Compliance Manager [IC3]
Core
Own and drive Sourcegraph's governance, risk, and compliance program, focusing on maintaining and evolving certifications like SOC 2 and ISO 27001.
Role type
Senior IC Compliance Manager
Builds
Compliance program, audit readiness, and risk management frameworks for a SaaS engineering platform
Domain
Technology / SaaS / Information Security Compliance
Required skills
End-to-end ownership of SOC 2 and ISO 27001 programs, audit management, risk register maintenance, control design, stakeholder coordination, cross-functional project management, cloud environment understanding
Preferred skills
Experience with additional frameworks (GDPR, HIPAA, HITRUST, FedRAMP, FISMA, PCI DSS), GRC platforms, compliance automation, security questionnaires
Technologies
SOC 2, ISO 27001, GRC platforms, compliance automation tools
Responsibilities
Lead audits and certification milestones, manage ISMS processes and risk registers, tailor controls to the business environment, support customer-facing compliance activities, drive remediation of findings, introduce automation to reduce manual work
Seniority
Senior, hands-on IC
