{"version":"0.1","company":{"name":"YubHub","url":"https://yubhub.co","jobsUrl":"https://yubhub.co/jobs/skill/audit-management"},"x-facet":{"type":"skill","slug":"audit-management","display":"Audit Management","count":4},"x-feed-size-limit":100,"x-feed-sort":"enriched_at desc","x-feed-notice":"This feed contains at most 100 jobs (the most recently enriched). For the full corpus, use the paginated /stats/by-facet endpoint or /search.","x-generator":"yubhub-xml-generator","x-rights":"Free to redistribute with attribution: \"Data by YubHub (https://yubhub.co)\"","x-schema":"Each entry in `jobs` follows https://schema.org/JobPosting. YubHub-native raw fields carry `x-` prefix.","jobs":[{"@context":"https://schema.org","@type":"JobPosting","identifier":{"@type":"PropertyValue","name":"YubHub","value":"job_361c2ea1-943"},"title":"Federal Senior Security Assurance Engineer","description":"<p>As a Senior Security Assurance Engineer, you will help lead compliance certification efforts for the U.S. Federal Government, such as FedRAMP, DISA CC SRG, etc. You will develop Databricks ATO packages, ensure audit readiness and security compliance across the organisation by working cross-functionally with other teams, collect and manage evidence for audits, lead continuous monitoring and authorisations, support other Security Assurance Team certifications, reports, and activities as needed, support security compliance reviews of new features, build relationships with other Databricks teams to accomplish Security Assurance goals, and develop and maintain strong relationships with external auditors and certification bodies to facilitate smooth audit processes.</p>\n<p>The ideal candidate will have a Bachelor&#39;s degree in Computer Science or a related field, or equivalent experience, with 5+ years of security compliance or audit-related experience, FedRAMP and/or DISA SRG auditing (3PAO) or implementation (CSP) experience, NIST 800-53 and RMF experience, a comprehensive understanding of security controls across all domains, a general understanding of key technical security controls in cloud environments (AWS, Azure, GCP), strong written and verbal communication skills, and experience working effectively across the spectrum of individual contributors and senior leadership within an organisation.</p>\n<p style=\"margin-top:24px;font-size:13px;color:#666;\">XML job scraping automation by <a href=\"https://yubhub.co\">YubHub</a></p>","url":"https://yubhub.co/jobs/job_361c2ea1-943","directApply":true,"hiringOrganization":{"@type":"Organization","name":"Databricks","sameAs":"https://databricks.com/","logo":"https://logos.yubhub.co/databricks.com.png"},"x-apply-url":"https://job-boards.greenhouse.io/databricks/jobs/8435970002","x-work-arrangement":"onsite","x-experience-level":"senior","x-job-type":"full-time","x-salary-range":null,"x-skills-required":["FedRAMP","DISA CC SRG","NIST 800-53","RMF","Cloud security","Security compliance","Audit management"],"x-skills-preferred":[],"datePosted":"2026-04-18T15:55:25.056Z","jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"United States"}},"employmentType":"FULL_TIME","occupationalCategory":"Engineering","industry":"Technology","skills":"FedRAMP, DISA CC SRG, NIST 800-53, RMF, Cloud security, Security compliance, Audit management"},{"@context":"https://schema.org","@type":"JobPosting","identifier":{"@type":"PropertyValue","name":"YubHub","value":"job_0bf3955d-b31"},"title":"IT Audit Analyst","description":"<p>We are looking for a dynamic and detail-oriented IT Audit Analyst or Senior IT Audit Analyst to join our growing Internal Audit team.</p>\n<p>In this role, you will play a key part in evaluating and strengthening ZoomInfo&#39;s IT control environment, with a primary focus on executing SOX compliance testing across IT general controls, automated controls, and system integrations.</p>\n<p>This position offers meaningful exposure to US GAAP, SOX compliance, and complex IT control environments, as well as the opportunity to work with automation and AI-driven tools.