Cisa jobs in North Bergen, New JerseyCreate job alerts

Senior Technology Risk Management Associate Location: New York (Hybrid – 3 days onsite) I’m working with a well-established global alternative investment firm that is looking to add a Senior Technology Risk Management Associate to their technology organization. This role sits at the intersection of technology, security, and risk, working closely with infrastructure, security, and business teams to help strengthen governance and risk management practices across the environment. The position is a mix of hands-on risk assessment, audit support, and process improvement, with exposure to both traditional infrastructure and cloud-based systems. What You’ll Be Doing • Partner with technology and security teams to identify and manage technology risks, • Support external audits and regulatory reviews, including documentation and walkthroughs, • Evaluate technology controls and security processes and help improve them, • Conduct risk assessments of applications, infrastructure, and third-party services, • Track and coordinate risk remediation efforts with internal teams, • Help maintain an inventory of systems and services while identifying potential control gaps, • Contribute to automation and process improvement initiatives, • ~5+ years of experience in technology risk, information security, IT audit, or compliance, • Strong understanding of technology environments (infrastructure, applications, cloud), • Experience working with risk frameworks or audit processes, • Ability to translate technical risks into business impact, • Exposure to cloud environments (Azure or AWS), • Familiarity with Windows infrastructure or database environments, • Experience with automation or scripting (PowerShell or Python), • Knowledge of frameworks like SOC, ISO, NIST, or SOX Base salary typically falls in the $150k – $175k range, plus bonus and strong benefits. The Phoenix Group Advisors is an equal opportunity employer. We are committed to creating a diverse and inclusive workplace and prohibit discrimination and harassment of any kind based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. We strive to attract talented individuals from all backgrounds and provide equal employment opportunities to all employees and applicants for employment.

Judi Health is an enterprise health technology company providing a comprehensive suite of solutions for employers and health plans, including: • Capital Rx, a public benefit corporation delivering full-service pharmacy benefit management (PBM) solutions to self-insured employers,, • Judi Health, which offers full-service health benefit management solutions to employers, TPAs, and health plans, and Location: Remote Position Summary: The IT Security & Compliance Analyst works collaboratively within the IT department toidentify,manageand communicate security risks, implement andmonitorsecurity compliance, and respond to audits effectively. Position Responsibilities: • Collaborate with the engineering departments to implement security controls from approved security frameworks and drive best IT practices., • Interface with internal partner teams to help drive best practices and compliance., • Evaluate and perform Risk Assessments of new software solutions with internal partners., • Drive deployment of new systems/solutions as needed., • Write procedure documentation for end users as needed to facilitate process improvement., • Help develop IT security training content and drive completion of required security training in collaboration with Human Resources., • Respond to complex security questionnaires, RFP/RFI requests, and client audits., • Facilitate end-to-end evidence gathering for external audits, ensuring all technical and administrative artifacts align strictly with security control requirements and regulatory frameworks., • Evaluate, identify, and remediate the risks associated with current vendors, new vendor acquisitions, and consumer data exchanges., • Perform risk oversight tasks of vendor security compliance., • Help run Internal, external and vendor related audits., • Conduct security analysis of deployed software., • Monitor for risks to the enterprise and to implemented controls, • Identify, maintain, and publish the requirements for the IT department to achieve compliance and privacy standards in SOC 2, HITRUST, FedRAMP, and other frameworks., • Work with the internal team in communicating related security notifications and IT controls within the organization while collaborating with teams and vendors on changes, remediations, and updates., • Experience with incident management Drive use cases to enable threat detection and hunting based on threat intelligence frameworks., • Experience with Agile and/or Kanban with emphasis on Scrum to drive continuous process improvement., • Experience related to duties and responsibilities., • Experience working in Governance, Risk, and Compliance., • A customer-oriented approach to problem resolution, • Experience with IT control auditing and compliance., • Working knowledge of Software Development Lifecycle concepts and processes, • Working knowledge of cloud providers with respect to IT Security & Compliance controls and practices., • General knowledge of frameworks and controls: NIST 800-53, FedRAMP, HITRUST, SOC 2, PCI, ISO 27001, • General knowledge of HIPAA and the requirements to protect PHI., • Ability to communicate concepts in a concise form to management and cross-functional teams.departments or teams verbally, in writing, and through pictures or diagrams whenappropriate., • Excellent written, oral, instructional, presentation, and interpersonal skills focused on motivation and positive attitude., • Highly self-motivated with the ability to prioritize tasks and work independently., • Ability to work quickly and efficiently., • Desire to work at a rapidly growing organization in healthcare., • Experience working with remote users in a distributed environment., • Experience with Office 365 suite, Atlassian suite, Vanta (or other GRC tools)., • CCSK, • CCAK, • CISA, • AWS Cloud Practitioner Judi Health values a diverse workplace and celebrates the diversity that each employee brings to the table. We are proud to provide equal employment opportunities to all employees and applicants for employment and prohibit discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, medical condition, genetic information, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. By submitting an application, you agree to the retention of your personal data for consideration for a future position at Judi Health. More details about Judi Health's privacy practices can be found at___.

Job Location(s) US-NY-New York Job ID 2025-4136 Division School of Management Position Type Adjunct Type Regular Part-Time Category School of Management New York Institute of Technology's six schools and colleges offer undergraduate, graduate, and professional degree programs in in-demand disciplines including computer science, data science, and cybersecurity; biology, health professions, and medicine; architecture and design; engineering; IT and digital technologies; management; and energy and sustainability. A nonprofit, independent, private, and nonsectarian institute of higher education founded in 1955, it welcomes nearly 8,000 students worldwide. The university has campuses in New York City and Long Island, New York; Jonesboro, Arkansas; and Vancouver, British Columbia, as well as programs around the world. More than 112,000 alumni are part of an engaged network of physicians, architects, scientists, engineers, business leaders, digital artists, and healthcare professionals. Together, the university's community of doers, makers, healers, and innovators empowers graduates to change the world, solve 21st-century challenges, and reinvent the future. For more information, visit nyit.edu. Teach undergraduate and/or graduate-level finance courses in alignment with program goals and institutional standards. • Develop and deliver engaging lectures, class discussions, case studies, and relevant assignments that align with course objectives and learning outcomes., • Provide timely, constructive feedback and academic guidance to support student learning, engagement, and skill development., • Create, administer, and grade assessments fairly and efficiently, including exams, quizzes, presentations, and projects., • Maintain up-to-date knowledge of finance principles, regulatory changes, and best practices., • Utilize learning management systems (e.g., Canvas) for course delivery, communication, grading, and material sharing., • Foster an inclusive and respectful learning environment that encourages participation, critical thinking, and professional growth., • Be available to students during scheduled office hours or by appointment for academic advising, support, and mentorship., • Collaborate with program directors and departmental faculty to continuously improve curriculum, assessments, and student learning outcomes., • Ensure compliance with institutional policies, accreditation standards, and academic integrity guidelines., • Attend and participate in faculty meetings, orientation sessions, training workshops, or department planning as required., • Engage in professional development to stay current in the finance field and higher education instruction., • Support assessment and accreditation activities by maintaining accurate records and submitting required reports or materials Master of Business Administration (MBA) or an equivalent degree from an accredited institution. Flexible availability, with the ability to teach during daytime hours. Preferred Qualifications: Prior teaching experience. Relevant professional certifications (e.g., CFTP, CFA, CBP, CISA,) are preferred. New York Institute of Technology is an Equal Opportunity Employer - All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. In compliance with local legislation as well as to provide greater transparency to candidates, the annual base salary range for this position is listed. New York Tech considers factors such as (but not limited to) scope and responsibilities of the position, candidate experience/expertise, education/training, key skills, geographic location, internal peer equity as well as market, organizational considerations and/or applicable collective bargaining agreement when extending an offer. Adjunct Faculty offered hourly rate is contingent on applicable rank. USD $99.00/Hr. USD $108.00/Hr.

Chubb Insurance Solutions Agency (CISA) is seeking a highly motivated individual to assume the role of Commercial Associate Account Executive focusing on Property & Casualty business. Gather and analyze account specific information on property & casualty renewals and develop front line underwriting

It is preferred that the candidate possesses a certification as an Internal Auditor by the Institute of Internal Auditors (IIA), such as the Certified Internal Auditor (CIA) or Internal Audit Practitioner designation; Certified Information Systems Auditor (CISA); Certified Information Systems Securi

Certified Internal Auditor (CIA) or Certified Public Accountant (CPA) or Certified Regulatory Compliance Manager (CRCM) or Certified Information Systems Auditor (CISA) or Certified Bank Auditor (CBA). Riverwoods, IL: $87,700 - $100,100 for Senior Staff Auditor. Senior Staff Auditor, Retail Bank Audi

Certified Anti-Money Laundering Specialists (CAMS), Certified Internal Auditor (CIA), Certified Information Systems Analyst (CISA), Certified Regulatory Compliance Manager (CRCM) or other relevant professional certification. Prior financial services internal audit consulting or financial services th

Professional certifications in major cloud providers for security such as AWS Certified Security – Specialty, Microsoft Certified: Cybersecurity Architect Expert or Azure Security Engineer Associate and other related certificates such as Certified Information System Auditor (CISA), Certified Infor

Job DescriptionThe OpportunityWe’ve partnered with a leading global investment firm that is significantly expanding how AI is used across the enterprise. As part of that effort, they’re hiring a Lead AI Application Security Engineer to join their Information Security organization and strengthen how AI-related applications are designed, built, and operated securely. This is a senior, hands-on role for someone who brings deep application security experience and wants to apply those fundamentals to modern AI use cases inside a large, complex environment. What You’ll Be Working On- Applying application security best practices to AI-enabled applications, services, and workflows- Identifying and mitigating security risks associated with Large Language Models, AI agents, and supporting platforms- Embedding automated security checks such as SAST, SCA, and DAST into CI/CD pipelines- Performing threat modeling using established frameworks and applying those findings in agile delivery environments- Partnering closely with engineering, platform, and security teams to support secure development practices- Communicating security risks clearly and effectively to both technical teams and leadership What They’re Looking For- 8+ years of experience across application security, information security, platform security, DevSecOps, penetration testing, or related security disciplines- Strong understanding of AI and LLM security risks, including common failure modes and safety considerations- Experience automating security controls and testing directly within CI/CD pipelines- Hands-on experience with threat modeling frameworks such as STRIDE and operating in agile environments (Scrum, Kanban)- Proficiency in at least one programming language such as Python, Java, or .NET- Strong collaboration and communication skills, with the ability to explain security risks and tradeoffs to stakeholders Nice to Have- Experience with containerized and cloud-native environments (Kubernetes, containers, CI/CD, cloud providers)- Familiarity with AI platform components such as AI gateways, model orchestration layers, or custom API-based AI workflows- Awareness of AI and security regulatory frameworks such as NIST AI RMF, MITRE ATLAS, GDPR, or EU AI ActRelevant security certifications (CISSP, GIAC, CISA, or similar) CompensationBase salary ranges by location:- Southern California: $180,000–$285,000- San Antonio: $150,000–$235,000- New York: $190,000–$300,000 Compensation is aligned with experience and level.

