Trabajos grc en New York, New YorkCrear alertas

Job Description Business Manager MUST be local to New York City, Hybrid Schedule 3 days onsite Salary Range: $110k to $175 No Sponsorship Available This role supports the Infrastructure Services Business Management Lead. Your core competencies must include project management, data analytics, reporting, governance and compliance, financial management, operations, and strategy. You will be expected to interact with team members of all levels, be highly skilled in presenting information, be able to anticipate issues and address them quickly. The ability to navigate sensitive information and topics is a must. Responsibilities: • Proficient in Excel (understanding of pivot tables, large data sets, power queries a big benefit), • Proactive attitude as this role constantly requires fixing issues.The ideal candidate will need to see the issue and address it, as you will be keeping the engine running and touch everything within the organization., • Create new processes to enable Infrastructure Services to scale effectively and adhere to overall strategy., • Support collection of materials for inbound requests (e.g., IT GRC, Head Office, regulators) and document as necessary, • Provide monthly reporting on key areas such as key accomplishments, budget forecasts; identify and escalate issues as needed, • Manage multiple projects, planning, and problem solving to deliver positive results for the organization., • Support business and financial planning and spend vs. budget monitoring., • 5+ years of experience working as Business Manager or Project Manager in a Technology organization or other relevant experience in consulting or business operations., • Comfortable with an evolving business environment, changing priorities, and working with junior to senior people, independently or in a group setting., • Strong execution skills: Demonstrated experience delivering across multiple work streams with varying complexities and timelines., • Strong analytical and problem-solving abilities with keen attention to detail., • Executive level presentation skills: ability to distill large amounts of information into concise themes and reporting., • Experience working with technology toolsets such as SharePoint, Jira & ServiceNow, Apptio suite, • Advanced skills in MS Office (Excel and PowerPoint)., • Extraordinary written and verbal communication skills., • Experience in vendor management (financial management, knowledge of contracts, governance of contracts, technology (not infrastructures specifically but comes from tech field), • Knowledge of financial management and experience in that (not an accountant but has held a budget and maintained the budget)

Summary The IT GRC Engineering Principal is the senior technical leader responsible for architecting, building, and maintaining the systems, workflows, automation, and integrations that power the IT Governance, Risk, and Compliance division. This role transforms manual processes into scalable, automated capabilities and ensures seamless integration across the Information Risk and Cybersecurity (IRC) department's technology ecosystem. The Principal serves as a trusted advisor to the VP of IT GRC and plays a critical role in shaping the technical strategy and execution of the IT GRC division. Primary Duties & ResponsibilitiesTechnical Strategy and Leadership * Develop and direct the technical strategy and execution roadmap for GRC platforms, automation, integration patterns, and data models in coordination with IT GRC Strategy Lead. * Participate in efforts to establish a cohesive automation strategy within the IRC department, driving collective advancements in automation objectives. * Align GRC technology strategies with broader organizational functions to ensure cohesive and effective operations. Systems Architecture and Integration * Build and implement integrations between GRC systems and enterprise platforms (e.g., CMDB, IAM, monitoring tools), ensuring real-time visibility into risk and compliance posture. * Implement and refine system standards, workflow logic, and data schemas to align with the established IT Process, Risk, and Control Framework. Ensure these technical components support consistency, quality, and adherence to existing control requirements. Automation and Modernization * Lead the automation of GRC processes such as evidence collection, control testing, compliance reporting, risk scoring, and issue tracking. * Drive the transformation from manual governance processes to automated, embedded, and measurable frameworks. Data Management and Reporting * Develop data models and dashboards that provide meaningful insights into risk, compliance, and control effectiveness. * Ensure data quality, normalization, and consistency across the IT GRC technology ecosystem. Mentorship and Cross-Functional Collaboration * Mentor IT GRC analysts, engineers, and process owners on workflow automation, systems design, and technical enablement. * Facilitate cross-functional initiatives and the flow of information between stakeholders and other teams. Trusted Advisor and Strategic Partner * Act as a critical advisor to the VP of IT GRC by offering technical insights and support for strategic planning, roadmap development, and operational planning, ensuring that technical solutions align with broader strategic goals. * As a member of the IT GRC Leadership Team, contribute to identifying and addressing barriers to success by developing and implementing strategic solutions and fostering collaboration across the team. Qualifications * Bachelor’s or Master’s degree in Computer Science, Information Technology, or a related field. * 10-15 years of professional experience in IT governance, risk, and compliance, with a focus on technical strategy and architecture. * Leadership experience in managing diverse teams and working across organizational boundaries. * Expertise in GRC platform architecture and administration (e.g., ServiceNow GRC/IRM, Archer, OneTrust, Fusion). * Proficiency in systems integration (APIs, service buses) and automation design (scripting, low-code platforms). * Strong interpersonal and presentation skills, with the ability to communicate effectively at all organizational levels, including senior leaders. * Proven problem-solving, strategic, and critical thinking skills. * High degree of learning agility, with the ability to anticipate needs and adapt in a dynamic environment. Compensation Range: Pay Range - Start: Pay Range - End: Geographic Specific Pay Structure: Structure 110: $149,380.00 USD - $277,420.00 USD Structure 115: $156,170.00 USD - $290,030.00 USD We believe in fairness and transparency. It’s why we share the salary range for most of our roles. However, final salaries are based on a number of factors, including the skills and experience of the candidate; the current market; location of the candidate; and other factors uncovered in the hiring process. The standard pay structure is listed but if you’re living in California, New York City or other eligible location, geographic specific pay structures, compensation and benefits could be applicable, click here to learn more. Grow your career with a best-in-class company that puts our clients' interests at the center of all we do. Get started now! Northwestern Mutual is an equal opportunity employer who welcomes and encourages diversity in the workforce. We are committed to creating and maintaining an environment in which each employee can contribute creative ideas, seek challenges, assume leadership and continue to focus on meeting and exceeding business and personal objectives. Skills Analytical Thinking (NM) - Advanced, Compliance (NM) - Advanced, Risk Consulting (NM) - Advanced, Risk Optimization (NM) - Advanced, Learning Agility & Critical Thinking (NM) - Expert, Cross Functional Partnering & Planning (NM) - Expert, Data Security (NM) - Expert, Risk Assessment & Identification (NM) - Expert, Customer Centricity (NM) - Expert, Risk Mitigation (NM) - Expert, Remediation Planning (NM) - Advanced, Coaching & Mentoring (NM) - Advanced, Engineering Expertise & Practices (NM) - Expert, Business Application (NM) - Advanced, Adaptive Communication (NM) - Advanced, Strategic Vision & Planning (NM) - Intermediate, Negotiation & Managing Objection (NM) - Advanced, Strategic Thinking (NM) - Expert, Process Improvement (NM) - Advanced, Risk Governance (NM) - Advanced, Risk Management Strategy (NM) - Advanced, Scenario Planning (NM) - Intermediate, Technology Integration (NM) - Intermediate FIND YOUR FUTURE We’re excited about the potential people bring to Northwestern Mutual. You can grow your career here while enjoying first-class perks, benefits, and our commitment to a culture of belonging. • Flexible work schedules, • Concierge service, • Comprehensive benefits, • Employee resource groupsPandoLogic. Keywords: VP of IT, Location: New York, NY - 10060

Key Responsibilities Lead and manage the GRC and Security Engineering teams, overseeing strategy and performance management Own governance, risk, and compliance programs, ensuring audit readiness and policy management Oversee security architecture and incident response, managing budgets and repo

A company is looking for a GRC Analyst.

Job Description Purpose of Position: The Information Technology Governance and Compliance manager owns the IT governance framework, this role is meant to function as first and second line risk for IT, line 1.5. Essential Job Functions: • Responsible for managing all request and interactions from second line risk, third line audit, external audit, and SOX., • IT representative for all audit related initiatives. Including but not limited to attending all audit calls, gathering evidence artifacts independently where possible and speaking to the IT control environment., • Accountable for definition, documentation, and build out of IT governance framework, • Ownership over development and maintenance of the Information Technology General Controls (ITGC)., • Responsible for all Policies, Standards, and Procedures for IT. Including but not limited to drafting, updating, and maintaining in a central repository., • Tracking and reporting of IT KRI’s., • Third party vendor onboarding IT risk assessments., • Maintain an annual calendar of risk and audit related initiatives to ensure adequate resource planning., • Manage all IT aspects in the enterprise GRC tool., • Other duties as assigned by manager. Knowledge, Skills and Experience Requirements: • Bachelor’s degree or equivalent experience, • Minimum ten (10) years working in IT preferably withing financial serves, • Thorough understanding of Risk Frameworks NIST, ISO, COBIT, etc., • Thorough understanding of ITIL., • Strong technical acumen., • Excellent written and verbal communication skills, • Excellent planning skills with attention to detail, • Proficient with the MS Office suite of tools (Excel, PowerPoint, Word)

Job DescriptionCoreWeave is The Essential Cloud for AI™. Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at You'll Do The Security Risk IC at CoreWeave will be responsible for identifying, documenting, tracking internal/external risks, supporting the risk assessment process, driving corrective action plans as well as, supporting Risk Owners across the organization in their remediation plans. This role will report to the Security Risk Management Lead and sit within the Chief Information Security Officer (CISO) organization. • Collaborate with cross-functional teams (Security, IT, Cloud, Engineering, Legal, and Privacy) to capture the scope and impact of risks, summarize mitigation plans, and present findings to Risk Owners and executives., • Build and maintain stakeholder relationships across CoreWeave to increase risk visibility and foster a culture of shared responsibility., • Develop and maintain repeatable documentation, tracking, and prioritization systems for the company risk register and enterprise risk assessments., • Experience leveraging advanced methods—including cyber risk quantification, automated telemetry-based risk signals, and LLM-assisted workflows—to define loss scenarios, assign measurable impact values, identify emerging risks, classify them, and streamline reporting for prioritized remediation., • Monitor regulatory and organizational changes, together with Legal, and Security and Privacy Compliance, to assess potential impacts on security and privacy obligations., • Perform periodic control and risk assessments aligned with compliance frameworks (e.g., SOX, SOC 2, ISO 27001:2022, FedRAMP, GDPR)., • Flex to support broader GRC functions, including audit readiness, customer security questionnaires, and program health metrics., • Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent practical experience., • 5+ years of professional experience in Risk Management, IT Security, Compliance, or Audit functions, including working with the NIST Cybersecurity Framework (or equivalent)., • Proven experience in compliance, risk management, and/or IT security program management in cloud-native or highly regulated environments., • Working knowledge of risk quantification methodologies (e.g., FAIR, Cyber Value-at-Risk) and their application in prioritizing remediation., • Strong understanding of industry standards and regulations: SOX, SOC 2, ISO 27001:2022, ISO 27701, NIST 800-53, NIST CSF, FedRAMP, GDPR, HIPAA., • Broad knowledge of core information security domains: Cloud Computing, Kubernetes, Physical Security, Third-Party Risk Management (TPRM), Identity & Access Management, Data Security, Vulnerability & Patch Management, Malware Defenses., • Demonstrated ability to translate technical vulnerabilities and operational risks into clear business-impact statements for executives and non-technical stakeholders., • Experience reviewing and adapting risk management frameworks in response to business, technology, and regulatory changes., • Strong planning, organizational, and project management skills; proven ability to manage shifting priorities with composure and sound judgment., • Self-starter with a creative, solutions-oriented mindset and minimal supervision requirements., • Hands-on experience with cyber risk quantification tools, automation of risk signals, and LLM-assisted workflows for risk identification and reporting., • Experience collaborating directly with engineers to integrate risk telemetry into tooling and dashboards., • Excellent negotiation and influence skills to drive alignment with business partners on remediation actions., • Be Curious at Your Core, • Act Like an Owner, • Empower Employees, • Deliver Best-in-Class Client Experiences The base salary range for this role is $122,000 to $237,000. The starting salary will be determined based on job-related knowledge, skills, experience, and market location. We strive for both market alignment and internal equity when determining compensation. In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program (all based on eligibility) What We Offer The range we've posted represents the typical compensation range for this role. To determine actual compensation, we review the market rate for each candidate which can include a variety of factors. These include qualifications, experience, interview performance, and location. In addition to a competitive salary, we offer a variety of benefits to support your needs, including: • Medical, dental, and vision insurance - 100% paid for by CoreWeave, • Company-paid Life Insurance, • Voluntary supplemental life insurance, • Short and long-term disability insurance, • Flexible Spending Account, • Health Savings Account, • Tuition Reimbursement, • Ability to Participate in Employee Stock Purchase Program (ESPP), • Mental Wellness Benefits through Spring Health, • Family-Forming support provided by Carrot, • Paid Parental Leave, • Flexible, full-service childcare support with Kinside, • 401(k) with a generous employer match, • Flexible PTO, • Catered lunch each day in our office and data center locations, • A casual work environment While we prioritize a hybrid work environment, remote work may be considered for candidates located more than 30 miles from an office, based on role requirements for specialized skill sets. New hires will be invited to attend onboarding at one of our hubs within their first month. Teams also gather quarterly to support collaboration California Consumer Privacy Act - California applicants only CoreWeave is an equal opportunity employer, committed to fostering an inclusive and supportive workplace. All qualified applicants and candidates will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. As part of this commitment and consistent with the Americans with Disabilities Act (ADA), CoreWeave will ensure that qualified applicants and candidates with disabilities are provided reasonable accommodations for the hiring process, unless such accommodation would cause an undue hardship. If reasonable accommodation is needed, please contact: . Export Control Compliance This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information, applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful permanent resident (green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158, (B) eligible to access the export controlled information without a required export authorization, or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency. CoreWeave may, for legitimate business reasons, decline to pursue any export licensing process.

