{"@context":"https://schema.org","@type":"ItemList","name":"Program Manager Job Description and Opportunities","description":"Discover the responsibilities, skills, and salary range of a Program Manager. Find potential job opportunities and career growth paths for aspiring Program Managers.","itemListElement":[{"@type":"ListItem","position":1,"item":{"@type":"JobPosting","title":"Program Manager, Governance, Risk and Compliance","datePosted":"2025-09-08","description":"

MongoDB’s mission is to empower innovators to create, transform, and disrupt industries by unleashing the power of software and data. We enable organizations of all sizes to easily build, scale, and run modern applications by helping them modernize legacy workloads, embrace innovation, and unleash AI. Our industry-leading developer data platform, MongoDB Atlas, is the only globally distributed, multi-cloud database and is available in more than 115 regions across AWS, Google Cloud, and Microsoft Azure. Atlas allows customers to build and run applications anywhere—on premises, or across cloud providers. With offices worldwide and over 175,000 new developers signing up to use MongoDB every month, it’s no wonder that leading organizations, like Samsung and Toyota, trust MongoDB to build next-generation, AI-powered applications.

MongoDB aligns its practices to multiple compliance frameworks in order to support our customer’s needs and help them to meet their regulatory and policy objectives. As we continue to grow and expand our compliance frameworks scope, the GRC team is building a resilient and scalable Program to help MongoDB navigate through the complexity and ambiguity of the compliance, regulatory, financial and technology risk landscape.

Working closely with Commercial and Public Compliance sector teams, the GRC Program Manager role will lead the maintenance effort of the Common Controls Framework, focus on optimizing and scaling of our GRC compliance processes and help to define roadmaps and necessary capabilities for future GRC programs.

The GRC Program Manager should be experienced in information security and compliance research, planning and delivering projects and programs, including ‘hands-on’ delivery and transition to Business as Usual and driving process modeling and improvements. The successful candidate should have demonstrated an experience with compliance control mapping, performing gap analysis and capturing, defining and communicating requirements. In addition, experience in process and product development in a Cloud environment would be most beneficial.

This position is a unique opportunity to explore a robust scope of information security frameworks and be innovative in designing our scaling strategy. We’re looking for someone who is excited to take initiative and willing to learn.

We are looking to speak to candidates who are based in Princeton, NJ for our hybrid working model.

Position Expectations

Manage the Common Controls Framework (CCF) lifecycle, including design, implementation, maintenance, and continuous improvement
Lead the quarterly and annual CCF control review processes, coordinating cross-functional input to assess control effectiveness, validate ownership, and capture updates across all applicable frameworks. Use findings to drive remediation, improve control maturity, and inform audit readiness and program reporting
Lead cross-functional coordination with engineering, security, product, legal, privacy, and operations teams to align control implementation and monitoring
Serve as the connective tissue across multiple compliance frameworks (e.g., FedRAMP, NIST 800-53, ISO 27001, SOC 2, HIPAA, PCI, GDPR)
Drive control harmonization, ensuring all relevant frameworks are mapped and aligned to minimize duplication of effort and audit fatigue
Build and maintain a centralized controls library, including ownership assignment, testing cadence, and evidence automation
Partner with security and GRC teams to establish and track key performance indicators (e.g., control maturity, testing success rate, audit readiness)
Act as the liaison to external auditors and assessors during evidence collection, walkthroughs, and remediation tracking
Lead program reviews, reporting status to executive leadership and identifying areas for program enhancement
Evangelize a compliance-as-a-service model, helping teams integrate security and compliance into development workflows
Feed relevant data points into the information risk assessment process (ex: identifying gaps that may translate to risks; identifying low maturity assessment scores that may translate to risk)
Collaborate with compliance team leads on defining roadmaps and necessary capabilities for future GRC programs
Support operational activities such as control performance assessment via NIST CSF Maturity assessment and monitoring of effectiveness of the GRC Programs
Support the GRC functions to help drive through ad-hoc deliverables as required
Lead efforts to ensure GRC tooling is updated with pertinent information and configured appropriately to allow for scalable growth
Perform cross functional supportive activities related to maintaining standard compliance operations

The right candidate for this role will have:

7+ years of experience in program or project management, ideally in security, compliance, or risk-heavy domains
Create and maintain procedures and documentation for CCF management, including updates, quarterly control reviews, evidence handling, and stakeholder coordination
Strong working knowledge of security frameworks (FedRAMP, NIST 800-53, SOC 2, ISO 27001, etc.)
Own and optimize our GRC / audit tool, ensuring effective control mapping, evidence management, and automation to support scalable, audit-ready compliance operations
Experience designing or operationalizing a centralized/common control framework across multiple compliance obligations
Proven ability to run cross-functional programs in a matrixed organization
Familiarity with technical control domains: access management, change management, monitoring/logging, vulnerability management, configuration baselines
Strong written and verbal communication skills; comfortable presenting to technical and executive stakeholders
Experience supporting or managing internal or external audits

Success Measures

The GRC Program Manager will be successful in this role when they can execute the following strategic tasks:

People: Collaborate with leads to understand our customer's compliance requests and necessary gaps to address
Organization: Ability to manage multiple parallel efforts and prioritize resources based upon understanding and interpreting business need
Communication: Successfully communicate your recommendations and rationale to both technical and non-technical management
Research: Gather and analyze feedback from internal stakeholders and develop pragmatic recommendations with respect to compliance initiatives
Customer Service: Ensure MongoDB’s GRC Program operates efficiently with minimal interruption to MongoDB teams. Provide great customer service when interfacing with other MongoDB Teams

To drive the personal growth and business impact of our employees, we’re committed to developing a supportive and enriching culture for everyone. From employee affinity groups, to fertility assistance and a generous parental leave policy, we value our employees’ wellbeing and want to support them along every step of their professional and personal journeys. Learn more about what it’s like to work at MongoDB, and help us make an impact on the world!

MongoDB is committed to providing any necessary accommodations for individuals with disabilities within our application and interview process. To request an accommodation due to a disability, please inform your recruiter.

MongoDB, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type and makes all hiring decisions without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

Req ID: 3263225793

MongoDB’s base salary range for this role is posted below. Compensation at the time of offer is unique to each candidate and based on a variety of factors such as skill set, experience, qualifications, and work location. Salary is one part of MongoDB’s total compensation and benefits package. Other benefits for eligible employees may include: equity, participation in the employee stock purchase program, flexible paid time off, 20 weeks fully-paid gender-neutral parental leave, fertility and adoption assistance, 401(k) plan, mental health counseling, access to transgender-inclusive health insurance coverage, and health benefits offerings. Please note, the base salary range listed below and the benefits in this paragraph are only applicable to U.S.-based candidates.

MongoDB’s base salary range for this role in the U.S. is:$85,000—$167,000 USD","hiringOrganization":{"@type":"Organization","name":"MongoDB","sameAs":"https://www.mongodb.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Princeton","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":2,"item":{"@type":"JobPosting","title":"Program Manager, Integrity Governance Risk and Compliance","datePosted":"2025-08-23","description":"We are building a governance, risk, and compliance (GRC) function to enable our company to build products that can withstand regulatory scrutiny, and ensure Integrity continues to meet global regulatory requirements and manage risk.

Meta's Integrity GRC is the central engine driving risk management and compliance at the company, supporting Meta and the family of apps. We’re seeking experienced GRC and Integrity talent to help enable and safeguard Meta’s products and services, which have a truly global scale, by upholding existing Content Regulation requirements and meeting emergent compliance obligations. I-GRC is responsible for, (a) enabling the business to achieve its goals at scale and pace; (b) safeguarding the business against real world security risks; and (c) addressing the regulatory scrutiny the business faces. Our goal is to make Meta the premier place to work for governance, risk, compliance, and Integrity professionals.

We are seeking an individual with expertise in audit, risk management, compliance, and/or integrity functions. You will demonstrate effective communication skills and a proven track record of building and maintaining relationships with varied global stakeholders. You are expected to perform well in demanding situations, adapt quickly to changing circumstances, and demonstrate an understanding of integrity subject matter expertise. We encourage applications from individuals with varied backgrounds and experiences who can seamlessly translate work across compliance and integrity teams, serving as a vital connection point between Governance, Risk, and Compliance (GRC), Legal, Regulatory Offices, and the business. If you are a dedicated and organized individual with a commitment to trust and safety, we welcome your application.Program Manager, Integrity Governance Risk and Compliance Responsibilities

Manage audit readiness activities for regulatory audits
Define the scope of projects and develop, execute, and/or manage project plans for supported program(s)
Prioritize program goals, understand and translate stakeholders’ needs into goals and deliverables with minimal assistance, and contribute to decisions on prioritizing joint goals and deliverables across one or more cross functional teams
Support execution of risk and compliance related activities including statutory risk assessments, regulatory requests for information, designing and testing controls and safeguards, issue management, exams/audits, governance, data & tooling systems, and/or regulatory & compliance transparency reporting
Serve as an Integrity subject matter expert for Governance, Risk, and Compliance and act as the connection point between GRC, Legal, Regulatory Offices, and first line business teams
Develop and monitor risk and compliance related infrastructure and artifacts including an cross functional operating model, risk register, transparency report guidelines, and/or control frameworks
Maintain an in-depth understanding of the broad regulatory landscape impacting Meta across Integrity teams and focus areas, with the skills to translate changes into actionable project work
Review key metrics pertaining to a program, monitor potential metric deviations, and define corrective actions for critical deviation
informing/collaborating with stakeholders as necessary
Maintain knowledge of Meta’s products, policies, and Integrity functions to identify stakeholders and build and maintain relationships across a wide array of global cross functional partners
Establish streamlined communication & engagement models with various Integrity stakeholders to communicate project statuses, updates, and asks for input and feedback to ensure cross-functional alignment and on-time completion of deliverables
Identification of risks and detailing of mitigation plans to ensure that projects stay on track, or are brought back on track in the event of delays or blockers
Ensure documents are generated in accordance with agreed internal processes and standards, are submission ready, and are appropriately archived in the agreed document management system
Identify gaps in strategy, systems, and processes to support growth at scale
Identify, communicate, and collaborate with relevant stakeholders within GRC and across Integrity teams to drive impact and work toward mutual goals
Ensure adherence to defined standards in order for Meta to maintain legal and regulatory compliance
Create & facilitate presentations to support management understanding and influence decision-making
Provide mentorship and guidance to team members, helping them develop their skills and expertise
Develop and implement strategic plans to drive growth and improvement in the integrity risk management function
Build and maintain relationships with leaders and stakeholders across the organization, influencing their decisions and driving alignment around integrity risk management priorities
Support business travel on an as needed basis (up to 10%)

Minimum Qualifications

7+ years of experience in trust and safety, Integrity, content policy, transparency reporting, or governance, compliance, and risk management
3+ years program management experience in a corporate environment
Robust communication skills, with proven success influencing a variety of audiences including leadership across both technical and non-technical teams
Experience with Integrity or Trust and Safety, or Risk and Compliance principles, practices, and solutions

Preferred Qualifications

Advanced degree and/or certification
Big 4 Audit or Consulting Experience
Knowledge of global content regulations, content moderation practices, and internet trust and safety best practices
3+ years working in a corporate environment subject to audit against federal or industry-wide regulations
Experience working on risk assessments, transparency reports, responses to regulators or other external parties, audits, and/or designing controls specific to meet regulatory expectations
Program management skills including planning, organizing, pre-empting risks/blockers, and communicating with stakeholders to deliver successful programs or projects, while operating with minimal guidance
Experience authoring regulatory reports

For those who live in or expect to work from California if hired for this position, please click here for additional information. About Meta Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology. People who choose to build their careers by building with us at Meta help shape a future that will take us beyond what digital connection makes possible today—beyond the constraints of screens, the limits of distance, and even the rules of physics.
$146,000/year to $203,000/year + bonus + equity + benefits

Individual compensation is determined by skills, qualifications, experience, and location. Compensation details listed in this posting reflect the base hourly rate, monthly rate, or annual salary only, and do not include bonus, equity or sales incentives, if applicable. In addition to base compensation, Meta offers benefits. Learn more about benefits at Meta.

Equal Employment Opportunity Meta is proud to be an Equal Employment Opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. You may view our Equal Employment Opportunity notice here. Meta is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, fill out the Accommodations request form.

","hiringOrganization":{"@type":"Organization","name":"Meta","sameAs":"https://www.meta.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Menlo Park, CA | Washington, DC | New York, NY","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":3,"item":{"@type":"JobPosting","title":"Head: Governance, Risk and Compliance","datePosted":"2025-07-21","description":"

Empowering Africa’s tomorrow, together…one story at a time.

With over 100 years of rich history and strongly positioned as a local bank with regional and international expertise, a career with our family offers the opportunity to be part of this exciting growth journey, to reset our future and shape our destiny as a proudly African group.

Job Summary

10 years’ experience in an operations or process type role, with a risk approach.\tPractical application and interpretation of risk and compliance methods. Strong working experience of financial services products and processes.Experience in dealing with financial services’ regulators Technical knowledge of all regulatory requirements in an Operational Risk environment To develop risk and compliance tactical strategy plans, integrate practice formulation and to ensure operational implementation and adoption across multiple practices for methodology, governance and delivery objectives. Minimum B-degree (NQF level no.6) in Commerce .Desired Post Graduate Degree (NQF level no.7)

Accountable for the implementation of the Risk and Compliance Framework, thus overseeing the maintenance of risk and control practices across Absa Insurance Company (AIC). In addition, review the risk profile of the businesses against risk appetite and performance measures, and agree actions to change the shape of the profile where appropriate. Provide leadership, improve, implement, develop and monitor robust processes and controls and ensure alignment with regulators and Bank Policies. Drive the execution of operational risk and governance in AIC so that offerings are innovative and competitive; whilst maintaining and protecting the quality of the Bank’s asset book.

Job Description

Accountability: Risk Management and Compliance

Ensure a fit for purpose operational risk management strategy and compliance framework is in place for AIC that is relevant to the needs of customers and revenue generation requirements and target cost to serve
Centralize the accountability and oversight of multiple functional areas that include Governance and Control, Conformance, Business Continuity, Audit, Compliance and Occupational Health and Safety with a view on current trends and future projections.
Set and manage operational risk management and governance standards, procedures, controls and limits to be applied in the operational risk and compliance process
Agree targets and take accountability for the overall achievement of Operational Risk, Governance & Review and Review & Challenge performance objectives in terms of cost management, risk & control management and employee management (employee satisfaction, performance, issues, staffing, return on investments, risk, compliance and governance requirements).
Ensure that processes, control requirements and risk management frameworks that impact the area are documented and understood by all members of the team
Interlock with AIC Internal Audit and BU management during the scoping of audits to ensure fair coverage. Own and agree corrective action items with Internal Audit and BU management for findings related to the functional area under management.
Arrange issue assurance for closed audit findings.
Provide check and challenge during the Product development process to ensure that all risks have been considered and sufficiently addressed
Ensure that the team understands all compliance requirements and call for the area's Compliance Officer to conduct briefing sessions if gaps are identified.
Ensure that the Business Continuity Tool is updated regularly and signed off annually in consultation with the BCM Coordinator.
Ensure that the BCM Plan for the area is tested as required and corrective actions executed.
Interlock with managers/professionals in the team, develop Risk and Control Self Assessments (RCSA’s) and Critical Process Assessments (CPA’s) for the function and update at the required intervals (normally quarterly). Complete attestations to testify to the adequacy of controls on request.
Participate in the development of Key Risk Scenarios including the determination of likelihood of occurrence and potential impact. Actively work to minimise the amount of economic capital that has to be set aside for operational risk.
Ensure that managers in the team understand their responsibilities for physical and systems access control and information security requirements.
Ensure that AIC has a Health and Safety Representative, Fire Warden and Evacuation representative.
Accountability: Business Performance Drive
To lead the implementation and embedment of operational risk framework and manage risk and compliance related governance reporting activities
Ensure that AIC has the measures in place to monitor and manage their own operational risk profile.
Establish risk appetite in conjunction with the business, to ensure that business maintains exposure in line with this appetite based on a balanced risk/reward decision.
Drive the embedment of the Group Operational Risk Framework, promoting the integration of operational risk consideration into all risk reward decisions and general business management
Drive a culture of proactive operational risk management, governance and compliance within AIC
Interlock with key stakeholders in AIC to obtain commercial awareness of the local market and industry specifics leading to improved customer solutions; and ensure the appropriate operational risk management and governance is in place
Interlock with the AIC management teams to sustain best practice processes and tactics in managing its financial crime responsibilities, and proactive identification of risk and early warning signs of emerging risks
Aggregate all types of risks (inclusive of risks that are outside area of management control) across the business and make recommendations in terms of a holistic end to end view.
Development and monitoring of governance for the AIC risk related committees Lead deep dive and lessons learnt exercises for material risks, including escalation of findings
Drive the development of standards to enable compliance to Group wide policies, including the development and presentation of training of standards
Accountability: Customer
Accountable for transforming and delivering the target customer experience in support of AIC’s strategic aspirations through the appropriate credit frameworks, policy and processes
In partnership with key stakeholders in AIC, develop deep insights into customer needs, expectations and behaviours pertaining to the use of risk measurement frameworks, policies and processes and align offerings that are innovative and competitive
Ensure that the operational risk function in AIC possess the required capabilities (infrastructure, people, process and culture) to comply with relevant regulations governing selling and to enable the delivery of AIC’s aspirational customer experience.
Accountability: People Management
Partner with the Human Capital team to ensure the practical and effective implementation of group standards for formal Performance Development.
Together with line leaders, develop a learning and development strategy that will address the current and future business needs. Ensure that adequate resources are set aside to execute the identified interventions.
Ensure the establishment and regular update of succession plans for key and high-risk roles.
Ensure that divisional transformation objectives are incorporated and met.
With the support from the Human Capital Partner, identify, interview and recruit direct reports.
Review capacity models, workforce plans and reallocate resources as required.
Approve outcomes of consistency check meetings for performance rating allocations, annual salary increases and any discretionary short-term incentives.
Review the themes captured by any employee opinion surveys and improve the employee value proposition where possible.

Education

Bachelor`s Degrees and Advanced Diplomas: Business, Commerce and Management Studies (Required)

Absa Bank Limited is an equal opportunity, affirmative action employer. In compliance with the Employment Equity Act 55 of 1998, preference will be given to suitable candidates from designated groups whose appointments will contribute towards achievement of equitable demographic representation of our workforce profile and add to the diversity of the Bank.

Absa Bank Limited reserves the right not to make an appointment to the post as advertised

","hiringOrganization":{"@type":"Organization","name":"Absa Group","sameAs":"https://www.absa.africa/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Absa Call Centre Auckland Park, South Africa","addressCountry":"New Zealand","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":4,"item":{"@type":"JobPosting","title":"Governance, Risk and Compliance Analyst","datePosted":"2025-08-04","description":"

Flexera saves customers billions of dollars in wasted technology spend. A pioneer in Hybrid ITAM and FinOps, Flexera provides award-winning, data-oriented SaaS solutions for technology value optimization (TVO), enabling IT, finance, procurement and cloud teams to gain deep insights into cost optimization, compliance and risks for each business service. Flexera One solutions are built on a set of definitive customer, supplier and industry data, powered by our Technology Intelligence Platform, that enables organizations to visualize their Enterprise Technology Blueprint™ in hybrid environments—from on-premises to SaaS to containers to cloud.

We’re transforming the software industry.  We’re Flexera.  With more than 50,000 customers across the world, we’re achieving that goal. But we know we can’t do any of that without our team. Ready to help us re-imagine the industry during a time of substantial growth and ambitious plans?  Come and see why we’re consistently recognized by Gartner, Forrester and IDC as a category leader in the marketplace. Learn more at flexera.com

About Flexera

Flexera delivers industry-leading technology value optimization solutions that enable you to inform your IT so you can transform your IT. From on-premises to the cloud, you get the IT asset data you need to right size, reallocate spend, reduce risk and maximize ROI. Our innovative technology has consistently positioned us as a Leader in the marketplace - recognized by Forrester, Gartner and IDC for the breadth and depth of our solutions.

Job Description
The Cybersecurity-Governance, Risk and Compliance Analyst will work very closely with the GRC Manager to oversee our ISO 27001 and SOC 2 Type II certifications and evaluate additional security frameworks. This role will also take part in addressing customer assessment questionnaires and audits, both pre/post-sales.

Mandatory Skills:

Work together with GRC Manager to Manage and sustain the company's multiple security certifications.
Continuously review the ISO 27001 Information Security Management System to ensure compliance and annual recertification eligibility.
Conduct risk assessments, maintain the risk register, report on risk, and work with various internal teams to mitigate risks across the organization.
Proactively identify areas for improvement within the security program and lead efforts to address and remediate these areas.
Manage the company’s vendor risk management program.
Ensure organizational readiness for external audits.
Manage pre- and post-sales customer assessment questionnaires and customer audits.
Maintain comprehensive information security documentation, including policies, procedures, standards, guidelines, and diagrams.
Recommend and implement policy and procedure changes in response to evolving security landscapes.
Collaborate with various teams to integrate compliance and risk management processes into daily operations.
Understand the role of systems and technology within the firm and their value to the business.
Work with IT and business units to implement effective cybersecurity measures and integrate security practices into business processes.
Assisting with data governance activities, producing data flow diagrams, and guiding information rights management/protection.
Market the security program externally putting together collateral to speak to the robustness of the program.

Experience & Qualifications

Computer Science Degree or substantial equivalent experience
Experience with implementing and maintaining ISO 27001 program
Experience with Third Party Security Assessment
Experience with Customer Questionnaire and assessments
Relevant industry certifications
Experience working with IT and Security leadership to define & articulate security strategies and program plans.

Overall IT/Security Experience: 4 years

Role Specific Experience: 2 years

Who You Are…

Only those that possess the below qualities should apply, maintaining the status quo is not good enough, we are a team of people who are never done, we always strive to improve.

Team Collaborator: Work across internal and external teams of all levels to proactively support the business

Outcome driven: Pursue impactful initiatives that move the needle on SOC operational effectiveness

Effective Communicator: Delivers complex information in a confident and convincing manner, appropriate to a diverse audience.

Inquisitive: A propensity to find out why something is the way it is, look under the covers, see if it can be improved.

Analytical: Gather data from multiple sources, find areas of weakness or risk and come up with solutions

Flexera is proud to be an equal opportunity employer.  Qualified applicants will be considered for open roles regardless of age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by local/national laws, policies and/or regulations. 

Flexera understands the value that results from employing a diverse, equitable, and inclusive workforce. We recognize that equity necessitates acknowledging past exclusion and that inclusion requires intentional effort. Our DEI (Diversity, Equity, and Inclusion) council is the driving force behind our commitment to championing policies and practices that foster a welcoming environment for all.

We encourage candidates requiring accommodations to please let us know by emailing careers@flexera.com.

","hiringOrganization":{"@type":"Organization","name":"Flexera","sameAs":"https://www.flexera.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Bangalore, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":5,"item":{"@type":"JobPosting","title":"Director, Governance, Risk and Compliance","datePosted":"2025-08-05","description":"

Who we are

We’re a global, midsize CRO that pushes boundaries, innovates and invents because the path to a cure for the world’s most persistent diseases is not paved by those who play it safe. It is built by those who take pioneering, creative approaches and implement them with quality and excellence.

We are Worldwide Clinical Trials, and we are a global team of over 3,500+ experts, bright thinkers, dreamers and doers and, together, we are changing the way the world experiences CROs – in the best possible way.

Our mission is to work with passion and purpose every day to improve lives and we are looking for others who value this same pursuit.

Why Worldwide

We believe everyone plays an important role in making a world of difference for patients and their caregivers. From our hands-on, accessible leaders, to our cohesive and supportive teams, we are committed to enabling professionals from all backgrounds and experiences to succeed. We prioritize cultivating a diverse and inclusive environment that continues to promote collaboration and creativity. We are proud to be a workplace where people thrive by being themselves and are inspired to do their best work every day. Join us!

What the Information Technology Department does at Worldwide

The IT department is made up of seasoned professionals united in one common goal: to keep Worldwide’s technical infrastructure operating at the highest levels for our employees and our customers. We are a global team comprised of numerous professionals including cyber security, artificial intelligence, IT helpdesk, application support, and more.

What you will do

Build and manage a cross-functional GRC team.
Develop and maintain security policies aligned with ISO 27002, HIPAA, GxP, and GDPR.
Manage IT risk register and coordinate mitigation planning with stakeholders.
Support internal and external audits including SOC2 and client assessments.
Lead RFP/RFI response process and collaborate with legal, sales, and marketing teams.
Oversee third-party risk reviews and vendor security assessments.
Operate and scale a control testing and attestation program.
Coordinate risk boards and governance forums with business leadership.
Develop GRC metrics and reporting dashboards for leadership and audit readiness.

What you will bring to the role

Strong knowledge of security and compliance frameworks (ISO 27002, HIPAA, GxP, SOC2).
Experience managing audits, control testing, and risk registers.
Familiarity with third-party risk platforms and compliance automation tools.
Excellent communication and coordination skills across legal, IT, and business units.
Experience working in clinical, corporate, or regulated commercial environments.

Your Experience

Bachelor’s degree in Information Security, Business, or related field (Master’s preferred).
Minimum of 12 years of experience in information security governance, risk, or compliance.
Experience leading enterprise audit or compliance functions.
Certifications such as CISA, CRISC, or CISSP are highly desirable.

We love knowing that someone is going to have a better life because of the work we do.

To view our other roles, check out our careers page at Discover a world of difference at Worldwide! For more information on Worldwide, visit www.Worldwide.com or connect with us on LinkedIn.

Worldwide is an equal opportunity employer that is committed to enabling professionals from all backgrounds and experiences to succeed and, to that end, we prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and creativity. We know that when our employees feel appreciated and included, they can be more creative, innovative, and successful. We’re on a mission to hire the very best and are committed to creating exceptional employee experiences where everyone is respected and has access to equal opportunity. We provide equal employment opportunities to all employees and applicants regardless of race, color, ethnicity, ancestry, religion, national origin, gender, sex, gender identity or expression, sexual orientation, age, citizenship, marital or parental status, disability, military status, or other class protected by applicable law.

