Top Tech Jobs & Startup Jobs in San Francisco Bay Area, CA

Leads complex internal audit reviews across planning, fieldwork, and reporting. Responsibilities include evaluating internal controls, identifying and mitigating risks, ensuring regulatory compliance, drafting and presenting findings, managing audit staff, providing performance feedback, and serving as a subject matter expert. The role also supports risk intelligence, training, ad hoc projects, and senior leadership reporting.

Leads KeyBank’s Red Team and offensive security program, including adversary emulation, penetration testing, physical and application assessments, cloud security testing, AI security evaluations, and purple team exercises. Develops testing strategy, methodologies, tooling, metrics, and maturity roadmaps; mentors engineers; coordinates internal and third-party engagements; validates remediation and attack paths; and presents findings and strategic recommendations to executives and cybersecurity stakeholders.

Leads analysis, design, development, testing, deployment, and maintenance of banking software on mainframe systems. Owns production-ready code, architectural design, reliability, performance, security, compliance, code reviews, debugging, testing, release management, and continuous improvement. Collaborates across teams using agile and DevOps practices while supporting large transaction-based systems and minimizing customer impact.

Advance the cyber threat intelligence program by collecting and analyzing threat data, producing strategic forecasts and executive briefings, assessing control gaps, and translating cyber, geopolitical, financial services, and emerging technology risks into business decisions. The role supports incident response, risk prioritization, threat hunting, vulnerability management, exercises, intelligence sharing, stakeholder engagement, and mentorship of junior analysts.

Administer and enhance enterprise data security platforms, including SecuPi, while implementing access controls, masking, encryption, tokenization, monitoring, classification, and DLP across databases, cloud platforms, applications, and AI services. The role integrates security tools with IAM, PAM, SIEM, SOAR, and monitoring systems; troubleshoots complex environments; develops automation; investigates anomalous access; supports audits and incidents; and partners with infrastructure, cloud, database, application, privacy, and governance teams.

Lead KeyBank's Commercial DACA program end-to-end: product strategy, onboarding, servicing, risk, profitability, and CX. Manage a DACA team, partner with tech and vendors, support sales, drive process improvements, reporting, and compliance while delivering product roadmaps and performance monitoring.

Leads end-to-end Commercial Card modification projects, coordinating clients, sales, vendors, FinTech partners, and internal teams. Manages project scope, configuration, training, adoption, stakeholder expectations, risks, timelines, and service-level commitments. The role requires expertise in financial services and Commercial Card products, client escalation management, process improvement, analytical problem-solving, and strong communication. It also supports business resiliency and compliance with risk policies while managing multiple implementations in parallel.

Leads enterprise cybersecurity incident response, coordinating containment, escalation, stakeholder communications, documentation, and resolution tracking. Owns the incident response program, including playbooks, runbooks, governance, metrics, tabletop exercises, post-incident reviews, audit support, executive reporting, and continuous improvement. Partners with security, technology, business, legal, risk, compliance, communications, and third-party teams to strengthen threat-informed readiness and response capabilities. May provide after-hours support during significant incidents or exercises.

Supports information security governance programs covering data retention and protection, eDiscovery, legal holds, insider risk, investigations, and regulatory compliance. Develops policies and governance processes, assesses risks and control gaps, administers retention and destruction activities, supports litigation and audit requests, investigates insider risk events, manages related technologies and vendors, and delivers reports and executive communications. Partners with Legal, Compliance, HR, Corporate Security, Technology, and business stakeholders.

Supports Payments Advisors and business partners through pipeline management, financial modeling, payment process analysis, deal audits, industry research, reporting, presentations, RFP responses, and client onboarding. Collaborates with fintech partners and product teams on payment solution development and integrations. Builds client relationships, supports business development and strategic solution roadmaps, and uses Salesforce, Tableau, and industry tools to develop reporting and analytical insights.