Trabajos cissp remote en Jersey City, New JerseyCrear alertas

Job ID: 522660 CRH is a leading global diversified building materials group, employing over 75,800 people at more than 3,160 locations in 29 countries. CRH is the leading building materials company in North America and the world. We manufacture and distribute a diverse range of superior building materials, products, and solutions, which are used extensively in construction projects of all sizes. Job Summary The Americas Security Manager will report to the Director of Security – Americas and provides a unique opportunity to mature and shape CRH’s security operations across the U.S., Canada, and Mexico. This role requires a thorough understanding of security risk management and the ability to proactively assess and respond to potential threats. The role also provides significant scope to influence security culture, engage with senior leadership, and protect CRH’s most valuable assets — its people, facilities, and reputation. This role will work closely with Health & Safety, Legal, HR, Audit & Compliance, Internal Controls, Facilities, and Information Security, and requires travel — upwards of two weeks per month. Job Location This a remote role - we are looking for someone in this role that is based in a state in the Eastern Time Zone. Atlanta or New York City metro area is preferred. Job Responsibilities Program Development • Partner with the Director of Security – Americas to implement security strategies aligned with industry best practices and internal policies., • Develop, implement, and maintain security procedures, processes, and guidelines to ensure consistent protection across offices, manufacturing plants, and distribution facilities., • Develop metrics, dashboards, and reports to measure security performance and drive accountability., • Support and drive proactive security initiatives by implementing best practices and aligning the program with global standards. Physical Security & Operations • Utilizing a risk-based approach, conduct site security risk assessments to identify vulnerabilities and recommend mitigation strategies for identified risks., • Provide guidance and assist in the implementation of physical security systems (access control, video surveillance, intrusion detection systems), ensuring effective design, maintenance, and integration., • Support physical security planning for office relocations, expansions, closures, and capital projects., • Provide security coordination and oversight for company events, high-profile meetings, and special projects. Incident Response & Crisis Management • Lead and coordinate responses to internal and external security incidents, including theft, fraud, workplace violence, and emergency situations., • Support business continuity, crisis management, and emergency preparedness planning, including drills and exercises., • Serve as a trusted advisor to leadership during crisis situations, providing real-time intelligence and recommendations., • Consult with law enforcement, emergency services, and regulatory agencies during critical events. Intelligence & Investigations • Build and maintain intelligence networks with law enforcement, regulatory agencies, and industry peers., • Identify and stay abreast of local, regional, and geopolitical emerging risks and as a result, recommend mitigation strategies to safeguard personnel, facilities, and supply chains., • Conduct risk assessments, threat analyses, and security reviews to identify vulnerabilities and implement mitigation strategies., • Lead and document investigations into misconduct, fraud, and other security-related incidents. Protective Services & Travel Security • Support CRH’s travel security and event protection programs to ensure the safety of CRH employees., • Develop and deliver travel safety briefings and assist in coordinating the travel safely program., • Serve as a point of contact for CRH travelers during emergency situations in the Americas. Training & Awareness • Develop and deliver security awareness and education programs for employees at all levels., • Conduct seminars, workshops, and tabletop exercises to strengthen preparedness and response capabilities., • Champion a culture of security awareness, accountability, and professionalism across the region., • Other duties as assigned Job Requirements • Bachelor’s degree required - advanced degree preferred., • 10+ years in positions of increasing responsibility related to applicable security operational disciplines and investigations, including corporate security, military, or law enforcement experience., • Demonstrated expertise and proven history in evaluating risk, physical security operations, incident/crisis management, insider risk detection & mitigation, investigations, and protective services., • Experience working in diverse environments including offices, manufacturing, distribution, and supply chain facilities., • Strong knowledge of physical security systems (access control, CCTV, intrusion alarms, etc.)., • Experience conducting investigations, risks assessments, site vulnerability assessments, and implementing insider risk (e.g., workplace violence, theft, fraud) prevention strategies., • Strong understanding of travel security, executive protection, and event security best practices., • Exceptional interpersonal and communication skills; able to engage and build trust and influence at all organizational levels., • Excellent investigative, analytical, and problem-solving abilities; capable of managing multiple priorities under pressure., • Collaborative mindset with the ability to work cross-functionally in a matrixed global environment., • High integrity and a proven history of demonstrating sound judgment., • Professional certifications (CPP, PSP, CISSP, CERT ITPM, etc.) are strongly desirable., • Fluency in English required, Spanish proficiency highly desirable., • Must be able to travel across the Americas (~50%)., • Flexibility to respond to incidents outside of standard business hours. Compensation • Base Salary - $140,000-$165,000 per year, • 20% Annual Bonus opportunity, • 401(k) plan / group retirement savings program, • Short-term and long-term disability benefits, • Life insurance, • Health, dental, and vision insurance, • Paid time off, • Paid holidays What CRH Offers You • Highly competitive base pay, • Comprehensive medical, dental and disability benefits programs, • Group retirement savings program, • Health and wellness programs, • An inclusive culture that values opportunity for growth, development, and internal promotion About CRH CRH has a long and proud heritage. We are a collection of hundreds of family businesses, regional companies and large enterprises that together form the CRH family. CRH operates in a decentralized, diversified structure that allows you to work in a small company environment while having the career opportunities of a large international organization. If you’re up for a rewarding challenge, we invite you to take the first step and apply today! Once you click apply now, you will be brought to our official employment application. Please complete your online profile and it will be sent to the hiring manager. Our system allows you to view and track your status 24 hours a day. Thank you for your interest! CRH is an Affirmative Action and Equal Opportunity Employer. EOE/Vet/Disability CRH is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, status as a protected veteran or any other characteristic protected under applicable federal, state, or local law. AI tools may be used in certain stages of the employment lifecycle, such as candidate review; however, all final employment decisions will be made by a person.

Posting Type Hybrid/Remote Job Overview At Relativity we make software to help users organize data, discover the truth, and act on it. Our e-discovery platform is used by more than 13,000 organizations around the world to manage large volumes of data and quickly identify key issues during litigation, internal investigations, and compliance projects. The Senior Manager of Enterprise Security is responsible for leading the strategy, execution, and continuous improvement of the organization's enterprise-wide security programs. This role oversees teams accountable for protecting corporate systems, data, and infrastructure from emerging threats, while enabling the business to operate securely and efficiently. The Senior Manager partners closely with Technology, Legal, Compliance, and business leaders to reduce risk, operationalize security controls, and mature organizational security posture. Job Description and Requirements Role Responsibilities Strategic Leadership * Develop and execute the enterprise security strategy aligned with organizationalobjectives. * Identifyrisks, emerging threats, and industry trends to inform longrange security planning. * Establish metrics, KPIs, and dashboards to measure and report on security posture and program maturity. * Champion a securitybydesign mindset across the enterprise. Team & Program Management * Lead, mentor, and grow a multidisciplinary security teamwhile partnering withother securityareas such as security operations, incident response, threat intelligence, identity security, vulnerability management, cloud security, and GRC. * Drive operational excellence through structured processes, documentation, automation, and continuous improvement. * Oversee securityprogramroadmaps, annual planning, staffing needs, and budget management. Security Operations & Risk Reduction * Createenterprise detection and response capabilitiesthatare fully operational by overseeing proper onboarding and configuration of security agents and tooling,validatingcoverage across all relevant environments, and ensuring telemetry, alerts, and data flows are reliable, complete, and actionable. * Executeenterprise vulnerability management programs, ensuringtimelyremediation of weaknesses across infrastructure, cloud, and enduser environments. * Oversee identity and access governance programs, including privileged access, identity lifecycle, and authentication standards. * Manage enterprise security tooling and technologies, ensuring the stack is integrated,optimized, and delivering measurable value. Governance, Compliance & Policy * Own and evolve security policies, standards, and guidelines to meet internal and external requirements. * Partner with Compliance and Legal to support audits, certifications, investigations, and regulatory obligations (e.g., SOC2, ISO27001, HIPAA, GDPR). * Drive alignment between risk management processes and business operations. CrossFunctional Collaboration * Serve as a trusted advisor to executives and business leaders on security risks and tradeoffs. * Embed security into technology roadmaps, product lifecycles, enterprise architecture, and vendor management. * Promote security awareness and training programs to strengthen organizational security culture. Minimum Qualifications * Minimum of5years ofprogressiveexperience in security, preferably in a high-security environment, with at least 5 yearsina leadershiprole. * Demonstrated ability to communicate security risks and strategies toexecutivesand nontechnical audiences. * Strong understanding of security frameworks (NIST CSF, ISO 27001, CIS Controls, Zero Trust). * Proven experience inmanaging multiple securityinitiativessimultaneously. * Hybrid-working role (2+ days in office)orRemotebased on company policy. Preferred Qualifications * Bachelor's degree in security management, business administration, Computer Science, Information Systems, or relatedfield. * Experience working in a SaaS, cloud-native, or regulatedenvironmentoperatingona global scale. * Experience in the legal space and with a high understanding of e-discovery and litigation. * Certificationsa plus,such as CISSP, CISM, GIAC, CCSP, or similar. * Generate excitement and curiosity when working withhighly complexsystems. * Team player with proven ability to deliver features from inception to delivery. * Excellent written and verbal communication skills. * Detail-oriented, enthusiastic self-starter with ability to work both independently and in a team environment. * Solid understanding of software development lifecycle and agile methodologies. * Knowledge and experience doing discovery & usability testing to gather customer feedback. Relativity is committed to competitive, fair, and equitable compensation practices. This position is eligible for total compensation which includes a competitive base salary, an annual performance bonus, and long-term incentives. The expected salary range for this role is between following values: $185,000 and $277,000 The final offered salary will be based on several factors, including but not limited to the candidate's depth of experience, skill set, qualifications, and internal pay equity. Hiring at the top end of the range would not be typical, to allow for future meaningful salary growth in this position. Required Skills: Access Management, Network Security, Project Management, Risk Management, Security Architecture Design, Security Audit, Security Awareness, Security Engineering, Security Operations, Vulnerability Management