","hiringOrganization":{"@type":"Organization","name":"Worldwide Clinical Trials","sameAs":"https://www.worldwide.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Virtual United States North Carolina, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":6,"item":{"@type":"JobPosting","title":"Governance, Risk, and Compliance Specialist","datePosted":"2025-08-07","description":"Who we are: Want to make an impact? Join our pack and come work (and play!) with us.
We believe everyone deserves the unconditional love of a pet—and at Rover, our mission is to make it easier to experience that love. Founded in 2011, the Rover app and website connect dog and cat parents with loving pet sitters and dog walkers in neighborhoods across the US, Canada, and Europe. We empower our community of trusted pet sitters and dog walkers to run their own pet care businesses on Rover with the tools and security of a global company to back them.
Headquartered in Seattle, Washington, we work closely with our teams in Barcelona, San Antonio, Spokane, and remote locations. We’ve got a reputation for being a great place to work, having been named among the 100 Best Companies to Work For in Seattle Business Magazine and Washington’s Best Workplaces in the Puget Sound Business Journal. We're an agile, fast-growing company, and our leadership comes from some of the world's most respected tech companies.
At Rover, our furry coworkers are just as important as our human ones—and we wouldn’t have it any other way. Along with making the joys of pet parenthood more accessible, we’re committed to fostering a diverse, inclusive, and welcoming community of pet people—and that starts with our employees.
Who We're Looking For:
We are seeking a detail-oriented and proactive GRC Specialist to join our team at Rover. This role will support our efforts to ensure proper data governance, policy development, and regulatory adherence with a specific focus on global privacy regulations, including CCPA, GDPR, and other privacy laws. The ideal candidate will work closely with our legal and cybersecurity to ensure that our GRC practices are robust, effective, and compliant.\n

Your Responsibilities:

Manage and Respond to Data Subject Requests Escalations (DSRs): Handle customer escalations from CX around requests for data access, rectification, erasure, restriction, portability, and objections to processing, ensuring timely and compliant responses under CCPA, GDPR, and other regulations.
Assist in Privacy Expertise and Guidance: Offer insights and best practices to internal stakeholders on privacy compliance, supporting a culture of privacy and data protection within the organization and new Rover companies.
Policy and Procedure Development: Contribute to the development and maintenance of privacy and data governance policies, ensuring they are up-to-date with evolving regulatory requirements.
Maintain Training Records and Key Learning Indicators: Track key learning indicator measures related to privacy compliance and maintain training records to ensure continuous improvement and awareness among staff.
Assist in Developing Metrics to Track Success of Program: Specifically, we need someone who can help to develop strong metrics to track and report on the health/success of our privacy programs. This will be done in conjunction with our Privacy Program Manager to be reported out to our executives on the success or failure of the programs we develop.
Apply project management skills to: plan, coordinate, and execute privacy compliance initiatives, ensuring tasks are delivered on time and stakeholders remain aligned to achieve results.
Assist with Record of Data Processing Activities (ROPA): Work with Legal counterparts to develop and maintain the ROPA, ensuring accurate documentation of data processing activities.
Assist in Configuration and Customize Ketch Platform: Assist in configuration and customization to the Ketch privacy management platform, with Data Security Engineer, to meet the needs of the privacy program, including creating and refining workflows, assessments, and reports.
Assist in Compliance Monitoring: Monitor and track compliance activities, including the effectiveness of privacy and data security controls, and provide regular reports to management.
Support Data Privacy Audits: Assist in or conduct data privacy audits to identify and address vulnerabilities in data privacy processes, ensuring alignment with regulatory requirements.
Governance Activities: Support the GRC team in maintaining records of data processing activities, conducting privacy impact assessments, and ensuring documentation is compliant with CCPA, GDPR, and other relevant regulations.
Assist in Conducting Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs): Collaborate with Legal and Privacy Program Manager to evaluate and mitigate privacy risks through PIAs and DPIAs, supporting the privacy program’s risk management efforts.
Collaborate on Privacy Law Compliance: Partner with Legal and Privacy Program Manager counterparts and to ensure compliance with existing and emerging privacy regulations, providing insights on changes that impact the organization.
Training and Awareness: Assist in developing training materials and programs to enhance employee awareness regarding privacy practices, data protection requirements, and internal policies.
Incident Response Support: As necessary, aid in the documentation and investigation of data breaches or other security incidents, ensuring a swift and compliant response in collaboration with the Data Security Engineer and other stakeholders.

Your Qualifications:

Education: Bachelor’s degree in Information Security, Risk Management, Compliance, Business Administration, or a related field.
Experience: 0-2 years of experience in governance, risk management, compliance, or a related field, with a focus on privacy regulations (e.g., GDPR, CCPA).
Knowledge of Privacy Management Platforms: Familiarity with platforms like Ketch or similar tools for managing data subject rights and automating privacy workflows.
Regulatory Understanding: Strong understanding of global privacy laws and regulations, including GDPR, CCPA, and industry standards for data protection.
Communication Skills: Excellent written and verbal communication skills, with the ability to clearly present complex privacy concepts to stakeholders at all levels.
Attention to Detail: Meticulous attention to detail, particularly in documentation, policy development, and audit processes.
Collaborative Mindset: Ability to work effectively in cross-functional teams, collaborating with legal, cybersecurity, and business units.

Preferred Qualifications:

Certifications: Privacy certifications such as CIPP/US, CIPP/E, or CIPM are highly desirable.
Experience with GRC Tools: Experience with GRC software or platforms for tracking compliance and developing metrics.
Knowledge of Data Security Practices: Understanding of encryption, data anonymization, and data protection practices to support data privacy initiatives.

Benefits of Working at Rover.com:

Competitive compensation
Long-term incentive plan with a company performance-based cash payout
Permanent contract
Pension plan
Meal tickets through Cobee
Generous PTO allowance
Private health insurance
Discounted gym membership
Bring your dog to work (and unlimited puppy time)
Monetary help for adopting a dog or cat plus yearly credit to use on our platform
A wide variety of snacks, fresh fruit, and beverages in our kitchen to keep yourself going
Regular team activities, including happy hours, game nights, and more

Rover is an equal-opportunity employer committed to promoting a diverse, inclusive, and inventive environment with the best employees. We’re driven by seeing our people succeed and grow, and we work to ensure everyone contributes to their fullest potential. We consider all qualified applicants without regard to age, race, color, ancestry, national origin, religion, disability, protected veteran status, sex, gender identity or expression, sexual orientation, or any other protected status in accordance with applicable laws, regulations, and ordinances.","hiringOrganization":{"@type":"Organization","name":"Rover.com","sameAs":"https://www.rover.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Barcelona","addressCountry":"Spain","addressRegion":"Europe"}}}},{"@type":"ListItem","position":7,"item":{"@type":"JobPosting","title":"Governance, Risk and Compliance Specialist","datePosted":"2025-08-13","description":"At Deliverect, our API-first platform is revolutionizing commerce by providing a connected suite of on and off-premise solutions. We empower both the food and retail industries to expand their revenue and simplify their operations, creating seamless experiences for businesses to sell anywhere and deliver everywhere. Join us in this exciting journey, where your contributions will directly impact how businesses connect with their customers in a rapidly evolving global market.
Department Focus: Based on the role's responsibilities, this position appears to be a key part of our Information Security or IT department, which is a new function within the company. This department would be dedicated to ensuring the security, reliability, and integrity of our systems and data. As a new department, it provides a unique opportunity to build and shape the foundational security practices that will support Deliverect's aggressive growth plans. This team plays a critical role in providing our people and customers with peace of mind that their data and our platform are secure.
Your Impact: Given our ambitious and aggressive growth plans, you will be the foundation of information security initiatives that aim to further secure our infrastructure, data, and applications. As a new position, this presents the perfect opportunity for a driven individual to fast-track their career. You will demonstrate a passion for data privacy and information security challenges in information technology and will act as a subject matter expert looking for an enriching experience to build your career and our brand. The Governance, Risk and Compliance Specialist will be relied upon to provide Deliverect teams with the information security expertise necessary to make confident decisions.
This is a full-time, hybrid role with a flexible work schedule, offering 3 days in our Madrid office and 2 days from the comfort of your home.\n

What you will do:

Coordinate security and information governance compliance efforts.
Perform internal compliance assessments based on identified controls and assist with remediation and improvement efforts.
Lead privacy compliance and vendor management efforts.
Conduct risk assessment and reporting, as well as risk tracking.
Maintain company information security and privacy policies.
Assess compliance and advise parts of the organization on policy implementation.
Manage the third-party risk program, assessing risks and security posture of the organization's suppliers.
Advise on security best practices and applicable controls frameworks.
Support security incident reporting and management.
Own the Security Awareness platform and educate key stakeholders.
Fine-tune the Data governance strategy.

What you will bring:

A Bachelor’s Degree in Information Technology, Information Systems Security, Cybersecurity, or a related field, or equivalent work experience.
1-5 years of experience in an information security role.
Experience working with information security governance, control frameworks, and risk/compliance methodologies.
A passion for what you do and a desire to do it well.
Experience in Cloud environments and SaaS tools.
The ability to work closely and communicate effectively with stakeholders to ensure project outcomes adhere to agreed security standards.
Knowledge of the IT Domain (Infrastructure, software development, and Data protection).
Experience in the identification, evaluation, and documentation of policies, processes, and controls.
Fluency in English is required.

Join Our Innovative Journey:
At Deliverect, we're not just building a platform; we're redefining how restaurants and retailers connect with their customers globally. We're looking for agile, ambitious, and resourceful team members who are excited to tackle complex challenges, take calculated risks and contribute to innovative solutions that shape the future of commerce.
What You'll Gain by Joining Us:
Invest in Your Growth- We provide a dedicated learning budget to help you expand your skills and knowledge in this dynamic environment.Solve Meaningful Challenges- Contribute to tackling some of the most significant challenges in the global tech industry, directly impacting the way businesses operate worldwide.Drive Innovation- Immerse yourself in a culture where innovation isn't just a buzzword – our weekly releases and new features ensure you're always working on cutting-edge solutions.Collaborate with a Global Team- Be part of a diverse, international team that values transparency, visibility, and a multitude of perspectives.Be Part of a Unicorn- Join a rapidly scaling SaaS unicorn at the forefront of the order management industry, where your contributions have significant impact.Enjoy Regionally Tailored Rewards- Our compensation and benefits packages are thoughtfully designed to reflect the unique needs of each market, ensuring you’re supported with what matters most—right where you are.
Our Commitment to Inclusion:
We are dedicated to building a diverse and inclusive workplace where everyone feels valued and has equal opportunities to succeed. We strongly encourage applications from underrepresented groups.
Important Information:
1. Fluency in English is required, with strong written and verbal communication skills being essential. 2. Applicants must possess the legal right to work in the country where the role is based, as we are currently unable to provide financial assistance for relocation or travel.3. Please note that certain roles may require a background check as a condition of employment, and you will be informed of this during the initial screening process.
If you require any accommodations or support during the recruitment process due to a disability, please do not hesitate to contact us at talent@deliverect.com.
Ready to shape the future of commerce with us? Explore our opportunities and apply today!","hiringOrganization":{"@type":"Organization","name":"Deliverect","sameAs":"https://www.deliverect.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Madrid","addressCountry":"Spain","addressRegion":"Europe"}}}},{"@type":"ListItem","position":8,"item":{"@type":"JobPosting","title":"Governance Risk and Compliance Consultant","datePosted":"2025-08-18","description":"

Job Family:

Management Consulting

Travel Required:

None

Clearance Required:

Active Top Secret (TS)

What You Will Do:
Guidehouse is seeking a Governance Risk and Compliance Consultant (GRC) to provide program management and product development support to a client GRC Manager. The GRC Consultant will be responsible for developing and implementing GRC program initiatives.

Responsibilities include the following:

Supporting the GRC Manager with execution of the Authorizing Official’s Risk Management Framework program
Facilitating System Owner briefings to the Authorizing Official
Developing and updating cybersecurity policies, plans, and procedures
Preparing and maintaining cybersecurity governance documentation
Communicating cybersecurity policy and procedure updates to stakeholders
Implementing new cybersecurity governance processes
Providing compliance standard research and gap analyses
Managing cybersecurity audit preparation and execution projects across the system environment
Analyzing and reporting on cybersecurity audit reports and remediation recommendations
Implementing cybersecurity awareness and training initiatives
Managing GRC program projects and providing project coordination support to cybersecurity operations and network operations teams
Recommending GRC program initiatives to continuously improve GRC program effectiveness and integration with the operational system environment

What You Will Need:

An ACTIVE and MAINTAINED \"TOP SECRET\" Federal or DoD security clearance
Bachelor’s degree
TEN (10) years of experience working in cybersecurity or IT with at least SIX (6) years experience in cybersecurity governance, risk management, and compliance
Ability to work onsite in Washington DC 4 days a week
Relevant cybersecurity certification (CISSP, CISM, CGRC, CISA, or similar)
Experience supporting the NIST Risk Management Framework for classified federal systems

What Would Be Nice To Have:

Bachelor's or Master’s degree in a cybersecurity discipline
Experience building new cybersecurity programs
Experience supporting DoD or Intelligence Community cybersecurity programs
Experience providing cybersecurity risk analysis and risk management recommendations to security leadership
Experience in IT project management and leading technical teams in cybersecurity or IT settings
Understanding of Zero Trust architecture
Understanding of cybersecurity risk and governance considerations associated with emerging technologies
Demonstrated ability to quickly grasp new technical concepts and integrate new information into existing plans and frameworks
Experience supporting customers in a client-facing environment
Experience implementing program and process improvements
Experience supporting cybersecurity compliance projects in a classified federal environment
Experience executing cybersecurity compliance external audits
Excellent written and verbal communication skills
Strong organizational and time management skills

The annual salary range for this position is $113,000.00-$188,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

Benefits include:

Medical, Rx, Dental & Vision Insurance
Personal and Family Sick Time & Company Paid Holidays
Position may be eligible for a discretionary variable incentive bonus
Parental Leave and Adoption Assistance
401(k) Retirement Plan
Basic Life & Supplemental Life
Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts
Short-Term & Long-Term Disability
Student Loan PayDown
Tuition Reimbursement, Personal Development & Learning Opportunities
Skills Development & Certifications
Employee Referral Program
Corporate Sponsored Events & Community Outreach
Emergency Back-Up Childcare Program
Mobility Stipend

About Guidehouse

Guidehouse is an Equal Opportunity Employer–Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation.

Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains including @guidehouse.com or guidehouse@myworkday.com. Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse. Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process.

If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse’s Ethics Hotline. If you want to check the validity of correspondence you have received, please contact recruiting@guidehouse.com. Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant’s dealings with unauthorized third parties.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.

","hiringOrganization":{"@type":"Organization","name":"Guidehouse","sameAs":"https://www.guidehouse.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Client Office: Washington, DC, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":9,"item":{"@type":"JobPosting","title":"Governance Risk and Compliance, Intern","datePosted":"2025-08-22","description":"

Why join us

Brex is the AI-powered spend platform. We help companies spend with confidence with integrated corporate cards, banking, and global payments, plus intuitive software for travel and expenses. Tens of thousands of companies from startups to enterprises — including DoorDash, Flexport, and Compass — use Brex to proactively control spend, reduce costs, and increase efficiency on a global scale.

Working at Brex allows you to push your limits, challenge the status quo, and collaborate with some of the brightest minds in the industry. We’re committed to building a diverse team and inclusive culture and believe your potential should only be limited by how big you can dream. We make this a reality by empowering you with the tools, resources, and support you need to grow your career.

Engineering at Brex

Engineering at Brex is about building systems that scale with speed and intention. Our teams span Software, Data, Security, and IT, and operate with high autonomy and deep collaboration. We tackle hard technical problems, own our outcomes, and push for excellence at every level — from architecture to deployment. It’s an environment where engineering is a craft, and builders become leaders.

What you’ll do

Building world-class financial services requires world-class security. As a GRC Intern on the Trust team, you will work on high-impact cross-organization governance, risk, and compliance initiatives. You’d advocate for security across the company and scale Trust efforts while executing hands-on yourself.

GRC’s mission is to instill trust in Brex from our customers, regulators, partners, and workforce in order to enable the company’s continued growth by maturing our security posture, maintaining compliance, optimizing security practices, and mitigating enterprise risk. We serve as the business side of Trust, and of Compliance as the what, Governance as the how, and Risk as the why, of Trust.

Where you'll work

This role is remote within São Paulo state.

Responsibilities

The GRC team handles a wide range of cross-functional activities from security compliance certifications and audits to risk management, vendor reviews, inbound due diligence, security education, access control, policy and procedures, and many more. Each of these ongoing parallel activities entails interpreting and setting requirements, assessing the effectiveness of security controls, risk-based decision making, cross-functional collaboration and communication, and staying up-to-date on security best practices and how changes in the evolving threat landscape need to inform our strategy. We always strive to go above and beyond industry standards in every aspect of GRC while keeping a balance with supporting the business’s goals. GRC is responsible for key programs that allow us to pass our audit requirements and underpin our risk management mandate. Each of these require strategic thinking and operational execution.

As a GRC intern, you will get hands-on experience in the Trust field by developing your skills across numerous impactful operational tasks, in turn contributing to the strategy and evolving maturity of our Trust posture.

Work under the guidance of seasoned GRC experts and gain exposure to a range of crossfunctional programs and processes, both technical and business-centric.
Conduct third party risk due diligence activities, namely identifying and assessing risks associated with existing and new vendor relationships prior to procurement and periodically thereafter, continuously monitoring for any relevant changes to the risk level or engagement scope. Where findings are identified during assessments, you would ensure plans of actions and check-ins are in place.
Other Operational GRC Tasks

GTM Enablement support
Tooling access requests
Contractor request reviews
Travel security request reviews
Security compliance evidence collection
Triaging of questions and requests for the GRC team (and learning to provide risk advisory over time!)
Policy review and revision

Requirements

Diligence and attention to detail in both process and content, strong written and verbal communication skills, with a talent for precise and clear articulation of complex concepts
Proven track record of cross-functional collaboration
An aptitude for representing the needs of both your team, other stakeholders, and the overall business
Ability to work in a fast-paced environment and address difficult situations in a professional manner
Strong interpersonal skills and comfortable working across various functions
Being innovative and providing “outside of the box” solutions
Passion for having an owner’s mentality towards responsibilities
Find opportunities for operational efficiency via AI and automation

Bonus points:

Experience at technology, security, or risk focused companies
Fluency with other GRC operational work and security support tasks such as policy revision, audit preparation and evidence collection, process design and improvement, customer/prospect/partner assurance, etc.
Experience working in or with startups, especially during periods of hypergrowth
Knowledge of fundamental security concepts and domains, in order to both assess the vendor’s security practices and also to define and document requirements on how we should safely use their products and/or services to mitigate relevant threats and how the implementation of a vendor may impact the security posture of the current environment

Please be aware, job-seekers may be at risk of targeting by malicious actors looking for personal data. Brex recruiters will only reach out via LinkedIn or email with a brex.com domain. Any outreach claiming to be from Brex via other sources should be ignored.

","hiringOrganization":{"@type":"Organization","name":"Brex","sameAs":"https://brex.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"São Paulo, São Paulo, Brazil","addressCountry":"Brazil","addressRegion":"South America"}}}},{"@type":"ListItem","position":10,"item":{"@type":"JobPosting","title":"Governance Risk and Compliance, Intern","datePosted":"2025-08-15","description":"

Why join us

Engineering at Brex

What you’ll do

Where you'll work

This role will be based in our São Paulo office. You must be willing to work in office at least 2 days per week on Wednesday and Thursday.

Responsibilities

Work under the guidance of seasoned GRC experts and gain exposure to a range of crossfunctional programs and processes, both technical and business-centric.
Conduct third party risk due diligence activities, namely identifying and assessing risks associated with existing and new vendor relationships prior to procurement and periodically thereafter, continuously monitoring for any relevant changes to the risk level or engagement scope. Where findings are identified during assessments, you would ensure plans of actions and check-ins are in place.
Other Operational GRC Tasks

GTM Enablement support
Tooling access requests
Contractor request reviews
Travel security request reviews
Security compliance evidence collection
Triaging of questions and requests for the GRC team (and learning to provide risk advisory over time!)
Policy review and revision

Requirements

Diligence and attention to detail in both process and content, strong written and verbal communication skills, with a talent for precise and clear articulation of complex concepts
Proven track record of cross-functional collaboration
An aptitude for representing the needs of both your team, other stakeholders, and the overall business
Ability to work in a fast-paced environment and address difficult situations in a professional manner
Strong interpersonal skills and comfortable working across various functions
Being innovative and providing “outside of the box” solutions
Passion for having an owner’s mentality towards responsibilities
Find opportunities for operational efficiency via AI and automation

Bonus points:

Experience at technology, security, or risk focused companies
Fluency with other GRC operational work and security support tasks such as policy revision, audit preparation and evidence collection, process design and improvement, customer/prospect/partner assurance, etc.
Experience working in or with startups, especially during periods of hypergrowth
Knowledge of fundamental security concepts and domains, in order to both assess the vendor’s security practices and also to define and document requirements on how we should safely use their products and/or services to mitigate relevant threats and how the implementation of a vendor may impact the security posture of the current environment

","hiringOrganization":{"@type":"Organization","name":"Brex","sameAs":"https://brex.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"São Paulo, São Paulo, Brazil","addressCountry":"Brazil","addressRegion":"South America"}}}},{"@type":"ListItem","position":11,"item":{"@type":"JobPosting","title":"Governance Risk and Compliance Lead","datePosted":"2025-08-22","description":"

Key Responsibilities:

Plan and conduct regular Fraud Risk Assessment and assess risks to determine the Fraud Risk Profile
Identify the potential Fraud risks and suggest appropriate controls for the same
Evaluate outcomes using risk based approach and adapt activities to improve FRM
Follow the Fraud reporting process and coordinated approach to investigation and corrective action
Adhere the Fraud Risk Assessment Checklist to conduct Fraud Risk Assessment
Deploy preventive and detective Fraud Control activities
Establish a Fraud Risk Management Policy as part of governance
Prepare and deliver anti-fraud training materials
Conduct Review Meetings with Project Teams on various Risk Management Initiatives
Monitor the Fraud Risk Management process, report results and improve the process
Require interaction with most teams internal to client at management and operational level
Analyse and propose process improvements wherever necessary

","hiringOrganization":{"@type":"Organization","name":"Hexaware","sameAs":"https://hexaware.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":12,"item":{"@type":"JobPosting","title":"Governance, Risk, and Compliance Lead","datePosted":"2025-08-29","description":"

About Decagon

Decagon is the leading conversational AI platform empowering every brand to deliver concierge customer experience. Our AI agents provide intelligent, human-like responses across chat, email, and voice, resolving millions of customer inquiries across every language and at any time.

Since coming out of stealth, Decagon has experienced rapid growth. We partner with industry leaders like Hertz, Eventbrite, Duolingo, Oura, Bilt, Curology, and Samsara to redefine customer experience at scale. We've raised over $200M from Bain Capital Ventures, Accel, a16z, BOND Capital, A*, Elad Gil, and notable angels such as the founders of Box, Airtable, Rippling, Okta, Lattice, and Klaviyo.

We’re an in-office company, driven by a shared commitment to excellence and velocity. Our values—customers are everything, relentless momentum, winner’s mindset, and stronger together—shape how we work and grow as a team.

About the Team

The Security Engineering team at Decagon protects the platform that powers the most advanced conversational AI agents for enterprise customers across voice, chat, email and SMS. We build the security foundations that enable Decagon's AI agents to handle sensitive customer data with complete trust while defending against sophisticated, AI-enabled threats at massive scale.

Our mission is to secure magical support experiences, ensuring that AI agents and human agents can collaborate safely to help users resolve their issues while maintaining the highest standards of security and privacy.

About the Role

Lead Decagon's governance, risk, and compliance strategy as we scale our AI platform to serve the world's most security-conscious enterprise customers. You'll be the primary point of contact for customer security requirements, managing everything from contract negotiations to compliance certifications. This role offers the opportunity to build a GRC program that enables rapid sales cycles while maintaining the trust of Fortune 500 companies. You'll work directly with sales, legal, and engineering teams to position Decagon as the security leader in conversational AI.

In this role, you will

Lead customer security engagements by negotiating information security exhibits and contractual requirements with enterprise customers and their legal teams, in collaboration with the legal team
Build and manage a scalable security questionnaire process
Drive compliance certifications including SOC 2 Type II, ISO 27001, PCI DSS, HIPAA, and CCPA
Develop and maintain comprehensive security documentation including policies, procedures, and evidence collection
Partner with Sales and Customer Success to accelerate deal velocity by proactively addressing customer security concerns with published content
Collaborate with Security, Engineering, and Product teams to translate compliance requirements into actionable technical controls and ensure new features meet regulatory standards
Establish vendor risk management programs to assess and monitor third-party security risks across our supply chain
Create reporting on risk posture, compliance status, and security metrics that demonstrate continuous improvement

Your background looks something like this

3+ years of GRC experience in high-growth SaaS or technology companies, with direct responsibility for compliance programs
Proven track record successfully completing SOC 2, ISO 27001, or similar enterprise compliance certifications
Expertise in data privacy regulations including CCPA, GDPR, and emerging AI governance frameworks
Experience negotiating security terms with Fortune 500 customers and their procurement teams
Strong project management skills with ability to coordinate cross-functional teams under tight deadlines
Excellent written and verbal communication skills to translate complex security concepts for diverse audiences
Working knowledge of technical security controls and ability to collaborate effectively with engineering teams

Even better

Experience with AI/ML compliance frameworks and understanding of unique risks in conversational AI systems
Background in healthcare or financial services with deep knowledge of HIPAA or PCI requirements
Track record of building GRC programs at companies scaling from startup to enterprise
Experience with GRC platforms like Vanta, Drata, or SecureFrame to automate compliance workflows
Understanding of cloud security particularly Google Cloud Platform compliance and security features

Benefits:

Medical, dental, and vision benefits
Take what you need vacation policy
Daily lunches, dinners and snacks in the office to keep you at your best

Compensation

$180K – $250K + Offers Equity

","hiringOrganization":{"@type":"Organization","name":"Decagon","sameAs":"https://decagon.ai/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"San Francisco","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":13,"item":{"@type":"JobPosting","title":"DHLE_Management.Manager - Governance, Risk and Compliance","datePosted":"2025-09-10","description":"

Job Purpose:

Lead Governance, Risk & Compliance through the development of governance, risk & compliance strategies, policies, processes, procedures, delegation of authority’s matrices and guidelines to mitigate the risks and implement necessary procedures to ensure compliance with company's policies, laws and regulations.

