Manager, Compliance

Commvault; United States; In loco; USD 94.000 - 185.000; Tempo pieno

Vantaggi offerti da questo lavoro

Professional development

Career growth

Inclusive culture

Global benefits package

Descrizione del lavoro

Commvault seeks a seasoned Compliance Manager to lead our global audit and certification programs and drive remediation across 12+ commercial audits. You will partner with Security, Legal, Engineering, and Product to embed compliance into everyday operations, leveraging AI and automation to strengthen controls, monitor evidence, and ensure audit readiness.

This role reports to the Director of GRC. You will oversee testing in Vanta, manage metrics, and help expand our compliant cloud environment

Competenze

• 7+ years of experience in GRC, information security, and/or audit in a global tech/SaaS environment.
• Working knowledge of ISO 27001, SOC 2 Type 2, NIST CSF, NIST 800-53 or similar frameworks.
• Experience developing and maintaining policies, procedures, and control documentation.
• Comfort using AI and automation to improve evidence collection and monitoring.
• Strong analytical skills and attention to detail, with ability to synthesize complex information.
• Proven ability to drive cross-functional collaboration and cross-border compliance.
• Experience overseeing global compliance, privacy, or regulated cloud environments.
• Certifications such as CISA, CISM, CISSP, CRISC, or ISO27001 Lead Auditor/Implementer are a plus.

Mansioni

• Lead ongoing operation and maturity of global audit and certification programs, including maintenance, evidence collection, readiness, and remediation.
• Identify gaps to strengthen control maturity and partner with control owners to implement improvements.
• Oversee buildout and refinement of controls and tests in the GRC tool (Vanta) with technical teams.
• Define and report actionable compliance metrics covering control effectiveness and remediation progress.
• Collaborate with Information Security, Legal, Engineering, Product, and other teams to embed compliance in day-to-day operations.
• Clarify audit requirements with Customer Trust and Risk teams and coordinate timely resolution.
• Monitor evolving regulations and translate changes into prioritized program improvements.
• Serve as a trusted senior resource for day-to-day compliance guidance.

Conoscenze

GRC

InfoSec

Audit

ISO 27001

SOC 2

NIST CSF

Strumenti

Vanta

Descrizione del lavoro

We’ve learned that scammers are impersonating Commvault team members—including HR and leadership—via email or text. These bad actors may conduct fake interviews and ask for personal information, such as your social security number.

What to know:

• Commvault doesnotconduct interviews by email or text.
• We will never ask you to submit sensitive documents (including banking information, SSN, etc) before your first day.
• Commvault recruiters may contact prospective candidates through LinkedIn and other professional networking platforms regarding career opportunities. If you are unsure whether a recruiting communication is legitimate, review the profile to ensure they have a badge verifying them as a Commvault employee.

Commvault (NASDAQ: CVLT) delivers continuous recovery for the AI era. We help organizations stay ready for constant disruption by returning critical data, applications, identities, and AI systems to a clean, trusted state. Our purpose-built recovery solutions span cloud-native and hybrid environments, leveraging AI to enable resilience at enterprise scale.

The Opportunity Help shape the future of trust and compliance at Commvault. As a Compliance Manager you will serve as a senior member of the GRC team, reporting directly to the Director of GRC and oversee audit and certification maintenance for 12+ commercial audits, as well as planning and readiness for new audits. You will lead audit program operations, partner with teams across the business to strengthen controls and drive remediation, and help expand Commvault’s global compliance program as regulatory, customer, and business needs evolve. This is an opportunity to combine hands‑on expertise with strategic planning, turn complex requirements into practical solutions, and make a meaningful impact on the trust organization.

What You’ll Do...

• Lead the ongoing operation and maturity of Commvault’s global audit and certification programs, owning audit maintenance, evidence collection, readiness, and remediation while driving a scalable, top‑tier compliance program.
• Identify gaps and opportunities to strengthen control maturity, and partner with control owners to implement sustainable improvements.
• Oversee the buildout, automation, and ongoing refinement of controls and tests in Commvault’s GRC tool Vanta, partnering with technical teams and control owners to align testing with compliance requirements, validate test results and evidence quality, and establish clear ownership and exception workflows. Drive reliable continuous monitoring and reduce manual effort to support a scalable, mature compliance program.
• Define and report actionable compliance metrics covering control effectiveness, monitoring coverage, automation adoption, audit readiness, and remediation progress. Use trends to prioritize improvements and provide clear visibility into program health and maturity.
• Partner across Information Security, Legal, Engineering, Product, and other business functions to embed compliance into day‑to‑day operations, establish clear control accountability, and build practical, sustainable processes that scale with the business.
• Work closely with Customer Trust and Risk teams to clarify and communicate audit requirements, elevate gaps and issues to the appropriate stakeholders, and coordinate timely resolution.
• Monitor evolving regulations, standards, and industry expectations, assess their impact on Commvault’s compliance programs, and translate relevant changes into prioritized program and control improvements.
• Serve as a trusted senior resource for day‑to‑day compliance guidance, helping stakeholders navigate requirements and make risk‑informed decisions while supporting broader priorities across Commvault’s global compliance program.

Who You Are...

• 7+ years of professional experience in GRC, information security, and/or audit, preferably within a global technology or SaaS organization.
• Working knowledge of common security and compliance frameworks and standards, such as ISO 27001, ISO 27701, SOC 2 Type 2, NIST CSF, NIST 800-53, or similar frameworks. Preferable: experience with FedRAMP, CMMC, GovRAMP, SOX.
• Experience developing and maintaining policies, procedures, control documentation, and other compliance program materials.
• Comfort using AI and automation, and able to rely on practical technical skills to adapt tools and workflows to GRC needs, improve evidence collection and control monitoring, and reduce manual effort. Ability to learn new technologies, validate outputs, and apply sound judgment to protect sensitive information.
• Strong analytical skills, attention to detail, and the ability to synthesize complex information into clear conclusions and recommendations.
• Proven ability to build effective cross‑functional relationships, influence stakeholders, navigate competing priorities, and drive work through completion.
• Experience overseeing global compliance requirements, privacy requirements, and/or regulated cloud environments.
• Relevant professional certifications such as CISA, CISM, CISSP, CRISC, or ISO 27001 Lead Auditor/Implementer are a plus.

You’ll Love Working Here Because...

• Continuous professional development and product training
• Clear career growth and advancement opportunities
• Inclusive company culture
• Comprehensive global benefits package

Thank you for your interest in Commvault.

Pay Range

$93,500 - $185,150 USD

Commvault is an equal opportunity workplace and is an affirmative action employer. We are always committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status and we will not discriminate against on the basis of such characteristics or any other status protected by the laws or regulations in the locations where we work.

Commvault’s goal is to make interviewing inclusive and accessible to all candidates and employees. If you have a disability or special need that requires accommodation to participate in the interview process or apply for a position at Commvault, please email [e-mail] For any inquiries not related to an accommodation please reach out to [e-mail] .

Interested in building your career at Commvault? Get future opportunities sent straight to your email.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Commvault’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Commvault uses assistive AI tools to help our recruiting team evaluate how your skills and experience align with role requirements. For clarity, these tools only assist our recruiters and do not make hiring decisions or automatically reject candidates. Our recruiters and hiring managers maintain independent review and evaluation of applications. See our Privacy Policy for details on how we process your personal data. To learn more or opt out of AI-assisted review, click "Learn more" below and use the match score settings at the bottom of the page.