Manager, Compliance and Audit

Socket.dev; Austin (TX); On-site; USD 102,000 - 172,000; Full time

Benefits offered by this job

Health and wellness coverage

401(k) matching

Flexible vacation policy

Job summary

SailPoint is seeking a Manager, Compliance and Audit to lead our Compliance program and oversee end-to-end audits across SOC 2 Type II, ISO 27001, FedRAMP, and other standards. You will mentor analysts and auditors, drive automation, and partner with cross-functional teams to embed compliance into product development and go-to-market efforts.

Based in the United States, you will work within the CISO team to shape SailPoint’s compliance strategy, readiness for new obligations, and executive

Qualifications

• 7+ years in compliance or GRC, incl. 3+ years in leadership roles.
• Strong leadership and people development skills.
• Knowledge of NIST CSF, ISO 27001, FedRAMP and related practices.
• Excellent written and verbal communication for executives, auditors and stakeholders.

Responsibilities

• Own and maintain the company's compliance framework(s) and end-to-end audit lifecycle (SOC 2 Type II, ISO 27001, FedRAMP, C5).
• Lead and develop a team of compliance professionals; provide coaching and career growth support.
• Set priorities and allocate workload across audits, questionnaires, and initiatives.
• Drive process improvements and automation in the compliance program.

Skills

Leadership

GRC

Auditing

Regulatory frameworks

Tools

Automation tooling

Job description

SailPoint is seeking a Manager, Compliance and Audit with demonstrated competence and thought leadership capability to contribute to the success of our Strategy and Risk organization. As a provider of both SaaS and enterprise software for some of the world's most prestigious organizations, SailPoint strives for best-in-class security.

The Manager of Compliance and Audit will lead our Compliance program, ensuring the organization meets the security and regulatory expectations of enterprise customers, regulators, and industry standards. This role owns the end-to-end management of multiple, concurrent compliance frameworks (SOC 2, ISO 27001, FedRAMP, C5, and others), drives process improvements and automation across the compliance function, and partners closely with cross-functional stakeholders to embed compliance into how we build and sell our product.

In this role, you will lead an existing team of analysts and auditors to drive maturity across our compliance and audit programs, not only aligning our program with industry best practices but also leading our readiness for additional compliance frameworks or laws. This is a challenging and impactful role, offering the opportunity to work with influential internal and external stakeholders while driving continuous improvement of our compliance program.

This role will join an existing, capable team of both emerging and established talent. They’ll have the opportunity to shape and drive SailPoint's compliance and audit activities. They’ll already be comfortable with the 4 I’s at SailPoint (individual, Impact, Innovation, and Integrity) even if they’re new to the concept. They will embrace new challenges and will be a positive contributor to an already positive work culture and environment.

This role will be a vital member of the CISO team and will be based in the United States.

Responsibilities:

• Own and maintain the company's compliance framework(s) and end-to-end audit lifecycle, including SOC 2 Type II, ISO 27001, FedRAMP, C5, and other relevant certifications
• Manage, mentor, and develop a team of compliance professionals, providing regular feedback, coaching, and support for career growth
• Set team priorities and distribute workload across concurrent audits, questionnaires, and compliance initiatives
• Drive process improvements in the current program in alignment with relevant regulatory frameworks and best practices (e.g., NIST)
• Facilitate and evaluate readiness for new and emerging compliance obligations to achieve SailPoint's compliance goals
• Partner with cross-functional teams to ensure compliance requirements are integrated into business processes
• Optimize existing processes and leverage automation/tooling, such as automated evidence collection and a unified controls framework, to build efficient processes and workflows
• Serve as a subject matter expert on compliance matters for internal stakeholders and become the primary liaison with external auditors as well as certification bodies
• Lead the delivery of compliance updates to leadership and cross-functional stakeholders

Requirements:

• Meet FedRAMP access requirements
• 7+ years of work experience in compliance or GRC, including at least 3 years in leadership roles
• Suggested certifications: CISSP, CISA, CISM, CRISC, or other relevant certifications
• Strong leadership and people development skills, including coaching, mentoring, performance management, and fostering a culture of continuous improvement
• Comprehensive knowledge of information security governance, risk management, compliance, and industry frameworks, including NIST Cybersecurity Framework (CSF), ISO 27001, FedRAMP, and related best practices
• Exceptional written and verbal communication skills, including the ability to communicate complex information clearly and effectively to executive leadership, auditors, customers, and non-technical stakeholders
• Analytical expertise, close attention to detail, critical thinking, logic, a solution orientation, and an ability to learn and adapt quickly
• Experience creating and maintaining a staffing strategy, efficient assignment of responsibilities, and regular metrics/reporting
• Complex decision-making skills, with an ability to clearly convey the relative costs and benefits of potential actions and a recommendation

The pathway to success:

• First 30 Days: Understand the Landscape
  Within your first month, you will focus on integrating with the team and understanding the current state of our compliance programs. You will meet with key internal stakeholders across various departments to learn about existing processes, and connect with our external auditors to grasp the current audit landscape.

• First 60 Days: Shape the Future
  By the end of your second month, you will be expected to assess the program's needs and begin formulating a strategic roadmap for the future of compliance at the company. Working with your team, you will identify opportunities for refinement and upscaling, laying the groundwork for a forward-looking compliance program.

• First 90 Days: Execute and Lead
  In your third month, you will shift your focus to execution, beginning to implement the strategic roadmap you've developed. You will actively direct your team, manage their priorities, and provide crucial support for our go-to-market initiatives, ensuring compliance is a key enabler of our business growth.

Benefits and Compensation listed vary based on the location of your employment and the nature of your employment with SailPoint.

As a part of the total compensation package, this role may be eligible for the SailPoint Corporate Bonus Plan or a role-specific commission, along with potential eligibility for equity participation. SailPoint maintains broad salary ranges for its roles to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect SailPoint’s differing products, industries, and lines of business. Candidates are typically placed into the range based on the preceding factors as well as internal peer equity. We estimate the base salary, for US-based employees, will be in this range from (min-max, USD):

$101,900 - $171,690.00

Base salaries for employees based in other locations are competitive for the employee’s home location.

Benefits Overview

1. Health and wellness coverage: Medical, dental, and vision insurance

2. Disability coverage: Short-term and long-term disability

3. Life protection: Life insurance and Accidental Death & Dismemberment (AD&D)

4. Additional life coverage options: Supplemental life insurance for employees, spouses, and children

5. Flexible spending accounts for health care, and dependent care; limited purpose flexible spending account

6. Financial security: 401(k) Savings and Investment Plan with company matching

7. Time off benefits: Flexible vacation policy

8. Holidays: 8 paid holidays annually

9. Sick leave

10. Parental support: Paid parental leave

11. Employee Assistance Program (EAP) and Care Counselors

12. Voluntary benefits: Legal Assistance, Critical Illness, Accident, Hospital Indemnity and Pet Insurance options

13. Health Savings Account (HSA) with employer contribution

SailPoint is an equal opportunity employer and we welcome all qualified candidates to join our team. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other category protected by applicable law.