Description:

The Information Security Risk Analyst is the operational engine of the internal risk program. While the Senior IRM Analyst and Risk Director define the strategic roadmap, the Analyst ensures the daily execution of that strategy. They are responsible for the "production line" of risk assessment: taking raw signals from the business, processing them through the established methodology, and outputting actionable risk decisions (Remediation or Acceptance).

The ultimate objective of this role is Reduction of Uncertainty. By managing the program effectively, the IRM Analyst ensures that MongoDB’s leadership has a clear, quantified view of the top risks facing the enterprise. They transform the Risk Register from a static spreadsheet into a dynamic governance tool that drives accountability.

The IRM Analyst must not be afraid to be in the trenches with the Engineering and Product teams. They are the primary face of the "Risk Intake Process," guiding stakeholders through the methodology. They are the gatekeeper of quality, ensuring that no risk enters the register until it has been properly scoped and quantified.

Responsibilities:

Risk Identification & Assessment

• Execute risk assessments under senior guidance - perform scoping, inherent risk scoring, control assessment, and residual risk calculation using established methodology
• Conduct risk identification intake, manage the flow of requests from Jira Service Desk and the Issue Intake Tracker, review incoming submissions against entry criteria, assign Risk IDs, and replicate validated risks into the Risk Register
• Act as the Triage Officer for incoming risk submissions, determine whether submissions represent strategic risks, operational issues, or duplicates. Filter noise to focus the team on signals
• Develop risk scenarios for in-scope assets by working with asset owners and risk owners , identify threat communities, threat events, and impact categories
• Draft Risk Assessment Memos that tell a cohesive story from risk statement to risk rating to actionable recommendation. Progressively build toward independently authored memos that require minimal review notes
• Monitor and flag emerging risk signals , including AI-related risks (model integrity, data poisoning, shadow AI, third-party AI dependencies) , and escalate with documented analysis for integration into the risk framework

Control Identification, Mapping & Assessment

• Identify and document controls that mitigate assessed risks , map controls to specific risk scenarios and applicable framework requirements (NIST SP 800-53, ISO 27001, SOC 2)
• Assess the design adequacy of controls , evaluate whether each control is appropriately designed to address the risk it is mapped to, and document findings with supporting rationale
• Assess the operating effectiveness of controls , collect and evaluate evidence to determine whether controls are functioning as designed over the assessment period, and document results
• Document control gaps and support remediation tracking , maintain clear records of where controls are missing, partially effective, or require compensating controls. Track remediation progress
• Maintain control-to-framework mappings to ensure risk assessment outputs directly support audit and certification evidence packages (FedRAMP, SOC 2, ISO 27001, PCI-DSS)

Risk Categorization & Governance

• Apply the established risk taxonomy and categorization methodology consistently across all assessed risks
• Process risk acceptance requests in Jira , validate completeness, ensure documented context and stakeholder sign-off, confirm time-bound conditions, and flag concerns to the Senior lead
• Maintain the Risk Register, risk inventory, and supporting trackers with obsessive attention to data integrity, no missing dates, undefined owners, or stale entries. A Risk Register with governance gaps is a program failure

Reporting & Stakeholder Engagement

• Contribute to KRI data collection and dashboard inputs , support accurate, timely reporting that feeds executive risk dashboards and governance forum materials
• Engage directly with technical stakeholders (engineering, product, infrastructure teams) during risk assessments , ask informed questions, gather evidence, and document findings
• Progressively build the technical fluency to lead stakeholder conversations independently , develop working proficiency in cloud-native architectures, SaaS security models, and common technical controls (IAM, encryption, network segmentation, logging/monitoring)
• Translate technical findings into clear, business-relevant risk language in all written work products

Policy, Process & Governance Hygiene

• Support drafting and maintaining risk procedures, guidelines, and assessment templates across the IRM program scope
• Execute governance hygiene , data quality, tracker maintenance, workflow adherence, evidence organization, and documentation standards
• Manage the risk assessment pipeline in Jira, create and maintain workflows, dashboards, and use JQL to track the assessment ticket lifecycle

