Cloud GRC Program Lead – AI-Driven Security & Compliance

NetApp; Morrisville (NC); Hybrid; USD 129,000 - 193,000; Full time

Benefits offered by this job

Health Insurance

Life Insurance

Retirement/Pension Plans

Paid Time Off

Leave options

Employee stock purchase plan

Restricted stocks (RSU’s)

Job summary

NetApp seeks a Governance, Risk & Compliance (GRC) Technical Program Manager to lead compliance programs and automate controls across cloud environments. You will translate regulatory requirements into actionable engineering tasks, partner with security and product teams, and drive risk management with cross‑functional stakeholders.

The role requires strong cloud fluency, risk assessments, and experience delivering certifications. Hybrid work with global teams is available.

Qualifications

• 6+ years building and managing security risk and compliance programs
• Deep knowledge of ISO/IEC 27001, SOC 2, PCI DSS, NIST, and FedRAMP
• Direct experience partnering with engineering teams to deliver technical outcomes
• Exceptional stakeholder management and ability to influence senior stakeholders
• Strong technical fluency in AWS and Azure, Kubernetes, containers, VMs, IAM, network security, logging
• Familiarity with SIEM, vulnerability scanning, CSPM, and EDR
• Product‑oriented problem solving to investigate gaps and drive solutions

Responsibilities

• Design, maintain, and improve compliance programs for ISO/IEC 27001, SOC 2, PCI DSS, NIST, FedRAMP
• Perform gap and risk assessments across infrastructure, apps, and cloud processes
• Translate controls into engineering and security requirements
• Identify automation opportunities and partner on automated detection and evidence collection
• Apply AI tooling to enhance compliance workflows
• Coordinate cross‑functional teams (Engineering, SRE, Product, Cloud Security, Legal)
• Collaborate with Azure, Google Cloud, and AWS on shared objectives
• Manage auditor relationships and present the organization’s security posture
• Improve policies, processes, and GRC tooling adoption

Skills

Security risk management

ISO/IEC 27001

SOC 2

PCI DSS

NIST

Cloud security

AWS/Azure

CI/CD

Education

Bachelors or Masters in Engineering/CS/IT

Security certifications (advantageous)

Job description

NetApp seeks a Governance, Risk & Compliance (GRC) Technical Program Manager to lead compliance programs and automate controls across cloud environments. You will translate regulatory requirements into actionable engineering tasks, partner with security and product teams, and drive risk management with cross‑functional stakeholders.

The role requires strong cloud fluency, risk assessments, and experience delivering certifications. Hybrid work with global teams is available.