Manager, Compliance and Audit

Savvy; United States; In loco; USD 102.000 - 172.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health and wellness coverage

401(k) plan with match

Flexible vacation policy

Parental leave

Descrizione del lavoro

SailPoint is seeking a Manager, Compliance and Audit to lead the Strategy and Risk organization’s compliance program in the United States. You will own end-to-end audits (SOC 2 Type II, ISO 27001, FedRAMP, C5) and mentor a growing team of analysts and auditors while partnering with cross-functional stakeholders to embed compliance across product development and go-to-market activities.

You will drive improvements, readiness for new obligations, and effective collaboration with internal and

Competenze

• 7+ years of experience in compliance or GRC, including 3+ years in leadership roles
• Knowledge of information security governance, risk management, compliance, and industry frameworks (NIST CSF, ISO 27001, FedRAMP)
• Ability to communicate complex information clearly to executives, auditors, customers and non-technical stakeholders
• Experience creating and maintaining staffing strategy, workload planning and regular metrics reporting
• Strong leadership and people development skills, coaching, mentoring, performance management, continuous improvement culture
• Experience leading multiple concurrent audits, questionnaires and compliance initiatives
• Ability to drive process improvements and automation across the compliance function
• Ability to liaison with external auditors and regulatory bodies

Mansioni

• Own and manage the end-to-end audit lifecycle including SOC 2 Type II, ISO 27001, FedRAMP, C5 and other certifications
• Lead, mentor, and develop a team of compliance professionals with regular feedback and career growth
• Set priorities and distribute workload across concurrent audits and initiatives
• Drive process improvements aligned with regulatory frameworks and best practices (e.g., NIST)
• Facilitate readiness for new obligations and expand compliance programs as needed
• Partner with cross-functional teams to embed compliance into business processes
• Leverage automation and unified controls to improve efficiency and evidence collection
• Serve as SME on compliance matters for internal and external stakeholders and auditors
• Deliver updates on compliance posture to leadership and cross-functional teams

Conoscenze

Leadership

GRC

Regulatory frameworks

Executive communication

Audit management

Descrizione del lavoro

SailPoint is seeking a Manager, Compliance and Audit with demonstrated competence and thought leadership capability to contribute to the success of our Strategy and Risk organization. As a provider of both SaaS and enterprise software for some of the world's most prestigious organizations, SailPoint strives for best-in-class security.

The Manager of Compliance and Audit will lead our Compliance program, ensuring the organization meets the security and regulatory expectations of enterprise customers, regulators, and industry standards. This role owns the end-to-end management of multiple, concurrent compliance frameworks (SOC 2, ISO 27001, FedRAMP, C5, and others), drives process improvements and automation across the compliance function, and partners closely with cross-functional stakeholders to embed compliance into how we build and sell our product.

In this role, you will lead an existing team of analysts and auditors to drive maturity across our compliance and audit programs, not only aligning our program with industry best practices but also leading our readiness for additional compliance frameworks or laws. This is a challenging and impactful role, offering the opportunity to work with influential internal and external stakeholders while driving continuous improvement of our compliance program.

This role will join an existing, capable team of both emerging and established talent. They’ll have the opportunity to shape and drive SailPoint's compliance and audit activities. They’ll already be comfortable with the 4 I’s at SailPoint (individual, Impact, Innovation, and Integrity) even if they’re new to the concept. They will embrace new challenges and will be a positive contributor to an already positive work culture and environment.

This role will be a vital member of the CISO team and will be based in the United States.

