Posted Apr 24, 2024

The Senior Director of Public Policy is responsible for creating and maintaining GitLabs public policy engagement strategy facilitating relationships across various governing bodies authorities commissions and councils the purpose of which is to represent and further GitLab interests <h3> An overview of this role <h3> The Senior Director of Public Policy will report to the GitLab Chief Legal Officer and help establish and direct policies corporate strategies and objectives involving local state and federalnational government affairs As part of this role the Senior Director of Public Policy will lead in the analysis of proposed legislation and treatys globally as well as determine potential impacts on GitLab and develop strategy and appropriate responses accordingly The Senior Director of Public Policy is a <a class=fontbold underline fontbold underline fontbold underline href=httpshandbookgitlabcomhandbooktotalrewardscompensationcompensationcalculatorgitlabjobgrades rel=noopener noreferrer nofollow target=blank> grade 11 <a> <h3> What youll do <h3> <ul> <li> Develop GitLabs public policy program and approach to engagement with US and European lawmakers regulatory authorities governments councils and commissions Monitor and report on key developments in tech regulation and policy across all jurisdictions including the United States and EU <li> <li> Advise senior leaders of the implications of emerging technology policy and regulatory proposals Partner with leadership and other stakeholders across GitLab to address policyrelated matters including the implications of emerging technology trends proposed legislation and regulatory proposals <li> <li> Collaborate with teams across GitLab to educate and influence emerging regulatory and policy proposals on topics such as artificial intelligence open source software sustainability privacy and security <li> <li> Lead the analysis of proposed legislative actions and the development of responses on behalf of GitLab including responses to inquiries or calls for submissions from legislative bodies or government regulators <li> <ul> <h3> What youll bring <h3> <ul> <li> Minimum 12+ years of public policy andor government affairs experience inhouse experience preferred <li> <li> Proven experience with direct lobbying and ability to conceive and execute policy campaigns both in the United States and other jurisdictions including the European Union <li> <li> Strong familiarity with emerging technology public policy trends in the areas of cybersecurity privacy antitrustcompetition and law enforcement access <li> <li> The ability to articulate complex regulatory and policy matters into easily understood language <li> <li> Adept ability to work with other industry representatives to build coalitions and form strategic relationships <li> <li> A keen understanding of policy and legislative processes and dynamics within the US Government and Congress and the operation of the European Union Parliament Council and Commission <li> <li> An ownership mindset of the relevant areas of subject matter expertise <li> <li> Capable of building strong relationships cross functionally at all levels across GitLab <li> <ul>