Job Description Canyon seeks a full-time IT Manager to coordinate all technology operations for Canyon. Who we are Canyon is a nonprofit arts venue opening in 2026 on the Lower East Side of NYC, dedicated to the exhibition of time-based media art and performance. Position Overview The IT Manager reports directly to Canyon's VP of Art & Technology and leads all technology operations for the institution. As Canyon's first IT Manager, this individual will establish and manage all core IT infrastructure while working alongside specialized technical teams-including AV engineers in Exhibitions and conservation technicians in Canyon's conservation center-to ensure seamless integration across all technology systems. This includes ensuring that Canyon's infrastructure supports high-performance media art installations, live events, visitor services, retail operations, and back-office systems. The IT Manager will maintain a secure, scalable, and efficient network that underpins all digital and audiovisual systems across the organization. Working across the Exhibitions, Conservation, Facilities, and Operations divisions, the IT Manager will plan, implement, and maintain integrated AV/IT systems that bridge creative and administrative workflows. Initially operating as a hands-on sole IT practitioner, they will manage procurement, vendor relationships, and contracts for technology systems, coordinate with integrators and service providers, and develop best practices for cybersecurity, access control, and data integrity. The ideal candidate combines technical fluency with hands-on leadership and clear communication. They are a pragmatic problem-solver who can anticipate infrastructure needs, translate between creative and technical teams, and ensure that Canyon's systems operate reliably and intelligently as the venue evolves. Key Responsibilities • Oversee the full IT stack: network, servers, storage, workstations, AV/IT convergence systems, security, backup/disaster recovery., • Manage systems supporting the conservation centre (CMACC), exhibitions, performance program, office operations, and guest services., • Develop and enforce IT policies, procedures and best-practices (e.g., access control, data management, media asset handling, cybersecurity)., • Lead hardware and software procurement, vendor sourcing, contract negotiation, and lifecycle planning., • Collaborate with the Art & Technology division, Exhibitions team, Performing Arts team and Facilities to align IT/AV infrastructure with artistic and operational goals., • Provide day-to-day support, troubleshooting and escalation for technical issues; manage and train any IT staff or contractors., • Plan for scalability: our opening phase leads into growth - exhibitions, performances, conservation workflows and visitor services will all increase., • Monitor budgets, create cost-control measures, and report on technology KPIs to leadership., • Stay current with emerging technologies; recommend strategic technology adoption., • Minimum 5 years of professional IT management experience, preferably in a media-rich, arts-oriented or complex venue environment., • Hands-on experience with converged AV/IT systems, network infrastructure, storage solutions, media-asset management or similar., • Hands-on experience with deploying and managing ticketing systems, CRMs, or visitor experience technology., • Proven ability to manage vendors, negotiate contracts, plan hardware/software lifecycle, and control budgets., • Strong aptitude for systems thinking - integrating the needs of exhibitions, performance, conservation and visitor/guest services into IT strategy., • Excellent communication, project management and problem-solving skills., • Prior experience in a museum, gallery or live-arts venue with time-based media., • Familiarity with conservation workflows or media-art asset management (valuable given our conservation centre)., • Knowledge of AV integration (e.g., digital signage, projection systems, live-event infrastructure, sound systems)., • Cybersecurity certifications (CISSP, CISM) or equivalent experience., • Experience with cloud services, hybrid infrastructure, virtualization, remote work support. Salary is commensurate with experience. The expected range is $125,000-160,000. This is a full-time salaried position. Benefits include medical, dental, and vision insurance; life, AD&D, long-term disability, and short-term disability insurance; a Health Savings Account or Flexible Spending Account; a 401(k) retirement account with a matching contribution; and tuition reimbursement. We are an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, protected veteran status, or any other characteristic protected by law. To Apply Please upload a resume, cover letter, and contact information for three references in the 'Resume' section of the job application portal.

