A technical leadership role focused on product security, regulatory readiness (EU Cyber Resilience Act, AI Act), and engineering controls for compliance.
Compensation
The starting salary range posted for this position is $151,600.00 to $222,400.00 and reflects the projected salary range for new hires in this position in U.S. and/or Canada locations, not including incentive compensation*, equity, or benefits.
Responsibilities
Lead Cyber Resilience Act readiness assessments and translate regulatory requirements into technical controls, implementation plans, and remediation priorities.
Build and improve security and compliance engineering capabilities, including automated evidence collection, control-as-code, dashboards, and continuous monitoring.
Assess sovereign cloud designs, AI capabilities, data flows, and third-party dependencies for security, privacy, and regulatory risks.
Support audits and risk reporting, and help engineers establish sustainable security and compliance practices.
Manages the implementation and ongoing operation of NYGC’s information security program, coordinating risk assessments, compliance, policy development, and incident response across enterprise systems, cloud services, and research environments.
Compensation
The pay range for this position is $130,000-150,000 per year; the base pay offered may vary depending on job-related knowledge, skills, and experience.
Responsibilities
Manage the security program’s annual work plan and implementation of approved priorities
Author, maintain, and coordinate approval of information security policies, standards, and procedures
Coordinate policy implementation, employee communications, periodic reviews, and exception documentation
Coordinate external security service providers and monitor delivery against agreed service expectations
Develop security budget recommendations, evaluate proposed tools and services, and track approved expenditures
Requirements
Bachelor's degree in information security, computer science, or a related field
Technical and analytical GRC Engineer responsible for implementing and maintaining NIST Cybersecurity Framework programs, mapping controls, managing risk registers, and supporting ServiceNow and other GRC tooling.
Compensation
$116,875 - $158,125 per year. The compensation for this position may include a discretionary year-end merit bonus based on performance.
Responsibilities
Contribute to implementation and maintenance of client’s NIST CSF program
Map security controls to NIST requirements and other frameworks
Perform gap analyses and self-assessments
Support delivery of security risk and compliance standards
Maintain risk register and coordinate with teams
Requirements
Associate’s or Bachelor’s degree in information security, information technology, risk management, or a related field
Nice to have: Law firm experience
Nice to have: GRC platform experience
Nice to have: SIEM experience
Nice to have: vulnerability or threat management tools
Contribute to and enhance a complete stack of solutions for Cloud Security & DevSecOps management from a people, process, and technology standpoint.
Develop and implement security controls that are aligned with the organization's security policies and procedures throughout our software delivery lifecycle.
Automate the implementation and testing of these controls.
Monitor their effectiveness and make necessary adjustments.
Investigate and resolve security incidents that are related to security controls.
Lead end-to-end IT audit engagements, from risk assessment and planning through execution, reporting, and follow-up, ensuring compliance with internal and external standards.
Compensation
Base pay hiring range for this role in Milan, Italy: 57,258€ - 69,445€ gross per year, under the Commercio collective agreement, level Quadro.
Responsibilities
Perform initial risk assessment for assigned audit units
Prepare audit scope, objectives, engagement memos and timelines
Lead and manage the organization’s security initiatives, focusing on secure software development lifecycle, vulnerability management, and strategic leadership.
Responsibilities
Strategically lead and manage vulnerability management and application security programs
Oversee integration of security practices within the SDLC
Plan and coordinate annual penetration testing activities
Lead and mentor a team of security professionals
Conduct IT compliance assessments and reviews
Requirements
Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, or a related field
Nice to have: Banking or financial services sector experience
Nice to have: Cloud security architectures and services
When our country’s cybersecurity is on the line, simply reacting is not enough, we need a plan. And when that plan needs to protect our nation's cybersecurity infrastructure, we need strategic policy development.
Compensation
The projected compensation range for this position is $69,400.00 to $158,000.00 (annualized USD).
Responsibilities
Review client’s current cyber policies and coverage
Assess overall risk and collaborate with stakeholders to develop risk acceptance justifications
Develop strategic cyber roadmap and guide client through risk and availability
Ensure client operates securely in evolving IT environment
Lead and oversee a team of security analysts within a federal Security Operations Center (SOC) that operates 24x7x365 across on-premises and cloud environments.
Compensation
Salary: $160K - $205K
Responsibilities
Lead effective, around-the-clock SOC operations across on-premises and cloud environments.
Drive the incident response process from detection through closure.
Communicate SOC performance, incidents, and trends clearly to senior management.
Mature SOC processes, playbooks, and performance measurement.
Manage the contractor SOC staff, reporting to the client’s SOC lead and assigning and deploying staff to achieve SOC objectives identified by the client.
Requirements
Bachelor’s degree in Computer Science or an IT-related discipline
Nice to have: Elastic Security Stack (SIEM, EDR, SOAR)
Nice to have: federal incident reporting requirements
Security Engineering Technical Leader (Remote)NewCisco · Remote, US
Cybersecurity Risk AnalystNewBooz Allen Hamilton · Washington, US
Information Security ManagerNewNew York Genome Center · New York, US
Senior Manager Security AssuranceNewMashreq · Pakistan
SOC ManagerNewRevolutional, LLC · Washington, US