1. Home
  2. »All Job Categories
  3. »Compliance Jobs

Auto-apply to these compliance jobs

We've scanned millions of jobs. Simply select your favorites, and we can fill out the applications for you.

Klaviyo logo
KlaviyoDenver, CO
At Klaviyo, we're on a mission to empower creators to own their destiny. Our AI-first B2C CRM platform empowers 176,000+ brands in 80+ countries to cultivate relationships with hundreds of millions of consumers. We love solving hard problems and look for people who specialize in certain areas while being passionate about building, owning, and scaling solutions end-to-end, overcoming any obstacle in their way. We are a team of ambitious, customer-obsessed peers who are insatiably curious and meticulous in our craft. We push each other to grow beyond our comfort zone, learn new things, and work hard to ensure each day is better than the last. About this role Within our Information Security department, the Security Trust & Risk (STAR) group enables Klaviyos to take smart, disciplined risks while bolstering customer trust. To that end, within STAR, our Security Trust & Compliance team drives the following programs: Compliance operations & audits (for SOC 2, ISO 27001, ISO 27017, PCI, and SOX ITGCs) Continuous control monitoring Security policies & standards Security education & awareness Customer trust operations & enablement (e.g. security questionnaires, customer calls, trust center administration, tech partner due diligence, etc.) Identity governance (e.g. user access reviews, just-in-time access workflows, just-enough-access audits/remediation) Privacy operations in partnership with Legal (e.g. data subject requests, records of processing activities, etc.) We're seeking a highly motivated Manager of Security Trust & Compliance to lead and support a talented team of GRC practitioners to drive the continuing evolution of these programs. You'll partner closely with cross-functional teams, such as Engineering, Sales, Legal, IT, Security, Internal Audit, and more. Through all of this, you'll help Klaviyo scale securely, sustainably deliver more value for our customers, and bolster their trust in us. What you'll be doing Lead, support, and develop our Trust team, helping your team members with professional development, goal achievement, and partnering effectively across Klaviyo Partner with STAR team leadership to plan, oversee, and drive execution of our projects and operations to ensure timely delivery of high-quality business outcomes Define a compelling vision/strategy for our Trust programs to continuously improve the efficiency and effectiveness of how we drive governance, cultivate culture, uphold compliance, and bolster trust Continuously seek out and prioritize high-value opportunities for the Trust team to use AI and automation to streamline our processes and eliminate toil Drive cross-functional alignment between the CISO organization and partner teams to ensure Trust-related priorities are strongly aligned with department- and company-level goals/OKRs We'd love to hear from you if you have many of the following: Experience leading, developing, and managing teams of individual contributors, with an intentional focus on fostering diversity and belonging throughout the entire employee lifecycle Broad and deep understanding of modern cloud-native web application architectures and related security best practices, especially in the context of AWS, Kubernetes, and AI Experience implementing Compliance Automation products, such as Drata, Vanta, Anecdotes, HyperProof, etc. Experience executing/leading compliance programs for SOC 2, ISO 27001, ISO 27017, ISO 27018, PCI, HIPAA, GDPR, CCPA, and NIS2 Experience executing/leading core governance, compliance, and trust programs, such as continuous control monitoring, security policies & standards, security education & awareness, and customer trust operations Experience applying GRC Engineering principles and values in practice, especially with regard to automation, systems + design thinking, and threat-informed GRC Everyone on our team must have: A strong bias toward evidence, logic, math, and reason when communicating risk (instead of fear, uncertainty, and doubt) A strong bias toward "guardrails, not gates" and "paved security roads" philosophies (instead of rigid "centralized command-and-control" processes and operating styles) Excellent ability to plan, prioritize, and deliver results cross-functionally and in a timely fashion Proficiency discussing complex, nuanced topics with technical & non-technical audiences alike, especially software engineers Strong alignment with Klaviyo's core values Ideally, you may also have any of the following: Experience with SQL, building tools with REST APIs, and Python Experience implementing Identity Governance tools and processes, such as for user access reviews (UARs) and just-in-time access (JITA) Experience working in security operations, security engineering, and/or security architecture roles We use Covey as part of our hiring and / or promotional process. For jobs or candidates in NYC, certain features may qualify it as an AEDT. As part of the evaluation process we provide Covey with job requirements and candidate submitted applications. We began using Covey Scout for Inbound on April 3, 2025. Please see the independent bias audit report covering our use of Covey here

Posted 30+ days ago

G logo
Givaudan LtdEast Hanover, NJ

$120,000 - $160,000 / year

Join us and celebrate the beauty of human experience. Create for happier, healthier lives, with love for nature. Together, with our customers, we deliver food innovations, craft inspired fragrances and develop beauty and wellbeing solutions. There's much to learn and many to learn from, with more than 16,000 employees around the world to explore ideas and ambitions with. In the USA, we develop, market and produce a wide array of solutions from our 25 most innovative sites, based across the country. Stretch your skills, create and get inspiration from passionate colleagues. Every day, your energy, your thirst for knowledge, and your creativity will shape our future, making a positive difference on billions of people. Every essence of you enriches our world. We are Givaudan. Human by nature. We are looking for an experienced Toxic Substances Control Act (TSCA) Chemical Regulation and Premarket Notification (PMN) Expert to join our dynamic team! As a Regulatory Affairs Technical Senior Manager, you will be an integral part of the Regulatory Affairs Product Safety (RAPS) team reporting directly to the Global Chemical Innovation Service organization and functionally to the North American and you will be based in Ridgedale, New Jersey. You will navigate and ensure compliance with chemical regulations in the United States and Canada and and work with external partners, internal customers and regional regulatory bodies on Regulatory matters. You will bring your expertise to the team and to our customer, to leverage true business partnership opportunities for our Business. You will also be an important contributor to our customer relationships to deliver the best technical consulting to our key B2B customers. In this exciting role you will: Ensure compliance with chemical regulations, including TSCA (Toxic Substances Control Act), FIFRA in the US and CEPA (Canadian Environmental Protection Act) in Canada. Stay informed of changes in chemical legislation and assess their impact on company operations. Manage the PMN process for new chemical substances in both US and Canadian markets. Prepare and submit PMN dossiers to appropriate regulatory bodies, monitoring their progress and addressing any inquiries. Provide technical regulatory guidance for FEMA GRAS registration as foodingredients and FIFRA registrations and may support registrations accordingly Identify early legislative and regulatory issues that affect the business and advise on risks due to safety or regulatory developments. Conduct risk assessments for chemical substances and develop strategies to reduce potential hazards. Collaborate with our teams to ensure products meet safety and environmental standards. Compile and maintain regulatory documentation and databases. Prepare reports and communicate findings to senior management and stakeholders. Be the primary contact for regulatory agencies, industry associations, and third-party consultants. Provide advice to product development teams on regulatory requirements and best practices. Develop and deliver training programs to educate staff on regulatory requirements and compliance issues. Foster a culture of compliance and continuous improvement. Your professional profile includes: Master degree in Chemistry, Environmental Science, Regulatory Affairs, or a related field. Minimum of 8 years of experience in chemical regulation and compliance in the US and Canada. In-depth understanding of TSCA, CEPA, and related chemical regulatory frameworks. Experience with Premarket Notification (PMN) submissions and approvals. Ability to stakeholder engagement What We Can Offer You: Healthcare Plan: Medical Dental Vision High matching 401k plan Vacation days The established salary range for this position is $120,000 - 160,000 annually. Actual compensation will depend on individual qualifications. #LI-Onsite #ZR At Givaudan, you contribute to delightful taste and scent experiences that touch people's lives. You work within an inspiring teamwork culture - where you can thrive, collaborate and learn from other talented and passionate people across disciplines, regions and divisions. Every essence of you enriches our world. Diversity of perspectives fuels innovation and fosters deeper connections with our employees, customers, and partners. At Givaudan, we are dedicated to cultivating an inclusive environment where every individual's voice is valued and has the power to shape our world. Join us in making a difference together. Remote working: Hybrid At Givaudan, you contribute to delightful taste and scent experiences that touch people's lives. You work within an inspiring teamwork culture - where you can thrive, collaborate and learn from other talented and passionate people across disciplines, regions and divisions. Join us and Impact Your World Diversity drives innovation and creates closer connections with our employees, customers and partners. Givaudan embraces diversity and is committed to building an inclusive environment where everyone impacts our world.

Posted 30+ days ago

Precision Medicine Group logo
Precision Medicine GroupBethesda, MD

$162,000 - $243,000 / year

We are seeking an experienced Associate Director of Global Privacy and Compliance to lead the design, implementation, and oversight of Precision Medicine Group global privacy and compliance and program. This role ensures that the company meets all regulatory, ethical, and corporate standards across multiple jurisdictions, supporting our mission in clinical research and pharmaceutical development. Compliance Program Leadership and Oversight Lead the global privacy program, ensuring compliance with GDPR, APAC privacy laws, LATAM privacy laws, and other applicable data protection regulations. Oversee privacy impact assessments, data breach response, and cross-border data transfer compliance. Directing a variety of initiatives relating to the development, implementation and monitoring of PMG's Corporate Compliance and Privacy Program. Examples are: Leading an enterprise-wide compliance assessment tailored to the company's business activities and risks, including risk metrics and analysis Developing compliance and privacy programs, policies and procedures Developing, implementing and conducting compliance and privacy training programs Providing supervision and direction to the company's Privacy Operations Manager and Compliance Operations Manager with respect to privacy compliance matters Managing Precision Data Protection Officer Liaising as appropriate with key PMG internal and external legal, regulatory, finance, and other business units as well as US based legal department. Design, implement, and manage the company's global compliance program, ensuring alignment with international regulations and corporate standards. Develop and maintain compliance policies, procedures, and training programs across all regions. Risk Management & Monitoring: Enterprise Risk Management (ERM) Lead the companies global ERM process Conduct risk assessments and implement monitoring systems to identify and mitigate compliance and privacy risks. Report on compliance metrics and trends to senior leadership and the General Counsel. Regulatory Engagement Stay ahead of evolving global regulations impacting CRO and pharmaceutical R&D, including anti-bribery, anti-corruption and international data privacy laws. Serve as primary liaison with regulatory authorities on compliance and privacy matters. Training & Culture Develop and deliver compliance and privacy training programs for employees globally. Foster a culture of integrity and accountability throughout the organization. Incident Management Oversee investigations into compliance or privacy breaches and ensure timely remediation. Coordinate with internal Quality, IT or legal team on corrective actions. Senior Stakeholder Management Developing a thorough understanding of and familiarity with PMG's business, its people, services, markets, facilities, customers, and competitors in order to identify risk trends and formulate structures, strategies and advice accordingly Establishing a strong working relationship with management at all levels to encourage and continue the proactive use of in-house legal counsel Performing special assignments or projects, without significant supervision, as assigned by the General Counsel and Chief Compliance Officer Qualifications and Competencies: Law degree or equivalent advanced degree; certification in compliance or privacy (e.g., CCEP, CIPP/E) preferred. 10+ years of experience in compliance and privacy, with at least 5 years in a leadership role within CRO, pharma, or life sciences. Deep knowledge of global compliance frameworks and data privacy regulations (GDPR, APAC laws, HIPAA). Previous experience in a regional compliance leadership role in the life sciences sector. Significant experience with compliance risk assessment and analysis methodologies Strong leadership, communication, and stakeholder management skills. Fluent in English; additional languages a plus. Precision is required by law in some states or cities to include a reasonable estimate of the compensation range for this role. This compensation range takes into account the wide range of factors that are considered in making compensation decisions including but not limited to: skill sets, experience and training, licensure and certifications, and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Precision, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. This role is also eligible for a discretionary annual bonus, health insurance, retirement savings benefits, life insurance and disability benefits, parental leave, and paid time off for sick leave and vacation, among other benefits. Reasonable estimate of the current range $162,000-$243,000 USD Any data provided as a part of this application will be stored in accordance with our Privacy Policy. For CA applicants, please also refer to our CA Privacy Notice. Precision Medicine Group is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, age, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status or other characteristics protected by law. If you are an individual with a disability and require a reasonable accommodation to complete any part of the application process or are limited in the ability or unable to access or use this online application process and need an alternative method for applying, you may contact Precision Medicine Group at QuestionForHR@precisionmedicinegrp.com. It has come to our attention that some individuals or organizations are reaching out to job seekers and posing as potential employers presenting enticing employment offers. We want to emphasize that these offers are not associated with our company and may be fraudulent in nature. Please note that our organization will not extend a job offer without prior communication with our recruiting team, hiring managers and a formal interview process.

