Job Closed

This listing is no longer active.

Toast logo
Toast

We empower the restaurant community to delight guests, do what they love, and thrive.

Lead Technical Governance Analyst

RiskRiskFull TimeRemoteSeniorTeam 1,001-5,000Since 2013H1B SponsorCompany SiteLinkedIn

Location

United States

Posted

74 days ago

Salary

$127K - $203K / year

Seniority

Senior

Bachelor Degree8 yrs expEnglishCloudCyber SecurityPythonSDLCServiceNowSQL

Job Description

Lead Technical Governance Analyst

Toast

• Drive Security and Technical Governance Risk and Compliance Initiatives: • GRC Platform Ownership: Serve as the primary admin and product owner for the GRC platform (AuditBoard). You will move beyond administration to design advanced workflows, automation, and metrics that centralize risk and compliance data. • Common Controls Framework (CCF) Stewardship: Own and evolve the Common Controls Framework. You will map and maintain complex regulations (NIST CSF, SOC 2, PCI DSS, ISO 27001) to a single source of truth, directly driving compliance efficiencies • Lead Strategic Initiatives: Independently lead complex, cross-functional "zero-to-one" security programs, taking them from concept to operational maturity. • Customer Trust Optimization: Drive the strategy for our Trust Center, operationalizing our ability to address customer and partner security questionnaires in a more efficient manner, reducing manual efforts and shortening lead times. • Develop and implement governance policies, controls, and best practices to enhance the security posture across corporate IT and workforce systems. • "Compliance by Design" Advisory: Champion the "Shift Left" strategy by co-developing standards that embed GRC checkpoints into the SDLC and Product innovation pipelines, ensuring security is baked in, not bolted on. • Change Events Governance: Define and standardize the process for assessing GRC impacts during major system changes, ensuring consistent intake and triage across all compliance programs. • Track and report on security governance KPIs and risk metrics, driving continuous improvement. • Collaborate with IT and Security: • Partner closely with the IT team to ensure corporate systems are managed appropriately and meet security objectives. • Work with the Security team to implement monitoring and detection capabilities that support workforce security objectives. • Promote Security Culture: • Foster a strong security culture within the organization through training, awareness programs, and ongoing communication.

Job Requirements

  • 8+ Years of progressive experience in Information Security GRC, Audit, or Technical Program Management.
  • Hands-on experience designing and operationalizing a Common Controls Framework (CCF) to map and consolidate controls across multiple regulatory frameworks (SOX, PCI DSS, SOC 2, NIST CSF, ISO 27001).
  • Proven experience serving as an Administrator, Architect, or primary owner of a modern GRC tool (e.g., AuditBoard, ServiceNow GRC, Workiva), including advanced workflow design, configuration, and maintenance.
  • Expert ability to define, manage, and enforce a clear hierarchy of governance documentation (Policy, Standard, Procedure) and maintain security baselines for corporate IT and workforce tools.
  • Demonstrated ability to drive the lifecycle of complex security initiatives, such as Data Governance Oversight, SaaS Posture Management, End Protection/Hardware Inventory, and Third-Party Risk Management.
  • Strong understanding of cybersecurity controls across cloud security, corporate IT security, and identity and access management (IAM). Committed to staying ahead of the curve in the ever-evolving field of cybersecurity.
  • Proven ability to lead and manage security initiatives and drive complex, cross-functional collaboration efforts without direct authority.
  • Builds strong relationships with stakeholders across the organization and thrives in a dynamic and rapidly changing environment.
  • Exceptional written and verbal communication skills, with the ability to translate complex security architecture into clear business risks for non-technical audiences.
  • A proactive and strategic approach to identifying, mitigating, and documenting risks in a high-growth, fast-paced technology environment.
  • Experience with scripting (e.g., Python, SQL) or building APIs/integrations to automate evidence collection.
  • Relevant security certifications such as CISSP, CISM, or CISA.
  • Experience designing or facilitating training programs (e.g., Compliance Champions) or leading Cyber Tabletop Exercises.
  • Experience supporting security governance in a remote or hybrid workforce environment.

