Lead and manage Ebury’s Information Security and Compliance functions, ensuring robust ISMS, audits, and third‑party risk management while acting as the security SME for business and customer engagements.
Compensation
Competitive Starting Salary with an annual discretionary bonus that truly rewards your performance from day one.
Responsibilities
Maintain security frameworks and governance
Own day‑to‑day audits and third‑party risk
Act as InfoSec SME for sales and product teams
Respond to customer due diligence questionnaires and RFPs
Build and maintain a central library of security evidence
As members of 6sense’s Security department, the Security Engineering team protects the platform. Application Security Engineers work closely with engineering teams, product managers (PM), and third-party entities to ensure that 6sense SaaS products are secure.
Compensation
Base Salary Range: $200,946.75 - $255,721.90. The base salary range represents the anticipated low and high end of the base salary range for this position. Actual salaries may vary and may be above or below the range based on various factors, including but not limited to work location and experience. The base salary is one component of 6sense’s total compensation package for this position. Other compensation may include a bonus program or commission plan, and stock options if approved by 6sense’s board.
Responsibilities
Serve as mentor to other Security Engineers, providing guidance and support
Support and consult with engineering and product teams around application security vulnerabilities.
Assist teams in reproducing, triaging, and addressing application security vulnerabilities identified through Pen Testing, SAST, DAST, or Dependency scans
Take initiative and drive changes in our bug bounty program which position us as an industry leading security program
Lead in development of automated security testing to validate that secure coding best practices are being used
Assess cybersecurity and privacy compliance across products and supporting processes, translate regulatory requirements into actionable controls, maintain audit-ready evidence, and drive identified gaps through remediation and validated closure.
Responsibilities
Collaborate with cross-functional teams to ensure cybersecurity and privacy compliance is represented in processes
Facilitate completion of security compliance questionnaires for vendors, partners, and regulators
Own end-to-end cybersecurity and privacy compliance assessments across product development lifecycle
Analyze newly released or revised regulations, standards, and guidance documents to identify compliance gaps
Collaborate with program managers and product owners to ensure corrective actions are taken
As a Cyber Essentials Analyst, you'll play a key role in helping businesses strengthen their security posture, achieve certification and reduce cyber risk.
Compensation
£35,000 - £40,000 / year
Responsibilities
Guide customers through the full Cyber Essentials and Cyber Essentials Plus certification lifecycle
Conduct readiness assessments across the five Cyber Essentials control areas
Identify compliance gaps, vulnerabilities and areas of non-conformance within customer environments
Provide clear recommendations and remediation plans aligned to IASME and NCSC requirements
Perform light remediation activities including configuration changes, policy updates, security hardening and patch validation
Lead a newly formed platform team to build and own the platform services for the Data Intelligence Platform, focusing on cloud-agnostic deployment, AI integration, and compliance.
Locations (5)
United States
United Kingdom
Spain
France
Germany
Responsibilities
Design platform services for the Data Intelligence Platform (data catalog, knowledge graph, APIs)
As a Security Engineer on the Governance, Risk, and Compliance (GRC) team, you’ll help build and scale programs that support commercial audits, federal compliance, security risk management, vendor risk, policy management, and customer trust.
Locations (4)
United States
Canada
Toronto, Canada
Austin, United States
Compensation
USA-based roles only: The annual base salary for this role is between $123,000 USD and $172,000 USD, plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.
Canada-based roles only: The annual base salary for this role is between $111,000 CAD and $155,000 CAD, plus immediate participation in 1Password’s generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.
Security and Privacy Compliance Analyst - Cybersecurity
As a GRC Analyst within R&D Cybersecurity, you will assess cybersecurity and privacy compliance across products and supporting processes, translate regulatory requirements into actionable controls, maintain audit-ready evidence, and drive identified gaps through remediation and validated closure.
Responsibilities
Collaborate with cross-functional teams to ensure cybersecurity and privacy compliance are represented in team processes
Facilitate the completion of security compliance questionnaires for vendors, partners, and regulators
Own end-to-end cybersecurity and privacy compliance assessments across the product development lifecycle
Continuously analyze newly released or revised regulations, standards, and guidance documents to identify compliance gaps
Maintain audit-ready compliance evidence in the designated GRC platform
Provide technical leadership in complex security incident investigations, drive excellence in incident management and response, and continuously improve security detection capabilities within Reconomy's Information Security team in Romania.
Manage GRC initiatives spanning commercial compliance, federal compliance, security risk, vendor risk, policy management, and customer trust.
Support planning, assessment preparation, remediation, and continuous monitoring activities for FedRAMP, CMMC, NIST 800-53, and related programs.
Partner with control owners, Security, Engineering, Legal, Privacy, auditors, assessors, and business stakeholders to gather evidence, track actions, and resolve gaps.
Define and improve how evidence is generated, validated, mapped to requirements, stored, and traced to its source.
Monitor control health, evidence freshness, configuration drift, exceptions, and remediation progress.
Requirements
Nice to have: authorization boundaries
Nice to have: assessment preparation
Nice to have: Plans of Action and Milestones (POA&Ms)
Nice to have: continuous monitoring
Nice to have: Third-Party Assessment Organization (3PAO) coordination