New York City or Chicago or Austin or Dallas or Denver or Miami or San Francisco or Seattle
$270k-$290k/yrHybridFull Time
DriveWealth: Private B2B financial technology platform providing brokerage infrastructure to banks, brokers, asset managers, wallets, and brands.
15+ YOE15+ years in information security/GRC in regulated financial services; deep SEC/FINRA and global privacy knowledge; hands-on GRC, audit, TPRM, incident response, and executive/board reporting; relevant certifications preferred.
Mitsubishi UFJ Financial GroupTokyo Stock Exchange: MUFG: Japanese publicly traded bank holding providing banking, securities, trust, asset-management, leasing, card, and consumer-finance services globally.
4+ YOE4-7 years cyber risk, IT risk, GRC, or information security experience; working knowledge of cybersecurity domains; cloud security concepts; process documentation; regulatory frameworks (NIST CSF 2.0, CRI Profile, NIST SP 800-53, FFIEC, NYDFS Part 500, OCC/FRB); bachelor's degree in information security or related field.
Roper TechnologiesNasdaq: ROP: Public technology developing vertical software and technology-enabled products for specialized niche markets worldwide.
Working knowledge of NIST, CSF, and ISO 27001; experience with GRC platforms (Optro, Vanta) preferred; relevant certifications (CISSP, CISA, CRISC) preferred; ability to travel up to 30% for on-site visits.
United States or Alabama or North Dakota or South Dakota or Arkansas or New Hampshire or District of Columbia or Vermont or Utah or Maryland or Nebraska or Maine or Virginia or Nevada or New Mexico or Indiana or Wyoming or West Virginia or Wisconsin or Washington or Texas or Tennessee or South Carolina or Rhode Island or Pennsylvania or Oregon or Oklahoma or Ohio or North Carolina or New York or New Jersey or Missouri or Mississippi or Minnesota or Michigan or Massachusetts or Louisiana or Kentucky or Kansas or Iowa or Illinois or Idaho or Hawaii or Georgia or Florida or Delaware or Connecticut or Colorado or California or Arizona or Birmingham
3+ YOEBachelor's degree or equivalent; 3+ years audit, risk, or compliance experience; 3+ years with HIPAA, SSAE, SOC1, SOC2; strong communication and analytical skills.
Information Security GRC Analyst III, Controls Assurance
Jacksonville or New York City
$120k-$160k/yrOnsiteFull Time
Fanatics: Global digital sports platform for merchandise, collectibles, and betting.
4+ YOE4+ years in IT audit, IT control testing, or GRC; experience with user access reviews and at least one of PCI DSS, SOX ITGC, SOC, or internal control baseline; bachelor's degree or equivalent; CISA preferred.
Intercontinental ExchangeNYSE: ICE: Global operator of financial exchanges, clearing houses, and mortgage technology.
University degree in information security, engineering, MIS, CIS, or related field, or equivalent experience. Advanced technical writing and communication experience; security certifications and systems or networking experience are beneficial.
New York or Atlanta or Boston or Chicago or Cleveland or Dallas or Detroit or Pittsburgh or Hoboken or Houston or Los Angeles or McLean or Miami or Minneapolis or Charlotte or Philadelphia or Portland or San Francisco or Seattle or North America
$123k-$213k/yrHybridFull Time
EY: Global professional services firm providing assurance, tax, and consulting.
3+ YOERequires 3–5+ years of SAP Security/GRC experience, bachelor's degree preferred, SAP implementation expertise, GRC Access Control and IAM experience, U.S. driver's license, passport, and willingness to travel up to 80%.
SAP Application Security, SAP GRC Access Control, S/4HANA, SAP ECC, FIORI, ARIBA, HCM, SuccessFactors, Saviynt, SailPoint, SAP IAG, ServiceNow, HP ALM, BTP, SAC, AI, RPA
Chicago or Atlanta or Austin or Boston or Charlotte or Cleveland or Columbus or Dallas or Fort Wayne or Grand Rapids or Houston or Indianapolis or Knoxville or Lexington or Los Angeles or Louisville or Miami or Nashville or New York City or Oakbrook Terrace or Sacramento or San Francisco or South Bend or Tampa or Washington +1 more
$78k-$154k/yrOnsiteFull Time
Crowe Advisory LLC: U.S. advisory and consulting firm providing tax, advisory, consulting, and other nonattest services to business clients.
2+ YOEBachelor's degree preferred; 3–5 years professional experience and 2+ years in software implementation or technology consulting. Requires Workiva expertise, requirements analysis, solution design, communication, and project management.
Workiva, RSA Archer, ServiceNow GRC, Onspring, Lockpath, MetricStream, OpenPages, Microsoft Office, Microsoft Excel, Microsoft Word, Microsoft PowerPoint
Omaha or Florida or Iowa or Kansas or Minnesota or Missouri or Nebraska or North Dakota or Texas
HybridFull Time
Blue Cross and Blue Shield of Nebraska: Nonprofit Nebraska health insurer providing health, vision, dental, and travel coverage to groups, individuals, and families.
3+ YOEBachelor's degree in cybersecurity, IT, computer science, risk management or related field; 3-5 years cybersecurity assurance, security operations, engineering, penetration testing, IT audit, GRC or risk management experience; experience with control testing, technical assessments, configuration reviews, vulnerability validation; knowledge of NIST,...
