Security and technology roles from across the Security Buzz community.
Owns risk identification, quantification and remediation tracking in GitLab's Security Risk team, part of Security Assurance, and reports to the Security Risk Manager. The team handles third-party risk, annual security risk assessments,…
Individual contributor in Anthropic's Security GRC organisation, within the Audit & Assurance group, who owns the Common Control Framework, the single control set the company's compliance program rests on. The framework covers…
Owns Smartsheet's security risk management programme end to end and oversees its third-party risk management function, reporting to the Senior Director, GRC Engineering, with the choice of Bellevue or remote work in…
A customer-facing security engineer in Smartsheet's GRC Engineering group who explains the product's security posture to enterprise customers, from their engineers to their CISOs, clears security obstacles in sales cycles, and turns…
Brings an engineering approach to Smartsheet's commercial GRC programme, which covers SOC 2 Type II, the ISO 27001/27017/27701/22301 family and HIPAA, aiming to replace audit-season scrambles with steady readiness. The engineer reports…
FedRAMP and public sector compliance lead at Menlo Security, the cloud security and browser isolation vendor, keeping its government cloud services in line with federal standards. The role owns the CMMC compliance…
An experienced GRC analyst at Clear Capital, the property valuation and appraisal technology company, responsible for keeping it in line with security standards, regulations and policies in the heavily regulated mortgage lending…
A senior manager in CFGI's Cybersecurity practice who leads advisory engagements combining security GRC, data privacy and technical control assessment for private equity sponsors, portfolio companies and public companies. The role pairs…
Handles information security governance and technology risk at Point72, keeping the firm's security policy and standards library current and leading independent assessments of the security program, including regulatory examinations and third-party evaluations.…
Security compliance specialist on Anthropic's compliance team, covering data centers and compute. The team works out what regulators, customers and emerging industry norms expect on security and AI safety, tells internal teams…
Member of Anthropic's Supplier Security & Assurance team within Security GRC, which judges whether vendors meet the company's security requirements and gives the business a clear approval decision. Suppliers range from SaaS…
A senior practitioner in SpaceX's classified cyber assurance programme within Government Security Programs, listed in Washington, DC, though the posting text describes the role as on-site in Hawthorne. The analyst helps assess…