Trabajos pci dss en New York, New YorkCrear alertas

Job DescriptionCareer Renew is recruiting for one of its clients a Business Operations and Compliance Manager - Crypto - this is a fully remote role for US based candidates, as long as they can work EST hours. We build technology that makes markets safer and more accessible. Our risk management systems, oracles, and AI models secure billions in value while democratizing access to world-class financial tools. Our platform is trusted by leading protocols, including Aave, GMX, dYdX, Venus, Jupiter, and others, to manage and secure billions of dollars in assets. Reporting directly to the VP Business Operations, we are looking for a talented Business Operations & Compliance Manager to join our team and help shape the future of decentralized finance. Responsibilities: * Lead Compliance & Security Programs – Own the design, implementation, and ongoing management of global compliance initiatives (SOC 2, ISO 27001, PCI-DSS), including audits, certifications, and risk management. * Build and Enforce Internal Policies – Develop, maintain, and scale security, compliance, and operational policies across the organization, ensuring consistency and accountability. * Oversee Vendor & Contract Management – Manage vendor selection, procurement, onboarding, and contract processes, aligning them with compliance and security requirements. * Enable Cross-Functional Collaboration – Partner with technical, business, and legal teams to embed compliance and security best practices into daily operations and strategic initiatives. * Drive Program & Process Excellence – Lead company-wide initiatives that improve operational efficiency, reduce risk, and support sustainable growth. Requirements * 5–7+ years of experience in business operations, compliance, or security program management within a technology company. * Strong knowledge of compliance frameworks (SOC 2, ISO 27001, PCI-DSS) and experience leading audits. * Proven ability to design, implement, and enforce internal policies at a global scale. * Background in vendor management, procurement, and contracts. * Excellent program management and organizational skills with experience working cross-functionally across technical and business teams. * Strong communication skills and a passion for security, operational excellence, and emerging technologies like blockchain and DeFi. Preferred Qualifications: * Experience working in high-growth technology companies or startups, ideally with exposure to compliance, security, or risk management functions. * Familiarity with blockchain, smart contracts, and/or DeFi protocols. * Demonstrated ability to scale compliance and security programs in fast-paced, global environments. * Strong analytical and problem-solving skills, with comfort driving cross-functional initiatives. * Experience working in both hypergrowth startup environments and larger enterprise organizations. Compensation & Package Our Perks: * Paid Time Off – 21 vacation days + 7 sick days + 8 observed U.S. company holidays * Health Coverage – 100% employer-paid options (medical, dental & vision) for you and your dependents * FSA / HSA Options – depending on selected health insurance plan * Parental Leave – thoughtful policy to support your family needs * Wellness Programs – OneMedical, Teladoc, Talkspace, and EAP * Career Growth – opportunities in a rapidly expanding, global technology company with personalized professional development * Pre-tax Commuter Benefits * Compensation & Equity – competitive package aligned with growth and merit

Job DescriptionHeadquartered in New York City, located in the heart of Midtown Manhattan, our Loews Hotels & Co Home Office teams support our properties throughout the United States. Our talented teams provide guidance over strategic planning, operations, revenue management, communications, sales, development, brand marketing, finance, human resources and information technology. . Who We Are: Founded in 1960, Loews Hotels & Co-operates iconic hotels and resorts across the U.S. Together, our diverse and welcoming teams craft exceptional experiences in iconic destinations. Growth and belonging start here; you'll be valued for who you are and the goals you have. Whether your next career chapter involves making memories for guests or supporting our properties in our Corporate Office, every role-from Guest Services to Finance, Culinary to IT-offers opportunities to grow and make a meaningful impact. Creating a Team Member experience where you belong no matter what race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status that makes you, you is a daily focus for us. What We Offer: * This is a bonus eligible position * Hybrid work schedule * Competitive health & wellness benefits, 401(K) & company match * Paid Sick Days, Vacation, and Holidays, Paid Bereavement, Paid Pet Bereavement * Training & Development opportunities, career growth * Tuition Reimbursement * Employee Hotel Rates, other discounts, perks and more What We're Looking For: As the IT Audit Manager at Loews Hotels, you'll be at the forefront of our IT-focused audit endeavors, reporting directly to the Vice President, Internal Audit. This role offers an opportunity to lead and manage Sarbanes-Oxley (SOX) compliance audits over IT general controls (ITGCs) and drive operational IT audit processes, ensuring the integrity and security of our technology landscape. Collaborate closely with the VP, Internal Audit to craft annual risk assessments and risk-based audit plans, leveraging your expertise to identify key areas of focus and opportunity. Further, the IT Audit Manager successfully establishes positive working relationships with key internal and external stakeholders at all levels, including Executive and Senior Leadership, Loews Corporation Internal Audit, co-source partners, and external auditors. Who You Are: * A guardian of ethics guided by principles of integrity, honesty, and respect * A continuous learner who is constantly evolving, mastering new skills, and staying updated on industry trends * A relentless communicator, fostering collaboration to support their colleagues and drive collective success * A natural, effective leader who takes initiative, makes decisions, and motivates others * A quick learner who is nimble in adapting to new situations and thrives in a dynamic work environment * Veterans and military spouses are encouraged to apply What You'll Do: * Perform annual risk assessments to develop the annual risk-based audit plan, evaluating the adequacy and operating effectiveness of internal controls by conducting audits of all business units (i.e., corporate/home office, hotel properties, and the shared service center), communicating audit recommendations to remediate audit issues or concerns identified, and providing IT advisory and assurance services to improve internal controls, operations, risk management, and compliance * Provide independent, objective IT assurance and advisory services to assess, evaluate, and validate the design and operating effectiveness of internal controls, while also adding value towards continuous process improvement opportunities within the organization * Lead and manage the planning, fieldwork, and reporting phases of IT compliance audits (including the review of quarterly IT SOX compliance certifications and completion of annual IT SOX compliance audits as required by SOX 302 and SOX 404, respectively) across the organization * Participate in the Annual Audit Risk Assessment and Enterprise Risk Management (ERM) processes, including understanding standard operating procedures and risk management policies, IT security and governance policies, interviewing key internal stakeholders, reviewing control self-assessments (CSAs) completed by hotel management, and analyzing financial data and information, which will help define annual risk-based audit plans * Share input and ideas towards developing audit risk and control matrices, mapping/documenting processes and procedures (e.g., flow charts and walkthrough narratives), and creating/enhancing audit methodologies and strategies * Perform detailed IT audit testing procedures during the fieldwork phase, while maintaining supporting audit workpapers, and thoroughly documenting any audit results and issues identified * Execute integrated audits consisting of financial, operational, IT, and compliance auditing procedures in collaboration with the Audit Manager * Clearly and timely communicate audit results and significant findings to the VP, Internal Audit, business and process owners, and senior management, and effectively advise on audit recommendations and corrective action plans to remediate issues * Assist with drafting formal audit reports and presentations that will be communicated to the Audit Committee, Executive and Senior Leadership team members and all other related key stakeholders * Partner with the IT Security and Governance team to assess and evaluate all IT general controls (ITGCs), as well as to complete special projects involving Cyber Security, Data Governance & Classification, Service Organization Controls (SOC) Reviews, System Implementations, Payment Card Industry Data Security Standards (PCI DSS) Compliance, etc. * Collaborate with the IT Business Intelligence team to design data analytics for continuous monitoring and automated audit testing by leveraging available analytical tools and resources * Hire, train, coach, and develop new staff and senior internal auditors, as needed * Co-lead and manage internal and external parties (e.g., co-source partners) to conduct planned audits * Coordinate with external auditors for interim and year-end financial statement audits, as necessary * Attend all required training sessions and meetings * Perform other duties as assigned Your Experience Includes: * Bachelor's in accounting, finance, or IT related field required; Master's degree in referenced fields preferred * A minimum of six years of external or internal audit experience with working knowledge of and skill in applying Generally Accepted Accounting Principles (GAAP), Generally Accepted Auditing Standards (GAAS), Institute of Internal Auditors (IIA) Standards, SOX Compliance Requirements, Cyber Security Framework Standards (e.g., National Institute of Standards Technology - NIST), PCI DSS, etc. * Extensive understanding of internal controls and risks with the ability to recognize significant control issues and risk exposure across the organization * Experience assessing IT risks (including SOX), and evaluating the adequacy, design, and operating effectiveness of ITGCs * Strong understanding of IT security, governance, network, and infrastructure processes and procedures * Familiarity with utilizing data analytics tools to gain full coverage of audit population and automate auditing procedures * Proven track record of successfully managing and leading staff and senior internal auditors to effectively and sufficiently complete audit assignments and timely report on results * Excellent communication skills (verbal and written) in interactions with team members at all levels, including control or business process owners and senior management * Strong interpersonal skills with the ability to effectively develop and maintain positive working relationships cross-functionally with all levels of team members (e.g., Accounting, Finance, Operations, Compliance, Legal, HR, Loews Corporate Internal Audit, etc.) and external parties (e.g., co-source partners and external auditors) * Flexibility to work independently and in a team-oriented environment depending on assignment needs * Combination of Public Accounting (external audit) and Internal Audit experience preferred * IT audit experience at a company within the hospitality, restaurant, and retail industries, preferred * Knowledge of systems and applications such as, Oracle Enterprise Resource Planning (ERP), Workday Human Resources Information System (HRIS), Opera Property Management System (PMS), etc. with the ability to utilize system reports for audit testing and data analytics, preferred * Ability to work a flexible schedule based on business needs * Must be willing and able to travel up to 30% of the time, depending on business needs Who You'll Supervise: * Indirect team members (i.e., senior internal auditors) depending on the projects assigned * External co-source staff auditors, as needed * External co-source staff auditors, as needed . Salary range for this position, based on experience, is $112,000.00 to $140,000.00. Loews Hotels & Co is an Equal Opportunity Employer that does not discriminate on the basis of actual or perceived race, color, creed, religion, national origin, ancestry, citizenship status, age, sex or gender (including pregnancy, childbirth and pregnancy-related conditions), gender identity or expression (including transgender status), sexual orientation, marital status, military service and veteran status, physical or mental disability, genetic information, or any other characteristic protected by applicable federal, state or local laws and ordinances.

