risk and compliance manager

Stellar Hunters

<div><h4 class="jobSectionHeader">Job Summary</h4>
We are seeking a Cyber GRC Manager to lead and mature the company&rsquo;s cyber governance, risk, and compliance (GRC) program. The successful candidate will partner with Security, IT, Legal, Risk, and business stakeholders to design, implement, and operate controls, policies, and risk management practices that reduce cyber risk and support business objectives. This role will own compliance initiatives, third-party risk assessments, policy lifecycle management, and metrics to drive continuous improvement across the organization.<h4 class="jobSectionHeader">
Key Responsibilities</h4><h5 class="jobSectionHeader">
GRC Strategy &amp; Program Leadership</h5><ul><li>
Develop and evolve a risk-based cyber GRC strategy that aligns with enterprise risk appetite and business priorities.</li><li>
Lead the GRC program, including governance forums, risk assessment cadence, control frameworks, and remediation tracking.</li><li>
Partner with senior leadership to translate regulatory and business requirements into practical program objectives and roadmaps.</li></ul><h5 class="jobSectionHeader">
Policy, Standards &amp; Control Management</h5><ul><li>
Maintain and enhance information security policies, standards, and procedures; ensure clear ownership and version control across the policy lifecycle.</li><li>
Define and maintain control objectives mapped to frameworks (e.g., NIST CSF, ISO 27001, SOC 2) and ensure consistent implementation across teams.</li><li>
Coordinate control testing, assessments, and remediation activities with internal teams and external assessors.</li></ul><h5 class="jobSectionHeader">
Risk Assessment &amp; Third-Party Risk Management</h5><ul><li>
Conduct enterprise and technology risk assessments; identify, evaluate, and prioritize cyber risks and mitigation plans.</li><li>
Own third-party risk management processes including vendor risk assessments, due diligence, contract security requirements, and ongoing monitoring.</li><li>
Work with procurement and vendor owners to remediate deficiencies and reduce supply chain risk.</li></ul><h5 class="jobSectionHeader">
Compliance &amp; Audit Support</h5><ul><li>
Manage compliance programs and readiness for relevant regulations and standards (e.g., SOC 2, ISO 27001, GDPR, HIPAA where applicable).</li><li>
Act as primary liaison for internal and external audits, prepare evidence and reporting, and coordinate remediation activities.</li><li>
Maintain documentation and continuous evidence of controls to support attestations and regulatory reporting.</li></ul><h5 class="jobSectionHeader">
Metrics, Reporting &amp; Continuous Improvement</h5><ul><li>
Define and report GRC metrics and dashboards (e.g., risk posture, control maturity, remediation timelines, vendor risk status) to leadership and stakeholders.</li><li>
Use data and trend analysis to identify program gaps, recommend improvements, and measure the effectiveness of risk reduction efforts.</li><li>
Develop and maintain GRC playbooks, runbooks, and process documentation to enable repeatable, auditable practices.</li></ul><h4 class="jobSectionHeader">
Required Qualifications - Skills &amp; Experience</h4><ul><li>
Bachelor&rsquo;s degree in Information Security, Cybersecurity, IT, Risk Management, or a related field, or equivalent practical experience.</li><li>
5+ years of hands-on experience in cyber governance, risk, and compliance, information security, or related roles.</li><li>
Practical knowledge of common security frameworks and standards (e.g., NIST CSF, ISO 27001, SOC 2) and experience mapping controls to frameworks.</li><li>
Experience managing third-party/vendor risk assessments, contract security requirements, and remediation workflows.</li><li>
Strong communication and stakeholder management skills with the ability to influence technical and non-technical audiences.</li><li>
Analytical mindset with experience developing risk assessments, metrics, and executive-level reporting.</li><li>
Familiarity with GRC platforms, risk assessment tools, ticketing systems, and common productivity software.</li></ul><h4 class="jobSectionHeader">
Preferred Qualifications</h4><ul><li>
Relevant certifications such as CISSP, CISM, CRISC, CISA, or CDPSE preferred.</li><li>
Experience supporting SOC 2, ISO 27001, or other third-party audits and working with external assessors.</li><li>
Background in cloud security, identity and access management, or secure software development lifecycle practices.</li><li>
Experience implementing or operating GRC tooling (e.g., Archer, RiskLens, OneTrust, ServiceNow GRC) is a plus.</li></ul><h4 class="jobSectionHeader">
Work Environment &amp; Compensation</h4><ul><li>
Full-time position with a hybrid onsite/remote model; occasional travel and after-hours engagement may be required to support assessments and incident response activities.</li><li>
Competitive salary commensurate with experience and a comprehensive benefits package, including health insurance, retirement plan options, and paid time off.</li><li>
Opportunities for professional development, cross-functional collaboration, and career growth within Security, IT, and Risk functions.</li><li>
Inclusive, respectful culture that values diversity, equity, and work-life balance.</li></ul></div>