Requirements:

Experience & Education:

• 3–5 years of experience in Information Security, Governance, Risk, and Compliance (GRC), or Enterprise Risk Management
• Experience performing risk assessments — including risk identification, inherent/residual risk scoring, and documentation of findings
• Experience identifying, documenting, and evaluating controls — including assessment of design adequacy and operating effectiveness
• Strong working knowledge of NIST CSF, NIST SP 800-30/39/53, and ISO/IEC 27005 — ability to use these frameworks as a library of controls and risk guidance
• Advanced proficiency in Excel/Google Sheets (pivot tables, VLOOKUP, complex formulas) for risk data analysis and reporting
• Jira proficiency — managing projects, creating workflows and dashboards, and using JQL
• Ability to write clear, concise, and defensible Risk Assessment Memos
• Obsessive attention to detail regarding data integrity and documentation quality
• Foundational understanding of cloud-native architectures and common technical controls (IAM, encryption, logging/monitoring, network segmentation) — with a commitment to building deeper technical fluency
• Awareness of AI risk concepts and willingness to develop expertise in emerging AI risk and regulatory landscape
• A strong track record of collaborating effectively across teams and levels
• Bachelor's degree in Cybersecurity, Information Systems, Business Administration, or a related field
• Certifications: At least, one of the following certifications is required - CRISC, CISM, CISSP, or CISA

About MongoDB

MongoDB is built for change, empowering our customers and our people to innovate at the speed of the market. We have redefined the database for the AI era, enabling innovators to create, transform, and disrupt industries with software. MongoDB’s unified database platform, the most widely available, globally distributed database on the market, helps organizations modernize legacy workloads, embrace innovation, and unleash AI. Our cloud-native platform, MongoDB Atlas, is the only globally distributed, multi-cloud database and is available across AWS, Google Cloud, and Microsoft Azure.

With offices worldwide and over 60,000 customers, including 75% of the Fortune 100 and AI-native startups, relying on MongoDB for their most important applications, we’re powering the next era of software.

Our compass at MongoDB is our Leadership Commitment, guiding how and why we make decisions, show up for each other, and win. It’s what makes us MongoDB. 

To drive the personal growth and business impact of our employees, we’re committed to developing a supportive and enriching culture for everyone. From employee affinity groups, to fertility assistance and a generous parental leave policy, we value our employees’ wellbeing and want to support them along every step of their professional and personal journeys. Learn more about what it’s like to work at MongoDB, and help us make an impact on the world!

MongoDB is committed to providing any necessary accommodations for individuals with disabilities within our application and interview process. To request an accommodation due to a disability, please inform your recruiter.

MongoDB, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type and makes all hiring decisions without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

Req ID: 1273425625

Description:

The Information Security Risk Analyst is the operational engine of the internal risk program. While the Senior IRM Analyst and Risk Director define the strategic roadmap, the Analyst ensures the daily execution of that strategy. They are responsible for the "production line" of risk assessment: taking raw signals from the business, processing them through the established methodology, and outputting actionable risk decisions (Remediation or Acceptance).

The ultimate objective of this role is Reduction of Uncertainty. By managing the program effectively, the IRM Analyst ensures that MongoDB’s leadership has a clear, quantified view of the top risks facing the enterprise. They transform the Risk Register from a static spreadsheet into a dynamic governance tool that drives accountability.

The IRM Analyst must not be afraid to be in the trenches with the Engineering and Product teams. They are the primary face of the "Risk Intake Process," guiding stakeholders through the methodology. They are the gatekeeper of quality, ensuring that no risk enters the register until it has been properly scoped and quantified.

