Provide cyber assurance through security assessments to ensure that Income's systems are not vulnerable and that potential weaknesses and exposures are mitigated or remediated timely in commensurate with our risk appetite.
Responsibilities
Manage a vulnerability management program to include ongoing vulnerability and configuration scanning, penetration testing and vulnerability disclosure and software security assessment
Manage a cyber threat intelligence program to collect and analyse information about relevant cyber threats, threat actors, vulnerabilities, and attack methods
Manage an offensive program to include ongoing breach and attack simulation, cyber range, red teaming and incident response exercise
Manage the risk assessment and risk treatment of discovered vulnerabilities by assessing the impact of the weakness, the effectiveness of the controls and the resultant risk exposure
Function as a Security Architect to advise on security requirements, and assess and ensure conformance to security architecture
Lead the DataHub team, responsible for developing an enterprise data hub and identity middleware platform that powers secure enterprise search, data retrieval, knowledge discovery, and AI applications.
Locations (12)
Vancouver, British Columbia, Canada
San Jose, California, United States
Durham, North Carolina, United States
Mexico City, Mexico City, Mexico
Bangalore, India
Content and Regulatory Analyst, AI and Content Abuse, Trust and Safety
Responsible for performing quarterly audit engagements year-round to help identify and manage risks to the business.
Responsibilities
Participate as active members of the engagement team throughout each phase (i.e., planning, execution, and reporting).
Work collaboratively and independently to conduct audits across company technologies (e.g., physical, network, application, system, data).
Executes aspects of the standard internal audit process, which includes the three phases of planning, execution and reporting out to business management.
Performs thorough inquiry and data analysis to understand security and technology operations, assess risk, and develops project scope for complex process areas, leveraging business knowledge and expertise.
Contributes to overall planning efforts for engagement timeline and approach.
array of options, expert guidance and always-on tools that are personalized to meet the needs of your reality—to help support you physically, financially and emotionally through the big milestones and in your everyday life
Manage and support a wide range of projects to ensure compliance with multiple internal and external regulations and requirements in the GRC and information security domain.
Locations (3)
Walldorf, Baden-Württemberg, Germany
Eschborn, Hesse, Germany
Berlin, Berlin, Germany
Responsibilities
Planning, coordination, and reporting of projects within the GRC and information security domain
Preparation of presentations and reports at tactical and strategic level for management and stakeholders
Contribution to the development, implementation, and operation of a comprehensive compliance program
Participation in the development of strategic decisions related to GRC and information security
Planning, facilitation, and documentation of project meetings
Senior SAP Governance Analyst responsible for ensuring SAP compliance with regulatory requirements, developing policies, internal controls, and training stakeholders.
Responsibilities
Develop and implement SAP policies, procedures, and guidelines
Design and govern role-based access control strategies for SAP systems
Develop and maintain SAP internal controls environment documentation
Monitor compliance to the end-to-end SAP user access lifecycle
Design, implement, and monitor SAP system adherence to software development lifecycle
Support the Cyber Security Compliance Program by assessing cybersecurity and privacy controls, supporting audits, collecting evidence, identifying control gaps, and ensuring compliance with internal and external regulatory requirements.
Compensation
This position offers a competitive compensation and benefits package designed to support your wellbeing, growth, and work–life balance.
Responsibilities
Assess and test cybersecurity and privacy controls against frameworks and regulations.
Support compliance efforts related to SOC 2, NIST CSF, NYDFS, CCPA/CPRA, GDPR, LGPD, and similar requirements.
Collect, review, and evaluate audit evidence.
Document testing results, findings, and remediation recommendations.
Partner with IT, Security, and business stakeholders to drive compliance activities.
Develop and maintain secure design patterns and controls for AI/ML solutions, including LLMs, RAG architectures, vector databases, and enterprise AI agents, while conducting AI-specific risk assessments and threat modeling.
Compensation
A reasonable estimate of the current compensation range for this position is $143,900 - $267,200.
Responsibilities
Develop and maintain secure design patterns and controls for AI/ML solutions, including LLMs, RAG architectures, vector databases, and enterprise AI agents.
Define secure operating environment and ensure alignment with enterprise architecture strategy and GIS standards.
Conduct AI-specific risk assessments using frameworks including MITRE ATLAS, OWASP Top 10 for LLMs/GenAI, and NIST AI RMF.
Perform detailed threat modeling (STRIDE or equivalent) for cloud, application, data, and AI use cases.
Identify risks such as prompt injection, model/data poisoning, data leakage, model theft, hallucinations, and supply chain risk across model, dataset, and embedding ecosystems.
Support the Cyber Security Compliance Program by assessing controls, supporting audits, collecting evidence, identifying gaps, and ensuring regulatory compliance.
Compensation
Competitive salary and performance-based bonuses
Responsibilities
Assess and test cybersecurity and privacy controls against frameworks and regulations
Support compliance efforts related to SOC 2, NIST CSF, NYDFS, CCPA/CPRA, GDPR, LGPD, and similar requirements
Collect, review, and evaluate audit evidence
Document testing results, findings, and remediation recommendations
Partner with IT, Security, and business stakeholders to drive compliance activities
Requirements
Nice to have: Big Four or consulting experience
Nice to have: GRC platforms (Archer, Vanta, or similar)
Nice to have: privacy regulations such as CCPA/CPRA, GDPR, LGPD, LFPDPPP
The pay range for this position at commencement of employment is expected to be between CAD $209,000 and CAD $313,000 per year.
Responsibilities
Define and execute technical and organizational roadmaps aligned with company and business objectives
Drive end-to-end delivery of large-scale initiatives from architecture and planning through production deployment and operational excellence
Partner with Product Management and technical leadership to prioritize investments, balance short-term execution with long-term platform strategy, and deliver customer value
Establish engineering best practices for architecture reviews, software quality, security, reliability, scalability, observability, and operational excellence
Lead the design and evolution of secure enterprise data access, identity-aware retrieval, authorization services, metadata management, and AI-powered search systems
Requirements
Bachelor's or Master's degree in Computer Science, Engineering, or a related technical field
Manager, Cyber AssuranceNewIncome Insurance Limited · Singapore
Senior Engineering Manager – DataHub PlatformNewNutanix, Inc. · Vancouver, Canada+11 more
Content and Regulatory Analyst, AI and Content Abuse, Trust and SafetyNewAmazon · Dublin, Ireland
Information Security Specialist INewFarmers Insurance · Remote, Mexico