Role
We are looking for a Senior Compliance Program Manager to join our team. This is a hybrid role (onsite in San Jose three days a week), reporting to the Senior Manager, Global Commercial Compliance in the Security & Compliance department. In this critical position, you will serve as the dedicated owner for managing the security compliance audits.
What you'll do (Role Expectations)
- Own and manage end-to-end Commercial Security compliance audit programs - including SOC 2, ISO, and PCI DSS - from planning through certification, ensuring timely delivery that meets customer expectations
- Serve as the primary program owner driving audit readiness, evidence collection, and cross-functional coordination with internal teams and external auditors
- Proactively manage timelines, milestones, and stakeholder commitments while continuously monitoring evolving regulatory requirements to keep programs current, effective, and aligned with the organization's risk posture
Who You Are (Success Profile)
- You thrive in ambiguity, maintaining high comfort levels when navigating dynamic environments and using fluid situations as the raw material to build meaningful solutions.
- You act like an owner, driven by a strong passion for the mission and a bias for action that allows you to transition seamlessly between high-level strategy and hands-on execution.
- You are a high-trust collaborator who actively participates in a challenge culture, giving and receiving candid feedback with clarity and respect to build organizational trust.
- You are customer-obsessed, establishing deep empathy for both internal and external stakeholders while anchoring all core decisions in solving real-world problems.
- You operate with urgency, executing tasks with a relentless focus on delivering high-quality, impactful results rapidly to win for both the customer and the team.
What We're Looking for (Minimum Qualifications)
- Demonstrated curiosity and active exploration of AI tools, with a proven history of integrating new technologies to enhance daily workflows and augment problem-solving
- 10+ years of direct experience in security compliance, audit management, or risk assessment within a SaaS or cloud-based enterprise environment
- Demonstrated ability to manage complex, multi-stakeholder audits, ensuring clear communication between technical engineering teams and customer compliance officers
- Deep understanding of global security frameworks (e.g., SOC2, ISO 27001, GDPR) and experience mapping these controls to business requirements
- Proven leadership experience in a customer-facing capacity, capable of influencing senior-level stakeholders and resolving high-pressure compliance escalations
What Will Make You Stand Out (Preferred Qualifications)
- Experience leveraging AI-powered GRC platforms or automation tools to streamline audit evidence collection, reduce manual effort, and improve response accuracy
- Advanced professional certifications such as CISA, CISSP, or CISM, demonstrating deep expertise in security governance
- Prior experience designing and maturing audit readiness programs in a hyper-growth SaaS organization, specifically scaling processes to manage increasing request volumes without compromising quality
#LI-AJ1 #LI-Hybrid