Job DescriptionCoreWeave is The Essential Cloud for AI™. Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at . About the Role: The Product Manager for People Technology (PeopleTech) will own and scale the platforms, integrations, and automation that power the employee lifecycle - spanning HRIS, ATS, Sourcing, learning, compensation, and performance - as well as cross-functional workflows with Finance, Security, IT, and Analytics. This role drives product strategy, roadmaps, and delivery across critical PeopleTech systems and integrations, elevating employee experience, data quality, compliance, and operational efficiency. You will leverage integration platforms, modern APIs, and GenAI-enabled workflows to unlock measurable outcomes across onboarding, access provisioning, and workforce insights. A cohesive PeopleTech roadmap that aligns HRIS, ATS, and IAM capabilities with business outcomes across hire-to-retire, including onboarding, access provisioning, and data governance. Examples include systems like Workday, Greenhouse, and Okta where appropriate. • High-quality automation and integrations (e.g., using platforms such as Workato/Boomi) that reduce manual effort and improve lifecycle SLAs across HR, IT, and Security., • Clear reliability, observability, and support standards for PeopleTech integrations and workflows, including error handling, runbooks, and compliance-ready evidence management., • Pragmatic controls and audit readiness for PeopleTech systems aligned to frameworks like SOX and SOC 2, in partnership with Finance and Security.What You'll Do:, • Define and own the PeopleTech product vision, strategy, and roadmap across core platforms and integrations (HRIS, ATS, Sourcing, L&D, Compensation, Performance), partnering closely with HR, IT, Security, and Finance., • Lead end-to-end product delivery: discovery, requirements, scoping, prioritization, execution, launch, adoption, and continuous improvement for enterprise PeopleTech systems., • Drive lifecycle automation for onboarding, offboarding, access provisioning, payroll/benefits data flows, and manager self-service—leveraging modern integration platforms (e.g., Workato) and APIs., • Partner with HRIS and Systems Engineering to implement secure, reliable integrations across platforms like Workday, Greenhouse, Okta, and collaboration suites; ensure IAM alignment with privacy and least-privilege practices., • Establish telemetry, monitoring, and incident workflows for PeopleTech jobs (data syncs, approvals, downstream feeds), with strong documentation and operational playbooks., • Collaborate with Security/Compliance to design pragmatic controls (access, change, configuration, logging) and support quarterly reviews and audit evidence for PeopleTech., • Champion user experience and self-service—streamline HR partner, manager, and employee workflows through intuitive UI, automation, and GenAI augmentation where appropriate., • Define success metrics (adoption, SLA, data quality, effort reduction), publish dashboards, and communicate status and impact to leadership and stakeholders.Who You Are:, • 5-10 years of product management experience, including enterprise applications or PeopleTech/HR Technology; proven ownership of complex, cross-functional product areas., • Hands-on experience with HRIS, ATS, and IAM domains and processes (HCM, advanced compensation, benefits/payroll, recruiting, access provisioning, manager self-service)., • Familiarity with platforms and integrations common to PeopleTech, such as Workday (HCM, integrations), Greenhouse (ATS), Okta (IAM), and enterprise integration platforms (e.g., Workato/Boomi)., • Strong technical acumen with APIs/REST, event-driven patterns, data mapping/validation, and reliability/observability principles for integration workflows., • Experience collaborating with HR, Finance, IT, and Security on privacy, data governance, and compliance (e.g., SOX), translating requirements into pragmatic product and control designs., • Demonstrated ability to drive adoption and change management; excellent written/verbal communication that bridges technical and business audiences.Preferred, • Workday experience across security, reporting, business processes, and integrations (Studio, EIB, RaaS, Cloud Connect) or equivalent HRIS exposure; Workday certifications are a plus., • Experience with GenAI augmentation of internal workflows (e.g., onboarding guidance, approvals routing, document generation) and safe deployment patterns. You love designing and optimizing systems that make complex processes simple and scalable. * You're curious about how integrations, data, and automation can elevate employee and manager experiences. * You're an expert in cross-functional collaboration—connecting the dots between HR, IT, Security, and Finance to deliver measurable impact. Why CoreWeave? At CoreWeave, we work hard, have fun, and move fast! We're in an exciting stage of hyper-growth that you will not want to miss out on. We're not afraid of a little chaos, and we're constantly learning. Our team cares deeply about how we build our product and how we work together, which is represented through our core values: • Be Curious at Your Core, • Act Like an Owner, • Empower Employees, • Deliver Best-in-Class Client Experiences The base salary range for this role is $143,000 to $210,000. The starting salary will be determined based on job-related knowledge, skills, experience, and market location. We strive for both market alignment and internal equity when determining compensation. In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program (all based on eligibility). What We Offer The range we've posted represents the typical compensation range for this role. To determine actual compensation, we review the market rate for each candidate which can include a variety of factors. These include qualifications, experience, interview performance, and location. In addition to a competitive salary, we offer a variety of benefits to support your needs, including: • Medical, dental, and vision insurance - 100% paid for by CoreWeave, • Company-paid Life Insurance, • Voluntary supplemental life insurance, • Short and long-term disability insurance, • Flexible Spending Account, • Health Savings Account, • Tuition Reimbursement, • Ability to Participate in Employee Stock Purchase Program (ESPP), • Mental Wellness Benefits through Spring Health, • Family-Forming support provided by Carrot, • Paid Parental Leave, • Flexible, full-service childcare support with Kinside, • 401(k) with a generous employer match, • Flexible PTO, • Catered lunch each day in our office and data center locations, • A casual work environment While we prioritize a hybrid work environment, remote work may be considered for candidates located more than 30 miles from an office, based on role requirements for specialized skill sets. New hires will be invited to attend onboarding at one of our hubs within their first month. Teams also gather quarterly to support collaboration California Consumer Privacy Act - California applicants only CoreWeave is an equal opportunity employer, committed to fostering an inclusive and supportive workplace. All qualified applicants and candidates will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. As part of this commitment and consistent with the Americans with Disabilities Act (ADA), CoreWeave will ensure that qualified applicants and candidates with disabilities are provided reasonable accommodations for the hiring process, unless such accommodation would cause an undue hardship. If reasonable accommodation is needed, please contact: . Export Control Compliance This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information, applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful permanent resident (green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158, (B) eligible to access the export controlled information without a required export authorization, or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency. CoreWeave may, for legitimate business reasons, decline to pursue any export licensing process.

Job DescriptionNew York, New York Hybrid Salary range: $140,000 - $170,000 The Enterprise Risk Management Analyst reports directly to the Head of Enterprise Risk at Apple Bank and is responsible for providing independent oversight and constructive challenge regarding risks throughout the organization. This position supports the implementation of the Bank’s operational risk framework, which includes activities such as risk and control assessments, control testing, exposure monitoring, management of issues and actions, key risk indicators, scenario analyses, business continuity planning, etc. Furthermore, the Analyst is tasked with identifying bank wide risk issues, monitoring risk profiles to ensure alignment with the established risk appetite, facilitating escalation processes, ensuring accurate risk reporting to governance committees, and assisting business lines in identifying and promptly reporting incidents. ESSENTIAL DUTIES & RESPONSIBILITIES • Risk Assessment: Conduct comprehensive analyses of the Bank's credit, liquidity, interest rate, and capital risk exposures, utilizing stress testing and scenario analysis to ensure robust evaluation., • Risk Mitigation: Implement effective risk mitigation strategies and action plans to minimize the impact of identified risks across credit, liquidity, interest rate, and capital categories., • Policy Development: Formulate and maintain risk management policies and procedures that align with regulatory requirements and industry best practices., • Monitoring & Reporting: Monitor risk exposures and prepare regular reports for senior management and contribute to the development of key performance indicators (KPIs) and key risk indicators (KRIs) for risk management., • Collaboration: Engage collaboratively with departments such as Lending, Finance, Treasury, Internal Audit, Legal, and Compliance to promote an integrated risk management approach., • Credit Scoring Models: Provide support to the Chief Credit Risk Officer in the maintenance and evaluation of the Bank’s credit scoring models., • Committees: Serve as secretary on multiple risk committees, responsible for recording and distributing meeting notes and minutes., • Country Risk Management: Assess country risk profiles, assign risk ratings, report on risk concentrations, and evaluate downside scenarios., • Toolset Administration: Lead administration of governance, risk & compliance (GRC) systems to facilitate risk-related activities, including issue and action management, risk assessments, and control testing. ADDITIONAL DUTIES & RESPONSIBILITIES • Gather and utilize data to identify risk patterns and provide decisions or recommendations based on risk assessments., • Communicate with business partners to understand risk factors and the effectiveness of controls., • Manage the GRC toolset in collaboration with stakeholders to facilitate risk related activities such as issue remediation, self-assessment, control testing, and policy management., • Perform additional responsibilities as assigned. SKILLS, EDUCATION, & EXPERIENCE • A high school diploma or GED is required; bachelor's degree is preferred., • 3–7 years of risk management experience within the financial services industry, with a focus on at least one area: credit risk, liquidity risk, market risk, or enterprise risk management., • Comprehensive knowledge of risk management principles, regulatory frameworks, and industry best practices pertaining to credit risk, liquidity, interest rate, and capital risk., • Advanced proficiency in risk management software and related tools, including the Microsoft Office Suite (Excel, Word, PowerPoint, Power BI, & Power Builder)., • Capability to produce and interpret complex Excel reports for monitoring trends, variances, and exceptions., • Superior analytical, problem-solving, and decision-making abilities., • Exceptional written and verbal communication skills to effectively engage with stakeholders across all organizational levels., • Demonstrated ability to manage multiple projects simultaneously and foster relationships with senior leadership and key stakeholders., • Highly organized, with meticulous attention to detail and strong follow-through skills., • Proven adaptability to different industries and business contexts., • Capacity for self-direction, analysis, evaluation, and the formation of independent judgments., • Strong commercial acumen, exercising discretion with confidential and sensitive information., • Robust strategic and critical thinking capabilities, including the aptitude to assess challenges and develop effective solutions. ADDITIONAL SKILLS • Demonstrates a high level of integrity, adherence to ethical standards, and exercises sound judgment., • Capable of working independently as well as collaboratively within a team environment., • Must possess a positive attitude and dependable work ethic., • Establish and maintain productive working relationships with a diverse group of stakeholders, including vendors., • Adept at coordinating multiple activities simultaneously and prioritizing tasks with minimal supervision., • Manage confidential materials and information with the utmost discretion., • Some travel for mandatory training may be required. Visa sponsorship not available. We are an equal opportunity employer and do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, military and/or veteran status, or any other Federal or State legally-protected classes.