Key Accountabilities:

•    Strategy & Framework:
o    Develop and implement a comprehensive Governance, Risk & Compliance strategy and framework, covering enterprise-wide risk management, regulatory compliance, and internal controls aligned with business objectives
o    Integrate GRC practices with project management where applicable to ensure risk-aware decision making.
o    Embed and promote effective governance, risk management, and compliance practices across the vertical to foster a strong risk culture
•    Governance:
o    Adopt and implement corporate governance best practices.
o    Lead and coordinate the development, review, and approval of corporate governance, risk, and compliance policies in collaboration with relevant stakeholders, in line with DH.
o    Contribute to the set up and review of internal governance structures for various functions.
o    Support Internal Audit /Government Audit teams to facilitate closure of high-risk audit recommendations and identify process gaps and opportunities for improvement.
o    Prepare regular reports pertaining to governance dashboards, compliance status, risk management as per DH requirements.
•    Enterprise Risk Management:
o    Lead implementation of the Risk Management Framework, promoting a risk culture and ensuring risks are managed appropriately by Risk Owners.
o    Conduct risk assessment and oversee mitigation plans.
o    Appoint, train and support risk champions across functions.
o    Monitor compliance and report on significant risks to GRC Director.
o    Develop and review annual risk appetite.
o    Maintain and report the vertical risk register, and report to GRC Director, CEO and DH Head of ERM on major risks.
•    Compliance:
o    Identify, assess and monitor compliance Risks.
o    Assist, support and advise Executive Management and employees on Compliance obligations.
o    Support functions in policy and procedures development.
o    Coordinate with legal regulatory updates and alerts (as applicable).
o    Assess the adequacy and effectiveness of the internal policies and procedures, systems and controls to manage Compliance Risk.
o    Provide advisory services to the functions on an on-going basis, including responding to queries and issues as they arise.
•    Policies, Processes and Procedures:
o    GRC promotes a standardized approach to policies and procedures to avoid conflicts and gaps & ensures that policies reflect best practices and industry standards reviewing and approval to ensure they adequately address risks and compliance obligations before seeking final approvals
•    DOA:
o    Develop and maintain vertical DOA and ensure alignment with DH DOA.
o    Provide guidance and training teams on accurate interpretation and application of the DOA.
o    Coordinate DOA changes and updates, stakeholder reviews and approvals.
•    Transactional Compliance Review:
o    Review transaction submitted to vertical CEO for compliance with internal policies and DOAs.
•    Internal Control Framework:
o    Assess and test internal controls to manage business and financial risks (including fraud risks).
o    Ensure control design and control effectiveness are adequately tested.
o    Report findings and ensure corrective actions are implemented.
•    Executive Management Committee focal point of contact:
o    Act as a focal point of contact for EMC document submission.
o    Ensuring compliance with all internal DOAs, policies and procedures
o    Disseminate EMC instructions and provide updates to EMC secretary.
•    Business Continuity & Crisis Management:
o    Establish and maintain BCM protocols as per DH guidelines.
•    Planning and Reporting:
o    Assist in development of operational plans.
o    Monitor compliance and suggest improvements based on best practices.
o    Prepare accurate and timely reports to Management as per DH requirements.
o    Prepare reports to support informed decision-making by senior management.

Key Performance Indicators:

•    Corporate Governance Framework approved and implemented
•    Compliance and Enterprise Risk Management framework is approved and in place.
•    Compliance and risk management programs developed, approved and implemented.
•    Risk assessment and mitigation policies and processes are in place and implemented.
•    Regular transactional compliance reviews and compliance assessments.
•    Periodic Risk assessments and risk register executed based on planned timeline.
•    Annual workshop conducted for awareness of compliance and risk.
•    Compliance and risk management practices are in place and implemented in accordance with the DH framework.
•    Compliance reports issued with corrective action plans.
•    Reduction in Audit logs and implementation status of audit logs. Closure of high-risk audit recommendations.

Key Interactions:

Internal
\n • CEOs, CFOs
\n • All Department Heads

External
\n •    DH Team, DH Internal Audit
\n •    DH Governance & Compliance, DH Enterprise Risk Management,
\n •    Appointed Consultants

Qualifications, Experiences, Skills:

Minimum Qualifications and Knowledge:
•    Graduate/post-graduate in any discipline preferably in Finance/Accounting
•    CIA or any equivalent certification is a must.
•    Knowledge of Governance, Risk & Compliance techniques and methods.

Minimum Experience (number of years):
• Minimum 7–10 years of experience in Governance, Compliance, and Risk Management, with at least 5 years of experience within a consultancy firm, with exposure to GRC development.

Job Specific Skills:
\n •    Governance Framework Development
\n •    Risk Assessment and Management
\n •    Compliance management
\n •    Stakeholder engagement
\n •    Business Continuity and Crisis Management
\n •    Communication skills in English.
\n •    Problem solving & decision-making skills.
\n •    Attention to detail & quality
\n •    Project Management skills
\n •    Strong knowledge in the domain of real estate services – both development and asset management
\n •    Establish the network of collaborative relationships at the highest level
\n •    Development of risk register for specific project/functions
\n •    Understanding of Dubai, International, institutional and political framework.

Core Competencies:
•     Execution & Delivery
\n Result oriented, ensures operational excellence in areas of responsibility and delivers best results. Takes active ownership of problems and provide timely and result focused solutions. Remains outcome-driven.
•    Accountability
\n Take ownership of responsibility and be responsible for the consequences of work output.
•    Team Work & Collaboration
\n Fosters a culture of trust, collaboration and support. Works collaboratively both within one’s own function and across functions to achieve Vertical’s goals.
•    Effective Communication
\n Communicates clearly and effectively (both verbal and written). Communicates timely and responsively. Seeks feedback and provides feedback. Encourages open discussion and dialogue.
•    Innovation
\n Drives self and encourage others to actively look beyond boundaries for new insights and opportunities for success.
•    Customer Service Orientation
\n Develop and maintain strong external and internal customer relationships by identifying and anticipating customer needs and responding to them by maintaining long term relationship.
\n

","hiringOrganization":{"@type":"Organization","name":"Jumeirah Group","sameAs":"https://www.jumeirah.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"United Arab Emirates","addressCountry":"United Arab Emirates","addressRegion":"Middle East"}}}},{"@type":"ListItem","position":14,"item":{"@type":"JobPosting","title":"Senior Consultant, Governance Risk and Compliance","datePosted":"2025-08-06","description":"

Job Description

Our Governance, Risk and Compliance (GRC) team works with the Board, Audit & Risk Committees and Management of Australia’s largest private and public sector entities to:

Ensure high standards of governance, compliance & performance
Strengthen organisational reputation and stakeholder trust
Provide a comprehensive view of risks and the effective management thereof
Enhance efficiency and effectiveness of internal processes and controls
Provide confidence that business risks and legal and compliance obligations are managed effectively

Your Opportunity

Forming part of the GRC team in Brisbane, this role will play a key role in scoping, execution and reporting for a wide range of client-facing projects covering: governance advisory, risk and control advisory, contract management and performance reviews, and internal audit projects.

As a Senior Consultant, you will be consulting with clients on how best to establish effective governance arrangements, implement business process controls and assist them in measuring business performance and risk management. You will:

Work collaboratively with multiple client engagement teams across various sectors to assess governance, risk management, contract management and internal control frameworks across a wide range of clients, business areas and processes.
Deliver programs of work to assess and uplift, or provide assurance over frameworks, processes, risks and controls. This could be in the first line, supporting management; in the second line, supporting risk, compliance or legal functions; and/or in the third line as part of a co-sourced or outsourced internal audit function. As part of this, you will leverage KPMG’s global network, tools and resources to support in solving our client’s problems.
Engage with stakeholders to support reporting on engagement outcomes, including delivery of assurance or consulting reports and facilitation of forums to discuss engagement results.
Lead junior team members on a day-to-day basis, mentoring and providing professional development.
Develop strong relationships with clients and stakeholders to support the identification of opportunities for future business.
Play a role internally within the team, to create a great culture where everyone can perform at their best.

How are you extraordinary?

You are a driven, self-starter and a people-person, with a love of learning, tackling new risk areas and ability to engage and build relationships internally and externally with client stakeholders.

You have +- 2 years of experience in either: internal audit, governance, control and risk advisory insights (or related areas – see Your Experience below).

You have a detailed understanding of key business processes, risks and controls and can prepare high-quality client-ready written deliverables with the support of your client engagement teams.

You strong have project management skills to apply a structured approach to client delivery and effectively manage your time and the time of junior team members across multiple client engagements.

Your Experience

At KPMG, we believe diversity of thought, background and experience strengthens relationships and delivers meaningful benefits to our people, our clients, and communities. To be considered for this opportunity, your qualifications, skills & experience could include:

A broad range of tertiary qualifications will be considered, including Business, Commerce, Law, Data Management, Mathematics or similar. We will also consider individuals with Engineering or Healthcare services qualifications or experience, who are interested in using these skill sets in a new way, as we work with healthcare and capital-intensive sector clients.
An ability to develop rapport and build strong relationships with a variety of stakeholders at different levels of our client organisations, as well as internally within KPMG.
An ability to coach and guide junior members of the team.
Excellent communication skills both verbal and written, including ability to manage a variety of stakeholders.
Keen problem solver and critical thinker.
Experience operating in a professional services environment or in a client facing role is desirable, but not necessary.

Additional Information

KPMG is a professional services firm with global outreach and deep sector experience. We work with clients across an array of industries to solve complex challenges, steer change and enable growth.

Our people are what make KPMG the thriving workplace that it is and what sets us apart is that we know great minds think differently. Collaborate with a team of passionate, highly skilled professionals who’ve got your back. You’ll build relationships with unique and diverse colleagues who will provide you with the support you need to be your best and produce meaningful and impactful work in an inclusive, equitable culture.

At KPMG, you’ll take control over how you work. We’re embracing a new way of working in many ways, from offering flexible hours and locations to generous paid parental leave and career breaks. Our people enjoy a variety of exciting perks, including retail discounts, health and wellbeing initiatives, learning and growth opportunities, salary packaging options and more.

Diverse candidates have diverse needs. During your recruitment journey, information will be provided about adjustment requests. If you require additional support before submitting your application, please contact the Talent Attraction Support Team.

At KPMG every career is different, and we look forward to seeing how you grow with us.

","hiringOrganization":{"@type":"Organization","name":"KPMG Australia","sameAs":"https://home.kpmg"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Brisbane, QLD, Australia","addressCountry":"Australia","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":15,"item":{"@type":"JobPosting","title":"Lead - IT Governance, Risk and Compliance","datePosted":"2025-08-11","description":"

Lead ‐ IT Governance, Risk and Compliance

(Based at MAS Capital-Battaramulla)

MAS is Sri Lanka’s largest exporter and South Asia’s largest design-to-delivery solution providers in apparel and textile manufacturing. With a global community of 100,000, today, MAS spans across 14 countries with its portfolio expanding into wearable technology, FemTech, logistics and fabric parks worldwide. Over three decades, MAS has gained global recognition for its ethical and sustainable working environment as well as its impeccable craftsmanship and product excellence.

Embark on a journey of change with MAS, by joining Data and Digital Transformation as a Manager IT Governance Risk and Compliance. This role would enable you to involves leading the governance of technology solutions across design, build, and run phases, while establishing related policies and procedures. It also includes overseeing technology risk assessment, mitigation, and leadership approvals, as well as ensuring compliance with customer, regulatory, and security management standards..

Key Accountabilities:

Define and implement governance frameworks across all phases (Design, Build, Run) to ensure IT services meet compliance, security, and business objectives.
Develop, maintain, and enforce IT policies, procedures, and security standards that align with industry best practices and regulatory frameworks.
Develop and enforce risk management policies by embedding security and compliance from the initial design phase.
Ensure continuous compliance with international security standards (ISO 27001, National Institute of Standards and Technology, the General Data Protection Regulation and Personal Data Protection Act) through policy updates and periodic reviews.
Ensure effective policy roll-out across all IT teams and external vendors to drive compliance with governance frameworks.
Monitor compliance adherence across the Software Development Life Cycle (SDLC) through audits and automated compliance checks in DevOps pipelines.
Perform continuous risk analysis using automated tools to detect security misconfigurations or non-compliance in cloud, on-prem, and hybrid IT environments.
Conduct continuous compliance audits on IT operations, projects, and DevOps pipelines.
Assist the Head of IT Security in creating and maintaining the Technology Risk Management Procedure for MAS thereby building the roadmap for IT Risk and Compliance.
Lead the execution of internal and external Security risk assessments, perform gap-analysis, and ensure remediation in liaison with the IT and Cyber Security Services team.
Perform third-party vendor risk assessments and drive security improvements across partnerships.
Enhance resilience by implementing business continuity and disaster recovery (Business continuity planning and Disaster Recovery Plan) plans with regular testing.
Evaluate the adequacy and effectiveness of safeguards protecting sensitive Company information and assist the IT Governance Manager in driving information security initiatives within IT purview, in Collaborate with the IT and Cyber Security Services team.
Develop, conduct, and measure IT policy, procedure and standards awareness training and effectiveness across the enterprise.
Design data points to measure the effectiveness of procedure enforcements and prepare methodologies to collect the data.
Kick off designing Service Catalogue and Service Portfolios for all services provided by Technology Services to derive.
Integrate compliance tracking dashboards in IT service management and design platforms for real-time visibility of compliance.
Collaborate with IT architects to design resilient security frameworks that align with cloud-native security practices.
Manage and control budget related to spend for the function, on both capital and operational expense items.

Knowledge and Skills:

Bachelor’s or Masters Degree preferred in Computer Engineering or Computer Science
Professional certification in CISA, CISM, CISSP and CIA is highly desired
Minimum of 8+ years’ experience in IT with experience in several of the following areas: \n
- ISO 27001:2022 audits, internal IT audit, security risk assessments, information governance, privacy, security awareness, or cybersecurity maturity assessments
- Experience in governing internal controls in technology governance for any large enterprise
- Experience in governance in design, build and running of digital solutions
- Experience at a \"Big Four\" IT governance and risk consulting can be an added advantage
- Experience in policy and procedure adherence monitoring
- IT Auditing, governance and risk related competencies
- IT Risk Management aligning with industry best practices throughout a lifecycle of identification, quantification and treatment
- Design control awareness across organization for different users, technical and leadership role
The ability to think critically, assess and quantify technology risk, document complex processes and collaborate effectively with cross-functional stakeholders is required

","hiringOrganization":{"@type":"Organization","name":"MAS Holdings","sameAs":"https://www.masholdings.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Sri Lanka","addressCountry":"Sri Lanka","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":16,"item":{"@type":"JobPosting","title":"Director of Governance, Risk, and Compliance","datePosted":"2025-08-10","description":"

Do you want to love what you do at work? Do you want to make a difference, an impact, transform peoples lives? Do you want to work with a team that believes in disrupting the normal, boring, and average?

If yes, then this is the job you're looking for ,webook.com is Saudi's #1 event ticketing and experience booking platforms in terms of technology, features, agility, revenue serving some of the largest mega events in the Kingdom surpassing over 2 billion sales. webook.com is part of the Supertech Group also consisting of UXBERT Labs, one of the best digital and user experience design agencies in the GCC, along with Kafu Games, the largest esports tournament platform in MENA.

Key Responsibilities:

Governance Strategy Development:

Lead the creation and implementation of the companys governance, risk management, and compliance (GRC) framework.
Collaborate with the COO and senior leadership team to align governance practices with business goals and international expansion strategies.
Oversee governance across all departments, ensuring best practices are followed as we scale in both domestic and international markets.

Policy Creation & Implementation:

Develop and implement company-wide policies, ensuring they are compliant with local and international regulations.
Work closely with department heads to integrate governance policies into day-to-day operations, ensuring adherence and accountability.
Continuously assess the effectiveness of current policies and processes, recommending and implementing improvements.

Risk Management & Compliance:

Identify key risks and create mitigation strategies to address compliance and regulatory challenges in new markets.
Monitor regulatory changes in all relevant jurisdictions, ensuring that the company remains compliant as it grows.
Develop internal audit processes and ensure timely execution to evaluate adherence to governance policies and mitigate potential risks.

Team Leadership:

Manage a small but effective team responsible for governance, process improvement, and policy implementation.
Provide coaching and support to team members, fostering a culture of accountability and continuous improvement.
Lead cross-functional collaboration to ensure governance frameworks are understood and followed company-wide.

Stakeholder Engagement:

Act as the point of contact for external regulatory bodies, advisors, and legal counsel to ensure the companys governance framework meets all legal and regulatory requirements.
Represent the governance team in meetings with the executive team and the board of directors, providing updates on governance, risk, and compliance matters.

Monitoring and Reporting:

Develop and manage a reporting framework that tracks governance and compliance across the organization.
Provide regular reports to the executive team and board on governance initiatives, risk exposure, and compliance status.
Maintain records of all governance activities, ensuring proper documentation and audit readiness.

Requirements

Experience:

10+ years of experience in governance, risk management, and compliance (GRC) roles.
Proven track record of establishing governance frameworks in high-growth tech or multinational organizations.
Experience with risk management and regulatory compliance in global or multi-market operations.
Strong background in process improvement and policy development, particularly in scaling companies.

Skills:

In-depth knowledge of governance frameworks, risk management strategies, and compliance best practices.
Experience in regulatory compliance across multiple jurisdictions (experience with markets in the Middle East, Europe, or Asia is a plus).
Ability to lead and mentor a team, fostering a collaborative and accountable work environment.
Strong analytical and problem-solving skills, with the ability to assess complex risks and develop actionable solutions.
Excellent written and verbal communication skills, with the ability to communicate complex governance requirements clearly across all levels of the organization.

Qualifications:

Bachelor's degree in Law, Business Administration, Governance, or a related field.
Professional certifications in governance, risk management, or compliance (e.g., CCEP, CGEIT, CRMA, etc.) are preferred.
Experience working in technology, SaaS, or digital industries is a significant advantage.

","hiringOrganization":{"@type":"Organization","name":"webook.com","sameAs":"https://webook.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Riyadh, Riyadh Province, Saudi Arabia","addressCountry":"Saudi Arabia","addressRegion":"Middle East"}}}},{"@type":"ListItem","position":17,"item":{"@type":"JobPosting","title":"Governance, Risk and Compliance (GRC) | Manager","datePosted":"2025-08-12","description":"

Line of Service

Assurance

Industry/Sector

Not Applicable

Specialism

Assurance

Management Level

Manager

Job Description & Summary

Work on multiple and varying projects
Provide confidence on large transformation projects
Flexible work options - work smarter in a way that suits your lifestyle

About the Role

Our Governance, Risk and Compliance team is expanding and we’re looking for Managers to join our vast community of solvers. You’ll assist our clients in gaining confidence in how they effectively manage organisational risks, including risks in program design, implementation and delivery. Our work involves designing, implementing, and delivering digitally-enabled assurance, compliance, regulatory and risk management frameworks across organisations or within specific policy programs.

You’ll help solve complex problems by using your skills in:

Governance, risk and compliance
Leading projects including the planning, testing, reviewing and reporting stages on large and complex client engagements
Lead and contribute to large and small scale projects throughout the year
Work closely with your teams to develop their skills and grow from a personal and professional perspective; a passion for coaching and development
Excellent verbal and written communication skills
Strong time management skills and well developed research and problem solving skills

In our GRC team, your impact will be seen by:

Partnering with our clients on their large transformation programs to mitigate the regulatory and compliance risks they face
Developing risk management strategies for our clients to drive compliance and strengthen their existing processes and controls
Identifying priority areas of risk and process improvement for our clients by understanding their strategy, objectives, risks, control frameworks, systems and regulatory environment
Helping our clients to navigate an evolving risk and regulatory landscape by developing and executing test plans, identifying control effectiveness and improvements and reporting these in an impactful way

About PwC

At PwC, we are a human-led, tech-powered community of solvers. We approach problems with curiosity, collaboration and willingness to challenge the status quo to develop innovative solutions in partnership with Australian businesses and not-for-profits. Together, we strive to make a positive impact and drive meaningful change.

That’s where our people come in. Whether you’re just beginning your career or have plenty of experience under your belt, we believe your unique perspective can help us to deliver valued insights that make a real impact. Here, you’ll be surrounded by peers who have your back and leaders who support you, in an environment that encourages continuous learning and growth.

Your benefits

Flexible working arrangements for how, where and when you work, ensuring you thrive while delivering top results for your team and clients
More opportunities to connect with loved ones, with the ability to work up to four weeks from anywhere in Australia and select international locations
Health and lifestyle perks like a wellness credit and discounted memberships
Gender inclusive 26 weeks paid parental leave
World-class development opportunities to accelerate your career
Strong mentors, meaningful work and plenty of networking opportunities
Dress for your day so you can feel confident and comfortable for whatever your day has in store for you

Our commitment to diversity and inclusion

We empower our people to use their creativity, authenticity and human differences to be champions of change and challenge our thinking. At PwC, we understand that diverse perspectives are necessary for solving complex problems. We believe that for diversity to truly flourish, it must be nurtured in an inclusive environment. That's why we are committed to fostering a workplace where everyone feels valued to thrive.

PwC is committed to making our recruitment processes inclusive, so if you need reasonable adjustments or would like to note which pronouns you use at any point in the application or interview process, please let us know.

Holly Volk is the Recruitment Manager for the role. As the team experiences high volumes of applications, we appreciate your patience to allow for a timely and fair process for all.

No Agencies Please: We kindly request that recruitment agencies do not submit CVs in response to this advertisement. We are only accepting applications direct from individuals.

Education (if blank, degree and/or field of study not specified)

Degrees/Field of Study required:

Degrees/Field of Study preferred:

Certifications (if blank, certifications not specified)

Required Skills

Optional Skills

Accepting Feedback, Accepting Feedback, Active Listening, Analytical Thinking, Business Decisions, Business Performance Management, C-Level Presentations, Coaching and Feedback, Communication, Compliance Frameworks, Compliance Policies, Compliance Program Implementation, Compliance Review, Controls Testing, Corporate Governance, Creativity, Embracing Change, Emotional Regulation, Empathy, External Audit, Finance Target Operating Model, Finance Transformation, Financial Reporting, Fraud Detection, Fraud Prevention {+ 22 more}

Desired Languages (If blank, desired languages not specified)

Travel Requirements

Not Specified

Available for Work Visa Sponsorship?

Yes

Government Clearance Required?

Job Posting End Date

August 16, 2025

","hiringOrganization":{"@type":"Organization","name":"PwC","sameAs":"https://www.pwc.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Sydney, Australia","addressCountry":"Australia","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":18,"item":{"@type":"JobPosting","title":"Governance Risk and Compliance Associate Director","datePosted":"2025-08-18","description":"

Are you ready to make an impact at DTCC?

Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.

Pay and Benefits:

Competitive compensation, including base pay and annual incentive
Comprehensive health and life insurance and well-being benefits, based on location
Pension / Retirement benefits
Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).

The Impact you will have in this role:

Business Continuity & Resilience, BCR is concerned with the governance and implementation of proactive and reactive measures that ensure enterprise and business functions have the resilience and recovery capabilities to continue operations, should a serious event occur. Governance, Risk, and Compliance leverages leading practices and subject matter expertise to drive the implementation and unification of governance, risk, and compliance practices across OTR. As such, GRC coordinates with OTR leadership and teams to help ensure roles and responsibilities around the administration, oversight, implementation, and maintenance of Risk and Control initiatives. Partnering with OTR, GRC advocates excellence for risk management through the design and implementation of modernized processes that align to leading practices and yield efficiencies and synergies across OTR.

Your Primary Responsibilities:

Actively manage team projects and collect relevant key performance indicators (KPIs) and key risk indicators (KRIs) to measure OTR GRC's performance aligned to the overall objectives.
Provide tactical and strategic guidance aimed at helping meet compliance requirements across applicable security standards and frameworks.
Facilitate on-going evaluation of existing risk assessment processes and recommend enhancements. Support and partner with the programmer for the tool design and buildout.
Recommend enhancements to OTR's risk and control frameworks supporting policies and practices that establish risk identification, control deficiency detection, root cause analysis, and timely and effective remediation.
Technical knowledge of risk management principles, standards, and frameworks (ISO22301, ISO 27001/27002, ISO31000, COBIT, NIST).
Organize OTR GRC activity details for communications to Executive Leadership including audit findings, risk management, compliance issues, and progress against objectives.
Develop and update training material to be provided to OTR and host training sessions.
Mitigates risk by following established procedures and monitoring controls, spotting key errors and demonstrating strong ethical behavior.

Qualifications:

Minimum of 8 years of related experience
Bachelor's degree preferred or equivalent experience

Talents Needed for Success:

Serves as a trusted coach or mentor within the organization.
Communicates openly keeping everyone across the organization informed.