Job DescriptionOur mission: to eliminate every barrier to mental health. At Spring Health, we're on a mission to revolutionize mental healthcare by removing every barrier that prevents people from getting the help they need, when they need it. Our clinically validated technology, Precision Mental Healthcare, empowers us to deliver the right care at the right time—whether it's therapy, coaching, medication, or beyond—tailored to each individual's needs. We proudly partner with over 450 companies, from startups to multinational Fortune 500 corporations, as a leading provider of mental health service, providing care for 10 million people. Our clients include brands you use and know like Microsoft, Target, and Delta Airlines, all of whom trust us to deliver best-in-class outcomes for their employees globally. With our innovative platform, we've been able to generate a net positive ROI for employers and we are the only company in our category to earn external validation of net savings for customers. We have raised capital from prominent investors including Generation Investment, Kinnevik, Tiger Global, Northzone, RRE Ventures, and many more. Thanks to their partnership and our latest Series E Funding, our current valuation has reached $3.3 billion. We're just getting started—join us on our journey to make mental healthcare accessible to everyone, everywhere. We are looking for a Security Engineer II to be part of our Security Operations & Engineering (SecOps) team. SecOps is committed to proactively detect, respond to, simulate, and identify breach attempts and threat actors. You will work with a team who oversee overall enterprise security systems implementation, lifecycle (S-SDLC), and support. You will help improve the company's ability to respond to threats through technology selection, internal product development and implementations with a heavy emphasis on automation of manual tasks and processes. We're looking for security engineers that can work collaboratively with our security, product, infrastructure architecture and engineering teams to implement secure solutions. This role will report to the Manager of Security Operations and Engineering What you'll be doing • Design, build, maintain, tune and enhance the effectiveness of our security controls in multiple security domains including but not limited to:, • Cloud security, • Endpoint detection and response (EDR), • Data loss prevention (DLP), • Security Information and Event Management (SIEM), • Identity and Access Management (IAM), • Email security and phishing defenses, • Secure access service edge (SASE), • Automate and optimize workflows to reduce manual effort in detection, analysis, and response., • Refine detection and alerting rules to enable identification and remediation of potential threats with actionable, high-quality signals., • Participate in on-call rotation, resolving most issues independently and escalating to Subject Matter Experts (SMEs) where necessary., • Collaborate with peer teams to secure applications, business software and services, and infrastructure., • Drive secure integrations for cloud applications and infrastructure., • Create and maintain documentation including knowledge base articles, incident response playbooks, and project documentation., • Lead post-incident reviews (RCAs) and contribute to lessons learned. What success looks like in this role: • Improved time to detect and resolve security issues, • Reduced number of vulnerabilities found in production, • Improved engagement scores between technology teams and security teams, • Security events are consistently monitored, investigated, and resolved in a timely way, with clear documentation that allows others to easily follow the lifecycle of the issue., • Projects and initiatives are delivered on schedule, driving measurable improvements in security maturity and reducing risk across the organization., • Security processes are proactively improved and automated to reduce manual work, increase efficiency, and strengthen detection and response capabilities., • Documentation of systems, incidents, and projects is accurate, current, and serves as a reliable resource for the team and stakeholders., • Communication with colleagues, stakeholders, and customers is timely, clear, and professional - ensuring that others feel informed and supported without needing to chase for updates., • Team meetings and cross-functional sessions are opportunities to lead, share expertise, and influence outcomes - success means being an active participant and sometimes facilitator., • Collaboration with engineering, product, infrastructure, and GRC teams results in trusted partnerships where security is seen as an enabler, not a blocker., • You are recognized by peers and stakeholders as a dependable contributor who consistently follows through on commitments and raises the bar for security practice at Spring Health.What we expect of you, • 2+ years of professional security engineering or operations experience, including incident response., • Proficiency with Infrastructure as Code (Terraform, Terragrunt, CloudFormation, etc)., • Familiarity with cloud platforms (AWS, Azure, GCP) and their security features, best practices, and configurations., • Strong scripting skills in at least one language (Python preferred) to automate tasks, analyze data, and develop security tools., • Hands-on experience with incident response, detection engineering, security automation, and developing / automating incident response playbooks., • Knowledge of security principles, technologies, and best practices (encryption, authentication, firewalls, IDS/IPS, etc)., • Ability to manage multiple tasks/projects simultaneously and prioritize effectively based on risk and business impact., • Strong analytical and problem-solving skills with the ability to identify security risks and develop effective mitigation strategies., • Excellent communication and collaboration skills; able to explain technical concepts to non-technical audiences., • Familiarity with compliance standards such as HIPAA, GDPR, PCI-DSS, ISO 27001.What we'd love to see as a bonus, • Experience with threat hunting., • Security certifications (e.g., AWS Security Specialty, GCP Security Engineer, CISSP, GIAC)., • Experience leading incident postmortems or security tabletop exercises., • Health, Dental, Vision benefits start on your first day at Spring. You and your dependents also receive access to One Medical accounts HSA and FSA plans are also available, with Spring contributing up to $1K for HSAs, depending on your plan type., • Employer sponsored 401(k) match of up to 2% for retirement planning, • A yearly allotment of no cost visits to the Spring Health network of therapists, coaches, and medication management providers for you and your dependents., • We offer competitive paid time off policies including vacation, sick leave and company holidays., • At 6 months tenure with Spring, we offer parental leave of 18 weeks for birthing parents and 16 weeks for non-birthing parents., • Access to Noom, a weight management program—based in psychology, that's tailored to your unique needs and goals., • Access to fertility care support through Carrot, in addition to $4,000 reimbursement for related fertility expenses., • Access to Wellhub, which connects employees to the best options for fitness, mindfulness, nutrition, and sleep in one subscription, • Access to BrightHorizons, which provides sponsored child care, back-up care, and elder care, • Up to $1,000 Professional Development Reimbursement a year. Ready to do the most impactful work of your life? Learn more about our values, what it's like to work here, and how hypergrowth meets impact at Spring Health: Our Values Our privacy policy: Spring Health is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex, marital status, ancestry, disability, genetic information, veteran status, gender identity or expression, sexual orientation, pregnancy, or other applicable legally protected characteristic. We also consider qualified applicants regardless of criminal histories, consistent with applicable legal requirements. Spring Health is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans. If you have a disability or special need that requires accommodation, please let us know.

Job DescriptionCareer Renew is recruiting for one of its clients a Principal Solutions Engineer - Crypto - this is a fully remote role for US-based candidates. Join a stellar team of leaders and experts in blockchain technology, cryptography, infrastructure, and security to build the backbone of blockchain wallet infrastructure for the next financial era. We’re hiring a Principal Solutions Engineer to help institutions, fintechs, and enterprises across the Americas adopt us with confidence and ease. This role is hands-on and client-facing: you’ll design integrations for complex environments, guide customers through deployment, and provide end-to-end technical support. You’ll pair technical expertise with strong communication skills, serving as an advisor to CTOs, architects, and engineering teams. Expect to design tailored solutions, deliver technical proposals, troubleshoot issues in real time, and collaborate closely with our backend, security, and product teams to ensure successful outcomes. Preferred experience Responsibilities * Guide financial institutions and fintechs through seamless onboarding and integration. * Build secure, scalable deployment pathways that bridge legacy and modern systems. * Provide hands-on support: troubleshoot, fix, and build solutions alongside client teams. * Collaborate with sales on technical proposals, demos, and RFP responses. * Maintain and improve technical documentation and developer guides. * Gather client feedback and translate insights into product and API improvements. * Represent us at conferences, workshops, and customer meetings. Requirements * 10+ years in solutions engineering, forward-deployed engineering, enterprise integration. * Track record of helping institutions or enterprises deploy mission-critical systems. * Strong in TypeScript (or similar languages) with proven API experience (REST). * Deep knowledge of cloud platforms (AWS essential; GCP/Azure/Thales a plus), microservices, and serverless architectures. * Skilled in troubleshooting complex issues and delivering under pressure. * Solid understanding of enterprise security frameworks (ISO 27001, SOC 2, PCI DSS). * Excellent communicator, able to bridge technical and business conversations. * Strong documentation, presentation, and demo skills. * Knowledge of blockchain, custody, and financial workflows strongly preferred. * Certifications (e.g., AWS Solutions Architect) a plus; Spanish/Portuguese fluency valued. Compensation & Package * Title: Principal Solutions Engineer * Salary: $160,000-220,000 per year (full-time). * Equity: 100-200 stock options vested over 4 years. * Benefits: Healthcare, 401K, and travel expenses. * Location: United States (remote-first, office optional). * Equipment: MacBook Pro + essentials.

Job DescriptionSalary: ABOUT PLIANT Pliant is a European fintech specializing in B2B payment solutions. Our modular, API-first platform helps businesses streamline spending, improve cash flow, and integrate payments into their financial workflows. Designed for industries with complex payment needs, such as travel and fleet, Pliant enables greater efficiency, control, and profitability. We focus on two primary customer segments: • P&C/Life/Health carriers, MGAs, TPAs, and benefits administrators looking to modernize payments with intuitive apps and powerful APIsunlocking stronger controls, operational efficiency, and cashflow flexibility through extended credit lines and virtual cards., • Platforms & financial software providers (e.g., insurance cores, ERPs, benefits admins, banks) looking to launch or enhance card programs via embedded finance/whitelabel issuing, strengthening customer engagement and creating new revenue streams. Founded in 2020 and headquartered in Berlin, Pliant supports over 3,500 businesses and more than 20 partners globally. As a licensed e-money institution (EMI), we issue Visa-powered credit cards in 11 currencies across more than 30 countries, helping companies streamline and simplify payments. Learn more at ABOUT THE ROLE Were hiring a Head of Partnerships, Insurance & Benefits US to accelerate Pliants entry into one of our most strategic verticals. Youll identify, engage, and convert US insurance and benefits organizations that can benefit from virtual cards, embedded issuing, controlled disbursements, and automated AP including P&C/Life/Health carriers, MGAs, TPAs, benefits administrators (HSA/FSA/HRA, commuter), provider payment networks, selffunded employer plans, and leading insurtechs. Youll work closely with commercial, product, and compliance teams to shape messaging and solution design for use cases like claims payouts, provider/vendor payments, broker commissions, premium refunds, and benefit/stipend cards. This is a highimpact role with significant ownership and growth potential. This role is remotefriendly (USbased; East Coast preferred) with occasional travel to clients, team onsites, and industry events (e.g., ITC Vegas, RIMS, AHIP, SIIA, LIMRA, Guidewire Connections, Duck Creek Formation). WHAT YOULL DO • Acquire Insurance & Benefits Logos: Source, develop, and qualify new opportunities across P&C, Life & Health, MGAs, TPAs, benefits admins, provider networks, and insurtechs., • Own the Full Sales Cycle: Drive complex, multistakeholder enterprise deals endtoend discovery, value mapping, solution design, ROI, security/compliance reviews, proposal, negotiation, and close., • Vertical Messaging & Value Cases: Articulate how Pliant solves domainspecific pain points slow, check/ACHbased payouts; poor claimant/provider experience; high reconciliation effort; fraud/chargebacks; data & compliance overhead and quantify ROI (timetofunds, costtoserve, rebate/cashback economics)., • Ecosystem CoSelling & Partnerships: Build motions with ISVs and SIs (e.g., Guidewire, Duck Creek, Sapiens, Majesco, Salesforce), benefits platforms (e.g., Alegeus ecosystem), and channel allies (networks, sponsor banks, processors) to accelerate deals., • RFPs, Infosec & Compliance Orchestration: Coordinate responses and reviews (e.g., SOC 2, PCI DSS, HIPAA BAAs/DPAs, GLBA), partnering with Product, Security, and Legal to remove blockers., • Field Feedback Roadmap: Feed structured insights on integrations, SLAs, payout rails (e.g., pushtocard, RTP, ACH), reconciliation/reporting, and claims/benefits workflows (ACORD, EDI 835/837/820) into product and GTM content., • Forecasting & Hygiene: Maintain accurate pipeline and activity data in HubSpot/Salesforce, ensuring crisp forecasting, stage definitions, and stakeholder mapping., • Market Intelligence & Marketing Support: Track US insurance/benefits trends, competitor moves, and policy shifts; partner with Marketing on campaigns, events, case studies, and comarketing. WHAT YOULL BRING • 8+ years of experience in B2B commercial roles at fintech/payments/insurtech, building and scaling ecosystems with carriers, MGAs, TPAs, benefits administrators, provider networks, and large selffunded employers; proven track record driving partnersourced and partnerattached revenue., • Deep domain fluency in US insurance & benefits workflowsclaims adjudication and disbursements, provider/vendor payments, premium collection/refunds, commission payouts, and HSA/FSA/HRA programsand the ability to design joint solutions with partners around these flows., • Expert understanding of payment rails & tradeoffsvirtual/commercial cards, pushtocard (Visa Direct/Mastercard Send), RTP/FedNow, ACH/wires, checkswith the ability to architect multirail partner offerings and negotiate commercial models (rev share, interchange split, fees, float)., • Ecosystem & integrations savvy: familiarity with ACORD and EDI 835/837/820, and experience launching and scaling integrations/marketplace listings with Guidewire, Duck Creek, Sapiens, Majesco, Salesforce; comfort prioritizing cobuilds and shaping joint roadmaps with partner PM/engineering teams., • Partner program leadership: source, evaluate, and contract partners (ISVs, SIs, sponsor banks, networks, processors); stand up cosell and comarket motions, enablement, certification, MDF, solution playbooks, and governance (QBRs, OKRs, pipeline influence)., • Compliance & deal orchestration: collaborate with Legal, Security, and Compliance to align partner solutions to HIPAA/BAA, GLBA, Reg E, state unclaimed property, KYC/KYB/OFAC, and enterprise InfoSec; steer complex MSA/SOW negotiations to closure., • Executive influence & communication: crisp value storytelling, Csuite alignment, and stakeholder management across Claims Ops, Treasury/Finance, Product/IT, Compliance/Legal, Procurement; adept at navigating long, multithreaded cycles and partnerled sales., • Bonus: existing relationships across carriers/TPAs/benefits admins; handson experience with Guidewire/Duck Creek partner programs; familiarity with SOC 2, PCI DSS; operational knowledge of Salesforce/HubSpot and PRM tooling; prior success launching US partnerships from an international (EMEA) base. WHAT WE OFFER • Competitive salary and performance-based incentives, • An influential role shaping U.S. market growth at an international fintech, • Opportunities for professional growth and ownership from day one, • A remote-friendly environment with support for work-life flexibility, • Health, wellness, and retirement benefits, • Access to a diverse and ambitious team driven by impact, innovation, and transparency Ready to apply ? Pliant Careers