Job DescriptionEnterprise ArchitectEmployment Type: Full-Time, Senior-LevelDepartment: Information Technology CGS is seeking an experienced senior-level Information Technology Enterprise Architect to support the I.T. business mission of a large-scale government enterprise’s IT infrastructure. The ideal applicant should demonstrate knowledge and experience in organization processes and procedures specific to PMI, ITIL, CISSP, SDLC, Agile, ISSO, Six Sigma, and CMMI. The applicant will also be tasked with collecting information for strategic business mission planning and IT investment. CGS brings motivated, highly skilled, and creative people together to solve the government’s most dynamic problems with cutting-edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities. Skills and attributes for success:- The IT Enterprise Architect position requires the candidate to possess knowledge, experience, and abilities to broadly understand an organization’s various technologies and teaming with an organization’s leaders to collect information for strategic business mission planning and IT investment.- The IT Enterprise Architecture candidate will demonstrate s exceptional interpersonal and professional maturity and senior-level IT competency. Exceptional oral and written communication abilities and experience and knowledge and experience in organization processes and procedures specific to PMI, ITIL, CISSP, SDLC, Agile, ISSO, Six Sigma, and CMMI are superlative. - Experienced with various EA frameworks, including Zachman, and TOGAF, the EOUSA Enterprise Architect will provide a view for system owners, planners, designers, developers, and subcontractors to provide a holistic view of the enterprise from different perspectives with the understanding of budget constraints.- Additional demonstrated knowledge and experience in the following areas:- Demonstrated engineering abilities in Windows Desktop applications, remote access, MS Windows 7, SQL Server, VMware, EMC, SAN storage, Cloud as a service, Broadworks, Polycomm, BlackBerry, Apple iOS, information security, wireless technologies, system networking, etc.- Understanding and utilization of ITIL, project management (PMI), Agile, Configuration and Change controls.- Capability in providing technical engineering practices recommendations, advice, and enhancements from integration engagements of prior successful systems integrations.- Exceptional writing/verbal/interpersonal negotiation and communication skills with the ability to work confidently and independently with minor guidance. Ideally, you will also have:- VMware server and VDI understanding/experience.- Knowledge of PKI.- MS Windows 2003 Terminal Server.- MS Windows 2008R2 Server.- Cisco UCS.- Broadworks.- Polycomm.- BlackBerry, iOS, Android OS.- Project Management Professional (PMP).- ITIL.- CISSP. Our Commitment:Contact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting-edge technology with world-class personnel to deliver customized solutions that fit our client’s specific needs. We are committed to solving the most challenging and dynamic problems. For the past seven years, we’ve been growing our government contracting portfolio, and along the way, we’ve created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work. Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come. We care about our employees. Therefore, we offer a comprehensive benefits package.- Health, Dental, and Vision- Life Insurance- 401k- Flexible Spending Account (Health, Dependent Care, and Commuter)- Paid Time Off and Observance of State/Federal Holidays Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Join our team and become part of government innovation! Explore additional job opportunities with CGS on our Job Board: For more information about CGS please visit: or contact:Email: #CJ We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Job DescriptionCoreWeave is The Essential Cloud for AI™. Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at . What You'll Do: CoreWeave is building the infrastructure that powers the next era of AI — and doing it at a pace and scale that demands operational excellence across every function. As we scale toward and beyond public company readiness, the CIO organization is responsible for owning the execution of IT General Controls (ITGCs) and IT application controls across our technology environment. About the role: This is not a traditional audit-support role. As the Senior Product Manager, IT SOX Compliance, you will translate SOX compliance requirements into structured programs, drive accountability across IT process owners, and build the systems and workflows that make compliance scalable. You will work closely with the SOX team and IT process owners to ensure controls are designed, reviewed, and evidenced effectively. The day-to-day includes owning the IT SOX compliance program, partnering with cross-functional teams, and ensuring controls are executed, documented, and audit-ready. • Own the end-to-end IT SOX compliance program within the CIO organization, maintaining the IT control inventory spanning ITGCs, IT-dependent controls, and automated application controls, • Own the control design and documentation, including narratives and risk and control matrices (RCMs), ensuring controls are clearly defined and audit-ready, • Partner with IT, Accounting (where needed), and the SOX team to ensure new systems and modules are implemented with appropriate SDLC controls in place prior to go-live; review control designs to identify and mitigate SOX risks, • On an ongoing basis, partner with IT process owners and control operators to ensure controls are executed in a timely manner, • Review control evidence for quality and completeness before submission to auditors, • Manage the full deficiency lifecycle — from root cause analysis through remediation planning, retesting, and escalation — reporting control health to IT leadership and the SOX team, • 8+ years of experience in IT audit, IT risk, IT compliance, or a related field, with hands-on IT SOX experience in either a practitioner or oversight capacity, • Deep familiarity with IT General Controls (ITGCs) — access management, change management, SDLC, and computer operations — and how they map to financial reporting risk, • Experience with Workday, Salesforce, NetSuite/SAP, Coupa, and other enterprise business systems, • Strong understanding of PCAOB auditing standards, COSO framework, and COBIT as they apply to IT controls, • Demonstrated ability to manage multiple workstreams, deadlines, and stakeholders across engineering, finance, legal, and audit, • CISA, CISSP, CISM, or CPA certification, • Experience in a hyperscaler, cloud infrastructure, or high-growth tech environment, • You love translating SOX compliance requirements into structured, scalable programs, • You're curious about improving control design, execution, and compliance workflows Be Curious at Your Core Act Like an Owner Empower Employees Deliver Best-in-Class Client Experiences Achieve More Together We support and encourage an entrepreneurial outlook and independent thinking. We foster an environment that encourages collaboration and enables the development of innovative solutions to complex problems. As we get set for takeoff, the organization's growth opportunities are constantly expanding. You will be surrounded by some of the best talent in the industry, who will want to learn from you, too. Come join us! The base salary range for this role is $165,000 to $242,000. The starting salary will be determined based on job-related knowledge, skills, experience, and market location. We strive for both market alignment and internal equity when determining compensation. In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program (all based on eligibility). What We Offer The range we've posted represents the typical compensation range for this role. To determine actual compensation, we review the market rate for each candidate which can include a variety of factors. These include qualifications, experience, interview performance, and location. In addition to a competitive salary, we offer a variety of benefits to support your needs, including: • Medical, dental, and vision insurance - 100% paid for by CoreWeave, • Company-paid Life Insurance, • Voluntary supplemental life insurance, • Short and long-term disability insurance, • Flexible Spending Account, • Health Savings Account, • Tuition Reimbursement, • Ability to Participate in Employee Stock Purchase Program (ESPP), • Mental Wellness Benefits through Spring Health, • Family-Forming support provided by Carrot, • Paid Parental Leave, • Flexible, full-service childcare support with Kinside, • 401(k) with a generous employer match, • Flexible PTO, • Catered lunch each day in our office and data center locations, • A casual work environment While we prioritize a hybrid work environment, remote work may be considered for candidates located more than 30 miles from an office, based on role requirements for specialized skill sets. New hires will be invited to attend onboarding at one of our hubs within their first month. Teams also gather quarterly to support collaboration. California Consumer Privacy Act - California applicants only CoreWeave is an equal opportunity employer, committed to fostering an inclusive and supportive workplace. All qualified applicants and candidates will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. As part of this commitment and consistent with the Americans with Disabilities Act (ADA), CoreWeave will ensure that qualified applicants and candidates with disabilities are provided reasonable accommodations for the hiring process, unless such accommodation would cause an undue hardship. If reasonable accommodation is needed, please contact: . Export Control Compliance This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information, applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful permanent resident (green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158, (B) eligible to access the export controlled information without a required export authorization, or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency. CoreWeave may, for legitimate business reasons, decline to pursue any export licensing process.

Job Description StubHub is on a mission to redefine the live event experience on a global scale. Whether someone is looking to attend their first event or their hundredth, we're here to delight them all the way from the moment they start looking for a ticket until they step through the gate. The same goes for our sellers. From fans selling a single ticket to the promoters of a worldwide stadium tour, we want StubHub to be the safest, most convenient way to offer a ticket to the millions of fans who browse our platform around the world. StubHub's Product Security Engineering Team is seeking a Senior Engineer to enhance our security posture within the end user and services product domain. The perfect candidate will possess experience in CI/CD pipeline security, product and application architecture reviews, contextualized vulnerability management processes, and automation. Location: Hybrid (3 days in office/2 days remote) – New York, NY or Century City, CA About the team: StubHub's Product Security Engineering Team plays a critical role in securing the platforms that power the world's largest ticket marketplace. This team works hands-on with cutting-edge tools and cloud-native technologies to embed security into every layer of the software development lifecycle—from architecture to automation. If you're passionate about offensive security, CI/CD hardening, and driving real impact across modern product teams, this is your opportunity to lead and innovate at global scale. What You'll Do: • Conduct security assessments, code reviews, and penetration tests on web applications, APIs, and mobile apps to identify vulnerabilities and flaws., • Collaborate with development teams to embed security into CI/CD pipelines, including the implementation of automated code scanning tools., • Develop and maintain secure coding guidelines and conduct security awareness training for developers., • Respond to security incidents, perform root cause analyses, and recommend effective remediations., • Stay current on emerging security threats, vulnerabilities, and mitigation strategies; proactively share insights across teams., • Help develop and enforce application security policies, standards, and procedures aligned with industry regulations and best practices., • Conduct architectural reviews to ensure the security of new technologies and controls., • Build and maintain robust product vulnerability management processes and procedures., • Write and maintain production-grade APIs to automate security processes and streamline infrastructure and developer workflows., • Demonstrated expert-level understanding of offensive web application security testing and defense-in-depth remediation strategies., • Expert-level skills in vulnerability assessments and code reviews., • Extensive experience with automated security testing tools (e.g., Burp Suite, OWASP ZAP, Snyk)., • Strong communication skills, with the ability to convey complex security concepts to both technical and non-technical audiences., • Hands-on experience in applied cryptography and key management., • Proven ability to implement SAST, DAST, and SBOM tooling within development workflows., • Experience in performing structured threat modeling (e.g., STRIDE, PASTA)., • Intermediate proficiency in at least one scripting language (e.g., Python, Ruby)., • Industry-recognized security certifications (e.g., OSCP, CEH, CISSP, GWAPT)., • Intermediate-level experience with cloud security principles and technologies in AWS and Azure., • Understanding of Kubernetes security fundamentals, including the use of admission controllers, network policies, role-based access control (RBAC), and ingress architecture design., • Accelerated Growth Environment: An environment designed for swift skill and knowledge enhancement, where you have the autonomy to lead experiments and tests on a massive scale., • Top Tier Compensation Package: Competitive base, equity, and upside that tracks with your impact., • Flexible Time Off: Enjoy unlimited Flex Time Off, giving you the flexibility to manage your schedule and take time to recharge as needed., • Comprehensive Benefits Package: Prioritize your well-being with a comprehensive benefits package, featuring 401k, and premium Health, Vision, and Dental Insurance options. The anticipated gross base pay range is below for this role. Actual compensation will vary depending on factors such as a candidate's qualifications, skills, experience, and competencies. Base annual salary is one component of StubHub's total compensation and competitive benefits package, which includes equity, 401(k), paid time off, paid parental leave, and comprehensive health benefits. Salary Range$200,000—$250,000 USDAbout UsStubHub is the world's leading marketplace to buy and sell tickets to any live event, anywhere. Through StubHub in North America and viagogo, our international platform, we service customers in 195 countries in 33 languages and 49 available currencies. With more than 300 million tickets available annually on our platform to events around the world -- from sports to music, comedy to dance, festivals to theater -- StubHub offers the safest, most convenient way to buy or sell tickets to the most memorable live experiences. Come join our team for a front-row seat to the action. For California Residents: California Job Applicant Privacy Notice found hereWe are an equal opportunity employer and value diversity on our team. We do not discriminate on the basis of race, color, religion, sex, national origin, gender, sexual orientation, age, disability, veteran status, or any other legally protected status.