Responsibilities:

Risk Identification & Assessment

• Execute risk assessments under senior guidance - perform scoping, inherent risk scoring, control assessment, and residual risk calculation using established methodology
• Conduct risk identification intake, manage the flow of requests from Jira Service Desk and the Issue Intake Tracker, review incoming submissions against entry criteria, assign Risk IDs, and replicate validated risks into the Risk Register
• Act as the Triage Officer for incoming risk submissions, determine whether submissions represent strategic risks, operational issues, or duplicates. Filter noise to focus the team on signals
• Develop risk scenarios for in-scope assets by working with asset owners and risk owners , identify threat communities, threat events, and impact categories
• Draft Risk Assessment Memos that tell a cohesive story from risk statement to risk rating to actionable recommendation. Progressively build toward independently authored memos that require minimal review notes
• Monitor and flag emerging risk signals , including AI-related risks (model integrity, data poisoning, shadow AI, third-party AI dependencies) , and escalate with documented analysis for integration into the risk framework

Control Identification, Mapping & Assessment

• Identify and document controls that mitigate assessed risks , map controls to specific risk scenarios and applicable framework requirements (NIST SP 800-53, ISO 27001, SOC 2)
• Assess the design adequacy of controls , evaluate whether each control is appropriately designed to address the risk it is mapped to, and document findings with supporting rationale
• Assess the operating effectiveness of controls , collect and evaluate evidence to determine whether controls are functioning as designed over the assessment period, and document results
• Document control gaps and support remediation tracking , maintain clear records of where controls are missing, partially effective, or require compensating controls. Track remediation progress
• Maintain control-to-framework mappings to ensure risk assessment outputs directly support audit and certification evidence packages (FedRAMP, SOC 2, ISO 27001, PCI-DSS)

Risk Categorization & Governance

• Apply the established risk taxonomy and categorization methodology consistently across all assessed risks
• Process risk acceptance requests in Jira , validate completeness, ensure documented context and stakeholder sign-off, confirm time-bound conditions, and flag concerns to the Senior lead
• Maintain the Risk Register, risk inventory, and supporting trackers with obsessive attention to data integrity, no missing dates, undefined owners, or stale entries. A Risk Register with governance gaps is a program failure

Reporting & Stakeholder Engagement

• Contribute to KRI data collection and dashboard inputs , support accurate, timely reporting that feeds executive risk dashboards and governance forum materials
• Engage directly with technical stakeholders (engineering, product, infrastructure teams) during risk assessments , ask informed questions, gather evidence, and document findings
• Progressively build the technical fluency to lead stakeholder conversations independently , develop working proficiency in cloud-native architectures, SaaS security models, and common technical controls (IAM, encryption, network segmentation, logging/monitoring)
• Translate technical findings into clear, business-relevant risk language in all written work products

Policy, Process & Governance Hygiene

• Support drafting and maintaining risk procedures, guidelines, and assessment templates across the IRM program scope
• Execute governance hygiene , data quality, tracker maintenance, workflow adherence, evidence organization, and documentation standards
• Manage the risk assessment pipeline in Jira, create and maintain workflows, dashboards, and use JQL to track the assessment ticket lifecycle

Requirements:

Experience & Education:

• 3–5 years of experience in Information Security, Governance, Risk, and Compliance (GRC), or Enterprise Risk Management
• Experience performing risk assessments — including risk identification, inherent/residual risk scoring, and documentation of findings
• Experience identifying, documenting, and evaluating controls — including assessment of design adequacy and operating effectiveness
• Strong working knowledge of NIST CSF, NIST SP 800-30/39/53, and ISO/IEC 27005 — ability to use these frameworks as a library of controls and risk guidance
• Advanced proficiency in Excel/Google Sheets (pivot tables, VLOOKUP, complex formulas) for risk data analysis and reporting
• Jira proficiency — managing projects, creating workflows and dashboards, and using JQL
• Ability to write clear, concise, and defensible Risk Assessment Memos
• Obsessive attention to detail regarding data integrity and documentation quality
• Foundational understanding of cloud-native architectures and common technical controls (IAM, encryption, logging/monitoring, network segmentation) — with a commitment to building deeper technical fluency
• Awareness of AI risk concepts and willingness to develop expertise in emerging AI risk and regulatory landscape
• A strong track record of collaborating effectively across teams and levels
• Bachelor's degree in Cybersecurity, Information Systems, Business Administration, or a related field
• Certifications: At least, one of the following certifications is required - CRISC, CISM, CISSP, or CISA