Posted 2 weeks ago

Stratasys logo
StratasysRehovot (Hybrid), IL
Stratasys is a world leader in 3D printing! Stratasys is leading the global shift to additive manufacturing with innovative 3D printing solutions for industries such as aerospace, automotive, consumer products and healthcare. Through smart and connected 3D printers, polymer materials, a software ecosystem, and parts on demand, Stratasys solutions deliver competitive advantages at every stage in the product value chain. The world's leading organizations turn to Stratasys to transform product design, bring agility to manufacturing and supply chains, and improve patient care. As a member of the Regulatory Affairs Team, the Chemical regulatory compliance specialist will play a crucial role in ensuring compliance with regulatory standards and managing projects related to regulatory affairs. You will be responsible for managing the creation, distribution, and compliance of Safety Data Sheets (SDS) for Materials. As part of the role, you will collaborate with cross-functional teams, including R&D, Product, Engineering and Legal, to ensure the successful development, registration, and maintenance of our products in compliance with relevant regulations and standards. Relevant standards include, but not limited to: REACH, SVHC, TSCA, Prop 65, RoHS, chemical emissions, medical certifications, food contact approvals, and transportation of chemicals. Key Responsibilities: Develop, update, and maintain SDS for all products in compliance with CLP, GHS, and other relevant regulations. Ensure timely distribution of SDS to customers and stakeholders. Monitor changes in regulations and standards related to chemical safety and ensure compliance across all products. Liaise with regulatory agencies and industry groups to stay informed on best practices and compliance updates. Provide training to internal teams and stakeholders on SDS compliance and understanding. Assist in resolving any compliance-related questions or issues raised by customers or employees. Maintain accurate records of all SDS and compliance-related documentation. Ensure documentation meets quality standards and is readily accessible for audits. Work closely with all departments to ensure accurate chemical information and compliance. Qualifications & skills: Degree in Chemistry, Chemical Engineering, or related field Hands-on work with an SDS authoring system is a must Deep understanding of chemical hazard classification minimum of 3 years of experience in chemical compliance or safety data management with in-depth knowledge of CLP, GHS, and other relevant regulations, gained from experience in a manufacturing or chemical industry setting. Toxicology background - advantage Experience in formulation development is a plus. English speaker / fluent English (verbal and written) What you will be part of: Company Overview - https://www.stratasys.com/en/about-us/history/ Our Culture and Values - https://www.stratasys.com/en/about-us/culture/ Our Sustainability "3D Printing a Better Tomorrow" - https://www.stratasys.com/en/about-us/sustainability/ Our Locations - https://www.stratasys.com/en/contact-us/office-locations/ Check out our Video - https://www.youtube.com/watch?v=6wmDfmt2bNI

Posted 3 weeks ago

M logo
Metropolitan Transportation AuthorityNew York, NY

$100,000 - $110,227 / year

Position at MTA Headquarters JOB TITLE: Manager, MWDBE Contract Compliance DEPT/DIV: Department of Diversity & Civil Rights WORK LOCATION: 2 Broadway FULL/PART-TIME FULL SALARY RANGE: $100,000 - $110,227 DEADLINE: Until filled This position is eligible for teleworking, which is currently one day per week. New hires are eligible to apply 30 days after their effective hire date. Opening: The Metropolitan Transportation Authority is North America's largest transportation network, serving a population of 15.3 million people across a 5,000-square-mile travel area surrounding New York City, Long Island, southeastern New York State, and Connecticut. The MTA network comprises the nation's largest bus fleet and more subway and commuter rail cars than all other U.S. transit systems combined. MTA strives to provide a safe and reliable commute, excellent customer service, and rewarding opportunities. Position Objective: The Manager, MW/DBE & SDVOB Contract Compliance will be responsible for ensuring that the Prime Contractors and Subcontractors comply with all relevant laws, rules, regulations, and contract provisions governing the M/W/DBE & SDVOB program. The Manager, MW/DBE & SDVOB Contract Compliance will establish M/W/DBE goals, attend qualification hearings and kick-off meetings, conduct applicable research on contracts and/or compliance issues; as well as work conjunctively with the project managers to ensure that contractors input their respective monthly payment data reports into the contract compliance system, conduct applicable monthly payment data reports analysis, conduct site visits, review and process goal waivers and reduction requests (as necessary), and input reports for a sizeable number of contracts, compile and produce requisite reports and participate in outreach events, as assigned. Prepare evaluations of MW/DBE & SDVOB goal achievements. The incumbent works closely with MTA and its Agencies' Procurement staff and Project Managers. The Manager works in conjunction with the Project Manager to ensure that all established MW/DBE & SDVOB goals are achieved. Responsibilities: Reviews all agency requisition/requirements for goods, services, and capital related contracts to establish MW/DBE & SDVOB participation goals. Responsible for identifying and contacting MW/DBEs & SDVOBs capable of providing goods and services. Analyzes bids/proposals submitted to ensure compliance with MW/DBE& SDVOB participation regulations. Attends pre-bid, pre-construction meetings, contractor selection panels, and other meetings as required. Reviews and verifies subcontractor's and/or contractor's MW/DBE & SDVOB certification. Conducts site visits to review contractors' invoices, work samples, and other relevant documents. Inputs interview results into the New York State Contract System. Ensures Prime Contractor's and Subcontractor's compliance with applicable federal and state regulations, policies/procedures, and contract provisions. Researches and develops projections, in conjunction with the agency's procurement departments, for procurement categories for possible MW/DBE & SDVOB contracting opportunities. Collects, analyzes, and presents related data and analysis to resolve problems, as necessary Monitors, evaluates, and investigates contracts to ensure commitment and compliance in meeting MW/DBE & SDVOB goals, in accordance with MTA policy and applicable federal and state regulations. Work conjunctively with Project Managers to ensure that contractors input the monthly payment data reports into the New York State Contract System by the 10th of each month. Discusses contract irregularities with Chief Diversity & Inclusion Officer, Deputy Chief Diversity Officer MW/DBE & SDVOB Contract Compliance, Senior Director- MW/DBE & SDVOB Contract Compliance, and Senior Director, Audits/Investigations Contract Compliance for possible referral to Inspector General. Reviews Goals Not Met report monthly and meets with Project Manager and/or contractor to discuss ways to meet or exceed assigned goals. Analyzes the contractor's Good Faith Efforts to determine if consistent with federal and state requirements. Respond to contractor or MTA Agency staff requests for goal waiver and/or goal reduction. Respond to requests on MW/DBE & SDVOB goal achievements for staff summaries that are to be presented to the MTA Board. Strong knowledge of Federal and State regulations governing MW/DBE & SDVOB programs and requirements Maintains accurate records and statistics on MW/DBE & SDVOB utilization at MTA-HQ and all MTA Operating Agencies. Operating Agencies. Assists in the accurate and effective preparation of reports. Monitors and evaluates contractors' compliance with MW/DBE & SDVOB requirements. Supports the Senior Director, Audits/Investigations Contract Compliance in all research and special programs as may be required. Assist the Senior Director, Outreach, with outreach events and activities, as required. Interacts with MTA Agencies' Procurement staff and Project Managers. Observing the work performed by the contractor; Reviewing invoices and approving them if the work meets contractual standards; Addressing performance issues with the contractor when possible; and Escalating issues to other parties as needed. Performs other duties, as assigned. Qualifications: Knowledge/Skills/Abilities: A working knowledge of the MTA procurement process, as well as an overall understanding of the MTA and its operating agencies' operations, is preferred. Excellent databases and database management proficiency, i.e., Access. Proven experience in timely and quality-driven report-writing and report generation PC proficiency, including WORD and Excel Knowledge of MW/DBE & SDVOB programs and operations. Prior experience in procurement and/or construction management. An understanding of the general procurement process is preferred. Basic understanding of accounting, financial, legal, and business operations. Extremely detailed oriented, able to work on multiple projects effectively Excellent oral and written communication skills. Familiarity with the MTA's contract compliance system and/or other databases management systems. Must be willing and able to travel throughout the MTA service area Required Education and Experience: Bachelor's Degree (or equivalent) plus a minimum of four (4) years' experience in MW/DBE (Federal- DBE / NYS- MWBE) programs, of which at least two years are in a nonclerical role, Minimum of four (4) years research experience with a proven understanding of research techniques, including data collection, data analysis, issues identification, and problem resolution; Minimum of four (4) years' experience monitoring and reviewing scopes of work and cost estimating of the various contractor trades, or MW/DBE/SDVOB Contract Compliance experience is preferred. Preferred: Master's degree in a related field. At least 3 years in a managerial and/or leadership role. Prior experience working in a large, multi-faceted, fast-paced organization or governmental body. Attainment of or in the process of attaining specific functional licenses or certifications in the area of specialty, if applicable. Attainment of or in the process of attaining a P.E. license from New York State. Familiarity with the MTA's policies and procedures. Familiarity with the MTA's collective bargaining procedures. Other Information May need to work outside of normal work hours (i.e., evenings and weekends) Travel may be required to other MTA locations or other external sites. According to the New York State Public Officers Law & the MTA Code of Ethics, all employees who hold a policymaking position must file an Annual Statement of Financial Disclosure (FDS) with the NYS Commission on Ethics and Lobbying in Government (the "Commission"). Employees driving company vehicles must complete defensive driver training once every three years for current MNR drivers, or within 180 days of hire or transfer for an employee entering an authorized driving position. Equal Employment Opportunity MTA and its subsidiary and affiliated agencies are Equal Opportunity Employers, including those concerning veteran status and individuals with disabilities. The MTA encourages qualified applicants from diverse backgrounds, experiences, and abilities, including military service members, to apply.