Job Description *This position is contingent upon award * Responsibilities: • Proactively monitor, detect, and respond to security threats across networks, systems, and cloud environments, • Analyze incidents, implement controls, and collaborate across teams to strengthen security posture, • Perform threat triage, incident investigation, and risk analysis, • Analyze security alerts/events for IOCs, attack patterns, emerging threats across all environments, • Correlate data, develop unified views of cyber risk, and enable decision-making, • Identify vulnerabilities, misconfigurations, and protection gaps; assess business impact, • Ensure alignment with regulatory and federal security standards (NIST, FISMA), • Document findings, trends, and lessons learned, • Support continuous improvement of security operations Location: Hybrid - 3 days onsite Brooklyn, NY, 2 days remote. Candidates must be able to reliably commute to the on-site location. Relocation assistance is not provided. Requirements Applicant must be a U.S. citizen residing in the U.S. This position requires obtaining a clearance through the Department of Education. Applicants must be willing to undergo a background check as part of the hiring process. Education: Bachelor’s degree from an accredited university or 5-7 years of relevant experience. Experience: 5+ years in cybersecurity (incident detection, response, SOC, cloud/infrastructure security) Certifications: (candidates MUST HAVE obtained at least one) • CISSP (Certified Information Systems Security Professional), • CompTIA Security+, • CompTIA CySA+, • CEH (Certified Ethical Hacker), • GCIA (GIAC Certified Intrusion Analyst), • CISA, • GCIH, • SIEM (Devo/Splunk), • Vulnerability scanners (Rapid7/Armis), • Cloud platforms (AWS/Azure), • Wireshar, • SQL, Python, • MS Power BI, • Health Care Plan (Medical, Dental & Vision), • Retirement Plan (401k, IRA), • Life Insurance (Basic, Voluntary & AD&D), • Paid Time Off (Vacation, Sick & Public Holidays), • Training & Development

Job DescriptionAmalgamated Bank seeks a dedicated Chief Information Security Officer to be responsible for designing and implementing the Bank’s Information Security program while protecting the business from cyber security threats. This is a hybrid role reporting to our NYC headquarters. By joining our team, you’ll be joining a Bank that believes that maintaining a diverse and inclusive workplace where everyone feels valued and respected is essential for us to grow as a company. We are dedicated to building a more equitable world in our everyday practices by embracing the values of our employees and customers. Essential Job Functions: • Develop and maintain an Enterprise Information Security Program, • Design a critical response process for Cyber Security incidents, • Identify, report and control Cyber Security incidents, • Manage and train Information Security staff and develop and deliver Information Security training to the Bank’s employees, • Continuously monitor threats to the Bank’s operating environment, • Approve and administer identity access policies, • Maintain a current understanding of the IT and Cyber Security threat landscape for the industry, • Ensure Bank compliance with relevant Information Security laws and applicable regulations, • Lead, and assess the results of periodic security tests, including internal and external penetration testing and phishing, • Schedule table-top exercises for Crisis Team and senior management and report findings to management, including implementation of recommendations, • Review and approve Information Security policies, procedures and controls, • Ensure that they are kept current and are communicated to staff/consultants, • Ensure staff/vendor compliance with the Bank’s security policies and procedures, • Manage a team of employees, contractors and vendors involved in Information Security, • Brief the Executive Team on status and risks, overall strategy and necessary budget, • Communicate best practices and risks to the Bank, • Perform a risk assessment of the Bank’s vulnerabilities in the Cybersecurity landscape and develop the Bank’s risk appetite for Information Security, • Develop Key Risk Indicators (KRIs) and dashboard metrics reporting to both the Management Team and the Board of Directors, • Establish strong working relationships with the Heads of IT and business lines, • Develop and present quarterly reports to the Board of Directors. Knowledge, Skills and Experience Requirements: • Master’s degree or equivalent experience, • Minimum of ten (10) years of experience, at least five (5) years focused on managing information security in a complex, matrixed environment, • Extensive experience in regulated industries, especially financial services; banking experience is preferred, • Proven ability to create and maintain enterprise-level information security programs, • Motivated individual with strong analytical, problem solving and root cause analysis skills, • Ability to work on multiple, time-critical projects simultaneously, • Knowledge of Data Privacy Laws, • Working knowledge of information security engineering concepts and principles, • Familiarity with DFS 500 and similar regulations, • Experience working with external regulators, including NY DFS and FDIC, • Excellent verbal and written communications, including presentation of complex data in easily, understood ways, • Ability to confidently interact at multiple levels in the organization and lead cross-departmental team projects, • Experience presenting to senior levels, including Board of Directors, • CISSP, CISA or CISM designations preferred Our job titles may span more than one career level. The starting base salary for this role is between $240,000.00 – $260,000.00. The actual base pay is dependent upon many factors, such as: training, transferrable skills, work experience, business needs and market demands. The base pay range is subject to change and may be modified in the future. Amalgamated Bank is an Equal Opportunity and Affirmative Action Employer, Minorities / Females / Individuals with Disability / Veterans. AmeriCorps, Peace Corps and other national service alumni are encouraged to apply. View our Pay Transparency Statement. Submission of a resume or any information regarding your qualifications does not constitute a promise or offer of employment. At Amalgamated Bank, we consider an applicant to be someone who has interviewed at least once, in person, with the hiring manager. Amalgamated Bank does not sponsor applicants for work visas. Hybrid Work Model Effective February 18, 2025, employees in office-based positions will be working a Hybrid work schedule consisting of three days or more, on-site per week, Monday - Thursday, although the specific days may vary by site or organization, with Friday designated as a remote-working day, unless business critical tasks require an on-site presence. This Hybrid work model does not apply to, and daily in-person attendance is required for, the contact center, branch service roles, and general services where the work to be performed is located at a Company site; positions covered by a collective-bargaining agreement (unless the agreement provides for hybrid work); or any other position for which the Company has determined the job requirements cannot be reasonably met working remotely. Please note, this Hybrid work model guidance does not apply to roles that have been designated as “remote”. Search Firm Representatives- Please Read Carefully Amalgamated Bank does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for the position will be deemed the sole property of our company. No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place, introductions are position specific. Please, no phone calls or emails.