Job Description Job Title: DevOps Engineer Job Type: Full-Time Location: Remote Job Summary: Join our team as a DevOps Engineer and play a pivotal role in shaping scalable, resilient infrastructure. You will drive the automation and optimization of CI/CD pipelines, leveraging cutting-edge technologies and cloud platforms. If you thrive in a dynamic environment and have a passion for enabling innovation while ensuring operational excellence, we want to hear from you. Key Responsibilities: • Design, implement, and maintain CI/CD pipelines using tools such as Jenkins, GitHub Actions, and Terraform., • Build, deploy, and manage containerized applications with Docker and Kubernetes in cloud-native environments (AWS/GCP)., • Collaborate closely with developers, architects, and stakeholders to improve infrastructure reliability, scalability, and performance., • Automate infrastructure provisioning, configuration, and monitoring to support continuous delivery., • 5+ years of hands-on experience in DevOps or related engineering roles., • Expertise in Docker, Kubernetes, AWS, and related container/cloud technologies., • Strong proficiency with DevOps automation tools (Terraform, GitHub, GitHub Actions) and version control systems., • Familiarity with security practices in CI/CD pipelines, including vulnerability scanning and compliance checks., • Knowledge of API security, container security, and public cloud security (AWS, GCP)., • Experience with security tools such as Prisma Cloud, SIEM, SOAR, Nessus, or CrowdStrike., • Understanding of security standards and compliance frameworks (PCI-DSS, HIPAA, SOX, GDPR, CCPA)., • Professional certifications such as CISM, CISSP, CISA, PCI-ISA, or PCIP.

Job DescriptionSalary: Manager, Internal Audit - JOB DESCRIPTION Company: Pagatech Limited (Paga or the Company) Sector: Financial Services Position: Manager, Internal Audit Location: Lagos, Nigeria Experience: Minimum of 8 years relevant experience. ABOUT PAGA Paga is on a mission to enable one billion Africans and millions of SMEs to pay, preserve hard-earned income, participate in global trade, and purchase goods and services at home and abroad. We have built a multicurrency, cloud-based payments and financial services engine that leverages multiple business services built on the same best-in-class infrastructure to serve the ecosystem through three businesses - Paga Engine (Enterprise B2B - ); Paga (Consumer - ); and Doroki (SME Retail - ). Paga has three licenses with the Central Bank of Nigeria mobile money, international remittance, and a microfinance bank. Paga is headquartered out of the United Kingdom and has operating entities in Nigeria, United States, and Ethiopia. Founded in 2009, Paga now serves millions of users and businesses across Africa and beyond. ABOUT THE ROLE The Internal Audit Manager is responsible for the management, leadership and execution of assurance and consulting engagements. The successful candidate will be responsible for planning, execution and reporting on internal audit engagements in line with approved annual risk-based internal audit plan, including developing procedures that mitigate fraud in the organization to achieve the audit objectives and goals of the organization. PRIMARY RESPONSIBILITIES • Provide leadership within the audit team on various assigned tasks and ensure satisfactory outcome, • Develop the organizations yearly audit risk-based plan, • Manage performance of audit assignments, review workpapers and audit reports; schedule and plan various audits as required, • Initiate different project planning and help to assess associated risks, • Help to verify the different financial situations as they relate to liabilities, assets, expenditures, receipts, and other transactions, • Take part in the coordination of audit assignments and ensure good interaction with the teams across the organization, external auditors and regulatory stakeholders, • Participate in the development and implementation of policies by providing short and long-term planning, • Recommend different methods that could help enhance and improve control measures, • Work with the management to resolve issues that may have been identified through audit findings, • Conduct follow-up on all audit tasks, • Research on the latest trends and other issues relating to the industry, • Guide and advise the team in the organization to ensure that the development and processes adopted are legal, and work to achieve a wide range of organizational goals, • Ensure proper documentation of the results of the audit evaluations, • Plan and allocate resources and staff in accordance with the skills, competencies and schedules, • Perform other related assignments as assigned by the management KEY COMPETENCIES • Ability to solve complex issues, • Strong leadership, • Attention to details, • Good judgment and decision-making ability, • Strong interpersonal and communication skills, • Ability to prioritize and take ownership, • Proficient in Ms Office - Excel, Word, and PowerPoint, • Maintain effective work relationships with cross functional teams KNOWLEDGE AND SKILL REQUIREMENTS • Bachelor's degree in any analytical field such as Accounting or Finance, • Must have 8+ years experience in a financial institution handling risk mgt/internal audit/control/compliance function, • Other professional qualifications like CIA, CISA, CAMS are an added advantage, • Strong knowledge of standards, procedures and general auditing policies, • You have a good knowledge of payment products and business solutions, • Able to lead, motivate, inspire, and influence team members and colleagues, • Must be a chartered accountant, • You have completed the mandatory NYSC Click on this link to apply for this job. We are an equal opportunity employer and value diversity and inclusion. We do not discriminate on grounds of colour, race, nationality, religion, age, ethnic origin, disability, gender, marital status, or sexual orientation in our employment practices.

Job DescriptionWho we are The real world is the next frontier, and at Metropolis, we are creating the artificial intelligence to make it responsive. We are pioneering the Recognition Economy — a future where mundane repetition disappears and being known unlocks access, comfort and belonging everywhere you go. From transforming parking into a seamless drive-in, drive-out experience for millions of Members to expanding our intelligence layer across retail and hospitality, we are building a world that feels instinctive and magical. The future isn't coming; it's here, and we need builders, innovators and problem solvers to help us create it. Who you are Metropolis is seeking a Senior IT Auditor to join our growing Finance and Internal Audit organization. As we scale our AI-driven platform across thousands of locations, ensuring the integrity, security, and compliance of our technology stack is paramount. You will be a key player in building out our internal audit function, focusing on the systems that power our computer vision, payment processing, and cloud infrastructure. What you'll do • Lead risk-based audits across our technology ecosystem, including cybersecurity, cloud operations (AWS), DevOps, and data privacy, • Support our SOX 404 efforts by evaluating IT General Controls (ITGCs) and automated application controls with a focus on automation and real-time monitoring, • Work closely with our Revenue Platform and Product teams to ensure "compliance by design" as we launch new verticals and payment features, • Leverage data analytics and AI tools to streamline audit testing, moving away from manual samples toward continuous assurance, • Clearly communicate audit findings and partner with stakeholders to track remediation and process improvementsWhat we're looking for, • 4+ years of IT Audit or Tech Risk experience, • Deep familiarity with AWS/Cloud security, SQL, ERP systems (e.g., NetSuite), and automated CI/CD pipelines, • A passion for AI and the "real world" technology Metropolis is building, • Deep understanding of how data flows through complex AWS environments and automated payment gateways, • Comfort with ambiguity, • Ability to design audit programs from the ground up for a high-growth tech environment, • Ability to translate complex technical risks into clear narratives for executive leadershipWhile not required, these are a plus:, • Bachelor's degree in Information Systems, Computer Science, Finance, or a related field, • Experience in both large-scale global consultancies and fast-paced startup settings Metropolis values in-person collaboration to drive innovation, strengthen culture, and enhance the Member experience. Our corporate team members hold to our office-first model, which requires employees to be on-site at least four days a week, fostering organic interactions that spark creativity and connection Metropolis may utilize an automated employment decision tool (AEDT) to assess or evaluate your candidacy for employment or promotion. AEDTs are used to assist in assessing a candidate's application relative to the required job qualifications and responsibilities listed in the job posting. As part of this process, Metropolis retains data relevant to your candidacy, including personal information, for a period that is reasonably necessary for the use of the tool. If you are hired for the position, your data may become part of your employee records. Metropolis Technologies is an equal opportunity employer. We make all hiring decisions based on merit, qualifications, and business needs, without regard to race, color, religion, sex (including gender identity, sexual orientation, or pregnancy), national origin, disability, veteran status, or any other protected characteristic under federal, state, or local law.

Job DescriptionAHEAD builds platforms for digital business. By weaving together advances in cloud infrastructure, automation and analytics, and software delivery, we help enterprises deliver on the promise of digital transformation. At AHEAD, we prioritize creating a culture of belonging, where all perspectives and voices are represented, valued, respected, and heard. We create spaces to empower everyone to speak up, make change, and drive the culture at AHEAD. We are an equal opportunity employer, and do not discriminate based on an individual's race, national origin, color, gender, gender identity, gender expression, sexual orientation, religion, age, disability, marital status, or any other protected characteristic under applicable law, whether actual or perceived. We embrace all candidates that will contribute to the diversification and enrichment of ideas and perspectives at AHEAD. The AHEAD Security Specialty Solutions Engineer (SSE) will be focused on security technologies and solutions. The SSE is considered a subject matter expert in this area, with responsibility for selling and designing complex security solutions. The SSE is also considered an organizational thought leader for security within the company. You will work in partnership with sales representatives, practice leaders, and other SSE team members to build a market strategy and assist with account planning for existing and prospective clients. As part of this strategy, you will help sales representatives identify potential security technologies and vendors to partner with for individual clients or in a given region. You will assist with driving this strategy throughout a given campaign. In partnership with other senior and principal SSEs in your practice, you will assist with diagrams, bill of materials, proposal content, and other documentation associated with active security sales campaigns. You will also assist with achieving the proper training and certifications necessary to sell the security solutions we are positioning. Time management and prioritization are essential attributes to be successful. In this capacity, you will work to define security strategies, compare and contrast alternative approaches, and build key relationships, as well as size and configure security products. Positioning and leveraging subject matter experts and other AHEAD consultants is a necessity to scale your effectiveness within accounts. Roles and Responsibilities • Active participation in the AHEAD Security team and related virtual teams., • Be a thought leader within the Solutions Engineering organization, responsible for designing, architecting, and, at times, consulting for AHEAD clients in the security domain., • Build skills, relationships, and industry credibility across many segments to drive product, services, and consulting sales in the security space., • Support the sales teams during engagements by providing advice, solutions, or proposals optimized to meet customer technical and business requirements., • Develop relationships with other Security SSE team members, leaders, and partners in support of sales objectives., • Strategize and execute technical sales calls., • Complete required pre-sales documentation (configurations, pricing, services, presentations, justifications, etc.) quickly and accurately., • Qualify sales opportunities in terms of customer technical requirements, decision-making process, and funding., • Present and market the design and value of proposed AHEAD security solutions and business justifications to customers, prospects, and AHEAD management., • Participate in the mentorship of entry-level team members., • Possess strong, detailed product/technology/industry knowledge in the security domain., • Knowledge of job-associated software and applications. Qualifications, • Experience with any SASE vendor is a significant differentiator, • 3 – 5 years technical experience with security controls in one or more areas such as: Firewalls, IDS/IPS, NTA, NDR, NGAV, EDR, SIEM, Vulnerability Scanning, DLP, Penetration Testing, • Experience in architecture design that brings together and integrates solutions across multiple vendors, • 3 - 5 years acting as a consultant for clients, advising on technical solutions and participating in pre-sales and solution development., • Familiarwith Public Cloud providers: AWS, Azure, GCP, • Ability to grasp new technology concepts quickly and assist others in understanding them as well., • Ability to evaluate new technologies and provide internal training, • Ability to understand customer needs, define requirements, and design solutions, • Ability to develop and present architectural recommendations and implementation/ assessment services, • Expertise with Vendor Configuration Tools Preferred Skills, • Excellent written and verbal communication skills, • Excellent presentation skills, • Strong Technical Aptitude, • Provide technical leadership assuring quality, maximizing team output, • Self-motivated Preferred Certifications, • Industry: CISSP, CISA