</p>\n<p>You will work closely with US-based teams and stakeholders across IT and business functions, requiring a shifted schedule with availability until 12:00 PM PST to enable effective collaboration.</p>\n<p>The ideal candidate brings strong analytical and communication skills, a proactive approach to problem solving, and a desire to grow in a fast-paced, high-growth SaaS environment.</p>\n<p>Key Responsibilities:</p>\n<ul>\n<li>Execute IT audit plans including evaluation of IT general controls (ITGCs), automated controls, application controls, and system integrations in support of ZoomInfo&#39;s SOX compliance program</li>\n</ul>\n<ul>\n<li>Conduct risk and control assessments across IT environments, identifying control gaps and providing practical recommendations for improvement and remediation</li>\n</ul>\n<ul>\n<li>Perform SOX compliance testing for IT general controls across key domains including access management, change management, computer operations, and system development</li>\n</ul>\n<ul>\n<li>Document audit workpapers clearly and thoroughly, ensuring documentation meets professional standards and supports audit conclusions</li>\n</ul>\n<ul>\n<li>Communicate audit findings effectively, including control deficiencies, root cause analysis, and recommended remediation steps, to both technical and non-technical stakeholders</li>\n</ul>\n<ul>\n<li>Partner with IT and business unit stakeholders to build collaborative relationships and ensure effective audit outcomes</li>\n</ul>\n<ul>\n<li>Support the monitoring of management action plans and remediation efforts related to identified control deficiencies</li>\n</ul>\n<ul>\n<li>Leverage audit management technology (AuditBoard) and data analytics tools to enhance audit efficiency and quality</li>\n</ul>\n<ul>\n<li>Contribute to the continuous improvement of audit methodologies, tools, and best practices, including the adoption of AI and automation capabilities</li>\n</ul>\n<ul>\n<li>Stay current on changes in the IT landscape, regulatory environment, and industry trends to assess impacts on ZoomInfo&#39;s IT risk and control profile</li>\n</ul>\n<p>Required Qualifications:</p>\n<ul>\n<li>Bachelor&#39;s degree in Accounting, Finance, Management Information Systems, Business Administration, or a related field</li>\n</ul>\n<ul>\n<li>CISA, CA or equivalent certification in good standing</li>\n</ul>\n<ul>\n<li>IT Audit Analyst: 3+ years of experience in IT audit, IT risk, or SOX compliance within a public company, Big 4 accounting firm, or equivalent corporate setting</li>\n</ul>\n<ul>\n<li>Senior IT Audit Analyst: 5+ years of experience in IT audit, IT risk, or SOX compliance within a public company, Big 4 accounting firm, or equivalent corporate setting</li>\n</ul>\n<ul>\n<li>Strong knowledge of IT general controls (ITGCs), automated controls, and IT risk assessment practices</li>\n</ul>\n<ul>\n<li>Solid understanding of SOX requirements, COSO framework, and COBIT standards as they relate to IT audit</li>\n</ul>\n<ul>\n<li>Familiarity with cloud-based platforms, SaaS applications, databases, and middleware solutions in the context of IT audit and SOX compliance</li>\n</ul>\n<ul>\n<li>Experience working with audit management technology; AuditBoard experience preferred</li>\n</ul>\n<ul>\n<li>Strong experience with data analytics and automation tools as applied to internal audit</li>\n</ul>\n<ul>\n<li>Excellent written and verbal communication skills in English, with the ability to present findings clearly to both technical and non-technical stakeholders</li>\n</ul>\n<ul>\n<li>Strong analytical, critical thinking, and problem-solving skills with the ability to manage multiple priorities and meet deadlines</li>\n</ul>\n<ul>\n<li>Ability to work independently and collaboratively in a fast-paced, global environment</li>\n</ul>\n<p>Preferred Qualifications:</p>\n<ul>\n<li>Experience with enterprise SaaS applications such as Salesforce, Workday, or Okta in an audit or controls context</li>\n</ul>\n<ul>\n<li>Hands-on