Cyber GRC Manager

malomatia

<div>
 
 Job Description
 
 
 
 
 Key Outcomes (What success looks like)
 
 
 
 <ul>
 <li>
 Corporate GRC requests are triaged, tracked, delivered, and reported with clear SLAs and priorities.
 </li>
 <li>
 Policies/standards/procedures are usable, enforced, and updated&mdash;not shelfware.
 </li>
 <li>
 Risk and compliance reporting is accurate, timely, and defensible for leadership and auditors.
 </li>
 <li>
 Client deliverables are clean, structured, and aligned to agreed frameworks (e.g., QCSF/NIA, ISO 27001, NIST).
 </li>
 <li>
 Stakeholders respect the function because you add clarity and control, not bureaucracy.
 
 
 </li>
 </ul>
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Corporate GRC Operations (High-Volume Request Handling)
 </li>
 <li>
 Act as the single point of accountability for BU GRC operations: intake, triage, prioritization, execution, and closure.
 </li>
 <li>
 Build and run a GRC request pipeline (ticketing/backlog/kanban), including SLAs, dependencies, and status reporting.
 </li>
 <li>
 Challenge vague requests: convert noise into clear scope, deliverables, owners, and deadlines.
 </li>
 <li>
 Enforce governance through decisions and escalation.
 </li>
 <li>
 Governance (Policies, Standards, Internal Controls)
 </li>
 <li>
 Develop and maintain BU security governance artifacts: policies, standards, procedures, baselines, templates.
 </li>
 <li>
 Ensure governance aligns with corporate requirements and applicable regulations, with traceability to controls/frameworks.
 </li>
 <li>
 Drive policy adoption via implementation guidance, control owners, and periodic attestations.
 </li>
 <li>
 Produce executive-friendly outputs: dashboards, governance reports, action trackers.
 </li>
 <li>
 Risk Management (Practical, Not Theoretical)
 </li>
 <li>
 Own the BU risk register: identification, assessment, scoring, treatment plans, and acceptance workflows.
 </li>
 <li>
 Run risk workshops with IT/Operations/Projects to capture real risks and convert them into actions.
 </li>
 <li>
 Manage risk exceptions/waivers (justification, compensating controls, approval, expiry, re-validation).
 </li>
 <li>
 Track remediation progress, validate evidence, and report risk movement over time.
 </li>
 <li>
 Compliance &amp; Audit Execution (Evidence-Driven)
 </li>
 <li>
 Lead BU readiness for internal/external audits: evidence collection, control testing coordination, gap closure plans.
 </li>
 <li>
 Maintain compliance mapping for relevant frameworks (e.g., ISO 27001/27002, NIST CSF/800-53, CIS Controls, local frameworks such as QCSF/NIA when applicable).
 </li>
 <li>
 Coordinate with Legal/HR/IT/Procurement on compliance topics (privacy, records, access controls, vendor risk).
 </li>
 <li>
 Produce audit artifacts: SoA, control matrices, evidence packs, CAPA plans.
 </li>
 <li>
 Third-Party &amp; Supplier Risk
 </li>
 <li>
 Execute/coordinate third-party security assessments: questionnaires, evidence review, risk ratings, remediation follow-up.
 </li>
 <li>
 Support contract/security clauses review with Procurement/Legal.
 </li>
 <li>
 Maintain supplier risk records and ensure closure of high/critical findings.
 </li>
 <li>
 Client-Facing GRC Delivery (Part-Time Allocation)
 </li>
 <li>
 Contribute to client assessments and advisory engagements: maturity assessments, gap analysis, compliance roadmaps, risk registers, policies, and reporting.
 </li>
 <li>
 Support delivery managers/project leads with structured, reusable deliverables and strong documentation quality.
 </li>
 <li>
 Participate in client meetings/workshops and translate discussions into actionable outputs.
 </li>
 <li>
 Metrics, Reporting, and Leadership Communication
 </li>
 <li>
 Run recurring reporting: GRC KPIs/KRIs, compliance status, audit readiness, top risks, overdue actions.
 </li>
 <li>
 Brief BU leadership with clear recommendations, decisions needed, and escalation items.
 </li>
 <li>
 Maintain transparency: stakeholders should always know what&rsquo;s in progress, blocked, overdue, and why.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 
 Required Experience &amp; Qualifications
 
