Source Job

• Own our information security strategy and build our security roadmap.
• Maintain our ISO 27001 certification, preparing for SOC 2 readiness.
• Operate strategically and tactically, developing policy and reviewing cloud configurations.

ApprovalMax is redefining how finance teams manage the Money Out cycle — from purchase orders and supplier bills to employee expense management and payroll. Trusted by 18,000+ businesses worldwide, our platform empowers companies to automate financial controls, ensure compliance, and scale efficiently.

• Lead and scale a small, talented security team.
• Shape our security strategy, implementing practical controls.
• Partner with Engineering, Product, and Infrastructure leaders.

ButterflyMX empowers people to open and manage doors & gates from a smartphone. As a distributed, primarily remote workforce, they're looking for more intelligent, passionate, collaborative, ai-forward, and down-to-earth individuals to join their growing team.

• Lead comprehensive security audits of client security operations programs.
• Analyze security monitoring and alerting to perform a gap analysis.
• Conduct cyber risk assessments using industry frameworks.

They build cybersecurity software and solutions. Palo Alto Networks challenges the status quo, and they are looking for innovators who are as committed to shaping the future of cybersecurity as they are.

• Design, review and develop security architectures for systems and networks.
• Conduct security assessments and communicate identified risks from vulnerability scans.
• Collaborate with Product & Engineering teams ensuring security integration in projects.

Jobgether is a platform leveraging AI to match candidates with suitable job opportunities. They focus on ensuring a fair and objective candidate review process, and operate with AI powered matching and partner companies.

• Develop and execute Serco’s enterprise cloud and network strategy aligned with corporate growth, digital transformation, and sustainability objectives.
• Lead, mentor, and develop cross-functional teams of cloud engineers, network engineers, and system administrators, fostering a culture of continuous improvement and automation.
• Implement robust security measures and governance frameworks (zero-trust principles, NIST 800-171, and CMMC) to safeguard all infrastructure.

Serco Inc. is the Americas division of Serco Group, plc. In North America, Serco’s 9,000+ employees strive to make an impact every day across 100+ sites in the areas of Defense, Citizen Services, and Transportation.

• Contribute to the cybersecurity governance framework, aligned with international standards.
• Perform security audits, gap analyses, and cyber risk assessments.
• Support Business Continuity Management (BCM) and IT Disaster Recovery (DR) activities.

Prima uses data and tech to rethink motor insurance, offering a great experience at a great price. They are a trusted provider for over 4 million drivers and are expanding in the UK and Spain, with over 300 engineers in the Engineering Department.

• Own vulnerability management, SIEM tuning and monitoring, incident response, and threat investigation.
• Maintain secure baseline configurations based on industry standards.
• Oversee AWS security controls and enforce cloud security guardrails.

Jobgether posts this position on behalf of a partner company. They use an AI-powered matching process to ensure applications are reviewed quickly and fairly.

• Influence clients’ cybersecurity transformation strategies and driving them to successful security outcomes.
• Enhance the productivity of field sales teams by delivering business-relevant consulting engagements.
• Influence and empower customers to embrace the Palo Alto Networks platform.

Palo Alto Networks' mission is to be the cybersecurity partner of choice, protecting our digital way of life. They challenge and disrupt the way things are done, and are looking for innovators committed to shaping the future of cybersecurity.

• Lead, develop, and mentor the Platform Security team, setting direction, managing performance, and ensuring strong communication and execution across distributed time zones.
• Design, implement, and operate cloud security controls for AWS, GCP, and Azure to protect infrastructure, services, and applications from evolving threats.
• Partner with engineering and product leadership to influence architecture decisions, define security requirements, and ensure alignment with Affirm’s technical strategy.

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest. Security is critical to Affirm’s mission, and they aim to embed a strong security culture across the company so they can build and operate honest financial products.

• Lead and mentor the app security team, fostering a culture of security awareness and continuous improvement across the organization.
• Oversee the day-to-day security operations, including monitoring, threat detection, incident response, and vulnerability management.
• Maintain an application security risk management framework, identifying, analyzing, and treating risks.

