Risk

• Run the SOC 2 program end to end, including auditor relationship, evidence collection, interpretation in Vanta, and continuous audit readiness
• Help establish AI governance frameworks such as ISO 42001
• Build and maintain an authoritative inventory of PHI locations and systems/models that touch it
• Identify and close HIPAA and governance gaps
• Use AI coding assistants to verify whether controls are implemented and produce clear, evidenced answers
• Build and run security review processes for vendors and AI model providers
• Partner with legal and finance to complete documented vendor risk assessments
• Partner with engineering to enumerate, prioritize, and remediate security risks
• Author security and compliance policies for engineering, legal, and go-to-market teams
• Serve as the first point of contact for RFPs and security questionnaires
• Maintain a customer-facing trust portal with current security and compliance evidence

GRC Analyst

• Investigate large datasets through exploratory analysis and fraud label development
• Identify fraud patterns, attack methods, and behavioral signals
• Translate fraud and risk problems into hypotheses, analytical plans, model requirements, and measurable success criteria
• Develop machine learning models for account opening, account takeover, and identity risk fraud detection
• Evaluate models using ROC/AUC/KS/Gini, precision/recall, fraud capture rate, false-positive rate, customer friction, and fraud losses prevented
• Develop and validate predictive features using identity, transactional, consumer credit history, device, behavioral, temporal, velocity, network, and third-party data
• Write clean, efficient, well-tested Python and PySpark code
• Collaborate with teams to deploy models and features into batch, retro, or real-time decisioning environments
• Monitor feature quality, model performance, population changes, and fraud-pattern drift
• Design and present analyses covering model behavior, tradeoffs, risks, and recommendations
• Follow standards for data privacy, model documentation, explainability, validation, and governance
• Report to the Senior Manager of Fraud Analytics

Expert Data Modeler, Fraud Risk Detection

• Explore complex datasets to identify fraud patterns, attack methods, and behavioral signals
• Translate fraud questions into testable hypotheses with senior data scientists
• Help build machine learning models for fraud detection across account opening, account takeover, and identity risk
• Evaluate models using technical and business metrics including precision, recall, fraud capture rate, false-positive rate, and customer friction
• Develop and validate features using identity, transactional, behavioral, and other data sources
• Write clean, well-tested code and work with engineering to bring models and features into production
• Partner with the score monitoring team on model and feature monitoring
• Support research on related client questions
• Prepare analyses and communicate findings to technical and nontechnical audiences
• Report to the Sr. Manager of Fraud Analytics

Senior Data Modeler, Fraud Risk Detection

• Support the CIO in shaping enterprise technology strategy and translate it into executable roadmaps, governance decisions, and a prioritized portfolio aligned with the Credit Union's goals and member experience priorities.
• Act as the CIO’s designee in technology governance forums and own IT policies, standards, decision rights, reporting governance, risk, and service performance to executive leadership.
• Own IT risk management, compliance, audit coordination, and regulatory readiness.
• Document, communicate, and enforce operational execution standards across critical IT functions.
• Provide market trends, stakeholder impacts, risks, tradeoffs, and recommendations for CIO review.
• Lead Enterprise Architecture across application, integration, data, and cloud domains.
• Define non-functional requirements for scalability, performance, security, and resiliency, and drive architectural consistency and technical debt reduction.
• Own enterprise IT change management, including the change advisory board, change risk assessment, approval standards, release calendars, and post-implementation review.
• Own incident management and problem resolution, including major incident governance, escalation, cross-team coordination, communications, root cause analysis, and corrective actions.
• Establish service level agreements, operational performance metrics, and IT service reporting.
• Drive process automation, workflow simplification, continuous improvement, and knowledge/documentation standards across IT.
• Own IT budget planning, forecasting, financial governance, business cases, cost-benefit analysis, value realization, and portfolio optimization.
• Lead the IT Project Management Office and enterprise program delivery.
• Establish business requirements gathering, intake, and prioritization processes.
• Drive portfolio transparency and execution excellence through status reporting, risk and issue management, resource planning, and release coordination.
• Own enterprise quality assurance, testing standards, defect management, and release readiness sign-off.
• Direct functional, regression, integration, and user acceptance testing, with traceable documentation.
• Institutionalize pre-mortem and post-mortem practices for major projects, conversions, and incidents.
• Lead technology innovation and emerging technology evaluation, including structured proofs of concept for AI and automation.
• Manage technology vendor and partner relationships, service-level performance, and third-party risk.
• Perform business resumption planning for assigned departments and validate plan adequacy.