The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

","hiringOrganization":{"@type":"Organization","name":"DTCC","sameAs":"https://www.dtcc.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Boston, MA, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":19,"item":{"@type":"JobPosting","title":"Governance, Risk and Compliance (GRC) | Manager","datePosted":"2025-08-20","description":"

Line of Service

Assurance

Industry/Sector

Not Applicable

Specialism

Assurance

Management Level

Manager

Job Description & Summary

Work on multiple and varying projects
Provide confidence on large transformation projects
Flexible work options - work smarter in a way that suits your lifestyle

About the Role

You’ll help solve complex problems by using your skills in:

Governance, risk and compliance
Leading projects including the planning, testing, reviewing and reporting stages on large and complex client engagements
Lead and contribute to large and small scale projects throughout the year
Work closely with your teams to develop their skills and grow from a personal and professional perspective; a passion for coaching and development
Excellent verbal and written communication skills
Strong time management skills and well developed research and problem solving skills

In our GRC team, your impact will be seen by:

Partnering with our clients on their large transformation programs to mitigate the regulatory and compliance risks they face
Developing risk management strategies for our clients to drive compliance and strengthen their existing processes and controls
Identifying priority areas of risk and process improvement for our clients by understanding their strategy, objectives, risks, control frameworks, systems and regulatory environment
Helping our clients to navigate an evolving risk and regulatory landscape by developing and executing test plans, identifying control effectiveness and improvements and reporting these in an impactful way

About PwC

Your benefits

Flexible working arrangements for how, where and when you work, ensuring you thrive while delivering top results for your team and clients
More opportunities to connect with loved ones, with the ability to work up to four weeks from anywhere in Australia and select international locations
Health and lifestyle perks like a wellness credit and discounted memberships
Gender inclusive 26 weeks paid parental leave
World-class development opportunities to accelerate your career
Strong mentors, meaningful work and plenty of networking opportunities
Dress for your day so you can feel confident and comfortable for whatever your day has in store for you

Our commitment to diversity and inclusion

Holly Volk is the Recruitment Manager for the role. As the team experiences high volumes of applications, we appreciate your patience to allow for a timely and fair process for all.

No Agencies Please: We kindly request that recruitment agencies do not submit CVs in response to this advertisement. We are only accepting applications direct from individuals.

Education (if blank, degree and/or field of study not specified)

Degrees/Field of Study required:

Degrees/Field of Study preferred:

Certifications (if blank, certifications not specified)

Required Skills

Optional Skills

Desired Languages (If blank, desired languages not specified)

Travel Requirements

Not Specified

Available for Work Visa Sponsorship?

Yes

Government Clearance Required?

Job Posting End Date

August 23, 2025

","hiringOrganization":{"@type":"Organization","name":"PwC","sameAs":"https://www.pwc.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Sydney, Australia","addressCountry":"Australia","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":20,"item":{"@type":"JobPosting","title":"Lead - IT Governance, Risk and Compliance","datePosted":"2025-09-01","description":"

Lead ‐ IT Governance, Risk and Compliance

(Based at MAS Tech Thread -Malabe)

Key Accountabilities:

Define and implement governance frameworks across all phases (Design, Build, Run) to ensure IT services meet compliance, security, and business objectives.
Develop, maintain, and enforce IT policies, procedures, and security standards that align with industry best practices and regulatory frameworks.
Develop and enforce risk management policies by embedding security and compliance from the initial design phase.
Ensure continuous compliance with international security standards (ISO 27001, National Institute of Standards and Technology, the General Data Protection Regulation and Personal Data Protection Act) through policy updates and periodic reviews.
Ensure effective policy roll-out across all IT teams and external vendors to drive compliance with governance frameworks.
Monitor compliance adherence across the Software Development Life Cycle (SDLC) through audits and automated compliance checks in DevOps pipelines.
Perform continuous risk analysis using automated tools to detect security misconfigurations or non-compliance in cloud, on-prem, and hybrid IT environments.
Conduct continuous compliance audits on IT operations, projects, and DevOps pipelines.
Assist the Head of IT Security in creating and maintaining the Technology Risk Management Procedure for MAS thereby building the roadmap for IT Risk and Compliance.
Lead the execution of internal and external Security risk assessments, perform gap-analysis, and ensure remediation in liaison with the IT and Cyber Security Services team.
Perform third-party vendor risk assessments and drive security improvements across partnerships.
Enhance resilience by implementing business continuity and disaster recovery (Business continuity planning and Disaster Recovery Plan) plans with regular testing.
Evaluate the adequacy and effectiveness of safeguards protecting sensitive Company information and assist the IT Governance Manager in driving information security initiatives within IT purview, in Collaborate with the IT and Cyber Security Services team.
Develop, conduct, and measure IT policy, procedure and standards awareness training and effectiveness across the enterprise.
Design data points to measure the effectiveness of procedure enforcements and prepare methodologies to collect the data.
Kick off designing Service Catalogue and Service Portfolios for all services provided by Technology Services to derive.
Integrate compliance tracking dashboards in IT service management and design platforms for real-time visibility of compliance.
Collaborate with IT architects to design resilient security frameworks that align with cloud-native security practices.
Manage and control budget related to spend for the function, on both capital and operational expense items.

Knowledge and Skills:

Bachelor’s or Masters Degree preferred in Computer Engineering or Computer Science
Professional certification in CISA, CISM, CISSP and CIA is highly desired
Minimum of 8+ years’ experience in IT with experience in several of the following areas: \n
- ISO 27001:2022 audits, internal IT audit, security risk assessments, information governance, privacy, security awareness, or cybersecurity maturity assessments
- Experience in governing internal controls in technology governance for any large enterprise
- Experience in governance in design, build and running of digital solutions
- Experience at a \"Big Four\" IT governance and risk consulting can be an added advantage
- Experience in policy and procedure adherence monitoring
- IT Auditing, governance and risk related competencies
- IT Risk Management aligning with industry best practices throughout a lifecycle of identification, quantification and treatment
- Design control awareness across organization for different users, technical and leadership role
The ability to think critically, assess and quantify technology risk, document complex processes and collaborate effectively with cross-functional stakeholders is required

","hiringOrganization":{"@type":"Organization","name":"MAS Holdings","sameAs":"https://www.masholdings.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Sri Lanka","addressCountry":"Sri Lanka","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":21,"item":{"@type":"JobPosting","title":"Governance, Risk, and Compliance (GRC) IT Analyst","datePosted":"2025-08-04","description":"

Company Description

About Us
\nHeadquartered in Indianapolis, Indiana, Wabash Valley Power is a not-for-profit electric cooperative and wholesale provider of reliable, affordable electricity to our 21 electric distribution member cooperatives. These cooperatives in turn serve more than 280,000 homes, businesses, and farms in Indiana and Illinois.
\n
\nAs a not-for-profit co-op, we do things a bit differently—and that’s the point. Because we aren’t influenced by shareholders, we make our decisions with our members in mind. That means we value things like teamwork, and putting families first. It also means a business model that’s designed for stability and growth. It’s a Deliberately Different approach to the energy industry, and that’s great news for the people who count on us.

What You'll Get
\nWe believe what benefits our employees benefits our company. That’s why we put employees first—your health, your family, and your development. These aren’t just slogans: We offer continuing education, flex time, health benefits, a 401(k) match and pension plan, and much more. Here are just a few of the things that make our company culture unique:

•  No Sweat - We offer a wellness program that includes a payroll credit for medical insurance, an on-site fitness center for your convenience and extra vacation days for participating. We’ll even throw in a fitness device reimbursement to keep you on track!
\n•  Flex Time - Our flexible schedule means you can work in your appointments or family events and maintain a comfortable work-life balance.
\n•  Stay in School - We value employees who have a desire to learn, so we provide funds for continuing education. We also offer in-house training and ongoing development through our internal GROW program.
\n•  Keep it Casual  - When you work for us, you work in comfort. Blue jeans are the norm in our office, and we make them look good!
\n•  Work Hard, Play Hard - We reward our employees with generous vacation time, to the tune of up to five weeks off a year. Even our new employees receive credit for prior work experience.

Job Description

The Governance, Risk, and Compliance (GRC) IT Analyst is responsible for ensuring the cooperative's information technology systems adhere to regulatory requirements, industry standards, and internal policies. This role focuses on maintaining compliance with NERC CIP standards, mitigating cybersecurity risks, implementing Zero Trust principles, and supporting governance frameworks to protect critical infrastructure. The GRC IT Analyst collaborates with IT, security, legal, and operational teams to develop policies, perform risk assessments, oversee audits, and strengthen internal controls.

Essential Duties and Responsibilities:

Governance & Compliance

Ensure IT and cybersecurity programs comply with NERC CIP, FERC, and other relevant regulations.
Develop, implement, and maintain IT governance frameworks, policies, and procedures aligned with regulatory requirements.
Serve as a key resource in internal and external audits, coordinating responses, evidence collection, and remediation efforts.
Stay updated on regulatory changes and industry best practices, advising management on necessary adjustments.
Assist in training employees on compliance responsibilities and security awareness.

Risk Management & Internal Control Reviews

Conduct IT risk assessments to identify and evaluate vulnerabilities in IT systems and processes.
Perform internal control reviews to assess the effectiveness of IT security controls, access management, and compliance measures.
Maintain the cooperative’s IT Risk Register and track mitigation strategies.
Work with IT and security teams to implement risk management strategies and security controls.
Support incident response planning and contribute to post-incident investigations.

Zero Trust Implementation & Security Control Assurance

Lead initiatives to design and implement a Zero Trust Architecture (ZTA) for the cooperative’s IT environment.
Establish least privilege access controls, identity verification measures, and micro-segmentation strategies.
Collaborate with IT and networking teams to enforce continuous monitoring and authentication policies.
Ensure Zero Trust principles align with NERC CIP compliance requirements and cybersecurity best practices.
Monitor IT controls and security frameworks (e.g., NIST CSF, CIS Controls).
Evaluate third-party vendors for compliance with cybersecurity and regulatory requirements.
Perform security assessments of IT systems, applications, and network infrastructure.
Participate in business continuity and disaster recovery planning.

Collaboration & Reporting

Generate reports on compliance status, risk assessments, and security metrics for leadership and regulators.
Work closely with IT, operations, and legal teams to ensure alignment between business objectives and compliance requirements.
Serve as a liaison between the cooperative and regulatory bodies during audits and compliance reviews.

Qualifications

Required:

Bachelor’s degree in Information Technology, Cybersecurity, Business, or a related field.
5+ years of experience in IT governance, compliance, or risk management.
Knowledge of NERC CIP standards and regulatory requirements in the electric utility industry.
Experience implementing Zero Trust Security models and least privilege access controls.
Understanding of IT security frameworks (e.g., NIST 800-53, ISO 27001, CIS Controls).
Familiarity with risk assessment methodologies and tools.
Strong analytical and problem-solving skills.
Ability to communicate complex security and compliance topics to non-technical audiences.

Preferred:

Certifications such as CISA, CISSP, CRISC, or CIP Compliance Specialist.
Master’s degree in Information Technology, Cybersecurity, Business, or a related field.
Experience working in an electric cooperative or energy sector.
Hands-on experience with GRC tools, security auditing, or compliance management platforms.
Technical knowledge of network security, endpoint protection, and identity management solutions.

Security Clearance Requirement
\nThis position requires the ability to obtain and maintain a U.S. government Secret Security Clearance. While an active clearance is not required to apply, the successful candidate must meet the eligibility criteria for a Secret Clearance, including U.S. citizenship and a background investigation. Our organization will support and facilitate the clearance process for the selected candidate.

For more information about U.S. government security clearances, please visit: https://www.intelligencecareers.gov/dhsia/security-clearance-process

Additional Information

Work Environment:

Primarily office-based with periodic travel for audits, assessments, and training.
After-hours work may be required to support compliance activities and incident response.
This role is hybrid in nature, with a combination of on-site workdays and remote workdays.

All your information will be kept confidential according to EEO guidelines.

","hiringOrganization":{"@type":"Organization","name":"Wabash Valley Power Alliance","sameAs":"https://www.ninestarconnect.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Indianapolis, IN, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":22,"item":{"@type":"JobPosting","title":"Sr Director of Governance, Risk, and Compliance","datePosted":"2025-08-18","description":"

Job Description

The Senior Director of Governance, Risk, and Compliance will report to the Global CISO within Advance Auto Parts and will focus on the measurement, analysis, oversight and reporting of cybersecurity risks and controls.

The Senior Director of GRC will lead the Cyber Risk team, and will be responsible for the ownership, operation and optimization of the team’s policies, standards, risk identification, assessment and reporting processes. The ideal candidate will combine expertise in both cybersecurity and risk management disciplines and have exceptional communication and stakeholder management skills.

The Senior Director of Governance, Risk, and Compliance will play a key role in the leadership of that team and the organization’s compliance to our security standards. This position is based in Raleigh, NC and part of a Hybrid work arrangement, requiring four days/week in office.

ESSENTIAL DUTIES AND RESPONSIBILITIES include the following: other duties may be assigned:

Develop a short term and long term comprehensive GRC Strategy
Develop, communicate, and implement enterprise-wide security policies, standards, procedures, and guidelines.
Provide strategic guidance to the CISO for representing risks to the Board, Audit Committee, and ERM
Lead and develop a team of high-performing cyber risk specialists
Lead the identification, evaluation, and prioritization of cyber risks across the organization
Oversee production, reporting and evolution of cyber risk metrics, including Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs)
Conduct cyber risk assessments and provide reporting to a range of senior stakeholders
Conduct cyber maturity assessments and provide reporting to a range of senior stakeholders
Conduct risk analysis, providing insights on issues and direction on risk mitigation strategies
Drive automation, analytics, and continuous improvement of processes
Engage with a range of senior stakeholders across Lines of Defense to ensure appropriate oversight and reporting of cybersecurity risks
Collaborate with cross-functional teams on cyber risk assessment and remediation activities
Ensure regulatory compliance with frameworks in NIST, SOC 1/2, PCI, SOX, CCPA
Oversee security audits / Partner with Internal Audit
Represent cybersecurity in the Enterprise Risk Management committee
Create a comprehensive security awareness program.
Report on and ensure compliance to our security policies and standards through a robust compliance program.

QUALIFICATIONS:

Extensive knowledge of cyber risk management frameworks and methodologies
Proven experience in leadership roles, managing teams, and influencing executive stakeholders
Experience in establishing and managing regulatory compliance in NIST, PCI-DSS, SOX, SOC 1/2, CCPA, HIPAA
Strategic thinker with a strong understanding of cyber threats, vulnerabilities, and risk mitigation options
Innovative thinker and adaptable to change
Exceptional communication and presentation skills, capable of translating technical risk into business terms
Excellent analytical, problem-solving, and decision-making skills

EDUCATION AND EXPERIENCE REQUIREMENTS:

Bachelor’s degree in Information Security, Computer Science, or a related field; Master’s degree preferred
Minimum of 10 years of experience in cybersecurity, with a focus on risk management
Relevant certifications such as CISSP, CISM, CRISC or similar

California Residents click below for Privacy Notice:

disclosures

","hiringOrganization":{"@type":"Organization","name":"Advance Auto Parts","sameAs":"https://www.advanceautoparts.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"RALEIGH, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":23,"item":{"@type":"JobPosting","title":"IT Governance, Risk and Compliance (GRC) Consultant","datePosted":"2025-08-18","description":"

Sword is a leading provider of business technology solutions within the Energy, Public and Finance Sectors, driving transformational change within our clients. We use proven technology, specialist teams and domain expertise to build solid technical foundations across platforms, data, and business applications. We have a passion for using technology to solve business problems, working in partnership with our clients to help in achieving their goals.

About the role:

Develop and maintain GRC frameworks aligned with ISO 27001, NIST, GDPR, and NIS2 standards
Conduct risk assessments across business units, vendors, and projects
Monitor regulatory changes and ensure compliance with legal and contractual obligations
Support business continuity and disaster recovery planning and testing
Manage internal audits, compliance reporting, and remediation activities
Coordinate GDPR compliance and data protection processes across the organisation
Drive improvements in security culture through awareness and training
Collaborate with stakeholders to identify and address control deficiencies

Requirements

Qualifications & Experience

Substantial relevant experience in control management for governance, compliance, IT audits, IS assurance and risk management programmes
Understanding of regulatory requirements, including cross-industry regulations (e.g., GDPR, Data Protection Act) and industry-specific regulations
Knowledge of common information security management frameworks, such as ISO/IEC 27001, ITIL, COBIT as well as those from NIST, including 800-53 and Cybersecurity Framework
Knowledge of OneTrust risk management toolset or similar preferred
Proven ability to communicate with technical teams to elicit information and requirements
Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate compliance and risk related concepts to technical and nontechnical audiences
CISA, CISM or equivalent
BSc or equivalent qualification in IT based degree.

Benefits

At Sword, our core values and culture are based on caring about our people, investing in training and career development and building inclusive teams where we are all encouraged to contribute to achieve success.

We offer comprehensive benefits designed to support your professional development and enhance your overall quality of life.

In addition to a Competitive Salary, here's what you can expect as part of our benefits package:

Personalised Career Development: We create a development plan customised to your goals and aspirations, with a range of learning and development opportunities within a culture that encourages growth.

Flexible working: Flexible work arrangements to support your work-life balance. We can’t promise to always be able to meet every request, however are keen to discuss your individual preferences to make it work where we can.

A Fantastic Benefits Package: This includes generous annual leave allowance, enhanced family friendly benefits, pension scheme, access to private health, well-being, and insurance schemes, an employee assistance programme, discounted cash plan and more…..

At Sword we are dedicated to fostering a diverse and inclusive workplace and are proud to be an equal opportunities employer, ensuring that all applicants receive fair and equal consideration for employment, regardless of whether they meet every requirement. If you don’t tick all the boxes but feel you have some of the relevant skills and experience we’re looking for, please do consider applying and highlight your transferable skills and experience. We embrace diversity in all its forms, valuing individuals regardless of age, disability, gender identity or reassignment, marital or civil partner status, pregnancy or maternity status, race, colour, nationality, ethnic or national origin, religion or belief, sex or sexual orientation. Your perspective and potential are important to us.

If we can do anything to help make the hiring process more accessible, please let our talent acquisition team know when you apply so we can support any adjustments.

","hiringOrganization":{"@type":"Organization","name":"Sword","sameAs":"https://www.sword-group.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Bellshill, Scotland, United Kingdom","addressCountry":"United Kingdom","addressRegion":"Europe"}}}},{"@type":"ListItem","position":24,"item":{"@type":"JobPosting","title":"IT Intern (GRC - Governance, Risk and Compliance)","datePosted":"2025-08-23","description":"

Donaldson is committed to solving the world’s most complex filtration challenges. Together, we make cool things. As an established technology and innovation leader, we are continuously evolving to meet the filtration needs of our changing world. Join a culture of collaboration and innovation that matters and a chance to learn, effect change, and make meaningful contributions at work and in communities.

IT Secuity Intern position for Governance, Risk and Compliance.

Employment opportunities for positions in the United States may require use of information which is subject to the export control regulations of the United States. Hiring decisions for such positions are required by law to be made in compliance with these regulations. Applicants for employment opportunities in other countries must be able to meet the comparable export control requirements of that country and of the United States.

Donaldson Company has been made aware that there are several recruiting scams that are targeting job seekers. These scams have attempted to solicit money for job applications and/or collect confidential information, Donaldson will never solicit money during the application or recruiting process. Donaldson only accepts online applications through our Careers | Donaldson Company, Inc. website and any communication from a Donaldson recruiter would be sent using a donaldson.com email address. If you have any questions about the legitimacy of an employment opportunity, please reach out to talentacquisition@donaldson.com to verify that the communication is from Donaldson.

Our policy is to provide equal employment opportunities to all qualified persons without regard to race, gender, color, disability, national origin, age, religion, union affiliation, sexual orientation, veteran status, citizenship, gender identity and/or expression, or other status protected by law.

","hiringOrganization":{"@type":"Organization","name":"Donaldson","sameAs":"https://www.donaldson.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Kuala Lumpur, Malaysia","addressCountry":"Malaysia","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":25,"item":{"@type":"JobPosting","title":"Senior Governance, Risk, and Compliance Security Analyst","datePosted":"2025-08-25","description":"

Credit Acceptance is proud to be an award-winning company with local and national workplace recognition in multiple categories! Our world-class culture is shaped by dedicated Team Members who share a drive to succeed as professionals and together as a company. A great product, amazing people and our stable financial history have made us one of the largest used car finance companies nationally.

Our Engineering and Analytics Team Members utilize the latest technology to develop, monitor, and maintain complex practices that help optimize our success. Our Team Members value being challenged, are encouraged to express their ideas, and have the flexibility to enjoy work life balance. We build intrinsic value by partnering with all functions of our business to support their success and make strategic business decisions. We focus on professional development and continuous improvement while enjoying a casual work environment and Great Place to Work culture!

The Senior Governance, Risk, and Compliance (GRC) Security Analyst is responsible for supporting the security direction of the business and elevating the company’s security posture. The Senior GRC Security Analyst is expected to support the security strategy of the business within new and existing information system capabilities. The position requires understanding of legacy systems and new technologies and requirements. The Senior GRC Security Analyst is also responsible for maintaining the risk register and collaborating with IT teams to effectively drive risk reduction to manage corporate risk and strengthen security posture.

Outcomes and Activities:

This position will work from home; occasional planned travel to an assigned Southfield, Michigan office location may be required. However, this position is permitted to work at a Southfield, Michigan office location if requested by the team member
Assist in the execution of GRC initiatives, such as security attestations (PCI, SOC 2, ISO 27001), and vendor risk management
Become an advocate and point of contact for security and compliance throughout the organization by articulating the value of 'security by design' practices and controls
Manage and execute on assigned workstreams in conjunction with GRC team members, partnering with stakeholders in the organization as well as external auditors to facilitate scoping, fieldwork, and reporting
Identify processes or areas with inefficiencies, partner with GRC and stakeholders to build consensus on a solution, and drive implementation and adoption
Implements security controls, risk assessment framework, and program that align to regulatory requirements, ensuring documented and sustainable compliance that aligns and advances College business objectives
Evaluates risks and develops security standards, procedures, and controls to manage risks. Improves CA’s security positioning through process improvement, policy, automation, and the continuous evolution of capabilities
Documents and reports control failures and gaps to stakeholders. Provides remediation guidance and prepares management reports to track remediation activities
Remains current on best practices and technological advancements and acts as a technical resource for security assessment and regulatory compliance

Competencies: The following items detail how you will be successful in this role.

Customer Empathy: Customer Empathy is the ability to understand the perspectives, pain points, and experiences of customers. It involves actively putting oneself in the customer’s shoes, comprehending their needs and challenges, and using that understanding to provide a better, more customer-centric experience.
Engineering Excellence: Engineering Excellence is about bringing great craftsmanship and thought leadership to deliver an outstanding product that delights customers and solves for the business. This involves the pursuit and achievement of high standards, best practices, innovation, and superior solutions.
One Team: A One Team mindset refers to a collaborative approach across the organization, where individuals work together seamlessly, without boundaries, as a single, cohesive team. Shared goals, open communication and mutual support create a sense of collective purpose. This enables teams to navigate challenges and pursue shared objectives more effectively.
Owner’s Mindset: Owner’s Mindset involves adopting a set of behaviors that reflect a sense of responsibility, accountability, strategic thinking, and a proactive approach to managing your domain. As an owner, you understand the business and your domain(s) deeply and solve for the right outcome for the domain(s) and the business.

Requirements:

Bachelor’s degree in computer science, Information Technology, Information Assurance or a related field (or equivalent experience)
6+ years of experience in Information Technology, Security Analysis, Governance, Risk and Compliance and/or Internal Audit management.
Strong understanding of fundamental information security concepts and technology
Knowledge of information security risk management frameworks and compliance practices
Knowledge of applicable information security management, governance, and compliance principles, practices, laws, rules, and regulations
Understanding of technical and organizational security vulnerabilities, threats, and risks
Skilled at applying a risk-based approach to planning, executing, and reporting on audit engagements and auditing process
Skilled in security project management and planning

Preferred:

Experience working in a highly regulated industry vertical
Experience working with GRC automation platforms
Experience performing information security audits or risk assessments
Experience managing compliance-driven readiness activities as well as remediation and certification efforts. (e.g., ISO 27001, HIPAA, HITRUST, SOC2, FedRAMP)
ISACA or (ISC)2 Certification

Knowledge and Skills:

Excellent analytical, problem-solving, and decision-making skills
Strong communication (written and verbal) and presentation skills
Strong work ethic with attention to detail
Willingness to learn and adapt as the situation arises
Ability to effectively communicate technical issues to diverse audiences, both in writing and verbally
Ability to work with cross-functional teams across organizational and cultural boundaries to achieve policy and process compliance
Ability to develop security standards and guidelines based on best practices and industry standards
Ability to work independently and manage a fluid workload

Target Compensation: A competitive base salary range from $106,610 - $156,360. This position is eligible for an annual variable cash bonus, between 7.5 - 15%. Final compensation within the range is influenced by many factors including role-specific skills, depth and experience level, industry background, relevant education and certifications.

Candidates who reside in the following major metropolitan areas may be eligible for a premium on top of the posted range based on their specific zone: San Francisco, Seattle, Boston, New York City, Los Angeles and San Diego.

INDENGLP

#zip

#LI-Remote

Benefits

Excellent benefits package that includes 401(K) match, adoption assistance, parental leave, tuition reimbursement, comprehensive medical/ dental/vision and many nonstandard benefits that make us a Great Place to Work

Our Company Values:

To be successful in this role, Team Members need to be:

Positive by maintaining resiliency and focusing on solutions
Respectful by collaborating and actively listening
Insightful by cultivating innovation, accumulating business and role specific knowledge, demonstrating self-awareness and making quality decisions
Direct by effectively communicating and conveying courage
Earnest by taking accountability, applying feedback and effectively planning and priority setting

Expectations:

Remain compliant with our policies processes and legal guidelines
All other duties as assigned
Attendance as required by department

Advice!

We understand that your career search may look different than others. Our hiring team wants to make sure that this would be a fit not just for us, but for you long term. If you are actively looking or starting to explore new opportunities, send us your application!

P.S.

We have great details around our stats, success, history and more. We’re proud of our culture and are happy to share why – let’s talk!

Required degrees must have been earned at institutions of Higher Education which are accredited by the Council for Higher Education Accreditation or equivalent.

Credit Acceptance is dedicated to providing a safe and inclusive working environment for all. As part of our Culture of Compliance, we are proud to be an Equal Opportunity Employer and value our culturally diverse workforce. All qualified applicants will receive consideration for employment regardless of the person’s age, race, color, religion, sex, gender, sexual orientation, gender identity, national origin, veteran or disability status, criminal history, or any other legally protected characteristic.

California Residents: Please click here for the California Consumer Privacy Act (CCPA) notice regarding the personal information Credit Acceptance may collect from you.

Play the video below to learn more about our Company culture.