experience with data visualization tools and advanced analytics techniques</li>\n</ul>\n<ul>\n<li>Familiarity with scripting or programming concepts such as Python as applied to audit automation and data analysis</li>\n</ul>\n<ul>\n<li>Familiarity with artificial intelligence and prompt engineering as applied to audit and risk management workflows</li>\n</ul>\n<ul>\n<li>Experience with agile audit methodologies or continuous auditing frameworks</li>\n</ul>\n<p style=\"margin-top:24px;font-size:13px;color:#666;\">XML job scraping automation by <a href=\"https://yubhub.co\">YubHub</a></p>","url":"https://yubhub.co/jobs/job_0bf3955d-b31","directApply":true,"hiringOrganization":{"@type":"Organization","name":"ZoomInfo","sameAs":"https://www.zoominfo.com/","logo":"https://logos.yubhub.co/zoominfo.com.png"},"x-apply-url":"https://job-boards.greenhouse.io/zoominfo/jobs/8441742002","x-work-arrangement":"hybrid","x-experience-level":"senior","x-job-type":"full-time","x-salary-range":null,"x-skills-required":["SOX compliance","IT general controls","automated controls","application controls","system integrations","audit management technology","data analytics tools","AI-driven tools","cloud-based platforms","SaaS applications","databases","middleware solutions","CISA","CA","SOX requirements","COSO framework","COBIT standards"],"x-skills-preferred":["enterprise SaaS applications","data visualization tools","advanced analytics techniques","scripting or programming concepts","Python","artificial intelligence","prompt engineering","agile audit methodologies","continuous auditing frameworks"],"datePosted":"2026-04-18T15:43:48.246Z","jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Chennai, Tamil Nadu, India"}},"employmentType":"FULL_TIME","occupationalCategory":"IT","industry":"Technology","skills":"SOX compliance, IT general controls, automated controls, application controls, system integrations, audit management technology, data analytics tools, AI-driven tools, cloud-based platforms, SaaS applications, databases, middleware solutions, CISA, CA, SOX requirements, COSO framework, COBIT standards, enterprise SaaS applications, data visualization tools, advanced analytics techniques, scripting or programming concepts, Python, artificial intelligence, prompt engineering, agile audit methodologies, continuous auditing frameworks"},{"@context":"https://schema.org","@type":"JobPosting","identifier":{"@type":"PropertyValue","name":"YubHub","value":"job_8ae6102f-700"},"title":"GRC Automation Engineering Lead","description":"<p><strong>About the Role</strong></p>\n<p>We are seeking a GRC Automation Lead to join our GRC organisation and build the technical foundation for how we scale our risk and compliance programs. In this role, you will lead the team that designs and implements automated workflows, data pipelines, and integrations that transform manual compliance processes into scalable engineering systems.</p>\n<p>This is a greenfield opportunity to establish the team, architecture, and integrations that will define how we approach governance, risk, and compliance at Anthropic. The core challenge is a data problem: compliance information lives across dozens of systems—cloud infrastructure, identity providers, HR platforms, ticketing tools, code repositories—and your job is to design systems that bring it together, normalise it, and make it actionable.</p>\n<p>At Anthropic, you&#39;ll also have a unique advantage: the ability to design AI-powered workflows where Claude acts as an extension of your team, handling tasks that would traditionally require additional headcount or manual effort. You&#39;ll need ingenuity to identify where agentic AI can accelerate evidence collection, interpret unstructured data, triage compliance gaps, and augment human judgment in risk assessments.</p>\n<p>Working closely with Security, IT, and Engineering teams, you&#39;ll translate compliance and regulatory requirements into solutions that support audit programs including SOC 2, ISO, HIPAA, and FedRAMP, building systems that combine traditional automation with AI capabilities to achieve scale that wouldn&#39;t otherwise be possible.