Posted 30+ days ago

Aegon logo
AegonBaltimore, MD

$66,500 - $101,000 / year

Job Family Regulatory Compliance About Us At Transamerica, hard work, innovative thinking, and personal accountability are qualities we honor and reward. We understand the potential of leveraging the talents of a diverse workforce. We embrace an environment where employees enjoy a balance between their careers, families, communities, and personal interests. Ultimately, we appreciate the uniqueness of a company where talented professionals work collaboratively in a positive environment - one focused on helping people look forward and plan for the best life possible while providing tools and solutions that make it easier to get there. Who We Are We believe everyone deserves to live their best life. More than a century ago, we were among the first financial services companies in America to serve everyday people from all walks of life. Today, we're part of an international holding company, with millions of customers and thousands of employees worldwide. Our insurance, retirement, and investment solutions help people make the most of what's important to them. We're empowered by a vast agent network covering North America, with diversity to match. Together with our nonprofit research institute and foundation, we tune in, step up, and are a force for good - for our customers and the communities where we live, work, and play. United in our purpose, we help people create the financial freedom to live life on their terms. What We Do Transamerica is organized into three distinct businesses. These include 1) World Financial Group, including Transamerica Financial Advisors, 2) Protection Solutions and Savings & Investments, comprised of life insurance, annuities, employee benefits, retirement plans, and Transamerica Investment Solutions, and 3) Financial Assets, which includes legacy blocks of long term care, universal life, and variable and fixed annuities. These are supported by Transamerica Corporate, which includes Finance, People and Places, General Counsel, Risk, Internal Audit, Strategy and Development, and Corporate Affairs, which covers Communications, Brand, and Government and Policy Affairs. Transamerica employs nearly 7,000 people. It's part of Aegon, an integrated, diversified, international financial services group serving approximately 23.9 million customers worldwide. * For more information, visit transamerica.com. Job Description Summary Ensure compliance with statutory and regulatory guidelines for ERISA, Internal Revenue Code and other guidance requirements for qualified plans (Sections 401(k)/ 401(a)), Section 403(b) plans, 457 plans, multiple employer plans (MEPs), pooled employer plans (PEPs), and corporate non-qualified plans. Identify and help resolve plan compliance and fiduciary issues (e.g. qualification defects addressed under the IRS' EPCRS and DOL VFCP programs). Propose and help implement best practices for ERISA-compliance plan administration. Notify internal administration teams about impact of new developments and support the development of new products, services, and processes, and provide risk management support. Job Description Responsibilities Research and analyze regulatory guidance from the IRS, DOL, SEC and other applicable agencies, along with new pension legislation. Review and prepare plan analysis for new and existing clients, including issue identification and resolution, best practices, and preparation of client communications, plan forms, and participant communications. Provide regulatory consulting services to help desks and operational areas. Draft technical in-house communications and assist with projects and internal meetings, such as support for Plan Services, Plan Consultants, Compliance Testing, Reporting/Disclosure Unit, Retirement Consulting group and Client Integration team. Support Transamerica's pre-approved plan documents Assist in new product development. Maintain a high-level awareness of ongoing developments in the pension industry. Provide regulatory risk management internally and externally. Qualifications Bachelor's degree in a business-related field or equivalent education/experience. Three years of retirement industry experience in legal, compliance or a similar setting. Understanding of legal requirements for qualified plans (Sections 401(k)/ 401(a)), Section 403(b) plans, Section 457 plans, multiple employer plans (MEPs), pooled employer plans (PEPs), corporate non-qualified plans and ERISA. Research and analytical skills to interpret IRS and DOL regulations and pension legislation. Communication skills (verbal, written, listening) to convey complex, regulatory legal rules and requirements in layman terms. Problem resolution skills, with an emphasis on analysis, formulation and documentation of recommendations. Organization/time management skills to handle multiple projects simultaneously. Preferred Qualifications Working towards a retirement plan certification (e.g. ASPPA, CPC, ERPA, CEBS). Working Conditions Hybrid 3 days a week out of one of our core locations (Baltimore, Cedar Rapids, Denver and Philadelphia) Please note that the compensation information that follows is a good faith estimate for this position only and is provided pursuant to applicable pay transparency and compensation posting laws. It is estimated based on what a successful candidate might be paid in certain Company locations. The salary for this position generally ranges between $66,500 -$101,000 annually. This range is an estimate, based on potential qualifications and operational needs. Salary may vary above and below the stated amounts, as permitted by applicable law. Additionally, this position is typically eligible for an Annual Bonus of 7.5% based on the Company Bonus Plan/Individual Performance and is at the Company's discretion. This job description is not a contract of employment nor for any specific job responsibilities. The Company may change, add to, remove, or revoke the terms of this job description at its discretion. Managers may assign other duties and responsibilities as needed. In the event an employee or applicant requests or requires an accommodation in order to perform job functions, the applicable HR Business Partner should be contacted to evaluate the accommodation request. What We Offer For eligible employees, we offer a comprehensive benefits package designed to support both the personal and financial well-being of our employees. Compensation Benefits Competitive Pay Bonus for Eligible Employees Benefits Package Pension Plan 401k Match Employee Stock Purchase Plan Tuition Reimbursement Disability Insurance Medical Insurance Dental Insurance Vision Insurance Employee Discounts Career Training & Development Opportunities Health and Work/Life Balance Benefits Paid Time Off starting at 160 hours annually for employees in their first year of service. Ten (10) paid holidays per year (typically mirroring the New York Stock Exchange (NYSE) holidays). Be Well Company holistic wellness program, which includes Wellness Coaching and Reward Dollars Parental Leave - fifteen (15) days of paid parental leave per calendar year to eligible employees with at least one year of service at the time of birth, placement of an adopted child, or placement of a foster care child. Adoption Assistance Employee Assistance Program College Coach Program Back-Up Care Program PTO for Volunteer Hours Employee Matching Gifts Program Employee Resource Groups Inclusion and Diversity Programs Employee Recognition Program Referral Bonus Programs Inclusion & Diversity We believe our commitment to diversity and inclusion creates a work environment filled with exceptional individuals. We're thrilled to have been recognized for our efforts through the Human Rights Campaign Corporate Equality Index, Dave Thomas Adoption Friendly Advocate, and several Seramount lists, including the Inclusion Index, 100 Best Companies for Working Parents, Best Companies for Dads, and Top 75 Companies for Executive Women. To foster a culture of inclusivity throughout our workforce, workplace, and marketplace, Transamerica offers a wide range of diversity and inclusion programs. This includes our company-sponsored, employee-driven Employee Resource Groups (ERGs), which are formed around a shared interest or a common characteristic of diversity. ERGs are open to all employees. They provide a supportive environment to help us better appreciate our similarities and differences and understand how they benefit us all. Giving Back We believe our responsibilities extend beyond our corporate walls. That's why we created the Aegon Transamerica Foundation in 1994. Through a mix of financial grants and the volunteer efforts of our employees, the foundation supports nonprofit organizations focused on the things that matter most to our people in the communities where we live and work. Transamerica's Parent Company Aegon acquired the Transamerica business in 1999. Since its start in 1844, Aegon has grown into an international company serving more than 23.9 million people across the globe. * It offers investment, protection, and retirement solutions, always with a clear purpose: Helping people live their best lives. As a leading global investor and employer, the company seeks to have a positive impact by addressing critical environmental and societal issues, with a focus on climate change and inclusion and diversity. As of December 31, 2023

Posted 30+ days ago

Euronet Worldwide, Inc. logo
Euronet Worldwide, Inc.Little Rock, AR
Euronet facilitates the movement of payments around the world and serves as a critical link between our partners - financial institutions, retailers, service providers - and their end consumers, both locally and globally. We are seeking an experienced Internal Audit Manager - Regulatory Compliance to join our Corporate Internal Audit team. This role plays a critical part in evaluating compliance risks, assessing internal controls, and ensuring adherence to regulatory requirements across Euronet's global operations. The ideal candidate will bring a strong background in regulatory compliance, audit methodology, and risk management, paired with the ability to build strong partnerships with business leaders and stakeholders. The ideal candidate is a seasoned audit professional with proven people management skills and the ability to partner effectively with executives, external auditors, and regulators. This hybrid role can be based in our Leawood, KS, Denver, CO or Las Vegas office. Identify and analyze internal and external information to monitor and evaluate regulatory compliance risks. Contribute to the planning, execution, and reporting of the company's Regulatory Compliance Audit Program in close collaboration with business process owners, the corporate controlling team, and external auditors. Drive the identification and assessment of compliance risks and evaluate the design and effectiveness of internal control frameworks across the organization. Execute all phases of the Compliance Audit Program, including risk assessment, scoping, planning, process walkthroughs, control identification, control testing, and reporting. Prepare and deliver accurate, concise, and timely audit reports with clear findings, impact assessments, and actionable recommendations. Partner with process owners to ensure timely remediation and perform follow-up testing for identified compliance exceptions. Provide quarterly updates to executive management on the status of compliance control evaluations and audit findings. Build and maintain strong relationships with internal and external stakeholders to support compliance activities and foster a culture of accountability. Assist with ad hoc operational reviews, process assessments, internal investigations, and management requests.