","hiringOrganization":{"@type":"Organization","name":"Credit Acceptance","sameAs":"https://www.creditacceptance.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Silver Triangle Building, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":26,"item":{"@type":"JobPosting","title":"Risk Services - Manager - Governance, Risk and Compliance","datePosted":"2025-09-02","description":"

Management Level

Manager

Job Description & Summary

It’s a great time to be joining PwC New Zealand - a community of solvers that lead with the heart and live by our values. Join us and make a meaningful impact while working with cutting-edge tech.

Kia Ora,

It’s a great time to be joining PwC New Zealand - a community of solvers that lead with the heart and live by our values. Join us and make a meaningful impact while working with cutting-edge tech.

Ngā Kōrero mo tēnei tūranga / About the role

Our Governance, risk and compliance (GRC) team helps our clients better manage their risks, so that they are better able to anticipate change, adapt and pursue opportunities with confidence. A career in GRC gives you the opportunity to work with a wide range of organisations to develop or enhance their governance, risk or compliance management practices and ultimately add value by improving business resilience and effectiveness. We are looking for an experienced Manager to join our team in Tāmaki Makaurau / Auckland. This is a full-time opportunity, minimum 37.5 hours per week. As a Manager in GRC your day-to-day responsibilities in this role will include:

Working alongside market leading GRC partners to deliver GRC services to clients including relationship management, business development and commercial management

Scoping, managing and delivering GRC services such as:

Assessing the maturity of governance, risk and compliance management practices, and developing clear strategies to achieve desired future state

Developing or enhancing governance, risk management and compliance frameworks, building the trust and confidence of key internal and external stakeholders

Supporting organizations to identify, assess and report risks, including through running workshops and developing high quality insights and reporting

Leading, coaching and mentoring engagement teams and aiding their career development

Teaming with other subject matter experts to blend GRC skills with other technical disciplines to bring tailored solutions to complex problems

Providing subject matter expertise to diverse stakeholders including Executives, Board and Audit & Risk Committees

Ngā pūkenga kei a koe / Skills and experience

4+ years’ experience in GRC/risk (advisory or in-house) with managerial experience in a professional services firm or a risk/compliance function

Strong experience developing, implementing or assessing governance, risk and compliance structures and frameworks

GRC experience in the financial services sector is preferred

Bachelor's degree in either Economics, Accounting, Commerce, Finance or similar

Excellent analytical and report writing skills

Strong oral and written communication skills.

Engaging workshop facilitator and presenter

Proven experience maintaining long-term relationships with a broad network of stakeholders and clients, managing multiple projects simultaneously and prioritizing appropriately

Ngā āhuatanga hirahira o te mahi ki PwC / Highlights of working at PwC NZ

Unrivalled level of access to industry expertise, both locally and through our wider global network of member firms, where you’ll be enabled by cutting-edge technology.

Collaborate closely with industry leaders, gaining unparalleled access to coaching and leadership development opportunities that will accelerate your professional growth and future career opportunities.

An inclusive culture where teamwork, support and collaboration are at the heart of what we do.

PwC shows care to employees by providing life and income protection as part of our total remuneration package.

PwC's paid parental leave applies to all parents regardless of gender, so all our employees can be involved with raising their children

Enhanced leave capabilities - an opportunity to purchase additional leave and two staff recognition days available each year.

Digital upskilling through our Digital Academy.

Mo te aha tāu e tatari ana? / What are you waiting for?

With PwC, you’ll belong to a whānau, a community of problem solvers, where differences are embraced. We empower you with the technology, coaching, flexibility and trust needed to make a meaningful difference, while supporting you to be your authentic self each day. We’re committed to building and maintaining a diverse workforce because we know it’s only by working together that we can realise the potential of our people, clients and society. https://www.pwc.co.nz/careers.html

Mana motuhake / Independence

Maintaining independence is fundamental to demonstrating that PwC has not been influenced by any relationships or situations that undermine our objectivity. This role requires an independence review process.

Travel Requirements

Not Specified

Available for Work Visa Sponsorship?

Yes

Job Posting End Date

September 26, 2025

","hiringOrganization":{"@type":"Organization","name":"PwC","sameAs":"https://www.pwc.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Auckland - PwC Tower, New Zealand","addressCountry":"New Zealand","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":27,"item":{"@type":"JobPosting","title":"Governance, Risk and Compliance/Data Protection Coordinator","datePosted":"2025-09-02","description":"

The GRC/DPC plays a critical role in strengthening information security at Stena Group IT by ensuring that cyber and information risks are identified, assessed and managed effectively.

We offer
As our GRC/DPC, you will operate with a high degree of independence, supported by management and provided with the resources needed to succeed. You will drive compliance with security standards and regulatory requirements. This includes leading internal audits, developing and maintaining information security directives, coordinating training and awareness initiatives, and monitoring risks and potential data breaches.

You will establish and oversee IT governance structures, policies and controls, ensuring continuous improvement and risk mitigation.

As Data Protection Coordinator (DPC), you ensure compliance with data privacy regulations, act as the main contact between Stena IT and DPO responsible in companies. Monitor and advise on data breaches and incidents, ensuring timely reporting and remediation actions.

You report on GRC risks, compliance issues, and remediation plans to senior management and relevant committees, and lead Stena Group IT Disaster Tabletop exercises.

About You
We believe you have strong regulatory knowledge and an in-depth understanding of relevant laws, regulations, and industry standards, supported by a minimum of two years of proven experience.

You bring excellent analytical and problem-solving skills gained from industries similar or adjacent to Stena's core business. You also have strong communication skills, enabling you to articulate complex GRC and data protection matters clearly across departments.

You have experience leading and conducting both internal and external audits, as well as competence in developing and delivering training programs to educate employees on information security and compliance.

CISA, CISM, or other relevant certifications within the field of information security are highly valued.

You hold a bachelor’s degree in law, Computer Science, Business Administration, or another relevant field, and have experience with ISO 27001 and GDPR.

About Us
At Stena Group IT we offer opportunities for growth and career development, as well as a dynamic and collaborative work environment. We have a unique position where we deliver to all business units across Stena AB. This means we are at the intersection of delivering business technology to harness renewable energy, create smart buildings, pilot cognitive ferries, and much more in projects that make real impact. As part of Stena Group IT you will have the opportunity to work with these businesses together with nice colleagues at a company that values work-life balance and good benefits.

Read more about STENA Group IT: Not just a global Shipping company

We look forward to receiving your application!

Questions
For questions about the role: Sofia Brolin, Head of Finance & Controlling, sofia.brolin@stena.com

For questions about the process: Sofia Bergquist, HR Business Partner, sofia.bergquist@stena.com

","hiringOrganization":{"@type":"Organization","name":"Stena Bulk A/S","sameAs":"https://www.stenabulk.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"GOTHENBURG, Sweden","addressCountry":"Sweden","addressRegion":"Europe"}}}},{"@type":"ListItem","position":28,"item":{"@type":"JobPosting","title":"Cybersecurity Governance, Risk and Compliance Analyst-1","datePosted":"2025-09-08","description":"

Job Posting Closing Times: Job postings are removed from advertising at 12:00 A.M. on the closing date e.g., at midnight on the day before the closing date.

Austin Community College employees are required to maintain a domicile in the State of Texas while working for the college and throughout the duration of employment. – AR 4.0300.01

If you are a current Austin Community College employee, please click this link to apply through your Workday account.

Austin Community College is a public two-year institution that serves a multicultural population of approximately 41,000 credit students each Fall and Spring semester. We embrace our identity as a community college, as reflected in our mission statement. We promote student success and community development by providing affordable access, through traditional and distance learning modes, to higher education and workforce training, including appropriate applied baccalaureate degrees, in our service area.

As a community college committed to our mission, we seek to recruit and retain a workforce that:

Values intellectual curiosity and innovative teaching
Is attracted by the college's mission to promote equitable access to educational opportunities
Cares about student success and collaborates on strategies to facilitate success for populations including; first generation college students, low-income students, and students from underserved communities.
Focused on student academic achievement and postgraduate outcomes
Welcomes difference and models respectful interaction with others
Engages with the community both within and outside of ACC

Job Posting Title:

Cybersecurity Governance, Risk and Compliance Analyst-1

Job Description Summary:

Under the supervision of the Cybersecurity Governance, Risk, and Compliance Manager, the GRC Analyst assumes a pivotal position within the GRC team, ensuring our organization adheres to regulatory frameworks, effectively manages risks, and upholds exemplary governance standards. The GRC Analyst serves as a vital resource for staff and leadership, offering expertise in information security policy development, implementation, interpretation, and compliance. Additionally, they play a crucial role in fostering a security-first culture throughout the organization by spearheading comprehensive training and awareness programs.

Job Description:

Description of Duties and Tasks

Assists with the development of System Security Plans, Continuous Monitoring, Plan of Action and Milestones, Security Controls Assessment, Risk Exposure analysis, all in accordance with TCF/NIST requirements
Researches, recommends, and contributes to information security policies, standards, and procedure development. Assists with the lifecycle management of information security policies and supporting documents.
Manages an exception review and approval process, and assures exceptions are documented and periodically reviewed
Updates security controls and provides support to all stakeholders on information security controls covering internal assessments, regulations, and protecting FERPA and Personally Identifying Information (PII).
Assists and performs IT security control effectiveness reviews. Manage remediation efforts for the identified gaps including assessment of new or enhanced implemented controls.
Collaborates with internal teams to conduct regular assessments of information security policies, procedures, and controls to ensure compliance with relevant regulations and standards
Prepare detailed reports on assessment findings, monitor status updates, and ensure that corrective actions are implemented effectively and sustainability.
Creates information security and cyber awareness communications and training content for all employees.
Supports the development and upkeep of a measured and managed Security and Privacy training program tailored to roles, with oversight of phishing campaigns.
Keeps abreast of security industry trends, emerging threats, pertinent regulatory compliance requirements, and best practices in security.
Participates in cross-functional projects related to risk management, data protection, and security governance.
Conducts third-party supplier risk assessments to oversee supply chain risk across the supplier's lifecycle. Evaluates and communicates business risks and benefits, and enforces supplier compliance mandates.

Knowledge

Working knowledge of various Security Frameworks , primarily NIST.
Knowledge of information security management, governance, and compliance principles, practices, laws, rules and regulations.
Knowledge of information technology systems and processes, network infrastructure and data architecture
Knowledge of best practices in security training and awareness.

Skills

Skills and or/experience in developing/delivering security awareness training either directly or through managed third party providers/tools.
Skills in business process mapping and documentation as well as policy and procedure development.
Recent experience in Information Security with up-to-date knowledge of the current threat landscape.
Analytical, conceptual thinking and strategic planning skills.
Proactive self-starter with the talent to think through technical solutions to potentially open-ended problems.
Maintaining an established work schedule.
Effectively using interpersonal and communications skills.
Effectively using organizational and planning skills with attention to detail and follow-through.
Maintaining confidentiality of work-related information and materials.
Establishing and maintaining effective working relationships, including the ability to coordinate the work of others.
Strong oral and written communication skills and the ability to work well with people from many different disciplines with varying degrees of technical expertise.
Ability to prioritize assignments while working on multiple projects.

Required Work Experience

Two (2) years related experience

Preferred Work Experience

Work experience specifically in cybersecurity governance, risk and compliance or related roles.
Work experience in a Texas government or government-adjacent organization
Work experience in an institution that is FERPA regulated.
Working knowledge of the concepts of data privacy regulations, including FERPA requirements or similar regulated data classifications.

Required Education

Bachelor's degree in computer science, Information Technology, or related field
4 Years of relevant work experience may be substituted for the degree requirement

Licenses/Certifications; Other

Reliable transportation for travel in the Austin area as required.

Other Preferred Qualifications

ITIL Foundation-level certification or above preferred but not required.
Relevant certifications such as CISSP, CISA, CRISC are preferred but not required.

Physical Requirements

Work is performed in a standard office or similar environment.
Subject to standing, walking, sitting, bending, reaching, pushing, and pulling.
Occasional lifting of objects up to 10 pounds.

Safety

Work safely and follow safety rules.
Report unsafe working conditions and behavior.
Take reasonable and prudent actions to prevent others from engaging in unsafe practices.

Salary Range

$76,693 - $95,866

Number of Openings:

Job Posting Close Date:

September 23, 2025

Clery Act

As required by the US Department of Education, employees are required to report violations under Title IX and, under the Jeanne Clery Disclosure of Campus Security Policy and Crime Statistics Act (Clery Act), select individuals are required to report crimes. If this position is identified as a Campus Security Authority (Clery Act), you will be notified, trained, and provided resources for reporting.

Disclaimer

The above description is an overview of the job. It is not intended to be an all-inclusive list of duties and responsibilities of the job, nor is it an all-inclusive list of the skills and abilities required to do the job. Duties and responsibilities may change with business needs. ACC reserves the right to add, change, amend, or delete portions of this job description at any time, with or without notice. Employees may be required to perform other duties as requested, directed, or assigned. In addition, reasonable accommodations may be made by ACC at its discretion to enable individuals with disabilities to perform essential functions of the job.

","hiringOrganization":{"@type":"Organization","name":"Austin Community College","sameAs":"https://www.austincc.edu/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Highland Campus, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":29,"item":{"@type":"JobPosting","title":"Consultant - Governance, Risk and Compliance Financial Services","datePosted":"2025-09-11","description":"

Consultant – Governance, Risk and Compliance Financial Services

In KPMG, you’ll feel closer to your full potential

Do Work That Matters - Il tuo ruolo e le tue responsabilità

Vuoi fare un lavoro che sia davvero significativo e di impatto? In KPMG avrai l’opportunità di aiutare i clienti, la società, le colleghe e i colleghi ad affrontare e risolvere le sfide più attuali e complesse. KPMG Advisory offre servizi di consulenza alle imprese per affiancarle nella trasformazione del business model, nel miglioramento e nella digitalizzazione dei processi, nell'analisi e nella gestione dei rischi, nonché supporto nelle operazioni di finanza straordinaria.

In particolare, entrando a far parte del Team di Governance, Risk & Compliance di Milano potrai aiutare le aziende a trasformare i rischi in opportunità per migliorare la loro organizzazione e l’evoluzione dei loro sistemi di governance, ottenendo un vantaggio competitivo e offrendo soluzioni integrate e approcci innovativi per la gestione strategica del rischio.

Nello specifico, ti occuperai di:

Definire nuovi modelli per il customer risk profiling, name screening e transaction monitoring in ambito anti-financial crime;
Autovalutazione del rischio di riciclaggio;
Definizione dei business requirements legati a progetti innovativi (es. implementazione di prodotti e servizi ad alto contenuto tecnologico), per garantire il presidio dei rischi di riciclaggio

Come As You Are - Le tue competenze e caratteristiche

Questa opportunità è perfetta per te se:

Conosci ed hai esperienza in ambito anti-financial crime;
Hai una laurea magistrale o un Master in Economia, Finanza o Giurisprudenza;
Hai interesse per i Financial Services (settore bancario e/o assicurativo) e una buona conoscenza del framework normativo del settore finanziario;
Hai un’ottima conoscenza dell’inglese, preferibilmente con esperienze di studio e/o lavoro all’estero.

Your Future With Us - Cosa troverai in KPMG

Un ambiente di lavoro inclusivo, equo e che rispetta, incoraggia e valorizza le diversità
Un contesto stimolante e dinamico che incentiva la creatività e il lavoro di squadra
Modalità di lavoro ibrida, per promuovere un sano equilibrio tra vita lavorativa e personale
Programmi di formazione e sviluppo avanzati per rimanere sempre aggiornati
Mindset internazionale e progettualità innovative
Iniziative incentrate sul benessere psicofisico

Together for Better – I nostri valori e il nostro impegno

Leadership, lavoro in team, rispetto di ogni individualità, approfondimento continuo, trasparenza, impegno verso la comunità, integrità: questi sono i Valori di KPMG che danno vita a un ambiente aperto allo scambio di idee e di conoscenza, che permette ai nostri professionisti di esprimere tutto il loro potenziale.

Grazie all’impegno nel favorire un ambiente di lavoro inclusivo, il nostro Network risulta conforme agli standard dei requisiti ISO 30415, sul Sistema di Gestione per la Diversità e l’Inclusione, e UNI PdR 125, relativa alla parità di genere. All’interno del nostro Impact Plan - Our Impact Plan (kpmg.com) - trovi riassunte tutte le azioni concrete che stiamo portando avanti su tematiche ambientali, sociali e di governance (ESG).

Unisciti a noi!

I tuoi dati saranno trattati nel pieno rispetto delle disposizioni del Regolamento (UE) n. 679/2016 (General Data Protection Regulation - \"GDPR\") e successive modifiche. Per ulteriori informazioni, consultare l'informativa sulla privacy di KPMG.

KPMG Advisory S.p.A. garantisce le pari opportunità.

----

We don’t imagine a better future. We’re building it

In KPMG, you’ll feel closer to your full potential

Do Work That Matters - Your role and responsibilities

Do you want to pursue a profession that is truly meaningful and impactful? At KPMG, you will have the opportunity to help clients, the company, and colleagues address and solve the most current and complex challenges. KPMG Advisory offers consulting services to companies to assist them in business model transformation, process improvement and digitisation, risk analysis and management, and support in extraordinary finance transactions.

When you join the Governance, Risk, Compliance and Sustainability Services team, you will help companies transform risks into opportunities for the improvement of their organisation and evolution of their governance systems to gain a competitive edge and offer integrated solutions and innovative approaches for strategic risk management.

By joining our Governance, Risk & Compliance team in Milano, you will be involved in projects to define governance, risk management and legislative compliance strategies in the Financial Services sector.

Specifically, you will be responsible for:

Defining new models for customer risk profiling, name screening, and transaction monitoring in the anti-financial crime field;
Self-assessment of money laundering risk;
Defining business requirements related to innovative projects (e.g., implementation of high-tech products and services) to ensure the management of money laundering risks.

Come As You Are - Your Skills and Characteristics

This opportunity is perfect for you if:

You have knowledge and experience in the anti-financial crime field;
You hold a master's degree in Economics, Finance, or Law with excellent grades;
You have an interest in Financial Services (banking and/or insurance sector) and a good understanding of the regulatory framework of the financial sector;
You have excellent English skills, preferably supported by study and/or work experience abroad.

You are a problem solver and never lose sight of your goals. You have strong interpersonal skills and are a team player. Your motivation and enthusiasm inspire confidence and empower change. You enjoy taking on challenges and are comfortable in fast-changing situations where your leadership abilities make the difference.

Your Future With Us - What you’ll find at KPMG

In today’s increasingly complex and interconnected world, clients need to transform and adapt ever more rapidly. At KPMG Advisory, we focus on the main drivers of change: strategies, corporate finance, organisational processes and models, technological platforms, risk management and organisational change. Our work is uniquely challenging given its scope, complexity and importance. You will experience disruptive technologies and set the new standards that impact their security. You will have access to global opportunities and the possibility of gaining skills and expertise that will help you reach your goals.

Together for Better – Our values and commitment

Leadership, teamwork, respect for every individual, continuous learning, transparency, commitment to the community, and integrity. These are the KPMG values that create an environment that encourages the sharing of ideas and knowledge, so our professionals can achieve their full potential. As a result of our commitment to fostering an inclusive work environment, our Network complies with the standards of the ISO 30415 requirements, on the Diversity and Inclusion Management System, and UNI PdR 125, relating to gender equality. Within our Impact Plan - Our Impact Plan - you will find summarised all the concrete actions we are taking on environmental, social, and governance (ESG) issues.

Join us!

Your data will be processed in full compliance with the provisions of Regulation (EU) no. 679/2016 (General Data Protection Regulation - “GDPR”), as amended. For more information, please see KPMG’s privacy policy. KPMG Advisory S.p.A. is an equal opportunity employer.

#LI-AM1

","hiringOrganization":{"@type":"Organization","name":"KPMG","sameAs":"https://home.kpmg/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Milano, IT","addressCountry":"Italy","addressRegion":"Europe"}}}},{"@type":"ListItem","position":30,"item":{"@type":"JobPosting","title":"Cyber Security Governance, Risk and Compliance Manager","datePosted":"2025-09-10","description":"

PRIMARY DETAIL

$192,462 plus 17% employer superannuation contribution
1 Year Fixed Term Contract based at Macquarie University, Wallumattagal Campus (North Ryde)
Join a welcoming, inclusive, and collaborative team culture that values innovation, integrity, and professional growth

About the Role

Macquarie University is seeking a dynamic and experienced Cyber Security Governance, Risk and Compliance (GRC) Manager to lead the development and implementation of our cyber security GRC framework. This pivotal role ensures alignment with enterprise risk management and strategic objectives, while maintaining compliance with legal and regulatory requirements.

You will be a key advisor to senior leadership, shaping the University's cyber security posture across digital transformation, research infrastructure, and third-party engagements. This is an exciting opportunity to make a significant impact in a progressive, research-intensive university environment. This role reports to our Chief Information Security Officer.

Key Responsibilities

Lead the design and enhancement of the University’s cyber security GRC framework.
Develop and maintain cyber security policies, procedures, and the Information Security Risk Register.
Manage risk assessments, compliance audits, and control testing.
Ensure compliance with NIST CSF, ASD Essential Eight, Privacy Act, and other relevant frameworks.
Collaborate with internal and external stakeholders to align risk and compliance efforts.
Prepare reports and briefings for senior leadership and governance bodies.
Implement quantitative risk models (e.g., FAIR) to support strategic decision-making.
Provide expert advice and support across the University on cyber risk and governance.

About you

You are a strategic thinker with deep expertise in cyber security governance, risk, and compliance. You thrive in complex environments and are passionate about building a strong security culture. You bring a collaborative approach and a commitment to excellence, along with the following qualifications and experience (selection criteria):

Tertiary qualifications in Information Security, Risk Management, Business, Law, or related field

Proven track record in designing, implementing, and managing risk-based governance structures, compliance programs, and audit processes in a large, multi-faceted organisation
Strong understanding of the Australian regulatory environment, including the Privacy Act, TEQSA, Notifiable Data Breach scheme, PSPF, and critical infrastructure obligations
Experience with GRC platforms and quantitative risk models (e.g., FAIR)
Strong knowledge of ISO/IEC 27001, NIST CSF, Essential Eight, and Australian regulatory frameworks
Excellent communication skills and stakeholder engagement capabilities
Industry certifications (e.g., CISA, CRISC, CGEIT, FAIR Risk Analyst, CISSP) (Highly Desirable)

About Us

Macquarie is a university engaged with the real and often complex problems and opportunities that define our lives. Celebrating its 60th year in 2024, it was established as a bold experiment in higher education and designed to break from educational traditions to work in tandem with industry. Institutionally we strive for the extraordinary by challenging convention and embracing different views. Our pioneering culture has encouraged and inspired students, staff and collaborators to break free from conventional thinking, and to actively shape the complex issues that define the future of humanity.

Why work at Macquarie

We rank amongst the top employers in the Australian Workplace Employers Index, having recently earned a five-star rating in the QS World Rankings with the highest rating for employability.

Our prime location, we are walking distance from Macquarie University Metro Station and Macquarie Shopping Centre. Not only are we close, take a look at our benefits on offer:

17% Superannuation
Subsidised onsite parking options
Flexible working options
Training and professional development
Onsite childcare facilities
Discounted health insurance (Medibank)
Onsite vacation care
Employee Assistance Program
Subsidised membership at the Sport & Aquatic Centre
Onsite GP, imaging & physio clinics

Please note : Please note that this position will require a Criminal Record check & Qualifications check. AGSVA security clearance may be required. And We reserve the right to progress or decline an application prior to the application closing date.

If you're already part of the Macquarie Group (MQ University, U@MQ, MQ Health, MGSM), you'll need to apply through your employee Workday account. To apply for this job: Login to Workday and go to the Careers App > Find Jobs.

Applications Close:

23/09/2025 11:59 PM

A Place Where You Belong
At Macquarie, we believe diversity makes us stronger, inclusion drives our success, and belonging inspires us to do our best work. We are proud to foster a community where different backgrounds, identities, and experiences are valued, and where our people are empowered to thrive through supportive leadership, shared responsibility, and a deep commitment to genuine care and respect for our community. Find out more about our vision for a truly inclusive workplace in our Diversity, Inclusion and Belonging Framework.

Flexible Work
At Macquarie, we believe by providing flexibility in when, where and how work is done, we can support our staff to manage their personal commitments, while optimising their work performance and contributions to the University. See how we lead in flexible work to enable an outcome focused and inclusive workplace. To learn more about our culture and hiring process, visit our Jobs at Macquarie page.

","hiringOrganization":{"@type":"Organization","name":"Macquarie University","sameAs":"https://www.mq.edu.au/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Wallumattagal Campus, North Ryde, Australia","addressCountry":"Australia","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":31,"item":{"@type":"JobPosting","title":"Technical Program Manager, Risk and Compliance Engineering","datePosted":"2025-08-08","description":"

Minimum qualifications:

Bachelor's degree in a technical field, or equivalent practical experience.
5 years of experience in program management.
Experience in Governance, Risk and Compliance (GRC) domain.

Preferred qualifications:

5 years of experience managing cross-functional or cross-team projects.
Experience with Agile methodologies and enterprise software development.
Experience developing and reviewing technical requirements, design documents, setting technical goals and resolving technical tradeoffs between teams.

About the job

A problem isn’t truly solved until it’s solved for all. That’s why Googlers build products that help create opportunities for everyone, whether down the street or across the globe. As a Technical Program Manager at Google, you’ll use your technical expertise to lead complex, multi-disciplinary projects from start to finish. You’ll work with stakeholders to plan requirements, identify risks, manage project schedules, and communicate clearly with cross-functional partners across the company. You're equally comfortable explaining your team's analyses and recommendations to executives as you are discussing the technical tradeoffs in product development with engineers. \nThe Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.

Responsibilities

Create the goal for and manage projects across the product lifecycle: planning, feature prioritization, project management, testing, delivery, deployment, communication, and transition to maintenance mode.
Identify and establish metrics driven process improvements to increase team efficiency and execution.
Use your technical judgment to influence best outcomes both within the team, as well as with stakeholders and partners.
Drive product excellence through assembly of project delivery success criteria and overseeing progress towards those success metrics.
Act as the project go-to person, communicating status to leadership and stakeholders, identifying roadblocks and proposing go-forward solutions.