 
 
 <ul>
 <li>
 8 years in cybersecurity GRC, risk management, compliance, or audit-heavy security roles.
 </li>
 <li>
 Proven experience running governance documentation end-to-end (policy &rarr; adoption &rarr; evidence).
 </li>
 <li>
 Solid understanding of security frameworks and control-based approaches: ISO 27001/27002, NIST CSF/800-53, CIS Controls (and QCSF/NIA if in Qatar context).
 </li>
 <li>
 Experience with audits (internal/external), evidence management, and remediation tracking.
 </li>
 <li>
 Strong stakeholder management across technical and non-technical teams.
 
 
 </li>
 </ul>
 
 Tools &amp; Delivery Skills
 
 
 
 <ul>
 <li>
 Advanced documentation and structuring: MS Word/PowerPoint, clean formatting, executive summaries.
 </li>
 <li>
 Strong Excel skills for trackers and reporting (risk registers, matrices, dashboards).
 </li>
 <li>
 Familiarity with GRC tooling
 </li>
 <li>
 Ability to manage workflows in Jira/ServiceNow/Planner/Trello or similar.
 
 
 </li>
 </ul>
 
 About Malomatia
 
 
 
 
 ABOUT US
 
 
 
 malomatia is a leading Qatar-based IT services and solutions provider, bringing together top Qatari and international talent to deliver innovative, end-to-end technology solutions that empower clients to achieve their strategic goals.
 
 
 
 Our mission
 
 
 
 Empowering Qatar&rsquo;s businesses and governments to leap into the digital future with agile, knowledge-driven solutions.
 
 
 
 Our vision
 
 
 
 To become Qatar&rsquo;s trusted knowledge partner in digital transformation, disrupting industries, shaping the future, and building a world-class tech ecosystem.
 
 
 
 Driving change that makes a real impact
 
 
 
 Since 2008, malomatia has been driving Qatar&rsquo;s digital transformation through innovative, ISO-certified IT solutions. With expertise across key public and private sectors, we empower the nation&rsquo;s vision with advanced services in cloud, cybersecurity, AI, and contact center excellence, elevating the role of technology in shaping Qatar&rsquo;s sustainable future.
 
 
 
 About The Team
 
 
 
 Established in 2008, malomatia is a Qatari leader in IT services and digital transformation. We serve key sectors including Government, Healthcare, Education, Customs, and Transportation, delivering impactful solutions that support national development goals. Powered by a diverse team of skilled Qatari and international IT professionals, we deliver innovative, high-value digital solutions tailored to the unique needs of our clients.
 
 
 Our mission is to inspire customers to thrive through digital excellence, and we envision becoming the trusted partner of choice in building a smarter society through technology and talent. We are driven by core values that define our culture and approach: ownership, integrity, empathy, teamwork, transparency, agility, excellence, trust, and innovation.
 