Job Description Job Title: Network Security Manager (Hands-On) Location: New Jersey Salary: $175,000 - $195,000 We are working with a global organization looking to bring on a hands-on Network Security Manager to take ownership of their cybersecurity function. This position is highly focused on protecting the organization’s network and SaaS environment. This role is ideal for someone who can step in as both a strategic security leader and a hands-on operator. You’ll partner closely with internal IT leadership and external vendors to identify gaps, strengthen defenses, and implement practical, real-world security improvements. The environment is heavily SaaS-based, and this person will play a key role in building structure where it currently doesn’t exist. Your role: Security Leadership & Direction • Act as the organization’s go-to expert for all things security, • Provide independent insight and guidance, while constructively challenging existing approaches, • Evaluate current risks and establish a stronger, more resilient security framework, • Take the lead on addressing cybersecurity incidents, including ransomware-related exposure, • Conduct thorough root cause analysis and implement corrective actions, • Develop and enforce incident response plans to improve future readiness, • Secure a predominantly SaaS-based ecosystem, with emphasis on identity, access, and data protection, • Strengthen network defenses across firewalls, VPNs, and external access points, • Identify vulnerabilities tied to remote access, file transfers, and third-party connections, • Serve as a key point of contact for auditors and external clients, • Communicate effectively with both technical teams and non-technical stakeholders, • Ensure the organization is prepared for audits and security reviews at all times, • Evaluate and monitor third-party vendors to ensure security compliance, • Identify and mitigate risks introduced through external partnerships, • Stay directly involved in day-to-day security operations and tooling, • Work hands-on with network controls, systems, and incident response efforts, • Take ownership of execution — this is a build-and-do role, not just oversight What you’ve got: • 10+ years of experience in cybersecurity or network security roles, • Hands-on experience responding to and managing real security incidents, • Strong expertise in:, • Network security (firewalls, VPNs, segmentation), • SaaS security environments, • Identity and access management, • Endpoint protection and DLP solutions, • Experience operating in environments where security needed to be built or improved, • Confidence to challenge the status quo and drive better security practices, • Strong communication skills across technical teams, leadership, and external stakeholders, • A hands-on, roll-up-your-sleeves approach with a focus on execution Preferred: • Industry certifications such as CISSP, CISM, or similar, • Experience helping organizations recover from or mature after a security incident, • Familiarity with tools like CrowdStrike or comparable security platforms Company DescriptionWe believe that finding the right candidate shouldn’t be so hard. Neither should finding a job you love. By taking the time to understand your specific needs, we make the perfect placements and build relationships that last long after the position is filled. We’re fanatical about the right fit, and we look forward to finding yours.We believe that finding the right candidate shouldn’t be so hard. Neither should finding a job you love. By taking the time to understand your specific needs, we make the perfect placements and build relationships that last long after the position is filled. We’re fanatical about the right fit, and we look forward to finding yours.

Job Description Incisive. Inclusive. Invested. We’re Axinn. Experienced, tenacious, and always trial-ready, we are committed to understanding complex legal challenges that impact the future of our clients' businesses, globally. Focusing on antitrust, intellectual property, and high-stakes litigation, our extensive teams in the U.S. possess deep knowledge and client-side experience across a range of sectors, including technology, healthcare, life sciences, and consumer products. At Axinn, inclusivity is central to who we are. We have a purpose that goes beyond profit, which includes fostering a fair, welcoming workplace and supporting the communities where we live and work. We actively recognize talent and promote opportunities for all team members. By embracing the unique experiences and perspectives of our people, we fuel creativity and deliver results for our clients. The Firm’s Manager of Information Security is responsible for developing, implementing, and maintaining a comprehensive information security program to protect the firm’s data, systems, and client information. This role ensures the confidentiality, integrity, and availability of all information assets across the firm’s technology and operational infrastructure. The position involves close collaboration with IT leadership, legal professionals, and firm management to maintain compliance with client, regulatory, and industry standards. The position will serve as a strategic advisor to leadership, a hands-on technical manager, and a mentor to security staff, ensuring the Firm’s success in a highly evolving threat landscape. Responsibilities and Duties: • Develop and maintain the firm’s information security policies, standards, and procedures., • Develop, implement, and maintain a comprehensive information security program that aligns with the firm’s strategic objectives and client confidentiality obligations, • Establish metrics to monitor program effectiveness and present updates to Firm leadership, • Assess and manage cybersecurity risks; conduct vulnerability assessments and penetration testing, • Lead incident response efforts, including investigation, remediation, and reporting, • Develop playbooks and run regular tabletop exercises to ensure readiness, • Ensure compliance with NIST, ISO, HIPAA, and client confidentiality obligations, • Oversee (develop and maintain) security policies, procedures, training, and awareness programs for attorneys and staff, • Manage security tools (firewalls, endpoint protection, SIEM, IAM, etc.), • Collaborate with IT, Legal, and Compliance teams on security integration, vendor oversight, and cloud management, • Conduct regular risk assessments and vulnerability testing; manage mitigation and remediation efforts while presenting findings and reports to leadership, • Manage and mentor security staff, • Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field required (advanced degrees are preferred), • CISSP, CISM, CISA, GIAC, COMPTia Security+, GISO, certifications are a plus, • Minimum 7–10 years of progressive IT and information security experience, with at least 3 years in a leadership role, • Proven expertise with security frameworks and standards such as NIST, ISO 27001, and HIPAA, • Strong understanding of law firm technology environments, including document management systems, practice management tools, cloud-based platforms, and eDiscovery systems, • Demonstrated ability to lead incident response, risk management, and compliance efforts, • Excellent interpersonal and communication skills, both verbal and written, with experience presenting complex security topics to senior leadership and non-technical stakeholders, • Effective time management skills, with the ability to handle a variety of tasks simultaneously and manage multiple projects while prioritizing assignments, • Ability to build rapport with attorneys, professional staff, and vendors, • Self-motivated, with the ability to work independently but within a team environment At Axinn, we offer market competitive wages and generous benefit options to our valued employees. This includes, but is not limited to, the following: • Competitive starting pay and annual discretionary bonus and raise eligibility, • Generous paid time off benefits (vacation, personal days, holidays, and sick leave), • Firm paid short and long-term disability, plus life and accident insurance, • 401(k) Profit Sharing Plan and Cash Balance Retirement Plan with generous employer contributions (please ask for further details re: eligibility requirements), • Comprehensive medical, dental, and vision insurance options, • Flexible spending and health savings accounts (medical plan dependent), • Firm paid comprehensive Employee Assistance Program (EAP), • Student loan refinancing discounts, • Lifestyle reimbursement program This is a full-time, benefits eligible, exempt level position. Final rate of pay and title will be commensurate with the incumbent’s experience, with a targeted hiring range of $160,000 - $175,000 (the upper range reserved for highly qualified applicants). This position is currently available in either our NY, CT, or DC office locations. Axinn is an equal employment opportunity employer and is committed to creating an environment that draws upon the strength of the diversity of its workforce to achieve excellence in the Firm's field and beyond