Job Description At Angi®, we've had one simple mission for 30 years: get jobs done well. We make it happen by connecting homeowners with reliable pros who have the skills they need — and connecting pros with homeowners who have the jobs they want. Angi at a glance: • Homeowners have turned to Angi for more than 300 million projects, • 1,000+ home service tasks covered Angi® is defining the future of the home services industry, creating an environment where homeowners, pros, and employees benefit from more jobs done well. For homeowners, our platform is a reliable way to find skilled pros. For pros, we're a reliable business partner who helps them find the winnable work they want, when they want. For employees, we're an amazing place to call home. We can't wait to welcome you. About the Role The Senior Manager, Internal Audit – IT will lead Angi's IT audit efforts, overseeing planning, scoping, resource management (including offshore teams), and the delivery of high-quality audits. This role goes beyond traditional assurance work—providing advisory support upfront to help shape control design and implementation before risks materialize. You'll work cross-functionally with teams across product, engineering, finance and accounting, and operations to stay aligned on key initiatives and emerging risks. Success in this role requires a self-starter with strong communication skills and the ability to build trust across a dynamic, fast-paced organization. What you'll do As the Senior Manager, Internal Audit – IT, you will report directly to the VP of Internal Audit and serve as the company's leader for all technology-related audit work. You will be responsible for planning, executing, and overseeing a wide range of IT audits, including SOX ITGC testing and application controls testing, infrastructure reviews, IT risk assessments, and various operational audits. You'll also manage a team of offshore resources, ensuring their work aligns with Angi's quality standards and strategic objectives. In this role, you'll be more than just an auditor — you'll be a trusted advisor and partner to the business. Angi's internal audit team is highly engaged with stakeholders upfront, helping guide change before it happens, not just auditing after-the-fact. You'll collaborate closely with business process auditors and leaders across engineering, product, finance, and cybersecurity to proactively identify risks and drive improvements in controls and operations. You will also partner closely with the IT Compliance team, which maintains key frameworks including SOX and PCI. Key Responsibilities • Lead the IT internal audit function by developing and executing the annual audit plan for IT audits, including SOX ITGCs, cloud computing, third-party risk, and system development and transformation initiatives., • Oversee the SOX ITGC program, including testing design and operating effectiveness, and ensure work is performed at a level that enables external auditor reliance., • Manage outsourced audit resources, ensuring high-quality work product, consistency with internal methodologies, and clear, timely communication., • Partner cross-functionally with business and technology teams to understand upcoming system implementations, migrations, and control changes, and provide advisory input early in the process., • Coordinate with business process auditors to ensure integrated audit coverage across systems and processes., • Conduct periodic audits or assessments of cybersecurity risks and related IT controls, in collaboration with internal security stakeholders., • Serve as a subject matter expert on IT controls and risk management, offering insights that support business goals while safeguarding the enterprise., • Drive continuous improvement of audit methodologies, tools, and practices, and maintain documentation in compliance with professional and regulatory standards., • Present findings and recommendations to senior leadership and support the remediation process by providing practical, risk-based guidance., • You have 8+ years of relevant IT audit, IT risk management, or IT controls experience, with a strong preference for candidates who have worked in a Big 4 accounting firm., • You have proven leadership experience in managing end-to-end IT audits, including SOX 404, pre/ post implementation reviews, maturity assessments using IT frameworks, and other operational audits which rely heavily on system functionality., • You are a self-starter who thrives in a fast-paced environment and takes full ownership of your workstream, delivering with minimal oversight., • You are a strong communicator, capable of engaging with both technical and non-technical stakeholders across all levels of the organization., • You have experience managing offshore audit teams or third-party vendors, with a focus on maintaining quality and efficiency., • You are comfortable providing advisory input on systems and controls during project planning, not just identifying gaps after the fact., • You have a strong understanding of IT frameworks and regulatory requirements, such as COBIT, ISO, NIST, and COSO., • Professional certifications such as CISA, CIA, or CPA are strongly preferred. We know that the best ideas come from teams where diverse points of view uncover new solutions to hard problems. We welcome and value individuals who bring diverse life experiences, educational backgrounds, cultures, and work experiences. Our hiring process may utilize artificial intelligence (AI) tools to assist in candidate screening and assessment. Our AI tools are designed to complement, not replace, human decision-making. Compensation & Benefits • The salary band for this position ranges from $135,000 - $185,000 commensurate with experience and performance. Compensation may vary based on factors such as cost of living., • This position will be eligible for a competitive year end performance bonus & equity package., • Full medical, dental, vision package to fit your needs, • Flexible vacation policy; work hard and take time when you need it, • Pet discount plans & retirement plan with company match (401K), • The rare opportunity to work with sharp, motivated teammates solving some of the most unique challenges and changing the world #LI-Remote

Job DescriptionFrom the beginning, our goal was to establish an advisory firm that stands apart from the rest – one that is grounded in our Core Values and dedicated to creating a positive experience not just for our clients, but for our people too. We firmly believe in the strength of collaboration, enthusiasm, generosity, and perseverance as the driving forces behind our success. With advisory solutions spanning accounting and risk, technology-enabled transformation, and transactions, we partner with our clients to solve today’s challenges and deliver present and future value. Our commitment to our people has earned us numerous awards including Inc5000's Fastest Growing Companies and Glassdoor's Best Places to Work. Explore what our employees have to say about our unique culture by clicking here. As a Manager in the Finance Transformation area at CrossCountry, you will play a pivotal role in guiding our Office of the CFO clients through the complexities of Finance strategy, operating model design and F&A operations. You will leverage your expertise to help organizations align their performance improvement and technology initiatives with their business goals, drive innovation, and achieve operational excellence. This role requires a strategic thinker with strong leadership capabilities and a deep understanding of finance function and industry leading practices.What You'll Do: • Lead client finance and/or accounting functions, including accounting and operational process improvements, financial system integration, financial close management enhancement, and system strategy/selection, • Design and advise on best practices for accounting processes and controls across various functional areas such as order-to-cash, procure-to-pay, record-to-report, financial reporting, and FP&A, • Provide guidance developing target operating models and managing change accordingly, • Assist clients in navigating complex corporate transactions, such as acquisition integrations, divestitures/carve-outs, and public company readiness, • Identify pain points and improvements in key process areas, including controls, and support the implementation of solutions, • Optimize and automate processes and controls to enhance efficiency, • Assist in system and people integrations, identifying efficiencies between the client’s accounting systems and other tools, • Contribute to developing and implementing firm-approved, AI-enabled solutions for clients, in accordance with company policies on data protection, intellectual property, and professional standards., • Stay informed about emerging AI tools and techniques and collaborate with firm leadership to identify compliant opportunities to enhance client solutions and internal processes.What You'll Bring:, • 5+ years of relevant experience in high-growth or pre-IPO commercial/non-financial services firms, • Prior experience in professional services (public accounting or advisory firm), • Expertise in finance transformation, system implementation, operations improvement, business process improvement, and acquisition and divestiture implementation in the commercial industry, • Experience with Finance Operating Model design, Close Management, Financial Reporting, Integrations, IPO readiness, and Internal Controls, • ERP system experience in Workday, Oracle, SAP, Netsuite or Intacct, • Experience with CFO suite technologies and other systems used for FP&A, Close Automation, P2P, and Consolidation, • Proven leadership experience fostering an environment of collaboration and excellence, • Comfort with AI: Demonstrated ability to responsibly explore and adopt firm-approved AI tools to enhance productivity and innovation., • Continuous Learning Mindset: Openness to learning and applying emerging technologies including AI and automation in alignment with firm policies and client standards.Qualifications:, • Bachelor’s degree in Accounting, Business, Finance or other technical discipline

