Compliance Program Manager

Role overview Manage a technology organization’s compliance programs, with primary ownership of readiness and authorization for a federal cloud security framework. You will also coordinate recurring audits and assessments, help teams address privacy and data protection risks, and strengthen controls that support customer trust and business requirements.

Responsibilities - Lead readiness and authorization activities for the federal compliance program from planning through completion. - Coordinate audits and assessments, including preparation, evidence and procedure review, and auditor walkthroughs. - Track and report program performance indicators and maturity measures. - Partner with IT, engineering, legal, and people teams to assess privacy and data protection risks and implement solutions. - Evaluate compliance gaps against relevant standards and put remediation controls in place. - Work with external auditors, consultants, and legal partners throughout reviews.

Requirements - At least five years contributing to or managing technology-sector audits, including demonstrated expertise in the federal compliance framework. - Experience with SOC 1, SOC 2, and PCI DSS controls or assessments. - Strong written and verbal communication, including the ability to explain compliance and privacy topics to varied audiences. - Experience working across teams in a remote-first, often asynchronous environment. - Background in company-wide risk assessments. - Familiarity with cloud providers and their services.

Nice to have - Experience with databases, developer tools, infrastructure, or other technical products. - CISSP, CISA, or CISM certification; working SQL knowledge, especially with MySQL or PostgreSQL.

Benefits and work setup The role is suited to an organized program leader comfortable with ambiguity, changing priorities, and cross-functional work. The stated base salary range is $175,000–$200,000 USD; total compensation may also include variable pay, benefits, and equity.