Cloud GRC Program Lead (Automation & AI)

NetApp, Inc.; Morrisville (NC); Hybrid; USD 129,000 - 193,000; Full time

Benefits offered by this job

Health Insurance

Retirement plan

Paid time off

Employee stock purchase plan

RSUs

Job summary

NetApp’s Cloud business seeks a Governance, Risk & Compliance (GRC) Technical Program Manager to join the Security & Compliance team. This role requires strong cloud technical fluency to prepare products for assessments, manage risk, and translate controls into testable requirements.

The position partners with engineering and security teams to automate compliance activities and monitor evidence collection, including AI tooling, while aligning stakeholders and presenting the program to leaders

Qualifications

• 6+ years building and managing security risk and compliance programs.
• Deep knowledge of ISO/IEC 27001, SOC 2, PCI DSS, NIST, and FedRAMP, with ability to convert controls into engineering requirements.
• Experience partnering with engineering teams to deliver technical outcomes.
• Exceptional stakeholder mgmt to influence senior partners.

Responsibilities

• Design, maintain, and improve compliance programs for ISO/IEC 27001, SOC 2, PCI DSS, NIST, FedRAMP.
• Perform risk assessments across infrastructure and cloud engineering processes; monitor controls and advise remediation.
• Translate regulatory controls into measurable engineering requirements.
• Identify manual activities for automation and partner on automated detection and evidence collection.
• Apply AI tooling to improve compliance workflows.
• Align cross-functional teams and drive initiatives to completion.
• Partner with AWS Azure and Google Cloud on shared objectives.
• Manage auditor relationships and present security posture.
• Improve policies and governance and adoption of GRC tooling.

Skills

Stakeholder management

Regulatory risk management

Cross-functional collaboration

Program management

Cloud security fluency

Engineering requirements translation

Education

Bachelor’s or Master’s degree in Engineering/CS/IT

Security/compliance certifications (CISA/CISSP/CRISC/CCSP/CCSP)

AWS/Azure certifications

ISO 27001 Lead Implementer/Auditor

Tools

AWS

Azure

Kubernetes

Containers

CI/CD

SIEM

Vulnerability scanning

Cloud security posture management

Endpoint detection and response

AI tooling

Job description

NetApp’s Cloud business seeks a Governance, Risk & Compliance (GRC) Technical Program Manager to join the Security & Compliance team. This role requires strong cloud technical fluency to prepare products for assessments, manage risk, and translate controls into testable requirements.

The position partners with engineering and security teams to automate compliance activities and monitor evidence collection, including AI tooling, while aligning stakeholders and presenting the program to leaders