Job DescriptionAmalgamated Bank seeks a dedicated Chief Information Security Officer to be responsible for designing and implementing the Bank’s Information Security program while protecting the business from cyber security threats. This is a hybrid role reporting to our NYC headquarters. By joining our team, you’ll be joining a Bank that believes that maintaining a diverse and inclusive workplace where everyone feels valued and respected is essential for us to grow as a company. We are dedicated to building a more equitable world in our everyday practices by embracing the values of our employees and customers. Essential Job Functions: • Develop and maintain an Enterprise Information Security Program, • Design a critical response process for Cyber Security incidents, • Identify, report and control Cyber Security incidents, • Manage and train Information Security staff and develop and deliver Information Security training to the Bank’s employees, • Continuously monitor threats to the Bank’s operating environment, • Approve and administer identity access policies, • Maintain a current understanding of the IT and Cyber Security threat landscape for the industry, • Ensure Bank compliance with relevant Information Security laws and applicable regulations, • Lead, and assess the results of periodic security tests, including internal and external penetration testing and phishing, • Schedule table-top exercises for Crisis Team and senior management and report findings to management, including implementation of recommendations, • Review and approve Information Security policies, procedures and controls, • Ensure that they are kept current and are communicated to staff/consultants, • Ensure staff/vendor compliance with the Bank’s security policies and procedures, • Manage a team of employees, contractors and vendors involved in Information Security, • Brief the Executive Team on status and risks, overall strategy and necessary budget, • Communicate best practices and risks to the Bank, • Perform a risk assessment of the Bank’s vulnerabilities in the Cybersecurity landscape and develop the Bank’s risk appetite for Information Security, • Develop Key Risk Indicators (KRIs) and dashboard metrics reporting to both the Management Team and the Board of Directors, • Establish strong working relationships with the Heads of IT and business lines, • Develop and present quarterly reports to the Board of Directors. Knowledge, Skills and Experience Requirements: • Master’s degree or equivalent experience, • Minimum of ten (10) years of experience, at least five (5) years focused on managing information security in a complex, matrixed environment, • Extensive experience in regulated industries, especially financial services; banking experience is preferred, • Proven ability to create and maintain enterprise-level information security programs, • Motivated individual with strong analytical, problem solving and root cause analysis skills, • Ability to work on multiple, time-critical projects simultaneously, • Knowledge of Data Privacy Laws, • Working knowledge of information security engineering concepts and principles, • Familiarity with DFS 500 and similar regulations, • Experience working with external regulators, including NY DFS and FDIC, • Excellent verbal and written communications, including presentation of complex data in easily, understood ways, • Ability to confidently interact at multiple levels in the organization and lead cross-departmental team projects, • Experience presenting to senior levels, including Board of Directors, • CISSP, CISA or CISM designations preferred Our job titles may span more than one career level. The starting base salary for this role is between $240,000.00 – $260,000.00. The actual base pay is dependent upon many factors, such as: training, transferrable skills, work experience, business needs and market demands. The base pay range is subject to change and may be modified in the future. Amalgamated Bank is an Equal Opportunity and Affirmative Action Employer, Minorities / Females / Individuals with Disability / Veterans. AmeriCorps, Peace Corps and other national service alumni are encouraged to apply. View our Pay Transparency Statement. Submission of a resume or any information regarding your qualifications does not constitute a promise or offer of employment. At Amalgamated Bank, we consider an applicant to be someone who has interviewed at least once, in person, with the hiring manager. Amalgamated Bank does not sponsor applicants for work visas. Hybrid Work Model Effective February 18, 2025, employees in office-based positions will be working a Hybrid work schedule consisting of three days or more, on-site per week, Monday - Thursday, although the specific days may vary by site or organization, with Friday designated as a remote-working day, unless business critical tasks require an on-site presence. This Hybrid work model does not apply to, and daily in-person attendance is required for, the contact center, branch service roles, and general services where the work to be performed is located at a Company site; positions covered by a collective-bargaining agreement (unless the agreement provides for hybrid work); or any other position for which the Company has determined the job requirements cannot be reasonably met working remotely. Please note, this Hybrid work model guidance does not apply to roles that have been designated as “remote”. Search Firm Representatives- Please Read Carefully Amalgamated Bank does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for the position will be deemed the sole property of our company. No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place, introductions are position specific. Please, no phone calls or emails.

Job DescriptionJob Title - Senior IT AuditorLocation - 405 Lexington Ave 14th floor, New York, NY 10174Job Summary:We are currently looking for a Senior IT Auditor with SOX experience to support our Internal Audit team. The job will include IT audit as well as some operational/compliance/process driven responsibilities including: • Conduct interviews and walkthroughs with company employees from a variety of departments, in support of the firm’s Internal Audit and SOX 404 efforts, • Document and analyze processes, risk and control matrices supporting financial reporting and produce high-quality SOX narratives, • Perform IT and Compliance audit tests, including IT security risk assessments, • Partner with project managers to scope and perform system implementation audits and develop necessary related controls that impact current business environment, • Assist in preparing quarterly SOX testing plan and coordinating deliverables from management, • Review control testing performed by management for completeness and accuracy and assess the results, • Develop, execute and document security related IT control tests across applications, databases, and operating systems, • Coordinate with IT Security and with Development on the quality of our compliance programs including compliance with our SOC 2 reporting efforts, • Assist in the preparation of audit reports and track milestones and actions to completion of issues and recommendations identified, • Manage multiple assignments and communicate issues or roadblocks that may delay completing projects timely, • Develop value added, high-quality process improvement recommendations, • Participate and support key department projects outside of traditional audit activities, • Perform administrative tasks as needed, • Assist with special projects as requested by managementSkills and Knowledge Desired:, • 2-3 years of IT Internal Audit experience, CISA a plus, • 1+ years of experience in documenting and testing SOX requirements, • Ability to independently assess the design and effectiveness of controls, determine the potential impact of control issues and make helpful recommendations, • Exhibit sound judgment and decision-making skills, • Proven analytical ability, • Excellent verbal and written communication skills, • Experience with AuditBoard, TeamMate, or ACL a plus, • Experience with operational and financial audit a plus, • Ability to travel 5-10% per year

Job DescriptionPosition Summary The AI/Cloud Security Engineer is responsible for testing, installing, configuring, and maintaining cloud security solutions/tools. Additionally, AI/Cloud Security Engineer communicates findings, incidents, and concerns to security team members and leadership in a timely manner. The AI/Cloud Security Engineer should possess a strong background in AI usage to secure MedReview’s Cloud and AI Infrastructure. This role is onsite Monday - Thursday and remote on Fridays. Job Responsibilities: • Standardizing Azure Security best practices, processes, and procedures., • Experience using AI/ML-driven security tools for anomaly detection, behavioral analysis, bias testing, and threat intelligence correlation., • Ability to design, deploy, and tune AI-based security models to identify malicious traffic, lateral movement, and zero-day threats., • Proficiency in integrating AI-powered SIEM, SOAR, NDR, and XDR platforms to automate incident detection and response., • Knowledge of adversarial AI risks, including model poisoning, evasion attacks, and data integrity threats, and how to mitigate them., • Experience using AI to reduce false positives, prioritize alerts, and improve mean time to detect (MTTD) and respond (MTTR)., • Extensive Knowledge of utilizing and implementing Microsoft Purview and all its features. DLP, Auditing, etc., • Microsoft Entra Internet Access, Microsoft Entra Private Access, and Global Secure Access, • M365 Compliance and Security Centers, • Collaborating with team members to develop and document security standards and policies that align with industry’s best practices., • Finding gaps with the current security posture and assisting with finding new security products, installation, configuration, and policies & procedures., • Monitoring cloud infrastructure for security breaches. Security incident response and forensic investigation., • Investigations into how incidents and/or breaches occur and Root Cause Analyses (RCA) as a member of the incident response team., • Participation in security tabletop exercises.Required Experience:, • Very strong hands on 5-10 years' experience in Cloud Information Security and AI Security Engineering., • Must demonstrate hands-on experience levering AI and machine learning technologies to enhance overall security., • Strong Identity and Access Management (IAM), Role-Based access Control (RBAC) experience, • Strong Purview Environment Experience, • Experience monitoring Cloud Infrastructure and systems for security breaches or intrusions and working with SOC team to remediate., • Experience in some specific vertical industry (Healthcare) preferred., • Documentation of security tools, deployment configuration, incident reports, etc., • CISSP, CISM, CISA, CCSP, ITIL, IaaS, PaaS, SaaS, Azure Security Engineer Associate, or other related certification preferred., • Ability to communicate technical information in a clear manner, both written and verbally, to end users, • Experience with HIPAA, HITRUST, ISO 42001 ISO 27001, ISO 27002, URAC regulations and awareness and/or experience with CMS, NIST and other healthcare related regulations preferred., • Availability to work nights and weekends during (un)planned outages and other special circumstances, with 24/7 accountability., • Availability to enter on call rotation. FZS0onPR06

Job DescriptionAbout the Company e.l.f. Beauty, Inc. stands with every eye, lip, face and paw. Our deep commitment to clean, cruelty free beauty at an incredible value has fueled the success of our flagship brand e.l.f. Cosmetics since 2004 and driven our portfolio expansion. Today, our multi-brand portfolio includes e.l.f. Cosmetics, e.l.f. SKIN, pioneering clean beauty brand Well People, Keys Soulcare, a groundbreaking lifestyle beauty brand created with Alicia Keys, Naturium, high-performance, biocompatible, clinically-effective and accessible skin care, and our newest brand, rhode, a line of curated skincare essentials, formulated for a variety of skin types and needs with high performance ingredients, it’s a daily routine that nourishes your skin barrier over time. In our Fiscal year 25, we had net sales of $1 Billion and our business performance has been nothing short of extraordinary with 28 consecutive quarters of net sales growth. We are the #2 mass cosmetics brand in the US and are the fastest growing mass cosmetics brand among the top 5. Our total compensation philosophy offers every full-time new hire competitive pay and benefits, bonus eligibility (200% of target over the last six fiscal years), equity, flexible time off, year-round half-day Fridays, and a hybrid 3 day in office, 2 day at home work environment. We believe the combination of our unique culture, total compensation, workplace flexibility and care for the team is unmatched across not just beauty but any industry. Visit our Career Page to learn more about our team: Position Summary: We are seeking a highly skilled Sr. Engineer, IT Security to lead enterprise-wide cybersecurity initiatives and strengthen our security posture across on-premises and cloud environments. This role involves designing and implementing advanced security solutions, including Zero Trust, DLP, Cloud Security, Network Segmentation, IAM, and Security Automation. The ideal candidate will collaborate with cross-functional teams to identify risks, develop mitigation strategies, ensure regulatory compliance, and proactively defend against evolving threats while safeguarding our systems, data, and infrastructure.Responsibilities: • Design, build, deploy, and maintain enterprise security technologies and solutions aligned with business objectives, compliance requirements, and the cybersecurity program., • Develop, document, and enforce security policies, standards, and procedures based on frameworks such as NIST, CIS, ISO 27001, and SOX while advancing overall security maturity, governance, and processes., • Lead strategic security initiatives, including Zero Trust architecture, Data Loss Prevention (DLP), Cloud Security, Network Segmentation, IAM, Endpoint Security modernization, and security automation., • Manage and improve email security, DNS security, and other protective controls to defend against phishing, malware, data exfiltration, and domain-based threats., • Lead vulnerability management programs and drive remediation efforts, providing visibility into risks and progress to stakeholders., • Oversee incident response lifecycle—detection, analysis, containment, remediation, post-incident review—and continuously enhance disaster recovery and business continuity plans., • Monitor and analyze security events and network activity (e.g., traffic analysis, host behavior, forensics, kill chain, Windows event analysis), tuning tools, and event correlation for accurate threat detection., • Collaborate with IT, DevOps, and digital teams to embed security into system design, application development, deployment pipelines, and cloud infrastructure., • Evaluate and review vendor and partner security practices to ensure alignment with organizational standards., • Produce regular security dashboards and metrics to report on incidents, threats, and operational effectiveness., • Lead security awareness training, mentor junior engineers, and guide cross-functional teams on secure design principles and best practices., • Stay current on emerging threats, vulnerabilities, and technologies to enhance enterprise resilience.Requirements:, • Bachelor’s degree in Computer Science, Cybersecurity, or related field; Master’s preferred., • 7+ years of experience in information security engineering, architecture, or operations., • Expertise in cloud security (AWS, Azure, GCP), data protection, IAM/SSO/MFA, email and DNS security, and secure network architecture., • Hands-on experience with key security technologies: firewalls, VPN, NAC, EDR/MDR, IPS/IDS, SIEM, DLP, vulnerability management, and email security platforms (Proofpoint, Mimecast, Microsoft 365 Defender)., • Strong understanding of Zero Trust, endpoint protection, DevSecOps, security automation, and scripting (Python, PowerShell, Bash)., • Proven ability to lead incident response, risk assessments, threat detection, and remediation efforts., • Experience implementing DNS protection solutions (Cisco Umbrella, Cloudflare, Infoblox, Valimail)., • Knowledge of security frameworks and compliance standards: NIST CSF, CIS Controls, ISO 27001, SOX., • Demonstrated success in leading security awareness programs, mentoring team members, and advancing security program maturity., • Relevant certifications preferred: CISSP, CISM, CISA, GIAC, Microsoft Security certifications, AWS Security Specialty, Azure Security Engineer Associate., • Strong communication, leadership, and ability to manage multiple security initiatives.Must Have:Strong Technical Security Foundation & Architecture, • Deep knowledge of network, cloud, and endpoint security., • Hands-on experience with firewalls, SIEM tools (e.g., Splunk, Sentinel), EDR/XDR, IAM, and vulnerability management., • Understanding of encryption, authentication, and secure architecture design.Incident Response & Threat Management Skills, • Ability to detect, analyze, and respond to security incidents effectively., • Skilled in log analysis, threat hunting, and forensics., • Familiarity with MITRE ATT&CK, common attack techniques, and SOC operations.Risk Assessment & Communication, • Strong ability to assess vulnerabilities, prioritize risks, and implement mitigations., • Can translate technical findings into business impact and communicate clearly with both technical and non-technical teams.

