THE ROLE 

As an AI Governance Analyst within Everpure’s Global Information Security Office (GISO), you will be the primary guardian of our safe and innovative AI adoption. You’ll bridge the gap between cutting-edge technology and enterprise safety by managing the end-to-end lifecycle of AI tooling requests and risk assessments. Partnering closely with Legal, Privacy, and Engineering, you ensure our teams move fast while remaining within our security guardrails. Your mission is to transform governance from a "no" to a "how-to" for the entire organization.

WHAT YOU’LL DO

• Accelerate Secure Innovation: Manage the end-to-end intake and risk assessment lifecycle for new AI tools and use cases, ensuring every service deployed on the Everpure Platform aligns with our security, privacy, and data handling standards.
• Proactive Risk Management: Safeguard the enterprise by identifying and remediating unapproved AI usage through proactive monitoring and stakeholder collaboration, successfully converting "shadow AI" into governed, secure business assets.
• Global Enablement & Literacy: Drive organizational AI literacy by developing self-service documentation, FAQs, and high-impact training programs that translate complex security requirements into actionable guidance for both technical and non-technical teams.
• Operational Excellence: Optimize the AI Governance program’s efficiency by maintaining a comprehensive inventory of approved vendors and tracking key performance indicators—such as time-to-approval and exception trends—to drive continuous process improvement.

WHAT YOU BRING

• Security & AI Domain Expertise: A strong professional background in information security, risk management, or data governance within a SaaS environment, paired with a functional understanding of Large Language Models (LLMs) and their associated security risks.
• Analytical Framework Proficiency: Proven ability to apply security and privacy frameworks (such as NIST, ISO 27001, or SOC 2) to evaluate third-party AI vendors and internal data flows for potential vulnerabilities.
• Strategic Communication & Partnership: Exceptional ability to distill complex policy into clear, persuasive communications for diverse stakeholders, demonstrating a partnership-first mindset that enables business units to achieve their goals safely.
• Organizational Agility: Exceptional program management skills with the capacity to prioritize high-volume requests and maintain meticulous documentation in a fast-paced, rapidly evolving regulatory and technological landscape.
• Bonus Skills: A blend of technical and policy expertise, including experience with AI governance frameworks (e.g., EU AI Act, sectoral AI, or data protection guidance)  and SaaS risk assessments. Working knowledge of DLP/CASB tools and a passion for building security awareness content that empowers teams to innovate safely.
• Location: We are primarily an in-office environment and therefore, you will be expected to work from the Lehi, UT office in compliance with Everpure’s policies, unless you are on PTO, or work travel, or other approved leave.

#LI-ONSITE #LI-KQ1

THE ROLE

The Business Systems Analyst, Legal Operations will design, optimize, and support the systems and workflows that power our global Legal function. This role translates Legal and business objectives into scalable processes, data models, and technology solutions—enabling higher productivity, better decision-making, and responsible use of automation and AI across the Legal portfolio.

You will partner closely with Global Legal Ops & Enablement (GLOE), Legal practice groups, Finance, HR, DTG/IT, and external vendors to build and maintain an integrated ecosystem (e.g., ServiceNow Legal Service Delivery, CLM/CM, knowledge/AI tools, matter management, e‑billing and reporting).

WHAT YOU'LL DO

Strategy & Business Partnership

• Partner with Legal and business leaders to understand goals, pain points, and priorities; translate them into clear system and process requirements.

• Map end‑to‑end Legal workflows (intake, triage, self‑service, assignment, execution, closure, and analytics) and identify opportunities for standardization, automation, and risk reduction.

• Help shape the Legal technology roadmap, including trade‑offs across “run-the-business” enhancements and “change-the-business” initiatives.

Solution Design & Delivery

• Translate high‑level requirements into detailed user stories, process flows, acceptance criteria, and test plans.

• Work with DTG/IT, vendors, and Legal stakeholders to design solutions that are scalable, secure, and aligned with corporate architecture and data governance standards.

• Support configuration and integration work across platforms (e.g., ServiceNow, CLM, Salesforce, knowledge/AI tools) in partnership with technical teams.

• Coordinate and execute functional testing, UAT, and defect triage, ensuring high‑quality releases.

Data, Reporting & Analytics

• Define and maintain metrics and dashboards for Legal (e.g., intake volume, cycle times, SLA performance, self‑service adoption, NPS/CSAT, AI‑enabled use cases).

• Partner with Finance, FP&A, and Legal leadership on data sets that support budgeting, resource planning, and portfolio prioritization.

• Ensure data quality and integrity across systems, including master data, matter metadata, contract metadata, and knowledge objects.

