform.
UpGuard builds a Cyber Risk Posture Management platform that integrates security ratings, threat intel, and agentic AI to help organizations manage cyber risk. They are a certified Great Place to Work with a lean, high-growth culture and a global remote team.
Design, test, and implement security configurations to meet controls within Security Platforms.
Collaborate with stakeholders on emerging controls and guide intake discussions with engineers.
Troubleshoot and respond to security platform errors or incidents, monitoring health and coverage across the enterprise.
Nir Yu is a company that focuses on technology, with a security engineering team. The company is remote-first in Latin America and values collaboration, innovation, and a customer service oriented culture.
Own Eon's overall security strategy, roadmap, and budget, briefing the CEO and board.
Build and lead the security function, hiring and developing the team as the company scales.
Partner with engineering and product to embed secure-by-design principles and own detection, response, and vulnerability management.
Eon is transforming cloud backups into useful, active assets. Backed by leading investors, it has raised $500M and reached a $4B valuation, fostering a fast-paced startup culture.
Independently plan and conduct IT and cybersecurity risk assessments across European laboratories and IT environments.
Assess technical and organizational controls covering network security, IAM, endpoint security, cloud, and IT resilience.
Translate technical findings into clear business risks and produce high-quality reports for management.
Eurofins Scientific is an international life sciences company providing analytical testing services to make life safer and healthier. The company has grown to over 63,000 staff across a decentralized network of 950 laboratories in 60 countries, committed to diversity and sustainability.
Manage day-to-day security operational availability and supportability of a 24x7x365 infrastructure.
Make recommendations on enhancements to security hardware, software, and tools, and perform risk analysis.
Configure, implement, monitor, and support security software/systems including firewalls, VPNs, IDS/IPS, DLP, etc.
eMoney Advisor is a wealth management system that offers transparency, security, mobile access, and superior organization. We serve more than 109,000 financial professionals and support over 6 million end clients, fostering a culture that values diversity and inclusion.
Lead and coordinate second-line regulatory compliance and privacy oversight activities for the UK entity, serving as the operational lead for UK privacy compliance and Data Protection Officer.
Translate legal and regulatory requirements into compliance standards, governance routines, and oversight expectations for first-line stakeholders.
Prepare management reporting, governance materials, and issue summaries, and support audits and regulatory enquiries.
Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest. They are a remote-first company with a focus on inclusive culture and competitive benefits.
Lead and maintain ATO documentation and coordinate with security, engineering, and project teams to ensure compliance.
Monitor security events, investigate threats, and assess vulnerabilities across cloud and enterprise environments.
Develop and implement security policies, conduct risk analysis, and provide cybersecurity guidance to stakeholders.
The company is a partner organization focused on cybersecurity and federal technology modernization. It offers a fully remote, mission-driven culture with opportunities for growth in a technology-focused environment.
Lead IT governance and risk management, including executive reporting and risk register maintenance.
Develop KPI and KRI dashboards to translate complex data into actionable insights for senior leadership.
Oversee ITSM governance, ServiceNow optimization, and vendor risk management.
Our partner is a global organization operating in a sophisticated Governance, Risk & Compliance environment, connecting technology, cybersecurity, privacy, and operational risk. It fosters a collaborative culture with a focus on work-life balance and professional development.