Posted 3 weeks ago

I logo
Insulet CorporationActon, MA

$217,275 - $325,913 / year

The Head of Technology (GRC) reports directly to the Chief Information Security Officer and plays a pivotal role within Insulet's Chief Technology Office (CTO). This executive will lead an enterprise-wide function that encompasses Information Security, Governance, Technology Risk, and Compliance (GRC), with strategic oversight of internal systems, customer-facing platforms, and clinical data environments. The role includes direct management of senior leaders and tight partnership with leadership across Finance, Global Operations, International Commercial, Product functions, along with other internal compliance and audit functions. This position will be responsible for building Insulet's technology risk, compliance and resiliency strategy, proactively identifying and mitigating risks, and ensuring alignment with external auditors, regulators, and legal teams. The leader chairs the cross-functional Technology Risk Committee and regularly presents, alongside the CISO, to the Executive Leadership Team (ELT) and Board of Directors on compliance/regulatory status, governance, and technology risk posture. The position requires a visionary leader who can formulate and implement a cohesive framework for data governance, business continuity, and technology risk management. This includes oversight of all technology risks-beyond cybersecurity and IT-such as AI usage, data protection, and technology adoption. This leader will influence and advise peers across CTO/R&D (e.g., Systems and Software Engineering), Finance (e.g., Audit and Accounting), Procurement, Regulatory, and Compliance, and will be customer-facing to communicate security controls and compliance adherence. Responsibilities Governance & Policy Leadership Setting the strategic direction of the Technology GRC organization and oversight of the team that designs, implements, and maintains the IT GRC framework, including policies, standards, and controls aligned with business objectives and risk appetite. Oversees and sets the Insulet roadmap for our Information Security Management System (ISMS), ensuring alignment with ISO 27001 and other relevant frameworks. Overseeing self-assessments, escalating decisions and escalations per requirements, to drive decisions, and risk reduction. Govern Business Continuity Management Program and lead risk quantification efforts Risk Management Design and implement a robust Three Lines of Defense (3LOD) framework, clearly delineating roles and responsibilities across business units, risk management, and internal audit to enhance accountability, risk ownership, and assurance effectiveness in alignment with industry best practices. Lead risk assessments activities, integrating findings into Risk Register or into the Enterprise Risk Management (ERM) program. Maintain and report on the risk register, risk treatment plans, and mitigation strategies. Provide actionable, data-driven insights to executive leadership and the Board on risk posture and emerging threats. Regulatory Compliance & Audit Ensure compliance with HIPAA, HITECH, FDA cybersecurity guidance, SOX, GDPR, CMMC and other applicable regulations. Oversee internal and external audits, including SOC 2, ISO 27001, and HITRUST certifications. Serve as the primary liaison to auditors, regulators, and legal teams on cybersecurity compliance matters. Third-Party & Supply Chain Risk Lead the third-party risk management program, including vendor due diligence, contract reviews, and continuous monitoring. Ensure supply chain security practices meet regulatory and industry expectations, including FDA and SEC guidance. Security Awareness & Culture Oversee enterprise-wide security awareness and training programs, including phishing simulations and compliance education. Foster a culture of risk awareness and accountability across all levels of the organization. Incident Response & Resilience Govern the enterprise cyber incident response plan, including tabletop exercises and business continuity planning. Ensure readiness for ransomware, data breaches, and other high-impact events. Lead the development of an enterprise-wide Business Continuity Program (BCP), ensuring readiness for operational disruptions and alignment with risk management strategies. Metrics & Reporting Define and track key performance indicators (KPIs/KRI's) and metrics for risk, quantification, compliance, and control effectiveness. Deliver quarterly board updates, annual program reviews, and ad hoc reports on incidents, audits, and compliance status. Strategic & External Engagement Representing the organization in industry forums (e.g., H-ISAC), regulatory discussions, and peer collaborations. Stay ahead of emerging technologies (e.g., AI, IoMT, cloud) and evolving regulatory landscapes to inform GRC strategy. Develop budgets and resource requirements for direct reporting teams Participate in the development of team strategic plans, annual goal and delivery plans, and quarterly and monthly updates and retrospectives. Required Leadership/Interpersonal Skills & Behaviors Proven executive leader with a track record of building and scaling high-performing, cross-functional teams in complex, regulated environments. Demonstrated ability to influence across the enterprise, including ELT and Board-level stakeholders, to drive alignment and accountability for risk and compliance outcomes. Builds trust quickly and leads with integrity, transparency, and a collaborative mindset. Skilled at navigating ambiguity and driving clarity in high-stakes, fast-paced environments. Required Skills and Competencies Deep expertise in security and risk frameworks and regulations, including NIST CSF, ISO 27001, SOC 2, HIPAA, HITRUST, FDA cybersecurity guidance, GDPR, and SOX. Strong executive presence with the ability to translate complex risk and compliance issues into actionable business insights for C-level and Board audiences. Experience leading enterprise-wide GRC programs that span cybersecurity, privacy, product security, and data governance. Demonstrated success in maturing GRC capabilities through automation, metrics, and continuous improvement. Managed and mentored teams of 15+ or more and held the title of a director or above. Preferred: Advanced degree (e.g., MBA, MS in Cybersecurity, or related discipline). Professional certifications such as CISSP, CISM, CISA, CRISC, or CIPP. Experience with GRC platforms and automation tools (e.g., Archer, ServiceNow GRC, OneTrust). Familiarity with cloud security compliance frameworks (e.g., CSA CCM, FedRAMP, HITRUST for cloud). Experience integrating cybersecurity with enterprise risk management, privacy, and product lifecycle governance. Demonstrated ability to apply a methodical, risk-based approach to evaluating and governing the use of AI technologies across the enterprise. Education and Experience 15-20+ years of progressive experience in information security, risk management, or IT audit, with at least 5 years in a senior GRC leadership role. Proven experience leading global GRC teams and managing complex compliance programs in highly regulated industries (e.g., healthcare, medtech, financial services) Additional Information The position is hybrid at our Acton/SD/Bay Area office. Travel is estimated at 25% but will flex depending on business needs. NOTE: This position is eligible for hybrid working arrangements (requires on-site work from our San Diego, CA or Acton, MA office; may work remotely other days). #LI-Hybrid Additional Information: The US base salary range for this full-time position is $217,275.00 - $325,912.50. Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position in the primary work location in the US. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your Talent Acquisition Specialist can share more about the specific salary range for your preferred location during the hiring process. Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Insulet Corporation (NASDAQ: PODD), headquartered in Massachusetts, is an innovative medical device company dedicated to simplifying life for people with diabetes and other conditions through its Omnipod product platform. The Omnipod Insulin Management System provides a unique alternative to traditional insulin delivery methods. With its simple, wearable design, the tubeless disposable Pod provides up to three days of non-stop insulin delivery, without the need to see or handle a needle. Insulet's flagship innovation, the Omnipod 5 Automated Insulin Delivery System, integrates with a continuous glucose monitor to manage blood sugar with no multiple daily injections, zero fingersticks, and can be controlled by a compatible personal smartphone in the U.S. or by the Omnipod 5 Controller. Insulet also leverages the unique design of its Pod by tailoring its Omnipod technology platform for the delivery of non-insulin subcutaneous drugs across other therapeutic areas. For more information, please visit insulet.com and omnipod.com. We are looking for highly motivated, performance-driven individuals to be a part of our expanding team. We do this by hiring amazing people guided by shared values who exceed customer expectations. Our continued success depends on it! At Insulet Corporation all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. (Know Your Rights)

Posted 30+ days ago

Wolters Kluwer logo
Wolters KluwerPrinceton, NJ

$183,700 - $260,050 / year

About the Role: The Governance and IT Compliance Platform Lead is responsible for the strategic ownership, governance, and operational oversight of the organization's Governance, Risk, and Compliance (GRC) platforms. This role ensures that security, risk, compliance, and audit processes are effectively supported by technology, aligned with organizational policies, and scalable to meet evolving regulatory and business requirements. The position partners with security leadership, IT, product development, legal, compliance, and business stakeholders to enable a consistent, automated, and efficient control environment across the enterprise. Essential Duties and Responsibilities: Platform Strategy & Roadmap: Define and execute the enterprise GRC technology and platform strategy, ensuring alignment with security frameworks (e.g., NIST CSF, NIST 800-53, DORA, etc.). Platform Ownership: Serve as the primary owner of the GRC platform(s), overseeing configuration, integration, upgrades, managing platform changes and roadmap and optimization to meet enterprise needs. Process Enablement: Translate governance, risk, and compliance processes into platform workflows, dashboards, and reporting that support issue management, risk assessments, policy governance, evidence collection, risk register generation and alignment with organizational units. Stakeholder Engagement: Collaborate with information security, IT, compliance, operations, and legal partners in the development, integration, and operation of the platform and intertwined product strategies and roadmaps. Automation & Efficiency: Drive automation of risk and compliance processes to reduce manual effort, improve audit readiness, and increase sustainability of controls. Data & Reporting: Develop dashboards, analytics, and reporting to provide actionable insights to executives, regulators, auditors, and business leadership. Platform Governance: Establish platform governance standards, change control processes, and ongoing lifecycle management and own/drive cross-functional sessions and demand management mechanisms. Vendor Management: Manage relationships with platform vendors and system integrators, including licensing, renewals, escalations, and roadmap discussions. Leadership: Lead and mentor a small team of GRC platform administrators, analysts, or consultants as needed. Skills: Deep understanding of IT risk, security, compliance, and audit frameworks (e.g., NIST CSF, NIST 800-53, ISO 27001, COBIT, SOX, HIPAA, PCI DSS). Strong technical knowledge of GRC platforms (e.g., ServiceNow IRM, Archer, MetricStream, OneTrust, or similar). Proven record of accomplishment of IT change management, system design, and technical product delivery. Experience designing automated workflows, integrations, and reporting dashboards. Excellent stakeholder management, communication, and executive reporting skills. Strong analytical and problem-solving abilities; able to balance risk, efficiency, and business needs. Familiarity with regulatory requirements in multiple jurisdictions (e.g., EU, US, APAC). Knowledge of IT processes such as change management, incident management, and CI/CD integration preferred. Ability to translate complex regulatory and risk requirements into system design. Education Bachelor's degree in computer science, information technology, or risk and governance Preferred: Master's degree in computer science, information technology, or risk and governance Certifications: Servicenow Integrated Risk Management (IRM) Implementer, CRISC, CISA, CISM, CISSP, CDPSE, or similar Required Experience: 12-15+ years of demonstrated progressive experience in IT, Cybersecurity, IT Governance and Risk, and Platform / Tool / Product architecture and management 10 years hands on experience delivering and leading wide-scale GRC platform initiatives and products 8+ years of hands on experience managing GRC platforms and solutions spanning multiple data sources, systems, and systems of record culminating and a centralized GRC ecosystem 5+ years management, enterprise-wide transition, and/or transformation programs Strong experience with various GRC and IT Security systems and platforms such as ServiceNow, and leading IT controls, compliance, scanning, vulnerability, and IT security tools and products Entrepreneurial mindset and proactive way to manage work. Able to deliver with limited oversight and take accountability of actions. Excellent presentation skills, both creating slides and delivering presentations to a variety of audiences. Preferred Experience: Robust system architecture experience and ability to connect functional and operational requirements stemming from risk management and governance into practical cross-system integrations and platforms. Experience building or transforming GRC solutions from one to another, from scratch, and/or through expansion of existing capabilities Travel: Less than 25% Must be able to work hybrid onsite 8 days a month in one of our posted Wolters Kluwer Locations in Eastern time zone or Central time zone Benefits: A comprehensive benefits package that begins your first day of employment. Additional Information: Wolters Kluwer offers great benefits and programs to help meet your needs and balance your work and personal life, including Medical, Dental, & Vision Plans, 401(k), FSA/HSA, Commuter Benefits, Tuition Assistance Plan, Vacation and Sick Time, and Paid Parental Leave. Full details of our benefits are available - https://www.mywolterskluwerbenefits.com/index.html Applicants may be required to appear onsite at a Wolters Kluwer office as part of the recruitment process. Compensation: Target salary range CA, CT, CO, DC, HI, IL, MA, MD, MN, NY, RI, WA: $183,700 - $260,050