","hiringOrganization":{"@type":"Organization","name":"Google","sameAs":"https://www.google.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Gurgaon, Haryana, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":32,"item":{"@type":"JobPosting","title":"Information Security Coordinator for Governance, Risk and Compliance","datePosted":"2025-08-01","description":"

Company Description

Creating a future worth living for future generations gets us out of bed every morning. Depending on the project, we are consultants, implementers, or both for sustainable, innovative and economical solutions for real estate, industry, energy and infrastructure. Our more than 6,500 employees at 70 locations worldwide support our customers in interdisciplinary teams. Our thinking is both visionary and realistic. We work independently and as part of a team. With passion and the latest technologies. We unite. Join us at Dreso and let’s create a world we want to live in.

Job Description

The Information Security Coordinator for GRC is a seasoned professional with extensive expertise in Governance, Risk, and Compliance (GRC), bringing a deep understanding of global cybersecurity frameworks, regulations and best practices. With a strong track record in executing certification programs and embedding cybersecurity controls within large-scale and multinational environments, this expert role supports Drees & Sommer’s mission to ensure regulatory compliance, business continuity, and long-term information security maturity. Support yearly internal and external audit programme in alignment with the head of the department. Support the development, implementation and maintenance of the company’s BCM framework.

Core Responsibilities

GRC Execution & Advisory: Support the development and maintenance of cybersecurity governance, risk, and compliance frameworks in alignment with ISO/IEC 27001, 27701, 22301, TISAX, NIS2 and other relevant standards.
Audit Preparation & Support: Conduct and drive internal security assessments and support external audits by preparing documentation, identifying non-conformities, and ensuring implementation of corrective actions.
Policy Implementation: Draft, maintain, and ensure the correct application of cybersecurity policies and procedures based on industry standards across business units.
Risk & Control Assessment: Execute technical risk assessments and control effectiveness evaluations; support continuous improvement of risk treatment plans.
BCM Program Coordination: Support the development, implementation, and maintenance of the company’s BCM framework.
Business Impact Analysis (BIA): Assist in conducting and updating BIAs to assess the impact of potential disruptions.
Continuity Planning: Help develop and maintain business continuity and disaster recovery plans. Ensure alignment of continuity plans with information security and risk management strategies.
Compliance Monitoring: Ensure adherence to data protection regulations (e.g., GDPR), IT security laws, and internal security guidelines.
Project Involvement: Act as a cybersecurity expert in cross-functional projects, ensuring that new initiatives are aligned with cybersecurity requirements.
Documentation & Reporting: Maintain high-quality documentation for compliance purposes; support reporting to the cybersecurity steering committee or auditors.
Security Tools & Processes: Support the use of GRC tools, risk dashboards, and internal control platforms.

Qualifications

Deep knowledge of international cybersecurity standards and frameworks (ISO/IEC 27001, 27017, 27701, 22301, NIST, GDPR)
Expertise in compliance program execution and audit readiness
Practical experience with risk assessments and mitigation planning
Proficiency in policy and process implementation
Strong technical writing and documentation skills
Awareness of operational security practices in IT and industrial environments
Strong analytical thinking and attention to detail
Fluent in English is a must (equivalent to C1)

Certifications & Qualifications

Certified in ISO 27001/27701/22301 Implementer or Auditor
ITIL Certified
IPMO – International Project Management Officer

Additional Information

A dynamic and collaborative environment where cybersecurity is a strategic priority
A team that values creativity, initiative, and continuous improvement
To ensure your work-life balance, we offer the option of mobile working
We promote your professional and personal development through individual training and further education at the Drees & Sommer Academy
We support your health with a bonus for sports enthusiasts. We offer the possibility of subscribing to a private health insurance policy
Employees benefit from tax advantages related to their commuting expenses for the office
Fiscal advantages for employees expenses in meal costs during the worktime. Employee referral program with attractive bonus scheme
Supporting career and family by receiving tax benefits for kindergarten expenses

","hiringOrganization":{"@type":"Organization","name":"Drees & Sommer","sameAs":"https://www.dreso.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Málaga, AN, Spain","addressCountry":"Spain","addressRegion":"Europe"}}}},{"@type":"ListItem","position":33,"item":{"@type":"JobPosting","title":"Senior Engineer II, Governance, Risk, and Compliance (GRC)","datePosted":"2025-07-21","description":"

About this role

Strava is the app for active people. With over 150 million athletes in more than 185 countries, Strava is where connection, motivation, and personal bests thrive. No matter your activity, gear, or goals, we help you find your crew, crush your milestones, and keep moving forward. Start your journey with Strava today.

Our mission is simple: to motivate people to live their best active lives. We believe in the power of movement to connect and drive people forward.

This role is on the Strava Security Team, which exists to protect Strava’s people, business, and data through integrated, proactive security practices.

We work across all security domains, including, but not limited to, product security, vulnerability management, incident response, infrastructure, network, governance, and enterprise security.

We follow a flexible hybrid model that generally translates to around half your time on-site in our San Francisco office—roughly three days per week.

What You’ll Do:

Are passionate about embedding security, privacy, and compliance into the fabric of a high-growth platform used by millions of athletes
Thrive in roles where you can apply engineering skills to solve governance, risk, and compliance challenges—not just document them
Will have a high-leverage impact by aligning Strava’s technical environment with frameworks like: NIST CSF, SOX, and SOC 2 to support audit and IPO readiness
Are excited to build automation, evidence pipelines, and control enforcement into CI/CD workflows, cloud environments, and developer tooling
Will collaborate with Engineering, Legal, and Security teams to write policies, define controls, and drive implementation with an engineering-first mindset

You Will Be Successful Here By:

Being highly self-motivated and detail-oriented, with a strong sense of ownership over technical control implementation and audit deliverables
Translating the requirements of NIST CSF, SOX, and SOC 2 into testable technical controls embedded within infrastructure, identity systems, and software delivery pipelines
Partnering with engineering teams to design secure-by-default implementations that reduce risk while preserving speed and autonomy
Authoring and maintaining policies and standards that are grounded in reality, aligned to NIST CSF, and adaptable to a dynamic cloud-native environment
Leading evidence collection, audit preparation, and control design efforts across multiple domains in support of IPO-readiness and long-term compliance strategy

What You’ll Bring to the Team:

Have supported or led technical readiness for NIST CSF, SOX, SOC 2, or other regulatory frameworks in high-growth or pre-IPO companies
Bring deep experience writing and operationalizing security policies and procedures that map to frameworks like NIST CSF or ISO 27001
Understand how to architect and implement controls across AWS, GitHub, Okta, and Terraform, and can build automation for evidence collection and control testing
Have worked alongside developers and infrastructure teams to integrate GRC requirements into IaC, CI/CD, and identity platforms
Are comfortable scripting or using tools to automate GRC tasks such as access reviews, exception tracking, and risk reporting
Communicate clearly and proactively, driving cross-functional alignment and building trust between Security, Legal, Engineering, and external auditors

Compensation Overview

At Strava, we know our employees are the most important ingredient to our success, and our compensation and total rewards programs reflect that. We take a market-based approach to pay, and pay may vary depending on the department and your location. Salary ranges are categorized into one of three tiers based on a cost of labor index for that geographic area. We will determine the candidate’s starting pay based on job-related skills, experience, qualifications, work location, and market conditions. We may modify these ranges in the future. For more information, please contact your talent partner.

Compensation: $212,080 - $248,230. This range reflects base compensation only and does not include equity or benefits. Your recruiter can share more details about the full compensation package, including the range specific to your location, during the hiring process.

For more information on benefits, please click here.

Why Join Us?

Movement brings us together. At Strava, we’re building the world’s largest community of active people, helping them stay motivated and achieve their goals.

Our global team is passionate about making movement fun, meaningful, and accessible to everyone. Whether you’re shaping the technology, growing our community, or driving innovation, your work at Strava makes an impact.

When you join Strava, you’re not just joining a company—you’re joining a movement. If you’re ready to bring your energy, ideas, and drive, let’s build something incredible together.

Strava builds software that makes the best part of our athletes’ days even better. Just as we’re deeply committed to unlocking their potential, we’re dedicated to providing a world-class, inclusive workplace where our employees can grow and thrive, too. We’re backed by Sequoia Capital, TCV, Madrone Partners and Jackson Square Ventures, and we’re expanding in order to exceed the needs of our growing community of global athletes. Our culture reflects our community. We are continuously striving to hire and engage teammates from all backgrounds, experiences and perspectives because we know we are a stronger team together.

Strava is an equal opportunity employer. In keeping with the values of Strava, we make all employment decisions including hiring, evaluation, termination, promotional and training opportunities, without regard to race, religion, color, sex, age, national origin, ancestry, sexual orientation, physical handicap, mental disability, medical condition, disability, gender or identity or expression, pregnancy or pregnancy-related condition, marital status, height and/or weight.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

California Consumer Protection Act Applicant Notice

","hiringOrganization":{"@type":"Organization","name":"Strava","sameAs":"https://www.strava.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"San Francisco, CA","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":34,"item":{"@type":"JobPosting","title":"Director of Information Security - Governance Risk and Compliance","datePosted":"2025-08-19","description":"

Position Overview:

Fanatics is actively seeking an accomplished and motivated Director of Information Security Governance, Risk and Compliance (GRC) who shares our commitment to information security as a cornerstone in safeguarding our organization. It is an exciting opportunity to be part of a fast-paced environment that pushes you to learn while doing. This role needs to be both strategic and intensely focused on GRC with an emphasis on process, scalability, and automation to ensure our security posture aligns seamlessly with business objectives. We value experience in collaborating with key stakeholders, understanding regulatory requirements, and implementing effective security strategies.

Key Responsibilities Will Include:

Governance

Develop and maintain an information security governance framework.
Establish and enforce security policies, standards, and procedures.
Provide guidance on security best practices and industry standards.
Collaborate with executive leadership to ensure security strategies align with business objectives.

Security Risk Management

Lead the security team’s risk management efforts.
Conduct risk assessments to identify and evaluate security risks.
Develop and implement risk mitigation strategies and action plans.
Monitor and report on risk metrics and trends to senior management.

Compliance

Ensure the organization's compliance with relevant laws, regulations, certifications, assessments and industry standards including PCI-DSS, ITGCs, SOC1, SOC2, CCPA, CPRA, GDPR, among others.
Facilitate regular third-party compliance assessments and audits.
Collaborate with legal and regulatory affairs to address compliance requirements.
Stay abreast of changes in relevant laws and regulations affecting security.

Security Strategy

Contribute to the development of the organization's overall security strategy.
Provide strategic direction for security initiatives and projects.
Collaborate with other departments to integrate security into business processes.
Assess emerging technologies and trends for their impact on security.

Vendor and Third-Party Risk Management

Assess and manage security risks associated with third-party vendors.
Maintain and enhance the vendor risk management program.
Ensure third-party compliance with security standards.
Collaborate with legal to ensure third-party contracts reflect security and compliance requirements.

Reporting and Communication

Provide regular updates and reports on security, risk, and compliance to senior management.
Communicate security strategies and priorities to all stakeholders.
Act as a liaison between technical security teams and executive leadership.

Leadership

Lead and manage a team of security professionals.
Foster a collaborative and high-performing security team.
Provide mentorship and professional development opportunities.

Continuous Improvement

Identify opportunities for process improvement within the security GRC function.
Stay informed about industry trends and best practices.
Implement continuous improvement initiatives to enhance security posture.

Values and Behaviors

Demonstrate entrepreneurial spirit, strong communication skills, humility, and comfort working in and contributing to a dynamic and cross-functional team environment.

Who you are

10+ years of experience in information security (or 6 years of experience and a relevant bachelor’s degree), with a focus on GRC.
Strong understanding of governance, quantitative risk management, and compliance frameworks.
Experience in collaborating with and influencing key stakeholders.
Strong technical background including full-stack software development, system architecture, and security fundamentals.
Relevant certifications (e.g. CISSP, CISM, CRISC, CISA, CIPP/US) preferred.
Exceptional communication skills and the ability to convey complex security concepts to non-technical stakeholders.

\n\n Fanatics is building a leading global digital sports platform. We ignite the passions of global sports fans and maximize the presence and reach for our hundreds of sports partners globally by offering products and services across Fanatics Commerce, Fanatics Collectibles, and Fanatics Betting & Gaming, allowing sports fans to Buy, Collect, and Bet. Through the Fanatics platform, sports fans can buy licensed fan gear, jerseys, lifestyle and streetwear products, headwear, and hardgoods; collect physical and digital trading cards, sports memorabilia, and other digital assets; and bet as the company builds its Sportsbook and iGaming platform. Fanatics has an established database of over 100 million global sports fans; a global partner network with approximately 900 sports properties, including major national and international professional sports leagues, players associations, teams, colleges, college conferences and retail partners, 2,500 athletes and celebrities, and 200 exclusive athletes; and over 2,000 retail locations, including its Lids retail stores. Our more than 22,000 employees are committed to relentlessly enhancing the fan experience and delighting sports fans globally.","hiringOrganization":{"@type":"Organization","name":"Fanatics","sameAs":"https://www.fanaticsinc.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":35,"item":{"@type":"JobPosting","title":"Information Security - Governance, Risk, and Compliance (GRC) Director","datePosted":"2025-08-28","description":"

Job Location

CINCINNATI GENERAL OFFICES

Job Description

Information Technology at Procter & Gamble is where business, innovation and technology integrate to build a competitive advantage for P&G. Our mission is clear -- we deliver IT to help P&G win with the over 5 billion consumers we serve worldwide. Our IT professionals are diverse business leaders who apply IT expertise to deliver innovative, tech-focused business models and capabilities for our 65 iconic, trusted brands.

From Day 1, you’ll be trusted to dive right in, take the lead, use your initiative, and build billion-dollar brands that help make everyday activities easier and make the world a better place! Our company offers purposeful work that will take your career places you never envisioned, in creative workspaces where innovation thrives and where your technical expertise is recognized and rewarded.

The Opportunity

P&G is seeking a Governance, Risk, and Compliance Director passionate about safeguarding data, enabling business through smart risk management, and shaping the future of cybersecurity. The IT Governance, Risk, and Compliance (GRC) Organization at Procter & Gamble is responsible for risk identification, assessment, and remediation across the IT landscape, as well as driving automated governance and compliance breakthroughs. As the GRC expert, you’ll play a critical role in maturing and maintaining the security risk and compliance posture of our organization. You will lead initiatives that align our security program with business goals, ensure regulatory and policy compliance, and creatively solve problems to manage risk for the company.

Responsibilities:

Governance:
- Maintain and evolve the information security policy framework and controls aligned with industry best practices (e.g., NIST, ISO 27001, CIS).
- Establish and track metrics to measure policy adherence and program maturity.
- Drive internal alignment on security roles, responsibilities, and expectations.
Risk Management:
- Manage the enterprise risk management process including risk identification, analysis, treatment planning, and reporting.
- Conduct security risk assessments for internal systems, projects, vendors, and business processes.
- Facilitate risk-based decision-making at all levels of the organization.
Compliance:
- Ensure ongoing compliance with applicable regulations and frameworks (e.g., GDPR, HIPAA, CCPA, SOX).
- Maintain a library of evidence and documentation to support audit and regulatory needs.
- Monitor the effectiveness of IT controls and identify gaps in compliance. Analyze control measurements for negative trends and reoccurrence frequency. Collaborate with internal/external auditors on compliance audits, audit findings, and issue remediation
Awareness & Enablement:
- Contribute to the continuous improvement of the risk and compliance mindset across P&G. Build IT risk awareness by providing support and training to others.
- Collaborate cross-functionally with IT, Legal, Privacy, and Business Operations teams.
- Stay up to date with how current events, security focus areas, and the regulatory environment may impact P&G’s compliance processes

Estimated Percent of Time Spent on Work

25% - Risk identification, analysis, and assessment

40% - Plan and drive enterprise-wide initiatives to reduce risk and improve compliance across the organization

25% - Assess and improve the effectiveness of IT controls and compliance across the enterprise

10% - Collaboration with internal/external auditors, driving a risk-aware compliance mindset

Job Qualifications

Required:

Bachelor's degree in Computer Science, Computer Systems Engineering, Cybersecurity, Industrial Engineering, Business Management Information Systems, Software Development, or related field
8+ years of experience in Information Security with a focus on Governance, Risk, and Compliance.
In-depth knowledge of major security frameworks (e.g., NIST CSF, ISO 27001, SOC 2).
Experience conducting risk assessments, audits, and control testing.
Strong understanding of regulatory compliance requirements (e.g., GDPR, HIPAA, SOX, PCI DSS).
Proven ability to write policies, manage documentation, and communicate clearly to both technical and non-technical stakeholders.
Ability to influence and build relationships with business unit stakeholders, external service providers, and architecture teams.
The ability to work independently, collaborate, and learn quickly.
English fluency (speak, write, and read)
Ability to work onsite in Cincinnati, OH based offices 3 days per week.

Preferred Skills:

Certified in CISSP, ISACA CRISC, CGEIT, CISA, or similar.
A history of solving compliance problems with creative solutions.

Pay Range: $160,000 - $220,000

Compensation for roles at P&G varies depending on a wide array of equal opportunity factors including but not limited to the specific office location, role, degree/credentials, relevant skills, and level of experience. At P&G compensation decisions are dependent on the facts and circumstances of each case. Total rewards at P&G include salary + bonus (if applicable) + benefits. Your recruiter may be able to share more about our total rewards offerings and the specific salary range for the relevant location(s) during the hiring process.

Our company is committed to providing equal opportunities in employment. We value diversity and do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Immigration Sponsorship is not available for this role. For more information regarding who is eligible for hire at P&G along with other work authorization FAQ’s, please click HERE.

P&G participates in e-verify as required by law.

Qualified individuals will not be disadvantaged based on being unemployed.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Job Schedule

Full time

Job Number

R000136880

Job Segmentation

Experienced Professionals

Starting Pay / Salary Range

$160,000.00 - $220,000.00 / year","hiringOrganization":{"@type":"Organization","name":"Procter & Gamble","sameAs":"https://pg.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"CINCINNATI GENERAL OFFICES, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":36,"item":{"@type":"JobPosting","title":"Head of Cyber Security Governance, Risk and Compliance","datePosted":"2025-08-27","description":"

We are currently recruiting for a Head of Cyber Security Governance, Risk and Compliance, reporting to the Global Chief Information Security Officer (CISO), to lead our Governance, Risk and Compliance teams, ensure Tunstall is protected from cyber threats and support our business to innovate, grow, and flourish under secure conditions.

This is an incredibly exciting time to join Tunstall as we embark on an exciting period of transformation. You will be joining a recently created and growing global Information Security team within Tunstall and play a key part in the success of this transformation.

This role would be based at our Madrid office working on a hybrid basis. We are flexible on number of days in the office, and on location and would consider applications from people who can work at one of our other European offices (Malmo, Sweden or Manchester or Yorkshire in the UK).

Please can you ensure your CV is uploaded in English so the team can review.

What will you be doing in this role?

As our Head of Governance, Risk and Compliance (GRC), you will build a highly engaged and trained team with the required capabilities and competencies to ensure proper governance of our security functions globally, that cyber risks are properly addressed, and Tunstall meets all required regulatory and compliance requirements for the business to operate.

Leading the development and implementation of a comprehensive corporate cybersecurity policies, standards, and procedures, ensuring they are current, relevant, and communicated effectively across the organisation is key to the success of this role.

Whilst this is a senior position, it will require hands on work as well, so you must be happy to work at the strategic, tactical and operational level as required.

The Ideal candidate:

To be successful in this role you will have substantial experience in cybersecurity, with proven experience as a leader in governance, risk and compliance within complex, multinational organisations. You will have a deep understanding of the cybersecurity market, trends, risk frameworks, and security standards and regulations.

With a naturally collaborative style, excellent written and verbal communication skills, and an analytical mindset, you will be able to engage and influence senior stakeholders globally. You will be an effective people manager, able to coach and motivate a team, driving high performance. The ability to navigate within varying operational levels from the functional to the strategic is vital to the success of this role.

In addition, you will be proactive, with a high attention to detail, taking ownership of tasks, able to solve problems effectively, and be tenacious in your approach to ensure completion of tasks and projects to time and of required quality.

What we offer:

Hybrid Working,
Competitive salary + potential bonus,
Boost your learning and growth through access to a Talent Library with over 800 courses, and access to Udemy or O’Reilly learning platforms,
A warm and welcoming team environment and a chance to build a rewarding career.

Some of your key tasks will be…

Build a highly engaged and trained team with the required capabilities and competencies to achieve the stated mission,
Coordinate, drive direction and oversee the team to ensure that the outcome and achievements of the team are aligned with the overall information security strategy and the business objectives,
Lead the development and implementation of comprehensive corporate cybersecurity policies, standards, and procedures, ensuring they are current, relevant, and communicated effectively across the organisation,
Oversee the application of the global risk management framework in all countries and businesses,
Align and influence the business and technology areas in the countries and at Group level to adopt and follow the global framework,
Own the key performance indicators (KPIs) and metrics that help InfoSec to measure and communicate our risk posture consistently in operational and high-level forums, including to the Board,
Ensure security compliance and audit requirements are planned and met in all regions,
Oversee the security culture, training and awareness programmes and support the Lead in building partnerships and influencing business and technology areas,
Support the Global CISO in managing the overall InfoSec budget and strategic plans and initiatives, and oversee operational activities of the GRC team, aligning those with the Global InfoSec and Tunstall Technology Group budget and plans,
Report in senior-level forums about the performance and key activities conducted by the GRC function,
Provide guidance to senior stakeholders on emerging security and privacy regulatory requirements,
Influence stakeholders in technology areas and the business to transform current ways of working and priorities towards becoming a secure organisation,
Partner with technology and business leaders to integrate GRC initiatives with broader business objectives,
Keep a constant innovative, challenging and constructive attitude towards continuous improvement.

Key skills and experience:

Substantial experience in cybersecurity roles, with proven experience as a leader in governance, risk and compliance,
Previous experience in senior management positions in complex, multinational organisations,
Deep understanding of the cybersecurity market, trends, risk frameworks and security standards and regulations,
Excellent written and verbal communication skills,
Strong background in governance, risk management or compliance areas, and ability to work at high level whilst paying attention to the details,
Ability to manage complexity and make decisions with limited information or under uncertainty,
Bachelor’s degree in a technical or non-technical discipline, or equivalent experience,
You must be able to communicate effectively in English (ie CEFR C1).

Desirable skills and experience:

Spanish or Swedish language skills

If you are not sure if you have the relevant skills or experience, then please apply (only takes a few minutes) and let our team review and come back to you.

A bit about us:

Tunstall is a market-leading health and care technology provider.

We’re passionate about ensuring our team reflects the brilliant and unique qualities of the people and communities we support. Our incredible team of more than 3,000 colleagues provides life saving and life changing technology and services to millions of people in 18 different countries.

At Tunstall you’ll find a place where you’re valued and celebrated for being yourself. We empower our people to deliver the very best teamwork, innovation and thought leadership by creating an environment where we champion diversity and inclusion. We demonstrate our commitment to diversity and inclusion at each step. From our open, fair, and transparent recruitment processes, through to the many development and career growth opportunities we provide.

Each Tunstall colleague has a superpower… they’re unique. No one else is them, and we think that’s special. Come and join our mission and be part of our team, our One Tunstall team.

","hiringOrganization":{"@type":"Organization","name":"Tunstall Group","sameAs":"https://www.tunstall.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Madrid, Spain","addressCountry":"Spain","addressRegion":"Europe"}}}},{"@type":"ListItem","position":37,"item":{"@type":"JobPosting","title":"Identy Governance, Risk and Compliance Specialist, Cyber Security","datePosted":"2025-09-04","description":"

Haluatko olla mukana rakentamassa turvallisempaa digitaalista maailmaa osana OP Ryhmän kyberturvallisuuden asiantuntijajoukkoa? Etsimme nyt Kehittäminen ja Teknologiat -yksikköömme Identity Governance, Risk and Compliance Specialistia, joka innostuu vaatimustenmukaisuuden kehittämisestä ja haluaa vaikuttaa siihen, miten identiteetinhallinta toteutuu vastuullisesti ja tehokkaasti Suomen suurimmassa finanssitalossa.

Tarjoamme sinulle merkityksellisen työn, mahdollisuuden kasvaa alan ammattilaisena sekä osaavat kollegat tueksesi – aivan kyberturvallisuutemme ytimessä.

Millainen tehtävä on kyseessä?

Tässä roolissa toimit keskeisessä asemassa tukemassa liiketoimintayksiköitä identiteetin- ja pääsynhallinnan (IAM) vaatimustenmukaisuuden varmistamisessa. Vastaat IAM-alueen GRC-prosessien ylläpidosta ja kehittämisestä sekä seuraat lainsäädännön ja standardien muutoksia, tuoden ne käytännön toimintaan. Lisäksi ylläpidät heimon tilannekuvaa vaatimustenmukaisuudesta ja osallistut aktiivisesti jäännösriskien hallintaan.

Teet tiivistä yhteistyötä muiden asiantuntijoiden kanssa ja pääset vaikuttamaan siihen, miten IAM-alueen vaatimustenmukaisuutta kehitetään pitkäjänteisesti. Tehtävä sijoittuu Vallilaan Helsinkiin, ja kuten muuallakin OP:lla, yhdistämme arjessamme joustavasti sekä lähi- että etätyöskentelyä.

Mitä odotamme sinulta?

Toivomme, että sinulla on aito kiinnostus ja sisäinen palo GRC-alueeseen IAM-kontekstissa. Sinulla on vähintään kolmen vuoden kokemus identiteetin- ja pääsynhallinnan tehtävistä, ja ymmärrät hyvin finanssialan keskeisiä vaatimuksia.

Olet toiminut monialayhtiöiden ympäristöissä ja sinulla on kokemusta laajoista järjestelmäkokonaisuuksista. Osaat seurata ja tulkita lainsäädännön sekä standardien muutoksia ja kytkeä ne käytännön IAM-toimintaan. Lisäksi sinulle on luontevaa tarttua havaitsemiisi puutteisiin ratkaisukeskeisesti – et vain osoita ongelmaa, vaan osallistut aktiivisesti sen pysyvään ratkaisemiseen.

Miksi OP:lle?