Job DescriptionWalkMe, an SAP company, pioneered the Digital Adoption Platform (DAP) to enable business leaders to fully harness technology in today's complex digital landscape. By leveraging WalkMe's features—guidance, engagement, insights, and automation—employees boost efficiency, executives gain greater visibility into digital usage, and organizations maximize their digital assets, driving successful digital transformation. Together, SAP and WalkMe form a powerful partnership that revolutionizes the digital transformation journey. This collaboration allows businesses to unlock the full potential of SAP's robust ERP solutions while seamlessly enhancing user experience and productivity with WalkMe's intuitive digital adoption platform. WalkMe is seeking a FedRAMP Senior Compliance Analyst to lead and mature our public-sector FedRAMP program, currently in Ready status, with the goal of achieving full Authorization (ATO) and maintaining Continuous Monitoring. This role involves authoring policies, maintaining FedRAMP documentation, coordinating evidence across engineering teams, collaborating with FedRAMP advisors and auditors to ensure successful assessments and renewals, and serving as the FedRAMP compliance focal point for R&D where U.S. citizenship is required for hands-on system operations. This position is ideal for a self-starter with a can-do attitude, strong English communication skills (oral and written) and a technical background who excels at translating NIST controls into practical engineering outcomes. As this role will support our Federal business, US Citizenship is required.Hybrid role - 2 days a week in our SAP NYC officeWhat You'll Own • Own the FedRAMP RMF lifecycle, including defining/maintaining the authorization boundary, driving control implementation evidence, writing and reviewing the System Security Plan (SSP), and managing System Assessment Plan (SAP)/System Assessment Report (SAR), Plan of Action & Milestones (POA&M), and Continuous Monitoring submissions., • Author and maintain security and compliance policies, standards, and procedures, aligning with NIST 800-53r5 and organizational standards., • Drive vulnerability management, including vulnerability scanning, patching cadence enforcement, and tracking remediation., • Liaise with external FedRAMP advisors/3PAO and authorizing stakeholders, scheduling walkthroughs, coordinating requests, and resolving findings., • Serve as the U.S. citizenship compliance focal point for technical operations in the FedRAMP production environment., • Collaborate with Security (GRC/AppSec/IR), Cloud Engineering/SRE, and IT teams to operationalize NIST 800-53 Rev. 5 controls and ensure traceable evidence., • Influence engineering best practices by embedding security and compliance requirements into CI/CD pipelines, IaC, and operational processes., • Report program status, risks, and metrics to the GRC Lead/CISO, and prepare materials for audits, renewals, and leadership reviews., • Strong English communication skills (oral and written), with the ability to author clear policies, technical documentation, and reports., • Positive, can-do attitude with proven ability to take ownership and drive complex initiatives to completion., • Standard U.S. time-zone collaboration is expected, with occasional meetings with external auditors/advisors.What You Need to Succeed, • Minimum 7 years of compliance experience in FedRAMP, • Prior experience leading a FedRAMP Authorization to Operate (ATO) or renewal, including preparing for agency or JAB authorization, • Prior, hands-on FedRAMP experience in documentation, RMF, POA&M management, Continuous Monitoring, and FIPS-validated cryptography (FIPS 140-3), • Strong working knowledge of NIST 800-53r5 and RMF (NIST 800-37), with the ability to map technical controls to evidence, • Demonstrated ability to author policies, review SSPs and collaborate effectively with 3PAOs/advisors and engineering teams, • Excellent documentation, communication, and stakeholder management skills, • U.S. citizenship (required due to federal program requirements), • Positive, can-do attitude with a collaborative approach, and proven ability to take ownership and drive complex initiatives to completion.What Sets Us Apart, • At WalkMe, we are dedicated to building a workforce that reflects the diversity of our global community and clients we serve through inclusive programs and initiatives including equal pay, employee resource groups, holistic benefits and more. We are committed to fostering an inclusive culture which celebrates the unique experiences and perspectives each Team Member brings to the workplace., • Hybrid Work Arrangement: We offer a hybrid work schedule to perfectly combine the benefits of remote work and the essential connections and collaborations of onsite work., • Supportive Culture: We focus on the whole person, celebrating what makes us unique, and create space for community., • Professional Development: We encourage continuous learning and offer opportunities for career development through our career compass offering., • Stay healthy and happy with Wellness@WalkMe! Enjoy quarterly wellness reimbursements, daily BrightBreaks to recharge, and WalkMe’s annual Wellness Month every July—because your well-being matters all year long., • WalkMe provides health coverage options, where applicable, to ensure employees have access to essential medical benefits. Our offerings are designed to support the well-being and diverse needs of our global workforce., • WalkMe offers a generous annual leave policy tailored to meet regional standards, ensuring all employees enjoy sufficient time off to rest and recharge., • WalkMe offers RefreshMe Days throughout the year to further strengthen our commitment to work/life balance., • Robust Retirement Contributions: Ask HR about the specific offerings for your region!, • SAP's acquisition of WalkMe highlights a commitment to enhancing user experience and streamlining software interactions, offering opportunities to work with cutting-edge technology that drives efficiency and innovation in the workplace.Nice to have, • Exposure to AWS/Azure/GCP (GovCloud experience a plus), Kubernetes, Terraform, CI/CD, logging/monitoring (Splunk, CloudWatch, ELK, Datadog), • Familiarity with NIST 800-171/172, ISO 27001, SOC 2, vulnerability management practices, and security testing (BC/DR, IR exercises), • Experience with GRC/evidence tools (e.g., Jira/Confluence, ServiceNow, Drata/Vanta/Archer/OneTrust)

Job Description CYBERSECURITY ADVISOR (Hybrid position in NYC & Boston) Working in Advisory: The Advisory Group is a core group within Drawbridge. As an agile team, Advisory works to provide best-in-class service and support to our clients. As a Cybersecurity Advisor, you will assist with maintaining relationships with clients, their IT resources, and associated third parties. You will work to gain an understanding of the Drawbridge business process, engagement deliverables and services, cybersecurity risk management, IT controls, and regulatory standards. In this highly team collaborative role, you will gain valuable hands-on experience, working with many of the world’s most successful asset management firms. The Cybersecurity Advisor will report to a Advisory Manager. Our Values • Innovation: As the market leader, Drawbridge draws on its in-depth, collective expertise in its constant effort to innovate both our platform and our approach to service, • Integrity: Our clients and partners lean on us because they know we are trustworthy and honor what we say, • Collaboration: We are here to win, and we only win when we work together across team, • Be primary point of contact for Drawbridge clients, • Lead kick off call and create success plans for new clients, • Execute on success plans · Work closely with the Account/Relationship Management team to ensure positive client health. Manage post deliverable CSAT, • Execute on Tech-enabled Platform Strategy (100% CRA review calls are performed within the platform) including: Engage with clients through the platform and showcase new tools on the platform., • You will partner with other CS professionals to help define best practices for client service and provide feedback from clients on platform to the product team, • Assist with client projects and develop the skills to lead projects, • Assist with tailoring the project management framework, approaches, and methods to help streamline projects., • Identify tasks necessary to remediate identified risks and vulnerabilities for clients and service providers., • Conduct risk analysis, assessments, and security audits using internal and third-party tools., • Demonstrate an advanced understanding of business processes, internal control risk management, IT controls, and related standards., • Identify and evaluate complex business and technology risks, controls to mitigate risks, and related opportunities for control improvement., • Understand business, information technology, risk, and operational management processes., • Interpret controls and provide suggestions for mitigation strategies to clients and service providers., • Learn the regulatory framework and compliance guidelines for cybersecurity for the SEC, NFA, FCA, MAS, and any other regulatory agency applicable to our clients., • Ensure projects are completed within a reasonable time frame and monitor the status of projects., • Initiate periodic check-ins with clients to ensure services and projects are up to par with client expectations., • Follow up with clients and service providers to ensure document requests or documents needing review are addressed., • Update internal trackers, provide status updates to project managers, and ensure other internal matters relating to projects or clients are kept up-to-date., • Prepare summary and gap analysis reports highlighting the features of our clients’ cybersecurity programs., • Schedule, conduct, and lead risk assessment meetings with clients and IT providers to obtain information regarding a client’s security and privacy controls., • Prepare risk assessment reports and discuss the assessment findings with clients., • Conduct cybersecurity due diligence on our clients’ service providers., • Send, track, and store due diligence questionnaires and corresponding documents from service providers., • Create deadlines, send reminder emails, and deadline extension notifications to service providers., • Review due diligence submissions from service providers and follow up with service providers, where necessary., • Prepare risk assessment reports based on the due diligence exercise and discuss the assessment findings with clients., • Conduct live or schedule online training for clients., • Track the status of the trainings scheduled online and prepare training reports., • Conduct live or virtual incident response tabletop exercises., • Bachelor’s Degree, preferably in General Business, Finance, or Accounting., • 6-10 Years of Experience, preferably in a customer facing and/or support role., • Familiarity with Microsoft Office products (Outlook, Word, Excel, PowerPoint), • Experience with CRM software, including Salesforce Service Cloud., • Experience with Ticketing and Tracking Systems (e.g., Jira, ConnectWise), • Knowledge of hedge fund, private equity, or RIA operations/compliance a huge plus, • Solid team spirit, balanced by a healthy sense of autonomy and intuitiveness, • Excellent written and verbal communication skills, • Exceptional time management skills and attention to detail, • Strong knowledge of security standards, disciplines and frameworks such as, but not limited to, NIST, CIS, COBIT, etc. CRISC, CISA, CISSP, CIPP, Security +, certifications are a huge plus., • Knowledge of auditing standards and frameworks such as, but not limited to, COSO, ITAF, and ISO., • Previous experience conducting risk assessments are a plus., • Knowledge of IT infrastructure, Cloud Technology, Business Continuity, Disaster Recovery, and Incident Response, • Ability to effectively communicate with clients and maintain strong client relationships About Drawbridge Drawbridge is an award winning, premier provider of cybersecurity software and advisory solutions to the asset management industry. Its proprietary platform helps firms exceed and manage their governance, risk, and compliance (GRC) requirements while combatting sophisticated cyber threats and third-party risks. Drawbridge’s platform connects business, compliance, and IT to empower firms to centralize and manage their most robust security programs, improve their risk profile, and raise institutional capital. With a tested team focused on delivering value to 1000+ clients, Drawbridge offers unmatched customer service and flexibility to help businesses proactively manage vulnerabilities, plan for growth, and reduce complexity. At Drawbridge, we are committed to attracting and retaining the best individuals who enjoy working in a dynamic environment Our Hiring Process We want to hire the most qualified individuals. We have designed a multi-step selection process that may include interviews and assessments. We make decisions quickly and we are eager to get to know you. Affirmative Action and Equal Opportunity Employer Drawbridge Partners, LLC is an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, non-disqualifying physical or mental disability, protected veteran status, or any other legally protected characteristic, in accordance with applicable law. All employment is decided on the basis of qualifications, merit, and business needs. Powered by JazzHR WtKhFPMNgj

Job DescriptionTechnical Cybersecurity Advisor (Hybrid position) Working at Drawbridge At Drawbridge, we are committed to attracting and retaining the best individuals who enjoy working in a dynamic environment. You will be joining an agile team that will help you at every level of your career to identify and use your strengths to grow. This is an opportunity to work at a company that is open to new ideas as we build a dynamic and diverse environment for our employees. The work will be challenging and rewarding. You will gain hands on experience from a team who strives to see its employees succeed. Working in Client Success You will be joining a team of technical consultants who have a passion for understanding and defending against emerging cyber threats. Our clients rely on our expertise to help them navigate the constantly changing cybersecurity landscape, and our team of consultants pair their technical knowledge and industry insight to offer critical risk management advice. The technical advisory team works as a collaborative unit, with each member bringing a unique technical skillset to the table. Our Values • Innovation: As the market leader, Drawbridge draws on its in-depth, collective expertise in its constant effort to innovate both our platform and our approach to service, • Integrity: Our clients and partners lean on us because they know we are trustworthy and honor what we say, • Collaboration: We are here to win, and we only win when we work together across team, • Conduct risk assessments and security audits of client cloud environments, • Assess the security posture of cloud platforms and infrastructure including but not limited to Microsoft 365, Google Workspace, Azure and AWS., • Schedule, conduct, and lead risk assessment meetings with clients and IT providers., • Assess operational business risks and provide remediation and mitigation guidance., • Act as an escalation point for technical questions from clients and internal teams., • Participate in the enhancement of existing Drawbridge products, reports, and processes., • Assist and advise clients with cyber training, incident response, operational due diligence and/or SEC cyber audit requirements., • Identify and evaluate complex business and technology risks, controls to mitigate risks, and related opportunities for control improvement., • Learn applicable regulatory framework and compliance guidelines for cybersecurity (including but not limited to SEC, NFA, FCA, MAS)., • Maintain tracking of internal tasks, provide status updates to clients, team members, and managers, and ensure open and consistent communication with all stakeholders., • A minimum of 3–5 years of experience in the disciplines listed below., • Sound knowledge of IT networking concepts including but not limited to segmentation, DNS, the OSI model, and network topology., • Sound knowledge of cloud infrastructure controls and concepts related to solutions such as Microsoft 365, AWS, and Google Workspace., • Familiarity with cybersecurity concepts such as business continuity, disaster recovery, incident response, and network security., • Solid knowledge of vulnerability management concepts and methodologies., • Proven experience in a client/customer facing role., • Experience discussing technical concepts with a non-technical audience., • Excellent written and verbal communication skills, • Sound knowledge of security standards and frameworks such as, but not limited to, NIST, CIS, COBIT, etc., • Previous experience deploying security controls and policies within cloud infrastructure environments., • Knowledge of hedge fund, private equity, or RIA operations/compliance., • CRISC, CISA, CISSP, CIPP, Security +, certifications. Base Salary Range, • $90,000 - $115,000We Offer, • Competitive compensation package, • Employer Retirement/401(k) plan with company contribution, • Medical, Dental, Vision Coverage, Disability, and Life Insurance, • Health Savings Account (HSA) or Flexible Spending Account (FSA), • Generous Paid Time Off Policy, • Healthy Work/Life Balance, • Phone Reimbursement Perk, • Exclusive Employee Discounts & Perks offered through ADP and insurance Our Hiring Process We want to hire the most qualified individuals. We’ve designed a multi-step selection process that may include interviews and assessments. We render decisions quickly and we’re eager to get to know you. Affirmative Action and Equal Opportunity Employer Drawbridge Partners, LLC is an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, non-disqualifying physical or mental disability, protected veteran status, or any other legally protected characteristic, in accordance with applicable law. All employment is decided on the basis of qualifications, merit, and business needs. Powered by JazzHR v9CLc6H1uH