Job DescriptionWe are looking for a detail-oriented GRC Analyst to join our team in Woodbridge, New Jersey. In this role, you will support audit processes, oversee cybersecurity training initiatives, and ensure compliance with industry regulations and standards. This position offers a unique opportunity to collaborate across departments and contribute to maintaining the organization's security and risk management framework. Responsibilities: • Collect and organize evidence to support annual audits conducted internally and externally., • Manage and monitor a centralized repository for audit-related documentation to ensure accessibility and accuracy., • Respond promptly to audit requests, ensuring that all submissions meet required standards., • Develop and deliver training programs on cybersecurity awareness, including onboarding sessions, periodic newsletters, and phishing simulations., • Administer the organization's cybersecurity compliance training program to reinforce best practices., • Conduct risk assessments using established frameworks to identify control strengths, weaknesses, and areas for improvement., • Utilize the organization's platform to track and resolve security exceptions, violations, incidents, and other risk-related issues., • Maintain updated documentation of procedures to enhance team knowledge and industry expertise., • Assist in reviewing and updating security policies, standards, and practices annually to align with current operational needs., • Collaborate with various business units to address new and existing regulatory requirements.• Strong understanding of compliance frameworks such as GLB Act, SOX, PCI DSS, and eGRC., • Proven experience in cybersecurity compliance and risk management., • Ability to conduct detailed risk assessments and identify actionable solutions., • Familiarity with audit processes and documentation management., • Excellent communication skills for delivering training programs and collaborating with stakeholders., • Proficiency in managing cybersecurity platforms and tracking risk-related issues., • Capability to develop and maintain comprehensive procedural documentation., • Knowledge of industry standards and regulatory obligations in the banking sector.

Job DescriptionCompany Description About Sia Sia is a next-generation, global management consulting group. Founded in 1999, we were born digital. Today our strategy and management capabilities are augmented by data science, enhanced by creativity and driven by responsibility. We’re optimists for change and we help clients initiate, navigate and benefit from transformation. We believe optimism is a force multiplier, helping clients to mitigate downside and maximize opportunity. With expertise across a broad range of sectors and services, our 3,000 consultants serve clients worldwide from 48 locations in 19 countries. Our expertise delivers results. Our optimism transforms outcomes. Strategy & Management Consulting Sia’s Strategy & Management Consulting global footprint and expertise in more than 40 sectors and services allow us to enhance our clients' businesses worldwide. We guide their projects and initiatives in strategy, business transformation, IT & digital strategy. Financial Institutions have drastically changed over the last decade, driven by increased regulatory constraints, diverse competition inside and beyond traditional banking organizations, and emerging technologies reshaping long-standing ecosystems. Sia’s Financial Services Business Unit provides a comprehensive suite of core capabilities designed to address the diverse and evolving needs of our clients, enabling them to navigate complex challenges, seize new opportunities, and achieve their strategic objectives in an increasingly competitive and dynamic business environment. Job Description Role Overview: We are seeking a Manager, Payments with experience in Financial Services and Payments (FinTech). This specialist will work closely with our Sia colleagues and clients’ payments and FinTech teams, leading cross-functional regulatory remediation initiatives, develop solutions to optimize payment activities and products, and participate in business development initiatives. Key Responsibilities: • Provide expert guidance on U.S. payment regulations affecting electronic transactions including but not limited to credit, debit, EBT, ACH, Prepaid, BNPL, Crypto Currencies, RTP, FedNow, mobile payments, and other payment types., • Ability to understand and interpret PCI DSS, KYC and AML, PSD2, SOC 2, OFAC, FinCEN, and FATF regulations and impacts on clients, • Assess and interpret emerging regulatory trends, supervisory expectations, and enforcement actions to develop compliance strategies, • Support clients in creation of product pipelines, product requirements and user stories, product road maps, and high level strategic planning, • Develop regulatory frameworks, compliance programs, and internal policies to align with industry best practices, • Stay abreast of VISA, MasterCard, American Express, and other Association guidelines and best practices, • Collaborate with internal and client project team members, and contribute to internal communications and readiness activity within the program team and with client groups, • Manage multiple consulting engagements, ensuring on-time and high-quality deliverables, • Provide status reporting of progress, dependencies, issues, risks and overall program health to Senior Management, • Lead cross-functional teams and collaborate with clients to drive project execution, • Support business development by contributing to proposals, client presentations, and thought leadershipQualifications, • 7+ years of experience working in a Payments-related organization (i.e. Issuer, Acquirer, FinTech, or Payments-related role within your organization)., • Prior management consulting experience, • A bachelor’s degree in Finance, Business Management, or a related field from an accredited college/university is required (master's is preferred), • Deep understanding of payment regulations and related issues affecting financial services organizations in the US., • Experience leading product implementations, developing requirements and user stories, and advising leadership on industry trends and best practices., • Experience with Mastercard solutions including but not limited to Mastercard API capabilities and Mastercard’s Ethoca solution., • Excellent communication and stakeholder engagement skills, with the ability to convey complex concepts to senior executives., • Project management skills, with experience overseeing payments initiatives and coordinating cross-functional teams., • Experience working as a Product Manager within Financial Services and/or Payments organization, • Experience with the Scaled Agile Framework, • Experience using Agile Tools (i.e. Rally, Jira, Confluence, ADO, etc.) Additional Information Compensation & Benefits We believe in supporting our team professionally and personally. Here’s a snapshot of the comprehensive benefits you’ll enjoy as part of Sia. Competitive Compensation * Annual base salary starting at 130,000K, commensurate with experience and qualifications * Annual performance based discretionary bonus Robust Health Coverage * 3 Medical plans * Dental and Vision * Life, AD&D and other voluntary insurance Tax-Advantaged Accounts * 401K retirement plan * 4% matching and 100% vested upon enrollment * Health Savings Account (HSA) * Flexible Spending Account (FSA) * Health, Dependent Care, Commuter Family Friendly Benefits * 100% paid parental leave for all new parents with eligible tenure * Building Healthy Families program if enrolled through Medical plan Time Off to Recharge * Generous Paid Time Off (PTO) policy * 9 company holidays plus 1 floating holiday Extras that Make Life Easier * College savings and student loan repayment assistance * Monthly cell phone stipend * Access to wellness programs at no cost if enrolled through Medical plan, including: * Gym membership reimbursement * LiveHealth Online virtual care * Personalized support from a Well-being Coach * Employee Assistance Program at no cost * Free confidential counseling and emotional support services * On-demand access to Emotional Well-being resources (ranging from relaxation techniques to stress management) Our Commitment To Diversity At Sia, we believe in fostering a diverse, equitable and inclusive culture where our employees and partners are valued and thrive in a sense of belonging. We are committed to recruiting and developing a diverse network of employees and investing in their growth by providing unique opportunities for professional and cultural immersion. Our commitment toward inclusion motivates dynamic collaboration with our clients, building trust by creating an inclusive environment of curiosity and learning which affects lasting impact. Please visit our website for more information. Hybrid Workplace Guidelines Sia is committed to providing a flexible workplace environment that supports client, business, and market needs. Consultants located in our primary market office locations—New York City, Charlotte, Seattle, and San Francisco are expected to live within a reasonable commuting distance and attend the office at least three days per week. For applicants in other markets, including those without a local office, we offer more flexible in-person requirements to accommodate your location. Work Authorization & Sponsorship At this time, Sia does not intend to employ any applicant who will require, either now or in the future, employment visa sponsorship or sponsorship for work authorization (i.e., H-1B visa, F-1/OPT or STEM OPT, TN, etc.). Sia is an equal opportunity employer. All aspects of employment, including hiring, promotion, remuneration, or discipline, are based solely on performance, competence, conduct, or business needs.