 
 Join us in shaping the future of technology in Qatar
</div>

Consultant - GRC

Aptech Agency LLC

Aptech Agency is a forward-driven organization committed to maintaining the highest standards of integrity, governance, and operational excellence. We believe strong compliance frameworks are essential to sustainable growth and long-term success.Role OverviewWe are seeking a knowledgeable and detail-oriented Compliance Manager to lead and strengthen our compliance function in Doha. This role will ensure that the company adheres to all regulatory requirements, internal policies, and industry standards.Key Responsibilities<ul><li>Develop, implement, and maintain compliance policies and procedures</li><li>Monitor regulatory changes and ensure company-wide adherence</li><li>Conduct compliance risk assessments and recommend mitigation strategies</li><li>Oversee internal audits and compliance reviews</li><li>Provide guidance and training to staff on compliance standards and best practices</li><li>Investigate and resolve compliance issues or breaches</li><li>Prepare compliance reports for senior management and regulatory bodies</li><li>Collaborate with legal, finance, and operational teams to ensure alignment</li></ul>Qualifications &amp; Skills<ul><li>Bachelor&rsquo;s degree in Law, Finance, Business Administration, or a related field</li><li>Professional certification (e.g., CAMS, CRCM, CPA, or equivalent) is preferred</li><li>Minimum 5&ndash;8 years of experience in compliance, risk, or regulatory roles</li><li>Strong knowledge of regulatory frameworks and corporate governance</li><li>Excellent analytical and problem-solving skills</li><li>Strong communication and leadership abilities</li><li>High level of integrity and attention to detail</li></ul>What We Offer<ul><li>Competitive salary and benefits package</li><li>Opportunity to lead and shape compliance strategy</li><li>Career growth and professional development opportunities</li><li>Collaborative and professional work environment</li></ul>How to ApplyInterested candidates are invited to apply via Indeed by submitting their updated CV and relevant credentials.الراتب المدفوع: QAR٤٥٠٬٠٠٠٫٠٠&nbsp;لكل عامموقع العمل: بشكل شخصي

Compliance Manager

Waad Education

<div>Waad Education is seeking an experienced Internal Audit Manager to establish, lead, and manage the internal audit function. Reporting directly to the Board Audit Committee, the role is responsible for developing and executing a robust audit strategy, evaluating the effectiveness of internal controls, and providing independent assurance on governance, risk management, and compliance across all schools and corporate functions.
Key Responsibilities:<ul><li>
Lead the development and implementation of the internal audit framework, charter, and methodology</li></ul><ul><li>
Develop and own the annual risk-based internal audit plan and ensure its effective execution</li><li>
Lead and manage internal audit activities across operational, academic, financial, HR, procurement, and compliance areas</li><li>
Evaluate the effectiveness of internal controls and drive continuous improvement initiatives</li><li>
Prepare and present audit reports, insights, and recommendations to the Board Audit Committee and senior management</li><li>
Lead risk assessment processes and support enterprise risk management initiatives</li><li>
Oversee and lead fraud investigations and special audit assignments</li><li>
Manage relationships with internal stakeholders and external auditors to ensure alignment and efficiency</li><li>
Promote a strong governance, risk, and control culture across the organization</li></ul> 

Requirements 
<ul><li>
Bachelor&rsquo;s degree in Accounting, Finance, Audit, or a related field</li><li>
Professional certification (CIA, CPA, ACCA, or equivalent) is required</li><li>
5&ndash;8 years of internal audit experience, including at least 2&ndash;3 years in a managerial or supervisory role</li></ul><ul><li>
Experience in education, services, or diversified groups; Big 4 experience is a plus</li><li>
Strong knowledge of IFRS, COSO, and risk management</li></ul>
Key Competencies<ul><li>
Experience with ERP systems (e.g., Microsoft Dynamics 365).</li></ul><ul><li>
Proven ability to lead internal audit functions and drive change.</li><li>
Excellent communication and stakeholder management skills.</li><li>
High integrity and professionalism.</li></ul></div>

Internal Audit Manager

U.S. Bank

<div>At U.S. Bank, we&rsquo;re on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed. We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive at every stage of your career. Try new things, learn new skills and discover what you excel at&mdash;all from Day One.<h2 class="jobSectionHeader">
Job Description</h2><div>
U.S. Bank is seeking an Operational Risk Review (ORR) Technology Manager (&quot;Manager&quot;) responsible for leading a team of Lead Analyst(s) and Analyst(s) (collectively &ldquo;Analysts&rdquo;) in the administration and execution of review activities within Independent Risk Review and Assessment (IRRA), a centralized second line of defense independent review function. This role offers an exciting opportunity to drive the continued growth, enhancement, and delivery of IRRA&rsquo;s ORR program. 
 