NIST, CIS Controls, HITRUST, HIPAA, ISO 27001, MITRE ATT&CK
CONMEDNYSE: CNMD: Public medical device manufacturer supplying surgical equipment and patient-monitoring products to healthcare providers worldwide.
7+ YOEBachelor's degree in cybersecurity, IT, business, engineering, risk management or related field; 7+ years in cybersecurity, governance, risk, compliance, or audit; experience with NIST CSF, NIST 800-53, ISO 27001, SOX, GDPR, NIS2; GRC platforms like ServiceNow GRC, Archer, OneTrust, AuditBoard.
Senior Analyst, Cyber Governance, Risk and Compliance (GRC)
Coral Gables, Florida, United States
HybridFull Time
H.I.G. Capital: Global private investment firm providing debt and equity capital to mid-market companies.
Bachelor's degree in Information Security, Cybersecurity, Computer Science, MIS, Engineering or related field, or equivalent experience; knowledge of security frameworks (NIST, ISO 27001, CIS); experience in GRC, risk assessments, or third-party risk management.
Kaufman Rossin: Independent, partner-owned CPA and advisory firm serving mid-market businesses, investors, high-net-worth individuals, and families.
4+ YOERequires 4+ years in internal audit, SOX, ERM, finance, governance, or advisory services; engagement and team management; business development; client communication; and familiarity with AI, GRC, and named business tools.
GRC platforms, Microsoft Office, Salesforce, LinkedIn Sales Navigator, Fieldguide, Claude, ChatGPT, Claude Code, Codex
8+ YOE8+ years in cyber security compliance, security risk, or audit; experience with at least three of ISO 27001, PCI, UK Cyber Essentials Plus, Spanish ENS, France HDS, TISAX, C5, SOC2; GRC system experience; relevant certifications like CISSP, CISA, CISM desirable.
Seminole Tribe of Florida: Federally recognized Native American sovereign government serving Seminole members through public services, tribal enterprises, education, healthcare, and cultural programs.
8+ YOE3+ MgmtBachelor’s degree in a relevant field, 8+ years of information security or GRC experience, including 3+ years leading GRC initiatives. Requires a Florida driver's license and background check.
New York or Jacksonville or Washington or Chicago +1 more
$100k-$130k/yrOnsiteFull Time
New York Stock Exchange: U.S. stock exchange serving public companies, investors, and trading firms through listings, equity trading, and market data.
3+ YOERequires 3+ years in IT GRC, SDLC, audit, regulatory compliance, or financial markets; knowledge of COBIT, ISO, NIST, or ITIL; strong communication and analytical skills.
Uniontown or Ann Arbor or Cincinnati or Columbus or Defiance or Fairmont or Findlay or Fort Wayne or Frankfort or Huntington or Indianapolis or Ironton or New Albany or Parkersburg or Pittsburgh or Toledo or Wheeling or Youngstown or Chattanooga or Franklin or Knoxville or Fort Lauderdale
RemoteFull Time
WesBancoNASDAQ: WSBC: Regional diversified financial services and banking institution.
10+ YOE3+ MgmtBachelor's degree or equivalent experience; 10+ years in IT risk, GRC, cybersecurity, or technology audit; 3+ years leadership or program management; 5+ years in regulated financial institutions.
NIST CSF 2.0, CIS Controls v8, FFIEC CAT, NIST AI RMF, ISO/IEC 42001, Microsoft Outlook, Microsoft Word, Microsoft PowerPoint, Microsoft Excel, NIST SP 800-53, NIST SP 800-63B, AWS, Azure, GCP, ServiceNow GRC, Archer, ITGC, SOX, SOC 1, SOC 2, firewalls, VPNs, DNS, TLS, SSH
NubankNYSE: NU: Brazilian digital bank serving consumers and small businesses with credit cards, accounts, payments, lending, investments, and insurance.
15+ YOE15+ years in information security with executive CISO experience, US financial regulatory expertise (OCC), crypto and AI security knowledge, GRC transformation and strong executive communication.
Senior Third Party Risk Analyst -- Governance (Hybrid)
Orlando or Fort Lauderdale or New York City or Palm Beach Gardens or Jacksonville or Miami Lakes or Rye Brook or Atlanta or Morristown or Melville or Tampa or Dallas
HybridFull Time
BankUnitedNYSE: BKU: Publicly traded national bank serving consumers, small businesses, middle-market companies, corporations, and institutions.
5+ YOEBachelor's degree preferred and 5–7 years of third-party risk, GRC, or operational risk experience required, preferably in financial services; advanced Excel and Tableau skills required.
Microsoft Excel, Tableau, Microsoft Word, Microsoft Teams, Microsoft PowerPoint, Microsoft SharePoint
Chicago or Tampa or Atlanta or Charlotte or Austin or Washington or Dallas or Los Angeles or Boston or New York City or Florham Park or San Francisco or California or Philadelphia or Houston +1 more
$124k-$280k/yrOnsiteFull Time
PwC: Global professional services network providing audit, tax, and consulting services.
7+ YOEBachelor's degree and 7+ years delivering SAP compliance, security, and governance solutions, including auditing, advisory, and implementation. SAP GRC and BW/4HANA experience required; master's preferred.
SAP GTS, SAP Governance, Risk and Compliance (GRC), SAP BW/4HANA