Change Management & Enablement

• Develop and execute change management plans (communications, training, documentation, office hours) to drive adoption of new tools and processes.

• Create and maintain playbooks, knowledge articles, and self‑service content for Legal and business users.

• Gather feedback post‑launch, monitor performance against expected outcomes, and iterate to improve.

Run-the-Business Operations

• Own and prioritize the enhancement and defect backlog for key Legal systems in partnership with product owners and service owners.

• Triage incoming requests, ensuring clear scope, impact assessment, and alignment to roadmap and capacity.

• Act as a Level 2/3 point of contact for complex issues, coordinating with DTG/IT and vendors to resolve them.

We are primarily an in-office environment and therefore, you will be expected to work from the Santa Clara, CA or Lehi, UT office in compliance with Everpure's policies, unless you are on PTO, or work travel, or other approved leave.

WHAT YOU BRING

• 4+ years of experience in Business Systems Analysis, Business Operations, or Program Management in a technology‑driven environment; Legal Operations or G&A experience strongly preferred.

• Proven track record translating business requirements into system designs, user stories, and testable acceptance criteria.

• Demonstrated experience with one or more of the following:

• ServiceNow (ideally Legal Service Delivery or other G&A modules)

• Contract lifecycle management (CLM) or matter management platforms

• Salesforce or other enterprise SaaS platforms

• Knowledge management and/or AI‑enabled workflows (search, summarization, drafting, classification, etc.).

• Strong process design and documentation skills (BPMN or similar), including running workshops, mapping current/future‑state, and identifying automation opportunities.

• Solid data and analytics skills: able to define KPIs, design dashboards, and interrogate data for trends and root causes; experience with modern analytics stack (e.g., Snowflake for data warehousing and Tableau for visualization).

• Experience working in cross‑functional, matrixed organizations with IT, Finance, HR, Sales Ops, or similar partners.

• Excellent communication skills, with the ability to tailor messaging for attorneys, executives, technical teams, and end users.

• Comfort managing multiple projects and stakeholders in a fast‑paced, high‑growth environment.

Preferred Experience

• Prior experience working in or closely with a corporate Legal department (e.g., Legal Operations, Compliance, Privacy, IP, Commercial, Employment, Litigation).
• Hands‑on experience with ServiceNow configuration in a business/system analyst or product owner capacity.
• Background in legal tech, process improvement, or shared services (e.g., G&A transformation, ticketing/intake systems, workflow automation).
• Familiarity with change management frameworks (e.g., Prosci/ADKAR) and training design.
• Experience supporting or implementing AI/automation initiatives in a controlled, governance‑driven way.

Lehi Salary Range: $89,000 - $134,000

Santa Clara Salary Range: $126,000 - $189,000

#LI-TH3,  #LI-ONSITE

THE ROLE

At Everpure, Information Security is a foundational business priority. The Security team is a core engineering-focused group deeply embedded in ensuring the security of our corporate environment and Everpure services. We are dedicated to staying on the cutting edge of security technology and proactively addressing the evolving threat landscape.

We are seeking a proactive, detail-oriented Security Analyst, Compliance to independently run compliance certification programs with minimal supervision and actively support the broader compliance efforts of the team.

WHAT YOU'LL DO

• Lead a security certification program vertical  (e.g., SOC 2, ISO 27001, FedRAMP, Common Criteria) end to end with minimal supervision ensuring a successful outcome.
• Support other certification program verticals to streamline audit certification cycles.
• Collaborate and maintain communication with cross-functional teams (e.g., Engineering, Legal, Product) and external auditors/stakeholders to ensure smooth project execution and successful outcomes.
• Assist and support internal teams through independent assessments and audits. Translate complex security and compliance controls into actionable technical solutions and implementation strategies.
• Develop, track, and report on key compliance metrics (KCMs), continuously driving process improvements to align with evolving industry standards and best practices.
• Author and maintain comprehensive compliance documentation, including control narratives, audit evidence, and supporting materials, ensuring they are accurate, up-to-date, and audit-ready.
• Independently drive on recurring tasks and events such as access reviews and vulnerability scanning across multiple business units with differing scopes.
• We are primarily an in-office environment and therefore, you will be expected to work from the Lehi, UT office in compliance with Pure’s policies, unless you are on PTO, or work travel, or other approved leave.

WHAT YOU BRING

• 5+ years of experience in IT audit, risk management, or IT compliance roles, with demonstrated experience running compliance certification programs and previous audit experience.
• In-depth understanding of security controls and key compliance frameworks (e.g., NIST, SOC2, ISO 27001, FedRAMP, FIPS, Common Criteria) as well as cloud platforms (e.g. AWS, Azure, GCP, etc.)
• Proven experience in designing technical controls to satisfy compliance requirements.
• Strong written and verbal communication skills, with the ability to engage effectively with both internal teams and external auditors.
• Ability to identify and recommend tools, processes, and software to improve and automate compliance practices.
• Security Operations or Engineering background preferred but not required
• Relevant certifications such as CISSP, CISA, or CISM, ISO/IEC 27001 Lead Implementer or Lead Auditor  are preferred but not required.