Posted 30+ days ago

Keybank National Association logo
Keybank National AssociationAlbany, NY

$94,000 - $175,000 / year

Location: 4910 Tiedeman Road, Brooklyn Ohio The Senior Compliance Officer will be a member of the Consumer Deposit Compliance team within Compliance Risk Management. They will provide subject matter expertise of federal regulations and advanced second line of defense oversight to various lines of business, as they relate to consumer deposit accounts. Additionally, The Senior Compliance Officer will conduct compliance monitoring and testing to ensure compliance risks are mitigated according to Key's Risk & Control Self-Assessment (RCSA) Procedures and applicable policies. The Senior Compliance Office will research, interpret and assist with applying laws and federal regulations to each applicable line of business processes and systems. ESSENTIAL JOB FUNCTIONS Provide advanced subject matter expertise to the first line of defense for the development of new products and/or processes. Conduct compliance monitoring to proactively identify process improvements or control gaps and facilitate necessary changes. Assist with internal and external regulatory compliance exams. Proactively identify process improvements or control gaps and facilitate necessary associated changes. Keep abreast of new laws and regulations. Educate and provide consultative advice on various regulations. Provide independent review and challenge on various line of business activities. Participate in or lead various projects related to mitigating risk to Key. Conduct gap analyses and testing to ensure compliance risks are mitigated appropriately. REQUIRED QUALIFICATIONS Bachelor's Degree required; Juris Doctorate or CRCM preferred. Minimum 5 years of experience as a financial services compliance professional, bank regulator or other comparable legal experience. Demonstrated knowledge of Regulations E, CC, DD and D, Electronic Signatures in Commercia, UDAAP, deposit insurance coverage (12 CFR 330), Joint Guidance on Overdraft Protection Programs, and other social media or advertising requirements. Expertise in regulatory requirements for deposit account origination, including digital origination. Expertise in regulatory requirements for online/mobile deposit account services. Strong relationship management and leadership skills. Proven ability to work in a team environment. Sound decision-making skills; able to make decisions independently and quickly. Solid written and oral communication skills and the ability to communicate up and across the organization. Strong research skills coupled with strong problem solving/analytical skills. Strong attention to detail. COMPENSATION AND BENEFITS This position is eligible to earn a base salary in the range of $94,000.00 - $175,000.00 annually. Placement within the pay range may differ based upon various factors, including but not limited to skills, experience and geographic location. Compensation for this role also includes eligibility for incentive compensation subject to individual and company performance. Please click here for a list of benefits for which this position is eligible. Key has implemented an approach to employee workspaces which prioritizes in-office presence, while providing flexible options in circumstances where roles can be performed effectively in a mobile environment. Job Posting Expiration Date: 12/24/2025 KeyCorp is an Equal Opportunity Employer committed to sustaining an inclusive culture. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, pregnancy, disability, veteran status or any other characteristic protected by law. Qualified individuals with disabilities or disabled veterans who are unable or limited in their ability to apply on this site may request reasonable accommodations by emailing HR_Compliance@keybank.com. #LI-Remote

Posted 30+ days ago

Fox Rothschild logo
Fox RothschildPhiladelphia, PA

$90,000 - $132,000 / year

As a member of the Information Services department, the Lead Analyst, Digital Data Governance & Compliance will drive and support our firm-wide electronic governance initiatives. This key role will focus on ensuring integrity, security, accessibility, and compliance of data assets across the organization. The Lead Analyst will serve as a subject matter expert in data mapping, eDiscovery, Litigation Hold, internal data collections, and regulatory compliance - acting as both a strategic and tactical partner to business units, legal, compliance, and IT teams. ESSENTIAL FUNCTIONS: Data Governance Work closely with the Senior Manager, Digital Data Governance & Compliance to lead the strategy, implementation and management of comprehensive electronic data governance frameworks, standards, and policies. Develop and execute data lifecycle management processes for unstructured and structured digital content. Litigation Hold & Internal Data Collections Develop and execute Litigation Hold process, ensuring data relevant to ongoing or anticipated litigation is properly identified, preserved, and tracked throughout Litigation Hold lifecycle. Lead internal data collections in response to audits, investigations or internal reviews, ensuring completeness, chain of custody, and evidentiary standards are met. Data Mapping & Discovery Lead process for maintaining enterprise data map, ensuring all data assets, flows, and repositories are documented, regularly reviewed, and updated for accuracy. Partner with IT, legal, privacy, and business units to identify, classify, and document digital data assets across systems and platforms. Cross-functional Collaboration Collaborate with cross-functional teams (Legal, Compliance, Information Security, IT, Business Units) to identify risks, close control gaps, and support continuous improvement of data governance practices. Prepare and deliver training, guidance, and communications to staff regarding electronic data governance, best practices, and compliance obligations. Work with the Office of the General Counsel to support internal and external audits and investigations. Technology Strategy & Tools Evaluate and implement digital tools for litigation hold, data mapping, governance, and eDiscovery processes. Recommend solutions that improve efficiency, defensibility, and transparency of digital data operations. ADDITIONAL FUNCTIONS: Available to provide support after normal business hours, if required. Additional duties as assigned. QUALIFICATIONS (EXPERIENCE, KNOWLEDGE, SKILLS, AND ABILITIES): Education: Bachelor's degree in Information Management, Computer Science, Business Administration, or a related field. A combination of education and experience will be considered in lieu of a degree. Experience: 7+ years of experience in digital data governance, compliance, data mapping, litigation hold or eDiscovery roles. Knowledge, Skills, & Abilities: Demonstrated experience with data governance programs, particularly in regulated and/or law firm environments. Working knowledge of SQL, PowerShell, and Power BI technologies. Strong understanding of litigation hold and internal investigation protocols. Familiarity with data governance and data management platforms such as Microsoft Purview, Relativity, or similar platforms. Strategic thinker with strong analytical and critical thinking skills. Excellent written and verbal communication skills. High integrity and sound judgment with sensitive information. WORK ENVIRONMENT & PHYSICAL DEMANDS: This job operates in a clerical, office setting. This role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets and fax machines. PHYSICAL REQUIREMENTS Sedentary work: Exertion of physical strength to lift, carry, push, pull, or otherwise move objects up to 10 pounds. Work involves sitting most of the time. Walking and standing is often necessary in carrying out job duties. VISUAL ACUITY Worker is required to have close visual acuity to perform an activity such as: preparing and analyzing data and figures; transcribing; viewing a computer terminal; extensive reading. COMPENSATION & BENEFITS The salary ranges for this position apply to the respective listed locations. The salary range reflects a variety of factors that are considered in making compensation decisions, including but not limited to experience, education, licensure and/or certifications, geographic location, market demands and other business and organizational needs. It is not typical for an individual to be hired at or near the top of the range for a position. Reasonable estimates of the current ranges for this position are: Las Vegas & Minneapolis: $90,000 to $110,000 Chicago & Atlantic City: $105,000 to $120,000 Denver, Los Angeles, Morristown, Princeton, Washington, DC & Seattle: $115,000 to $126,000 New York & San Francisco: $126,000 to $132,000 For information on Fox Rothschild's compensation and benefits visit: Compensation & Benefits (foxrothschild.com) DISCLAIMER Fox Rothschild LLP is under no obligation to provide sponsorship for this position. Applicants must be currently authorized to work in the United States on a full-time basis now and in the future. The above is intended to describe the general content of and requirements for the performance of this job. It is not a contract or employment agreement and is not to be construed as an exhaustive statement of all functions, responsibilities, or requirements the employee may be required to perform, and the employee may be required to perform additional duties. Additionally, management reserves the right to review and revise the job description at any time. Employment with the firm is at-will. Employees must be able to satisfactorily perform all of the essential functions of the position with or without a reasonable accommodation. If an accommodation request would cause an undue hardship or a safety concern, the individual may not be eligible for the position.

Posted 30+ days ago

Infosys LTD logo
Infosys LTDRichardson, TX
Job Description Position: Trade Surveillance - Risk & Compliance Role: Senior Consultant Location: Richardson, TX Key Responsibilities Collaborate with compliance, risk, and tech teams to shape and execute trade surveillance strategies. Define and document business requirements, user stories, and functional specs to support system development and upgrades. Analyze trade and order data (SQL required) to validate inputs, map attributes, and support data reconciliation. Conduct gap assessments to identify control weaknesses and propose targeted solutions. Support end-to-end delivery - requirements, design, testing, implementation, and post-deployment support. Lead and coordinate UAT activities, issue resolution, and user training sessions. Stay ahead of market abuse regulations (e.g., MAR, MiFID II, Dodd-Frank) and drive compliance through platform enhancements. Work across multiple asset classes and understand how different products impact surveillance coverage. Key Qualifications 3-5+ years as Functional Consultant in capital markets or financial services, with a focus on trade surveillance. Hands-on experience with tools like Actimize, SMARTS, Trading Hub or similar surveillance platforms. Proficiency in SQL and experience working with large datasets and trade/order data. Solid understanding of financial products: equities, fixed income, FX, and derivatives. Familiarity with Agile methodology and SDLC processes. Nice to Have Experience with BI tools (Power BI, Tableau). Knowledge of OMS/EMS platforms and electronic trading flows. Business Development Lead small, medium sized sales pursuits and business development activities ranging from creation of client proposals to formulating commercial constructs / contracts Develop and build relationships at senior management and CXO levels Formulate and present Infosys Consulting propositions and service offerings Basic Qualifications Bachelor's degree or foreign equivalent; or three years of relevant work experience in lieu of every year of education Demonstrated ability in defining, mobilizing and delivering complex change programs in large organizations Strong background of leading teams, comprising both IT and business specialists A demonstrable ability to turn business requirements into technology solutions with the commercial acumen to create supporting business cases Excellent presentation and facilitation skills with ability to build relationships at senior management and CXO levels Successful business development history including exposure to each of the various aspects of a typical sales cycle All candidates must be willing and able to travel up to 100%, depending on client requirements Preferred Qualifications MBA or equivalent advanced degree Experience of leading programs where stakeholder engagement is a key requisite to achieving successful program/project delivery Proven ability to deliver under tight deadlines and challenging constraints Ability to collaborate within the firm and leverage existing resources Demonstrate thought leadership, ability to conceptualize and drive new solution / service offerings and take them to market Ability and willingness to work as part of a cross-cultural team including flexibility to support multiple time zones when necessary Along with competitive pay, as a full-time Infosys employee you are also eligible for the following benefits: Medical/Dental/Vision/Life Insurance Long-term/Short-term Disability Health and Dependent Care Reimbursement Accounts Insurance (Accident, Critical Illness, Hospital Indemnity, Legal) 401(k) plan and contributions dependent on salary level Paid holidays plus Paid Time Off Candidates authorized to work for any employer in the United States without employer-based visa sponsorship are welcome to apply. Infosys is unable to provide immigration sponsorship for this role at this time The job entails sitting as well as working at a computer for extended periods of time. Should be able to communicate by telephone, email or face to face. Travel may be required as per the job requirements.