View Details Apply on workingnomads

Anchorage Digital digital asset platform crypto platform

Member of Compliance, Information Technology

Company: anchorage

Location: USA

Posted Apr 24, 2024

<div>At Anchorage Digital we are building the worlds most advanced digital asset platform for institutions to participate in crypto<div> <div> <div> <div>Founded in 2017 Anchorage Digital is a regulated crypto platform that provides institutions with integrated financial services and infrastructure solutions With the first federally chartered crypto bank in the US Anchorage Digital offers institutions an unparalleled combination of secure custody regulatory compliance product breadth and client service Were looking to diversify our team with people who are humble creative and eager to learn<div> <div> <div> <div>We are a remote friendly global team but provide the option of working inoffice in New York City Sioux Falls Porto Lisbon and Singapore For our colleagues not located near our beautiful offices we encourage and sponsor quarterly inperson collaboration days to work together and further deepen our Village<div> <div> <div> <div>As a Member of Compliance Information Technology youll get the opportunity to work on various projects across the organization ranging from IT risk gap and readiness assessments to controls implementation and monitoring This role is highly crossfunctional and will cover multiple service offerings and entities Anchor Labs Inc Anchorage Digital Bank Anchorage Digital Singapore Anchorage Digital New York etc<div> <div> <div> <div>We have created the Factors of Growth amp Impact to help Villagers better measure impact and articulate coaching feedback and the rich and rewarding learning that happens while exploring developing and mastering the capabilities and contributions within and outside of the Member of Compliance Information Technology role<div> <div class=h3>Technical Skills<div> <ul style=> <li style=>Have a complete conceptual knowledge and full understanding of principles practices and a working knowledge of Governance Risk and Compliance GRC the full lifecycle of audit methodology IT RiskControls SOC information security policy governance and management<li> <li style=>Have an understanding of IT engineering processes and tools and cloud computing<li> <li style=>Apply experience and analytical skills to connect the dots between the companys business and products to the IT environment in order to evaluate whether compliance obligations are being met<li> <li style=>Resolve a wide range of issues in creative ways working directly with control owners to ensure regulatory requirements are being met including managing and tracking findings from risk assessments audits etc from identification to remediation<li> <li style=>Have experience with GRC management tools eg ServiceNow<li> <ul> <div class=h3>Complexity and Impact of Work<div> <ul style=> <li style=>Participate in completing detailed testing of IT processes and controls including developing test objectives determination of key risks using the department methodologies under the direction of the IT Risk Lead<li> <li style=>Assisting in scoping the reviews identifying risks in the process determining expected controls creating project timelines conducting process understanding meetings creating test scripts performing and documenting testing developing recommendations and drafting succinct reports Assisting with the validation of remediation activities<li> <li style=>Can produce detailed working papers to document the testing of the IT control in accordance with department and audit standards<li> <li style=>Can work autonomously define priorities under broad direction and apply problemsolving skills to translate regulations and compliance obligations into technical controls and vice versa<li> <li style=>Drives work independently and significantly contributes to mediumtolarge crossfunctional projects with little oversight and coordinating activities of other project team members<li> <li style=>Identify process and control gaps and enhancements and be capable of evaluating remediation plans<li> <li style=>Contributes to ad hoc internal and external assessments that support the companys ongoing and future initiatives<li> <li style=>Consistently demonstrates ontime delivery and highquality work products Where a deadline or commitment is at risk escalate to the manager to help manage priorities if appropriate and alert affected stakeholders so there are no surprises<li> <ul> <div class=h3>Organizational Knowledge<div> <ul style=> <li style=>Awareness of the strategy of Anchorage is considered when not only working crossfunctionally with security product design engineering legal TPRM people and external auditors but also understanding how each area is impacted by compliance<li> <li style=>Influences the IT Compliance roadmap and initiatives<li> <li style=>Understand how the companys priorities relate to their own area of work and clearly communicate the why behind the work<li> <ul> <div class=h3>Communication and Influence<div> <ul style=> <li style=>Promote a positive working environment through proper listening speaking and empathy with team members<li> <li style=>Embody and is a role model for our cultural pillars<li> <li style=>Communicates proactively takes ownership of assigned workprojects and is comfortable asking questions