#LI-ONSITE

#LI-TH3

THE ROLE

You will partner with the security operations lead and broader security team to develop and mature security use cases that apply across the company’s environment and operations. Your mission is to build and refine the detections, policies, and response logic that enable the team to identify real attacks, misuse, intrusions, and data loss events with speed and confidence.

This is not a passive monitoring role. You will be expected to understand how the business operates, how attackers move, where meaningful signals live, and how to translate that knowledge into durable security content and response workflows. Success in this role is measured not by alert volume, but by signal quality, attack reduction, faster containment, and continuous operational improvement.

WHAT YOU'LL DO

• Design, implement, and maintain high-fidelity detections, correlation rules, alerts, dashboards, and use cases in Splunk and related security platforms.
• Build detections across multiple data domains, including identity, endpoint, network, cloud infrastructure, SaaS applications, DLP, vulnerability, and asset posture.
• Correlate signals from diverse tooling and data sources to identify attacker behavior, misuse, anomalous activity, and material security risk.
• Partner with business units, IT, engineering, and internal security stakeholders to map business processes and workloads to security use cases and required telemetry.
• Support and participate in incident triage, investigation, containment, and post-incident improvement activities.
• Develop enrichment and automation workflows using Python, APIs, and security tooling to improve analyst efficiency and response consistency.
• Improve detection quality by tuning noisy alerts, reducing false positives, and increasing true positive rates.
• Collaborate on logging strategy, event onboarding, normalization, parsing, correlation, retention, reporting, and platform customization.
• Apply threat intelligence, attacker tradecraft, and frameworks such as MITRE ATT&CK, CVE/CVSS, and risk context to drive meaningful detections.
• Create playbooks, runbooks, detection documentation, and operational guidance for responders and analysts.
• Use lessons learned from incidents, hunts, and threat research to continuously improve content, coverage, and response workflows.
• Help mature a security operations model that brings together detection, alerting, investigation, and response rather than treating them as isolated functions.
• We are primarily an in-office environment and therefore, you will be expected to work from the Lehi, UT office in compliance with Everpure's policies, unless you are on PTO, or work travel, or other approved leave.

WHAT YOU BRING

• 6+ years of experience in cybersecurity, or a related technical field
• 3+ years of hands-on experience in incident response, detection engineering, security operations, or SIEM engineering
• Strong hands-on experience with a SIEM platform; direct experience with Splunk is strongly preferred
• Solid understanding of the incident response lifecycle, including triage, scoping, containment, eradication, recovery, and post-incident learning
• Strong understanding of foundational networking, systems, cloud, and security principles
• Ability to write scripts and automate tasks using Python or a similar language
• Ability to work with APIs, integrate data sources, and automate enrichment or response actions
• Strong analytical thinking and the ability to translate ambiguous threats or operational gaps into concrete detection logic
• Excellent written and verbal communication skills, with the ability to collaborate effectively across technical and non-technical teams
• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical field

#LI-TH3,  #LI-ONSITE

ABOUT THIS ROLE 

LVT is actively seeking a highly motivated and detail-oriented Information Security Analyst (GRC) to join our growing Information Security team. This role will report directly to the Information Security Manager (GRC). This position is designed for an individual eager to delve deeply into the operational aspects of Governance, Risk, and Compliance, directly supporting LVT’s steadfast commitment to security excellence and regulatory adherence as the business continues its innovative scaling.

LVT values managing risk in alignment with our customer’s and stakeholder’s expected levels. We design, implement, and monitor controls that reduce real risk. The Information Security Analyst (GRC) will work with Management to operate key GRC processes. The primary focus of this hands-on position will be answering customer security questionnaires, performing risk assessments and internal audits, developing and maintaining policies, being a liaison for our external auditors, and helping to identify, manage, and reduce risk across our environment.

ROLE RESPONSIBILITIES

• Support LVT’s annual SOC 2 audit.
• Facilitate effective communication and coordination with internal SOC 2 control owners. 
• Proactively assist in identifying, analyzing, and resolving audit concerns or control deficiencies, proposing initial remediation steps. 
• Document audit outcomes, lessons learned, and recommended improvements post-audit. 
• Execute control testing, including evidence collection and documentation.
• Develop  LVT’s security policies, submitting them for approval, and ensuring alignment with organizational standards.
• Maintain and update the risk register to ensure accurate and timely recording of identified risks and their mitigation status.
• Maintain GRC documentation to ensure accuracy, accessibility, compliance with internal controls
• Execute quarterly  user access reviews.