Posted 2 weeks ago

L logo
LeoLabs, Inc.Chantilly, VA
Why LeoLabs? At LeoLabs, we're building the living map of activity in space. Through our proprietary global radar network and AI-enabled analytics platform, we collect millions of measurements daily on more than 241,000 objects in low Earth orbit (LEO). Our radar-powered intelligence protects billions in assets, monitors adversarial behavior, and ensures safe operations for commercial and government missions. We're not just building technology, we are redefining global security, safety, and transparency in space. As orbital activity accelerates and threats grow more complex, LeoLabs is a trusted partner for Space Domain Awareness, Space Traffic Management, and Satellite Operations for top-tier space operators and allied defense organizations. If you're looking to work on mission-critical challenges at the forefront of aerospace, national security, and AI, your impact starts here. Director, Information Security Governance, Risk & Compliance (GRC) Summary: This role leads LeoLabs' global Information Security Governance, Risk, and Compliance (GRC) programs, reporting to the Chief Legal Officer (CLO) and working in direct partnership with the Chief Operating Officer (COO). The Director drives enterprise-wide cybersecurity strategy, risk management, and compliance initiatives - ensuring protection of critical business processes, IT systems, and Operational Technology infrastructure. The role requires strong technical expertise, leadership acumen, and the ability to balance strategic direction with tactical execution across multiple geographies and stakeholders. Top Priorities Lead and mature the enterprise cybersecurity and GRC strategy - build scalable governance frameworks and ensure alignment with business goals. Assess and mitigate organizational risk - conduct risk assessments, close compliance gaps, and drive remediation of vulnerabilities. Ensure regulatory and contractual compliance - manage frameworks such as FedRAMP, CMMC, NIST, ISO 27001, GDPR, and others. Oversee incident response and resilience - develop and execute response plans, lead cross-functional remediation, and report to executive leadership. Partner across the enterprise - build collaboration with Legal, HR, IT, and Operations to embed security and compliance awareness. Drive major transformation initiatives - including AI adoption risk frameworks, Post-Quantum Cryptography, and Zero Trust architecture implementation. Key Responsibilities Strategic Leadership Develop, implement, and monitor a comprehensive enterprise cybersecurity and risk management program. Oversee tactical execution of short- and long-term objectives for all GRC activities, including budget, staffing, and performance outcomes. Establish performance metrics and transparent reporting to demonstrate organizational and operational security health. Risk & Compliance Management Conduct enterprise and tactical risk assessments to identify critical risks and vulnerabilities. Develop remediation plans to mitigate risks to confidentiality, integrity, and availability of data. Lead compliance readiness efforts (e.g., FedRAMP, CMMC, ATO frameworks, NIST CSF, ISO 27001, GDPR, FAR/DFAR, CCPA). Implement and manage third-party Vendor Risk Management and assessment programs. Policy, Governance, & Auditing Define, enforce, and maintain security policies, standards, and procedures in collaboration with stakeholders. Manage periodic audits and compliance assessments, reporting on program maturity, risk posture, and performance to executives. Lead the adoption of eGRC tools and automation to improve visibility and accountability across business units. Incident Response & Operational Security Lead development and execution of the incident response plan; coordinate investigations and remediation activities. Partner with threat intelligence and vulnerability management teams to prioritize and close high-risk issues. Ensure that security controls and technologies are properly configured and continuously monitored. Cross-Functional Collaboration Build strong partnerships with Legal, Security, Compliance, HR, IT, and Operations teams. Foster a security-first culture through training and awareness programs. Serve as a key point of contact for internal and external audits, customer inquiries, and global stakeholder engagement. Special Programs Serve as lead for SCIF accreditation and COMSEC custodianship in accordance with classified security requirements. Lead innovation initiatives including: Development of AI Risk Frameworks tailored to LeoLabs' environment. Preparation for Quantum Computing and Post-Quantum Cryptography adoption. Implementation and ongoing maturity of Zero Trust principles across the enterprise. Education & Certifications Bachelor's Degree required; advanced degree in Information Security or Computer Information Technology preferred. Certifications such as CISSP, CISM, CRISC, CISA highly desirable. Experience & Skills 10-12 years of related experience, with 5+ years in supervisory or program/project management roles. Expertise in cybersecurity governance, risk management, and compliance frameworks (NIST 800-53/171, CMMC, ISO 27001, Cloud Security Alliance). Strong grasp of cloud infrastructure, access controls, and change management. Demonstrated experience with agile methodologies and organizational change management. Excellent executive communication, analytical, and problem-solving skills. Proven ability to manage competing priorities in a fast-paced, global environment. Results-oriented with exceptional attention to detail and accountability. Leadership Focus This leader will: Oversee enterprise cybersecurity and GRC strategy. Manage information security programs, ensuring alignment and regulatory compliance. Serve as a trusted advisor to the CLO and COO. Represent LeoLabs in interactions with regulators, partners, and external stakeholders. Perks and Benefits Global workforce: flexible remote/hybrid opportunities Work on complex, meaningful missions with real-world impact Unlimited paid time off for most roles Competitive salary and equity packages Comprehensive health, dental, and vision coverage Access to the forefront of commercial space operations and defense innovation All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identify, national origin, disability, or status as a protected veteran.

Posted 30+ days ago

Keybank National Association logo
Keybank National AssociationAlbany, NY

$94,000 - $175,000 / year

Location: 4910 Tiedeman Road, Brooklyn Ohio The Senior Compliance Officer will be a member of the Consumer Deposit Compliance team within Compliance Risk Management. They will provide subject matter expertise of federal regulations and advanced second line of defense oversight to various lines of business, as they relate to consumer deposit accounts. Additionally, The Senior Compliance Officer will conduct compliance monitoring and testing to ensure compliance risks are mitigated according to Key's Risk & Control Self-Assessment (RCSA) Procedures and applicable policies. The Senior Compliance Office will research, interpret and assist with applying laws and federal regulations to each applicable line of business processes and systems. ESSENTIAL JOB FUNCTIONS Provide advanced subject matter expertise to the first line of defense for the development of new products and/or processes. Conduct compliance monitoring to proactively identify process improvements or control gaps and facilitate necessary changes. Assist with internal and external regulatory compliance exams. Proactively identify process improvements or control gaps and facilitate necessary associated changes. Keep abreast of new laws and regulations. Educate and provide consultative advice on various regulations. Provide independent review and challenge on various line of business activities. Participate in or lead various projects related to mitigating risk to Key. Conduct gap analyses and testing to ensure compliance risks are mitigated appropriately. REQUIRED QUALIFICATIONS Bachelor's Degree required; Juris Doctorate or CRCM preferred. Minimum 5 years of experience as a financial services compliance professional, bank regulator or other comparable legal experience. Demonstrated knowledge of Regulations E, CC, DD and D, Electronic Signatures in Commercia, UDAAP, deposit insurance coverage (12 CFR 330), Joint Guidance on Overdraft Protection Programs, and other social media or advertising requirements. Expertise in regulatory requirements for deposit account origination, including digital origination. Expertise in regulatory requirements for online/mobile deposit account services. Strong relationship management and leadership skills. Proven ability to work in a team environment. Sound decision-making skills; able to make decisions independently and quickly. Solid written and oral communication skills and the ability to communicate up and across the organization. Strong research skills coupled with strong problem solving/analytical skills. Strong attention to detail. COMPENSATION AND BENEFITS This position is eligible to earn a base salary in the range of $94,000.00 - $175,000.00 annually. Placement within the pay range may differ based upon various factors, including but not limited to skills, experience and geographic location. Compensation for this role also includes eligibility for incentive compensation subject to individual and company performance. Please click here for a list of benefits for which this position is eligible. Key has implemented an approach to employee workspaces which prioritizes in-office presence, while providing flexible options in circumstances where roles can be performed effectively in a mobile environment. Job Posting Expiration Date: 12/24/2025 KeyCorp is an Equal Opportunity Employer committed to sustaining an inclusive culture. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, pregnancy, disability, veteran status or any other characteristic protected by law. Qualified individuals with disabilities or disabled veterans who are unable or limited in their ability to apply on this site may request reasonable accommodations by emailing HR_Compliance@keybank.com. #LI-Remote

Posted 30+ days ago

Fox Rothschild logo
Fox RothschildChicago, IL

$90,000 - $132,000 / year

As a member of the Information Services department, the Lead Analyst, Digital Data Governance & Compliance will drive and support our firm-wide electronic governance initiatives. This key role will focus on ensuring integrity, security, accessibility, and compliance of data assets across the organization. The Lead Analyst will serve as a subject matter expert in data mapping, eDiscovery, Litigation Hold, internal data collections, and regulatory compliance - acting as both a strategic and tactical partner to business units, legal, compliance, and IT teams. ESSENTIAL FUNCTIONS: Data Governance Work closely with the Senior Manager, Digital Data Governance & Compliance to lead the strategy, implementation and management of comprehensive electronic data governance frameworks, standards, and policies. Develop and execute data lifecycle management processes for unstructured and structured digital content. Litigation Hold & Internal Data Collections Develop and execute Litigation Hold process, ensuring data relevant to ongoing or anticipated litigation is properly identified, preserved, and tracked throughout Litigation Hold lifecycle. Lead internal data collections in response to audits, investigations or internal reviews, ensuring completeness, chain of custody, and evidentiary standards are met. Data Mapping & Discovery Lead process for maintaining enterprise data map, ensuring all data assets, flows, and repositories are documented, regularly reviewed, and updated for accuracy. Partner with IT, legal, privacy, and business units to identify, classify, and document digital data assets across systems and platforms. Cross-functional Collaboration Collaborate with cross-functional teams (Legal, Compliance, Information Security, IT, Business Units) to identify risks, close control gaps, and support continuous improvement of data governance practices. Prepare and deliver training, guidance, and communications to staff regarding electronic data governance, best practices, and compliance obligations. Work with the Office of the General Counsel to support internal and external audits and investigations. Technology Strategy & Tools Evaluate and implement digital tools for litigation hold, data mapping, governance, and eDiscovery processes. Recommend solutions that improve efficiency, defensibility, and transparency of digital data operations. ADDITIONAL FUNCTIONS: Available to provide support after normal business hours, if required. Additional duties as assigned. QUALIFICATIONS (EXPERIENCE, KNOWLEDGE, SKILLS, AND ABILITIES): Education: Bachelor's degree in Information Management, Computer Science, Business Administration, or a related field. A combination of education and experience will be considered in lieu of a degree. Experience: 7+ years of experience in digital data governance, compliance, data mapping, litigation hold or eDiscovery roles. Knowledge, Skills, & Abilities: Demonstrated experience with data governance programs, particularly in regulated and/or law firm environments. Working knowledge of SQL, PowerShell, and Power BI technologies. Strong understanding of litigation hold and internal investigation protocols. Familiarity with data governance and data management platforms such as Microsoft Purview, Relativity, or similar platforms. Strategic thinker with strong analytical and critical thinking skills. Excellent written and verbal communication skills. High integrity and sound judgment with sensitive information. WORK ENVIRONMENT & PHYSICAL DEMANDS: This job operates in a clerical, office setting. This role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets and fax machines. PHYSICAL REQUIREMENTS Sedentary work: Exertion of physical strength to lift, carry, push, pull, or otherwise move objects up to 10 pounds. Work involves sitting most of the time. Walking and standing is often necessary in carrying out job duties. VISUAL ACUITY Worker is required to have close visual acuity to perform an activity such as: preparing and analyzing data and figures; transcribing; viewing a computer terminal; extensive reading. COMPENSATION & BENEFITS The salary ranges for this position apply to the respective listed locations. The salary range reflects a variety of factors that are considered in making compensation decisions, including but not limited to experience, education, licensure and/or certifications, geographic location, market demands and other business and organizational needs. It is not typical for an individual to be hired at or near the top of the range for a position. Reasonable estimates of the current ranges for this position are: Las Vegas & Minneapolis: $90,000 to $110,000 Chicago & Atlantic City: $105,000 to $120,000 Denver, Los Angeles, Morristown, Princeton, Washington, DC & Seattle: $115,000 to $126,000 New York & San Francisco: $126,000 to $132,000 For information on Fox Rothschild's compensation and benefits visit: Compensation & Benefits (foxrothschild.com) DISCLAIMER Fox Rothschild LLP is under no obligation to provide sponsorship for this position. Applicants must be currently authorized to work in the United States on a full-time basis now and in the future. The above is intended to describe the general content of and requirements for the performance of this job. It is not a contract or employment agreement and is not to be construed as an exhaustive statement of all functions, responsibilities, or requirements the employee may be required to perform, and the employee may be required to perform additional duties. Additionally, management reserves the right to review and revise the job description at any time. Employment with the firm is at-will. Employees must be able to satisfactorily perform all of the essential functions of the position with or without a reasonable accommodation. If an accommodation request would cause an undue hardship or a safety concern, the individual may not be eligible for the position.