Job Description Our Company Equinox Hotels will cater to the high-performance traveler guest and those aspiring for high performance and will fuse substance and style to serve as the ultimate hotel destination with a 360-degree lifestyle experience. Our hotels will offer the bespoke experiences and unparalleled services consumers have come to expect from Equinox over its 25-year history. Our Code IT’S NOT FITNESS. IT’S LIFE. We are passionate about high performance living and we practice what we preach – investing time in our own health and fitness. We believe that everyone has untapped potential within them, and it takes a disruptive approach to unleash it. We dream big and don’t settle for the status quo. We sweat the details. We never accept less than 110% to help each other deliver the Equinox experience and enable our members to get great results. We are obsessed with what’s new, what’s now, what’s next. Never following, always leading, living ahead of the moment in fashion, culture and consumer behavior. We aren’t just a company; we’re a community vested in each other’s success. We value humility and a team approach at every level of the company. If you are a high performing individual who is passionate about winning and inspiring others, we are excited to discuss career opportunities with you. Job Overview Primary role as the liaison between the customer and hotel departments to execute event details accurately and flawlessly. Will work with the Senior Account Services and Sales Manager to make sure contract expectations are met and exceeded. This position is accountable for ensuring total guest satisfaction for all group-related functions, maximize profitability and generate repeat group business. The ideal candidate must thrive in a challenging and fast-paced environment where prioritizing and multi-tasking are second nature. This position requires an individual who can align themselves and their day-to-day functions with our brand. Position will also include a sales component and goal. This individual will also report directly to the Director of Sales & Marketing. Individual will be responsible for achieving monthly and quarterly group goals. Essential Job Functions: • Support Senior Account Services Manager and Director of Group Sales with administrative duties and tasks, including but not limited to sending proposals, merging contracts and resumes, arranging specialty amenities, contract turnovers, etc., • Act as a liaison between hotel and client to ensure a successful event. This includes obtaining rooming lists, establishing billing, overseeing group room blocks, welcoming VIP’s, overseeing amenity requests, handling on site event logistics, coordinating outside vendors and enforcing the contract, • Create all pertinent policies and procedures for Event Management, • Monitor and manage room blocks according to contract utilizing group history reports and information given by clients to maximize hotel revenue, making adjustments as necessary, • Maintain strong client relations and ensure that group specifications are communicated and executed for a successful event for the client and attendees, • Review sales contracts as well as other important information, i.e., room block, cutoff date, special concessions and attrition clauses and validate with client, • Provide personal attention to customers from time of definite contract until financial obligations are fulfilled and to ensure guest satisfaction of group needs, • Check sleeping room and suite block, special room concessions and rates as outlined in contract with group reservations agents, as well as updating group reservations agents with any changes, • Participate in site visits and plan meetings for upcoming groups and potential affiliate business, • Create and distribute group resumes about groups’ event details 7 days prior to the event, • Schedule and coordinate pre/post-convention meetings with group customers and hotel departments to review all details of the group event, • Communicate last minute changes in group functions to hotel staff in a swift manner, and ensure accurate and satisfactory follow up, • Ensure times and locations of events are posted daily in appropriate areas and on daily event sheets, • Generate high revenue yielding business through upsells for all contracted rooms and events, • Prepare recap briefing to compare forecasted room pickups, • Proactively build and strengthen relationships with customers to ensure a successful event, thus leading to future booking inquiries, • Thorough knowledge of group reservation management, meeting space logistics, catering F&B minimums and room rental parameters, • Work closely with all departments to ensure successful execution of group programs, • Manage and develop relationships with key internal and external stakeholders, • Conduct and/or attend meetings to maintain favorable working relationships among company employees and promote maximum morale, productivity, and efficiency., • Conduct and lead Group Resume meetings, Pre/Post Con meetings, special events, and other ad hoc meetings as required other duties as assigned., • Solicits, evaluates, sells, and confirms business as required to meet assigned market segment’s budgeted sales and profit margin., • May be assigned other duties at the discretion of management., • Follow up to sales leads in a timely manner., • Assures individual booking goals are achieved on a monthly, quarterly and annual basis., • Manages and develops relationships with key internal and external stakeholders, • Reviews assigned markets on a monthly and quarterly basis to ensure proper production of room nights are achieved., • Develops and executes projects for assigned market segment to increase sales volume and profitability, • Attends all internal meetings which includes: revenue meeting, sales meeting, resume meeting, GRC meeting, and group pickup meeting., • Proactively prospects new accounts with a new business development goal provided each quarter. Requirements are representative of minimum levels of knowledge, skills and /or abilities. To perform this job successfully, the employee will possess the abilities or aptitudes to perform each duty proficiently, with or without reasonable accommodation. Essential: • Ability to satisfactorily communicate in English (speak, read, write) with guests, co-workers, and management to their understanding., • Knowledge of hotel structure and how all departments work., • Extensive knowledge of Event Management/Group Reservations., • Excel, PowerPoint, Delphi, HMS, and CVENT., • Ability to perform assigned duties with attention to detail, speed, accuracy, follow-through, courtesy, cooperativeness and work with a minimum of supervision., • Ability to think quickly and act appropriately in emergency situations., • Perform well under pressure situations, time demands, and work overtime when needed., • Punctuality and regular and reliable attendance., • Interpersonal skills and the ability to work well with co-workers and the public., • Minimum two years’ experience in hotel sales, • Bachelors Degree or equivalent vocational training., • Qualified business relationships in local corporate and/or social events market, • Knowledge of travel industry, current market trends and economic factors, • Prior experience working in a union environment, • Endure various physical movements throughout the work areas, such as reaching, bending and stooping, • Repetitive hand motion (typing) for extended periods of time, • Most work tasks are performed indoors. Temperature is moderate and controlled by hotel environment systems, • Must be able to sit at a desk for up to 5 hours a day. walking and standing are requested the rest of the working day. this includes traveling to and from meetings. Length of time of these tasks may var from day to day and task to task, • Must be able to exert well-paced ability to maneuver between functions occurring simultaneously, • Must be able to exert well-paced ability to reach other departments of the hotel on a timely basis, • Must be able to lift up to 30 lbs occasionally, • Requires grasping, writing, standing, sitting, walking, repetitive motions, listening and hearing ability and visual acuity, • Talking and hearing occur continuously in the process of communicating with guests, supervisors and other employees, • Vision occurs continuously with the most common visual functions being those of near vision and depth perception This job description in no way states or implies that these are the only duties to be performed by the employee occupying this position.

Job Description Datavant is a data platform company and the world's leader in health data exchange. Our vision is that every healthcare decision is powered by the right data, at the right time, in the right format. Our platform is powered by the largest, most diverse health data network in the U.S., enabling data to be secure, accessible and usable to inform better health decisions. Datavant is trusted by the world's leading life sciences companies, government agencies, and those who deliver and pay for care. By joining Datavant today, you're stepping onto a high-performing, values-driven team. Together, we're rising to the challenge of tackling some of healthcare's most complex problems with technology-forward solutions. Datavanters bring a diversity of professional, educational and life experiences to realize our bold vision for healthcare. What We're Looking For As a Sr Vulnerability Engineer, you will be responsible for identifying, assessing, analyzing, prioritizing, and coordinating security vulnerabilities across Datavant's IT infrastructure, business applications, and cloud environments. The candidate will have a strong technical background in cybersecurity, vulnerability scanning tools in application, infrastructure space, and risk assessment methodologies. What You Will Do • Focus primarily on vulnerability assessment, scanning, prioritization in Datavant's infrastructure and applications including those within the FedRAMP boundary, ensuring follow up on vulnerability remediation efforts managing risk effectively for the organization., • Engage heavily with product and development teams to assess all vulnerability risks and communicate to both technical and non-technical team members the risk level, impact, and options for remediation and/or mitigation of risk., • Maintain and work on security scanning solutions in SAST/SCA/Container Security/Cloud/Infrastructure scanning space, • Build and automate self service dashboards in the vulnerability management space, • Own building a unified solution for vulnerability management to reduce exploit risk and deliver audit grade visibility (Q), • Drive and track vulnerability remediation, • Prepare for and support annual FedRAMP 3PAO assessments by validating control evidence, resolving findings, and reviewing audit artifacts., • Partner with GRC, Platform, Product, and Engineering teams to translate compliance requirements into actionable technical tasks., • Help facilitate quarterly planning discussions by providing strategic prioritization on vulnerability remediation, compliance control implementation, etc., • Translate compliance control intent into modern engineering workflows. Rather than applying controls literally, decompose their requirements into their core assurance goals, then rebuild them as scalable, low-friction implementations that achieve the same assurance (or better) through automation, auditable development workflows, and practical risk management, • Review application projects our development teams build.You'll be very comfortable providing control feedback in a review environment to development teams. You'll be adept at using your knowledge to the application of practical risk management., • Strong technical expertise in security space, • 6+ years of working in vulnerability research, scanning, prioritization, • 6+ years of working with compliance standards like NIST, CIS, FedRAMP, • Have a deep understanding of Application, Cloud and Container security. Hands on vulnerability assessment, research experience in a multicloud environment is preferred, • Have a strong understanding of security controls, both those that exist in audit standards as well as practical controls that can help reduce risk and increase safety in application development environments and AWS and/or Azure, • Proven ability to automate/build solutions, • Strong communication skills, • You understand how the broad parts of a security team function and operate in unison, • You can articulate start to finish what role security should play in ideation and build with development teams, • Experience with Wiz, • You have opinions and options on most of the steps, • You are a consummate collaborator, it's inherent in your work behavior, • You are heavily focused on delivery and being impactful; Understand how to operate and succeed in a very fast-paced environment where the security team should be a partner and enabler for the engineering team rather than a blocker, • We lean deeply into individuals who have experience and have practical knowledge of applying standards in low friction ways, • Ability to provide technical thought leadership in the vulnerability management space., • Strong understanding of risk, • Prior hands-on experience building automated solutions specifically in the Vulnerability management space., • You are often viewed as the "expert in the room" for vulnerability management space., • Prior experience building and architecting secure solutions, • Ability to mentor junior engineers, • Ability to influence and lead without authority, • Experience with Sigma and Snowflake, • You have experience with security in healthcare or other highly regulated space. Examples: HIPAA, HITRUST, SOC 2, and PCI experience from an operational response standpoint At Datavant our total rewards strategy powers a high-growth, high-performance, health technology company that rewards our employees for transforming health care through creating industry-defining data logistics products and services. The range posted is for a given job title, which can include multiple levels. Individual rates for the same job title may differ based on their level, responsibilities, skills, and experience for a specific job. The estimated total cash compensation range for this role is:$184,000—$230,000 USD To ensure the safety of patients and staff, many of our clients require post-offer health screenings and proof and/or completion of various vaccinations such as the flu shot, Tdap, COVID-19, etc. Any requests to be exempted from these requirements will be reviewed by Datavant Human Resources and determined on a case-by-case basis. Depending on the state in which you will be working, exemptions may be available on the basis of disability, medical contraindications to the vaccine or any of its components, pregnancy or pregnancy-related medical conditions, and/or religion. This job is not eligible for employment sponsorship. Datavant is committed to a work environment free from job discrimination. We are proud to be an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status. To learn more about our commitment, please review our EEO Commitment Statement here. Know Your Rights, explore the resources available through the EEOC for more information regarding your legal rights and protections. In addition, Datavant does not and will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay. At the end of this application, you will find a set of voluntary demographic questions. If you choose to respond, your answers will be anonymous and will help us identify areas for improvement in our recruitment process. (We can only see aggregate responses, not individual ones. In fact, we aren't even able to see whether you've responded.) Responding is entirely optional and will not affect your application or hiring process in any way. Datavant is committed to working with and providing reasonable accommodations to individuals with physical and mental disabilities. If you need an accommodation while seeking employment, please request it here, by selecting the 'Interview Accommodation Request' category. You will need your requisition ID when submitting your request, you can find instructions for locating it here. Requests for reasonable accommodations will be reviewed on a case-by-case basis. For more information about how we collect and use your data, please review our Privacy Policy.