Job Description Senior Solutions Architect – Cybersecurity (Remote, NYC / Tri-State) National Technology Solutions Provider | Strategic Cybersecurity Role | Leadership Growth Path A top-ranked, national technology solutions provider is seeking a Senior Security Solutions Architect to lead pre-sales architecture and client advisory efforts focused on advanced cybersecurity solutions across the NYC / Tri-State region. This is a remote position based anywhere in the region where you can work from home when not out for client meetings, strategy sessions, and industry events. We’re looking for a senior technologist with deep technical expertise, strong client engagement skills, and the ability to drive high-impact security strategy across enterprise accounts. Why You’ll Want This Role • Leadership Track: Clear path into Practice Management or Strategic Architecture leadership, • Strategic Clients: Guide enterprise and commercial organizations through next-gen security transformations, • Comp Package: Competitive base + strong bonus potential, full benefits, 401(k) match, paid certs & generous PTO, • Culture: Entrepreneurial, collaborative team with resources and support to drive results What You’ll Be Doing • Leading solution design and architecture across Zero Trust, Secure Access, Threat Protection, and Hybrid Cloud Security, • Conducting whiteboarding, discovery sessions, and executive briefings to align technical security strategy with client business needs, • Partnering with Account Executives to deliver strategic proposals, BOMs, solution narratives, and RFP responses, • Producing high-quality technical documentation including architectural diagrams, statements of work, and solution overviews, • Acting as a thought leader on cybersecurity frameworks (NIST, ISO, MITRE ATT&CK) and emerging market trends, • Driving enablement efforts with clients and partners around vendor selection, risk management, and compliance alignment, • Supporting solution evangelism at client events, workshops, and security forums What You Bring • 10+ years of experience in cybersecurity architecture, engineering, and strategy, • Strong expertise with security technologies across Cisco, Palo Alto, Fortinet, Crowdstrike, SentinelOne, Sumo Logic, etc., • Advanced certifications (CISSP, CISM, or equivalent) highly preferred, • Deep understanding of EDR, XDR, SIEM, IDS/IPS, firewalls, endpoint protection, and automation/orchestration tools, • Familiarity with incident response, threat modeling, and secure systems design, • Track record of engaging stakeholders and delivering large-scale security projects on time, • Excellent communication skills, with proven ability to deliver presentations, whiteboarding sessions, and technical documentation, • Strong business acumen to align cybersecurity strategy with organizational objectives Benefits & Perks • Competitive base + performance-based bonus, • Full medical, dental, and vision coverage, • 401(k) with company match, • Paid certifications, training, and ongoing career development, • Generous PTO + paid holidays If you’re a strategic-minded security architect with a passion for shaping enterprise cybersecurity strategy across the NYC / Tri-State region, let’s connect. Apply today or send your resume directly to: Interviews are moving quickly for qualified candidates. Additional openings: levelociti.com/job-search

Job Description *This position is contingent upon award * Responsibilities: • Drive enterprise cybersecurity risk management by quantifying risks, assessing control effectiveness, and ensuring alignment with NIST 800-53, FISMA, and DOE policies, • Lead enterprise-wide risk assessments, audits, and user awareness programs, • Maintain and manage the enterprise Risk Register and POA&M lifecycle, • Monitor/report critical cyber risks; use dashboards and metrics to inform leadership, • Design security awareness programs and phishing simulations, • Collaborate with engineers and analysts to define compliance guardrails and prioritize remediation activities, • Generate automated risk metrics, heat maps, and executive-level security reports Location: Hybrid - 3 days onsite Brooklyn, NY, 2 days remote. Candidates must be able to reliably commute to the on-site location. Relocation assistance is not provided. Requirements Applicant must be a U.S. citizen residing in the U.S. This position requires obtaining a clearance through the Department of Education. Applicants must be willing to undergo a background check as part of the hiring process. Education: Bachelor’s degree from an accredited university or 5-7 years of relevant experience. Experience: 3+ years in GRC, third-party risk management, federal compliance (NIST 800-53, 800-37) Certifications: (candidates MUST HAVE obtained at least one) • CISA (Certified Information Systems Auditor), • CRISC, • CGEIT, • CISSP, • CompTIA Security+, • CCSK (Certificate of Cloud Security Knowledge), • GRC platforms (Archer/ServiceNow), • TPRM tools (OneTrust/Prevalent), • Awareness platforms (KnowBe4/Proofpoint), • MS Power BI, • Advanced Excel, • Health Care Plan (Medical, Dental & Vision), • Retirement Plan (401k, IRA), • Life Insurance (Basic, Voluntary & AD&D), • Paid Time Off (Vacation, Sick & Public Holidays), • Training & Development

Job DescriptionThis role sits within the Information Security team and focuses on Identity and Access Management (IAM) governance and execution across the enterprise. The Lead IAM Analyst oversees user access controls, recertifications, and joiner/mover/leaver processes to ensure access aligns with role‑based security standards and regulatory requirements. Essential Job Duties • Lead user access recertification campaign oversight in collaborating with multiple application owners and stakeholders to ensure completeness and accuracy of all recertifications and produce documentation for auditors., • Bi-weekly checks of joiners, movers and leavers (JML) population to ensure appropriate provisioning and deprovisioning occurs., • Monthly reviews of domain administrator password check outs (Keepass, Safeguard.), • Ensure role-based access control is aligned with access users have by maintaining RBAC database., • Work with managers and application owners to ensure roles are accurate to actual access and appropriate., • Review user access for improper entitlements such as toxic combinations across applications., • Participate as a member of a distributed security and technology team responsible for prioritizing requirements and entitlements, as well as establishing and maintaining identities for business applications within IAM solutions., • Become a subject matter expert to create and maintain IAM business process and architectural requirements., • Validate identity controls and settings that align with policies and identity governance and administration (IGA) process., • Formulate business cases, evaluate product capabilities and ensure requirements can be met., • Influence IAM project timeframes, goals, strategic plans and budget constraints., • Research and review process to ensure operational efficiency for security team and employees., • Review integrations and assess their state related to business and security needs., • Understand associated businesses’ organizational and technical controls within global frameworks., • Regularly review and measure trends, threats and vulnerabilities with access to applications and data., • Work closely with business stakeholders to evaluate change impacting existing business cases., • Govern access models to verify alignment with organizational risk posture., • Support IAM governance, policies and solutions across SSO, directory, certificate, MFA, zero trust, privileged accounts and automation., • Oversee access to on-premises, cloud infrastructure and applications for a distributed workforce., • Conduct business impact and risk exposure and make recommendations where security can improve., • Review internal, external and contractor accounts as part of periodic audits., • Participate in quality assurance of solutions and features to ensure optimal use and security IAM best practices., • Make recommendations to improve automation, security practices and end-user experience., • Frequently interact with business units to understand their plans, risk appetite and business obligations., • Facilitate opportunities to improve efficiencies automating and advancing IAM and IGA processes., • Support policies for access, data protection, security and compliance framework requirements., • Be aware of advanced technologies and use of AI/machine learning as businesses adopt to improve operational efficiency., • Preferably 5-plus years’ experience in security administration, with 3-plus years’ technical hands-on IAM practitioner., • Administration and familiarity with directory services, Windows and Entra ID/Azure AD, SSO, MFA, zero trust, attribute-based access, and policy and role-based access., • Experience administering IAM systems and access controls aligning with security governance fundamentals., • Ideally familiar with one or more regulatory requirements and laws such as, but not limited to, PCI, FFIEC, SOX, and GLBA. Additionally, experience in one or more: CSF, ITIL., • Preferable experience with one or more scripting languages (Python, PowerShell and Bash)., • Track record acting with integrity, taking pride in work, seeking to excel, being curious and flexible., • Strong written and oral communication skills across varying levels of the organization., • Excellent judgment and the ability to make quick decisions when working with complex situations., • High degree of integrity, trustworthiness and confidence; represents the company and its management team with the highest level of professionalism. Education Requirements • Bachelor’s degree preferred in cybersecurity, computer science, engineering or related field. Experience Requirements • 5-plus years of cybersecurity or IT practitioner experience. Certification Requirements • Preferable: CISSP, Microsoft Identity & Access Administrator Associate, GSEC, GISF, GISP, CIPP Our job titles may span more than one career level. The starting base salary for this role is between $90,000 – $110,000. The actual base pay is dependent upon many factors, such as: training, transferrable skills, work experience, business needs and market demands. The base pay range is subject to change and may be modified in the future. Amalgamated Bank is an Equal Opportunity and Affirmative Action Employer, Minorities / Females / Individuals with Disability / Veterans. AmeriCorps, Peace Corps and other national service alumni are encouraged to apply. View our Pay Transparency Statement. Submission of a resume or any information regarding your qualifications does not constitute a promise or offer of employment. At Amalgamated Bank, we consider an applicant to be someone who has interviewed at least once, in person, with the hiring manager. Amalgamated Bank does not sponsor applicants for work visas. Hybrid Work Model Effective February 18, 2025, employees in office-based positions will be working a Hybrid work schedule consisting of three days or more, on-site per week, Monday - Thursday, although the specific days may vary by site or organization, with Friday designated as a remote-working day, unless business critical tasks require an on-site presence. This Hybrid work model does not apply to, and daily in-person attendance is required for, the contact center, branch service roles, and general services where the work to be performed is located at a Company site; positions covered by a collective-bargaining agreement (unless the agreement provides for hybrid work); or any other position for which the Company has determined the job requirements cannot be reasonably met working remotely. Please note, this Hybrid work model guidance does not apply to roles that have been designated as “remote”. Search Firm Representatives- Please Read Carefully Amalgamated Bank does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for the position will be deemed the sole property of our company. No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place, introductions are position specific. Please, no phone calls or emails.