Olemme yksi Suomen suurimpia IT-taloja ja tuotamme asiakkaille näkyvät IT-ratkaisut pääosin itsenäisesti alusta loppuun. Siksi meiltä löytyy tuhansia alan osaajia ja esimerkiksi koodarikulttuuri näyttäytyy vahvana. Voit käydä tutustumassa eri tekemisiimme OP Tech podcastin kautta.

Osaava ja hyvinvoiva henkilöstö on meillä kaiken keskiössä ja haluamme tarjota osaajillemme mahdollisuuden kehittää urapolkuaan haluamaansa suuntaan. Käytössämme oleva 70:20:10-malli tarjoaa mahdollisuuden osaamisen syventämiseen ja uuden oppimiseen. Tätä toteutamme esimerkiksi OP Ryhmän oman Tech Academyn sekä räätälöityjen koulutuspolkujen muodossa. Lisäksi omaa asiantuntijuutta on mahdollista kehittää sisäisten uramahdollisuuksien ja työkiertojen avulla.

Haluamme mahdollistaa joustavan työn ja vapaa-ajan tasapainon esimerkiksi hybridityön avulla. Tarjoamme myös kattavat työsuhde-edut, kuten alennukset vakuutus- ja pankkipalveluista. 

Lisätiedot ja hakuohjeet

Hae tehtävään rekrytointijärjestelmämme kautta viimeistään sunnuntaihin 14.9.2025 mennessä rekrytointijärjestelmämme kautta. Käsittelemme hakemukset hakuajan päätyttyä. Lisätietoja tehtävästä antaa Competence Lead Kati Niemi (puh. 040 079 2167). Tavoitat Katin parhaiten aikoina to 4.9. klo 14.00 - 15.00 sekä ke 10.9. klo 10.00 - 11.00.

Finanssialalla luottamus ja vastuullisuus ovat toimintamme perusta, minkä vuoksi tehtävään valittavalta henkilöltä tarkistetaan luottotiedot, yritysyhteydet ja mahdolliset eturistiriidat, teetetään huumausainetesti sekä suojelupoliisin teettämä perusmuotoinen turvallisuusselvitys.

OP Ryhmä – Meillä on jotain yhteistä

OP Ryhmä on monimuotoisuutta ja yhdenvertaisuutta kunnioittava työyhteisö. Meille on tärkeää, että jokainen tuntee olonsa tervetulleeksi ja arvostetuksi. Arvostamme erilaisuuden mukanaan tuomaa rikkautta ja monipuolisia näkökulmia. Kannustamme kaikkia hakemaan meille töihin, sillä meillä on jotain yhteistä. Hienoa, että haluat mukaan yhteiselle matkallemme.

Olemme asiakkaidemme omistama, finanssialan vetovoimaisin työnantaja Suomessa. Ryhmässämme työskentelee yli 14 000 alan ammattilaista. Perustehtävämme on edistää omistaja-asiakkaidemme ja toimintaympäristömme kestävää taloudellista menestystä, turvallisuutta ja hyvinvointia. Meillä työskentely on merkityksellistä sekä työntekijöillemme että muille, sillä Suomen suurimpana finanssiryhmänä rakennamme työllämme toiveikkaampaa tulevaisuutta. Sitä olemme tehneet jo yli 120 vuoden ajan.

#LI-KY1 #LI-Hybrid

","hiringOrganization":{"@type":"Organization","name":"OP Financial Group","sameAs":"https://www.op.fi/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Helsinki, FI","addressCountry":"Finland","addressRegion":"Europe"}}}},{"@type":"ListItem","position":38,"item":{"@type":"JobPosting","title":"Technical Program Manager III, Risk and Compliance, Core","datePosted":"2025-09-05","description":"

Minimum qualifications:

Bachelor's degree in a technical field, or equivalent practical experience.
5 years of experience in program management.
Experience with enterprise software development integration, release, etc.

Preferred qualifications:

5 years of experience managing cross-functional or cross-team projects.
Experience with building Software as a Service (SaaS) platforms.
Understanding of the Governance, Risk and Compliance (GRC) domain.
Ability to distill complex technical concepts into clear, actionable insights for leadership.
Excellent executive communication skills.

About the job

Google's projects, like our users, span the globe and require managers to keep the big picture in focus while being able to dive into the unique engineering challenges we face daily. As a Technical Program Manager at Google, you lead complex, multi-disciplinary engineering projects using your engineering expertise. You plan requirements with internal customers and usher projects through the entire project lifecycle. This includes managing project schedules, identifying risks and clearly communicating them to project stakeholders. You're equally at home explaining your team's analyses and recommendations to executives as you are discussing the technical trade-offs in product development with engineers.

Using your extensive technical and leadership expertise, you manage projects of various size and scope, identifying future opportunities, improving processes and driving the technical directions of your programs.

As a Technical Program Manager, you will help us build the tools, components, and patterns that enable hundreds of developers and designers to create user experiences and next-generation capabilities in the Risk and Compliance Engineering space. You will be skilled at streamlining communications in a fast-moving environment, and driving complex, multi-year programs to success.The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.
The US base salary range for this full-time position is $156,000-$229,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.
Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.
The US base salary range for this full-time position is $156,000-$229,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.

Responsibilities

Partner with Engineering, Product Management, and UX to define the program strategy and roadmap. Translate high-level business goals into a clear, actionable technical plan and be the go-to expert for how our programs will evolve.
Manage the end-to-end program life-cycle from ideation to launch. Be responsible for project scoping, resource allocation, risk management, and ensuring timely delivery of complex, cross-functional initiatives.
Advocate for new technologies, process improvements, and architectural changes.
Build strong, collaborative relationships with a wide range of technical and business stakeholders. Be the connective tissue, ensuring alignment and clear communication across all teams.
Identify and establish metrics driven process improvements to increase team efficiency and execution.

","hiringOrganization":{"@type":"Organization","name":"Google","sameAs":"https://www.google.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"New York, NY, USA","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":39,"item":{"@type":"JobPosting","title":"Program Manager, Risk and Compliance, Extended Workforce Solutions","datePosted":"2025-09-02","description":"

Minimum qualifications:

Bachelor's degree or equivalent practical experience.
7 years of experience working in a program or project management, with a proven track record of delivery in a risk or compliance domain.
Experience in program/project management with contingent/extended workforce.
Experience in interpreting policies or providing advice on policy compliance.

Preferred qualifications:

Experience executing on large complex projects and initiatives on time and with a focus on quality of execution.
Experience in identifying and assessing risks across a variety of domains, which arise from engagement of a large, global contingent workforce, such as in employment and labor, privacy law compliance, business continuity, or cyber/information security.
Understanding of industry norms and best practices with respect to risk mitigation in the extended workforce at scale.
Ability to influence horizontally across multiple stakeholder groups and to overcome obstacles.
Excellent investigative and problem solving skills.

Excellent investigative and problem solving skills.Excellent investigative and problem solving skills.

About the job

gTech's Extended Workforce Solutions (xWS) team empowers Product Areas (PAs) to optimize outsourced operations while reducing risks and driving efficiency through the enforcement of Google best practices and policies. We advocate for informed decision-making, ensuring our partners find the right talent in the right locations. Our collaboration across Google leads to streamlined processes, minimizing administrative burdens and optimizing the extended workforce (xW) experience. We ensure Google's policies and guidelines are consistently adhered to.

The Risk and Compliance (R&C) team within Extended Workforce Solutions (xWS) is responsible for ensuring that Google complies with all laws and regulations applicable to its contingent workforce globally. The team does this by identifying and assessing risks, setting requirements, designing and assessing controls, ensuring governance, and conducting testing and auditing. Risk and Compliance equips, enables, and empowers Googlers to achieve success while protecting Google's brand and reputation. The team is a second line of defence at Google, working with other teams to ensure that Google is compliant with all applicable laws and regulations.

In this role, you will make substantial contributions to projects aimed at mitigating the legal, reputational, and financial risks that flow from engaging a large extended workforce. Co-employment and labour claims are a key area of focus, along with other risk domains that we determine should be addressed. You will assess risk in a variety of commercial relationships across many jurisdictions and work with businesses and stakeholders to mitigate the risk and develop a path to compliance, as well as propose scaled solutions when wide ranging or programmatic risks are identified.In this role, you will make substantial contributions to projects aimed at mitigating the legal, reputational, and financial risks that flow from engaging a large extended workforce. Co-employment and labour claims are a key area of focus, along with other risk domains that we determine should be addressed. You will assess risk in a variety of commercial relationships across many jurisdictions and work with businesses and stakeholders to mitigate the risk and develop a path to compliance, as well as propose scaled solutions when wide ranging or programmatic risks are identified.

Responsibilities

Support and mature a variety of risk and compliance programs and domains.
Support in planning, designing and implementation of a variety of risk mitigation initiatives.
Collaborate, communicate, educate and influence policy, process and control owners throughout Google and at different levels to improve process and controls to mitigate risks.
Support in the assessment and mitigation of the risks arising from policy and regulatory requirements as they pertain to Google’s contingent workforce.

","hiringOrganization":{"@type":"Organization","name":"Google","sameAs":"https://www.google.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Dublin, Ireland; London, UK","addressCountry":"Ireland","addressRegion":"Europe"}}}},{"@type":"ListItem","position":40,"item":{"@type":"JobPosting","title":"Risk and Compliance Manager","datePosted":"2025-07-15","description":"

KEY AREAS OF ACCOUNTABILITY:

General Risk & Compliance:\n

Develop and lead the implementation of a Risk-Based Annual Compliance and Assurance Work Plan.
Conduct reviews across finance, procurement, HR, awards, and supply chain to ensure strong internal controls.
Visit field offices to assess risk mitigation and operational practices.
Perform procurement and asset reviews, surprise stock and cash counts.
Maintain SCARF, FRA, and Top Risk registers with regular reporting.
Issue and follow up on compliance reports with actionable recommendations.
Escalate unresolved issues to regional/global teams or the Country Director.

Investigations and Counter-Fraud:\n

Support and coordinate investigations into fraud, bribery, corruption, and misconduct.
Ensure investigations are timely, high quality, and in line with SCI protocols.
Deliver fraud awareness sessions to staff, partners, and suppliers.

Liaise with regional fraud units and manage reporting obligations

Partner Compliance & Capacity Building:\n

Oversee partner assessments using the Partner Assessment Tool (PAT).
Conduct periodic compliance reviews and build partner capacity on SCI standards.

Team Management & Development\n

Provide direct line management, coaching, and day-to-day support to the Risk & Compliance Coordinator and Risk & Compliance Officer, ensuring clear objectives, regular performance feedback, and professional growth.
Develop and implement a structured capacity-building plan for the team, tailored to evolving needs in compliance, risk management, fraud prevention, and SCI systems.
Foster a collaborative and learning-focused team environment that encourages innovation, integrity, and accountability.
Ensure the team is equipped with the necessary tools, resources, and training to perform high-quality compliance reviews, risk assessments, and partner support.
Lead regular team meetings, learning sessions, and cross-learning with other CO and regional compliance functions.

","hiringOrganization":{"@type":"Organization","name":"Save the Children International","sameAs":"https://www.savethechildren.net/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Sudan","addressCountry":"Sudan","addressRegion":"Africa"}}}},{"@type":"ListItem","position":41,"item":{"@type":"JobPosting","title":"Risk and Compliance Specialist","datePosted":"2025-07-21","description":"About the Role
We are looking for a Risk & Compliance Specialist to join our team to safeguard OnlinePajak’s product lines by proactively identifying, analyzing, and mitigating fraud and compliance risks. This involves acting as a key subject matter expert, developing robust prevention strategies, ensuring strict adherence to regulatory requirements, and providing critical insights to leadership to maintain a secure and compliant environment while supporting business growth.

Job Description:

Become the go-to risk and compliance representative for specific product lines, working closely with business teams to understand their unique challenges
Investigate and deep-dive into risk-related issues through thorough reviews and data analysis
Develop and implement strong systems to monitor key fraud indicators
Track risk metrics diligently, understanding their root causes and impact on business performance
Optimize fraud prevention rules to achieve the best balance between risk mitigation and business growth, hitting defined risk targets
Design fraud platform solutions that cater to various product lines while ensuring a consistent and positive customer experience
Ensure strict adherence to local regulations (OJK, BI), including Know Your Customer (KYC), Anti-Money Laundering (AML), and all reporting requirements
Collaborate proactively with compliance and legal teams to anticipate upcoming regulatory changes and develop compliant processes
Manage and audit internal policies related to data privacy, partner due diligence, and consumer protection
Integrate robust fraud controls into user workflows and backend systems, working closely with product, engineering, and operations teams
Serve as the primary point of contact for fraud defense, representing the risk team during internal reviews and external audits
Develop compelling dashboards and provide insightful reports to leadership on fraud trends, exposure, and mitigation strategies

Job Requirements

5 years of experience in risk management, fraud prevention, or compliance, ideally in fintech
Deep understanding of PPATK regulations, AML/CFT compliance obligations, and Know Your Customer (KYC) implementation
Specific experience managing the end-to-end PJP license submission process (including PJP Category 1 or Category 2 etc., as applicable)
Hands-on experience with fraud investigation, transaction monitoring, and risk control implementation.
Knowledge of regulatory requirements such as KYC, AML, BI reporting, and data protection best practices.
Ability to work independently, prioritise effectively, and communicate clearly across teams
Excellent communication skills with the ability to influence across product, ops, and leadership
Experience building or working with early-stage finance/transaction stack product
Indonesian regulatory knowledge or experience working with BI filings

","hiringOrganization":{"@type":"Organization","name":"OnlinePajak","sameAs":"https://www.online-pajak.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Jakarta, South Jakarta, Indonesia","addressCountry":"Indonesia","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":42,"item":{"@type":"JobPosting","title":"Risk and Compliance Manager","datePosted":"2025-08-06","description":"

ABOUT ALU

ALU provides higher education for a higher purpose. Our students declare missions, not majors.
They develop the real-world skills to take on the world’s most pressing challenges. And they take ownership of their learning from day one through our peer and student-led approach – because ALU believes in the power and agency of young people to start shaping the future right now.
Together with a world-class faculty and staff, our students are igniting a ripple of positive impact across Africa and the world.

We are dedicated to fostering an open yet secure environment, balancing the safety of students, staff, and visitors with respect for individual rights, and safeguarding responsibilities.

HOW WE WORK

The ALU Team works in starkly different ways to traditional academic bureaucracies. We approach education from first principles, empower individuals to design, test, and implement creative new ideas, and work closely together to craft transformative learning experiences. We are deeply passionate about our students and excited by the challenge of building something entirely new.

The African Leadership University is committed to ensuring the safety and Well-being of all students under our care. As part of this commitment , we have a comprehensive safeguarding policy in place , which outlines our Zero-tolerance approach to any violation of safeguarding.

ABOUT THE TEAM

The Integrity, Risk, and Assurance Office at ALU operates as an independent, cross-functional unit that champions ethical conduct, operational accountability, and institutional excellence. Our mandate is to safeguard members of the ALU Community by upholding our standards, regulations, culture, values, and credibility through rigorous oversight, proactive risk management, and high-integrity operations.

We ensure the organisation is operating effectively, ethically, and in compliance with internal standards and external regulatory requirements, from how we contract with vendors to how we uphold transparency and mitigate risk.

The team leads frameworks for ethics, quality assurance, internal controls, and operational risk, ensuring leadership has clear visibility into how the institution functions and how it can improve.

ABOUT THE ROLE

The Manager: Risk and Compliance will provide enterprise-wide oversight of ALU’s operational integrity, spanning governance and ethics, internal controls, procurement, and risk management. The role will lead the development and continuous refinement of systems, processes, and frameworks that ensure ALU meets its commitments to ethical behaviour, regulatory compliance, financial prudence, and operational excellence.

This is both a strategic and hands-on role. You will design governance, risk and compliance processes, advise on high-risk operations (e.g., vendor contracting), and ensure that internal controls are in place and continuously improving. You will also oversee ethics case management, provide guidance on sensitive investigations, and prepare the organisation for audits and certifications such as ISO.

KEY RESPONSIBILITIES

Ethics & Case Oversight

Works closely with the Board, ExCO and the Legal, Finance, People & Culture and Student Delivery teams within ALU to ensure governance and compliance at all levels.
Serve as the primary point of contact for confidential ethics concerns, reports, and complaints from ALU stakeholders.
Conduct preliminary assessments of ethics claims, ensuring fairness, professionalism, and confidentiality.
Oversee and coordinate impartial investigations in collaboration with relevant internal or external parties.
Guide mediation and resolution strategies that fairly consider the rights and responsibilities of all parties.
Build trust in ALU’s reporting mechanisms and promote an internal culture of accountability and ethical leadership.

Risk Management & Scenario Planning

Lead organisation-wide risk identification, mapping, and mitigation planning across academic, operational, financial, and reputational domains.
Design risk management frameworks, escalation pathways, and decision trees for key operational processes.
Develop, maintain, and lead the implementation of a Business Continuity Plan (BCP) to ensure critical operations can continue or resume rapidly in the event of disruption.
Coordinate cross-functional risk reviews and advise the Senior Leadership Team on emerging or unmanaged risks.

Internal Controls & Assurance

Establish and lead ALU’s internal controls function, developing scopes, executing reviews, and recommending remediation plans.
Monitor internal controls and recommend improvements in contracting, procurement, finance, data management, and HR practices.
Ensure compliance with internal policies, donor/funder requirements, and applicable regulatory standards.
Report independently to senior leadership and the Board on internal audit findings, gaps, and status of corrective actions.

Process Governance

Oversee the Ethics Committee, Disciplinary Committee, Whistleblowing, and Safeguarding processes and policies, ensuring relevant resourcing, training and information is in place for effective management of student, staff and other key stakeholder requirements.
Design and oversee implementation of Standard Operating Procedures (SOPs) and Service Level Agreements (SLAs) across core operational areas.
Evaluate ALU’s systems and processes for consistency, effectiveness, and alignment with institutional goals.
Collaborate with teams to implement corrective or improvement measures, ensuring continuous quality enhancement.
Oversee readiness for ISO and other certification processes relevant to ethics, quality, and compliance.

Vendor Contracting & Procurement Oversight

Provide risk and quality oversight to the contracting process, from vendor due diligence to performance monitoring.
Develop procurement risk guidelines and frameworks, ensuring alignment with global best practices and ALU values.
Monitor procurement-related compliance and audit vendor relationships for risk exposure or ethical concerns.

REQUIRED EXPERIENCE

8–10 years in roles spanning risk management, ethics/compliance, quality assurance, internal audit, or legal operations.
At least 3 years in a senior or cross-functional role with exposure to governance, operational design, and stakeholder reporting.
Proven track record in designing and implementing audit, compliance, or quality frameworks in complex environments.
Experience managing confidential investigations or ethics casework is highly advantageous.
Familiarity with ISO, regulatory audits, or donor-funded program requirements is a strong plus.
Experience working in diverse, multi-country or fast-scaling environments is preferred.

REQUIRED COMPETENCIES

Functional

Internal Audit & Control: Designing and executing risk-based audits and internal controls.
Process Improvement: Building scalable systems and policies to support institutional performance.
Risk Management: Identifying enterprise risks and leading mitigation or response strategies.
Ethics & Governance: Leading ethics case management with discretion, sensitivity, and legal awareness.
Quality Assurance: Driving organisation-wide performance standards and operational excellence.
Data-Driven Reporting: Developing dashboards and reports that highlight trends, gaps, and institutional risk posture.

Soft Skills

Integrity & Trust: A reputation for confidentiality, fairness, and sound judgment.
Influence & Collaboration: Strong interpersonal skills to engage senior leaders, external vendors, and internal teams.
Analytical Thinking: High capacity to connect the dots, identify systemic issues, and recommend pragmatic solutions.
Calm Under Pressure: Poise in managing high-stakes issues and navigating ambiguity with professionalism.
Change Orientation: Comfortable driving improvements and leading stakeholders through process changes.

Location: Remote within CAT Time Zone

","hiringOrganization":{"@type":"Organization","name":"ALU","sameAs":"https://www.alueducation.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Remote"}}}},{"@type":"ListItem","position":43,"item":{"@type":"JobPosting","title":"Risk and Compliance Leader","datePosted":"2025-08-14","description":"

Company Description

Is this the next step in your professional development? You see things a little differently. So do we. We put togetherness at the heart of everything we do. Come see things a little differently with us.

IKEA Älmhult AB is a company within Inter IKEA Group with a unique role to support the positioning of “IKEA in Älmhult” and the development of Älmhult as an attractive and great place to work, live and visit. The three main areas of assignment are Inter IKEA Group in Sweden assignments, Public affairs Inter IKEA Group in Sweden with special focus on IKEA Älmhult AB (including the Hotel, Museum and Aktivitetshuset) and Holding company for IKEA Property.

Job Description

In this position you are responsible to lead and deliver into the long-term Risk and Compliance plan for IKEA Älmhult AB. Together with your stakeholders you will make sure that the Risk & Compliance activities support the organizational needs and you ensure that activities are integrated in IKEA Älmhult AB’s processes.

As Risk & Compliance Leader, you ensure that risk management is integrated into the annual business planning process at IKEA Älmhult AB. To enable that you will identify risks, agree on mitigation activities and set priorities together with your stakeholders. The Risk & Compliance leader of IKEA Älmhult AB will have a matrix relation with the Risk & Compliance community at Inter IKEA Group.

To be able to meet the expectations and future needs the Risk & Compliance Leader has the main responsibility when it comes to:

Lead the overall risk management process for IKEA Älmhult AB
Report on risks in a relevant way for different audiences; e.g. board, management and other senior business leaders to ensure they are aware of risks that are relevant to their parts of the business
Secure an effective risk based compliance and internal control practice within IKEA Älmhult AB and report on the level of compliance with Inter IKEA Group steering documents and regulatory requirements
Ensure that Safety & Security risks are identified, assessed and treated adequately by applying Inter IKEA Group steering documents and local legislation
Ensure that crisis and continuity management routines and trainings are in place and performed
Actively contribute to the Risk & Compliance community within Inter IKEA Group

Qualifications

This could be a great opportunity for you to develop and contribute to strengthening the Risk & Compliance function in IKEA Älmhult AB.

You have strong leadership in line with IKEA Culture & Values. You are driven and have the ability to build trustful relationships at all levels, create an open and inclusive environment in your organization. You have the ability to work and lead in change and you inspire and motivate your organization in the change process. You communicate in a clear and inspiring way, and you lead by example in your everyday work.

You are eager to take initiative and driven to achieve results with and through people. You enjoy developing IKEA through innovation and by building relationships and networks.

We expect you to have:

5+ years of experience in risk management, compliance, internal control and/or internal audit.
Experience in working with Health, Safety & Security in an operational position
Experience in relation to property-management is considered to be a plus

Additional Information

This is a permanent position, full-time (40 hours per week) and located in Älmhult, Sweden. Please send your application – CV and letter of motivation – in English, lates on September 15th. You will report to Lasse Svensson, Risk & Compliance Manager, IKEA Älmhult AB

For questions about the position get in contact with Lasse Svensson, lars.svensson@inter.ikea.com.

We are looking forward to receiving your application and will review candidates continuously, so please submit your application as soon as possible! The advertisement may be removed earlier if we find our next colleague sooner.

Inter IKEA Group consists of three core businesses and comprises over 70 companies in 30 different countries and has around 28,000 co-workers that together with other IKEA colleagues work to fulfil the IKEA vision: To create a better everyday life for the many people.

","hiringOrganization":{"@type":"Organization","name":"Inter IKEA Group","sameAs":"https://www.ikea.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Älmhult, Sweden","addressCountry":"Sweden","addressRegion":"Europe"}}}},{"@type":"ListItem","position":44,"item":{"@type":"JobPosting","title":"Risk and Compliance Manager","datePosted":"2025-08-19","description":"

Hello, we’re Starling. We built a new kind of bank because we knew technology had the power to help people save, spend and manage their money in a new and transformative way. We’re a fully licensed UK bank with the culture and spirit of a fast-moving, disruptive tech company. We’re a bank, but better: fairer, easier to use and designed to demystify money for everyone. We employ more than 3,500 people across our London, Southampton, Cardiff and Manchester offices.

Reporting to the Head of Starling Banking Services as our Risk and Compliance Manager, you will own and manage approach and day to day activity to ensure SBS is complying with all applicable legal and regulatory obligations from a policy and operational point of view. You will lead a small team to ensure SBS financial crime and compliance policy aligns with Bank policy and our operational activities are carried out in a timely manner. This role covers financial crime including transaction monitoring, sanctions screening and fraud monitoring as well as some operational risks and compliance activity.

Key Responsibilities Include:

Act as the leader of the Risk and Compliance function within SBS, ensuring SBS policy fits in with Bank policy and all operational activities are carried out in a timely and compliant manner.
Reporting of relevant compliance and financial crime MI to senior management and stakeholders
Setting best practice in relation to transaction monitoring, sanction screening and compliance within the team and ensuring these steps are carried out by the team
Representing SBS at relevant internal risk and economic crime committees
Working with 2LOD to ensure best practices are being considered within the SBS team
Carrying out initial and ongoing onboarding of new SBS clients
Acting as a point of escalation for sales and account management colleagues on compliance matters relating to the live and prospective clients
Own the RCSA process for SBS in conjunction with senior management

Requirements

Proven experience in payments and understanding of best practices from a risk and compliance perspective
Deep understanding of FPS, Bacs, Open Banking, A2A payments and the developing ecosystem around the National Payments Vision
Familiarity with API driven payment products
Comprehensive understanding of different regulated industries including E-money and FX firms, especially on nested payment flows
Hands-on, resilient, and adaptable to a fast moving environment
Excellent verbal and written communication skills
Consistently act with the highest ethical standards, ensuring decisions are always in the best interest of our customers, colleagues, and the bank. Lead by example, fostering a culture of trust and transparency across all levels.