</p>\n<p><strong>Responsibilities:</strong></p>\n<ul>\n<li>Lead the team that establishes foundational GRC processes and architecture. Design and build automated workflows for risk management and compliance, creating scalable systems that enable continuous monitoring as Anthropic grows.</li>\n</ul>\n<ul>\n<li>Build data pipelines that aggregate risk, control, and asset information from across our technology stack. This means solving hard data integration problems: mapping disparate schemas, handling inconsistent data quality, and creating unified views of compliance posture through dashboards and reporting tools.</li>\n</ul>\n<ul>\n<li>Inform GRC platform strategy and implementation: in partnership with other programs, evaluate, select, and deploy tooling that meets our compliance requirements.</li>\n</ul>\n<ul>\n<li>Translate written policies and compliance requirements into policy-as-code—working with Engineering and Security teams to express requirements as enforceable rules, automated checks, and continuous validation rather than static documents.</li>\n</ul>\n<ul>\n<li>Establish feedback loops between policy and implementation: surface where technical controls diverge from written requirements, identify where policies need to evolve based on infrastructure realities, and ensure that compliance requirements are expressed in terms engineers can act on.</li>\n</ul>\n<ul>\n<li>Design and deploy agentic AI workflows that extend team capacity, using Claude to automate evidence analysis, monitor control effectiveness, draft audit responses, interpret policy documents, and handle other tasks that require reasoning over unstructured information.</li>\n</ul>\n<ul>\n<li>Design and maintain integrations connecting GRC tooling with cloud infrastructure, identity management systems, HRIS platforms, ticketing systems, version control, and CI/CD pipelines—working with engineers to implement integrations that enable automated evidence collection and continuous compliance validation.</li>\n</ul>\n<ul>\n<li>Build and lead the GRC Automation function as we scale: hiring team members, establishing practices, and defining the technical roadmap for governance and compliance automation at Anthropic.</li>\n</ul>\n<p><strong>You may be a good fit if you:</strong></p>\n<ul>\n<li>Have 3-4+ years of experience managing technical individual contributors or systems-focused teams, with a proven track record of building or scaling small teams (2-5 people) in security, compliance, automation, or operations functions.</li>\n</ul>\n<ul>\n<li>Are a systems thinker first. You understand how complex environments work: how data flows between systems, where integration points exist, what breaks when systems don&#39;t talk to each other. Your strength is designing the right architecture and environment for security monitoring, not necessarily implementing it yourself.</li>\n</ul>\n<ul>\n<li>Have 5+ years of experience designing automated workflows, data pipelines, or system integrations, whether through traditional development, low-code platforms, GRC tools, or process automation. We care about your ability to solve integration problems, not your programming language proficiency.</li>\n</ul>\n<ul>\n<li>Proficiency to write production level code in at least one programming language (e.g., Python, Rust, Go)</li>\n</ul>\n<ul>\n<li>Have a relentless focus on data integration: you understand how to pull data from multiple sources, normalise it, join it meaningfully, and surface insights. You&#39;re comfortable reasoning about messy, inconsistent data and designing systems that handle edge cases gracefully.</li>\n</ul>\n<ul>\n<li>Understand APIs and integration patterns conceptually: REST APIs, webhooks, authentication flows, polling vs. push architectures, and can evaluate systems based on how well they expose data and support automation, even if you&#39;re not writing the integration code yourself.