when something is unclear or to further knowledge in a specific area<li> <li style=>Contribute to crossfunctional projects collaborate with their team and adjacent teams working directly with subjectmatter experts and doing meaningful translation of compliance requirements into actionable processes<li> <li style=>Enhance relationships and networks with senior internal and external stakeholders within their own area of expertise<li> <li style=>Consistently express clear thoughtful analytical and solutionsoriented communications whether in highimpact slidesdecks written communications in Slack or email or verbal communications<li> <ul> <div class=h3>You may be a fit for this role if you have<div> <ul style=> <li style=>Experience in IT risk and security audits <li> <li style=>Experience in supportingmanaging the complete audit life cycle<li> <li style=>Proven success performing various risk assessments eg enterprise risk information security<li> <li style=>Demonstrated success in automating control monitoring techniques<li> <li style=>Experience creating and managing policies and procedures<li> <li style=>Experience in creating detailed work papers to sufficiently support the testing engagement<li> <li style=>Knowledge of public cloud infrastructure AWSGCPAzure<li> <li style=>Passion for digging into the weeds problemsolving and building programs from the ground up<li> <li style=>Proven track record of effective crossfunctional project management and organizational skills<li> <li style=>CISA certification or equivalent is required<li> <ul> <div class=h3>Although not a requirement bonus points if<div> <ul style=> <li style=>Security certifications such as CISSP CCSP<li> <li style=>Experience in managing GRC processes in tools such as ServiceNow<li> <li style=>Understanding of crypto staking andor governance<li> <li style=>Had interactions with regulatory authorities and auditors<li> <li style=>A technicalengineering background or mindset<li> <li style=>Fintech or financial services industry experience<li> <li style=>You were emotionally moved by the soundtrack to Hamilton which chronicles the founding of a new financial system <li> <ul> <div class=h3>Compensation at Anchorage Digital<div> <ul style=> <li style=>Compensation at Anchorage Digital is marketdriven and datainformed All fulltime employees receive a marketleading salary meaningful equity and a generous perks and benefits package<li> <li style=>Compensation Range We partner with third party firms annually to verify equity cash benefits and perks benchmarks For sales and business development roles the range provided is the On Target Earnings OTE which is inclusive of base salary + sales commissionsbonuses targets for the position<li> <li style=>Benefits Anchorage Digital is proud to provide marketleading benefits and perks to our employees We are only 1 of companies who offer 100 health dental and vision coverage for you and your dependents This means no monthly outofpocket premiums for you or your family We offer a wide range of benefits to our employees globally<li> <li style=>You can learn more about our culture and perks and benefits <a class=postingslink href=httpswwwlinkedincomcompanyanchoragelife rel=nofollow>here<a><li> <ul> <div>About Anchorage Digital Who we are<div> <div> <div> <div>The Anchorage Village what we call our team brings together the brightest minds from platform security financial services and distributed ledger technology to provide the building blocks that empower institutions to safely participate in the evolving digital asset ecosystem As a diverse team of more than 300 members we are united in one common goal building the future of finance by providing the foundation upon which value moves safely in the new global economy <div> <div> <div> <div>Anchorage Digital is committed to being a welcoming and inclusive workplace for everyone and we are intentional about making sure people feel respected supported and connected at workregardless of who you are or where you come from We value and celebrate our differences and we believe being open about who we are allows us to do the best work of our lives<div> <div> <div> <div>Anchorage Digital is an Equal Opportunity Employer We are committed to equal employment opportunity regardless of race color ancestry religion sex national origin sexual orientation age citizenship marital status disability gender identity or veteran status Anchorage Digital considers qualified applicants regardless of criminal histories consistent with other legal requirements Anchorage Digital refers to services that are offered either through Anchorage Digital Bank National Association an OCCchartered national trust bank or Anchorage Lending CA LLC a finance lender licensed by the California Department of Financial Protection and Innovation License No 60DBO11976 or Anchorage Digital Singapore Pte Ltd a Singapore private limited company all whollyowned subsidiaries of Anchor Labs Inc a Delaware corporation<div> <div> <div> <div>Protecting your privacy rights is important to Anchorage Digital and we work to maintain the trust and confidence of our clients when handling personal or financial information Please see our <a class=postingslink href=httpswwwanchoragecomprivacypolicy rel=nofollow>privacy policy notices here<a><div> <img src=httpsremotivecomjobtrack1908357blankgifsource=publicapi alt=>