About MongoDB

MongoDB is built for change, empowering our customers and our people to innovate at the speed of the market. We have redefined the database for the AI era, enabling innovators to create, transform, and disrupt industries with software. MongoDB’s unified database platform, the most widely available, globally distributed database on the market, helps organizations modernize legacy workloads, embrace innovation, and unleash AI. Our cloud-native platform, MongoDB Atlas, is the only globally distributed, multi-cloud database and is available across AWS, Google Cloud, and Microsoft Azure.

With offices worldwide and over 60,000 customers, including 75% of the Fortune 100 and AI-native startups, relying on MongoDB for their most important applications, we’re powering the next era of software.

Our compass at MongoDB is our Leadership Commitment, guiding how and why we make decisions, show up for each other, and win. It’s what makes us MongoDB. 

To drive the personal growth and business impact of our employees, we’re committed to developing a supportive and enriching culture for everyone. From employee affinity groups, to fertility assistance and a generous parental leave policy, we value our employees’ wellbeing and want to support them along every step of their professional and personal journeys. Learn more about what it’s like to work at MongoDB, and help us make an impact on the world!

MongoDB is committed to providing any necessary accommodations for individuals with disabilities within our application and interview process. To request an accommodation due to a disability, please inform your recruiter.

MongoDB is an equal opportunities employer.

Req ID: 1273425625

Van Leeuwen Ice Cream is hiring seasonal, part-time Scoopers to join our Santa Monica ice cream shop in Los Angeles, CA.

Our Scoopers are the ultimate Van Leeuwen ambassadors, bringing our high standards and hospitality to life in every guest interaction. We’re looking for self-starters who thrive independently and as part of a team in a fast-paced, high-energy environment. The ideal candidate brings positive energy, strong people skills and a genuine passion for ice cream!

This position is SEASONAL and is directly tied to the peak demands of the summer months. The end date of employment is 10/07/2026 unless otherwise specified in the interview.

Seasonal Part Time Scoopers at Van Leeuwen's scoop shops make $20.00 per hour + an average of an additional $11 per hour in tips! Tips are based on averages and subject to seasonal fluctuation. Our team members must have availability to work at least three shifts per week and be available to work past 12am.

JOB RESPONSIBILITIES

• Greet every guest warmly, with enthusiasm and genuine hospitality
• Able to scoop and serve guests all menu items while maintaining quality and presentation standards
• Serve as a Van Leeuwen Ambassador, educating guests on flavors, ingredients and special offerings
• Prepare all fresh, house made menu items daily
• Accurately operate our Square POS System for a seamless guest checkout process
• Ability to become familiar with all food safety procedures and follow them as required
• Maintain store cleanliness, following proper sanitation guidelines
• Complete daily tasks, including stocking, inventory, and cleaning
• Follow Van Leeuwen's established safety, grooming, uniform, and employee conduct standards

JOB REQUIREMENTS

• Must be 18 years of age or older 
• Genuine passion for ice cream and desserts
• Possess dexterity to prepare and serve guests all menu items in accordance with established service and build-out standards
• Able to push/pull/lift 50 lbs of weight regularly
• Stand for extended periods of time regularly
• Walk up and down stairs regularly 
• Stand, bend and reach for prolonged periods of time
• Ability to thrive in a fast-paced environment
• Available to work 3 days a weeks (including nights and weekends past 12 am)
• Reliable, on time and ready for every shift
• Food handlers certificate required

WHY VAN LEEUWEN?

• Competitive Pay + Tips 
• Flexible Scheduling
• Free Ice Cream (One menu-item while on shift)
• Positive team environment
• Career development and growth opportunities
• Opportunity to be part of a growing, fun brand!