Job Description Job Code 839 Department Name IT Infrastructure Reports To Manager, Information Security FLSA Status Exempt Union Code N/A Management No About Us: Building Services 32BJ Benefit Funds (“the Funds”) is the umbrella organization responsible for administering Health, Pension, Retirement Savings, Training, and Legal Services benefits to over 100,000 SEIU 32BJ members. Our mission is to make significant contributions to the lives of our members by providing high quality benefits and services. Through our commitment, we embody five core values: Flexibility, Initiative, Respect, Sustainability, and Teamwork (FIRST). By following our core values, employees are open to different and new ways of doing things, take active steps to improve the organization, create an environment of trust and respect, approach their work with the intent of a positive outcome, and work collaboratively with colleagues. The Funds oversees and manages $9 billion of dollars in assets, which are made up of many, varied and complex funds. The dollars come from a number of sources, including the property owners who pay into the funds on behalf of their employees, and as such, requires those who oversee and manage the money to be highly skilled financial management people. For 2025 and beyond, 32BJ Benefit Funds will continue to drive innovation, equity, and technology insights to further help the lives of our hard-working members and their families. We use cutting edge technology such as: M365, Dynamics 365 CRM, Dynamics 365 F&O, Azure, AWS, SQL, Snowflake, QlikView, and more. Please take a moment to watch our video to learn more about our culture and contributions to our members: youtu.be/hYNdMGLn19A Job Summary: Under the supervision of the Manager, Information Security, the Information Security Analyst is responsible to plan and carry out security measures to protect Funds’ computer networks, systems, and digital and physical technology assets. Performs assessments, develops and implements information security policies, procedure, and guidelines. Works inter-departmentally to identify and correct flaws in the Funds’ security systems, solutions, and applications while recommending specific measures that can improve the Funds’ overall security posture. Essential Duties and Responsibilities: • Provide guidance and expertise in the field of risk management regarding the protection and security of digital assets in the cloud and on premise., • Design and develop Information Security Architectures to prevent unauthorized access to our information and data breaches., • Develop and implement information security policies and procedures; develops security guidelines and safe practices for Funds’-wide computing and networking systems, and maintain the documentation., • Manage, maintain and monitor security technologies such as vulnerability scanning solutions, IDS/IPS, anti-virus technologies, DLP capabilities, SIEM technologies, host forensics and malware analysis, web application firewalls and proxy solutions., • Manage real time threat detention technologies to identify and quarantine threats, Monitor Endpoint Security Alerts and take corrective action., • Minimize security threats by examining governance, technology infrastructure, and facilities to identify security deficiencies, using risk analysis and follow up with corrective action plan., • Monitor internal control systems to ensure appropriate access levels are maintained, protect against unauthorized system access, modification and destruction., • Review security related reports, logs and occurrences; escalate issues and initiate security response procedures., • Create and review vulnerability reports, track compliance with vulnerability management policies, and escalate., • Research and evaluate emerging technologies in support of security technology enhancements, propose technical solutions to management, to address security weaknesses and coordinate with relevant stakeholders to implement., • Reviews, updates, and enforces data security practices within the organization; tests for exposures to ensure adherence to guidelines and procedures, and works with platform experts to implement remedial measures as appropriate., • Tests security controls and manages the associated remediation of any deficiencies as needed., • Assess security information, triaging and responding to security events, identify false positives, and conduct correlation analysis across numerous internal and external data sources while prioritizing information security incidents., • Perform Project Management tasks for security initiatives /projects., • Manage incident-handling processes, which include implementation of containment, protection, and remediation activities., • Coordinates the handling and resolution of security incidents, to include system intrusions and abuse, and acts as a primary point of contact., • Develop responses to internal & external audits, penetration tests and vulnerability assessments., • Support Information Security training and awareness by providing ideas and content, assist HR with employee security awareness education and training., • Manage multiple priorities and deadlines concurrently., • Provide support after hours, on weekends and through on-call rotation., • Performs other duties as assigned Qualifications (Competencies): • To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required., • Minimum 4 years in Information Security, or IT OPS management and systems administration with at least 2 years specific to IT Security;, • Strong knowledge of Information Security design, principles, and processes; Experience in writing and /maintaining information security policies, standards, and guidelines;, • Demonstrated ability to monitor and audit network security systems such as Firewalls, IPS, SIEM, DLP, web proxy, NAC, and Vulnerability scanners;, • Hands on experience with mitigating security controls (i.e., anti-virus, IPS/IDS, DLP, web and network proxies, URL content filtering, multi-factor authentication, SSL VPNs);, • Experience in incident response required; In-depth knowledge of Windows/Unix operating system forensics, event logging systems, authentication methods, remote and local web application security, penetration testing);, • Advanced experience in networking (TCP/IP) protocols, DNS, LDAP, AD, DHCP, HTTP, Web browsers, Firewalls, and other computer/network security and system administration;, • Familiar with regulatory compliance regulations (PCI, SOX, PII, HIPAA, etc.);, • Strong knowledge of common security frameworks (ISO, NIST, etc.);, • Experience in risk assessments and vulnerability management;, • General knowledge of Endpoint protection solutions;, • Knowledge of mainstream operating systems (Microsoft Windows, Linux, IOS) and a wide range of security technologies;, • General knowledge of Database technologies and queries (Microsoft SQL, MySQL, Oracle, etc.);, • Ability to independently identify, research and resolve issues with minimal amount of supervision, and ability to work with peers in a team effort; Soft Skills (Interpersonal Skills): • Detail oriented with excellent organization and analytical skills;, • Ability to plan, take initiatives to accomplish objectives in timely fashion, and work independently;, • Ability to prioritize work and meet deadlines;, • Ability to establish and maintain effective working relationships with project team members, supervisors, and other employees. Education: Bachelor’s degree in Computer Science, or a related discipline. Language Skills: Speak, read, write and understand English Reasoning Ability: High Certificates, Licenses, Registrations: CISM (Certified Information Security Manager), CISSP (Certified Information Systems Security Professional), or CISA (Certified Information Systems Auditor) certification are highly preferred. Physical Demands: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals to perform the essential functions. The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals to perform the essential functions. • Under 1/3 of the time: Standing, Walking, Climbing or Balancing, Stooping, Kneeling, Crouching, or Crawling, • Over 2/3 of the time: Talking or Hearing, • 100% of the time: Using Hands Work Environment: The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. • 1/3 to 2/3 of the time: Work near moving or mechanical parts, exposure to radiation, moderate noise.