Job Description Our mission is to create the Experience of a Lifetime for our employees, so they can, in turn, create the Experience of a Lifetime for our guests. We own and operate the most renowned destination resorts in the world as well as regional and local ski areas outside major cities, and connect them all through one unrivaled network. We are looking for ambitious leaders, innovators and creators to join our talented team. If you’re ready to pursue your fullest potential, we want to get to know you! Candidates for year-round positions are reviewed on a rolling basis. Applications will be accepted up to 90 days after the posting date, or until the position is filled (whichever is first). Job Summary: The Principal Analyst, Enterprise Networking & Telecom, will act as the technical leader for enterprise networking and telecom, shaping architecture and strategy across hybrid datacenters, multi-cloud, and edge environments. This hire will oversee migrations, set standards, and mentor engineering teams on technologies such as Avaya telephony, CSaaS/CCaaS, SASE (Cato), Check Point firewalls, Cisco Nexus, Extreme Fabric, Azure, disaster recovery, and network automation. The Principal Analyst will lead the transition of contact centers to a cloud-native Genesys platform, managing the migration from legacy systems and integrating AI-driven features like intelligent routing, speech analytics, and automated quality assurance. This person will collaborate on compliance, data residency, and security, ensuring all regulatory requirements are met and teams are empowered to maximize new capabilities. In addition, they will guide international compliance for contact center voice, recording, data residency, and lawful intercept policies. Job Specifications: • Starting Wage: $104,000 - $156,000 + annual bonus, • Employment Type: Year Round, • Minimum Age: At least 18 years of age, • Housing Availability: No Job Responsibilities: Architecture & Strategy: • Set multi-year architectures for WAN/LAN/Voice/Cloud/SASE across Azure, AWS, and/or GCP; standardize hub-and-spoke/vWAN/Transit Gateway/Cloud WAN patterns and inter- cloud routing., • Define DR and business continuity patterns for network and voice (active/active DCs, cloud failover, SBC survivability, carrier diversity, ExpressRoute/Direct Connect failover)., • Create standards for addressing, segmentation, BGP/EVPN, QoS, SIP call flows, SBC/SIP trunks, Internet egress, cross-cloud connectivity, and data residency. Solution Design & Delivery: • Lead designs for: Cato SASE policy & topology; Check Point (policy as code, IPSec/SSL VPN, clustering); Cisco Nexus leaf-spine/EVPN-VXLAN; Extreme Fabric segmentation; Azure vWAN/Firewall/ER, AWS TGW/Cloud WAN, GCP NCC, Private Link/Endpoint services; DNS and L7/L4 LB across clouds; inter-cloud routing and failover., • Own call control architectures: Avaya CM/SM/SMGR/SBC, SIP trunking, global routing with regional breakouts, E911/NG911, survivability, and CSaaS/CCaaS integrations (QoS, WFM/QA/analytics)., • Drive strategy for seamless migration of on-premises Avaya voice systems to cloud AI- powered contact center platforms, ensuring robust planning, effective stakeholder alignment, and optimal utilization of modern AI-driven features for enhanced customer engagement and operational excellence., • Drive micro segmentation (host- and fabric-based) aligned to identity and zero trust., • International CC compliance: design call recording/redaction, storage, encryption, data residency controls, retention, DLP, and lawful disclosure workflows across regions; align to PCI-DSS, GDPR, UK DPA, LGPD, and local telecom rules; document country-specific constraints (e.g., call recording consent models, toll-free usage, CLI rules)., • Observability: global telemetry (NetFlow/IPFIX), synthetic testing, MOS/RTT analytics, SIP ladder traces, DEM—correlated across regions/clouds. Security, Reliability & Compliance: • Partner with Security on zero-trust zone models, least-privilege access, threat prevention, and incident response runbooks spanning on-prem and multi-cloud., • Architect HA/DR for network and voice: RTO/RPO targets, failover runbooks, scheduled game-days, and automated validation., • Ensure adherence to corporate/regulatory standards; produce DPIA/ROPA inputs for international contact center operations; maintain audit-ready artifacts. Automation & IaC: • Establish network/voice as code across clouds and platforms: Git, CI/CD, testing, drift detection, policy guardrails., • Build reusable modules and pipelines (Terraform/Ansible/Python) for Cato, Check Point, Azure/AWS/GCP networking, Extreme, and Nexus; integrate with ITSM/CMDB for request-to-deploy and inventory. Leadership & Enablement: • Act as domain authority and Tier-3 escalation for complex incidents., • Mentor engineers; run architecture councils; align Infra, Security, Cloud, Contact Center,, • Legal/Privacy, and regional stakeholders., • Vendor management: evaluate platforms, negotiate capabilities/roadmaps, and drive outcomes with carriers/SBCs/CSaaS providers globally. Required qualifications: • 10+ years in enterprise networking/voice; 3–5 years in an architecture/principal role delivering large-scale, multi-region designs., • Deep expertise in several and operational familiarity with the rest:, • Telecom/Voice: Avaya (CM/SM/SMGR), Genesys, SBCs/SIP trunks, E911/NG911, recording/compliance, CCaaS/CSaaS integrations., • SASE: Cato Networks (topology, policy, SWG/CASB/DLP), large-scale user/site onboarding., • Firewalls/Security: Check Point policy design, VPN, IPS, clustering, policy-as-code., • Datacenter: Cisco Nexus (EVPN/VXLAN), leaf-spine, vPC/MLAG, QoS, multicast (as needed)., • Campus/Fabric: Extreme Fabric Connect (SPB/IS-IS), macro/micro-seg., • Cloud Networking: Azure vWAN/Hub-Spoke/Firewall/ER, AWS TGW/Cloud WAN/Direct Connect, GCP NCC/VPC; Private Link/Endpoints; cross-cloud routing and inter-cloud resilience., • DR/BCP: Network and voice DR design (active/active, warm standby, SBC/carrier failover), RTO/RPO planning and validation., • Compliance (Contact Center): Experience aligning recording, storage, consent, retention, encryption, and access controls with PCI-DSS and international data protection laws (e.g., GDPR) and country telecom rules., • Certifications (nice to have): CCNP/CCIE (Enterprise/DC), Check Point CCSE/CCSM, Extreme ECS/ECSE, AWS Advanced Networking, GCP Network Engineer, Azure Network Engineer, Avaya ACSS/ACSA, ITIL., • Experience with global carriers, number management, and regional PSTN rules., • Exposure to DEM/observability (ThousandEyes/Catchpoint), call-quality analytics, and dataset design for QoE. The expected Total Compensation for this role is $104,000 - $156,000 + annual bonus. Individual compensation decisions are based on a variety of factors. Job Benefits • Ski/Mountain Perks! Free passes for employees, employee discounted lift tickets for friends and family AND free ski lessons, • MORE employee discounts on lodging, food, gear, and mountain shuttles, • 401(k) Retirement Plan, • Employee Assistance Program, • Health Insurance; Medical Insurance, Dental Insurance, and Vision Insurance plans (for eligible seasonal employees after working 500 hours), • Free ski passes for dependents, • Critical Illness and Accident plans Vail Resorts offers a ‘Hybrid’ work environment where employees living within 50 miles of the Broomfield office work on-site Tuesday, Wednesday, Thursday and have flexibility to work off-site on Mondays and Fridays. Employees living outside of a commutable distance can work remotely from British Columbia, Washington D.C., and the 16 U.S. states* in which we currently operate. This includes: California, Colorado, Indiana, Michigan, Minnesota, Missouri, New Hampshire, New York, Nevada, Ohio, Pennsylvania, Utah, Vermont, Washington State, Wisconsin, and Wyoming. Please note that the ability to work in person or off-site, and the particulars related to such work, are subject to change at any time; and, accordingly, the Company reserves the right to change its policies and/or require in-person/in-office work or off-site work at any time in its sole discretion. In completing this application, and when submitting related documentation, applicants may redact information that identifies their age, date of birth, and/or dates of attendance at or graduation from an educational institution. We follow all federal, state, and local laws including restrictions on child/minor labor. Minors hired into this position will not be asked or permitted to engage in any activities restricted to adult workers. Vail Resorts is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, protected veteran status or any other status protected by applicable law. Requisition ID 510998 Reference Date: 08/26/2025 Job Code Function: Applications

Job Description StubHub is on a mission to redefine the live event experience on a global scale. Whether someone is looking to attend their first event or their hundredth, we're here to delight them all the way from the moment they start looking for a ticket until they step through the gate. The same goes for our sellers. From fans selling a single ticket to the promoters of a worldwide stadium tour, we want StubHub to be the safest, most convenient way to offer a ticket to the millions of fans who browse our platform around the world. About the team:StubHub Cloud & Infrastructure Security Engineering is seeking a senior engineer to enhance our security posture within the cloud and infrastructure domains. The perfect candidate will possess extensive experience in cloud security architecture, network security, and infrastructure automation, as well as a familiarity with container and operating system security. Location: Hybrid (3 days in office/2 days remote) – New York, NY or Santa Monica, CA or Aliso Viejo, CA What You'll Do: • Develop secure Cloud Account Architectures, focusing primarily on AWS, while understanding and navigating the trade-offs of various cloud architectures., • Design and implement network security strategies that leverage security groups, NACLS, routing domains, and multi-tiered subnet architectures to ensure a defense-in-depth approach., • Manage critical security logging and monitoring infrastructure for cloud-native and third-party data sources, ensuring their efficient shipping to Data Lakes and integration with visualization platforms., • Operate and manage Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platforms (CWPP), such as Wiz, Orca, Palo Alto Networks Prisma, and Rapid7 ICS., • Deploy configurations and infrastructure using Infrastructure as Code (IaC) frameworks, such as Terraform, Cloud Formation, and Pulumi., • Develop and implement governance strategies for infrastructure deployment that integrate security best practices and enhance developer productivity., • Architect and implement workload identity services, such as SPIRE (Spiffe), in a heterogeneous multi-cloud environment., • Architect and maintain PKI and secrets management platforms to ensure secure storage and access to sensitive information., • Expert level experience in AWS cloud account architecture., • Expert level knowledge in Network Security, including experience with AWS networking primitives: Security Groups, Network Access Control Lists (NACLS), Subnetting, Routing, and egress traffic filtering mechanisms., • Expert level proficiency in Identity & Access Management (IAM) Security, including experience with architecting AWS IAM roles & policy architectures for both human and machine access., • Expert level communication skills and the ability to work effectively across teams., • Expert level experience deploying and maintaining configurations and infrastructure using Terraform., • Expert level experience with modern CSPM and CWPP tools (e.g., Wiz, Orca, Prisma, or Rapid7)., • Intermediate level experience with Secrets / key Management Platforms (e.g., AWS KMS, AWS Secrets Manager, Hashicorp Vault)., • Expert level experience in building and implementing IaC governance strategies that combine security best practices while enabling developer productivity., • Intermediate level experience in architecting & managing Spire (Spiffe) and Service Mesh services., • Intermediate level proficiency in Python or Go, and Bash scripting., • Intermediate level experience in container & operating system hardening., • Intermediate level experience in building & maintaining Web Application Firewalls., • Intermediate level experience in architecting & implementing internal PKI & Secrets Management services., • Intermediate level knowledge of Kubernetes (K8s) Security foundations, including admission controllers, K8s Network Policies, K8s RBAC, and K8s Ingress architectures., • Intermediate level proficiency in DDoS mitigation techniques using AWS Shield, CDN traffic scrubbing, and origin protection mechanisms., • Accelerated Growth Environment: An environment designed for swift skill and knowledge enhancement, where you have the autonomy to lead experiments and tests on a massive scale., • Top Tier Compensation Package: Competitive base, equity, and upside that tracks with your impact., • Flexible Time Off: Embrace a healthy work-life balance with unlimited Flex Time Off, providing you the flexibility to manage your schedule and recharge as needed., • Comprehensive Benefits Package: Prioritize your well-being with a comprehensive benefits package, featuring 401k, and premium Health, Vision, and Dental Insurance options. The anticipated gross base pay range is below for this role. Actual compensation will vary depending on factors such as a candidate's qualifications, skills, experience, and competencies. Base annual salary is one component of StubHub's total compensation and competitive benefits package, which includes equity, 401(k), paid time off, paid parental leave, and comprehensive health benefits. Salary Range$200,000—$275,000 USDAbout UsStubHub is the world's leading marketplace to buy and sell tickets to any live event, anywhere. Through StubHub in North America and viagogo, our international platform, we service customers in 195 countries in 33 languages and 49 available currencies. With more than 300 million tickets available annually on our platform to events around the world -- from sports to music, comedy to dance, festivals to theater -- StubHub offers the safest, most convenient way to buy or sell tickets to the most memorable live experiences. Come join our team for a front-row seat to the action. For California Residents: California Job Applicant Privacy Notice found hereWe are an equal opportunity employer and value diversity on our team. We do not discriminate on the basis of race, color, religion, sex, national origin, gender, sexual orientation, age, disability, veteran status, or any other legally protected status.