View Details Apply on Remoteio

Director of Security Operations

Company: Phaidra

Location: USA

Posted Apr 24, 2024

<h3> Who You Are <h3> The Director of Security Operations is a strategic leader focused on ensuring Phaidras security capabilities are operating effectively continuously You will play a critical role in safeguarding Phaidras assets infrastructure and operations In this role you will be responsible for overseeing the daytoday operations of our security program including threat detection vulnerability management incident response threat intelligence and security automation You will be responsible for engaging with our customers on all things related to security You will be the lead of the security team providing guidance and direction to a team of security professionals and collaborating with other departments across the organization We are seeking a team member located within one of the following areas USA <h3> Responsibilities <h3> <ul> <li> Provide strategic direction and leadership to security operations enterprise security amp cloud security functions aligning them with Phaidras overall objectives and risk tolerance <li> <li> Oversee the daytoday operations of the security team including monitoring security events managing incidents and coordinating responses to security threats and breaches <li> <li> Ensure our compliance and continued accreditation with SOC2 GDPR ISO27001 and other programs as required <li> <li> Engage with and present to our customers on all things Phaidra security <ul> <li> Communicate our security posture effectively to customers tailoring your approach for Csuite IT Security and Operations teams as appropriate <li> <li> Lead the response to risk and security questionnaires as required by customers and maintain a questionnaire answer repository <li> <ul> <li> <li> Provide security expertise to our product development efforts by following secure by default principles to integrate appropriate security controls into Phaidras products Collaborate with product teams on security solutions <li> <li> Establish implement and manage a coverage plan with defined service level objectives wellunderstood outcomes and effectiveness tracking to ensure potential issues are discovered and resolved in a timely manner <li> <li> Develop and maintain a comprehensive enterprise and cloud security architecture and procedure for the organization encompassing network security endpoint security cloud security and other critical areas <li> <li> Identify assess and mitigate security risks across the company utilizing risk assessment methodologies and implementing appropriate controls and countermeasures <li> <li> Own Phaidras Security Information and Event Management SIEM Endpoint Detection and Response EDR Intrusion Detection System IDS and optimize tools and processes to identify and prioritize threats and vulnerabilities <li> <li> Implement and optimize security monitoring tools and processes to identify and prioritize threats Implement and optimize a vulnerability management program to identify assess and prioritize vulnerabilities and ensure timely patching <li> <li> Promote a culture of security awareness throughout the organization by providing training educational materials and awareness campaigns to employees at all levels <li> <li> Establish key performance indicators KPIs and metrics to measure the effectiveness of security operations and enterprise security programs providing regular reports and updates to senior management <li> <li> Drive a culture of continuous improvement and innovation within the security organization identifying opportunities to enhance security posture streamline processes and adopt emerging best practices <li> <li> Develop incident response plans and lead efforts to investigate and mitigate security incidents collaborating with internal teams and external partners as needed <li> <li> Ensure compliance with relevant laws regulations and industry standards related to information security and privacy maintaining documentation and reporting as required <li> <li> Develop and manage the security budget for the sec ops function allocating resources effectively to support security initiatives projects and operational needs <li> <li> Build and lead a highperforming team provide coaching and mentorship and ensure individual and team success <li> <li> Work effectively and regularly with IT Operations Legal and Infrastructure Engineering and work crossfunctionally with other departments to ensure security considerations are integrated into all business processes <li> <li> Communicate securityrelated threats information and changes clearly and succinctly across the company <li> <ul> <h3> Onboarding <h3> In your first 30 days <ul> <li> You will be immersed in an onboarding program that introduces you to Phaidra and our product <li> <li> Integrate into the Phaidra team understanding our product technologies security posture and business goals <li> <li> Get to know the security team and security council both of which youll be leading Associated transition activities will be completed <li> <li> Begin building relationships across the company establishing yourself as a foundational resource on security <li> <li> Begin familiarizing yourself with our security and secops systems processes and controls identify areas for enhancement and development <li> <li> Begin building relationships with our external vendors and auditors <li> <li> Meet with our sales customer success and other teams who interact with our customers to gain an understanding of customer security requirements <li> <li> Review and understand all of our security policies and processes and document areas for improvement or change <li> <ul> In your first 60 days <ul> <li> Engage with our engineering and product teams to grasp the intricacies of our technology and its security implications <li> <li> Outline a strategic and detailed tactical plan for how youd like to evolve our security approach actions that need to be taken and how youll run the team including defining and implementing SLAs for security requests <li> <li> Upon review and approval by the COO revise all policies and processes to reflect how youd like security to be run at Phaidra <li> <li> Meet with our current customers and understand their security requirements directly <li> <li> Begin assisting with departmental level security needs <li> <ul> In your first 90 days <ul> <li> Finish executing the plan put in place during your first 60 days <li> <li> Clear definition of security roadmap for the next 12 months defined based on areas of improvement identified Roadmap will include all recurring activities per our security policies <li> <li> Fully take over security leadership responsibilities held by others currently managing in a fractional capacity <li> <li> Demonstrate that you can represent Phaidras security and compliance expertise with our customers building their trust in our product and services from a security perspective <li> <li> Position the security team as a proactive strategic partner within the company <li> <li> Build a security awareness program that drives security thinking across Phaidra <li> <li> Define your teams OKRs for the following quarter based on the action plan and roadmap youve developed since starting <li> <ul> <h3> Key Qualifications <h3> <ul> <li> 10+ years of progressive technical experience in security operations enterprise security and cloud security roles and 5+ years of management experience <li> <li> Experience with securely connecting closed systems to the public internet <li> <li> Experience with secure by default concepts for product development <li> <li> Understanding of security technologies frameworks and best practices related to cloud platforms eg GCP AWS network security identity and access management IAM encryption data protection and compliance <li> <li> Experience communicating complex technical security requirements in a way that is understandable clear and reassuring to enterprise customers including CSuite IT Security and Operations personnel <li> <li> Strong leadership experience with a proven track record of leading and managing teams developing and executing security strategies and driving results in complex and dynamic environments <li> <li> Proven experience in incident response threat detection threat modeling vulnerability management security automation and threat intelligence analysis <li> <li> Experience working in a Zero Trust focused security program <li> <li> Experience working with MacOS endpoint security <li> <li> Strong understanding of security best practices and frameworks eg MITRE ATTampCK NIST Cybersecurity Framework <li> <li> Excellent communication and interpersonal skills with the ability to collaborate with internal stakeholders executive leadership cloud providers external partners customers and employees <li> <li> Strong analytical and problemsolving skills to identify security risks assess their potential impact and develop effective mitigation strategies <li> <li> A thorough understanding of relevant laws regulations and industry standards pertaining to cybersecurity and cloud security in a global organization eg CCPACPRA GDPR <li> <ul> <h3> Preferred Skills amp Experience <h3> <ul> <li> Relevant certifications such as CISSP Certified Information Systems Security Professional CISM Certified Information Security Manager CCSK Certificate of Cloud Security Knowledge <li> <li> Experience with Vanta and Rippling <li> <ul> <h3> General Interview Process <h3> All of our interviews are held via Google Meet and an active camera connection is required <ul> <li> Interview with Hiring Manager 30 minutes The purpose of this interview is for you to get to know the manager for the role This chat will mainly focus on your previous experience and career goals You can expect to talk about projects that you have worked on in the past how you think through problems and ask any questions about the team amp role <li> <li> Interview with Operations team member 30 minutes The purpose of this interview is to meet you learn more about your background and discuss what you are looking for in a new position <li> <li> Interview with Infrastructure and Security 45 minutes The purpose of this interview is to gauge technical understanding and the ability to grok on the softwareengineering infrastructuresecops side <li> <li> Interview with Corporate Development and Connectivity 30 minutes The purpose of this interview is to evaluate your skillset from a customerfacing perspective <li> <li> Culture fit interview with CoFounders 30 minutes This interview focuses on alignment with Phaidras values <li> <ul> <h3> Base Salary <h3> <ul> <li> United States Residents $165000$238800 year <li> <ul> This position will also include equity These are best faith estimates of the base salary range for this position Multiple factors such as experience education level and location are taken into account when determining compensation