ORR provides risk-based review and effective challenge of the Company's operational risk (inclusive of technology risk), and operational risk-related processes and controls associated with the products and services offered across all business lines and enabling functions. Based on the Company's enterprise risk taxonomy, in-scope operational risk categories include: Fraud, Operations, People, Security of Physical Assets, Third Party, Business Resiliency, Systems, Cyber/Information Security, Legal, Model, Conduct, Data Management, and Fiduciary. Objective risk mitigation, process, and control review activities include planning and scoping, design and execution, reporting and rating, and Issue creation and validation. 
 
Key roles and responsibilities of the ORR Technology Manager include working with business lines and other Risk, Compliance, and Audit professionals across the Company to evaluate processes and controls to ensure an effective risk management framework. The ORR Technology Manager is responsible for directly managing a team of Lead Analyst(s) and Analyst(s), including overseeing review activities, timely completion of planned reviews, conducting performance management, and overall staff development. The Manager leads and oversees projects and activities to confirm compliance with internal policies, industry standards, and applicable laws and regulations related to technology, business resiliency, data governance, cyber, systems, artificial intelligence (AI), and information security. Through review performance, the Manager is responsible for the identification of gaps, weaknesses, and risk exposures within the control and process environment. If gaps are identified, the Manager will partner with the business line and Risk Management groups to recommend and influence solutions to mitigate operational risks. The Manager is responsible will deliver effective verbal and written communication of review results to the ORR Senior Manager, including draft Issues and Reports, and will respond to and/or escalation of significant risks, as appropriate.<div>
Basic Qualifications 
<ul><li>Bachelor's degree, or equivalent work experience</li><li>Typically more than 10 years of applicable experience</li></ul></div>
Preferred Skills/Experience<ul><li>Proven leadership skills.</li><li>Subject Matter Expert or advanced knowledge of technology, business resiliency, systems, data governance, cyber, and information security risks as well as industry trends that impact Bank operations.</li><li>Thorough understanding of risk management standards, the common definition of internal controls, and how control frameworks are designed and operate to mitigate risks.</li><li>Deep understanding of the business line&rsquo;s operations, products, services, systems, and associated risks.</li><li>Deep business acumen and credibility to help business line(s) proactively identify risks and address changing risk landscape.</li><li>Superb process facilitation, project management, and analytical skills with the ability to manage multiple tasks and deadlines simultaneously.</li><li>Excellent presentation, interpersonal, written and verbal communication skills.</li><li>Proficient computer navigation skills using a variety of software packages, including Microsoft Office applications and word processing, spreadsheets, databases, and presentations.</li><li>Applicable professional certifications (e.g., CISA, GSNA, CISSP, CRISC, CIA, etc.) are preferred.</li></ul>
This role requires working from a U.S. Bank location three (3) or more days per week.</div>
If there&rsquo;s anything we can do to accommodate a disability during any portion of the application or hiring process, please refer to our disability accommodations for applicants.
Benefits:
Our approach to benefits and total rewards considers our team members&rsquo; whole selves and what may be needed to thrive in and outside work. That's why our benefits are designed to help you and your family boost your health, protect your financial security and give you peace of mind. Our benefits include the following:<ul><li>
Healthcare (medical, dental, vision)</li><li>
Basic term and optional term life insurance</li><li>
Short-term and long-term disability</li><li>
Pregnancy disability and parental leave</li><li>
401(k) and employer-funded retirement plan</li><li>
Paid vacation (from two to five weeks depending on salary grade and tenure)</li><li>
Up to 11 paid holiday opportunities</li><li>
Adoption assistance</li><li>
Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law</li></ul>
Review our full benefits available by employment status here.
U.S. Bank is an equal opportunity employer. We consider all qualified applicants without regard to race, religion, color, sex, national origin, age, sexual orientation, gender identity, disability or veteran status, and other factors protected under applicable law.
E-Verify
U.S. Bank participates in the U.S. Department of Homeland Security E-Verify program in all facilities located in the United States and certain U.S. territories. The E-Verify program is an Internet-based employment eligibility verification system operated by the U.S. Citizenship and Immigration Services.
The salary range reflects figures based on the primary location, which is listed first. The actual range for the role may differ based on the location of the role. In addition to salary, U.S. Bank offers a comprehensive benefits package, including incentive and recognition programs, equity stock purchase 401(k) contribution and pension (all benefits are subject to eligibility requirements). Pay Range: $133,365.00 - $156,900.00
U.S. Bank will consider qualified applicants with arrest or conviction records for employment. U.S. Bank conducts background checks consistent with applicable local laws, including the Los Angeles County Fair Chance Ordinance and the California Fair Chance Act as well as the San Francisco Fair Chance Ordinance. U.S. Bank is subject to, and conducts background checks consistent with the requirements of Section 19 of the Federal Deposit Insurance Act (FDIA). In addition, certain positions may also be subject to the requirements of FINRA, NMLS registration, Reg Z, Reg G, OFAC, the NFA, the FCPA, the Bank Secrecy Act, the SAFE Act, and/or federal guidelines applicable to an agreement, such as those related to ethics, safety, or operational procedures.
Applicants must be able to comply with U.S. Bank policies and procedures including the Code of Ethics and Business Conduct and related workplace conduct and safety policies.
Posting may be closed earlier due to high volume of applicants.</div>

