Remote Cyber security Jobs · Risk Management

• Own and evolve GameChanger's multi-year security and technology strategy, including prioritization and alignment to business goals.
• Lead, mentor, and grow a team of security and technology operations professionals, setting direction and fostering autonomy.
• Evaluate and mitigate risks across infrastructure, product, and corporate environments, and manage the security operations and incident response program.

GameChanger builds the first and best platform for youth sports experiences, helping families and coaches elevate the next generation. We are a remote-first, dynamic tech company based in New York City, solving some of the biggest challenges in youth sports today.

• Manage and conduct internal and external compliance audits for frameworks like ISO, SOC, and NIST.
• Work with global teams to implement and update compliance controls, policies, and training.
• Stay updated on regulatory changes and perform gap analysis to maintain certifications.

QAD is building a world-class SaaS company that solves real-world problems in manufacturing and supply chain. They are a growing, virtual-first company with a collaborative culture that values idea-sharing and growth.

• Defines program goals, governance frameworks, and measurable objectives for cyber risk and compliance programs.
• Manages user attestations, third-party risk, cyber contract negotiation, and coordination of IT audits/assessments.
• Implements GRC tooling and monitors program effectiveness through KPIs, QA reviews, and control testing.

Velera is a credit union service organization providing fintech solutions to over 4,000 financial institutions. The company fosters a remote-first, inclusive culture with a focus on employee wellbeing and belonging.

• Perform project tasks independently while contributing to cybersecurity assessment engagements and client deliverables.
• Collect, organize, and analyze documentation, evidence, and technical artifacts required for security reviews.
• Support assessments related to cybersecurity, compliance, and information security programs.

Our partner is a company focused on helping organizations strengthen their security posture and maintain compliance with industry standards. They offer a dynamic and collaborative work environment with career growth opportunities in cybersecurity.

• Define and evaluate security architecture for end-user devices, including workstation hardening, EDR, and data protection.
• Advise on mobility security for MDM/UEM, mobile application management, and BYOD posture across iOS and Android.
• Perform security architecture reviews, deliver consulting engagements, and create reusable security artifacts.

AbbVie discovers and delivers innovative medicines and solutions for serious health issues in immunology, oncology, and neuroscience. The company has a large global workforce and a culture focused on integrity and innovation.

• Own and continuously mature the company risk register, designing AI-assisted workflows for real-time risk posture.
• Lead external audit management (SOC 2 Type II) and automate evidence collection pipelines in Vanta.
• Engineer the Trust and Assurance program for scale, including automated vendor risk intake and AI-assisted response generation.

ButterflyMX empowers people to open and manage doors & gates from a smartphone, with products installed in over 20,000 properties worldwide. As a distributed, primarily remote workforce, they seek intelligent, passionate, and collaborative individuals driven by shared commitment to excellence and innovation.

• Structure, implement, and improve cybersecurity governance processes.
• Manage cybersecurity risks and ensure compliance with frameworks like NIST and ISO 27001.
• Collaborate with technical and business teams to promote security awareness and continuous improvement.

• Define, implement, and evolve cybersecurity strategy aligned with business priorities.
• Establish security policies and frameworks such as ISO 27001, NIST, and LGPD, and conduct risk assessments.
• Lead incident response, optimize security tools, and promote security awareness across teams.

Jobgether is an AI-powered job matching platform connecting candidates with hiring companies. They use technology to ensure fair and efficient application reviews, processing personal data in compliance with GDPR.

• Lead the global cyber security strategy, governance, and operations to protect clients, systems, data, and brand reputation across all regions.
• Define and execute the Information Security Management System (ISMS) aligned to ISO 27001, SOC2, and TISAX, while managing enterprise risk and compliance.
• Serve as the senior authority on cyber risk, advising the CTO, Board, and customers, and act as executive incident commander for major cyber events.

JD Power is a proven leader in business-critical data and intelligence, powering auto-related decisions with proprietary data, advanced analytics, and deep industry expertise. The company is a global corporation with a diverse workforce and a culture focused on innovation, collaboration, and trust.

• Serve as a trusted advisor to clients, defining and advancing cybersecurity strategy over multi-year engagements.
• Develop prioritized security roadmaps and advise on governance, risk, and compliance frameworks.
• Translate technical risk into business language for executives and boards, owning the advisory relationship.

Apollo Information Systems is a cybersecurity services company delivering comprehensive security and compliance programs, pioneering a cybersecurity-as-a-service model. Backed by Series A funding, we foster a collaborative, mission-driven culture with deep expertise, and primarily work remotely with a hub in Denver.