TrueML is a mission-driven financial software company that aims to create better customer experiences for distressed borrowers. The TrueML team includes inspired data scientists, financial services industry experts, and customer experience fanatics who are building technology to serve people in a way that recognizes their unique needs and preferences as human beings and endeavors to ensure nobody gets locked out of the financial system.

• Design and implement security solutions across enterprise platforms and cloud environments.
• Perform threat modeling and security risk assessments for new features and platforms.
• Partner with product teams to embed security requirements early in the SDLC.

Experian is a global data and technology company, powering opportunities for people and businesses around the world. As a FTSE 100 Index company listed on the London Stock Exchange, they have a team of 22,500 people across 32 countries and are committed to investing in their people.

• Deliver world-class cyber security assessment and advisory services across multiple Compliance offerings.
• Work effectively as a team member on large engagements and remain current on technical knowledge.
• Demonstrate GuidePoint’s Core Values at all times and achieve and maintain relevant cyber security and audit certifications.

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. Since its inception in 2011, GuidePoint has grown to over 1000 employees and firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere.

• Define security detection program strategy and roadmap.
• Oversee development, testing, and maintenance of detection logic.
• Lead and mentor a high-performing team of security operators.

Cribl helps solve IT and Security's data needs. They foster a collaborative, curious, and motivated team environment where employees are passionate about putting customers first and believe in empowering our employees to do their best work, wherever they are.

• Monitor the daily operations of the team, being the primary liaison between analysts and leadership
• Oversee response activities for security events and alerts associated with cyber threats, intrusions, or compromises
• Be a mentor to Cyber Defense Analysts, providing feedback on the quality of work to analyst(s) and management

Experian is a global data and technology company, powering opportunities for people and businesses around the world. As a FTSE 100 Index company listed on the London Stock Exchange (EXPN), they have a team of 22,500 people across 32 countries and corporate headquarters in Dublin, Ireland.

• Lead, mentor, and grow a team of international and domestic risk analysts.
• Conduct and oversee complex risk assessments across cloud environments and on-premise telecommunications systems.
• Develop and deliver high-impact, executive-level risk reporting.

At Twilio, they're shaping the future of communications. They deliver innovative solutions to hundreds of thousands of businesses and empower millions of developers worldwide to craft personalized customer experiences, with a strong culture of connection and global inclusion.

• Serve as the lead Information Assurance authority for the program.
• Manage and oversee RMF lifecycle activities, including ATO maintenance.
• Develop, maintain, and govern cybersecurity and information assurance policies.

Jobgether is a company that uses AI to ensure applications are reviewed quickly, objectively, and fairly. They identify the top-fitting candidates and share this shortlist with the hiring company; the final decision is managed by the internal team.

• Implement and manage cloud-native security tools and third-party solutions for threat detection and incident response.
• Define, maintain, and execute the Incident Response plan, investigating and resolving incident escalations.
• Collaborate with Dev, DevOps, and Infra teams to remediate identified vulnerabilities, discuss security best practices, and assist with security incident response.

We are redefining the future of legal operations through the power of AI, offering a cutting-edge platform that streamlines enterprise legal management, matter management, spend management, and contract lifecycle processes. We are a team of innovators using AI at the core to help legal departments become faster, smarter, and more strategic.

• Design and implement resiliency across our cloud platform and CI/CD pipelines.
• Embed “security as code” and help lead incident response for high-severity outages.
• Partner with engineering teams to enable safe, fast delivery at scale.

Alpaca is a US-headquartered self-clearing broker-dealer and brokerage infrastructure for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more. Our global team of 230+ members spans the USA, Canada, Japan, and beyond, fostering a vibrant community.

• Acting as the primary subject matter expert for all security and compliance inquiries.
• Taking end-to-end ownership of certification lifecycles, such as ISO 27001 and Cyber Essentials.
• Working closely with the GRC team to improve existing programs.

Sword Health is shifting healthcare from human-first to AI-first through its AI Care platform, making world-class healthcare available anytime, anywhere. They have over 1,000 enterprise clients and are backed by 42 clinical studies and over 44 patents.

• Partner with CISOs and security leaders.
• Drive measurable security outcomes.
• Guide customers to higher security maturity using Binalyze’s platform.

Binalyze helps organizations to improve their security posture. They are a customer-focused company that values innovation and collaboration.