Title: Surgical Assistant 
Practice: Greater Montana Oral & Dental Implant Surgery
Location: 60 Village Loop, Kalispell, MT 59901
Office Hours:  Monday - Friday 8:00am - 5:00pm

Position Purpose:

The surgical assistant is responsible for ensuring the compassionate, effective, and efficient delivery of high-quality clinical care for patients while practicing and providing safety in the work environment. The ideal candidate will assist oral surgeons during procedures, ensuring a smooth and efficient workflow in a fast-paced environment. This role requires a strong understanding of surgical procedures, excellent communication skills, and a commitment to providing high-quality patient care.

Essential Functions:

Patient Care & Experience

• Ensure all patients receive the highest quality of care and service.
• Communicate with patients in a friendly, professional manner, both in person and by phone.
• Maintain positive, professional relationships with patients, staff, and surgeons.
• Assist with postoperative care, including patient education and follow-up instructions.
• Monitor patient vital signs during surgical procedures and provide support as needed.

Clinical & Surgical Support

• Assist oral surgeons during surgical procedures.
• Prepare instruments, materials, and equipment required for surgical procedures.
• Support adherence to best practices, established protocols, and the highest patient safety standards.

Documentation & Compliance

• Accurately document patient encounters and surgical procedures.
• Ensure compliance with all company policies and regulatory standards.
• Maintain controlled substance safety protocols and documentation.

Office Operations & Safety

Support a clean, professional clinical environment, including:

• Clean and stocked operatories
• Maintained equipment and adequate supplies

Support monthly office safety and compliance checks, including:

• Crash carts
• Fire extinguishers
• Emergency preparedness attestations
• X-ray unit calibration
• Omni-cam calibration
• Controlled substance inventory and drug book accuracy
• Oxygen tank readiness
• Printing and maintaining controlled substance invoices

Team Collaboration & Professionalism

• Promote a collaborative work environment focused on teamwork, efficiency, and exceptional patient care.
• Attend and actively participate in team meetings.

Qualifications:

Education/Certification:

• High School Diploma or equivalent required (some college, preferred)
• Basic life support certification required. Employers will provide training if the candidate is not current.

Experience:

• Previous dental experience – Preferred not required
• Experience as an oral surgery assistant or dental assistant is preferred. (Will train the right candidate.)
• Basic life support certification – Employer will assist if not completed

Performance Requirements:

Skills/Abilities:

• Strong computer skills
• Excellent communication and interpersonal skills
• Ability to handle multiple tasks, prioritize effectively
• Ability to work in a fast-paced environment
• Analytical and detail-oriented
• Able to work independently with exceptional initiative and sound judgment
• Positive attitude, change advocate, able to lead by example
• Strong Knowledge of oral surgery procedures
• Strong problem-solving and decision-making abilities
• Commitment to maintaining the highest standards of patient care and safety

Work environment/Conditions:

• Fast-paced dental office environment
• Overtime is sometimes required as needed to perform job functions
• Some travel as needed for training and to perform job functions
• Safety procedures required, including protection to minimize the risks from X-rays
• Potential long hours standing.

• We offer Medical, Dental, and Vision Insurance plans to our full-time employees.
• Two out of the three medical plans offered include Health Savings Account (HSA) eligibility.
• Company-paid Life, AD&D and Long-Term Disability coverage.
• Additional Voluntary Life and AD&D Insurance for you and your family!
• Voluntary Short-Term Disability Insurance available to you as well
• Dependent Care Flexible Spending Account (FSA) offered.
• Immediately begin saving for retirement through our 401(k) starting with very first paycheck!
• Employer 401(k) contribution and Profit Sharing after six months of employment
• PTO and 8 Paid holidays for fulltime employees!

DISCLAIMER

The above statements are intended to describe the general nature and level of the work being performed by people assigned to this work.  This is not an exhaustive list of all duties and responsibilities.  OPS’s management reserves the right to amend and change responsibilities to meet business and organizational needs as necessary.