Lead the implementation and certification of Accela's ISO/IEC 27001:2022 program.
Manage risk assessments, controls, audits, and compliance documentation across cross-functional teams.
Drive compliance automation and evidence management using platforms like Drata.
Accela provides a cloud-based government software platform that helps agencies improve efficiency and transparency. For nearly 20 years, it has been an industry leader serving communities of all sizes, with a culture committed to diversity, equity, and inclusion.
Conduct ongoing risk reviews and maintain an up-to-date risk register.
Support risk assessments across business processes and track mitigation plans.
Ensure regulatory compliance, build risk metrics, and support audit readiness.
Radicle Health builds human services software products that foster collaboration and help organizations serve their communities. Teams learn from each other and think holistically, with a culture of meaningful work and genuine care.
Own GRC workstreams from initial request through evidence collection, testing, remediation, and completion.
Test security controls and conduct risk assessments to identify meaningful gaps and drive realistic remediation plans.
Translate compliance requirements into clear actions, support audits, vendor reviews, and customer questionnaires.
YipitData is a market research and analytics firm that analyzes billions of alternative data points to provide actionable insights across software, AI, cloud, e-commerce, ridesharing, and payments. The company recently raised $475M from The Carlyle Group, operates globally with offices in the US, APAC, and India, and has an award-winning, people-centric culture recognized by Inc. as a Best Workplace for three consecutive years.
Lead Carrot's security strategy and roadmap, aligning corporate and product security with business priorities.
Own GRC, incident response, cloud and application security, and compliance certifications including SOC 2 and HITRUST.
Represent security posture to enterprise customers and partner with Engineering to embed secure practices across the platform.
Carrot is a global fertility and family care platform providing intelligent clinical guidance and comprehensive support. Trusted by more than 1,000 employers and health plans, it serves millions of members across 195 countries and is celebrated for its innovative, inclusive, and mission-driven culture.
Drive end-to-end audit cycles for SOC 2 Type II and ISO 27001/27701/42001, including evidence collection, control testing, auditor liaison, and remediation tracking.
Support FedRAMP program efforts, vendor risk assessments, and customer security assurance.
Automate compliance processes using Tines and operate continuous control monitoring.
Tines is the intelligent workflow company that powers important workflows by integrating with any API-enabled service for IT and security teams. The company values Simplicity, Speed, and Soundness, fostering a culture of curiosity, growth, and integrity.
Own the enterprise-wide security strategy, protecting information assets across corporate and product environments.
Ensure compliance with federal and state regulations, while leading audits and improving disaster recovery programs.
Collaborate with leadership to embed operational rigor and security best practices across a transforming organization.
Pluralsight provides a learning platform dedicated to accelerating technology skills for today's tech workforce. The company is mission-driven and fosters a culture of inclusion, belonging, and continuous learning.
The company is hiring a Senior GRC and Compliance Manager to lead enterprise security compliance and governance programs through a partner platform. It provides a remote, team-oriented work environment with opportunities for professional growth and a comprehensive benefits package.
Lead information security risk assessments and cyber risk management activities, translating technical findings into business risk.
Perform compliance monitoring and control assessments against policies, frameworks, and regulatory requirements.
Support audits, third-party security assessments, policy governance, and security awareness initiatives.
DriveTime Family of Brands is the largest privately owned used car sales, finance, and servicing company in the U.S., headquartered in Tempe, AZ and Dallas, TX. We're Great Place to Work certified with a culture that values growth, camaraderie, and innovation.
Own Pasito's security, IT, and compliance program end to end, including Vanta, SOC 2, HIPAA, and pen tests.
Manage IT operations: identity, SSO, MDM, device lifecycle, and internal access requests.
Partner with engineering, legal, HR, and sales to remediate vulnerabilities, complete security questionnaires, and maintain risk posture.
Pasito is an AI-native workspace for employee benefits that unifies plan design, payroll, claims, and financial data. Backed by Y Combinator and serving major U.S. carriers, it's a fast-growing startup that values speed, collaboration, and accuracy.
Own IT operations, Microsoft 365, endpoint security, and helpdesk support.
Manage security compliance, audits, and backup recovery across cloud and AI platforms.
Serve as the sole IT owner with direct access to the CEO and cross-functional leadership.
EHS Insight provides cloud-based environmental, health, and safety software. It is a small company with a remote-first culture where employees own their work and report directly to the CEO.