Benefits

  • Learn more about our benefits at https://careers.toasttab.com/toast-benefits

Related Categories

Related Job Pages

More Risk Jobs

Full TimeRemoteTeam 201-500Since 2014H1B Sponsor

• Facilitate data governance working groups to drive alignment between business and technology stakeholders. • Execute metadata management activities such as cataloging, lineage capture, and stewardship workflows. • Partner with business teams to draft and maintain business rules, definitions, and data quality controls. • Apply data quality processes such as profiling, monitoring, and issue management, ensuring rules are practical and adopted. • Support the installation, configuration, rollout and adoption of governance/metadata tools (e.g., Collibra, Alation, Atlan, Purview). • Coach client staff on data stewardship practices—showing them how to govern their data effectively and sustainably. • Communicate governance concepts in clear business language; prepare presentations, training materials, and adoption guides. • Provide input on access controls, privacy, and compliance with regulations (GDPR, CCPA, etc.) • Collaborate with data engineers, analysts, and business owners to embed governance into daily workflows, platform pipelines, modeling practices, and observability.

District Of Columbia + 14 moreAll locations: District Of Columbia | B | DF | RM | SJ | HA | DN | P | G | FM | CMX | AS | L | Missouri | DL
Telix Pharmaceuticals (AMER) logo

VP, Risk, Sustainability and Environmental Affairs

Telix Pharmaceuticals (AMER)

Telix Pharmaceuticals is a dynamic, fast-growing radiopharmaceutical company with offices in Australia (HQ), Belgium, Japan, Switzerland, and the United States. Our mission is to deliver on the promise of precision medicine through targeted radiation.