Benefits

25 days holiday (plus take your public holiday allowance whenever works best for you)
An extra day’s holiday for your birthday
Annual leave is increased with length of service, and you can choose to buy or sell up to five extra days off
16 hours paid volunteering time a year
Salary sacrifice, company enhanced pension scheme
Life insurance at 4x your salary & group income protection
Private Medical Insurance with VitalityHealth including mental health support and cancer care. Partner benefits include discounts with Waitrose, Mr&Mrs Smith and Peloton
Generous family-friendly policies
Incentives refer a friend scheme
Perkbox membership giving access to retail discounts, a wellness platform for physical and mental health, and weekly free and boosted perks
Access to initiatives like Cycle to Work, Salary Sacrificed Gym partnerships and Electric Vehicle (EV) leasing

About us:

You may be put off applying for a role because you don't tick every box. Forget that! While we can’t accommodate every flexible working request, we're always open to discussion. So, if you're excited about working with us, but aren’t sure if you're 100% there yet, get in touch anyway.We’re on a mission to radically reshape banking – and that starts with our brilliant team. Whatever came before, we’re proud to bring together people of all backgrounds and experiences who love working together to solve problems.

Starling Bank is an equal opportunity employer, and we’re proud of our ongoing efforts to foster diversity & inclusion in the workplace. Individuals seeking employment at Starling Bank are considered without regard to race, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, physical or mental disability, military or veteran status, or any other characteristic protected by applicable law. When you provide us with this information, you are doing so at your own consent, with full knowledge that we will process this personal data in accordance with our Privacy Notice. By submitting your application, you agree that Starling Bank will collect your personal data for recruiting and related purposes. Our Privacy Notice explains what personal information we will process, where we will process your personal information, its purposes for processing your personal information, and the rights you can exercise over our use of your personal information.

","hiringOrganization":{"@type":"Organization","name":"Starling Bank","sameAs":"https://www.starlingbank.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"London, England, United Kingdom","addressCountry":"United Kingdom","addressRegion":"Europe"}}}},{"@type":"ListItem","position":45,"item":{"@type":"JobPosting","title":"Risk and Compliance Analyst","datePosted":"2025-08-22","description":"

NEORIS es un acelerador Digital que ayuda a las compañías a entrar en el futuro, teniendo 20 años de experiencia como Socios Digitales de algunas de las mayores compañías del mundo. Somos más de 4,000 profesionales en 11 países, con nuestra cultura multicultural de startup en donde cultivamos innovación, aprendizaje continuo para crear soluciones de alto valor para nuestros clientes.

Estamos en búsqueda de un Risk and Compliance Analyst

Requerimientos:

Esquema híbrido en Monterrey.
Nivel de inglés conversacional alto B2/C1.
Conocimiento en normativas y marcos de referencia: ISO 27001, NIST, SOX, PCI DSS, GDPR.
Gestión de riesgos operativos, tecnológicos y de ciberseguridad.
Herramientas de monitoreo, auditoría y GRC (Governance, Risk & Compliance).
Capacidad de análisis y redacción de reportes ejecutivos.
Habilidades de comunicación y coordinación con equipos multidisciplinarios.
Certificaciones deseables: CISA, CRISC, ISO 27001 Lead Implementer/Auditor, o similares.

Ofrecemos:

Esquema 100% nominal
Prestaciones de Ley
Vales de despensa
Beneficios adicionales
Programa Bienestar
Plan de Desarrollo Profesional
Colaboración multicultural

Te invitamos a conocernos en http://www.neoris.com, Facebook, LinkedIn, Twitter o Instagram: @NEORIS.

Oscar Alberto Lazcano Sánchez

(#LI-OL1)

","hiringOrganization":{"@type":"Organization","name":"NEORIS","sameAs":"https://www.neoris.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Monterrey, Mexico","addressCountry":"Mexico","addressRegion":"North America"}}}},{"@type":"ListItem","position":46,"item":{"@type":"JobPosting","title":"Risk and Compliance Analyst","datePosted":"2025-08-25","description":"

Texas Capital is built to help businesses and their leaders. Our depth of knowledge and expertise allows us to bring the best of the big firms at a scale that works for our clients, with highly experienced bankers who truly invest in people’s success — today and tomorrow.

While we are rooted in core financial products, we are differentiated by our approach. Our bankers are seasoned financial experts who possess deep experience across a multitude of industries. Equally important, they bring commitment — investing the time and resources to understand our clients’ immediate needs, identify market opportunities and meet long-term objectives. At Texas Capital, we do more than build business success. We build long-lasting relationships.

Texas Capital provides a variety of benefits to colleagues, including health insurance coverage, wellness program, fertility and family building aids, life and disability insurance, retirement savings plans with a generous 401K match, paid leave programs, paid holidays, and paid time off (PTO).

Headquartered in Dallas with offices in Austin, Fort Worth, Houston, Richardson, Plano and San Antonio, Texas Capital was recently named Best Regional Bank in 2024 by Bankrate and was named to The Dallas Morning News’ Dallas-Fort Worth metroplex Top Workplaces 2023 and GoBankingRate’s 2023 list of Best Regional Banks. For more information about joining our team, please visit us at www.texascapitalbank.com.

The Fraud Investigator is responsible for conducting investigations of suspicious and/or criminal activity perpetuated against Texas Capital, its customers, and employees, and to identify relationships, and processes that pose a fraud risk. This role performs complex research and analysis of various reports in the course of the investigations and special department projects. Additionally, the Fraud Investigator will aid in asset recovery for the bank and its clients.

The Fraud Investigator is also responsible for providing support and guidance to the firm’s fraud risk management efforts; serve as an advisor to Senior Management; assist regulatory agencies, law enforcement and/or auditor inquiries; review and write related policies and procedures; make recommendations to senior management when and where appropriate. The Fraud Investigator will advise the firm’s Fraud Risk Management and Investigations Manager, Senior Management of emerging fraud issues, and consults with other employees and departments to establish controls and mitigate risk to the Bank.

The Fraud Investigator is also responsible for filing Suspicious Activity Reports (SAR) as required by BSA/AML regulatory requirements.

Responsibilities

Research, investigate, and document cases involving internal and external fraud
Prepare thorough and high-quality investigative reports and summaries
Ensure efficient investigation, documentation, and review of cases assigned to, or developed by Enterprise Fraud Management
Handles all necessary documentation and required research.
Conduct routine interviews with suspects and witnesses.
Completes a SAR when applicable. The Fraud Investigator is directly responsible for the evaluation and decision to file suspicious activity reports on cases assigned to them.
Identify and analyze points of compromise
Ensure timely and efficient reporting of cases requiring filing with government
Comply with requests for information or documents from legal requests
Identify and recommend modifications to internal controls or procedures to enhance the fraud program
Collaborate with other departments of the bank, ensuring the FRMI team is well-represented and that there is a strong partnership.
Maintain a well-informed and all-inclusive knowledge of current fraud schemes and behaviors, issues, criminal typologies, industry best practices, regulations, and developing trends
Flexible to perform other functions as requested by management
Conduct special investigations including those relating to suspicious and/or criminal activity perpetuated against Texas Capital customers and/or employees
Train employees and disseminate intelligence as applicable
If called upon, provide expert testimony in legal proceedings
Liaison with Law Enforcement
Leverage sound decision making and problem-solving in pressure situations
Perform other functions or duties as assigned

Qualifications

2-4 years’ bank fraud investigations experience. Work related experience should consist of in-depth background conducting bank fraud investigations of all types (i.e., kite schemes, elder fraud, BEC, wire fraud, ACH fraud, counterfeit checks, forgeries, etc.), banking operations, government regulations, proven usage and knowledge of UCC codes and industry defenses to adverse claims and compliance/operational support.
OR a minimum of 3 years’ experience in criminal financial crimes investigations, such as conducting bank fraud investigations of all types (i.e., kite schemes, elder fraud, BEC, wire fraud, ACH fraud, counterfeit checks, forgeries, etc.).
CFE, CAFP, or CFCI certification preferred. This position generally has expertise in more than one specific technique or investigative process. Certification must be obtained within 1 year of hire date.
Strong knowledge of the laws applicable to the Bank Secrecy Act, White Collar Crime and Suspicious Activity Reporting requirements
Must be a self-starter and able to work independently
Able to work in a highly regulated area where confidentiality is a requirement and work varied hours as each assignment requires
Capable of working in a team environment on multifaceted confidential cases
Crisis management experience preferred
Established contacts within Federal, State and local law enforcement agencies, as well as established contacts within banking/business fraud investigations
Ability to make appropriate judgments and decisions with limited guidance.
Language Skills - Ability to read, analyze, and interpret general business periodicals, professional journals, technical procedures, or governmental regulations. Ability to write reports, business correspondence, and procedure manuals and to effectively present information and respond to questions from groups of managers, clients, customers and the general public.
Excellent interpersonal, presentation and public speaking skills, both practiced and impromptu.
Proven ability to effectively communicate with management and employees at all levels, influencing decision and selling ideas.
Strong interpersonal and relationship building skills.
Proficient in Microsoft Word, Excel and PowerPoint.

The duties listed above are the essential functions, or fundamental duties within the job classification. The essential functions of individual positions within the classification may differ. Texas Capital Bank may assign reasonably related additional duties to individual employees consistent with standard departmental policy.Texas Capital is an Equal Opportunity Employer.

","hiringOrganization":{"@type":"Organization","name":"Texas Capital","sameAs":"https://www.texascapitalbank.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"North Dallas Campus, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":47,"item":{"@type":"JobPosting","title":"Associate, Risk and Compliance","datePosted":"2025-08-27","description":"

Job Title:

Associate, Risk and Compliance

Job Description

Risk and Compliance Associate will be responsible for Risk Assessment and Fraud Prevention activities; Transaction Monitoring (if needed), publish Audit results for Reporting and Governance

Risk and Fraud
-Operational Risks
-Fraud
-Education and Awareness

Compliance
-Concentrix Requirements
-Contractual Requirements and Statutory & Regulatory
-Governance and Reporting

Risk Assessment and Controls Setting
Facilitate Risk assessment tool set documents
Establish & execute control testing protocols
Work across teams and help them in establishing controls
Facilitate Control design effectiveness
Risk reporting is consistent, clear, accurately measured, and communicated timely
Inherent Risk on the Risk profile for Operations on a quarterly basis
Be actively involved in the change management process
Have full understanding of ‘whistle blowing’ and take appropriate action when required

Compliance
Ensure all client, regulatory and statutory trainings are catered to effectively
Ensure thorough and complete Integrity training and education
All BCP plans to be up to date, tested and signed-off
Establish testing packs for all Regulatory & statutory deliverables
Ensure all Audits for the year are Green
Facilitate the requirements enunciated
Ensure that Service Excellence drives risk culture and delivery

Governance and Reporting
identify trends in data collected, highlighting issues and submitting recommendations for action
Collect and collate data on a regular basis
To identify any compliance related issues
Maintain control of all Compliance logs
Manage Fraud and drive Fraud Prevention activities
Take initiatives to spread awareness on business and Concentrix requirements

Location:

PHL Makati City - SLC

Language Requirements:

Time Type:

Full time

If you are a California resident, by submitting your information, you acknowledge that you have read and have access to the Job Applicant Privacy Notice for California Residents

","hiringOrganization":{"@type":"Organization","name":"Concentrix","sameAs":"https://www.concentrix.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"PHL Makati City - SLC, Philippines","addressCountry":"Philippines","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":48,"item":{"@type":"JobPosting","title":"Risk and Compliance Intern","datePosted":"2025-09-02","description":"

About Northern Trust:

Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889.

Northern Trust is proud to provide innovative financial services and guidance to the world’s most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

Please note: Each applicant has the opportunity to apply to a maximum of 3 job postings per recruitment season in North America. Please do not create multiple email addresses to apply to additional opportunities. 

Posting Close Date: October 10, 2025 11:59pm Central, unless the class is filled before that date. Applications will be reviewed on a rolling basis. We strongly encourage you to submit your application as early as possible as programs will close once positions are filled. 

WHO YOU ARE  

You are pursuing a bachelor’s degree at an accredited college/university with an expected graduate date of December 2026 through Summer 2027

You have a minimum GPA of 3.0

You have an interest in and are curious to learn more about financial markets

You have some knowledge of risk and compliance principles, usually acquired through coursework or prior related experience, and are curious to learn more

You have proven analytical, quantitative, and problem-solving skills through course work, projects, and/ or previous internship experience

You have demonstrated leadership and teamwork through projects and/or extracurricular involvement

Federal law requires that employees be legally authorized to work in the United States. Applicants for employment must have work authorization that does not now or in the future require sponsorship for employment authorization 

WHAT YOU’LL DO  

As an intern at Northern Trust you will have the opportunity to spend ten weeks working on meaningful projects, developing relevant skills to jump start your career while joining our inclusive and relational culture. You will work directly with your team on day-to-day tasks with weekly program events to work on new skills, network with senior leaders and socialize as an intern community. A recruiter will work with you to determine the best team placement given your interests, skill set and relevant experience. 

The Program: 

Ten weeks

Located in Chicago, IL

Program Opportunities: 

Lunch & Learns with Leaders

Professional development workshops

Social events

Intern Case Challenge Project

Volunteer event

Mentorship and networking opportunities

Sample Projects:  

Complete, compile and present a high-quality summary of findings and recommendations for review in a concise and professional manner

Run, create and analyze risk and control reports

Support Risk project teams in various risk, regulatory or control implementations

Develop professional skills related to assigned area of Risk

Sample Career Path: 

Risk & Compliance Analyst

Salary Range:

Salary is $25.00 USD per hour.

Salary range is a good faith estimate of base pay. Northern Trust provides a comprehensive benefits package including retirement benefits (401k and pension), health and welfare benefits (medical, dental, vision, spending accounts and disability), paid time off, parental and caregiver leave, life & accident insurance, and other voluntary and well-being benefits. Northern Trust also provides a discretionary bonus program that may include an equity component.

Working with Us:

As a Northern Trust partner, greater achievements await. You will be part of a flexible and collaborative work culture in an organization where financial strength and stability is an asset that emboldens us to explore new ideas.

Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to assisting the communities we serve! Join a workplace with a greater purpose.

We’d love to learn more about how your interests and experience could be a fit with one of the world’s most admired and sustainable companies! Build your career with us and apply today. #MadeForGreater

Reasonable accommodation

Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at MyHRHelp@ntrs.com.

We hope you’re excited about the role and the opportunity to work with us. We value an inclusive workplace and understand flexibility means different things to different people.

Apply today and talk to us about your flexible working requirements and together we can achieve greater.

","hiringOrganization":{"@type":"Organization","name":"Northern Trust","sameAs":"https://www.northerntrust.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Wabash Bldg-Chgo, IL, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":49,"item":{"@type":"JobPosting","title":"Risk and Compliance Manager","datePosted":"2025-08-29","description":"

Role Overview:

The Manager – Risk & Compliance will be responsible for ensuring SPL’s adherence to regulatory compliance frameworks, internal risk management processes, and operational auditing. This role will identify risks, implement mitigation strategies, and oversee compliance initiatives in line with international and local standards. The ideal candidate must have experience in sport, media and entertainment sector or a solid risk management background in semi governmental entities, apart from being fluent in English.

Key Responsibilities:

Risk Management

Develop and implement SPL’s risk management framework, ensuring proactive identification, assessment, and mitigation of operational, financial, and reputational risks.
Conduct risk assessments and internal control testing, identifying vulnerabilities and recommending mitigation strategies.
Establish and oversee crisis management protocols, ensuring SPL has clear contingency plans to handle financial, regulatory, or operational crises.
Develop a crisis response framework, including communication strategies and decision-making protocols, to mitigate risks in high-impact scenarios.
Monitor emerging risks in commercial, media, competition and player acquisition operations, providing strategic risk mitigation recommendations to senior management.
Collaborate with senior leadership to test and improve crisis management drills and response plans.

Regulatory Compliance

Ensure SPL’s adherence to Saudi regulatory frameworks, industry-specific compliance obligations, and international best practices.
Periodically review and update compliance strategies and frameworks, ensuring alignment with best practices and evolving regulations.
Develop compliance enforcement mechanisms, ensuring SPL meets its contractual, financial, and regulatory obligations.
Act as a compliance watchdog, ensuring that Competition, Broadcast, Marcom and PACE activities adhere to governance policies and regulatory requirements.
Conduct compliance audits and assessments, flagging governance or regulatory concerns to relevant departments.

Internal Controls & Audits

Conduct internal audits and compliance assessments, ensuring alignment with governance principles and internal policies.
Support regulatory and financial audits, collaborating with Internal Audit to implement corrective actions.
Perform sampling and forensic testing to detect financial misconduct, policy breaches, or governance failures.
Act as the primary liaison with internal and external auditors, ensuring compliance risks are properly addressed.

Compliance Training & Awareness

Develop and deliver compliance training programs for SPL departments, including Legal, HR, Procurement, Competition and Marcom.
Promote a compliance-driven culture, embedding regulatory awareness into day-to-day operations.
Ensure that employees understand governance responsibilities and their role in maintaining compliance.

Reporting & Documentation

Provide risk and compliance insights to senior leadership, supporting data-driven decision-making.
Maintain and distribute legal and compliance alerts, ensuring regulatory updates are communicated to stakeholders.
Prepare detailed risk and compliance reports for senior management and regulatory bodies, highlighting key findings and recommendations.

Fraud & Ethics Monitoring

Lead investigations into compliance breaches, financial misconduct, and regulatory violations.
Conduct sampling and forensic testing to detect financial misconduct or governance failures.
Oversee whistleblowing mechanisms and ethics reporting programs, ensuring confidential and effective handling of reports.
Establish ethics and integrity programs, enforcing compliance with SPL’s Code of Conduct.
Work with Internal Audit to address compliance weaknesses and ensure corrective measures are enforced.

Qualifications & Experience:

Bachelor degree in Audit, Accounting, Finance, or a related field.
7+ years of post-qualification experience (PQE) in compliance, audit, or risk management within a regulated sector.
Professional certification in Risk, Compliance, or Internal Audit (e.g., CRMA, CIA, CCEP, CFE, or equivalent).
Strong knowledge of Saudi regulatory frameworks, corporate governance laws, and international compliance standards.
Excellent analytical and problem-solving skills, with the ability to assess and mitigate risks proactively.
Fluency in English.
Advanced proficiency in Excel, PowerPoint (PPT), and reporting tools for data analytics, compliance presentations and risk assessments.

Preferred Skills & Competencies:

Experience in risk and compliance functions within sports or media organizations, events companies or semi-governmental entities.
Strong understanding of fraud prevention, AML, and forensic auditing techniques.
Ability to work independently and provide risk insights at the executive level.
Detail-oriented with excellent project management skills.

","hiringOrganization":{"@type":"Organization","name":"Saudi Pro League","sameAs":"https://www.spl.com.sa/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Riyadh, Saudi Arabia","addressCountry":"Saudi Arabia","addressRegion":"Middle East"}}}},{"@type":"ListItem","position":50,"item":{"@type":"JobPosting","title":"Director, Risk and Compliance","datePosted":"2025-09-08","description":"

Be the key advisor to the Chief Risk Officer to help them govern, oversee and provide risk advice across the ANZ business
Co-ordinate and prepare risk and compliance reports for Zip’s group risk committee, the ANZ regional risk committee and ANZ’s non-financial risk forum
Work flexible from our beautiful Sydney office

Start your journey with us

We are seeking an experienced and strategic Director, Risk and Compliance to lead and manage our company's risk management and compliance programs. This is a critical leadership role responsible for developing and implementing a robust framework to identify, assess, mitigate, and monitor risks across all business functions. The ideal candidate will be a decisive leader with deep expertise in risk management, regulatory compliance, and governance.

Interesting problems you will get to solve:

The Director, Risk and Compliance, Australia and New Zealand (ANZ) supports the Chief Risk and Compliance Officer (CRO) in overseeing Zip's risk and compliance management frameworks and fostering a strong risk-aware culture.

Supporting the CR&CO:

Acting as a key advisor to the CR&CO, to help them govern, oversee and provide risk advice across the ANZ business, and supporting key projects and initiatives.

Developing and Implementing Risk Management Frameworks:

Contributing to the design of the Group, and regional policies, frameworks, procedures, to identify, assess, and manage various types of risks and compliance obligations.
Overseeing Zip ANZ’s implementation of these policies, frameworks and procedures, and monitors effectiveness of implementation.
Identifying areas for improvement in risk and compliance management practices, including consideration of artificial intelligence as an enabler.

Governance, Monitoring and Reporting:

Co-ordinating and/or preparing risk and compliance reports for Zip’s group risk committee, the ANZ regional risk committee and ANZ’s non-financial risk forum ensuring that risk and compliance information is communicated effectively to relevant stakeholders.
Deriving risk insights and enhancing risk reporting, ensuring that the ANZ risk profile is current.

Fostering a Risk-Aware Culture:

Promoting a strong understanding of risk management principles throughout Zip ANZ and encouraging our Zipsters to adopt risk-aware practices.

Responding to Risk Events:

Responding to and managing material risk-related incidents.
Overseeing business continuity readiness and may be involved in responding to business continuity events.

Providing Training and Guidance:

Providing training to employees on risk and compliance management topics and offering guidance on risk and compliance-related issues.

What you’ll bring to the team

Bachelor's degree in Finance, Business Administration, Law, or a related field.
A minimum of 15 years of progressive experience in risk management, compliance, or a related field, with at least 10 years in a leadership role.
Deep knowledge of risk management frameworks (e.g., COSO, ISO 31000) and regulatory compliance requirements relevant to our industry.
Demonstrated experience in developing and implementing effective risk and compliance programs.
Strong leadership, communication, and interpersonal skills with the ability to influence and collaborate with stakeholders at all levels.
Exceptional analytical, problem-solving, and decision-making abilities.
A mindset that embraces AI and new tools to adapt, learn and grow.
An aptitude for identifying and managing risks. Whether you are a People Manager or an Individual Contributor, we are all leaders at Zip, therefore effective risk management is important to how we run our business and part of all our roles.
Our values in your DNA: Customer First, Own It, Stronger Together and Change the Game

What you’ll get in return

As we write this next exciting chapter in our story, we will continue to move at pace and embrace change. For you, this might mean opportunities to learn new skills with hands-on experience, broader responsibilities, or the buzz of seeing your work impact customers faster.

Zip is a place where you’ll get out exactly what you put in. When you join the team, we'll do our best to make sure you can be yourself and surround yourself with smart, friendly colleagues and leaders who have your back, so that you can make the big things happen.

Zipsters tell us these are just some of the best things about working here. You’ll also receive:

25 days paid leave annually, including birthday leave and quarterly wellbeing days
16 weeks paid parental leave for primary carers, and 4 weeks for supporting carers
Family support policies including miscarriage bereavement leave and domestic violence leave
Mental health and wellness initiatives, including $299 annual wellbeing allowance, free access for you and family members to our EAP service Sonder, discounted private health insurance , and great rates on fitness sessions through ClassPass
2 days paid volunteering leave per year
Fee-free Zip products, and discounts with Zip merchant partners (AU)
Team social events, epic offices, free breakfast daily, and weekly free lunches (Sydney and Melbourne)

Be a part of a team that reflects the diversity of our customers

We pride ourselves on being a workplace that provides equal opportunities to people of all ages, cultural backgrounds, sexual orientations, gender identities, abilities, veteran status, and everything else that makes you unique.

Equally, we’re committed to ensuring our recruitment processes are accessible and inclusive. Please let us know If there are any adjustments that need to be made to ensure you have a fair and equitable experience.

And finally…get to know us

Zip Co Limited (ASX: ZIP) is a digital financial services company, offering innovative, people-centred products that bring customers and merchants together.

Operating in two core markets - Australia and New Zealand (ANZ) and the US, Zip offers point-of-sale credit and digital payment services, connecting millions of customers with its global network of tens of thousands of merchants.

We’re proud to be a values-led business and our values - Customer First, Own it, Stronger Together and Change the Game - guide us in everything we do.

#LI-Hybrid

","hiringOrganization":{"@type":"Organization","name":"Zip Co Limited","sameAs":"https://zip.co/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Sydney","addressCountry":"Australia","addressRegion":"Asia/Pacific"}}}}]}

Set your job search on autopilot

Program Manager Jobs

Program Manager, Governance, Risk and Compliance

Program Manager, Integrity Governance Risk and Compliance

Head: Governance, Risk and Compliance

Governance, Risk and Compliance Analyst

Director, Governance, Risk and Compliance

Governance, Risk, and Compliance Specialist

Governance, Risk and Compliance Specialist

Governance Risk and Compliance Consultant

Governance Risk and Compliance, Intern

Governance Risk and Compliance, Intern

Governance Risk and Compliance Lead

Governance, Risk, and Compliance Lead

DHLE_Management.Manager - Governance, Risk and Compliance

Senior Consultant, Governance Risk and Compliance

Lead - IT Governance, Risk and Compliance

Director of Governance, Risk, and Compliance

Governance, Risk and Compliance (GRC) | Manager

Governance Risk and Compliance Associate Director

Governance, Risk and Compliance (GRC) | Manager

Lead - IT Governance, Risk and Compliance

Governance, Risk, and Compliance (GRC) IT Analyst

Sr Director of Governance, Risk, and Compliance

IT Governance, Risk and Compliance (GRC) Consultant

IT Intern (GRC - Governance, Risk and Compliance)

Senior Governance, Risk, and Compliance Security Analyst

Risk Services - Manager - Governance, Risk and Compliance

Governance, Risk and Compliance/Data Protection Coordinator

Cybersecurity Governance, Risk and Compliance Analyst-1

Consultant - Governance, Risk and Compliance Financial Services

Cyber Security Governance, Risk and Compliance Manager

Technical Program Manager, Risk and Compliance Engineering

Information Security Coordinator for Governance, Risk and Compliance

Senior Engineer II, Governance, Risk, and Compliance (GRC)

Director of Information Security - Governance Risk and Compliance

Information Security - Governance, Risk, and Compliance (GRC) Director

Head of Cyber Security Governance, Risk and Compliance

Identy Governance, Risk and Compliance Specialist, Cyber Security

Technical Program Manager III, Risk and Compliance, Core

Program Manager, Risk and Compliance, Extended Workforce Solutions

Risk and Compliance Manager

Risk and Compliance Specialist

Risk and Compliance Manager

Risk and Compliance Leader

Risk and Compliance Manager

Risk and Compliance Analyst

Risk and Compliance Analyst

Associate, Risk and Compliance

Risk and Compliance Intern

Risk and Compliance Manager

Director, Risk and Compliance