Engineering Manager - GRC Engineering & Security NEW

The Briefed; New York (NY); Hybrid; USD 192,000 - 240,000; Full time

Benefits offered by this job

Base salary + RSUs + ESPP

Comprehensive health insurance

401(k) with match

Job summary

Datadog is seeking an Engineering Manager for Commercial Audit to lead a hybrid team of security engineers and compliance analysts. You will shift audit workflows to automated, continuous compliance platforms, building evidence collection tools and AI-driven tooling.

You will also drive a unified control framework across Kubernetes and multi-cloud environments. You will guide a skilled team in code, APIs, and AI tooling to operationalize SOC 2, PCI-DSS, HIPAA, ISO 27001, and FedRAMP while

Qualifications

• Experience leading security engineering or GRC teams.
• Experience automating compliance testing with software tools.
• Ability to review Python/Go code and cloud-native diagrams.

Responsibilities

• Strategy & Compliance-as-Code Roadmap: Lead the multi-year vision, roadmap, and execution for Datadog’s commercial security compliance, replacing manual audit workflows with automated, continuous compliance platforms.
• Team Leadership & Transition: Hire, mentor, and grow a diverse engineering and analytics team—guiding analysts and engineers through the transition toward a GRC Engineering mindset focused on code, APIs, and AI tooling.
• Internal Tooling & AI Automation: Drive the development of custom internal platforms (using Python, Go, and LLM/AI services) to automate evidence collection, streamline control testing, and track compliance metrics.
• Common Control Framework Operationalization: Partner within Information Security to operationalize a unified control framework integrated into containerized architectures (Kubernetes) and multi-cloud environments (AWS, GCP, Azure).
• Compliance-by-Design Alignment: Collaborate with platform and infrastructure teams to embed automated security controls into CI/CD pipelines and microservices.
• Program Metrics & Governance: Define, track, and report key metrics like control coverage, audit friction reduction, and automation adoption.

Skills

Engineering Leadership

GRC Engineering

AI Automation

Code & Infra Literacy

Kubernetes

Cloud Architecture

Security Compliance

Auditing

Tools

Python

Go

Job description

Datadog is the leading observability and security platform for the AI era, providing businesses with unified visibility across their entire technology stack to manage complexity at scale.

As Engineering Manager for Commercial Audit, you will lead a high-performing team responsible for scaling Datadog’s security and compliance posture through software automation, AI-driven tooling, and engineering excellence. Managing a hybrid team of security engineers and compliance analysts, you will drive the transition from traditional, manual audit workflows to a modern GRC Engineering model. You will treat compliance as a software problem—building automated evidence collection tools, CI/CD integration checks, and real-time dashboarding to enforce regulatory standards (SOC 2, PCI-DSS, HIPAA, ISO 27001, FedRAMP) across Datadog's cloud-native infrastructure.

Key Responsibilities

• Strategy & Compliance-as-Code Roadmap: Lead the multi-year vision, roadmap, and execution for Datadog’s commercial security compliance, replacing manual audit workflows with automated, continuous compliance platforms.
• Team Leadership & Transition: Hire, mentor, and grow a diverse engineering and analytics team—guiding analysts and engineers through the transition toward a GRC Engineering mindset focused on code, APIs, and AI tooling.
• Internal Tooling & AI Automation: Drive the development of custom internal platforms (using Python, Go, and LLM/AI services) to automate evidence collection, streamline control testing, and track compliance metrics.
• Common Control Framework Operationalization: Partner within Information Security to operationalize a unified control framework integrated seamlessly into Datadog’s containerized architectures (Kubernetes) and multi-cloud environments (AWS, GCP, Azure).
• Compliance-by-Design Alignment: Collaborate with core platform and infrastructure engineering teams to embed automated security controls directly into CI/CD pipelines and microservice architectures.
• Program Metrics & Governance: Define, track, and report critical program health metrics—including control coverage percentages, audit friction reduction, and automation adoption rates.

Requirements

Engineering Management & GRC Technical Depth

• Engineering Leadership: Demonstrated experience managing or leading technical teams within security engineering, GRC, software development, or risk management functions.
• GRC Engineering & AI Automation: Proven track record leveraging software tools, APIs, and artificial intelligence to automate compliance testing, evidence collection, and security operations.
• Code & Infrastructure Literacy: Technical ability to review backend code (Python, Go), evaluate cloud architecture diagrams, and understand cloud-native infrastructure (Kubernetes, AWS/GCP/Azure).
• Enterprise Regulatory Frameworks: Deep practical knowledge of global compliance standards—including SOC 2, PCI-DSS, HIPAA, ISO 27001, and FedRAMP—implemented at scale in SaaS environments.
• Low-Ego Diplomatic Leadership: Exceptional communication and relationship-building skills; ability to bridge gaps between technical engineers, legal counsel, executives, and external auditors without creating friction.
• Systems Thinking: Ability to analyze root causes and downstream system dependencies to build long-term, pragmatic platform solutions.

Preferred Qualifications

• Prior experience working as a certified auditor (e.g., QSA) or directly facilitating large-scale external audits with scope-negotiation experience.
• Background operating within high-growth, cloud-native SaaS platforms where scale and security complexity are primary engineering challenges.
• Direct experience building custom integrations between GRC platforms, CI/CD runners, and cloud infrastructure telemetry APIs.

Total Rewards & Benefits

• Compensation & Equity: Base salary range of $192,000 – $240,000 USD + Restricted Stock Units (RSUs) + Employee Stock Purchase Plan (ESPP) discount.
• Healthcare & Family Support: Comprehensive health, dental, and vision insurance coverage, parental planning support, and mental health stipends.
• Financial & Retirement: 401(k) plan with employer match, fitness reimbursements, and paid time off.
• Culture & Growth: Best-in-class onboarding, cross-departmental mentorship programs, continuous career pathing, and an inclusive workplace culture.