Risk74 days ago
Full TimeRemoteTeam 1,001-5,000

Telix Pharmaceuticals is a dynamic, fast-growing radiopharmaceutical company with offices in Australia (HQ), Belgium, Japan, Switzerland, and the United States. Our mission is to deliver on the promise of precision medicine through targeted radiation. At our core, we exist to create products that seek to improve the quality of life for people living with cancer and rare diseases. You will be supporting the international roll-out of our approved prostate cancer imaging agent and helping us to advance our portfolio of late clinical-stage products that address significant unmet need in oncology and rare diseases. See Yourself at Telix The VP of Risk, Sustainability, and Environmental Affairs is critical to the identification and management of risks and opportunities relevant to the Group, including Environment, Health and Safety (EHS) and Sustainability risks and opportunities. You will be responsible for overseeing, executing and maturing enterprise risk management frameworks, strategies and plans to help protect and enhance Group value, as well as overseeing the Group’s EHS program and environmental strategies and initiatives. Your expertise in risk management, EHS, business resiliency, environmental regulations, compliance, and stakeholder engagement (to include Executive team members and the Board of Directors, in addition to stakeholders at all other levels of the business) will be crucial in driving the organization towards long-term success and resilience. Key Accountabilities: - Enterprise risk management (ERM): Support the ongoing development, implementation, and embedding of the Group’s enterprise risk management framework (ERMF) in line with the Group’s ‘three lines’ approach. Partner with management and risk owners to support compliance with the risk framework, review the adequacy of risk treatment plans for material business risks (including business continuity), identify and document emerging risks, and ensure policies, risk registers, controls, and compliance documentation are maintained and kept current. - Risk assessment and mitigation: Work closely with risk owners across the Group to conduct risk assessments and support the development and implementation of mitigation strategies. This includes supporting the design and monitoring of risk controls, contingency planning, and periodic risk reviews and audits. - Business Resiliency and Physical Security: Oversee and support the Senior Director, Physical Security and Business Resiliency in developing, implementing and managing all elements of the business resiliency and physical security program for the Group. - Sustainability: Provide guidance and direction to the Director, Global Sustainability focused on: - Sustainability strategy and implementation: Lead the development and execution of the Group’s sustainability and environmental strategies in alignment with organizational values and objectives. This includes identifying and prioritizing initiatives, supporting the establishment of targets and KPIs, and tracking progress against sustainability goals. - Environmental compliance and risk management: Maintain awareness of environmental laws and regulations in the jurisdictions in which the Group operates and support compliance with those requirements. Conduct environmental risk assessments across operating facilities, assess environmental performance, identify improvement opportunities, and support action plans to address environmental risks and challenges. - Climate-related risk management: Identify, assess, and support the management of current and emerging climate-related risks impacting the Group’s operations, value chain, and strategy. Contribute to internal reporting and disclosures related to climate risk, as required. - EHS: Support the continuing development, maturity and implementation of the EHS program by providing guidance and direction to the Director, Global EHS. - Monitoring and reporting: Develop and maintain metrics and KPIs related to risk, EHS, and sustainability performance. Prepare regular reports and updates for senior management and relevant governance forums, and support external reporting requirements where applicable. - Stakeholder engagement: Collaborate with internal teams and external stakeholders to promote a culture of risk awareness, compliance, and sustainability. Build effective working relationships to support the integration of risk and environmental considerations into business decision-making. - Guidance and training: Provide guidance, tools, and training to employees and risk owners to ensure understanding of risk management, compliance obligations, and environmental sustainability responsibilities. - Continuous improvement: Continuously review and enhance risk management, EHS, physical security, business resiliency, and sustainability practices by monitoring emerging trends, regulatory changes, and industry best practices. Identify opportunities to improve processes, frameworks, and tools to strengthen the Group’s overall risk maturity. Education and Experience: - Bachelor’s or Master’s degree in a related field required - 15+ years of experience in risk management in a corporate setting, including the development and implementation of enterprise risk management frameworks - 5+ years of senior/executive level experience in the biotech/pharmaceutical industry - Strong knowledge of business resiliency practices and physical security, including the design and implementation of physical security programs - Knowledge of sustainability and EHS strategy development and implementation, including setting targets, monitoring progress, and reporting - Strong leadership and management skills, including the ability to lead and/or influence cross-functional teams, engage stakeholders, and drive a culture of risk awareness and sustainability - Experience in reporting to executive leadership and board-level committees on risk management performance - Familiarity with emerging trends, best practices, and technologies in risk management and across all areas of responsibility for the role - Demonstrated track record of continuous improvement and innovation - Demonstrated excellent communication and interpersonal skills, with the ability to effectively engage and influence internal and external stakeholders at all levels of the organization, and diplomatically navigate complex and difficult topic Key Capabilities: - Inclusive mindset: Demonstrate an understanding and appreciation for diversity, and actively work to create an inclusive environment where everyone feels valued and respected - Creativity and innovation: Possess a willingness to think outside the box and come up with unique and creative solutions to challenges - Commitment to excellence: Take pride in your work and consistently strive for excellence in everything you do - Results-oriented: Driven to achieve goals and objectives, with a strong focus on delivering measurable results - Ethical behavior: Act with integrity and demonstrate a commitment to ethical behavior in all interactions with colleagues and stakeholders - Adaptability: Comfortable working in a dynamic environment, able to adjust to changing priorities, and willing to take on new challenges - Strong communication skills: Able to communicate effectively with colleagues and stakeholders at all levels, using clear and concise language - Collaboration: Work effectively as part of a team, actively sharing knowledge and expertise to achieve common goals - Resilience: Demonstrate the ability to bounce back from setbacks and persevere in the face of challenges - Continuous learning: Show a commitment to ongoing learning and professional development, continually seeking out opportunities to expand your knowledge and skills At Telix, we believe everyone counts, we strive to be extraordinary, and we pursue our goals with determination and integrity. You will be part of an engaged and supportive group of colleagues who all have a shared purpose: to help people with cancer and rare diseases live longer, better quality lives. Being a Telix employee means being a part of a unique, global, interdisciplinary team working to deliver what's next in precision medicine. We have hybrid and remote employees located all around the world. We offer competitive salaries, annual performance-based bonuses, an equity-based incentive program, generous vacation, paid wellness days and support for learning and development. Telix Pharmaceuticals is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics. VIEW OUR PRIVACY POLICY HERE

United States
Eneba logo

Risk Team Lead

Eneba

We’re on a mission to enable everyone to discover the joy of gaming.

Risk74 days ago
Full TimeRemoteTeam 201-500Since 2018H1B No Sponsor

• You’ll decide how we fight fraud and reduce false positives, making sure the team’s priorities actually help the business grow. • You will have the autonomy to create procedures "on the go" in a fast-paced environment where results matter more than hours logged. • You’ll build the quarterly goals and roadmaps, ensuring every project is clearly defined and executed with a sense of ownership. • You’ll help the team understand complex fraud issues by structuring them into clear, actionable areas for the Data and Engineering teams to jump on. • You’ll lead a team of 5 (Specialists and an Analyst), setting clear goals and making sure they stay focused on the work that actually moves the needle. • You’ll support the team through regular 1-on-1s and performance chats, helping people grow by matching tasks to their specific strengths. • You’ll keep an eye on performance metrics to spot any "red flags" early, guiding the team toward the right actions based on real data. • You’ll work closely with Product and Customer Support to align on what matters most and keep fraud-related projects moving forward. • You’ll keep leadership updated on KPI movements and operational challenges, providing clear advice on where the team should focus next. • When the team needs new tools or features, you’ll use data to show the "Why" and the "ROI" to get stakeholders on board.