Operational Risk Review Manager - Technology

<div>Work Location:
Charlotte, North Carolina, United States of America
Hours:
40
Pay Details:
$200,000 - $280,000 USD
TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs.
As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.
Line of Business:
Compliance
Job Description:
This role is responsible for overseeing the bank&rsquo;s compliance monitoring functions to promote adherence to regulatory requirements, internal policies, and industry standards. This role plays a critical part in maintaining the bank&rsquo;s reputation and operational integrity by proactively identifying, assessing, and mitigating compliance risks.
Depth &amp; Scope:
<ul><li>Provides people management leadership by hiring the best talent, setting goals, developing staff, managing employee performance and compensation decisions, promoting teamwork and handling any/all disciplinary actions, as required
</li><li>Designs, builds, and implements industry best practice monitoring program across all applicable business units
</li><li>Oversees compliance monitoring activities to confirm alignment with federal U.S. banking regulations and consumer financial protection laws
</li><li>Leads the development and execution of compliance risk assessments, identifying areas of potential vulnerability and recommending corrective actions
</li><li>Provides regular and ad hoc reports to senior management on compliance monitoring outcomes, trends, and emerging risks
</li><li>Contributes to the enhancement and maintenance of compliance policies and procedures
</li><li>Supports the coordination with internal and external auditors during compliance reviews, addressing findings and implementing recommendations
</li><li>Develops and delivers monitoring training to staff, fostering a culture of compliance throughout the bank
</li><li>Supports and enhances ongoing routines with compliance units to identify potential areas of emerging risk
</li><li>Empowered to define and implement compliance strategies, set monitoring priorities, and allocate resources to high-risk areas. Can recommend policy changes and escalate significant compliance issues to executive leadership
</li><li>Manages a team of compliance professionals and collaborates across U.S. compliance. Responsible for ensuring that the bank&rsquo;s compliance monitoring framework is robust, effective, and responsive to regulatory changes and business needs
</li><li>Approves compliance monitoring plans and methodologies
</li><li>Supports investigations into compliance breaches and determines remediation steps
</li><li>Recommends remediation actions and process improvements based on monitoring findings
</li></ul>Education &amp; Experience:
<ul><li>Bachelor&rsquo;s degree in business, finance, law, or a related field; JD, advanced degree, or CRCM preferred
</li><li>10+ years of experience in compliance, risk management, or audit within the financial services industry
</li><li>Strong knowledge of U.S. banking regulations and compliance frameworks
</li><li>Proven leadership and team management skills
</li><li>Excellent analytical, communication, and problem-solving abilities
</li><li>Demonstrated ability to provide strategic leadership and apply enterprise-level risk assessment to design, prioritize, and oversee complex risk programs
</li><li>Deep understanding of regulatory requirements with the ability to interpret policy and regulatory expectations into scalable, sustainable operating models
</li><li>Proven experience influencing senior stakeholders and governing bodies through clear, concise, and credible communication
</li><li>Strong program and change leadership capabilities, including overseeing multiple initiatives, setting direction, and ensuring disciplined execution
</li><li>Unquestioned ethical judgment and integrity, with the ability to make sound decisions in complex, high-risk, or ambiguous situations
</li></ul>Who We Are:
TD is one of the world's leading global financial institutions and is the fifth largest bank in North America by branches/stores. Every day, we strive to make every interaction, product, and experience remarkably human and refreshingly simple for over 27 million households and businesses in Canada, the United States and around the world. More than 95,000 TD colleagues bring their skills, talent, and creativity to foster deeper relationships, ensure disciplined execution, and build a simpler, faster banking experience. TD is deeply committed to being a leader in client experience, that is why we believe that all colleagues, no matter where they work, are client facing. Together, we are reimagining what banking can be for our clients, colleagues and communities.
Our Total Rewards Package 
 