Posted 30+ days ago

FIGMA logo
FIGMASan Francisco, CA
We're looking for a People Compliance Manager with a passion for building scalable compliance frameworks across the people team. You'll leverage your knowledge of global labor laws and employment regulations to develop global policies, manage government reporting frameworks, and implement core HR compliance initiatives. You'll work cross-functionally with Legal, Finance, Security, and other stakeholders to build and evolve Figma's people compliance framework empowering those teams to execute and maintain the components they own. This is a full time role that can be held from one of our US hubs or remotely in the United States. What you'll do at Figma: Design and implement processes to meet recurring global compliance and audit requirements, including but not limited to EEO-1, OFCCP, global right-to-work verifications, global pay equity reporting, SOC 2, SOX, and other regulatory obligations Lead or support complex cross-functional compliance projects ensuring they're aligned with Figma's broader risk and compliance goals; drive alignment including updates, programs, policies, training, and communication Spearhead global risk assessments to identify HR compliance gaps and prioritize mitigation strategies Create and manage an annual HR compliance calendar that tracks key milestones, results, and dependencies across teams. Oversee internal HR compliance responsibilities including but not limited to policy development and governance (ie benefits, wage and hour, classifications), drafting and maintaining contingent worker policies, and ensuring consistency and clarity across people-facing documentation Serve as a strategic partner to ensure HR policies support broader business requirements, including compliance, data security, and customer obligations. Remain up to date on global employee-related legislative and regulatory developments, and ensure changes to rules and regulations are implemented with People systems, policies, articles, and practices in partnership with the Legal team We'd love to hear from you if you have: Proven experience building or managing an HR or people compliance program with deep knowledge of U.S. labor laws and regulatory frameworks Approach challenges with an analytical and strategic mindset Strong ethical judgement and integrity Project management skills and comfort driving initiatives with multiple cross-functional stakeholders Ability to influence and align across teams While it's not required, it's an added plus if you also have: Supported compliance efforts globally Managed labor / works councils obligations and requirements Understanding of payroll and immigration compliance Exposure to frameworks such as GDPR, Fedramp, and data privacy regulations At Figma, one of our values is Grow as you go. We believe in hiring smart, curious people who are excited to learn and develop their skills. If you're excited about this role but your past experience doesn't align perfectly with the points outlined in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles.

Posted 30+ days ago

A logo
Axis Capital Holdings LTDChicago, IL

$115,000 - $150,000 / year

This is your opportunity to join AXIS Capital - a trusted global provider of specialty lines insurance and reinsurance. We stand apart for our outstanding client service, intelligent risk taking and superior risk adjusted returns for our shareholders. We also proudly maintain an entrepreneurial, disciplined and ethical corporate culture. As a member of AXIS, you join a team that is among the best in the industry. At AXIS, we believe that we are only as strong as our people. We strive to create an inclusive and welcoming culture where employees of all backgrounds and from all walks of life feel comfortable and empowered to be themselves. This means that we bring our whole selves to work. All qualified applicants will receive consideration for employment without regard to race, color, religion or creed, sex, pregnancy, sexual orientation, gender identity or expression, national origin or ancestry, citizenship, physical or mental disability, age, marital status, civil union status, family or parental status, or any other characteristic protected by law. Accommodation is available upon request for candidates taking part in the selection process. Senior Insurance Compliance Analyst Job Family Grouping: Product Development & Support Job Family: Senior Analyst, Product Development & Support How does this role contribute to our collective success? The Senior Insurance Compliance Analyst will have responsibility for identifying and analyzing insurance laws, regulations and bulletins that pertain to the company's Property & Casualty (P&C) insurance products. The successful candidate must demonstrate an intimate knowledge of P&C insurance products and a strong understanding of the different state laws that impact the usage of forms, policyholder notices and state specific endorsements for such products. The position requires a strong sense of individual responsibility, critical thinking, and attention to detail. What will you do in this role? Identify and analyze new insurance laws, regulations and bulletins to determine applicability to existing P&C products. Track legislation for existing P&C products and provide guidance on product revisions Monitor bulletins and circulars from Rate Service Organizations (including ISO) and Independent Bureaus as applicable for impact to the company's P&C products Maintain and continue to develop internal repository of all state specific forms and policyholder notices required for each P&C product on both an admitted and non-admitted basis Research statutes, regulations, bulletins and cases to provide guidance to the product development team on how such authorities impact the structure and forms for P&C products Collaborate with compliance/legal, underwriting, actuarial, claims and operations staff to ensure P&C products comply with state requirements Develop internal tools and resources that outline certain state requirements for P&C products Research general subject matter requests as necessary using on-line resources inclusive of insurance law applications and other available resources. You may also be required to take on additional duties, responsibilities and activities appropriate to the nature of this role. About You: Bachelor's degree coupled with relevant experience reviewing insurance laws, regulations and bulletins. 4+ years of experience in the Property & Casualty insurance industry, preferably with an insurer writing commercial specialty lines of business Familiarity with ISO circulars and insurance product structures Excellent communication, time management and organizational skills Ability to work with individuals at all levels and various departments throughout the company Detail-oriented, with strong analytical, problem-solving, and decision-making abilities Proven ability to manage multiple priorities and adapt to shifting deadlines, including recognizing when to escalate issues appropriately Proficiency with Microsoft Office Suite applications (Word, Excel and PowerPoint) Proficiency with navigating legal resources and sites to identify state authorities that may impact P&C products (Lexis Nexis, Wolters Kluwer and DOI websites) Role Factors In this role, you will typically be required to: Be in the office averaging 3 days per week and as required to perform your job What we offer For this position, we currently expect to offer a base salary in the ranges of $125,000 - $150,000 (New York), $120,000 - $150,000 (New Jersey), $120,000 - $145,000 (Chicago), and $115,000 - $140,000 (Alpharetta). Your salary offer will be based on an assessment of a variety of factors including your specific experience and work location. In addition, you will be offered competitive target incentive compensation, with awards based on overall corporate and individual performance. On top of this, you will be eligible for a comprehensive and competitive benefits package which includes medical plans for you and your family, health and wellness programs, retirement plans, tuition reimbursement, paid vacation, and much more. Where this role is based in the United States of America, this role is Exempt for FLSA purposes.

Posted 30+ days ago

ConductorOne logo
ConductorOneSan Francisco, CA
ConductorOne is the first AI-native identity security platform that protects every identity: human, non-human, and AI. With powerful automation, platform-level AI, and out-of-the-box connectors, it centralizes access visibility, enforces fine-grained controls, enables just-in-time access, and automates user access reviews across all apps. It's easy to use, quick to deploy, and trusted by enterprises like DigitalOcean, Instacart, Ramp, and Zscaler. As a Compliance Engineer at ConductorOne, you'll be responsible for building and operating the systems, processes, and automations that keep our security and compliance programs running smoothly. You'll partner closely with Security, Engineering, and Operations to design controls that scale with the business, maintain audit readiness, and turn compliance from a manual exercise into an integrated part of our platform. You'll manage evidence collection, streamline audits, and continuously improve how ConductorOne meets its commitments - ensuring our infrastructure, products, and practices stay secure, compliant, and efficient as we grow. What you'll do: Own and operate ConductorOne's security and compliance programs such as SOC 1, SOC 2, ISO 27001, and FedRAMP. Partner with Security, Engineering, and SRE to ensure controls are effectively designed, implemented, and continuously monitored. Manage evidence collection and audit readiness while identifying opportunities to automate compliance workflows through tooling and process improvements. Translate compliance requirements into actionable engineering or operational changes - turning policies into code where possible. Collaborate cross-functionally to ensure compliance supports, rather than slows, product delivery and innovation. Develop and maintain documentation, policies, and control mappings that scale with the company. Support customer and prospect requests related to ConductorOne's security and compliance posture. Track evolving standards and regulatory expectations, ensuring the company remains audit-ready as it grows. You would be an excellent candidate if... You have hands-on experience operating or auditing information security and compliance programs. You're comfortable working directly with engineers and can translate between regulatory language and technical implementation. You enjoy finding ways to automate manual tasks and reduce audit friction through code, integrations, or workflow improvements. You're organized, detail-oriented, and calm under the pressure of audit timelines. You thrive in a fast-paced startup environment where processes evolve and impact is visible. You take pride in making compliance both effective and lightweight - enabling security and reliability without unnecessary bureaucracy. Extra Credit if… You've helped a company achieve or maintain multiple security or compliance certifications. You've used or implemented compliance automation tools or built internal equivalents. You have experience integrating compliance evidence collection with engineering systems (GitHub, AWS, Jira, etc.). You've participated in or supported customer security assessments or RFPs. You're familiar with risk management or security control frameworks such as NIST, CIS, or ISO. You have experience working closely with security engineering, DevOps or SRE teams. ConductorOne, Inc. is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status or any other category protected by law.