Job Description We are looking for a Lead Information Security Architect who will be responsible for developing and maintaining a comprehensive information security architecture program and representing information security requirements for all technology solutions and business processes covering multiple technical disciplines, such as systems & networking infrastructure, DevOps, security, business applications, cloud security, and data architecture. The role oversees cybersecurity for our company's digital products, including software, firmware or products that contain code. This includes implementing a product security program designed to address cybersecurity across all stages of the product life cycle. This role identifies and oversees the mitigation of technical and operational threats; analyzes the security, supportability, and feasibility of new technology; and ensures conformance with regulatory guidelines and industry best practices. This position requires an extremely high level of analytical problem-solving skills to diagnose and resolve complex technical issues in addition to superlative process management and communication skills. Note: U.S. citizens and those authorized to work in the U.S. are encouraged to apply. We are unable to sponsor at this time. To be Successful in this Role • Develop an architectural vision to support the continued growth of the product suite, • Working knowledge of Data Security Best Practices: At Rest, In Flight, In Use, • Experience with privacy-enhancing technologies and encryption techniques., • Working knowledge of cloud security architecture strategies, frameworks, and reference models, • Proven ability to develop effective partnerships with senior management and peer organizations. Must be able to explain technical concepts and problems to nontechnical senior executives, • Ability to build Risk Models and analyze security weaknesses in complex technology deployments., • Provide security expertise and direction on projects related to cloud architecture and design, implementation, maintenance, governance, and risk management, • Work with governance teams to establish automated processes and best practices for AWS, Azure IAM policies, roles, identity federation, etc., • Conduct automated (preferred) or manual security validation of cloud templates and/or cloud infrastructure, • Collaborate with business units and corporate partners to ensure they build solutions consistent with the organization's policies, programs, architectural recommendations, and information security standards, • Develop, establish, enforce, and sustain the Information Security Architecture, including standards and guidelines for infrastructure solutions and technologies, integration methodologies and practices, development processes, hardware platforms, and enterprise data design., • Partner with stakeholders in building and implementing a robust, scalable, and agile information security architecture, • Partner with stakeholders in assessing the IT application & infrastructure portfolios today and design and execute the future state strategy to meet business objectives going forward., • Make recommendations on the strategic use of technology for leveraging business results and work with stakeholders to incorporate these recommendations into appropriate roadmaps and life cycle plans., • Anticipate and ensure alignment with long-term business requirements, ensuring identified change is reflected in the appropriate roadmaps, providing thought leadership both internally and externally, • Minimize the number of architectural components and total cost of ownership while maintaining maximum of functional flexibility, reliability, and security., • Must be able to balance the role of strategist with urgency while simultaneously managing and delivering results in a growing and fast-paced environment., • Must demonstrate the ability to manage via influence and have the credibility and interpersonal skills to become respected as a thought leader. Must be capable of articulating pragmatic, sensible, and simple solutions while executing across multiple business and technical perspectives., • Act as a role model for service mentality, building long-term relationships with key internal customers and stakeholders, while remaining receptive to the customer's needs, • Facilitate and steward the documenting of the architecture design and analysis work, including the capture and mapping of the relationships between architecture components. You Will Have • 8+ years’ experience dedicated to information security architecture required with expert knowledge in building defense in-depth reference architecture, • Required industry security certification (e.g., CISSP, CISM, CISA, CCSP, etc.), • Familiarity with information management practices, system development life cycle management, IT services management, agile and lean methodologies, infrastructure, and operations., • Knowledge of business ecosystems, SaaS, infrastructure as a service (IaaS), platform as a service (PaaS), SOA, APIs, open data, microservices, event-driven IT and predictive analytics., • Hands-on experience with Cloud Technologies AWS, Azure & GCP, • Good understanding of security management solutions, including IDS, IPS, SIEM, Vulnerability Scanning, Denial of Service, and Continued Compliance, • Experience with attacks and mitigation methods, with experience working in two or more of the following: Network protocols and secure network design; Operating system internals and hardening (e.g. Windows, Linux, OS X, Android); Web application and browser security; Security assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; Security monitoring and intrusion detection, Incident response and forensics; Development of security tools, automation or frameworks, • Experience in managing and contributing to incident response, • Extensive experience in developing strategic information security plans, including the development of baseline security standards, information system hardening guides, and information security requirements documentation., • Excellent analytical skills, organizational, time management, and problem-solving skills are essential.is work, including the capture and mapping of the relationships between architecture components.

