Information Systems Security Manager (ISSM) + Privacy to strengthen our cybersecurity and authorization function for a defense software platform and its customer systems.
Locations (5)
Washington DC, United States
Maryland, United States
Virginia, United States
Denver, Colorado, United States
Colorado Springs, Colorado, United States
Compensation
The base salary for this position will fall between $170,000 - $180,000. Your ultimate compensation will be determined by professional background, technical proficiency, seniority, and regional cost factors. Furthermore, this opportunity includes potential eligibility for equity awards and discretionary bonuses, rounding out a comprehensive total rewards offering.
Lead and manage enterprise risk management (ERM) and second line oversight of technology, security, and operational resilience risk for a growing FinTech.
Responsibilities
Build and run the ERM framework
Own technology and security risk oversight
Test IT general controls
Lead high-risk testing when incidents happen
Run risk assessments and RCSAs
Requirements
Nice to have: First Line experience in IT or security
Nice to have: Experience with GRC tooling implementation
Nice to have: Data risk or AI risk exposure
Nice to have: Experience in both FinTech and traditional banking or payments
This client-facing role requires the Principal Consultant to lead and produce deliverables for cyber risk management (CRM) engagements.
Compensation
The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/com-missioned roles) is expected to be the annual range listed below. The offered compensation may also include restricted stock units and a bonus.
Responsibilities
Conduct comprehensive security assessments of AI systems and tools using frameworks such as MITRE ATLAS, OWASP Top 10 for LLMs, and NIST AI Risk Management Framework
Analyze model architectures, training data pipelines, and deployment environments to identify potential security gaps and vulnerabilities
Provide expert guidance on securing AI systems, including adversarial ML defenses, data poisoning prevention, and privacy-preserving AI techniques
Evaluate compliance with regulatory requirements and standards such as GDPR, HIPAA, or emerging AI-specific regulations
Collaborate with the client’s cross-functional teams, conducting stakeholder interviews, interactive workshops, and meetings with technical teams and leadership
Requirements
Bachelor’s Degree in Information Security, Computer Science, Digital Forensics, Cyber Security or equivalent
Senior SAP Governance Analyst responsible for ensuring SAP compliance with regulatory requirements, developing policies, managing risks, and improving operational efficiencies.
Responsibilities
Develop and implement SAP policies, procedures, and guidelines
Design and govern role-based access control strategies for SAP systems
Develop and maintain SAP internal controls environment documentation
Monitor compliance to the end-to-end SAP user access lifecycle
Design, implement, and monitor SAP system adherence to software development lifecycle
Requirements
Bachelor's degree in Computer Science, Information Technology, Information Security, Engineering, Accounting, or related field
Lead and own the IT audit and governance program across all applications, infrastructure, and systems, ensuring SOX, SOC, ISO, and other regulatory compliance.
Locations (2)
New York City, New York, United States
Palo Alto, California, United States
Compensation
MongoDB’s base salary range for this role in the U.S. is: $151,000—$297,000 USD
Responsibilities
Own audit and governance across all IT
Maintain inventory of systems and compliance obligations
Build and run an IT audit calendar
Establish governance standards and policies
Drive accountability with IT leaders
Requirements
Bachelor's degree in Information Systems, Accounting, Computer Science, or related field
Nice to have: CISA
Nice to have: CISSP
Nice to have: CIA
Nice to have: CPA
Skills
Director, IT Security - IT Governance, Risk, and Compliance
Lead the strategy, development, implementation, and continuous improvement of the IT Security GRC program and oversee compliance, risk management, and security operations across the organization.
Responsibilities
Lead the strategy, development, implementation, and continuous improvement of the IT Security GRC program
Establish and maintain information security governance frameworks, policies, standards, procedures, and control objectives
Lead compliance programs aligned to frameworks such as CMMC, NIST 800-171, ISO 27001, SOC 2, NIST CSF, PCI‑DSS, HIPAA, GDPR
Direct security risk management activities, including risk identification, assessment, treatment, exception management, and reporting
Oversee the development and maintenance of the information security risk register and remediation tracking processes
Requirements
Bachelor’s Degree
Graduate Degree
Master’s degree
Nice to have: Strong working knowledge of third-party risk management
Lead and manage the Digital Technology Risk & Compliance program, ensuring regulatory and certification obligations are met across jurisdictions and business units.
Compensation
Qnity offers a comprehensive pay and benefits package. To learn more visit the Compensation and Benefits page.
Responsibilities
Support day‑to‑day management of the DT compliance program
Plan and manage the compliance calendar, including assessments, certifications, and control testing cycles
Define and track program performance indicators and prepare compliance status reporting and dashboards
Facilitate compliance governance meetings and management reviews
Drive compliance awareness and training for control owners and stakeholders
Requirements
Bachelor’s degree in Information Security, Risk Management, or related field
Own authorization status, risk posture, privacy compliance, and continuous monitoring health across an assigned system portfolio.
Orchestrate concurrent RMF workflows in eMASS and other GRC tools (Xacta, RegScale, CSAM) from categorization through continuous monitoring.
Direct and mentor ISSOs supporting the portfolio, assign work, review authorization packages for quality, and coach on security and privacy requirements.
Govern privacy authorization across all systems, authoring PTAs, PIAs, SORN determinations, and implementing NIST 800-53 Rev 5 privacy controls and CNSSI 1253 overlays.
Synchronize PII and CUI data flows with ISSEs and Solutions Architects to ensure accurate identification and documentation in authorization packages and system designs.
Senior Risk Specialist (Security GRC Specialist) (L5)NewCoupang Internal · Seoul, South Korea
Information Systems Security ManagerNewSecond Front Systems · Washington DC, US+4 more
Risk & Controls ManagerPleo · London, United Kingdom
Staff Technical Program Manager, IT Audit & GovernanceMongoDB · New York City, US+1 more
Director, IT Security - IT Governance, Risk, and ComplianceL3HHCM20 · Melbourne, US
Senior Compliance SpecialistQnity · Wilmington, US