OUR IDEAL CANDIDATE

• 1-3 years of experience with Information Security, GRC or IT Audit roles.
• Highly organized and can multitask and juggle multiple priorities.
• Familiarity with leveraging and applying AI tools and technologies to automate routine GRC tasks and improve program efficiency.
• Practical experience with SOC 2 audit processes including proficiency in control testing, evidence collection, and internal coordination.
• Familiarity with information security and risk frameworks.
• A foundational understanding of business operations and how security controls impact business functions. 
• Effective verbal and written communicator.
• Desire to work directly with key stakeholders, including customers.
• Hunger to learn and grow their abilities.
• Consistently demonstrates high integrity and transparency.
• Willing to take on tasks with a positive attitude, but also speaks up on concerns.
• A Bachelor's degree in Information Security, Computer Science, Information Technology, Business, or a related field, or equivalent practical experience, is preferred. 
• Experience working with GRC platforms (e.g., Drata, Vanta, ZenGRC) and project management tools (e.g., Jira, Asana) is helpful.
• Relevant professional certifications such as CompTIA Security+, CISA, CC, or CRISC are a plus

Locations: South Jordan, UT

Salary: $45,000

Want to work in technology at an investment bank?

In-depth graduate training, ongoing support, opportunities at leading global employers – the Alumni graduate program gives you everything you need. (And don’t worry, there’s no training bond. No exit fees, no hidden catches).

Here at mthree, we pair great graduates with brilliant global businesses. Our clients include tier one investment banks and other organizations across a range of industries, from insurance to healthcare to travel.

As part of the mthree Alumni program, mthree has an exciting and exclusive partnership with Columbia Univ. School of Engineering. All mthree Alumni are eligible to receive two Executive Education certificates from Columbia Engineering as part of their Academy and industry placement experience at no cost. Further, all participating Alumni will have access to the Columbia Engineering network and ongoing training.

What you'll do:

Production support plays a vital role in enterprise technology, from algorithmic trading engines to regulatory reporting.

Think of it as healthcare for technology. As a production support analyst with mthree, you’ll be on a shared mission to look after the technical systems and processes other teams rely on.

How the Alumni program works:

1. Apply via this job advert.
2. Complete our assessment process.
3. Get trained at mthree Academy in an online class for 4-8 weeks with other graduates.
4. Join a mthree client for 12-24 months while receiving support and salary increases every 12 months.
5. The vast majority then convert to permanent employees with the client at the end of the program.

What you’ll learn at the mthree Academy:

• How to discuss production support activity at a high level including ITIL (information technology infrastructure library), monitoring, DevOps, SRE (site reliability engineering), and disaster recovery.
• How to discuss common financial topics, including financial markets, equity trading, derivatives, currency, treasury, regulation, and risk.
• How to write a basic computer program in Python, including user input, common data structures, and flow of control.
• How to use MySQL to perform CRUD (create, read, update and delete) operations on a relational database stored in a MySQL Server.

What you'll need:

• Bachelor's degree in computer science or a related STEM subject (science, technology, engineering, math).
• A GPA of 2.75 or higher. We look for potential, not prestige, but it’s important that you enjoy pushing yourself to pick up new ideas.
• Ability to troubleshoot, taking an analytical approach to solve problems.
• Excellent spoken and written English communication skills.
• The right to work without needing visa sponsorship.

What you’ll get:

• In-depth, interactive training in small classes with graduates like you. Our training is created and delivered by industry experts who know your field inside out.
• A generous graduate salary.
• An annual increase to reflect your progress.
• A flexible benefits package.
• Ongoing training and support.
• Valuable industry experience. Ultimately, a foot in the door to build your career in an in-demand niche.

How to apply:

1. Apply via the form below and tell us a bit about you.
2. Complete the online assessment (we’ll send you a link by email).
3. Complete the interviews with our friendly talent team over phone and video.
4. Lastly, you’ll interview with one or more of our clients.

So you don’t miss out on your dream job, we encourage you to be open to relocating.

We take great pride in celebrating the diversity of each and every individual who contributes to making mthree the company it is today and will be in the future. We value diversity both within mthree and with our partner companies, and we're proud to provide an environment where all our colleagues can flourish. That means promoting a strong culture of equality but, most importantly, inclusion. We never want people to change - only add to the amazing mix of people that work for mthree.

Applicants must be currently authorized to work in the United States on a full-time basis. The Company will not sponsor applicants for work visas.