Job Description StubHub is on a mission to redefine the live event experience on a global scale. Whether someone is looking to attend their first event or their hundredth, we're here to delight them all the way from the moment they start looking for a ticket until they step through the gate. The same goes for our sellers. From fans selling a single ticket to the promoters of a worldwide stadium tour, we want StubHub to be the safest, most convenient way to offer a ticket to the millions of fans who browse our platform around the world. StubHub's Product Security Engineering Team is seeking a Senior Engineer to enhance our security posture within the end user and services product domain. The perfect candidate will possess experience in CI/CD pipeline security, product and application architecture reviews, contextualized vulnerability management processes, and automation. Location: Hybrid (3 days in office/2 days remote) – New York, NY or Santa Monica, CA About the team: StubHub's Product Security Engineering Team plays a critical role in securing the platforms that power the world's largest ticket marketplace. This team works hands-on with cutting-edge tools and cloud-native technologies to embed security into every layer of the software development lifecycle—from architecture to automation. If you're passionate about offensive security, CI/CD hardening, and driving real impact across modern product teams, this is your opportunity to lead and innovate at global scale. What You'll Do: • Conduct security assessments, code reviews, and penetration tests on web applications, APIs, and mobile apps to identify vulnerabilities and flaws., • Collaborate with development teams to embed security into CI/CD pipelines, including the implementation of automated code scanning tools., • Develop and maintain secure coding guidelines and conduct security awareness training for developers., • Respond to security incidents, perform root cause analyses, and recommend effective remediations., • Stay current on emerging security threats, vulnerabilities, and mitigation strategies; proactively share insights across teams., • Help develop and enforce application security policies, standards, and procedures aligned with industry regulations and best practices., • Conduct architectural reviews to ensure the security of new technologies and controls., • Build and maintain robust product vulnerability management processes and procedures., • Write and maintain production-grade APIs to automate security processes and streamline infrastructure and developer workflows., • Demonstrated expert-level understanding of offensive web application security testing and defense-in-depth remediation strategies., • Expert-level skills in vulnerability assessments and code reviews., • Extensive experience with automated security testing tools (e.g., Burp Suite, OWASP ZAP, Snyk)., • Strong communication skills, with the ability to convey complex security concepts to both technical and non-technical audiences., • Hands-on experience in applied cryptography and key management., • Proven ability to implement SAST, DAST, and SBOM tooling within development workflows., • Experience in performing structured threat modeling (e.g., STRIDE, PASTA)., • Intermediate proficiency in at least one scripting language (e.g., Python, Ruby)., • Industry-recognized security certifications (e.g., OSCP, CEH, CISSP, GWAPT)., • Intermediate-level experience with cloud security principles and technologies in AWS and Azure., • Understanding of Kubernetes security fundamentals, including the use of admission controllers, network policies, role-based access control (RBAC), and ingress architecture design., • Accelerated Growth Environment: Immerse yourself in an environment designed for swift skill and knowledge enhancement, where you have the autonomy to lead experiments and tests on a massive scale., • Top Tier Compensation Package: Enjoy a rewarding compensation package that includes enticing stock incentives, aligning with our commitment to recognizing and valuing your contributions., • Flexible Time Off: Embrace a healthy work-life balance with unlimited Flex Time Off, providing you the flexibility to manage your schedule and recharge as needed.

Job Description Our mission is to create the Experience of a Lifetime for our employees, so they can, in turn, create the Experience of a Lifetime for our guests. We own and operate the most renowned destination resorts in the world as well as regional and local ski areas outside major cities, and connect them all through one unrivaled network. We are looking for ambitious leaders, innovators and creators to join our talented team. If you’re ready to pursue your fullest potential, we want to get to know you! Candidates for year-round positions are reviewed on a rolling basis. Applications will be accepted up to 90 days after the posting date, or until the position is filled (whichever is first). Job Summary: As the Manager of Governance and Compliance on the Resort Application Development team, you will be responsible for ensuring that software delivery practices align with regulatory requirements, internal standards, and the defined Software Development Lifecycle (SDLC). You will play a key role in promoting consistency, accountability, and operational excellence across development teams. In addition, you will manage a documentation analyst who is responsible for maintaining high-quality documentation and training resources across the team—ensuring they are accurate, accessible, and aligned with business needs. In this role, you will report to the Senior Director of Resort Application Development. The Resort Application Development team develops and maintains the suite of back-end services that power our guest-facing eCommerce and mobile experiences, along with the internal application ecosystem that enables resort employees to deliver exceptional service on the mountain. Job Specifications: • Starting Wage: $103,596.30 - $140,119.44, • Employment Type: Year Round, • Shift Type: Full Time hours available, • Minimum Age: At least 18 years of age, • Housing Availability: No Job Responsibilities: • Model and promote our core values—Serve Others, Do Right, Drive Value, Do Good, Be Safe,Have Fun, and Be Inclusive—in every aspect of your leadership and decision-making, • Lead governance efforts to ensure all software development activities adhere to Vail Resorts’ SDLC standards and SOX and PCI compliance protocols., • Work closely with internal and external auditors, providing accurate and timely responses to audit requests and ensuring transparency in compliance practices., • Encourage enthusiasm and engagement in your team’s daily work by creating a supportive and motivating environment., • Collaborate with development teams, business leaders, and security teams to identify gaps and implement process improvements., • Ensure relevant documentation and training materials to support compliance awareness and adoption., • Conduct regular audits and reviews to assess adherence to governance frameworks and recommend corrective actions., • Partner with stakeholders to ensure governance practices support business goals and operational efficiency., • Build a strong understanding of Vail Resorts’ business operations to ensure governance efforts are practical, relevant, and value-driven., • Support individual growth by understanding your team members’ career goals and helping them, • navigate development opportunities., • Help identify and champion improvements to the SDLC, while ensuring all changes meet compliance obligations. Job Requirements: • 2+ years in a management role within an IT organization, • 3+ years demonstrated experience working with SOX (Sarbanes-Oxley) and PCI DSS (Payment Card Industry Data Security Standard) compliance requirements in a software development or IT environment., • Strong understanding of SDLC methodologies and software delivery practices., • Excellent communication and collaboration skills., • Ability to influence cross-functional teams and drive process adoption. The expected Total Compensation for this role is $103,596.30 - $140,119.44. Individual compensation decisions are based on a variety of factors. Job Benefits • Ski/Mountain Perks! Free passes for employees, employee discounted lift tickets for friends and family AND free ski lessons, • MORE employee discounts on lodging, food, gear, and mountain shuttles, • 401(k) Retirement Plan, • Employee Assistance Program, • Health Insurance; Medical Insurance, Dental Insurance, and Vision Insurance plans (for eligible seasonal employees after working 500 hours), • Free ski passes for dependents, • Critical Illness and Accident plans Vail Resorts offers a ‘Hybrid’ work environment where employees living within 50 miles of the Broomfield office work on-site Tuesday, Wednesday, Thursday and have flexibility to work off-site on Mondays and Fridays. Employees living outside of a commutable distance can work remotely from British Columbia, Washington D.C., and the 16 U.S. states* in which we currently operate. This includes: California, Colorado, Indiana, Michigan, Minnesota, Missouri, New Hampshire, New York, Nevada, Ohio, Pennsylvania, Utah, Vermont, Washington State, Wisconsin, and Wyoming. Please note that the ability to work in person or off-site, and the particulars related to such work, are subject to change at any time; and, accordingly, the Company reserves the right to change its policies and/or require in-person/in-office work or off-site work at any time in its sole discretion. In completing this application, and when submitting related documentation, applicants may redact information that identifies their age, date of birth, and/or dates of attendance at or graduation from an educational institution. We follow all federal, state, and local laws including restrictions on child/minor labor. Minors hired into this position will not be asked or permitted to engage in any activities restricted to adult workers. Vail Resorts is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, protected veteran status or any other status protected by applicable law. Requisition ID 511491 Reference Date: 09/10/2025 Job Code Function: Applications

Job Description About Unframe Unframe is on a mission to help the world's largest enterprises bring LLM-powered applications to life in days—not months. Fresh out of stealth with a $50M Series A from Bessemer, Craft, TLV Partners, we're led by a multi-time founder and backed by real market momentum. Our platform is LLM-agnostic, integrates with any data source, and delivers fully customized AI applications through a unique Blueprint-led approach—no fine-tuning, no data sharing, and priced based on value delivered. We're building the future of AI infrastructure—and we're doing it fast. Learn more: Employment type: Full-time Location: Remote About the Role We're looking for a Strategic Account Executive to join our team and drive our go-to-market motion in Financial Services. You'll play a pivotal role in landing our first major financial services customers, shaping our FinServ sales playbook, and partnering directly with the VP of Sales and founder to build a high-performance revenue engine. What You'll Do • Drive Financial Services Transformation: Lead complex, multi-stakeholder sales cycles into banks, insurance companies, asset managers, and fintech where our on-premises capabilities provide critical competitive advantage for regulatory compliance., • Own the Full Sales Cycle: Build pipeline from zero in an early-stage environment—identify and win strategic financial services accounts with no hand-raisers or established playbook., • Solution Architecture: Translate complex AI/ML capabilities into compelling business outcomes for CIOs, and Chief Transformation Officers in financial services, positioning Unframe for institutions seeking to "buy vs. build" AI capabilities., • Navigate Financial Services Compliance: Leverage our full on-premises deployment to address stringent regulatory requirements around data privacy, model governance, and audit trails that are critical in financial services., • Account Expansion: Architect multi-year expansion strategies across multiple business lines within financial institutions and build deep relationships across risk, compliance, IT, and innovation teams., • Go-to-Market Partnership: Collaborate directly with the VP of Sales and founders to refine our financial services strategy and influence product roadmap based on FinServ customer needs. You Might Be a Fit If You Have: • 8+ years enterprise software sales with consistent quota over-achievement at Fortune 500 financial services companies, • Proven track record closing $1M+ ACV deals with banks, insurance companies, or asset management firms, • Experience selling complex technical solutions to CIO organizations in highly regulated financial services environments, • Background in AI/ML platforms, digital transformation, enterprise data platforms, regulatory technology, or management consulting with financial services focus, • Deep understanding of financial services regulations (SOX, GDPR, PCI-DSS, Basel III) and how they impact technology adoption, • Entrepreneurial mindset—you thrive in ambiguity, own outcomes, and build from scratch in complex regulatory environments, • Success navigating financial services procurement processes and enterprise security reviews Why Join • Uncapped commissions with aggressive accelerators, • Meaningful equity in a category-defining company, • Direct access to executive leadership and chance to shape FinServ GTM strategy, • High-ownership, high-impact role during our most formative growth phase in the largest enterprise AI market Ready to build the future of AI in financial services? Let's talk. If you're a strong, independent builder who thrives on ownership, cares deeply about quality, and wants to have a real impact — we'd love to meet you.