Job Description We are sharing a specialised part-time consulting opportunity for experienced Cyber Security Experts to contribute to high-impact technical projects involving threat analysis, incident response, attack simulation, and structured security evaluation workflows. This role supports current and upcoming remote consulting opportunities focused on structured technical workflows, security analysis, technical evaluation, and high-quality project execution. Selected professionals will apply their real-world defensive and offensive security expertise to assess complex cyber threats, evaluate investigative and adversarial workflows, follow technical instructions with precision, and contribute to high-quality technical deliverables. Key Responsibilities Professionals in this role may contribute to: Blue Team / Defensive Security • Investigate and analyze security incidents such as phishing, ransomware, lateral movement, and privilege escalation, • Review telemetry and logs from SIEM, EDR/XDR, firewall, cloud, and identity platforms, • Classify adversary activity using frameworks such as MITRE ATT&CK, • Evaluate detection rules, alert quality, triage workflows, and response strategies, • Analyze full attack chains including initial access, persistence, privilege escalation, and data exfiltration, • Simulate attacker behavior to identify detection gaps and evasion techniques, • Evaluate exploit techniques, payload behavior, and adversary tactics, • Provide structured reasoning explaining investigative and adversarial decisions, • Identify weaknesses in threat analysis and security workflows, • 5+ years of professional cybersecurity experience, • Experience in roles such as:, • SOC Analyst (Level II/III), • Incident Responder, • Threat Hunter, • Detection Engineer, • Red Team Operator / Penetration Tester, • Offensive Security Consultant, • Experience with SIEM platforms such as Splunk, Sentinel, QRadar, or Elastic, • Experience with EDR/XDR tools such as CrowdStrike, Defender, or Carbon Black, • Log analysis and event correlation, • Network traffic analysis using Wireshark, Zeek, or tcpdump, • Penetration testing methodologies, • Adversary emulation and attack simulation, • Experience with frameworks such as Metasploit or Cobalt Strike, • Privilege escalation and lateral movement techniques, • Attack surface analysis and evasion methodsPreferred Qualifications, • Certifications such as:, • OSCP, OSEP, CRTO, • GCIA, GCFA, GCIH, • CISSP, • Experience mentoring security analysts or red team members, • Scripting skills in Python, PowerShell, or BashWhy This Opportunity, • Apply real-world offensive and defensive security expertise to high-impact technical work, • Contribute to threat analysis, incident response, and security evaluation workflows, • Help improve the quality and reliability of security-focused technical deliverables, • Flexible remote work with competitive hourly compensationContract Details, • Independent contractor role, • Fully remote with flexible scheduling, • Compensation: $85–$110 per hour By submitting this application, you acknowledge that your information may be processed by 24-MAG LLC for recruitment and opportunity matching in accordance with our Privacy Policy:

Job Description Maven is the world's largest virtual clinic for women and families on a mission to make healthcare work for all of us. Maven's award-winning digital programs provide clinical, emotional, and financial support all in one platform, spanning fertility & family building, maternity & newborn care, parenting & pediatrics, and menopause & midlife. More than 2,000 employers and health plans trust Maven's end-to-end platform to improve clinical outcomes, reduce healthcare costs, and provide equity in benefits programs. Recognized for innovation and industry leadership, Maven has been named to the Time 100 Most Influential Companies, CNBC Disruptor 50, Fast Company Most Innovative Companies, and FORTUNE Best Places to Work. Founded in 2014 by CEO Kate Ryder, Maven has raised more than $425 million in funding from top healthcare and technology investors including General Catalyst, Sequoia, Dragoneer Investment Group, Oak HC/FT, StepStone Group, Icon Ventures, and Lux Capital. To learn more about Maven, visit us at mavenclinic.com. An award-winning culture working towards an important mission – Maven Clinic is a recipient of over 30 workplace and innovation awards, including: • Fortune Change the World (2024), • CNBC Disruptor 50 List (2022, 2023, 2024), • Fortune Best Workplaces for Millennials (2024), • Fortune Best Workplaces in Health Care (2024), • TIME 100 Most Influential Companies (2023), • Fast Company Most Innovative Companies (2020, 2023), • Built In Best Places to Work (2023), • Fortune Best Workplaces NY (2020, 2021, 2022, 2023, 2024), • Great Place to Work certified (2020, 2021, 2022, 2023, 2024), • Fast Company Best Workplaces for Innovators (2022), • Built In LGBTQIA+ Advocacy Award (2022)What You'll DoSecurity Platform Engineering, • Design and implement scalable infrastructure supporting HIPAA, SOC 2, and ISO 27001 compliance, • Build and maintain systems for identity, authentication, and access management (Okta / GCP IAM / Auth0/ OPA), • Implement observability and anomaly detection across microservices, data stores, and SaaS platforms, • Establish Zero Trust principles and enforce least-privilege access company-wide, • Develop compliance observability dashboards and automated evidence collectionSecurity Automation & Tooling, • Create self-service security tools that integrate with developer workflows (GitLab CI/CD, Terraform), • Automate onboarding/offboarding, access reviews, and approvals, • Integrate software-supply-chain security (SBOM, dependency scanning), • Develop or adopt AI-assisted security tooling to proactively identify risks, • Automate policy enforcement, SAST/DAST scans, and compliance verificationApplication & Data Security, • Lead threat modeling and security architecture reviews for new products and services, • Partner with product and data teams to embed secure-by-default design patterns, • Ensure encryption, access tracking, and secure data handling across PHI workflows, • Contribute to incident response, post-mortems, and continual improvement of security postureLeadership & Collaboration, • Act as Maven's technical authority for security engineering, • Mentor peers and promote secure coding and architecture practices, • Partner cross-functionally (Engineering, Compliance, Clinical, Legal) to align on security strategy, • Champion an engineering culture of transparency, accountability, and continuous improvementWhat You'll BringRequired, • 8+ years of software engineering experience, including 3+ in security infrastructure or application security, • Proven ability to design and implement large-scale, distributed, cloud-native systems, • Strong coding proficiency in Python, TypeScript, Go and/or Rust, • Deep understanding of cloud security (GCP preferred; AWS/Azure welcome), • Experience with Kubernetes, containers, and infrastructure-as-code (Terraform), • Familiarity with security testing frameworks and secure SDLC principles, • Excellent communication and documentation skillsPreferred, • Expertise in Zero Trust architectures, authentication/authorization frameworks, and data-loss prevention, • Experience with security compliance automation (SOC 2, ISO 27001, PCI-DSS, NIST), • Background in data security telemetry and threat detection, • Familiarity with AI/ML security and AI-assisted analysis tools, • Exposure to supply-chain security and CI/CD pipeline hardening, • Certifications (CISSP, GCP Professional Cloud Security Engineer, OSCP) a plusWhat Makes You a Great Fit, • You take a pragmatic, automation-first approach to solving security problems, • You balance rigor with velocity, enabling teams to move quickly without compromising trust, • You communicate clearly with both technical and non-technical stakeholders, • You're curious, adaptable, and eager to lead initiatives from concept to production, • You care deeply about our mission—building safer, smarter healthcare for women and families The base salary range for this role is $221,000 - $260,000 per year. You will also be entitled to receive equity and benefits. Individual pay decisions are based on a number of factors, including qualifications for the role, experience level, and skillset. Maven embraces a flexible hybrid work model. Our teams primarily operate from the New York Metropolitan area, NY, and remotely via San Francisco/Bay Area, CA, Seattle, WA, Boston, MA, Chicago, IL, and Washington, D.C. For those in our New York City office, we encourage in-person collaboration by requiring team members to work onsite three days a week (Tuesday, Wednesday, Thursday). For those based in San Francisco/Bay Area, CA, Seattle, WA, Boston, MA, Chicago, IL, and Washington, D.C., we encourage in-person collaboration by requiring team members to attend quarterly Work Together Days within these cities. This policy aims to balance remote work flexibility with the benefits of face-to-face interaction. At Maven we believe that a diverse set of backgrounds and experiences enrich our teams and allow us to achieve above and beyond our goals. If you do not have experience in all of the areas detailed above, we hope that you will share your unique background with us in your application and how it can be additive to our teams. Benefits That Work For You Our benefits are designed to support your health, well-being and career development, helping you thrive both personally and professionally. We remain focused on providing a competitive benefits package for our employees. On top of standards such as employer-covered health, dental, and insurance plan options, we offer an inclusive approach to benefits: • Maven for Mavens: access to the full platform and specialists, including care for mental health, reproductive health, family planning and pediatrics., • Whole-self care through wellness partnerships, • Hybrid work, in office meals, and work together days, • 16 weeks 100% paid parental leave and new parent stipend (for Mavens who've been with us for 1 year+), • Annual professional development stipend and access to a personal career coach through Maven for Mavens Maven is an affirmative action and equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. Maven is committed to providing access, equal opportunity and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. Maven Clinic interview requests and job offers only originate from an @mavenclinic.com email address (e.g ). Maven Clinic will never ask for sensitive information to be delivered over email or phone. If you receive a scam issue or a security issue involving Maven Clinic please notify us at: . For general and additional inquiries, please contact us at .

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash

Delivering with Uber is an alternative to a part-time or full-time job and can get you earning cash quickly.Delivering with Uber allows you to earn quick cash while maintaining the flexibility your schedule requires (gig, part-time, full-time, seasonal, hourly, or temporary).With Uber, you can cash