41,775 Security jobs
Security roles covering application, cloud and infrastructure security.
GRC Analyst (Homebased)
Remote GRC Analyst who keeps compliance programs healthy across multiple client accounts: managing GRC platforms (Drata, Vanta, Secureframe, Thoropass), closing failing controls, collecting audit evidence, running access reviews, completing security questionnaires, and answering client compliance questions in Slack while tracking all work in Linear.
Analyste SOC N2 / Cybersécurité (H/F)
🎯 Votre mission : Assurer la détection et l'analyse des flux et comportements atypiques au sein du système d'information, sur les périmètres applicatif et infrastructure, avec une expertise en cybersécurité et en…
Analista de Segurança da Informação Jr
1. Governança, Risco e Conformidade (GRC) & Cultura de Segurança • Políticas Corporativas: Elaboração, publicação e revisão das políticas de segurança (PSI, Acesso Remoto, Gestão de Software, Descarte Seguro de Ativos…
Information Systems Security Engineer
Owns the security documentation and authorization package for Snowflake's classified deployments for US government customers, starting with Arc Reactor. Leads NIST 800-53/RMF and FedRAMP control assessments, directs engineers producing control evidence, and reports authorization status and risk to the program from the Washington, DC area.
사내 변호사 (GRC, Global) (Legal Counsel)
Oversee global financial regulations and compliance for Toss’s expansion, designing frameworks to ensure products meet local and international legal standards.
사내 변호사 (GRC, 금융복합기업집단) (Legal Counsel)
Design and implement governance, risk, and compliance frameworks for Toss’s transition from fintech unicorn to a financial conglomerate, aligning policies with evolving regulations.
보안정책 담당자 (Information Security Manager)
Oversee and audit security policies, compliance, and architecture for Toss Bank’s fintech platform, ensuring regulatory adherence and safe digital banking operations.
보안정책 담당자 (정보보호 정책/기획 담당) (Information Security Manager)
Design and maintain information-security policies for a fintech securities firm, ensuring compliance with regulations and managing certifications like ISO 27001 and PCI-DSS.
보안정책 담당자 (Information Security Manager)
Design and enforce Toss’s information-security policies, interpret financial regulations into internal controls, and lead certification audits and risk assessments across fintech services.
IT 감사 매니저 (IT Audit Manager)
IT Audit Manager at Toss Bank: plans and runs the annual IT audit program (risk-based, change-management and ledger-control audits), reports results to executives and the audit committee, tracks remediation, and leads responses to financial regulator IT inspections. Requires financial-sector IT audit experience plus understanding of dev, infra, security, cloud, Kubernetes, and AI environments.
IT 감사 담당자 (IT Auditor)
IT Auditor at Toss performs data-driven audits of financial systems, focusing on risk identification, regulatory compliance, and AI/data integrity controls using Python, SQL, and analytics.
네트워크 보안 엔지니어 (5년 이상) (Network Security Engineer)
Designs, deploys, and maintains network security infrastructure (firewalls, VPNs) to protect Toss Securities’ high-volume financial and commerce platforms, ensuring 24/7 uptime while optimizing traffic and automating operations with scripting/APIs.
네트워크 보안 엔지니어 (5년 미만) (Network Security Engineer)
Builds and maintains secure network infrastructure for Toss Securities, managing firewalls, DDoS protection, and VPNs to safeguard customer and internal systems.
보안 분석가 (Security Analyst)
Analyzes security threats and incidents for Toss Bank’s services, designs threat models using SIEM logs, and automates responses with Python/PowerShell to protect electronic transactions.
보안 엔지니어 (이벤트 분석/사고 대응) (Security Engineer)
Security Engineer at Toss analyzes security events, designs detection rules, and responds to incidents using SIEM, EDR, and threat intelligence to protect services and employee environments.
보안 엔지니어 (이벤트 분석 / 사고 대응) (Security Engineer)
Build and operate detection rules, analyze security events, and automate incident response for Toss’s services in Kubernetes and cloud environments.