VP IT Governance, Architecture & Service Management

• Support the CIO in shaping enterprise technology strategy and translate it into executable roadmaps, governance decisions, and a prioritized portfolio aligned with the Credit Union's goals and member experience priorities.
• Act as the CIO’s designee in technology governance forums and own IT policies, standards, decision rights, reporting governance, risk, and service performance to executive leadership.
• Own IT risk management, compliance, audit coordination, and regulatory readiness.
• Document, communicate, and enforce operational execution standards across critical IT functions.
• Provide market trends, stakeholder impacts, risks, tradeoffs, and recommendations for CIO review.
• Lead Enterprise Architecture, including application, integration, data, and cloud architecture standards, reference patterns, and target state architecture roadmaps.
• Define non-functional requirements for scalability, performance, security, and resiliency, and drive architectural consistency and technical debt reduction.
• Own enterprise IT change management, including the change advisory board, change risk assessment, approval standards, release calendars, and post-implementation review.
• Own incident management and problem resolution, including major incident governance, escalation, coordination, communication, root cause analysis, and corrective actions.
• Establish service level agreements, operational performance metrics, and IT service reporting.
• Drive process automation, workflow simplification, continuous improvement, and enterprise knowledge and documentation standards.
• Own IT budget planning, forecasting, financial governance, business cases, cost-benefit analysis, value realization, and portfolio optimization.
• Lead the IT Project Management Office and enterprise program delivery.
• Establish business requirements gathering, intake, and prioritization processes.
• Drive portfolio transparency and execution excellence through status reporting, risk and issue management, resource planning, and enterprise release coordination.
• Own enterprise quality assurance, testing standards, defect management, and release readiness sign-off.
• Direct functional, regression, integration, and user acceptance testing.
• Institutionalize pre-mortem and post-mortem practices for major projects, conversions, and incidents.
• Lead technology innovation and emerging technology evaluation, including structured proofs of concept for AI and automation.
• Manage technology vendor and partner relationships, service-level performance, and third-party risk.
• Perform business resumption planning and validate plan adequacy.

• Build and lead Airwallex’s first-line commercial risk function
• Define commercial risk strategy and own customer and use-case supportability frameworks
• Provide structured guidance for complex or high-risk merchant use cases
• Review and sign off deal documentation before second-line escalation
• Translate second-line risk appetite and policies into commercial playbooks
• Participate in major deal reviews, pipeline calls, and quarterly business reviews
• Design training and tools for front-office staff
• Oversee commercial conduct risk and redesign misaligned sales practices or incentives
• Design and execute continuous portfolio monitoring with Data and Regional Revenue Operations teams
• Track GP-to-risk ratios, customer risk tiers, fraud/loss rates, and revenue concentration
• Lead incident post-mortems, root-cause analysis, and first-line remediation
• Enforce second-line decisions such as offboarding or enhanced monitoring
• Represent commercial risk in governance forums, regulatory engagements, and audits
• Recruit and develop a global commercial risk team over time
• Report directly to the Chief Revenue Officer

Global Lead, Commercial Risk Strategy

• Lead development of applied AI risk standards for mental health, youth safety, age assurance, efficacy, reliability, and privacy-related risks
• Define standards focused on evaluations and assessments with technical and policy teams
• Translate research, internal policies, and evaluation methods into test methods, assessment criteria, and standards
• Bring emerging requirements into internal planning and clarify implications for evaluations, controls, and assurance
• Collaborate with technical and GRC partners on assessor competence, independence, conflicts of interest, evidence access, and reporting
• Contribute to frontier risk-management and independent-assessment standards
• Lead standards-body workstreams, negotiate proposals, and coordinate internal input
• Contribute to ISO/IEC, INCITS, NIST consortium, and cross-industry work
• Maintain approvals, negotiating positions, contribution records, and implementation handoffs
• Support the AI Standards and Global Assurance Lead on frontier AI assurance