Job Description Healthcare quality is declining and soaring costs are crushing American families and businesses. At Garner, we've developed a revolutionary approach to evaluating doctor performance and a unique incentive model that's reshaping the healthcare economy to ensure everyone can afford high quality care. By providing organizations relief from surging healthcare costs, we've experienced rapid adoption in the market and have more than doubled our revenue annually over the last 5 years, becoming the fastest growing company in our space. To support our continued growth, we're expanding our team by over 50% each year, seeking exceptional talent to shape our unique, award winning culture (for example, USA Today Top Workplaces 2025) designed to cultivate teamwork, trust, autonomy, exceptional results, and individual growth that creates an inflection point in your career. About the role: We are looking for a Senior Compliance Analyst to join our Security team as we enter our next phase of scale. As a Compliance Analyst, you will collaborate with workflow owners, external auditors, and other stakeholders in order to assist with reviewing, monitoring, and resolving compliance findings. You will also have a key role in shaping the way the organization assesses risk and monitors security controls. This role is open to remote candidates across the U.S. For candidates based in New York City, the position follows a hybrid schedule with in-office work required Tuesday, Wednesday, and Thursday each week. What you will do: • Manage and support HITRUST, SOC 2, and ISO 27001 audits, • Assist go-to-market teams with customer inquiries, • Manage Garner's Security and Privacy trust center, • Maintain current knowledge of industry best practices and team procedures to maintain a suitable risk posture, • Manage security standards, policies, and practices on a recurring basis to maintain compliance and customer trust, • Use code and AI to streamline traditional, tedious GRC processes such as vendor security reviews and user access reviewsWhat you will bring to the team:, • 3+ years of direct experience in an information security role, with an emphasis on risk and compliance, • Prior experience with HITRUST, SOC 2, and ISO 27001 audits, • A GRC Engineering mindset focused on using automation to efficiently perform typical GRC tasks like user access reviews, • Experience with GRC program building at high growth, cloud-native companies

Job Description MetTel is a global communications solutions provider with the most complete suite of fully managed services that focus on secure connectivity, and network and mobility services. We simplify communications and networking for business and government agencies. Our customers include many of the Fortune 500, and Gartner recognizes us as an industry leader. We have the broadest portfolio of technology and integrated partnerships, as well as our private network, which we use to create tailored solutions design, deployment, and ongoing management, driving cost savings, efficiency, innovation, and the ability to focus on core objectives. We believe that each team member is a key to the success and sustainability of the group. In order to achieve this, we offer an environment where all professionals can grow and develop their skills and competencies, collaborate with diverse professionals, share knowledge and enjoy a rewarding career. We are looking for a Senior ServiceNow Developer to join our Corporate IT Team in NYC! ROLE AND RESPONSIBILITIES: We are seeking a talented Senior ServiceNow Developer to join our team and help us in designing, developing, and implementing solutions within the ServiceNow platform. As a Senior ServiceNow Developer, you will be responsible for analyzing business requirements, configuring applications, building workflows, and customizing ServiceNow applications to meet the needs of our organization across multiple ServiceNow product lines including ITSM, ITOM, ITAM, GRC, and HR Service Delivery. Responsibilities: • Creates and delivers ServiceNow solutions that consider long-term technical architecture, process design, and ServiceNow technical standards, • Designs and develops custom scoped applications using ServiceNow Studio, following best practices for application architecture and reusability, • Develops and maintains ServiceNow APIs including Table API, Import Set API, and Scripted REST APIs for system integrations, • Optimizes platform performance through query optimization, script performance tuning, and instance health monitoring, • Manages update sets, conducts code reviews, and implements release management best practices across development, test, and production instances, • Develops and maintains Automated Test Framework (ATF) test suites to ensure solution quality and regression testing, • Supports the engagement efforts related to platform-wide process definition, re-engineering, improvement, and gap analysis of current/future-state processes and functionality during workshops with key sponsors and stakeholders, • Advises stakeholders in their efforts to take advantage of the ServiceNow Platform's capabilities to improve their existing processes across ITSM, ITOM, ITAM, GRC, and HR Service Delivery modules, • Leads design workshops across multiple ServiceNow products and capabilities, • Drafts technically focused user stories, acceptance criteria, testing strategy, and knowledge transfer while supporting stakeholders in reviewing and approving them, • Provides technical leadership, guidance, and ad-hoc oversight/training for system administrators and junior developers, • Leads technical aspects of project delivery and solution delivery for projects, providing oversight and unit testing of development work, • Serves as a lead member of an overall engagement project team focused on delivering successful and substantive stakeholder outcomes, • Develops required integration components (SSO, LDAP, REST, SOAP, Integration Hub) with multiple systems, • Develops and maintains Service Portal and UI Builder components using modern web frameworks, • Develops and maintains custom scoped applications following ServiceNow best practices, • Manages multiple concurrent projects/initiatives while maintaining quality and meeting deadlines, • Promotes continuous improvement practices for delivery/engagement materials, • Provides technical leadership, training, and mentoring to other members of the ServiceNow delivery team, • Translates complex technical concepts for non-technical stakeholders, • Configure and customize ServiceNow modules including but not limited to Incident Management, Change Management, Problem Management, Asset Management, Configuration Management, Risk Management, Compliance, HR Case Management, and Service Catalog, • Develop, maintain, and troubleshoot ServiceNow workflows using Flow Designer (primary) and legacy Workflow Editor, UI design, forms, reports, and dashboards, • Design and implement Performance Analytics dashboards and reports for actionable insights, • Must be proficient at CMDB maintenance tasks, configuring Discovery, Service Mapping, Mid Servers, and managing identification/reconciliation rules to eliminate duplication of CI items, • Implement and maintain ITOM Discovery and Service Mapping for infrastructure visibility and service dependency mapping, • Configure and maintain IT Asset Management (ITAM) including hardware asset management, software asset management, and license compliance, • Implement GRC modules including Risk Management, Policy and Compliance Management, and Audit Management, • Configure HR Service Delivery modules including HR Case Management, Employee Document Management, and HR Service Portal, • Collaborate with cross-functional teams including IT, operations, infrastructure, HR, compliance, and support teams to ensure successful implementation and integration of ServiceNow solutions, • Bachelor's degree in Computer Science, Information Technology, or related field, • Hands on experience managing offshore employees, • Minimum of 6 years of ServiceNow platform experience, with at least 3 years in a senior/lead developer role, • Proficient in ServiceNow platform administration, development, and customization, • Proven expertise with Business Rules, Script Includes, UI Policies, UI Actions, Client Scripts, Inbound Actions, and Scheduled Jobs, • Advanced JavaScript programming skills within ServiceNow context, • Strong experience with Flow Designer for modern workflow automation (primary tool), • Working knowledge of legacy Workflow Editor for maintenance and support, • Proficiency with ServiceNow Studio for custom application development, • Experience developing and maintaining Automated Test Framework (ATF) test suites, • Strong understanding of ServiceNow data model, table architecture, and platform architecture patterns, • Experience with update set management, merge conflict resolution, and release management practices, • Extensive experience with ServiceNow integration technologies including REST, SOAP, Integration Hub, and MID Server, • Proficiency in developing custom Scripted REST APIs, Table API, and Import Set API, • Experience with authentication methods including SSO, OAuth, and SAML, • Strong experience with Service Portal development using AngularJS and Bootstrap, • Experience with UI Builder for next-generation portal development, • Proficiency in web technologies: HTML5, CSS3, JavaScript, • Experience with modern JavaScript frameworks (Angular/React), • ITOM: Discovery, Service Mapping, Event Management, Cloud Management, • ITAM: Hardware Asset Management, Software Asset Management, License Compliance, • GRC: Risk Management, Policy and Compliance Management, Audit Management, • HR Service Delivery: HR Case Management, Employee Document Management, Lifecycle Events, • Experience with Virtual Agent and/or Now Assist (AI capabilities) is a plus, • Familiarity with Predictive Intelligence is a plus, • Strong understanding of ITIL processes and best practices, • Knowledge of IT asset management best practices and license management, • Understanding of GRC frameworks and compliance requirements, • Excellent problem-solving skills and attention to detail, • Strong communication and collaboration skills, • Ability to translate complex technical concepts for non-technical stakeholders, • Strong analytical and troubleshooting abilities, • Ability to work independently and as part of a team, • ServiceNow Certified Application Developer (CAD) - Required, • Certified Implementation Specialist (CIS) in one or more areas:, • IT Service Management (ITSM), • IT Operations Management (ITOM), • IT Asset Management (ITAM), • Governance, Risk, and Compliance (GRC), • Human Resources Service Delivery (HRSD) *The salary range reflected is a good faith estimate of base pay for the primary location of the position. Our compensation reflects the cost of labor across several U.S. geographic markets, and we pay differently based on those defined markets. The U.S. pay for this position ranges from $130,000 to $150,000 annually. Pay will vary by work location and may also depend on job -related knowledge, skills, experience and abilities of the successful candidate. Your recruiter can share more about the specific salary range for the job location during the hiring process. Keywords: #NYC #NewYorkCity #Manhatten #OffshoreManagement #PeopleManagement #Seniorlevel #Servicenow #Developer #Telecom #Troubleshoot #Design #Engineering #Javascript MetTel is an Equal Opportunity Employer and considers applicants for all positions without regard to race, color, religion or belief, sex, age, national origin, citizenship status, marital status, military/veteran status, genetic information, sexual orientation, gender identity, physical or mental disability or any other characteristic protected by applicable laws. To learn more about our company visit us at