Job DescriptionWhy Till? As a senior engineer at Till, you'll be part of our ambitious team working to embed financial literacy into everyday family life. You'll have significant technical ownership in building tools that don't just move money – they build lifelong financial relationships and teach the next generation how to be smarter with their finances. Who you are: You are an experienced full-stack engineer who takes initiative and drives technical excellence while delivering value to our customers, product, and company. Your communication skills are exceptional, and you thrive when given complex problems to solve with minimal oversight. You care deeply about your teammates and customers, and find fulfillment in owning the full lifecycle of product development—from technical architecture to production deployment. You have extensive experience in software engineering with a strong background in payment systems. You're excited to leverage your expertise while continuing to learn new technologies in our rapidly evolving fintech ecosystem. What you’ll do: You'll architect and implement the systems that power family banking at scale. This means building robust payment processing workflows, designing APIs that financial institutions integrate with, and creating mobile experiences that both parents and kids love using. Working closely with our product, design, and business teams, you'll help us balance our need to innovate quickly with the rock-solid reliability that financial services demand. Every feature you build helps families make better financial decisions and strengthens the relationships between our financial institution partners and their customers. Key Responsibilities: • Architect and implement scalable backend services and APIs, • Lead full-stack development from React Native mobile apps to backend systems, • Design and optimize payment processing workflows and money movement systems, • Mentor junior engineers and participate in technical decision-making, • Collaborate cross-functionally with product, design, and business teams, • Ensure compliance with financial regulations and security best practices, • Drive code quality, testing standards, and deployment processesRequired Experience:, • 8+ years of full-stack software engineering experience at senior or staff level, • 3+ years of production Go development with demonstrated expertise, • Strong React and React Native experience building consumer-facing applications, • Payment system expertise example include:, • ACH transfers, card processing, and banking integrations (Galileo), • Payment processor APIs (Stripe, Plaid, or similar), • Financial compliance requirements (PCI-DSS, banking regulations), • Ledger management, • AWS cloud services experience with Lambda, RDS, SQS, and related technologies, • Database design and optimization with PostgreSQL or similar systems, • API design and microservices architecture at scale, • Experience with CI/CD pipelines and deployment automationBonus points for:, • Previous fintech or financial services experience, • Experience with real-time payment rails (FedNow, RTP), • Knowledge of banking partnership integrations, • Mobile app store deployment and management, • Monitoring and observability tools (DataDog, New Relic, etc.)Our tech stack:, • Frontend: React, React Native, • Backend: Go (AWS Lambda), PostgreSQL (RDS), • Infrastructure: AWS (Lambda, SQS, RDS, CloudWatch), AWS CDK for infrastructure as code, • CI/CD: CircleCI, AWS CodeBuild, AWS CodePipeline We're a group of parents, kids, entrepreneurs, engineers, and designers united by a belief that everyone deserves better financial preparation for the real world. We built Till to solve the daily headache of family money management while teaching teens to become financially savvy adults. Till is backed by experienced investors including Afore Capital, Alpine Meridian, Elysian Park, Luge Capital, Magnify Ventures, and Sidekick Partners. Based primarily in Boston and NYC, we're building a culture that balances accountability with fun, hard work with meaningful impact. Benefits and Perks: • Health, dental, vision, and life insurance, • Short and long-term disability coverage, • Flexible vacation and holiday policy, • Parental leave (including non-birth parents), • HSA with annual company contribution The salary range for this position is $150,000 - $180,000. Ranges are based on function, level, and office location, and are benchmarked against similar stage companies. Exact compensation amounts are determined by multiple factors including but not limited to skill set, level of experience, and office location, and may vary above or below from the amounts listed above. Powered by JazzHR bZMs9HsQMd

Job Description We are looking for a Informatica Consultant with GCP experience. Responsibilities • Lead technical solution discovery with larger enterprise level merchants., • Create innovative, customer driven Solution Proposals and Solution Designs utilizing customers suite of API products including Braintree Credit Card, PayPal Wallet, Venmo, Simility, Hyperwallet, etc., • Identify any product/functionality gaps required to deliver a solution and collaborate with internal product and technology teams to define the necessary enhancements to support delivery. Become a recognized technical expert with the internal product set and in identifying potential solutions for new merchant relationships. Work closely with internal teams including compliance, privacy, risk, information security, support and operations to ensure all aspects of a proposal are addressed. Educate the merchants to implement optimal integration strategies, techniques and user experience best practices. Develop Solution Designs and Solution Design templates that can be used for future integrations with enterprise merchants by other Solutions Architects, Solutions Engineers and Integration Engineers. Provide leadership within the team. Mentor junior members on solution related issues. Review solution design and vet solution proposals for technical viability. Actively participate with PayPal product management teams on product design and roadmap reviews. Requirements Master’s degree, or foreign equivalent, in Computer Science, Engineering, or a closely related field plus two years of experience in the job offered or a related occupation. • Payment ecosystem comprising Acquirors, Gateways, Processors, Banks, and Merchants, • Online Payment Solutions including but not limited to: PayPal, Braintree, Chase, AmEx, FirstData, Google Pay, Apple Pay, • regulatory agency (SEC, DOJ, FINRA), corporate compliance program, • Payment Card Industry/Data Security Standard (PCI-DSS) and General Data Protection Regulation (GDPR), • REST API, SDK, GraphQL, • API lifecycle management, • HTTPS, API, REST, VPN’s, • complex software product architecture, • Merchants to support the end-to-end integration for Web, Mobile, and Kiosk based Payments Any suitable combination of education, training and experience is acceptable. Experience can be gained through academic coursework, scholastic achievement, or work experience. Must be legally authorized to work in the U.S. without sponsorship.

Job Description Summary: The Security Architect has primary responsibility for leading the Security Engineering and Architecture function within the Bank’s Information Security team. The individual will develop and maintain the security architecture framework and strategy in accordance with the Bank’s policies, standards, and risk appetite. They will collaborate with business units, Risk Management, and Technology teams to ensure security is integrated with business and technology strategies and objectives. Job Responsibilities: Security Design, Architecture, and Strategy • Lead the Bank’s Security Engineering and Architecture function., • Develop and maintain the security architecture framework, standards, policies, and guidelines for the Bank’s IT systems and applications., • Drive the Bank’s security architecture strategy ensuring adherence to principles of defense in depth, economy of mechanism, least privilege, and secure by default., • Collaborate with business units, Risk Management, and Technology teams to align security architecture with the business and technology strategies and objectives., • Maintain an evolving picture of the threat landscape, trends, and emerging technologies., • Perform security reviews of technology platforms and applications., • Identify and evaluate security risks across technology and vendor platforms, networks, applications, and cloud environments by performing risk assessment and threat modeling activities., • Develop and oversee execution of treatment plans to address identified risks in accordance with organizational policies, standards, and risk appetite balancing security, performance, and business needs., • Analyze and recommend security controls and procedures in acquisition, development, and change management lifecycle of information systems, and monitor for compliance., • Lead the assessment of security processes, platforms, and practices to identify areas for improvement., • Ensure technology solutions have security considerations embedded throughout their lifecycle., • Ensure ongoing compliance with regulatory requirements.Project Management, • Lead in the management and execution of large-scale projects according to project management schedules., • Develop comprehensive project plans including milestones, resource allocation, and timelines ensuring alignment with the Bank’s security objectives., • Coordinate with internal and external stakeholders as required to ensure on-time and on-budget delivery of projects., • Support incident response efforts by reviewing security events and escalations, performing investigations, and seeing matters through to resolution., • Support technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies., • Stay abreast of relevant industry related developments, trends, and threats., • Commit to ongoing professional education and development in the Information / Cyber Security field., • Bachelor’s degree in an IT related discipline required;, • At least 5– 8 years of experience in information technology, information security, risk, or similar field;, • 5+ years of experience in an information security role;, • 5+ years of architecture experience;, • Experience in a highly regulated industries is preferred;, • Relevant industry certifications (CCSP, CISM, CAASP+, SSCP, CNDA, CYSA+) and/or advanced degrees may be considered in lieu of experience;, • Deep expertise in secure design and architecture principles;, • Advanced knowledge of multiple security practice areas including security architecture, security engineering, identity and access management, asset management, vulnerability management, threat detection and response, endpoint security, network security, cloud security, web security, email security, data security, application security, threat intelligence;, • In-depth knowledge of regulatory frameworks including, but not limited to, NIST, PCI-DSS, SOX, FFIEC, ISO27001;, • Ability to provide risk-based recommendations balancing security, performance, and business needs;, • Ability to communicate complex security topics to technical and non-technical stakeholders;, • Medical, Dental, Vision and Rx which are contributory., • Bonus programs., • Employee Stock Option Program (ESOP)., • Life Insurance, Long Term Disability and Accidental Death and Dismemberment (LTD&AD&D)., • Paid Time Off (PTO) which includes Personal and Vacation Time., • Paid Sick Time., • Bank Holidays. This role is eligible for a hybrid schedule; 3 days in the office and 2 days work from home based on business need. Columbia Bank and its affiliates is an Equal Opportunity Employer, including individuals with disabilities and veterans.