Applied Risk Standards Specialist

• Own TISAX follow-on certifications, including subsequent waves and sites after initial TISAX AL3 assessments
• Manage evidence maintenance, internal self-assessments, corrective-action tracking, re-assessment readiness, and ongoing ISMS evidence infrastructure
• Drive achievement and ongoing maintenance of ISO/IEC 27001 certification
• Coordinate internal audits and maintain the Statement of Applicability and control evidence
• Manage annual surveillance and recertification activities
• Support ISO 9001 efforts related to infrastructure and IT
• Support CSMS compliance under UNECE R155 and software update management under UNECE R156 for enterprise/IT infrastructure
• Track and drive corrective and preventive actions (CAPA) to closure across all frameworks
• Operate the enterprise cybersecurity risk register from intake through assessment, treatment tracking, and reporting
• Execute risk management processes with Legal and follow documented standard operating procedures, including confidentiality classification steps
• Produce prioritized risk reporting for the Sr. Manager, Enterprise Cybersecurity and other stakeholders
• Coordinate internal control owners across IT, Legal, Facilities, Internal Audit, HR, and engineering teams
• Coordinate evidence collection with 15–30+ named control owners
• Manage certification bodies, external consultants, and vendors, tracking deliverables, due dates, and response SLAs
• Maintain audit-ready documentation and program tracking in Jira, Confluence, and Google Workspace
• Travel to company sites in Southern California, Northern California, Vancouver (BC), and Belgrade (Serbia) for on-site audits, physical security walkthroughs, evidence collection, and stakeholder coordination

Senior GRC Analyst – Enterprise Cybersecurity

• Manage and continually improve Risk and Identity Solutions enterprise risk management capability and risk profile
• Embed within business units to identify, assess, and monitor potential risks
• Strengthen key controls across multiple teams
• Aggregate and communicate enterprise risks to Visa Senior Management
• Provide constructive challenge to first-line functions and recommend risk mitigation actions
• Consult executive management on key risk decisions
• Provide oversight to business teams and cross-functional stakeholders on product, service, and operational risk management
• Roll out Visa’s First and Second line control programs across the business
• Link Visa risk appetite with Risk and Identity Solutions strategic objectives
• Develop and maintain partnerships to embed Lifecycle Risk Management Practices and Risk Management culture
• Drive compliance with NBIA, RCSA, TLMP, MRM, and DUCA programs
• Attend product roadmap reviews and assess potential New Business Initiative Assessments
• Develop bottom-up and top-down risk views for quarterly Portfolio Management Reviews
• Partner with first line to reduce risk exposure
• Support strategically important change initiatives and improve resiliency and control effectiveness
• Monitor risk management effectiveness, manage risk registers, and develop measurement systems
• Collaborate with Visa Global Risk and functional centers of excellence on control programs
• Provide risk management updates to leadership, regulators, and external parties
• Travel 5–10% of the time

Director, Product and Payment Services Risk Business Partner

• Own customer proofs of concept and retros from analysis through recommendations and follow-through
• Proactively optimize Signal customers, prioritizing accounts with high return rates
• Read model outputs and diagnose drivers of authorization and return-rate performance
• Recommend threshold and rules changes aligned with customer risk and authorization goals
• Help Guarantee customers tune thresholds to achieve target authorization rates while protecting loss performance
• Partner with AEs and TAMs to bring product and modeling expertise into customer engagements
• Improve customer decision and return reporting to strengthen their experience and Plaid’s models
• Turn recurring customer insights into onboarding playbooks and product requirements

Risk jobs in California

GRC Analyst

Expert Data Modeler, Fraud Risk Detection

Senior Data Modeler, Fraud Risk Detection

VP IT Governance, Architecture & Service Management

VP IT Governance, Architecture & Service Management

Global Lead, Commercial Risk Strategy

Applied Risk Standards Specialist

Senior GRC Analyst – Enterprise Cybersecurity

Director, Product and Payment Services Risk Business Partner

Payment Risk Consulting Lead