Our Total Rewards package reflects the investments we make in our colleagues to help them and their families achieve their financial, physical and mental well-being goals. Total Rewards at TD includes base salary and variable compensation/incentive awards (e.g., eligibility for cash and/or equity incentive awards, generally through participation in an incentive plan) and several other key plans such as health and well-being benefits, savings and retirement programs, paid time off (including Vacation PTO, Flex PTO, and Holiday PTO), banking benefits and discounts, career development, and reward and recognition. Learn more
Additional Information:
 
We&rsquo;re delighted that you&rsquo;re considering building a career with TD. Through regular development conversations, training programs, and a competitive benefits plan, we&rsquo;re committed to providing the support our colleagues need to thrive both at work and at home.
 
 
Colleague Development
If you&rsquo;re interested in a specific career path or are looking to build certain skills, we want to help you succeed. You&rsquo;ll have regular career, development, and performance conversations with your manager, as well as access to an online learning platform and a variety of mentoring programs to help you unlock future opportunities. 
If you&rsquo;re passionate about helping clients and building deep, lasting relationships, TD offers diverse career paths where you can grow your expertise and make a meaningful impact.
We're committed to your success and foster a respectful workplace where diverse perspectives are valued, everyone has fair opportunities to grow, and you can unlock your full potential to achieve your career goals. Here at TD, we hire and develop the best.
Training &amp; Onboarding
 
We will provide training and onboarding sessions to ensure that you&rsquo;ve got everything you need to succeed in your new role.
 
 
Interview Process
 
We&rsquo;ll reach out to candidates of interest to schedule an interview. We do our best to communicate outcomes to all applicants by email or phone call.
Accommodation
TD Bank is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, status as a protected veteran or any other characteristic protected under applicable federal, state, or local law.
If you are an applicant with a disability and need accommodations to complete the application process, please email TD Bank US Workplace Accommodations Program at USWAPTDO@td.com . Include your full name, best way to reach you and the accommodation needed to assist you with the applicant process.</div>

Compliance Director, U.S. Compliance Monitoring (US)

Stripe

<div>
 Who we are
 
 
 Bridge is Stripe&rsquo;s fintech innovation hub focused on building a modern, stablecoin-powered cross-border payments network. We operate like a startup within Stripe: fast-paced, entrepreneurial, and product-obsessed, but with the backing of one of the most trusted names in fintech.
 
 
 We&rsquo;re hiring a Security Analyst / Program Manager to build and scale Bridge&rsquo;s security foundation. This is a rare opportunity to design the security governance, risk and compliance programs from the ground up, while also leveraging the infrastructure, best practices, and tooling of one of the most mature security organizations in the industry.
 