Job Description:\n\nPlanned Parenthood is the nation’s leading provider and advocate of high-quality, affordable sexual and reproductive health care for all people, as well as the nation’s largest provider of sex education. With health centers across the country, Planned Parenthood organizations serve all patients with care and compassion, with respect, and without judgment, striving to create equitable access to health care. Through health centers, programs in schools and communities, and online resources, Planned Parenthood is a trusted source of reliable education and information that allows people to make informed health decisions. We do all this because we care passionately about helping people lead healthier lives. Planned Parenthood Federation of America (PPFA) is a 501(c)(3) charitable organization that supports the independently incorporated Planned Parenthood affiliates operating health centers across the U.S. Planned Parenthood Action Fund is an independent, nonpartisan, not-for-profit membership organization formed as the advocacy and political arm of Planned Parenthood Federation of America. The Action Fund engages in educational, advocacy, and electoral activity, including grassroots organizing, legislative advocacy, and voter education. Planned Parenthood Federation of America (PPFA) and Planned Parenthood Action Fund seek a National Director, Information Security. This job reports to the Deputy Chief Information Security Officer (CISO) in the Information Security division of PPFA. The Office of Information Security provides the strategy, implementation, and oversight of the information security program that safeguards the data entrusted to Planned Parenthood by its patients, supporters, donors, and staff.Purpose:The National Director, Information Security is a strategic leader of the Information Security team, responsible for the people, processes, and cyber technologies required to protect PPFA and the entire federation’s information and assets.Responsibilities include technical oversight of PPFA’s complex portfolio of the Information Security technology stack, while managing the National Office information security operations including but not limited to day to day information security operations in partnership with our MSSP co-managed services, vulnerability management, cyber threat intelligence, incident response and all related cyber services.This role will oversee the InfoSec Architecture and Engineering tower, ensuring Secure Software Development Life Cycle (SSDLC) integration as well as Continuous Integration (CI), and Continuous Delivery/Deployment (CD) across the National Office.This role is also critical in providing Affiliate InfoSec Operations support in partnership with Affiliate Tech Services and our Managed Security Services Provider. This position brings transformative insight to Information Security products and services through leadership and innovation, accelerating the organization’s ability in managing an evolving threat landscape.The National Director, Information Security serves as a subject matter expert and liaison, bridging the InfoSec team with all divisions under Tech Strategy and Services to ensure PPFA’s information security program is comprehensive, and in compliance with industry standard frameworks, regulations and compliance requirements.This role involves collaborating with National Office departments and teams, affiliates and ancillaries, to provide expert guidance, oversight, and support on a range of security initiatives.The National Director will also play a key role in identifying security gaps, monitoring and providing guidance on remediation activities, developing and advocating for security best practices, and fostering a collaborative security environment across the federation.Engagement:The National Director, Information Security will engage with staff at all levels within PPFA, Affiliates, and Ancillaries. They will also be leading and mentoring direct and indirect reports. LeadershipProven senior leader in managing diverse, distributed technical and operational teams with strong meeting management, relationship building and negotiating skills; able to gain trust of diverse stakeholders.Advances and challenges the InfoSec team thinking to embrace transformative new approaches to work.Partners across the Information Technology and Information Security organization to provide strategic and operational direction for InfoSec’s annual business planning, cyber technology roadmaps, industry trends and CISO priorities.Ability to translate technical information into easily understandable information for non-technical audiences.Demonstrates consistent, engaging insight which attracts attention and builds/expands collaborative networks with external vendor partners for MSSP and tech stack vendors.Ability to discuss and present on Security topics to various executive management groups from both local and organization wide entities. Vendor ManagementAble to manage in-house and vendor teams and ensure technical SLAs are met with ability to hold vendors accountable to SLAs. Form corrective action plans accordingly to manage poor vendor performance.Direct experience with technical vendor management across MSSP and all cyber tech vendors.Proven negotiation skills and industry relationshipsAssist in vendor security assessmentsAssist in legal in vendor security requirements Incident ManagementIn partnership with CISO and our Incident Response/Threat & Vulnerability Management team, ensure proper handling of Technical Security Incident Response CommunicationsSenior leader with ability to work in a Federated model and provide insight and communications to technical and non-technical senior level staffExceptional consulting skillset with ability to provide appropriate direction to other groups and executives on security matters.Proven ability to present and discuss highly complex technical information to users with varying technical expertise.Serve as a liaison to IT Infrastructure & Services and InfoSec in regards to industry standard security, technical controls as well provide regulatory and compliance in areas including industry best practices (NIST), HIPAA Security Rule compliance and PCI-DSS compliance.Lead cross-functional engagement and change management across PPFA and Affiliates to advance security initiatives, remediate configuration and compliance gaps in shared platforms (e.g., Okta, CrowdStrike, Proofpoint), and support accreditation readiness through education, collaboration, and hands-on guidance.Delivery:Accountable for monitoring and analyzing PPFA’s security posture on an ongoing basis and managing the InfoSec operation’s team to protect, detect and respond to security issues according to standard operating procedures and best practices.Identifies opportunities and challenges for continued improvement across Information Security capabilities, delivering innovative and breakthrough cyber tech solutions. Security OperationsOversee the National Office Security Operations including technology stack management for all cyber tech components.Lead and manage technology roadmaps and tech life cycle management for each tech component eg. ( Email Gateway, EDR, IAM, SIEM, Vuln Mgmt, etc)Provide technical oversight to ensure all tech stack components are configured, standard, stable according to SLAs and best practices.Drive SIEM alert tuning and provide technical leadership to MSSP to drive effective and efficient 24v7x365 alert monitoring.Responsible for management of standard operating procedures and processes; security policy development and enforcement; security risk assessments, audits, and remediations.Creates new InfoSec operations processes and approaches which accelerate delivery of shared services program and PPFA cyber support network.Act as the technical expert on all cyber technology products in collaboration with Affiliate Tech Services and IT to develop new cyber security services for the National Office and the federation.Act as a technical advisor and thought leader to the affiliates regarding cyber technology operational support for the InfoSec tech stack. InfoSec Architecture and EngineeringLead the InfoSec Architecture & Engineering function, overseeing the evaluation, design, and implementation of security technologies and enterprise architecture aligned to business objectives, industry frameworks (NIST, ISO 27001, CIS), and regulatory requirements (HIPAA, GDPR, PCI-DSS).Embed security into the software development lifecycle (SSDLC/DevSecOps) by defining secure architecture and coding standards, driving threat modeling and risk assessments, and ensuring security requirements are built into system and application specifications.Partner across IT and business units to integrate monitoring, detection, and response capabilities, continuously improve security tooling and processes, and strengthen the organization’s security posture through innovation, collaboration, and technology adoption Incident ResponseIn partnership with PPFA CISO, act as a co-IR lead throughout incident scenarios and provide subject matter expertise in cybersecurity incident response.Support the development and execution of IR Tabletop exercises annually, including all relevant levels of management.Assist in the development and implementation of Incident Response Plans.Oversee the executive IR plan and continuously improve to reflect the dynamic aspects of the business.Security Thought LeadershipLead and evolve the strategic direction of Information Security technology capabilities in a collaborative, cross-discipline approach. Project senior-technical thought expertise on the information security strategy, and operational/technical implementation.Sought after as an expert on industry trends, current security technologies, news and events and how they impact the security policies, procedures and portfolio.Benchmark, analyze, and identify recommendations for the improvement and growth of PPFA’s technology and security operations and services to drive the advancement of division priorities Threat Management and IntelDrive both internal and external threat analysis and intelligence, tuning of security detection rules/policies/models, and implementation of effective countermeasures.Stay abreast of the security industry threat landscape and brief executives and leadership team on current intelligence.Lead collaborative efforts between physical and cybersecurity threat management elements.Review and recommend threat intel sources that match the needs of the organization. Reporting / MetricsTurns new concepts/approaches into functional reality through creation of InfoSec metrics and standards to drive optimization and operational excellence for all cyber tech products and services.Identify and drive assist in metrics development and management for both business and technical consumptionLeads report status, progress, operational & performance metrics and value to executives across PPFA.Collaborate across teams to ensure compliance with cybersecurity policies and developing reporting metrics to communicate the efficacy of tools and programsAct as Security Change Approver for InfoSec on the PPFA IT Change Management Board to ensure IT system and configuration changes are not detrimental to PPFA’s information security posture, are authorized, and disruptions to services provided by Information Security and Information Technology to the PPFA National Office and its Affiliates are minimized.Facilitate InfoSec Accreditation Office Hours.Performs other duties as assigned.Knowledge, Skills and Abilities (KSAs):Bachelor’s degree in computer science, information systems, computer engineering, system analysis, or a related field, or equivalent work experience.12+ years of IT and business/industry work experience including Information Security & Technology related experience.Certifications: At least one security industry certifications (i.e., CISSP , CISA, CISM, SANS).Progressive Leadership experience in managing technical functions and security engineering teams and influencing senior level management and key stakeholders.Proven ability to develop and implement strategic security initiatives.Strong understanding of security governance, risk management, and compliance frameworks.Excellent ability to conceive, draft, proofread and edit written materials quickly, including demonstrated ability to understand and communicate about complex, technical, or sensitive subjects in a clear, concise, and engaging manner.Experience managing outsourced managed security service provider (MSSP) or in-house security operations center (SOC).Knowledge of financial models and budgeting.Excellent organizational, collaborative leadership, decision-making and communication skills.Excellent business acumen and sound business judgment.Practical experience with modern information security technologies and vendor solutions to include but not limited to strong authentication, network security, endpoint security, cloud/SaaS/PaaS security, security information and event management, user behavior analytics, vulnerability management, incident response, information assurance, security operations, anti-DDoS SDLC, DevSecOps, mobile security, privacy, and regulatory compliance.Demonstrated experience integrating and operationalizing security frameworks such as: NIST CSF, ISO 27001, MITRE ATT&CK framework.Excellent skills in collaborating across divisions, functions, and geography, with a knack for engaging colleagues at all levels in projects and processes while continuing to own and drive them.Experience evaluating and maturing information security systems, controls, and processes, and leading internal control frameworks, regulatory compliance programs (e.g., HIPAA, PCI DSS, HITRUST, ISO 27001, NIST, CIS, SOC2, etc), and audit activities across complex environmentsExperience leading enterprise-level technology or security initiatives, preferably in a complex, federated or multi-site environment, including project management, system implementation, IT operations coordination, and day-to-day InfoSec operations (e.g., monitoring, incident response, SOC workflows, and vulnerability management).Flexibility and ability to adapt to quickly changing priorities and ambiguous situationsA deep commitment to Planned Parenthood’s mission of promoting Sexual and Reproductive Health Travel: 0-10% travel as needed Planned Parenthood's cultural ethos, "In This Together", reflects our commitment to building a workplace culture that fosters belonging, promotes learning throughout the employee lifecycle, and recognizes individual contributions to our mission. Planned Parenthood Federation of America participates in the E-Verify program. Planned Parenthood Federation of America is an equal employment opportunity employer and is committed to maintaining a non-discriminatory work environment, and does not discriminate against any employee or appl

Job Description Incisive. Inclusive. Invested. We’re Axinn. Experienced, tenacious, and always trial-ready, we are committed to understanding complex legal challenges that impact the future of our clients' businesses, globally. Focusing on antitrust, intellectual property, and high-stakes litigation, our extensive teams in the U.S. possess deep knowledge and client-side experience across a range of sectors, including technology, healthcare, life sciences, and consumer products. At Axinn, inclusivity is central to who we are. We have a purpose that goes beyond profit, which includes fostering a fair, welcoming workplace and supporting the communities where we live and work. We actively recognize talent and promote opportunities for all team members. By embracing the unique experiences and perspectives of our people, we fuel creativity and deliver results for our clients. The Firm’s Manager of Information Security is responsible for developing, implementing, and maintaining a comprehensive information security program to protect the firm’s data, systems, and client information. This role ensures the confidentiality, integrity, and availability of all information assets across the firm’s technology and operational infrastructure. The position involves close collaboration with IT leadership, legal professionals, and firm management to maintain compliance with client, regulatory, and industry standards. The position will serve as a strategic advisor to leadership, a hands-on technical manager, and a mentor to security staff, ensuring the Firm’s success in a highly evolving threat landscape. Responsibilities and Duties: • Develop and maintain the firm’s information security policies, standards, and procedures., • Develop, implement, and maintain a comprehensive information security program that aligns with the firm’s strategic objectives and client confidentiality obligations, • Establish metrics to monitor program effectiveness and present updates to Firm leadership, • Assess and manage cybersecurity risks; conduct vulnerability assessments and penetration testing, • Lead incident response efforts, including investigation, remediation, and reporting, • Develop playbooks and run regular tabletop exercises to ensure readiness, • Ensure compliance with NIST, ISO, HIPAA, and client confidentiality obligations, • Oversee (develop and maintain) security policies, procedures, training, and awareness programs for attorneys and staff, • Manage security tools (firewalls, endpoint protection, SIEM, IAM, etc.), • Collaborate with IT, Legal, and Compliance teams on security integration, vendor oversight, and cloud management, • Conduct regular risk assessments and vulnerability testing; manage mitigation and remediation efforts while presenting findings and reports to leadership, • Manage and mentor security staff, • Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field required (advanced degrees are preferred), • CISSP, CISM, CISA, GIAC, COMPTia Security+, GISO, certifications are a plus, • Minimum 7–10 years of progressive IT and information security experience, with at least 3 years in a leadership role, • Proven expertise with security frameworks and standards such as NIST, ISO 27001, and HIPAA, • Strong understanding of law firm technology environments, including document management systems, practice management tools, cloud-based platforms, and eDiscovery systems, • Demonstrated ability to lead incident response, risk management, and compliance efforts, • Excellent interpersonal and communication skills, both verbal and written, with experience presenting complex security topics to senior leadership and non-technical stakeholders, • Effective time management skills, with the ability to handle a variety of tasks simultaneously and manage multiple projects while prioritizing assignments, • Ability to build rapport with attorneys, professional staff, and vendors, • Self-motivated, with the ability to work independently but within a team environment At Axinn, we offer market competitive wages and generous benefit options to our valued employees. This includes, but is not limited to, the following: • Competitive starting pay and annual discretionary bonus and raise eligibility, • Generous paid time off benefits (vacation, personal days, holidays, and sick leave), • Firm paid short and long-term disability, plus life and accident insurance, • 401(k) Profit Sharing Plan and Cash Balance Retirement Plan with generous employer contributions (please ask for further details re: eligibility requirements), • Comprehensive medical, dental, and vision insurance options, • Flexible spending and health savings accounts (medical plan dependent), • Firm paid comprehensive Employee Assistance Program (EAP), • Student loan refinancing discounts, • Lifestyle reimbursement program This is a full-time, benefits eligible, exempt level position. Final rate of pay and title will be commensurate with the incumbent’s experience, with a targeted hiring range of $160,000 - $175,000 (the upper range reserved for highly qualified applicants). This position is currently available in either our NY, CT, or DC office locations. Axinn is an equal employment opportunity employer and is committed to creating an environment that draws upon the strength of the diversity of its workforce to achieve excellence in the Firm's field and beyond