Posted 30+ days ago

CareBridge logo
CareBridgeMason, OH
PBM Compliance Manager (Claims Audit) Location: This role requires associates to be in-office 1 - 2 days per week, fostering collaboration and connectivity, while providing flexibility to support productivity and work-life balance. This approach combines structured office engagement with the autonomy of virtual work, promoting a dynamic and adaptable workplace. Alternate locations may be considered if candidates reside within a commuting distance from an office. Please note that per our policy on hybrid/virtual work, candidates not within a reasonable commuting distance from the posting location(s) will not be considered for employment, unless an accommodation is granted as required by law. The PBM Compliance Manager (Claims Audit) is responsible for coordinating pharmacy compliance activities and initiatives across the PBM and the enterprise by maintaining department approved regulatory and legislative compliance plan and implementing effective internal controls. How You Will Make An Impact: Interpret and manage audit requirements (i.e., timelines, internal/external meetings, deliverables, etc.). Identifies, monitors, revises and tracks business unit processes and implementing procedures to ensure compliance with all related measures. Identifies potential risks associated with PBM activities and ensures procedures are in place to minimize risks. Partners with business units to ensure compliance with all statutory and regulatory requirements. Participates as compliance subject matter expert on all mandated projects; achieves business operational compliance with all related measures relative to HIPAA and SOX and Privacy and Security Office initiatives. Conducts, directs, leads and facilitates all activities related to Internal and External (Regulatory and Client) audits and responds to findings. Analyze auditor results and findings. Responsible for client implementation testing. Maintain vendor relationships. Performs high level regulatory research, develops strategic plans and pro-actively anticipates business needs and requirements. Develops and implements training and communication plans; manages and leads scheduled and ad-hoc compliance projects; provides and delivers compliance consultation services to the business unit. Minimum Requirements: Requires a BA/BS and minimum of 6 years experience; or any combination of education and experience, which would provide an equivalent background. Preferred Skills, Capabilities & Experiences: MS/MBA or field related professional designation preferred. Travels to worksite and other locations as necessary. Experience with pharmacy claims is preferred. Please be advised that Elevance Health only accepts resumes for compensation from agencies that have a signed agreement with Elevance Health. Any unsolicited resumes, including those submitted to hiring managers, are deemed to be the property of Elevance Health. Who We Are Elevance Health is a health company dedicated to improving lives and communities - and making healthcare simpler. We are a Fortune 25 company with a longstanding history in the healthcare industry, looking for leaders at all levels of the organization who are passionate about making an impact on our members and the communities we serve. How We Work At Elevance Health, we are creating a culture that is designed to advance our strategy but will also lead to personal and professional growth for our associates. Our values and behaviors are the root of our culture. They are how we achieve our strategy, power our business outcomes and drive our shared success - for our consumers, our associates, our communities and our business. We offer a range of market-competitive total rewards that include merit increases, paid holidays, Paid Time Off, and incentive bonus programs (unless covered by a collective bargaining agreement), medical, dental, vision, short and long term disability benefits, 401(k) +match, stock purchase plan, life insurance, wellness programs and financial education resources, to name a few. Elevance Health operates in a Hybrid Workforce Strategy. Unless specified as primarily virtual by the hiring manager, associates are required to work at an Elevance Health location at least once per week, and potentially several times per week. Specific requirements and expectations for time onsite will be discussed as part of the hiring process. The health of our associates and communities is a top priority for Elevance Health. We require all new candidates in certain patient/member-facing roles to become vaccinated against COVID-19 and Influenza. If you are not vaccinated, your offer will be rescinded unless you provide an acceptable explanation. Elevance Health will also follow all relevant federal, state and local laws. Elevance Health is an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to age, citizenship status, color, creed, disability, ethnicity, genetic information, gender (including gender identity and gender expression), marital status, national origin, race, religion, sex, sexual orientation, veteran status or any other status or condition protected by applicable federal, state, or local laws. Applicants who require accommodation to participate in the job application process may contact elevancehealthjobssupport@elevancehealth.com for assistance. Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws, including, but not limited to, the Los Angeles County Fair Chance Ordinance and the California Fair Chance Act.

Posted 30+ days ago

Wolters Kluwer logo
Wolters KluwerCoppell, TX
Wolters Kluwer's ftwilliam.com platform empowers professionals to streamline Defined Benefit (DB) plan compliance testing, valuation, and proposal generation. As an Industry Solutions Consultant- DB Compliance QA, you'll play a critical role in ensuring our solutions meet the highest standards of accuracy and functionality. In this position, you'll leverage your expertise in ERISA regulations and plan design-covering DB plans, DB/DC combo plans, and cash balance plans-to influence feature design and perform rigorous testing. Working within an agile team, you'll help deliver enhancements that make a real impact for our customers, ensuring every release is reliable, compliant, and user-focused. You will report to the Manager, Consulting- Industry Solutions and work a hybrid schedule (2 days in office, 3 days from home) from one of our local offices. Responsibilities: Collaborate with the product owner and development team to refine user stories before development begins Create sample plans, expected results, and acceptance criteria for new features Perform comprehensive testing of new features and document all tests conducted, including manual and automated tests Ensure software functionality aligns with ERISA laws and regulations Stay current with ERISA laws, regulations, and industry standards Maintain detailed documentation for future testing of similar features and enhancements Identify and suggest software improvements during the testing process Keep up to date with best practices in testing methodologies and tools Work closely with other Industry Solutions Consultants to develop consistent testing policies and procedures Qualifications: ASPPA Credential, such as QPA, or NIPA Credential At least 3 years of experience working with peer review in retirement services 1 years of experience working in a development QA environment Experience with customer support is a plus Familiarity with various project management and workflow tools Experience with ftwilliam.com DB Compliance software is a plus Detail oriented Quick learner and self-starter Ability to multi-task Ability to work well in a team Ability to perform well under pressure Ability to perform well with minimal supervision #LI-Hybrid Benefits: A comprehensive benefits package that begins your first day of employment. Additional Information: Wolters Kluwer offers great benefits and programs to help meet your needs and balance your work and personal life, including Medical, Dental, & Vision Plans, 401(k), FSA/HSA, Commuter Benefits, Tuition Assistance Plan, Vacation and Sick Time, and Paid Parental Leave. Full details of our benefits are available - https://www.mywolterskluwerbenefits.com/index.html Diversity Matters: Wolters Kluwer strives for an inclusive company culture in which we attract, develop, and retain diverse talent to achieve our strategy. As a global company, having a diverse workforce is of the utmost importance. We've been recognized by employees as a European Diversity Leader in the Financial Times, as one of Forbes America's Best Employers for Diversity in 2022, 2021 and 2020 and as one of Forbes America's Best Employers for Women in 2021, 2020, 2019 and 2018. In 2020, we placed third in the Female Board Index, and were recognized by the European Women on Boards Gender Diversity Index. Wolters Kluwer and all of our subsidiaries, divisions and customer/departments is an Equal Opportunity / Affirmative Action employer. Applicants may be required to appear onsite at a Wolters Kluwer office as part of the recruitment process.

Posted 2 weeks ago

Klaviyo logo

Manager, Security Trust & Compliance

KlaviyoDenver, CO

Automate your job search with Sonara.

Submit 10x as many applications with less effort than one manual application.1

Reclaim your time by letting our AI handle the grunt work of job searching.

We continuously scan millions of openings to find your top matches.

pay-wall

Job Description

At Klaviyo, we're on a mission to empower creators to own their destiny. Our AI-first B2C CRM platform empowers 176,000+ brands in 80+ countries to cultivate relationships with hundreds of millions of consumers. We love solving hard problems and look for people who specialize in certain areas while being passionate about building, owning, and scaling solutions end-to-end, overcoming any obstacle in their way. We are a team of ambitious, customer-obsessed peers who are insatiably curious and meticulous in our craft. We push each other to grow beyond our comfort zone, learn new things, and work hard to ensure each day is better than the last.

About this role

Within our Information Security department, the Security Trust & Risk (STAR) group enables Klaviyos to take smart, disciplined risks while bolstering customer trust. To that end, within STAR, our Security Trust & Compliance team drives the following programs:

  • Compliance operations & audits (for SOC 2, ISO 27001, ISO 27017, PCI, and SOX ITGCs)
  • Continuous control monitoring
  • Security policies & standards
  • Security education & awareness
  • Customer trust operations & enablement (e.g. security questionnaires, customer calls, trust center administration, tech partner due diligence, etc.)
  • Identity governance (e.g. user access reviews, just-in-time access workflows, just-enough-access audits/remediation)
  • Privacy operations in partnership with Legal (e.g. data subject requests, records of processing activities, etc.)

We're seeking a highly motivated Manager of Security Trust & Compliance to lead and support a talented team of GRC practitioners to drive the continuing evolution of these programs. You'll partner closely with cross-functional teams, such as Engineering, Sales, Legal, IT, Security, Internal Audit, and more. Through all of this, you'll help Klaviyo scale securely, sustainably deliver more value for our customers, and bolster their trust in us.

What you'll be doing

  • Lead, support, and develop our Trust team, helping your team members with professional development, goal achievement, and partnering effectively across Klaviyo
  • Partner with STAR team leadership to plan, oversee, and drive execution of our projects and operations to ensure timely delivery of high-quality business outcomes
  • Define a compelling vision/strategy for our Trust programs to continuously improve the efficiency and effectiveness of how we drive governance, cultivate culture, uphold compliance, and bolster trust
  • Continuously seek out and prioritize high-value opportunities for the Trust team to use AI and automation to streamline our processes and eliminate toil
  • Drive cross-functional alignment between the CISO organization and partner teams to ensure Trust-related priorities are strongly aligned with department- and company-level goals/OKRs

We'd love to hear from you if you have many of the following:

  • Experience leading, developing, and managing teams of individual contributors, with an intentional focus on fostering diversity and belonging throughout the entire employee lifecycle
  • Broad and deep understanding of modern cloud-native web application architectures and related security best practices, especially in the context of AWS, Kubernetes, and AI
  • Experience implementing Compliance Automation products, such as Drata, Vanta, Anecdotes, HyperProof, etc.
  • Experience executing/leading compliance programs for SOC 2, ISO 27001, ISO 27017, ISO 27018, PCI, HIPAA, GDPR, CCPA, and NIS2
  • Experience executing/leading core governance, compliance, and trust programs, such as continuous control monitoring, security policies & standards, security education & awareness, and customer trust operations
  • Experience applying GRC Engineering principles and values in practice, especially with regard to automation, systems + design thinking, and threat-informed GRC

Everyone on our team must have:

  • A strong bias toward evidence, logic, math, and reason when communicating risk (instead of fear, uncertainty, and doubt)
  • A strong bias toward "guardrails, not gates" and "paved security roads" philosophies (instead of rigid "centralized command-and-control" processes and operating styles)
  • Excellent ability to plan, prioritize, and deliver results cross-functionally and in a timely fashion
  • Proficiency discussing complex, nuanced topics with technical & non-technical audiences alike, especially software engineers
  • Strong alignment with Klaviyo's core values

Ideally, you may also have any of the following:

  • Experience with SQL, building tools with REST APIs, and Python
  • Experience implementing Identity Governance tools and processes, such as for user access reviews (UARs) and just-in-time access (JITA)
  • Experience working in security operations, security engineering, and/or security architecture roles

We use Covey as part of our hiring and / or promotional process. For jobs or candidates in NYC, certain features may qualify it as an AEDT. As part of the evaluation process we provide Covey with job requirements and candidate submitted applications. We began using Covey Scout for Inbound on April 3, 2025.

Please see the independent bias audit report covering our use of Covey here

Automate your job search with Sonara.

Submit 10x as many applications with less effort than one manual application.

pay-wall