Job Description Position Summary: Community Federal Savings Bank (CFSB), located in New York City is seeking a highly skilled and detail-oriented Head of Financial Crimes Compliance Quality Assurance to join our Program Management & Assurance function within the Compliance department. CFSB offers a full range of banking services including ACH settlement services, pre-paid card issuance, and retail banking. In addition to serving our general customer base, we also service various types of money service businesses and FinTech companies. This individual will be primarily responsible for overseeing a robust quality assurance program to ensure compliance controls are operating as designed. They will drive strategic Financial Crimes Compliance QA initiatives, enhance transparency, and provide data-driven insights to inform decision-making and regulatory readiness. Key Responsibilities: • Enhance and maintain the Financial Crimes Compliance Quality Assurance (QA) framework to assess whether key compliance control activities—conducted internally or by external consultants—adhere to internal standards, regulatory expectations, and Bank policy., • Implement and continuously refine standardized QA test scripts, workpapers, and documentation templates to drive consistency, transparency, and auditability across QA reviews., • Lead and develop a high-performing team of Financial Crimes Compliance QA Managers and staff, providing coaching, mentorship, and oversight to ensure effective execution and professional growth., • Partner with Internal Control functions to align Financial Crimes Compliance QA insights with broader risk trends, inform planning cycles, and enhance control evaluations across business units., • Stay current on regulatory developments, enforcement actions, and industry best practices; translate regulatory changes into QA control enhancements and update procedures accordingly., • Provide structured, actionable feedback and guidance to control owners and business partners based on QA findings, supporting the adoption of practical, risk-aligned solutions and best practices., • Lead the design and delivery of training content and workshops to improve the quality, consistency, and defensibility of investigations, control execution, and documentation., • Establish Financial Crimes Compliance QA metrics and dashboards to support continuous improvement, trend analysis, and executive-level reporting to governance committees, senior leadership, and regulators., • Ensure Financial Crimes Compliance QA processes integrate technology and data analytics where feasible to improve efficiency, risk detection, and traceability., • Act as a strategic partner across Compliance, Legal, Audit, Operations, and Technology to promote a culture of accountability, transparency, and continuous improvement., • Support internal and external regulatory examinations by providing Financial Crimes Compliance QA reporting, documentation, and commentary as needed.Qualifications:, • Deep subject matter expertise in regulatory compliance, quality assurance methodologies, and risk management within the financial services industry., • Proven ability to design and lead Financial Crimes Compliance QA programs in complex, matrixed environments involving third-party partnerships, fintech platforms, and high-risk product offerings., • Demonstrated experience presenting Financial Crimes Compliance QA findings, thematic trends, and risk insights to executive leadership, Board-level committees, and regulatory agencies., • Strong working knowledge of BSA/AML/OFAC requirements., • Strategic mindset with the ability to drive long-term program maturity while executing detailed operational reviews and initiatives., • Proficient in leveraging technology platforms to support Financial Crimes Compliance QA activities, including GRC systems, workflow tools, and automated testing solutions., • Exceptional written and verbal communication skills, with the ability to translate complex compliance matters into actionable, business-aligned recommendations., • Collaborative leader with a track record of building high-performing teams and influencing cross-functional partners across Compliance, Legal, Risk, Operations, and Technology., • Bachelor’s degree required; advanced degree (e.g., JD, MBA) or relevant professional certifications (e.g., CAMS, CRCM, CISA, CFE) strongly preferred., • Minimum of 10 years of experience in Compliance, Audit, Risk, or Internal Controls, with at least 5 years in a senior leadership or QA oversight role., • Prior experience overseeing Financial Crimes Compliance QA or testing programs focused on consumer protection, AML, sanctions, or third-party oversight is highly desirable. "Base salary range does not include performance-based bonus and/or other benefits, where applicable. Actual base salary offer will vary based on skills and experience." About Community Federal Savings Bank (CFSB) Community Federal Savings Bank (CFSB) is a federally chartered bank founded in 2001 and headquartered in New York City. CFSB has focused on providing superior service and added value to clients though a solid understanding of relationship banking. We offer a full range of services, including loans, bill payments, card services, internet banking, and merchant processing. We are an equal opportunity employer and do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, military and/or veteran status, or any other Federal or State legally-protected classes.

Job Description At Fuze Health, we put patients first and tirelessly address the most pressing needs in healthcare. We empower millions to digitally connect with care providers, essential health resources and needed treatments – and enable care providers, employers, health plans and life sciences companies to meaningfully enhance quality, outcomes and value. We are dedicated to helping our partners evolve and modernize to meet emerging patient and marketplace needs. Fuze Health's foundation is built upon the strategic combination of several proven, technology-powered innovators in the digital health, diagnostics, and pharmacy sectors. Our growing portfolio brings together the capabilities of industry leaders including LetsGetChecked, Truepill, and Alto Pharmacy, to create a distinctive, unified force in healthcare. Together, we have the shared vision, advanced capabilities and talented teams to deliver next-generation solutions that patients and healthcare partners need today and into the future. At Fuze Health, we put patients first and tirelessly address the most pressing needs in healthcare. We empower millions to digitally connect with care providers, essential health resources and needed treatments – and enable care providers, employers, health plans and life sciences companies to meaningfully enhance quality, outcomes and value. We are dedicated to helping our partners evolve and modernize to meet emerging patient and marketplace needs. Fuze Health's foundation is built upon the strategic combination of several proven, technology-powered innovators in the digital health, diagnostics, and pharmacy sectors. Our growing portfolio brings together the capabilities of industry leaders including LetsGetChecked, Truepill, and Alto Pharmacy, to create a distinctive, unified force in healthcare. Together, we have the shared vision, advanced capabilities and talented teams to deliver next-generation solutions that patients and healthcare partners need today and into the future. Job Summary We are seeking a transformational Senior Vice President of Information Technology and Information Security to join our executive leadership team. This leader will be responsible for defining and executing a comprehensive information, cyber security, and enterprise IT strategy across Fuze Health and all subsidiaries. Reporting to the Chief Technology Officer, the SVP, IT and Information Security will oversee enterprise IT operations, global cyber risk management, infrastructure modernization, data governance, and regulatory compliance. This role demands a visionary leader who can harmonize technology platforms and security protocols across acquired entities, uphold regulatory integrity, and champion a strong security culture across the enterprise. Key Responsibilities:Information Security & Physical Security Leadership • Define and drive the enterprise-wide information and cyber security strategy across Fuze Health, with the vision to establish security as a differentiator and trusted platform for customers and stakeholders., • Oversee 24/7 security operations—monitoring cyber and physical threats, conducting risk assessments, leading proactive defense initiatives, and managing current and future security technologies using a risk-based approach., • Establish and maintain a comprehensive information and physical security program that protects patient data, intellectual property, and company assets., • Crucially, direct and oversee the physical security posture and operational considerations for all Fuze Health facilities, including pharmacy dispensing locations. This encompasses the integration and management of:, • Access Control Systems (e.g., badge access, visitor management, physical key control)., • Surveillance Systems (e.g., CCTV, video analytics)., • Coordination with facilities management on Fire & Life Safety Systems and emergency response protocols., • Lead rapid, effective incident response efforts for both cyber and physical security events, coordinating tabletop exercises with internal stakeholders., • Direct security audits, penetration tests, vulnerability testing, and risk remediation across all business units.Enterprise Technology & IT Operations Strategy, • Provide strategic direction for the modernization of infrastructure, data platforms, and enterprise applications to enable interoperability, scalability, and security., • Oversee high-level IT operations strategy and service delivery—ensuring reliability, efficiency, and business continuity, especially related to end-user services and infrastructure in a growing, multi-site environment., • Define, implement, and review disaster recovery and business continuity plans to ensure resilience in IT operations., • Lead research and evaluation of potential technology solutions that support new business opportunities.Governance, Risk, and Compliance (GRC), • Ensure compliance with regulatory and industry standards across global operations, including HIPAA, HITRUST, GDPR, SOC 2, CCPA, and NIST CSF (including NIST 800-53 and CMMC familiarity)., • Lead enterprise risk management efforts spanning information systems, physical facilities, and third-party ecosystems., • Partner with Legal, Compliance, and Operations to ensure governance frameworks meet regulatory and contractual obligations., • Manage contracts with and oversee third-party security resources and platforms., • Develop and maintain data governance standards for accuracy, privacy, and secure interoperability across entities.Secure Digital Transformation & Engineering, • Build a scalable, automated, cloud-native security architecture to support Fuze Health's digital platform strategy., • Embed "secure-by-design" principles into software development, infrastructure provisioning, and vendor management., • Partner with CTO functions to drive DevSecOps adoption and enable secure product delivery at speed., • Partner with product and engineering teams to treat security concerns as first-class product requirements during scoping and execution of all roadmap deliverables.Innovation, Data, and Emerging Technology, • Champion the secure use of emerging technologies (AI/ML, predictive analytics, automation) to drive business efficiency and care outcomes., • Oversee the development and implementation of AI governance frameworks and policies to ensure responsible and ethical AI use in clinical practice and operations., • Foster a culture of proactive innovation balanced with risk management and compliance discipline.Leadership & Collaboration, • Build and lead a high-performing, globally distributed team of IT, cybersecurity, and GRC professionals., • Serve as a trusted advisor to the executive leadership team., • Present regularly to executive leadership and the Board on technology strategy, cyber risk posture, and security metrics., • Collaborate cross-functionally with leaders across clinical, commercial, and operational domains.Minimum Qualifications:, • Bachelor's degree in Computer Science, Information Systems, Engineering, or related field., • 15+ years of progressive experience in IT and security leadership, with 8+ years in executive-level roles., • Proven track record leading enterprise-wide technology and security transformations within healthcare, life sciences, or other regulated industries., • Deep expertise in cybersecurity, data governance, risk management, and compliance across global operations., • Proven ability to operate at both strategic and operational levels, including conducting cost/benefit analyses and providing business case justifications for IT spending., • Strong familiarity with cloud architecture (AWS, Azure, GCP) and modern collaboration ecosystems., • Exceptional communication, stakeholder engagement, and change management skills., • Industry certification such as CISSP (Certified Information Systems Security Professional) or CISM (Certified Information Security Manager) is required.Preferred Qualifications:, • Master's degree (MBA, MS in Information Systems, or Cybersecurity)., • Additional certifications such as CRISC, CCSP, or CPP., • Extensive experience with M&A integrations, particularly harmonizing multiple technology stacks and aligning security protocols across acquired organizations., • Demonstrated success leveraging AI and machine learning for predictive analytics or operational automation. Physical requirements for this role include the ability to work at a computer terminal with monitor, keyboard and mouse for extended periods of time, stoop, bend, and reach for equipment and supplies, make frequent repetitive motions required to operate a computer that include the wrists, hands and fingers, and lift, carry, push, pull, and move light objects up to 20 pounds. The role also requires the ability to effectively communicate through verbal interactions, discern auditory information, and visually perceive details to perform essential job functions. This position requires occasional travel therefore you must be able to sit for extended periods of time on airplanes and/or in vehicles, lift and carry luggage independently, navigate long distances through airports and other travel locations independently, and adjust to different time zones and climates. Consistent with the Americans with Disabilities Act (ADA) and similar applicable state laws, it is Alto's policy to provide reasonable accommodation to enable qualified individuals with disabilities to perform essential job functions, unless such accommodation would cause an undue hardship. Salary and Benefits Salary Range: $275,000 - $340,000 Bonus Eligibility: Yes Commission Eligible: No Travel: Yes - Required up to 25% of the time Location Requirement: Employment at Fuze Health is limited to individuals residing in the United States. Employment Authorization Requirement: Applicants must be authorized to work for any employer in the U.S. At this time, Alto is unable to sponsor or take over sponsorship of an employment Visa. Benefits: Full-time employee benefits include: dental, vision, and multiple group medical plans to choose from, a 401(k) retirement savings plan, group life insurance, accidental death and dismemberment (AD&D) insurance, flexible spending account (FSA) and health savings account (HSA), commuter benefits, employer-paid short-term (STD) and long-term disability (LTD) insurance, and additional supplemental insurance plans (spouse life insurance, legal insurance, an employee assistance program, and a fertility medication discount program). Employees are also provided flexible vacation time, accrued paid sick time, 11 paid holidays (seven for Pharmacy and Care team members), and eight weeks of paid parental leave for eligible employees. Application deadline: November 15, 2025 #LI-Remote Base Salary Range Salary Range$275,000—$340,000 USD At Fuze Health, we are committed to fostering an inclusive environment that celebrates diversity in all its forms. We believe that the diversity of thought, background, and experience strengthens our teams and drives innovation. We are an equal-opportunity employer and do not discriminate on the basis of race, ethnicity, religion, color, place of birth, sex, gender identity or expression, sexual orientation, age, marital status, military service status, or disability status. Our goal is to ensure that everyone feels valued and empowered to thrive. Read our Candidate Privacy Policy.

