Senior Manager of Compliance
Remote (Canada), Remote (United States)
Full Time Senior-level / Expert USD 215K+
CircleCI
Get the best continuous integration and delivery for any platform, in our cloud or on your own infrastructure.CircleCI is looking for a Senior Manager of Compliance! In this role, you will own CircleCI’s technical Compliance function and work with various areas of the business to design, implement, and manage GRC initiatives which support the company’s ongoing business and security needs.
In addition to managing the overall Compliance function, you will - in conjunction with the existing team - interpret and set CircleCI’s compliance requirements, assess the effectiveness of implemented security controls, use risk-based decision-making, participate in cross-functional teamwork and communication, and stay up-to-date on standard compliance methodologies.
What You’ll Do:
- Lead, coordinate, maintain, and improve CircleCI’s Compliance program
- Supervise and improve the processes and controls used to maintain our SOC 2 and FedRAMP certifications
- Collaborate with both auditors and business partners, articulate control implementation and impact, and describe considerations for applying security and compliance concepts in a technical cloud environment
- Participate in day-to-day compliance triaging and support activities
- Work cross-functionally to remediate compliance control gaps, including documenting and communicating findings with partners and team members
- Keep up to date on regulatory changes that may impact CircleCI’s compliance efforts
- Coach and mentor current team members to build an outstanding Compliance team
What You Bring:
The ideal candidate is a diligent, technical, and experienced compliance professional with a background in leadership, implementation, regulatory control requirements, process improvement and compliance risk analysis.
- 7+ years of experience in compliance, preferably with experience leading the Security/GRC function in a Cloud/SaaS environment
- Demonstrated experience achieving and maintaining compliance certifications for a SaaS service (preferably, FedRAMP and SOC 2)
- In-depth knowledge of FedRAMP, NIST 800-53 security controls, NIST 800-37 risk management framework, building and running the federal compliance program
- Comfort leading cross-functional resolutions of risk and compliance issues
- Excellent verbal and written communication skills. You can write and manage large technical documents and translate technical concepts into clear terms for non-technical audiences
- Passion for workflows, processes, tools and team dynamics and how these impact a company’s ability to scale
- An understanding of Compliance’s role in the procurement process
- Familiarity with both project management and audit, risk, and compliance software
- CRISC, CISM, CISA or CISSP or similar industry certifications a plus
About CircleCI
CircleCI is the world’s largest shared continuous integration/continuous delivery (CI/CD) platform, and the hub where code moves from idea to delivery. As one of the most-used DevOps tools - processing more than 1 million builds a day - CircleCI has unique access to data on how engineering teams work, and how their code runs. Companies like Spotify, Coinbase, and BuzzFeed use us to improve engineering team productivity, release better products, and get to market faster.
Founded in 2011 and headquartered in downtown San Francisco with a global, remote workforce, CircleCI is venture-backed by Base10, Greenspring Associates, Eleven Prime, IVP, Sapphire Ventures, Top Tier Capital Partners, Baseline Ventures, Threshold Ventures, Scale Venture Partners, Owl Rock Capital, Next Equity Partners, Heavybit and Harrison Metal Capital.
CircleCI is an Equal Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law.
US Salary Range: "$150,000- $215,000"
Tags: CI/CD CircleCI CISA CISM CISSP Cloud Compliance CRISC DevOps FedRAMP NIST Risk analysis Risk management SaaS SOC SOC 2
Perks/benefits: Equity Team events
More jobs like this
Explore more InfoSec/Cybersecurity career opportunities
Find open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Analysis, Cryptography, Digital Forensics and Cyber Security in general, filtered by job title or popular skill, toolset and products used.
- Open SOC Analyst jobs
- Open Senior Cybersecurity Engineer jobs
- Open Security Operations Analyst jobs
- Open Senior Information Security Analyst jobs
- Open Security Operations Engineer jobs
- Open Security Architect jobs
- Open Cybersecurity Analyst jobs
- Open IT Security Engineer jobs
- Open Information System Security Officer (ISSO) jobs
- Open Electronic Warfare Advanced Tactical Trainer jobs
- Open IT Security Analyst jobs
- Open Head of Information Security jobs
- Open Cyber Hunt SME jobs
- Open Security Consultant jobs
- Open Lead Security Engineer jobs
- Open Cyber Security Specialist jobs
- Open Senior Security Operations Engineer jobs
- Open Staff Application Security Engineer jobs
- Open Analyste CERT / Incident Responder senior (H/F) jobs
- Open Ethical hacker / Pentester H/F jobs
- Open Senior Penetration Tester jobs
- Open Manager Pentest H/F jobs
- Open Senior Information Security Engineer jobs
- Open Senior Security Analyst jobs
- Open Director of Information Security jobs
- Open Application security-related jobs
- Open Network security-related jobs
- Open Risk assessment-related jobs
- Open Governance-related jobs
- Open Pentesting-related jobs
- Open Clearance-related jobs
- Open ISO 27001-related jobs
- Open Kubernetes-related jobs
- Open DevOps-related jobs
- Open DevSecOps-related jobs
- Open SaaS-related jobs
- Open Vulnerability management-related jobs
- Open IAM-related jobs
- Open APIs-related jobs
- Open CISM-related jobs
- Open Forensics-related jobs
- Open CI/CD-related jobs
- Open Java-related jobs
- Open Analytics-related jobs
- Open Malware-related jobs
- Open CISA-related jobs
- Open Threat intelligence-related jobs
- Open OWASP-related jobs
- Open Terraform-related jobs
- Open IDS-related jobs