Responsibilities:

• Own and maintain the company's compliance framework(s) and end-to-end audit lifecycle, including SOC 2 Type II, ISO 27001, FedRAMP, C5, and other relevant certifications
• Manage, mentor, and develop a team of compliance professionals, providing regular feedback, coaching, and support for career growth
• Set team priorities and distribute workload across concurrent audits, questionnaires, and compliance initiatives
• Drive process improvements in the current program in alignment with relevant regulatory frameworks and best practices (e.g., NIST)
• Facilitate and evaluate readiness for new and emerging compliance obligations to achieve SailPoint's compliance goals
• Partner with cross-functional teams to ensure compliance requirements are integrated into business processes
• Optimize existing processes and leverage automation/tooling, such as automated evidence collection and a unified controls framework, to build efficient processes and workflows
• Serve as a subject matter expert on compliance matters for internal stakeholders and become the primary liaison with external auditors as well as certification bodies
• Lead the delivery of compliance updates to leadership and cross-functional stakeholders

Requirements:

• Meet FedRAMP access requirements
• 7+ years of work experience in compliance or GRC, including at least 3 years in leadership roles
• Suggested certifications: CISSP, CISA, CISM, CRISC, or other relevant certifications
• Strong leadership and people development skills, including coaching, mentoring, performance management, and fostering a culture of continuous improvement
• Comprehensive knowledge of information security governance, risk management, compliance, and industry frameworks, including NIST Cybersecurity Framework (CSF), ISO 27001, FedRAMP, and related best practices
• Exceptional written and verbal communication skills, including the ability to communicate complex information clearly and effectively to executive leadership, auditors, customers, and non-technical stakeholders
• Analytical expertise, close attention to detail, critical thinking, logic, a solution orientation, and an ability to learn and adapt quickly
• Experience creating and maintaining a staffing strategy, efficient assignment of responsibilities, and regular metrics/reporting
• Complex decision-making skills, with an ability to clearly convey the relative costs and benefits of potential actions and a recommendation

The pathway to success:

• First 30 Days: Understand the Landscape
  Within your first month, you will focus on integrating with the team and understanding the current state of our compliance programs. You will meet with key internal stakeholders across various departments to learn about existing processes, and connect with our external auditors to grasp the current audit landscape.
• First 60 Days: Shape the Future
  By the end of your second month, you will be expected to assess the program's needs and begin formulating a strategic roadmap for the future of compliance at the company. Working with your team, you will identify opportunities for refinement and upscaling, laying the groundwork for a forward-looking compliance program.
• First 90 Days: Execute and Lead
  In your third month, you will shift your focus to execution, beginning to implement the strategic roadmap you've developed. You will actively direct your team, manage their priorities, and provide crucial support for our go-to-market initiatives, ensuring compliance is a key enabler of our business growth.

Benefits and Compensation listed vary based on the location of your employment and the nature of your employment with SailPoint.

As a part of the total compensation package, this role may be eligible for the SailPoint Corporate Bonus Plan or a role-specific commission, along with potential eligibility for equity participation. SailPoint maintains broad salary ranges for its roles to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect SailPoint’s differing products, industries, and lines of business. Candidates are typically placed into the range based on the preceding factors as well as internal peer equity. We estimate the base salary, for US-based employees, will be in this range from (min-max, USD):

$101,900 - $171,690.00

Base salaries for employees based in other locations are competitive for the employee’s home location.

Benefits Overview

• 1. Health and wellness coverage: Medical, dental, and vision insurance
• 2. Disability coverage: Short-term and long-term disability
• 3. Life protection: Life insurance and Accidental Death & Dismemberment (AD&D)
• 4. Additional life coverage options: Supplemental life insurance for employees, spouses, and children
• 5. Flexible spending accounts for health care, and dependent care; limited purpose flexible spending account
• 6. Financial security: 401(k) Savings and Investment Plan with company matching
• 7. Time off benefits: Flexible vacation policy
• 8. Holidays: 8 paid holidays annually
• 9. Sick leave
• 10. Parental support: Paid parental leave
• 11. Employee Assistance Program (EAP) and Care Counselors
• 12. Voluntary benefits: Legal Assistance, Critical Illness, Accident, Hospital Indemnity and Pet Insurance options
• 13. Health Savings Account (HSA) with employer contribution

SailPoint is an equal opportunity employer and we welcome all qualified candidates to apply to join our team. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other category protected by applicable law.