Job Description Permanent position for Manager of Infrastructure Governance, Risk and Controls for Global Financial Firm onsite 3 days NYC Salary Range: $160k to $190k No Sponsorship Available Must have experience working in a financial or banking environment. You must be a proven, motivated leader capable of managing a team, engaging with senior executives, and maintaining strong cross-functional relationships, especially during periods of change. The role is to lead Infrastructure Governance, Risk, and Compliance (GRC) team. The focus is to transform the GRC function to become more proactive, efficient, and an enabler of audit responses. The focus will be on enhancing proactive risk management capabilities and ensuring that audit responses are streamlined and integrated into business-as-usual (BAU) processes. Solid understanding of technology and the ability to communicate in technical terms with 7-10+ years of experience. Key Responsibilities: Leadership and Management: • Provide strategic leadership and direction to the Infrastructure GRC team, • Foster a culture of proactive risk management and continuous improvement within the team, • Collaborate with cross-functional teams to identify and address emerging risks and vulnerabilities, • Transform the GRC team's approach to audit responses, making them more efficient and integrated into BAU activities, • Work closely with internal and external auditors to ensure timely and accurate responses, • Ensure compliance with regulatory requirements, industry standards, and internal policies, • Oversee the development and maintenance of GRC policies, procedures, and documentation, • Manage items such as self-identified issues and risk acceptances, with a goal of achieving zero extensions, • Serve as a key point of contact for GRC-related matters within the organization, • Collaborate with senior leadership, business units, and other stakeholders to align GRC activities with business objectives, • Minimum of 7-10 years of experience in GRC, risk management, or a related field, with at least 5 years in a leadership role, • Strong understanding of infrastructure services and financial industry regulations, • Relevant certifications such as CISM, CRISC, or CISSP required, • Proven track record of developing and implementing proactive risk management strategies

Job DescriptionCompany Description Sia is a next-generation, global management consulting group. Founded in 1999, we were born digital. Today our strategy and management capabilities are augmented by data science, enhanced by creativity and driven by responsibility. We’re optimists for change and we help clients initiate, navigate and benefit from transformation. We believe optimism is a force multiplier, helping clients to mitigate downside and maximize opportunity. With expertise across a broad range of sectors and services, our 3,000 consultants serve clients worldwide from 48 locations in 19 countries. Our expertise delivers results. Our optimism transforms outcomes. Job Description Our US Risk, Compliance and Ethics team is an integral part of our Financial Services practice, providing support to our clients in Operational Risk Management preparing for: • Regulatory compliance, • Risk and control assessments, • Governance & reporting, • Measurement & reporting, • Data modeling, • Training, • Apply strategic and critical thinking to develop recommendations and risk management strategies that address client challenges in Operational Risk Management including governance, roles and responsibilities, risk and control self-assessments (RCSAs), risk mitigation efforts, risk appetite and tolerance, key risk indicators, reporting, • Help the client introduce automation and innovative methodologies to enhance the efficiency of their operational risk assessment framework, • Stay current on the regulatory requirements of various operational risks standards and reporting frameworks and communicate that information both internally and externally; help the client in managing compliance programs and regulatory risks, • Collaborate with cross-functional key client stakeholders across the enterprise to help establish operational risks alignment and drive decisions needed to meet risk management strategies, • Support on a range of client delivery, as part of an on-site or remote project team, including assessments, • Demonstrate team building and project management skills, • Contribute to proposal development and marketing, and contribute to developing business opportunities Qualifications, • 4+ years of relevant experience in Non-Financial Risk, Operational Risk Management (ORM), or Third-Party Risk Management (TPRM) in Financial Services, • Experience with common GRC tools/systems preferred, • Bachelor's degree or equivalent experience in Risk Management, Finance or business, • Experience in critically and objectively analyzing problems and facilitate solutions, • Experience in risk and control assessment in either the first, second or third line of defense, • Experience in enhancing and/or conducting assessments of risk frameworks, policies and procedures, processes, and providing recommendations to enhance the current state of ORM, • Experience in managing reporting with KPIs and KRIs and drafting remediation plans; experience with data analytics & visualization preferred, • Understanding of responsibilities of 1st, 2nd, and 3rd lines of defense in managing risks, • Ability to manage large complex stakeholder groups and proven track record in project management, • Experience working hands-on with cross-functional teams, including Compliance, Legal, Procurement, Information Security, Business Continuity, Privacy in assessing risks and controls, • Experience communicating with cross functional groups such as internal clients, vendors as well as senior management, • Proficiency in Microsoft Office applications/Google Suite products, • Based in New York Additional Information Compensation & Benefits We believe in supporting our team professionally and personally. Here’s a snapshot of the comprehensive benefits you’ll enjoy as part of Sia. Competitive Compensation * Annual base salary starting at $122K, commensurate with experience and qualifications * Annual performance based discretionary bonus Robust Health Coverage * 3 Medical plans * Dental and Vision * Life, AD&D and other voluntary insurance Tax-Advantaged Accounts * 401K retirement plan * 4% matching and 100% vested upon enrollment * Health Savings Account (HSA) * Flexible Spending Account (FSA) * Health, Dependent Care, Commuter Family Friendly Benefits * 100% paid parental leave for all new parents with eligible tenure * Building Healthy Families program if enrolled through Medical plan Time Off to Recharge * Generous Paid Time Off (PTO) policy * 9 company holidays plus 1 floating holiday Extras that Make Life Easier * College savings and student loan repayment assistance * Monthly cell phone stipend * Access to wellness programs at no cost if enrolled through Medical plan, including: * Gym membership reimbursement * LiveHealth Online virtual care * Personalized support from a Well-being Coach * Employee Assistance Program at no cost * Free confidential counseling and emotional support services * On-demand access to Emotional Well-being resources (ranging from relaxation techniques to stress management) Our Commitment To Diversity At Sia, we believe in fostering a diverse, equitable and inclusive culture where our employees and partners are valued and thrive in a sense of belonging. We are committed to recruiting and developing a diverse network of employees and investing in their growth by providing unique opportunities for professional and cultural immersion. Our commitment toward inclusion motivates dynamic collaboration with our clients, building trust by creating an inclusive environment of curiosity and learning which affects lasting impact. Please visit our website for more information. Hybrid Workplace Guidelines Sia is committed to providing a flexible workplace environment that supports client, business, and market needs. Consultants located in our primary market office locations—New York City, Charlotte, Seattle, and San Francisco are expected to live within a reasonable commuting distance and attend the office at least three days per week. For applicants in other markets, including those without a local office, we offer more flexible in-person requirements to accommodate your location. Work Authorization & Sponsorship At this time, Sia does not intend to employ any applicant who will require, either now or in the future, employment visa sponsorship or sponsorship for work authorization (i.e., H-1B visa, F-1/OPT or STEM OPT, TN, etc.). Sia is an equal opportunity employer. All aspects of employment, including hiring, promotion, remuneration, or discipline, are based solely on performance, competence, conduct, or business needs.

Job DescriptionCompany Description Sia is a next-generation, global management consulting group. Founded in 1999, we were born digital. Today our strategy and management capabilities are augmented by data science, enhanced by creativity and driven by responsibility. We’re optimists for change and we help clients initiate, navigate and benefit from transformation. We believe optimism is a force multiplier, helping clients to mitigate downside and maximize opportunity. With expertise across a broad range of sectors and services, our 3,000 consultants serve clients worldwide from 48 locations in 19 countries. Our expertise delivers results. Our optimism transforms outcomes. Strategy & Management Consulting Sia’s Strategy & Management Consulting global footprint and expertise in more than 40 sectors and services allow us to enhance our clients' businesses worldwide. We guide their projects and initiatives in strategy, business transformation, IT & digital strategy. Financial Institutions have drastically changed over the last decade, driven by increased regulatory constraints, diverse competition inside and beyond traditional banking organizations, and emerging technologies reshaping long-standing ecosystems. Sia’s Financial Services Business Unit provides a comprehensive suite of core capabilities designed to address the diverse and evolving needs of our clients, enabling them to navigate complex challenges, seize new opportunities, and achieve their strategic objectives in an increasingly competitive and dynamic business environment. Job Description Our US Risk, Compliance and Ethics team is an integral part of our Financial Services practice, providing support to our clients in Operational Risk Management preparing for: • Regulatory compliance, • Risk and control assessments, • Governance & reporting, • Measurement & reporting, • Data modeling, • Training, • Apply strategic and critical thinking to develop recommendations and risk management strategies that address client challenges in Operational Risk Management including governance, roles and responsibilities, risk and control self-assessments (RCSAs), risk mitigation efforts, risk appetite and tolerance, key risk indicators, reporting, • Help the client introduce automation and innovative methodologies to enhance the efficiency of their operational risk assessment framework, • Stay current on the regulatory requirements of various operational risks standards and reporting frameworks and communicate that information both internally and externally; help the client in managing compliance programs and regulatory risks, • Collaborate with cross-functional key client stakeholders across the enterprise to help establish operational risks alignment and drive decisions needed to meet risk management strategies, • Support on a range of client delivery, as part of an on-site or remote project team, including assessments, • Demonstrate team building and project management skills, • Contribute to proposal development and marketing, and contribute to developing business opportunities Qualifications, • 1+ years of relevant experience in Non-Financial Risk, Operational Risk Management (ORM), or Third-Party Risk Management (TPRM) in Financial Services, • Experience with common GRC tools/systems preferred, • Bachelor's degree or equivalent experience in Risk Management, Finance or business, • Experience in critically and objectively analyzing problems and facilitate solutions, • Experience in risk and control assessment in either the first, second or third line of defense, • Experience in enhancing and/or conducting assessments of risk frameworks, policies and procedures, processes, and providing recommendations to enhance the current state of ORM, • Experience in managing reporting with KPIs and KRIs and drafting remediation plans; experience with data analytics & visualization preferred, • Understanding of responsibilities of 1st, 2nd, and 3rd lines of defense in managing risks, • Ability to manage large complex stakeholder groups and proven track record in project management, • Experience working hands-on with cross-functional teams, including Compliance, Legal, Procurement, Information Security, Business Continuity, Privacy in assessing risks and controls, • Experience communicating with cross functional groups such as internal clients, vendors as well as senior management, • Proficiency in Microsoft Office applications/Google Suite products, • Based in New York Additional Information Compensation & Benefits We believe in supporting our team professionally and personally. Here’s a snapshot of the comprehensive benefits you’ll enjoy as part of Sia. Competitive Compensation * Annual base salary starting at 88K, commensurate with experience and qualifications * Annual performance based discretionary bonus Robust Health Coverage * 3 Medical plans * Dental and Vision * Life, AD&D and other voluntary insurance Tax-Advantaged Accounts * 401K retirement plan * 4% matching and 100% vested upon enrollment * Health Savings Account (HSA) * Flexible Spending Account (FSA) * Health, Dependent Care, Commuter Family Friendly Benefits * 100% paid parental leave for all new parents with eligible tenure * Building Healthy Families program if enrolled through Medical plan Time Off to Recharge * Generous Paid Time Off (PTO) policy * 9 company holidays plus 1 floating holiday Extras that Make Life Easier * College savings and student loan repayment assistance * Monthly cell phone stipend * Access to wellness programs at no cost if enrolled through Medical plan, including: * Gym membership reimbursement * LiveHealth Online virtual care * Personalized support from a Well-being Coach * Employee Assistance Program at no cost * Free confidential counseling and emotional support services * On-demand access to Emotional Well-being resources (ranging from relaxation techniques to stress management) Diversity, Equity, Inclusion & Belonging At Sia, we believe in fostering a diverse, equitable and inclusive culture where our employees and partners are valued and thrive in a sense of belonging. We are committed to recruiting and developing a diverse network of employees and investing in their growth by providing unique opportunities for professional and cultural immersion. Our commitment toward inclusion motivates dynamic collaboration with our clients, building trust by creating an inclusive environment of curiosity and learning which affects lasting impact. Please visit our website for more information. Sia is an equal opportunity employer. All aspects of employment, including hiring, promotion, remuneration, or discipline, are based solely on performance, competence, conduct, or business needs. Office Workplace Guidelines Sia is committed to providing a flexible workplace environment that supports client, business, and market needs. Consultants located in our primary market office locations—New York City, Charlotte, Seattle, and San Francisco—are expected to live within a reasonable commuting distance and attend the office at least three days per week. For Consultants outside of our primary markets, we can offer more flexible in-person requirements in accordance with your location. Work Authorization & Sponsorship At this time, Sia does not intend to employ any applicant who will require, either now or in the future, employment visa sponsorship or sponsorship for work authorization (i.e., H-1B visa, F-1/OPT or STEM OPT, TN, etc.). Sia is an equal opportunity employer. All aspects of employment, including hiring, promotion, remuneration, or discipline, are based solely on performance, competence, conduct, or business needs.