View Details Apply on workingnomads

Previous
1
...
598
599
600
601
602
...
25719
Next

Frequently Asked Questions

What are the typical salary ranges for US Citizenship roles at different seniority levels?

Entry‑level analysts earn $45,000–$60,000 annually, mid‑level policy specialists earn $60,000–$80,000, senior attorneys or program managers earn $80,000–$110,000, and director‑level positions reach $110,000–$150,000, all reflected in the federal General Schedule (GS‑9 to GS‑13) and comparable private‑sector scales.

What skills and certifications are essential for a career in US Citizenship?

Candidates need deep knowledge of the Immigration and Nationality Act, USCIS regulations, and NVC procedures. Proficiency in case‑management platforms (e.g., Visaflow, CaseWare) and data‑analysis tools (Excel, Power BI) is critical. Certifications such as USCIS Certified Immigration Officer, Certified Immigration Consultant (CIC), or a J.D. with a focus on immigration law bolster credibility and open doors to higher‑level roles.

Is remote work possible for US Citizenship professionals?

Many federal agencies offer hybrid arrangements for roles like Visa Program Analyst or Policy Advisor, allowing 2–3 days onsite. Private firms such as immigration law practices and nonprofit advocacy groups increasingly provide fully remote positions, especially for policy research, grant writing, and compliance monitoring, as long as secure communication protocols are followed.

What does a typical career progression look like in the US Citizenship sector?

A common trajectory starts with an entry‑level compliance or analyst role, advances to senior policy specialist or program manager after 3–5 years, then to deputy director or chief of staff positions, and ultimately to director or chief policy officer at DHS, a federal agency, or a major immigration consultancy. Advanced degrees (LL.M., M.A. in Public Policy) and leadership training accelerate promotion.

What industry trends are shaping US Citizenship careers today?

Key trends include the use of AI for visa eligibility screening, increased federal investment in border technology, expanded pathways for skilled worker visas, and a growing emphasis on data‑driven policy evaluation. The Citizenship Renewal Act’s digital application platform is also creating demand for cybersecurity‑savvy policy analysts and grant managers.

All United States Citizenship Jobs 1,831 jobs All Jobs in USA 45,851 jobs United States Citizenship in Remote 249,429 jobs United States Citizenship in Other US Location 216,827 jobs United States Citizenship in New York City, NY 57,606 jobs United States Citizenship in Multiple Locations 51,312 jobs United States Citizenship in Washington DC 35,137 jobs United States Citizenship in Chicago, IL 33,901 jobs Travel in USA 79,927 jobs Full Time in USA 46,687 jobs Retirement Plan in USA 43,124 jobs 401(K) in USA 38,424 jobs Health Insurance in USA 35,707 jobs Life Insurance in USA 33,700 jobs

United States Citizenship Jobs in USA

Frequently Asked Questions

Related Pages