Job Description CoreWeave is the AI Hyperscaler™, delivering a cloud platform of cutting edge services powering the next wave of AI. Our technology provides enterprises and leading AI labs with the most performant, efficient and resilient solutions for accelerated computing. Since 2017, CoreWeave has operated a growing footprint of data centers covering every region of the US and across Europe. CoreWeave was ranked as one of the TIME100 most influential companies of 2024. As the leader in the industry, we thrive in an environment where adaptability and resilience are key. Our culture offers career-defining opportunities for those who excel amid change and challenge. If you're someone who thrives in a dynamic environment, enjoys solving complex problems, and is eager to make a significant impact, CoreWeave is the place for you. Join us, and be part of a team solving some of the most exciting challenges in the industry. CoreWeave powers the creation and delivery of the intelligence that drives innovation. What You'll Do: The Product Engineering organization is responsible for executing and delivering CoreWeave's products, platforms, processes, and tools. As a Global privacy compliance TPM, you will lead and scale our global privacy compliance programs. This is a highly visible, cross-functional role that sits at the intersection of legal, engineering, product, and security. As an individual contributor, you will be responsible for designing, operationalizing, and driving strategic initiatives that ensure our products, systems, and business practices meet global privacy standards. You will be part of an environment that values proactive thinking, creative problem-solving, and meaningful impact. If you are passionate about cloud technologies, thrive in complex technical environments, and excel at orchestrating large-scale programs, we want to hear from you! About the role: • Design, implement, and evolve global privacy compliance programs (e.g., GDPR, CCPA, CPRA, HIPAA and emerging regulations), driving company-wide accountability and measurable outcomes., • Lead privacy risk assessments including DPIAs,TIAs, DSRs /DSAR flows and third-party reviews, using a scalable, programmatic approach to manage and mitigate risk., • Define and mature technical and operational control frameworks for data retention, access management, data minimization, and consent, ensuring they align with both regulatory requirements and business needs., • Act as the primary privacy compliance lead for audits, certifications (e.g., ISO 27701, SOC 2 Privacy), and regulatory inquiries, ensuring readiness and timely responses., • Partner with Security Engineering to define and shape strategies for data security, classification, and sovereignty, aligning with global regulatory obligations, risk posture, and modern cloud infrastructure., • Advise senior leadership on evolving privacy risks, trends, and program maturity, translating legal and regulatory shifts into proactive action plans., • Drive cross-functional alignment across Legal, Product, Engineering, Security, and Data teams by embedding privacy-by-design principles into systems, workflows, and product development lifecycles., • Build scalable monitoring, automation, and reporting strategies, integrating GRC tooling, evidence pipelines, and dashboards to ensure continuous control effectiveness and visibility. Who You Are: • At least 10 years of hands-on experience in IT, Security Compliance, Audit, or Technical Program Management roles, ideally within the cloud services industry, • A Bachelor's degree in Information Security, Computer Science, or a related field or equivalent job experience, • Practical experience of global privacy regulations (GDPR, CCPA, etc.), • Deep understanding to operationalize privacy controls at scale preferably in Cloud environments., • Proven track record conducting comprehensive privacy assessments of control frameworks, identifying strengths, gaps, and actionable improvements, • Proven success managing large-scale compliance frameworks (SOC 2, ISO 27001, PCI DSS, HITRUST, HIPAA, FedRAMP) in a fast-paced, technical environment, • Experience automating compliance evidence collection or reporting processes, • Strong ability to collaborate effectively with diverse teams across engineering, infrastructure, and security, • Excellent communication skills, transparent documentation practices, and meticulous record-keeping capabilities, • Familiarity with GRC platforms: Anecdotes, OneTrust, Archer, ServiceNow GRC, Vanta, Drata., • Experience managing audits and certification cycles., • Manage planning and tracking through tools such as Jira, Confluence, Asana, or similar, • Legal or audit certifications (e.g., IAPP, CISA, CISM, CIPM, CRISC), • Experience with cloud platforms (AWS, GCP, or Azure) and security tooling Wondering if you're a good fit? We believe in investing in our people, and value candidates who can bring their own diversified experiences to our teams – even if you aren't a 100% skill or experience match. Why CoreWeave? At CoreWeave, we work hard, have fun, and move fast! We're in an exciting stage of hyper-growth that you will not want to miss out on. We're not afraid of a little chaos, and we're constantly learning. Our team cares deeply about how we build our product and how we work together, which is represented through our core values: • Be Curious at Your Core, • Act Like an Owner, • Empower Employees, • Deliver Best-in-Class Client Experiences The base salary range for this role is $122,000 to $237,000. The starting salary will be determined based on job-related knowledge, skills, experience, and market location. We strive for both market alignment and internal equity when determining compensation. In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program (all based on eligibility). What We Offer The range we've posted represents the typical compensation range for this role. To determine actual compensation, we review the market rate for each candidate which can include a variety of factors. These include qualifications, experience, interview performance, and location. In addition to a competitive salary, we offer a variety of benefits to support your needs, including: • Medical, dental, and vision insurance - 100% paid for by CoreWeave, • Company-paid Life Insurance, • Voluntary supplemental life insurance, • Short and long-term disability insurance, • Flexible Spending Account, • Health Savings Account, • Tuition Reimbursement, • Ability to Participate in Employee Stock Purchase Program (ESPP), • Mental Wellness Benefits through Spring Health, • Family-Forming support provided by Carrot, • Paid Parental Leave, • Flexible, full-service childcare support with Kinside, • 401(k) with a generous employer match, • Flexible PTO, • Catered lunch each day in our office and data center locations, • A casual work environment While we prioritize a hybrid work environment, remote work may be considered for candidates located more than 30 miles from an office, based on role requirements for specialized skill sets. New hires will be invited to attend onboarding at one of our hubs within their first month. Teams also gather quarterly to support collaboration California Consumer Privacy Act - California applicants only CoreWeave is an equal opportunity employer, committed to fostering an inclusive and supportive workplace. All qualified applicants and candidates will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. As part of this commitment and consistent with the Americans with Disabilities Act (ADA), CoreWeave will ensure that qualified applicants and candidates with disabilities are provided reasonable accommodations for the hiring process, unless such accommodation would cause an undue hardship. If reasonable accommodation is needed, please contact: . Export Control Compliance This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information, applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful permanent resident (green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158, (B) eligible to access the export controlled information without a required export authorization, or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency. CoreWeave may, for legitimate business reasons, decline to pursue any export licensing process.

Job Title: IAM CONSULTANT Location: 2 Metrotech Brooklyn, NY Labor Category: Specialist 3 Job Type: Contract Duration: 12 Months Work schedule: Normal business hours Monday-Friday 9am to 5pm, 35 hours/week (not including mandatory unpaid meal break after 6 hours of work). SCOPE OF SERVICES: • Assess and develop a roadmap for Client disparate directories consolidation, • Provide guidance and implementation support for integration with Entra and other IAM security enhancements., • Architect and implement Citywide-level PKI modernization, including infrastructure changes for reduced certificate lifespans, • Advice on governance, compliance, lifecycle management and automation of digital certificates, • Lead migration planning, risk assessment, and mitigation for directories and PKI modernization, • Perform technical knowledge transfer, upskilling internal teams on new infrastructure and practices TASKS: • PKI Architecture, Engineering and Administrator – 40%, • Entra ID Architecture, Engineering and Administrator – 30%, • Directory Architecture, Engineering and Administrator – 20%, • IAM Level 3 Technical Support – 10% MANDATORY SKILLS/EXPERIENCE Note: Candidates who do not have the mandatory skills will not be considered. • 12 years in IAM architect, engineering, administration and operations with focus on directory services and PKI, • Deep expertise in Active Directory (on-prem and hybrid), Entra ID, and eDirectory, • Hands-on experience in designing and operating Microsoft PKI, including certificate authority management, certificate lifecycle, and automation, • Solid understanding of modern authentication/authorization protocols (OAuth, SAML, Kerberos, etc.), • Experience with security roadmap development, risk assessment, and compliance (NIST, ISO, SOX or PCI-DSS), • Strong documentation, communication, and stakeholder management skills. DESIRABLE SKILLS/EXPERIENCE: • Experience with cloud PKI services, • Familiarity with Entra ID Governance, Conditional Access Policy, and modern security controls, • Experience automating PKI workflows (API/script-based certificate management), • Multi-forest, multi-tenant IAM architecture expertise, • Prior experience working with NYC agency, • Working knowledge of enterprise ITSM, change management, and project management methodologies SPECIAL REQUIREMENTS: N/A • Ability to work cross-functionality with technical and business stakeholders in a complex enterprise, • Availability to provide after-hours support to critical migrations and incident response

Job Description About Blue Foundry Bank This is the Bank Where Things are Made. Blue Foundry is a bank where businesses are shaped, plans are formed, ideas are refined, solutions are built, and stuff gets done. Blue Foundry is revolutionary, bold, resourceful, roll-up-your-sleeves committed, smart, creative and fun. A Bank of movers, shakers, and makers…We are a Bank that Gets Things Done. At Blue Foundry Bank we invest in the well-being of our most prized asset…our employees! We provide a robust array of programs and benefits to help employees advance their careers and enhance the quality of their lives. Our experiential learning and development program ensures employees are on track to grow their career as of day one. Position Summary The Chief Information Security Officer (CISO) is responsible for developing and overseeing the Blue Foundry Bank’s enterprise-wide information security strategy, ensuring the confidentiality, integrity, and availability of customer and organizational data, systems, and critical financial assets. The CISO leads efforts to protect the bank from cybersecurity threats, data breaches, and regulatory risks while ensuring compliance with industry standards and banking regulations. As the primary liaison for information security, you will collaborate with executive leadership, regulatory bodies, internal teams, and third-party vendors to maintain security operations and compliance. You will be responsible for overseeing the development and dissemination of security policies, testing and monitoring their effectiveness, and recommending improvements to align with the dynamic threat landscape. Additionally, you will lead cybersecurity training initiatives, ensuring the security, confidentiality of customer information, and oversees compliance with financial industry regulations, such as FFIEC guidelines, PCI DSS, and GLBA. By managing cybersecurity budgets and building a high-performing security team, the CISO ensures effective governance of the bank’s information security program, protecting its customers, assets, and reputation. The rate of pay is the minimum amount offered for this position. Blue Foundry Bank will compensate employees in a fair and equitable manner, taking into consideration education, skills, current and relevant experience, among other factors. This position is eligible for incentive pay based on achievement of company and/or individual goals. In addition, our comprehensive compensation package includes; medical, dental, and vision coverage; life insurance, short- and long-term disability insurance; 401(k)/Roth with company match up to 5%; paid time off, and 11 paid holidays; employee referral bonus; and educational reimbursement. Primary Responsibilities • Responsible for identifying, developing, implementing, and maintaining processes across the bank to reduce information and information technology risks., • Oversee components of the Bank’s Cybersecurity Program (IRM Program), including technological and logical controls, governance/policies and operational procedures and determine their adequacy and effectiveness, • Perform annual review as required by the Bank for components of the existing Cybersecurity Program (IRM Program) to include policies, standards, threat assessment, incident response and other documents identified for (periodic) presentation in the Board of Directors., • Perform annual Cybersecurity compliance physical site review in locations required by the program., • Create and maintain the baseline documentation for Corporate File Management and Retention and identify procedures to support policy., • Direct and review data discovery, data classification and data flow analysis and provide updates., • Maintain and review application and system inventory and implementation of appropriate audit reviews., • Monitor, evaluate and maintain the adequacy of existing Cybersecurity Framework, procedures and compliance with existing Cybersecurity Policies, • Responsible for responding to incidents, establishing appropriate standards and controls, managing security technologies, and directing the establishment and implementation of policies and procedures., • Monitors access to all systems and maintain access control profiles on computer network and systems. Tracks documentation of access authorizations to all resources., • Researches and investigates measures that address data security risks and potential losses for reporting purposes., • Provide guidance and administration for periodic end-user security-related training as needed to raise awareness and protection against phishing, malware, and other security vulnerabilities., • Responsible for directing and supervising vulnerability assessments and penetration tests., • Responsible for installing, modifying, enhancing and maintaining data system security software. Additional Responsibilities • Works on determining acceptable risk levels for the bank and ensuring the IT environments are adequately protected from potential risks and threats., • Participates in the development and implementation of the appropriate and effective controls to mitigate identified threats and risks., • Follows-up on detected security issues and implements solutions to reduce security risks, • Regularly provides reports regarding the status of the information security program to executive management and the Board of Directors., • Assists in research, development, communication, maintaining and working with the operational units on the enforcement of IT security architecture, policies, procedures, solutions and standards., • Oversees incident response planning as well as the investigation of security breaches, and assists with disciplinary and legal matters associated with such breaches as necessary, • Facilitate and direct tabletop exercises, • Supports improved data security awareness and education, including on-call availability., • Responsible for staying abreast of the latest industry security practices and technologies, • Meet with department heads to analyze, document and define requirements associated with new development or maintenance and enhancements to existing security roles and permissions. Reviews completed roles/permissions with users to ensure requirements are fully met., • Delivers services that meet regulatory specifications while working with internal and external auditors to document and confirm that all security administrative duties are properly performed as well as demonstrates overall compliance., • Provides guidance as needed on regulatory compliance or investigations., • Responsible for reviewing and evaluating the information security aspects of third-party service providers, vendors, contractors, and other suppliers who have access to company and customer information and systems as they relate to the following:, • New and renewal contracts: Review contracts and as necessary ensure they contain appropriate non-disclosure language and security commitments., • Performance: ensure appropriate service level expectations are defined., • Reports: Review and evaluate SOC Reports, regulatory reports, policies, procedures and other documents provided., • Monitor and evaluate security vendor performance against contractual commitments and ensure service level agreements are met. Position Requirements • Bachelor's degree in computer science or related field, • Minimum of 8+ years of progressive experience in information security and banking industry, • Must be able to communicate security-related concepts to a broad range of technical and non-technical staff. Acting as a bridge between IT and business process owners., • Certification in Certified Information System Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Ethical Hacker (CEH) or Certified Information Security Manager (CISM), • Computer investigation and forensics methods and technologies, • Must have strong knowledge of regulatory compliance and best practices for FDIC, FFIEC, PCI-DSS, SOC2, NIST, COBIT frameworks., • Subject matter expert in developing and overseeing security controls in the public cloud environment (Microsoft Azure)., • Strong knowledge of privacy laws, such as GLBA and SOX, • Must possess strong project management and leadership aptitude; demonstrated professionalism in managing multiple projects and resources effectively., • Experience with business continuity planning, auditing, and risk management, as well as contract and vendor negotiation., • Outstanding communication skills - must be proficient in communicating across all levels of the organization and building successful relationships. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, LGBTQ, national origin, disability or protected veteran status. Come join the Blue Crew community and be part of our success!