 
 What you'll do
 
 
 <ul>
 <li>
 Design, and implement Bridge&rsquo;s security governance, risk and compliance roadmaps from first principles to production.
 </li>
 <li>
 Identify and tackle Bridge&rsquo;s most important security risks quickly and pragmatically.
 </li>
 <li>
 Adopt Stripe&rsquo;s programs, controls and processes where it makes sense, and find custom approaches where it doesn&rsquo;t.
 </li>
 <li>
 Lead risk assessment, control design and testing for all Security and Technology Oversight globally.
 </li>
 <li>
 Reinforce engineering best practices around secure development and infrastructure.
 </li>
 <li>
 Ensure Bridge meets compliance and audit expectations as we scale to more regulated markets.
 </li>
 <li>
 Collaborate cross-functionally with engineering, product, and Stripe&rsquo;s security org to move fast without compromising safety.
 
 
 
 </li>
 </ul>
 
 About You
 
 
 
 You might be a good fit if you:
 
 
 <ul>
 <li>
 Have 8+ years of experience in Security GRC, ideally with time spent in fast-paced startup environments where you&rsquo;ve built security practices from the ground up.
 </li>
 <li>
 Have a startup mindset: you&rsquo;re scrappy, pragmatic, and move quickly to solve the most critical problems.
 </li>
 <li>
 You&rsquo;re proficient with NIST CSF, OCC&rsquo;s Cybersecurity Supervision Work Program and/or FFIEC IT Examination Handbook or other similar global frameworks.
 </li>
 <li>
 Proven prior experience with regulatory audits from Global auditors across Security domains.
 </li>
 <li>
 Thrive in ambiguity and know how to ruthlessly prioritize.
 </li>
 <li>
 Can balance security rigor with speed, especially in fast-moving environments.
 </li>
 <li>
 Communicate clearly across technical and non-technical partners.
 </li>
 <li>
 Have experience building or scaling security programs, either at a startup or in an embedded role.
 </li>
 <li>
 Are excited about the potential of crypto and stablecoins to power global financial infrastructure (you don&rsquo;t need deep prior knowledge&mdash;just curiosity and openness to learn).
 
 
 
 </li>
 </ul>
 Hybrid work at Stripe
 
 
 This role is available either in an office or a remote location (35+ miles or 56+ km from a Stripe office).
 
 
 In-office expectations
 
 
 Office-assigned Stripes spend at least 50% of the time in a given month in their local office or with users. This hits a balance between bringing people together for in-person collaboration and learning from each other, while supporting flexibility about how to do this in a way that makes sense for individuals and their teams.
 
 
 Working remotely at Stripe
 
 
 A remote location is defined as being 35 miles (56 kilometers) or more from one of our offices. While you would be welcome to come into the office for team/business meetings, on-sites, meet-ups, and events, our expectation is you would regularly work from home rather than a Stripe office. Stripe does not cover the cost of relocating to a remote location. We encourage you to apply for roles that match the location where you currently live or plan to live.
 
 
 Pay and benefits
 
 
 The annual US base salary range for this role is $196,900 - $295,300. For sales roles, the range provided is the role&rsquo;s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. This salary range may be inclusive of several career levels at Stripe and will be narrowed during the interview process based on a number of factors, including the candidate&rsquo;s experience, qualifications, and location. Applicants interested in this role and who are not located in the US may request the annual salary range for their location during the interview process.
 
 
 Additional benefits for this role may include: equity, company bonus or sales commissions/bonuses; 401(k) plan; medical, dental, and vision benefits; and wellness stipends.
 
 
 Hybrid work at Stripe
 
 
 This role is available either in an office or a remote location (35+ miles or 56+ km from a Stripe office).
 
 
 In-office expectations
 
 
 Office-assigned Stripes spend at least 50% of the time in a given month in their local office or with users. This hits a balance between bringing people together for in-person collaboration and learning from each other, while supporting flexibility about how to do this in a way that makes sense for individuals and their teams.
 
 
 Working remotely at Stripe
 
 
 A remote location is defined as being 35 miles (56 kilometers) or more from one of our offices. While you would be welcome to come into the office for team/business meetings, on-sites, meet-ups, and events, our expectation is you would regularly work from home rather than a Stripe office. Stripe does not cover the cost of relocating to a remote location. We encourage you to apply for roles that match the location where you currently live or plan to live.
</div>

Security Analyst, Bridge

Search 10000+ Risk and compliance manager jobs near you this May. New roles added regularly across leading industries. Apply today.