</li>\n</ul>\n<ul>\n<li>Can work independently with minimal guidance, taking ownership of complex problems from design through implementation while managing ambiguity inherent in early-stage programs.</li>\n</ul>\n<ul>\n<li>Have strong analytical and problem-solving skills, with the ability to break down complex problems into manageable parts and develop creative solutions.</li>\n</ul>\n<ul>\n<li>Are able to communicate complex technical ideas to both technical and non-technical stakeholders, with a strong focus on collaboration and teamwork.</li>\n</ul>\n<ul>\n<li>Are passionate about staying up-to-date with industry trends and emerging technologies, with a willingness to learn and adapt to new tools and techniques.</li>\n</ul>\n<p style=\"margin-top:24px;font-size:13px;color:#666;\">XML job scraping automation by <a href=\"https://yubhub.co\">YubHub</a></p>","url":"https://yubhub.co/jobs/job_8ae6102f-700","directApply":true,"hiringOrganization":{"@type":"Organization","name":"Anthropic","sameAs":"https://job-boards.greenhouse.io","logo":"https://logos.yubhub.co/anthropic.com.png"},"x-apply-url":"https://job-boards.greenhouse.io/anthropic/jobs/4980335008","x-work-arrangement":"hybrid","x-experience-level":"senior","x-job-type":"full-time","x-salary-range":null,"x-skills-required":["GRC","Automation","Data Pipelines","System Integrations","APIs","Integration Patterns","REST APIs","Webhooks","Authentication Flows","Polling vs. Push Architectures","Data Integration","Data Normalisation","Data Joining","Data Modelling","Data Analysis","Data Visualisation","Agile Methodologies","Scrum","Kanban","Continuous Integration","Continuous Deployment","Continuous Monitoring","Cloud Infrastructure","Identity Providers","HR Platforms","Ticketing Tools","Code Repositories","Version Control","CI/CD Pipelines","GRC Tools","Policy-as-Code","Automated Checks","Continuous Validation","Feedback Loops","Policy Implementation","Technical Controls","Policy Evolution","Infrastructure Realities","Compliance Requirements","Engineer Communication","Technical Ideas","Collaboration","Teamwork","Industry Trends","Emerging Technologies","Learning","Adaptation","New Tools","New Techniques"],"x-skills-preferred":["Python","Rust","Go","Java","C++","JavaScript","TypeScript","SQL","NoSQL","Cloud Computing","DevOps","Security","Compliance","Risk Management","Audit Programs","SOC 2","ISO","HIPAA","FedRAMP","GRC Platforms","GRC Tools","Policy Management","Compliance Management","Risk Management","Audit Management","Compliance Automation","GRC Automation","Policy Automation","Compliance Orchestration","Risk Orchestration","Audit Orchestration","Compliance Intelligence","Risk Intelligence","Audit Intelligence","Compliance Analytics","Risk Analytics","Audit Analytics","Compliance Reporting","Risk Reporting","Audit Reporting","Compliance Dashboarding","Risk Dashboarding","Audit Dashboarding"],"datePosted":"2026-03-08T13:43:53.373Z","jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"San Francisco, CA | New York City, NY | Seattle, WA"}},"employmentType":"FULL_TIME","occupationalCategory":"Engineering","industry":"Technology","skills":"GRC, Automation, Data Pipelines, System Integrations, APIs, Integration Patterns, REST APIs, Webhooks, Authentication Flows, Polling vs. Push Architectures, Data Integration, Data Normalisation, Data Joining, Data Modelling, Data Analysis, Data Visualisation, Agile Methodologies, Scrum, Kanban, Continuous Integration, Continuous Deployment, Continuous Monitoring, Cloud Infrastructure, Identity Providers, HR Platforms, Ticketing Tools, Code Repositories, Version Control, CI/CD Pipelines, GRC Tools, Policy-as-Code, Automated Checks, Continuous Validation, Feedback Loops, Policy Implementation, Technical Controls, Policy Evolution, Infrastructure Realities, Compliance Requirements, Engineer Communication, Technical Ideas, Collaboration, Teamwork, Industry Trends, Emerging Technologies, Learning, Adaptation, New Tools, New Techniques, Python, Rust, Go, Java, C++, JavaScript, TypeScript, SQL, NoSQL, Cloud