JOB FUNCTION The Cybersecurity Engineer will be responsible for implementing and maintaining the firm’s cybersecurity technology solutions, monitoring for security incidents and vulnerabilities, coordinating end user activities, and participating in the investigation and response of any breaches or attacks. The ideal candidate will be a self-starter who can work both independently and collaboratively with diverse technical and business teams. He or she will report to the Chief Information Security Officer. Additional responsibilities include: Managing the vulnerability management program, including internal and external scanning, monitoring threat feeds, news sources, and vendor bulletins for risks and tracking remediation Maintaining and monitoring control baselines, hardening standards, asset/coverage metrics, and configuration compliance Monitoring and documenting key performance indicators (KPIs) and governance, risk, and compliance (GRC) evidence Suggesting and evaluating new technologies Educating employees on security best practices to reduce the risk of human error Collaborating with the Cloud, Systems, Network, Database, Desktop, and Development engineering teams on risk identification, analysis, and remediation Assisting with vendor due diligence Assisting with physical security infrastructure projects, maintenance, and updates QUALIFICATIONS The ideal candidate should have the following experience: 3+ years of experience in a Security Engineer role Proficiency with managing EDR solutions, SIEM, network security, cloud security, mobile security, vulnerability management, identity and access management, encryption, and a solid understanding of operating systems like Windows and Linux Strong ability to analyze security data, identify threats, and create effective solutions Ability to document and communicate technical information clearly to both technical and non-technical audiences Scripting/automation experience a plus The ideal candidate possesses the following traits: Creativity: the ability to deploy different approaches and be resourceful. Intellectual curiosity: passion for learning and investigating a broad range of subject matter; satisfaction derived from the consumption and understanding of information and increasing knowledge base. Accountability: ownership of individual responsibilities and work product. Strong people skills: ability to build relationships internally and externally and to be versatile in engaging with different constituents.

Program Manager, Integrity GRC. Meta's Integrity GRC team is the central force behind integrity risk management and compliance for Meta and our family of apps. Serve as Integrity GRC subject matter expert: Act as a key connection point between Integrity Risk Management, Legal, Regulatory Offices, an

Global Sub-Solution Advisor Grc, Gts, Tax. This expert would support the GRC, GTS, and tax sub-solution area leader with key elements across sales, marketing, partners, and the digital hub to build upon the customer base within the solution area, as well as, creating healthy and growing revenue stre

Reporting to the Senior Director of Information Security, the GRC Analyst will play a critical role in supporting the organization-s compliance and risk management programs. Evaluate security, privacy, and compliance controls against organizational standards.

Covering cyber assets, software, SaaS applications, identities, vulnerabilities, infrastructure, and more, Axonius is the one place to go for Security, IT, and GRC teams to continuously drive actionability across the organization. We welcome people of different backgrounds, experiences, abilities an

Governance, Risk, and Compliance initiatives. Use the organization's GRC platform to document exceptions, incidents, and other risk items. This role will collaborate with process owners, auditors, and business partners to help maintain a strong compliance posture across the organization—especially

We are seeking a highly experienced and knowledgeable Cyber GRC Senior Specialist to join our team.

The GRC Analytics & Automation Analyst builds and maintains data pipelines, automation, and dashboards that enable measurable compliance and continuous monitoring across the Compliance Governance Program. Minimum 3 years in GRC, data analytics, or process automation roles with experience integrating

This is a full time job onsite in Woodbridge NJ.Only accepting local candidates and must be a green card or US citizen.The GRC Analyst will collaborate with process owners, internal auditors, external auditors, and other stakeholders to assist in reviewing, monitoring, and resolving findings.This in

We are seeking an experienced, proactive Cyber Risk Leader to serve as the Director of Governance, Risk, and Compliance. This critical role involves leading a global GRC team within the Information Security function, with responsibilities spanning strategic management of cyber risk, third-party risk

Partnering closely with internal Product, Customer Success, Support, and Sales teams to drive continuous improvement of the platform based on client use cases. Providing guidance and best practices on configuring, customizing, and optimizing the functionality of the GRC platform and modules to align

The Role: Senior Associate, Security GRC (Cyber). Gemini is seeking a hands-on Senior Associate, Security GRC to join our cybersecurity team. Assess and lead cybersecurity projects across cloud security, container security, and infrastructure hardening.

You will leverage your SAP experience and project management skills, to effectively support client engagement teams and provide technical expertise in the assessment, design, and implementation of controls, security, and IT risk solutions. Risk Consulting - Risk Tech - SAP GRC & Security - Senior Co

Join to apply for the Risk Consulting - Risk Tech - SAP GRC & Security - Manager role at EY. Get notified about new Risk Consulting - Risk Tech - SAP GRC & Security - Manager jobs in Hoboken, NJ. Risk Consulting - Risk Tech - SAP GRC & Security - Manager.

Job DescriptionCoreWeave is The Essential Cloud for AI™. Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at You'll Do: The CISO organization at CoreWeave is responsible for executing and delivering security, trust, and assurance across our products, platforms, and operations. Within this organization, the Security Trust & Assurance team is building leading Governance, Risk and Compliance (GRC) programs, including third party risk management (TPRM). As a TPRM Technical Program Manager, you will work with cross-functional teams, including engineering, procurement, IT, and operations to build leading TPRM programs across all phases of the vendor lifecycle. This is a hands-on and operational role that will directly contribute to CoreWeave's security and privacy objectives. If you are passionate about cloud technologies, thrive in complex technical environments, and excel at orchestrating large-scale programs, we want to hear from you! About the role: In this role, you will: • Contribute to the the Third-Party Risk Management (TPRM) strategy and roadmap, ensuring alignment with CoreWeave's overall security, privacy, and business objectives, • Oversee & execute third party security risk assessments, including analysis of appropriate security controls, contract requirements, and compliance documentation, • Define TPRM methodologies and operational workflows, • Drive cross-functional consensus among stakeholders to standardize TPRM processes and controls across the entire vendor lifecycle, • Act as the primary subject matter expert (SME) for technical TPRM risks, effectively communicating complex concepts and remediation strategies to technical and executive audiences, • Develop, implement, and automate technical risk assessment methodologies, focusing on high-risk domains such as cloud security, data processing/privacy, and secure SDLC, • 4+ years of hands-on experience in Third Party Risk Management, including demonstrable experience building or maturing a TPRM program in a fast-paced, high-growth, or cloud-native environment, • A Bachelor's degree in Information Security, Computer Science, or a related field or equivalent job experience, • Adept understanding of procurement and vendor lifecycle management, • Adept understanding of security concepts, including relevant certifications (ex. CISSP, Security+), • Familiarity with industry-standard control frameworks and regulations (e.g., SOC 2, ISO 27001, NIST CSF, PCI DSS, GDPR, CCPA), • Strong project and program management skills, including planning, scheduling, risk identification, and resource allocation, • Demonstrated ability to influence without direct authority and collaborate effectively with diverse stakeholders, including Engineering, Procurement, Legal, and external vendor teams, • Experience working with CSPs/Hyperscalers, • Cloud security certifications (e.g., CCSK, AWS/Azure Security), • Experience integrating TPRM with CI/CD pipelines or DevSecOps practices for vendors, • Be Curious at Your Core, • Act Like an Owner, • Empower Employees, • Deliver Best-in-Class Client Experiences The base salary range for this role is $143,000 to $210,000. The starting salary will be determined based on job-related knowledge, skills, experience, and market location. We strive for both market alignment and internal equity when determining compensation. In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program (all based on eligibility). What We Offer The range we've posted represents the typical compensation range for this role. To determine actual compensation, we review the market rate for each candidate which can include a variety of factors. These include qualifications, experience, interview performance, and location. In addition to a competitive salary, we offer a variety of benefits to support your needs, including: • Medical, dental, and vision insurance - 100% paid for by CoreWeave, • Company-paid Life Insurance, • Voluntary supplemental life insurance, • Short and long-term disability insurance, • Flexible Spending Account, • Health Savings Account, • Tuition Reimbursement, • Ability to Participate in Employee Stock Purchase Program (ESPP), • Mental Wellness Benefits through Spring Health, • Family-Forming support provided by Carrot, • Paid Parental Leave, • Flexible, full-service childcare support with Kinside, • 401(k) with a generous employer match, • Flexible PTO, • Catered lunch each day in our office and data center locations, • A casual work environment While we prioritize a hybrid work environment, remote work may be considered for candidates located more than 30 miles from an office, based on role requirements for specialized skill sets. New hires will be invited to attend onboarding at one of our hubs within their first month. Teams also gather quarterly to support collaboration California Consumer Privacy Act - California applicants only CoreWeave is an equal opportunity employer, committed to fostering an inclusive and supportive workplace. All qualified applicants and candidates will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. As part of this commitment and consistent with the Americans with Disabilities Act (ADA), CoreWeave will ensure that qualified applicants and candidates with disabilities are provided reasonable accommodations for the hiring process, unless such accommodation would cause an undue hardship. If reasonable accommodation is needed, please contact: . Export Control Compliance This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information, applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful permanent resident (green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158, (B) eligible to access the export controlled information without a required export authorization, or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency. CoreWeave may, for legitimate business reasons, decline to pursue any export licensing process.

Job DescriptionCoreWeave is The Essential Cloud for AI™. Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at . What You'll Do The Product Engineering organization is responsible for executing and delivering CoreWeave's products, platforms, processes, and tools. As a security compliance lead, you will creatively shape compliance solutions that enhance both security, engineering and business agility. You will collaborate closely with innovative teams to turn compliance from a checklist into a strategic advantage. You will be part of an environment that values proactive thinking, creative problem-solving, and meaningful impact. If you are passionate about cloud technologies, thrive in complex technical environments, and excel at orchestrating large-scale programs, we want to hear from you! In this role, you will: • Partner closely with stakeholders to design, implement, and enhance security, operational, and privacy controls, • Conduct readiness assessments and guide control owners to seamlessly navigate external audits and internal obligations, • Actively manage compliance and regulatory lifecycles, ensure clarity and simplicity in tracking, evidence gathering, and reporting, • Collaborate with Product, Solution Architect, and Engineering teams to streamline compliance requirements, fostering innovation and efficiency, • Continuously assess control maturity, and uncover creative opportunities for automation and process improvements that benefit the entire organization Who You Are Minimum Qualifications • At least 10 years of hands-on experience in Security Compliance, Audit, ideally within the cloud services industry, • A Bachelor's degree in Information Security, Computer Science, or a related field or equivalent job experience, • Proven track record conducting comprehensive assessments of control frameworks, identifying strengths, gaps, and actionable improvements, • 3-5 years of experience leading large-scale compliance frameworks (SOC 2, ISO 27001, ISO27701, HITRUST, PCI) in a fast-paced, technical environment, • Experience automating compliance evidence collection or reporting processes, • Strong ability to collaborate effectively with diverse remote teams across engineering, infrastructure, and security, • Excellent communication skills, transparent documentation practices, and meticulous record-keeping capabilities, • Familiarity with at least one of the GRC platforms: Anecdotes, OneTrust,HyperProof, Archer, ServiceNow GRC, Vanta, Drata etc., • Experience managing multiple audits and certification cycles., • Creative experience leveraging compliance activities to drive business growth and innovation, • Proven success in simplifying complex regulatory obligations into clear, actionable strategies, • Experience with multiple cloud platforms (AWS, GCP, or Azure) and security tooling. Solid understanding of cloud security risks and controls The base salary range for this role is $122,000 to $237,000. The starting salary will be determined based on job-related knowledge, skills, experience, and market location. We strive for both market alignment and internal equity when determining compensation. In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program (all based on eligibility). What We Offer The range we've posted represents the typical compensation range for this role. To determine actual compensation, we review the market rate for each candidate which can include a variety of factors. These include qualifications, experience, interview performance, and location. In addition to a competitive salary, we offer a variety of benefits to support your needs, including: • Medical, dental, and vision insurance - 100% paid for by CoreWeave, • Company-paid Life Insurance, • Voluntary supplemental life insurance, • Short and long-term disability insurance, • Flexible Spending Account, • Health Savings Account, • Tuition Reimbursement, • Ability to Participate in Employee Stock Purchase Program (ESPP), • Mental Wellness Benefits through Spring Health, • Family-Forming support provided by Carrot, • Paid Parental Leave, • Flexible, full-service childcare support with Kinside, • 401(k) with a generous employer match, • Flexible PTO, • Catered lunch each day in our office and data center locations, • A casual work environment While we prioritize a hybrid work environment, remote work may be considered for candidates located more than 30 miles from an office, based on role requirements for specialized skill sets. New hires will be invited to attend onboarding at one of our hubs within their first month. Teams also gather quarterly to support collaboration California Consumer Privacy Act - California applicants only CoreWeave is an equal opportunity employer, committed to fostering an inclusive and supportive workplace. All qualified applicants and candidates will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. As part of this commitment and consistent with the Americans with Disabilities Act (ADA), CoreWeave will ensure that qualified applicants and candidates with disabilities are provided reasonable accommodations for the hiring process, unless such accommodation would cause an undue hardship. If reasonable accommodation is needed, please contact: . Export Control Compliance This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information, applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful permanent resident (green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158, (B) eligible to access the export controlled information without a required export authorization, or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency. CoreWeave may, for legitimate business reasons, decline to pursue any export licensing process.