Lithuania
Job Closed

Senior Fraud Investigator

UnitedHealth Group

UnitedHealth Group is a healthcare and well-being company that’s dedicated to improving the health outcomes of millions around the world. We are comprised of

Risk74 days ago

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together. The Sr. Investigator is responsible for investigating and resolving instances of healthcare fraud and/or abuse conducted by medical providers. The investigator will need to gather provider information using internal and external intelligence, claims data, and/or the medical community. The employee will conduct confidential investigations, document relevant findings, and report any illegal activities in accordance with all laws and regulations. Investigators may request a provider onsite to gather and analyze all necessary information and documents related to the investigation. Investigations may include participation in telephone calls with providers, members, clients, legal, compliance, and other investigative areas. The role requires knowledge of and adherence to state and federal compliance policies, reimbursement policies, and contract compliance. Where applicable, testimony regarding the investigation may be required in a court of law. This position is self-directed and works with minimal guidance to solve moderately complex problems and develop solutions accordingly. You’ll enjoy the flexibility to work remotely * from anywhere within the U.S. as you take on some tough challenges. Primary Responsibilities: - Investigate instances of potential healthcare fraud, waste, and/or abuse (FWA) - Conduct telephonic and/or in-person interviews of members, providers, and other related parties to gather information in support of investigations - Review and analyze claims data to identify patterns and indications of potential FWA - Recommend, where appropriate, an onsite provider investigation for claim and/or clinical audits to gather and analyze all necessary information and documents related to the investigation - Consider and synthesize information from claims data analysis, interviews, and other sources to guide confidential investigations, document relevant findings and report any illegal and otherwise suspect activities related to potential FWA in accordance with all laws and relevant regulations and other requirements - Thoroughly document all investigative activities, present case findings to law enforcement and/or regulatory agencies and testify as required - Meet or exceed job and task related requirements, guidelines, turnaround times and SLAs governing each investigation - Support Compliance, Regulatory, Legal, and Law Enforcement in all matters related to the investigation You’ll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in. Required Qualifications: - Certified Coding Credential - 5+ years of experience working in a government, legal, law enforcement, investigations, healthcare, managed care and/or other health insurance investigation capacity - 5+ years of experience in a position investigating medical/behavioral health care fraud - 3+ years of experience working in a health care Special Investigations Unit (SIU) - 3+ years of experience with medical/behavioral health codes and service delivery - 3+ years of experience in CPT and HCPCS coding definitions, rules and books - Intermediate level of proficiency with Excel including utilization of pivot tables, formulas, functions, etc Preferred Qualifications: - Accredited Healthcare Fraud Investigator (AHFI) credential from NHCAA - Certified Fraud Examiner (CFE) credential from ACFE - 5+ years of experience working in the medical/behavioral health investigation field - 3+ years previous law enforcement experience conducting criminal investigations - Experience in presenting investigation findings to law enforcement and regulatory agencies - Proven intermediate level of knowledge with Local, State & Federal laws and regulations pertaining to health insurance (Medicare, Medicare Advantage, Medicare Part D, Medicaid, Tricare, Pharmacy and/or commercial health insurance) - Experience with NPPES, SIRIS, Accurint and Secretary of State sites - Experience with data analysis as it relates to financial recovery / settlements Soft Skills: - Proven excellent communication skills in communicating complex information via phone or email with a proven ability to document investigative actions, interviews, and other related actions thoroughly and accurately *All Telecommuters will be required to adhere to UnitedHealth Group’s Telecommuter Policy. Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc. In addition to your salary, we offer benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements). No matter where or when you begin a career with us, you’ll find a far-reaching choice of benefits and incentives. The salary for this role will range from $60,200 to $107,400 annually based on full-time employment. We comply with all minimum wage laws as applicable. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Application Deadline: This will be posted for a minimum of 2 business days or until a sufficient candidate pool has been collected. Job posting may come down early due to volume of applicants. At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone–of every race, gender, sexuality, age, location, and income–deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups, and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes — an enterprise priority reflected in our mission. UnitedHealth Group is an Equal Employment Opportunity employer under applicable law and qualified applicants will receive consideration for employment without regard to race, national origin, religion, age, color, sex, sexual orientation, gender identity, disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations. UnitedHealth Group is a drug - free workplace. Candidates are required to pass a drug test before beginning employment. #RPO #GREEN

United States
$60.2K - $107K / year
Job Closed