Computing, DevOps, Security, Compliance, Risk Management, Audit Programs, SOC 2, ISO, HIPAA, FedRAMP, GRC Platforms, GRC Tools, Policy Management, Compliance Management, Risk Management, Audit Management, Compliance Automation, GRC Automation, Policy Automation, Compliance Orchestration, Risk Orchestration, Audit Orchestration, Compliance Intelligence, Risk Intelligence, Audit Intelligence, Compliance Analytics, Risk Analytics, Audit Analytics, Compliance Reporting, Risk Reporting, Audit Reporting, Compliance Dashboarding, Risk Dashboarding, Audit Dashboarding"},{"@context":"https://schema.org","@type":"JobPosting","identifier":{"@type":"PropertyValue","name":"YubHub","value":"job_7b285212-dc6"},"title":"Governance, Risk & Compliance Lead","description":"<p>We are seeking a highly experienced Governance, Risk &amp; Compliance Analyst to join our team. This role exists to help shape our compliance and risk management program, ensuring that we are always operating in a secure and compliant manner.</p>\n<p><strong>What you&#39;ll do</strong></p>\n<p>As a Governance, Risk &amp; Compliance Lead, you will be responsible for implementing and leading frameworks such as SOC2, ISO 27001 and HIPAA. You will also ensure and maintain compliance with GDPR, CCPA, CPRA and other privacy regulations.</p>\n<ul>\n<li>Implement and lead frameworks such as SOC2, ISO 27001 and HIPAA. Ensuring compliance with certification requirements</li>\n<li>Ensure and maintain compliance with GDPR, CCPA, CPRA and other privacy regulations</li>\n<li>Design and build scalable audit management processes and documentation systems that will support future expansion to additional compliance frameworks</li>\n<li>Conduct risk assessments and mitigate data security and compliance risks</li>\n<li>Write, update and enact policies capturing security, privacy, and AI safety requirements</li>\n<li>Follow and help shape the AI regulatory and standards landscape to keep the company at the forefront of industry developments and best practices</li>\n</ul>\n<p><strong>What you need</strong></p>\n<ul>\n<li>6+ years of experience leading engagements in audit and compliance</li>\n<li>Experience leading compliance teams</li>\n<li>Worked in high tech companies in cloud-native environments</li>\n<li>Able to translate complex compliance requirements into clear and actionable work-streams</li>\n<li>Strong commitment to cross-functional collaboration with IT, Security, GTM, and Engineering</li>\n<li>Self-motivated, detailed and organized, with a diligent approach to project completion</li>\n<li>Excellent written, verbal, and interpersonal communication skills</li>\n</ul>\n<p style=\"margin-top:24px;font-size:13px;color:#666;\">XML job scraping automation by <a href=\"https://yubhub.co\">YubHub</a></p>","url":"https://yubhub.co/jobs/job_7b285212-dc6","directApply":true,"hiringOrganization":{"@type":"Organization","name":"Perplexity","sameAs":"https://jobs.ashbyhq.com","logo":"https://logos.yubhub.co/perplexity.com.png"},"x-apply-url":"https://jobs.ashbyhq.com/perplexity/977b626c-5546-42c6-95c8-4e2350ec41c9","x-work-arrangement":"onsite","x-experience-level":"senior","x-job-type":"full-time","x-salary-range":"$200K - $220K","x-skills-required":["Governance, Risk & Compliance","SOC2","ISO 27001","HIPAA","GDPR","CCPA","CPRA"],"x-skills-preferred":["Audit management","Compliance frameworks","Risk assessments","Policy writing","AI regulatory and standards landscape"],"datePosted":"2026-03-04T12:26:57.128Z","jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"San Francisco"}},"employmentType":"FULL_TIME","occupationalCategory":"IT","industry":"Technology","skills":"Governance, Risk & Compliance, SOC2, ISO 27001, HIPAA, GDPR, CCPA, CPRA, Audit management, Compliance frameworks, Risk assessments, Policy writing, AI regulatory and standards landscape","baseSalary":{"@type":"MonetaryAmount","currency":"USD","value":{"@type":"QuantitativeValue","minValue":200000,"maxValue":220000,"unitText":"YEAR"}}}]}