Job Description Job Code 839 Department Name IT Infrastructure Reports To Manager, Information Security FLSA Status Exempt Union Code N/A Management No About Us: Building Services 32BJ Benefit Funds (“the Funds”) is the umbrella organization responsible for administering Health, Pension, Retirement Savings, Training, and Legal Services benefits to over 100,000 SEIU 32BJ members. Our mission is to make significant contributions to the lives of our members by providing high quality benefits and services. Through our commitment, we embody five core values: Flexibility, Initiative, Respect, Sustainability, and Teamwork (FIRST). By following our core values, employees are open to different and new ways of doing things, take active steps to improve the organization, create an environment of trust and respect, approach their work with the intent of a positive outcome, and work collaboratively with colleagues. The Funds oversees and manages $9 billion of dollars in assets, which are made up of many, varied and complex funds. The dollars come from a number of sources, including the property owners who pay into the funds on behalf of their employees, and as such, requires those who oversee and manage the money to be highly skilled financial management people. For 2025 and beyond, 32BJ Benefit Funds will continue to drive innovation, equity, and technology insights to further help the lives of our hard-working members and their families. We use cutting edge technology such as: M365, Dynamics 365 CRM, Dynamics 365 F&O, Azure, AWS, SQL, Snowflake, QlikView, and more. Please take a moment to watch our video to learn more about our culture and contributions to our members: youtu.be/hYNdMGLn19A Job Summary: Under the supervision of the Manager, Information Security, the Information Security Analyst is responsible to plan and carry out security measures to protect Funds’ computer networks, systems, and digital and physical technology assets. Performs assessments, develops and implements information security policies, procedure, and guidelines. Works inter-departmentally to identify and correct flaws in the Funds’ security systems, solutions, and applications while recommending specific measures that can improve the Funds’ overall security posture. Essential Duties and Responsibilities: • Provide guidance and expertise in the field of risk management regarding the protection and security of digital assets in the cloud and on premise., • Design and develop Information Security Architectures to prevent unauthorized access to our information and data breaches., • Develop and implement information security policies and procedures; develops security guidelines and safe practices for Funds’-wide computing and networking systems, and maintain the documentation., • Manage, maintain and monitor security technologies such as vulnerability scanning solutions, IDS/IPS, anti-virus technologies, DLP capabilities, SIEM technologies, host forensics and malware analysis, web application firewalls and proxy solutions., • Manage real time threat detention technologies to identify and quarantine threats, Monitor Endpoint Security Alerts and take corrective action., • Minimize security threats by examining governance, technology infrastructure, and facilities to identify security deficiencies, using risk analysis and follow up with corrective action plan., • Monitor internal control systems to ensure appropriate access levels are maintained, protect against unauthorized system access, modification and destruction., • Review security related reports, logs and occurrences; escalate issues and initiate security response procedures., • Create and review vulnerability reports, track compliance with vulnerability management policies, and escalate., • Research and evaluate emerging technologies in support of security technology enhancements, propose technical solutions to management, to address security weaknesses and coordinate with relevant stakeholders to implement., • Reviews, updates, and enforces data security practices within the organization; tests for exposures to ensure adherence to guidelines and procedures, and works with platform experts to implement remedial measures as appropriate., • Tests security controls and manages the associated remediation of any deficiencies as needed., • Assess security information, triaging and responding to security events, identify false positives, and conduct correlation analysis across numerous internal and external data sources while prioritizing information security incidents., • Perform Project Management tasks for security initiatives /projects., • Manage incident-handling processes, which include implementation of containment, protection, and remediation activities., • Coordinates the handling and resolution of security incidents, to include system intrusions and abuse, and acts as a primary point of contact., • Develop responses to internal & external audits, penetration tests and vulnerability assessments., • Support Information Security training and awareness by providing ideas and content, assist HR with employee security awareness education and training., • Manage multiple priorities and deadlines concurrently., • Provide support after hours, on weekends and through on-call rotation., • Performs other duties as assigned Qualifications (Competencies): • To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required., • Minimum 4 years in Information Security, or IT OPS management and systems administration with at least 2 years specific to IT Security;, • Strong knowledge of Information Security design, principles, and processes; Experience in writing and /maintaining information security policies, standards, and guidelines;, • Demonstrated ability to monitor and audit network security systems such as Firewalls, IPS, SIEM, DLP, web proxy, NAC, and Vulnerability scanners;, • Hands on experience with mitigating security controls (i.e., anti-virus, IPS/IDS, DLP, web and network proxies, URL content filtering, multi-factor authentication, SSL VPNs);, • Experience in incident response required; In-depth knowledge of Windows/Unix operating system forensics, event logging systems, authentication methods, remote and local web application security, penetration testing);, • Advanced experience in networking (TCP/IP) protocols, DNS, LDAP, AD, DHCP, HTTP, Web browsers, Firewalls, and other computer/network security and system administration;, • Familiar with regulatory compliance regulations (PCI, SOX, PII, HIPAA, etc.);, • Strong knowledge of common security frameworks (ISO, NIST, etc.);, • Experience in risk assessments and vulnerability management;, • General knowledge of Endpoint protection solutions;, • Knowledge of mainstream operating systems (Microsoft Windows, Linux, IOS) and a wide range of security technologies;, • General knowledge of Database technologies and queries (Microsoft SQL, MySQL, Oracle, etc.);, • Ability to independently identify, research and resolve issues with minimal amount of supervision, and ability to work with peers in a team effort; Soft Skills (Interpersonal Skills): • Detail oriented with excellent organization and analytical skills;, • Ability to plan, take initiatives to accomplish objectives in timely fashion, and work independently;, • Ability to prioritize work and meet deadlines;, • Ability to establish and maintain effective working relationships with project team members, supervisors, and other employees. Education: Bachelor’s degree in Computer Science, or a related discipline. Language Skills: Speak, read, write and understand English Reasoning Ability: High Certificates, Licenses, Registrations: CISM (Certified Information Security Manager), CISSP (Certified Information Systems Security Professional), or CISA (Certified Information Systems Auditor) certification are highly preferred. Physical Demands: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals to perform the essential functions. The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals to perform the essential functions. • Under 1/3 of the time: Standing, Walking, Climbing or Balancing, Stooping, Kneeling, Crouching, or Crawling, • Over 2/3 of the time: Talking or Hearing, • 100% of the time: Using Hands Work Environment: The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. • 1/3 to 2/3 of the time: Work near moving or mechanical parts, exposure to radiation, moderate noise.