Job Description CoreWeave is the AI Hyperscaler™, delivering a cloud platform of cutting edge services powering the next wave of AI. Our technology provides enterprises and leading AI labs with the most performant, efficient and resilient solutions for accelerated computing. Since 2017, CoreWeave has operated a growing footprint of data centers covering every region of the US and across Europe. CoreWeave was ranked as one of the TIME100 most influential companies of 2024. As the leader in the industry, we thrive in an environment where adaptability and resilience are key. Our culture offers career-defining opportunities for those who excel amid change and challenge. If you're someone who thrives in a dynamic environment, enjoys solving complex problems, and is eager to make a significant impact, CoreWeave is the place for you. Join us, and be part of a team solving some of the most exciting challenges in the industry. CoreWeave powers the creation and delivery of the intelligence that drives innovation. What You'll Do The Product Engineering organization is responsible for executing and delivering CoreWeave's products, platforms, processes, and tools. As a security technical program leader, you will work across cross-functional teams, including security, engineering, product, and operations, to ensure our cloud infrastructure is secure and private, while maintaining scalability and delivery of exceptional performance to meet the demands of our customers. If you are passionate about cloud technologies, thrive in complex technical environments, and excel at orchestrating large-scale programs, we want to hear from you! In this role, you will: • Lead end-to-end program management for critical security engineering and security compliance initiatives, including cross-functional planning, execution, delivery, and retrospectives, • Define program scope, milestones, and success metrics while managing security risks and dependencies, • Partner closely within the security team, and across engineering, product management and operations teams to ensure alignment on priorities and deliverables, • Act as the primary point of contact for security and cross-functional stakeholders, providing regular status updates, addressing risks, and ensuring accountability, • Facilitate and influence technical security, privacy and compliance discussions and decisions to align with long-term infrastructure goals and business objectives, • Develop and implement scalable processes to improve efficiency and predictability in program delivery, • Strategically automate and improve day-to-day operations,processes and reporting, • 8+ years of hands-on experience in Security Technical Program Management, Security Strategy, Security Risk Management and/or Security Compliance roles, ideally within the cloud services industry, • A Bachelor's degree in Information Security, Computer Science, or a related field or equivalent job experience, • Experience managing large-scale, complex security or compliance programs in a fast-paced, technology-driven environment, • Exceptional leadership, interpersonal, and influencing skills with a proven ability to build relationships across technical and non-technical teams, • Excellent written and verbal communication skills, with the ability to convey complex technical concepts to diverse audiences, • Proficiency in program management tools and methodologies (e.g., Jira, Google Sheet)., • Strong analytical and problem-solving skills with a focus on delivering results, • Proven track record in program management, process definition and improvements and influencing adoption of defined processes across multiple teams or organizations, • Ability to lead cross-functional teams to prioritize, manage tradeoffs, identify gaps and risks, drive accountability, and measure successes, • Comfortable handling conflicts and escalations, • Deep understanding of compliance frameworks and regulations, including SOC 2, ISO 27001:2022, ISO 27701, ISO 27017, ISO 22301, ISO 42001, HITRUST, NIST 800-53, NIST CSF, PCI DSS, FedRAMP, GDPR, UK Cyber Essentials, HIPAA, • Familiarity with networking, storage, containerization (Kubernetes), and CI/CD pipelines What We Offer The range we've posted represents the typical compensation range for this role. To determine actual compensation, we review the market rate for each candidate which can include a variety of factors. These include qualifications, experience, interview performance, and location. In addition to a competitive salary, we offer a variety of benefits to support your needs, including: • Medical, dental, and vision insurance - 100% paid for by CoreWeave, • Company-paid Life Insurance, • Voluntary supplemental life insurance, • Short and long-term disability insurance, • Flexible Spending Account, • Health Savings Account, • Tuition Reimbursement, • Ability to Participate in Employee Stock Purchase Program (ESPP), • Mental Wellness Benefits through Spring Health, • Family-Forming support provided by Carrot, • Paid Parental Leave, • Flexible, full-service childcare support with Kinside, • 401(k) with a generous employer match, • Flexible PTO, • Catered lunch each day in our office and data center locations, • A casual work environment While we prioritize a hybrid work environment, remote work may be considered for candidates located more than 30 miles from an office, based on role requirements for specialized skill sets. New hires will be invited to attend onboarding at one of our hubs within their first month. Teams also gather quarterly to support collaboration California Consumer Privacy Act - California applicants only CoreWeave is an equal opportunity employer, committed to fostering an inclusive and supportive workplace. All qualified applicants and candidates will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. As part of this commitment and consistent with the Americans with Disabilities Act (ADA), CoreWeave will ensure that qualified applicants and candidates with disabilities are provided reasonable accommodations for the hiring process, unless such accommodation would cause an undue hardship. If reasonable accommodation is needed, please contact: . Export Control Compliance This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information, applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful permanent resident (green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158, (B) eligible to access the export controlled information without a required export authorization, or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency. CoreWeave may, for legitimate business reasons, decline to pursue any export licensing process.

Job DescriptionDescription: Job Title: Assistant General Manager Location: Little Ruby’s Café – SoHo, NYC Department: Front of House Reports To: General Manager Salary: $80,000 – $85,000 + Bonus + Benefits Classification: Full-Time, Exempt About Little Ruby’s Café – SoHo Little Ruby’s Café brings a fresh, Australian approach to all-day dining with a focus on warm hospitality, thoughtfully sourced ingredients, and a laid-back yet refined guest experience. As a staple in New York’s café scene, our SoHo location is fast-paced, high-energy, and beloved by locals and visitors alike. We're currently seeking a motivated and experienced Assistant General Manager (AGM) to help lead our team and deliver outstanding service, day in and day out. Position Summary The Assistant General Manager supports the General Manager in leading all front-of-house operations. This role is responsible for team development, guest experience, financial controls, and service execution, ensuring every shift runs smoothly and up to brand standards. The ideal candidate is hands-on, detail-oriented, and thrives in a high-volume, hospitality-driven environment. Key ResponsibilitiesLeadership & Operations • Assist in daily management of all FOH operations to ensure service excellence, efficiency, and profitability, • Lead by example during service, setting the tone for professionalism and hospitality, • Maintain appearance, cleanliness, and functionality of all front-of-house areas, • Ensure all opening and closing procedures are executed properly, • Address and resolve guest concerns promptly and professionally, • Oversee the reconciliation of daily financials, ensuring accuracy and compliance, • Maintain a working knowledge of all mechanical systems; coordinate repairs as neededTeam Development & Scheduling, • Support the recruitment, hiring, and onboarding process for all FOH roles, • Supervise, train, and coach FOH staff with a focus on accountability and growth, • Assist with scheduling to align labor needs with business volume, • Participate in performance reviews and progressive discipline processes, • Lead daily pre-service meetings and support a collaborative team cultureCompliance & Financial Management, • Ensure all FOH operations comply with DOH standards and internal sanitation procedures, • Maintain knowledge of and adherence to all company policies and applicable federal, state, and local laws, • Assist in analyzing P&L statements, labor models, and daily sales reports, • Monitor inventory and product usage to support cost control goals, • Manage executive-level POS functions and reportingService & Product Knowledge, • Maintain deep knowledge of all food and beverage menus, • Ensure recipe and service consistency across all FOH interactions, • Collaborate with the kitchen team to ensure seamless communication and timing, • Provide coverage and support in various roles as needed during peak periodsQualifications, • Minimum 5 years of experience in restaurant leadership (AGM, Restaurant Manager, or senior FOH role) in a high-volume setting, • Completion of company AGM Training Program; valid certifications in Food Handling, Alcohol Awareness, and PCI/DSS (or ability to obtain), • Associate degree in Hospitality or Business preferred, or equivalent work experience, • Strong leadership, communication, and problem-solving skills, • Experience with P&L statements, labor tracking, and operational reporting preferred, • Proficiency in Microsoft Office, POS systems, and scheduling platforms, • Self-motivated, organized, and detail-oriented with a team-first mentalityWork Environment & Physical Requirements, • Fast-paced restaurant environment with consistent high guest volume, • Ability to stand, walk, bend, and lift up to 50 lbs for extended periods, • Exposure to hot surfaces, cleaning chemicals, and kitchen elements, • Availability to work flexible hours, including days, evenings, weekends, and holidays