Compliance Program Manager (Fully Remote)

PlanetScale; United States; Remote; USD 140,000 - 200,000; Full time

Job summary

PlanetScale is seeking a senior compliance lead to own FedRAMP readiness and the ATO process, acting as the central point of contact for SOC 1/2, PCI, and FedRAMP audits. You will plan, document, and coordinate walkthroughs while establishing KPIs and maturity metrics for the program.

The role requires 5+ years in technology audits, strong communication skills, and experience with major cloud providers. A startup-friendly, cross-department environment is expected.

Qualifications

• 5+ years of audit experience in the technology sector.
• Demonstrable FedRAMP expertise.
• Experience with SOC 2 and PCI DSS.
• Knowledge of risk assessments and cloud providers (AWS, Azure, GCP).
• Excellent communication to convey compliance concepts to diverse stakeholders.

Responsibilities

• Oversee PlanetScale's FedRAMP readiness and ATO process from start to finish.
• Serve as the main compliance contact for audits/assessments including SOC 1 & 2, PCI, and FedRAMP, with plan prep, documentation review, and external walkthroughs.
• Establish, track, and report on KPIs and maturity metrics for audit and compliance programs.

Skills

FedRAMP expertise

Audit management

SOC 2

PCI DSS

Stakeholder comms

Job description

• Take primary responsibility for overseeing PlanetScale's FedRAMP readiness and ATO process from start to finish.
• Act as the main compliance point of contact for all audits/assessments, including SOC 1 & 2, PCI, and FedRAMP, with audit plan preparation, documentation review, and external walkthroughs.
• Establish, track, and report on key performance indicators and maturity metrics related to audit and compliance programs.

What We're Looking For:

• 5+ years of experience contributing to or managing audits in the technology sector, with demonstrable FedRAMP expertise.
• Experience with SOC 2 and PCI DSS, as well as companywide risk assessments and cloud service providers like AWS, Azure, and GCP.
• Excellent communication skills to convey compliance and privacy concepts to technical and non-technical stakeholders.

About You:

• Highly organized and able to operate in a startup environment, comfortable with ambiguity and cross-department collaboration.
• Passionate about leading programs that directly impact the organization's success and view security and compliance as revenue generators.
• Comfortable challenging the status quo while keeping PlanetScale secure and earning customer trust.

Why PlanetScale:

• Backed by over $100M in venture financing from top-tier VCs and serving innovative companies like Block, Etsy, and MyFitnessPal.
• Profitable and recognized as one of the fastest growing companies in America, with a philosophy of building small teams of p99 individuals.
• Committed to diversity, equity, and inclusion, supporting people to do their best work regardless of location.

PlanetScale

PlanetScale offers developers the fastest and most reliable Postgres and Vitess/MySQL databases, enabling businesses to handle data and workloads of all sizes. Backed by over $100M in venture financing and serving innovative companies like Block and Etsy, PlanetScale is a profitable, fast-growing company that builds small teams of top-tier individuals.