Job DescriptionCompany Description Sia is a next-generation, global management consulting group. Founded in 1999, we were born digital. Today our strategy and management capabilities are augmented by data science, enhanced by creativity and driven by responsibility. We’re optimists for change and we help clients initiate, navigate and benefit from transformation. We believe optimism is a force multiplier, helping clients to mitigate downside and maximize opportunity. With expertise across a broad range of sectors and services, our 3,000 consultants serve clients worldwide from 48 locations in 19 countries. Our expertise delivers results. Our optimism transforms outcomes. Sia’s Cybersecurity team is the powerhouse of our firm’s innovation. With over 350 experts worldwide, we tackle projects from proof-of-concept to large-scale deployment, always pushing the boundaries of AI capabilities. By joining Sia’s Cybersecurity team, you’ll step into a vibrant, collaborative environment that nurtures professional growth and empowers you to shape the future of consulting. Job Description You will join Sia Partners’ Cybersecurity, Data Protection and Resilience Global Business Line. In accordance with your skills and expertise, you will work - in Consulting, Implementation and Audit - on one or more of our following offers: Strategy, Risk, Compliance, Operations, Data Protection, Offensive Security, Resilience and Training. Key Responsibilities • Manage end-to-end projects or be responsible for sub-projects of a complex and/or international project, on which you will ensure relevant, proactive and regular reporting to the Manager and Client to ensure that our commitments are met., • Take part in business development through the design and development of commercial proposals, as well as by identifying new opportunities and clients., • Manage the client relationship on your missions and build a solid relationship with your contacts on the client side, at middle management level, who recognize you as an expert for your assigned tasks., • Innovation within our Sia CyberLab, where you will work on the development of new offers and SaaS solutions around advanced technologies and capitalizing on our unique know-how in AI. You will also carry out benchmarks and PoC of Cyber solutions on the market, while participating in the active monitoring of Cyber news., • The firm's eminence, around our Cybersecurity expertise, by actively contributing to the publication plan (articles, white papers, studies, webinars, etc.), and represent the firm at various professional clubs, trade shows and events. Qualifications Graduated with a Cybersecurity degree or a related field from an accredited college/university, you have at least 3 years of experience with a consulting firm or a Cybersecurity solutions/services provider/integrator. • You master some Cybersecurity standards, norms and/or reference systems of the market, notably ISO 270xx, SANS, NIST, etc., • You have actively participated in successful projects/missions where you have developed a solid knowledge of at least two of our 8 offerings listed above;, • You have a general knowledge of IP networks, operating systems (Unix/Linux, Windows and/or MacOs), Cloud (AWS, Azure and/or GCP), applications (Web Server, DB, Middleware, etc.) as well as cryptography; knowledge in Blockchain would be a real plus;, • You are familiar with the major market solutions and technologies of: Endpoint Security, VPN, VSX, Proxy/Reverse Proxy, EDR, IAM, MDM, DLP, CASB, Office 365 Security, etc.; Attributes for Success • You actively participated in successful projects where you have developed expertise around the missions listed in the job description, • You have an excellent culture in Cybersecurity and dispose of a strong appetite for solving complex technical problems, • You are a supportive team player who actively develops relationships and is eager to share knowledge with colleagues and our clients, • You are intellectually curious and have the entrepreneurial spirit to invest in the development of innovative offers and solutions, • You wish to join a stimulating and fulfilling professional environment, where you will share the values of expertise, innovation, customer satisfaction and a results-oriented culture, • You wish to evolve quickly and take responsibilities on high stakes subjects within a young, dynamic and supportive team, • You have a strong drive and commitment to deliver high quality work while ensuring that client expectations and deadlines are met. Additional Information Compensation & Benefits We believe in supporting our team professionally and personally. Here’s a snapshot of the comprehensive benefits you’ll enjoy as part of Sia. Competitive Compensation * Annual base salary between $130,600 to $135,700 (commensurate with experience and qualifications) * Annual performance based discretionary bonus Robust Health Coverage * 3 Medical plans * Dental and Vision * Life, AD&D and other voluntary insurance Tax-Advantaged Accounts * 401K retirement plan * 4% matching and 100% vested upon enrollment * Health Savings Account (HSA) * Flexible Spending Account (FSA) * Health, Dependent Care, Commuter Family Friendly Benefits * 100% paid parental leave for all new parents with eligible tenure * Building Healthy Families program if enrolled through Medical plan Time Off to Recharge * Generous Paid Time Off (PTO) policy * 9 company holidays plus 1 floating holiday Extras that Make Life Easier * College savings and student loan repayment assistance * Monthly cell phone stipend * Access to wellness programs at no cost if enrolled through Medical plan, including: * Gym membership reimbursement * LiveHealth Online virtual care * Personalized support from a Well-being Coach * Employee Assistance Program at no cost * Free confidential counseling and emotional support services * On-demand access to Emotional Well-being resources (ranging from relaxation techniques to stress management) Diversity, Equity, Inclusion & Belonging At Sia, we believe in fostering a diverse, equitable and inclusive culture where our employees and partners are valued and thrive in a sense of belonging. We are committed to recruiting and developing a diverse network of employees and investing in their growth by providing unique opportunities for professional and cultural immersion. Our commitment toward inclusion motivates dynamic collaboration with our clients, building trust by creating an inclusive environment of curiosity and learning which affects lasting impact. Please visit our website for more information. Sia is an equal opportunity employer. All aspects of employment, including hiring, promotion, remuneration, or discipline, are based solely on performance, competence, conduct, or business needs. Office Workplace Guidelines Sia is committed to providing a flexible workplace environment that supports client, business, and market needs. Consultants located in our primary market office locations—New York City, Charlotte, Seattle, and San Francisco- are expected to live within a reasonable commuting distance and attend the office at least three days or more per week. For Consultants outside of our primary markets, we can offer more flexible in-person requirements in accordance with your location. Work Authorization & Sponsorship At this time, Sia does not intend to employ any applicant who will require, either now or in the future, employment visa sponsorship or sponsorship for work authorization (i.e., H1-B visa, F-1/OPT) or STEM OPT, TN, etc). Sia is an equal opportunity employer. All aspects of employment, including hiring, promotion, remuneration, or discipline, are based solely on performance, competence, conduct, or business needs.

Job Description RESPONSIBILITIES: • Manage the development of a comprehensive internal audit plan for the Oceanview group which will evaluate the effectiveness of controls in place to manage significant risk exposures, ensure the integrity and reliability of information and financial reporting, safeguard company assets, and comply with laws and regulations, • Ensure timely and effective execution of audits across all business areas, including finance, policy administration, operations, IT, and compliance, • Ensure audits effectively and timely identify control weaknesses, inefficiencies, and opportunities for improvement, • Ensure the company’s internal audit processes are in compliance with applicable laws, regulations, and industry standards, • Work closely with senior leadership to assess and prioritize emerging risks, regulatory changes, and other factors impacting the company’s risk profile, • Review the design and operational effectiveness of internal controls, providing insights into areas requiring strengthening, • Identify audit issues and root causes, present findings to management, and identify needed improvements to reduce identified risks, • Prepare audit deliverables including planning memos, walkthroughs, testing workpapers, and issues testing, • Lead technology compliance audits required by regulators, collaborating with Oceanview’s asset manager’s IT security team, • Assist in management in SOX controls testing, • Prepare and present Internal Audit reports to the Audit Committee, • Assist with responses to regulatory inquiries as they relate to internal audit matters Qualifications: • Strong knowledge of Internal Auditing methodologies, standards, tools, and processes, • Extensive knowledge of insurance operations, industry regulations, and emerging risks facing the industry, • Proven experience in leading and managing audit teams, ideally in a complex, multi-faceted organization, • Strong understanding of internal controls, risk management, financial reporting, and regulatory compliance in the insurance industry, • Ability to develop and implement audit plans, with a focus on risk-based auditing and efficiency., • Excellent leadership, communication, and interpersonal skills, with the ability to influence and work collaboratively with senior leadership, audit committees, and external stakeholders, • Analytical and critical thinking skills, with the ability to address complex audit issues and provide actionable recommendations, • Experience using technology and automation tools to enhance audit testing and data analytics, • Advanced process design and project management skills, • Dedicated team player with strong work ethic; quick learner, energetic and engaging, • Attention to detail to ensure the accuracy of reports and correspondence, • Ability to handle multiple projects and adapt to an ever-changing environment, • Excellent communication, organizational, and presentation skills, • Self-starter possessing a high degree of personal and professional leadership EDUCATION & EXPERIENCE: • Bachelor’s degree in Accounting, Finance, Business Administration, or a related field. A master’s degree is a plus., • Professional certifications such as Certified Internal Auditor (CIA), Certified Public Accountant (CPA), Chartered Accountant (CA), or Certified Information Systems Auditor (CISA) are highly desirable, • 10 years or more of experience in internal and/or external audit, • Experience in the insurance industry or financial services industry is a plus., • Familiarity with relevant frameworks (e.g. COSO, ISO), • Strong track record of delivering on audits and/or process improvement projects, • Highly analytical, with a passion for redefining the way internal audits are executed

Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 350,000 businesses and nearly 1.5 Million active savers, with over $30 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit vestwell.com Who Are We Looking For? The Vestwell Technology organization seeks an exceptional CISO to define and lead our enterprise-wide security strategy. The ideal candidate is a visionary and pragmatic security leader who can translate complex risk into business outcomes, influence across the company and Board, and scale programs that protect our customers, partners, and platform. They bring proven experience building and maturing security programs aligned to leading frameworks, navigating financial services regulatory requirements, and fostering a security-first culture across product, engineering, operations, and all corporate functions. They are as comfortable in the SOC as they are in the boardroom, with equal fluency in technology, governance, and business risk. What Will You Be Doing? • Own the enterprise information security vision, multi-year strategy, roadmap, and governance model that align to Vestwell's business goals and growth., • Build, lead, and develop a high-performing security organization; attract and mentor top talent and scale operating models and processes to meet Vestwell's future needs., • Evaluate current security technologies and capabilities (e.g., endpoint protection, monitoring/telemetry, DLP, IAM/zero trust, secret management, vulnerability and patch management) and recommend any changes or additions needed to elevate Vestwell's security posture., • Build and mature a comprehensive security program grounded in recognized frameworks (e.g., NIST, ISO 27001, CIS Controls), including policy architecture, control implementation, and continuous improvement and audit readiness., • Establish and operationalize key cybersecurity metrics and KRIs/KPIs; provide concise, decision-oriented reporting to executive leadership and key stakeholders., • Champion a security-first culture via company-wide awareness, training, and targeted education (e.g., phishing exercises), and ensure policies are well-understood and adopted., • Drive secure-by-design practices across product and engineering (e.g., SDLC, threat modeling, code scanning, penetration testing, cloud/infrastructure hardening) and partner closely with IT, Legal, Compliance, and Operations to safeguard PII and sensitive data., • Lead security incident management, including strategy, readiness, tabletop exercises, detection/response, crisis communications, lessons-learned, and executive/Board reporting; ensure tight alignment with business continuity and disaster recovery., • 10+ years of progressive experience in cybersecurity with 5+ years leading enterprise security programs or functions; proven leadership in high-growth or highly regulated environments., • Demonstrated success designing and operating security programs aligned to leading frameworks and sustaining regulatory compliance and audit readiness., • Expert ability to identify, prioritize, and communicate risk; proven track record translating complex technical concepts into actionable insights and decisions for executive, Board, and technical audiences., • Strong cross-functional leadership and collaboration skills; experienced at influencing product, engineering, IT, legal, compliance, and operations stakeholders., • Advanced knowledge across core security domains: endpoint protection, monitoring/telemetry, DLP, IAM/zero trust, vulnerability/patch management, incident response, cloud and infrastructure security, authentication/authorization, and sensitive data protection., • Advanced certifications such as CISSP, CISM, CISA, CCSP, or comparable., • Familiarity with secure SDLC practices, threat modeling, and penetration testing at scale., • Experience leading or supporting SOC examinations and financial services regulatory compliance., • Strategic thinking with the ability to set vision and drive measurable outcomes., • Executive communication and Board reporting; crisp, decision-oriented storytelling., • Talent builder who develops high-performing teams and scalable operating models. OUR BENEFITS We're an innovative, high-growth company, with lots of exciting milestones ahead. We value health and wellness at Vestwell and in addition to a dedicated Employee Wellbeing Committee, we offer competitive health coverage and generous vacation offering. We have adopted a hybrid office policy, but all employees are welcome at our bright, comfortable office with many workspace options in our Midtown Manhattan, Austin, King of Prussia, and Phoenix offices, so everyone has a setting that is the most productive for them. Oh, and naturally we have a great 401(k) plan! OUR PROCESS It starts the same for every candidate: getting to know the team members through 1-2 conversations about Vestwell, your experience, and your interests. Next steps can vary by role, but the usual next steps are a skill or experience screen (e.g. a coding interview for an Engineer, a portfolio review for a Designer, deeper experience call for other roles) which leads to a virtual or in-person interview panel after that if the screens go well. Before making an offer, our interview process concludes with a references check stage for your recruiter to meet with a current or former supervisor and peer. We prioritize transparency and lack of surprise throughout the process. For your awareness you will only receive correspondence from any other domain not ending in Vestwell.com is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.