Manager, Compliance and Audit

SailPoint Technologies Holdings, Inc.; United States; On-site; USD 102,000 - 172,000; Full time

Benefits offered by this job

Health and wellness coverage

401(k) with company matching

Paid holidays

Job summary

SailPoint is seeking a Manager, Compliance and Audit with demonstrated leadership to drive the Strategy and Risk organization’s compliance program. You will own end‑to‑end audit lifecycle, embedding compliance into product development and GTM activities while leading a team of analysts and auditors.

This role is based in the United States and partners with cross‑functional stakeholders to continuously improve our security posture.

Qualifications

• 7+ years in compliance or GRC with leadership experience
• FedRAMP access requirements
• Knowledge of NIST CSF, ISO 27001, FedRAMP and related best practices

Responsibilities

• Own and maintain the company's compliance framework(s) and end‑to‑end audit lifecycle, including SOC 2 Type II, ISO 27001, FedRAMP, C5, and other relevant certifications
• Manage, mentor, and develop a team of compliance professionals, providing regular feedback, coaching, and support for career growth
• Set team priorities and distribute workload across concurrent audits, questionnaires, and compliance initiatives
• Drive process improvements in the current program in alignment with relevant regulatory frameworks and best practices (e.g., NIST)
• Facilitate and evaluate readiness for new and emerging compliance obligations to achieve SailPoint’s compliance goals
• Partner with cross‑functional teams to ensure compliance requirements are integrated into business processes
• Optimize existing processes and leverage automation/tooling, such as automated evidence collection and a unified controls framework, to build efficient processes and workflows
• Serve as a subject matter expert on compliance matters for internal stakeholders and become the primary liaison with external auditors as well as certification bodies
• Lead the delivery of compliance updates to leadership and cross‑functional stakeholders

Skills

Leadership

People Development

Strategic thinking

Communication

Analytical

Decision making

Change management

Staffing strategy

Education

Certifications: CISSP, CISA, CISM, CRISC

Job description

SailPoint is seeking a Manager, Compliance and Audit with demonstrated competence and thought leadership capability to contribute to the success of our Strategy and Risk organization. As a provider of both SaaS and enterprise software for some of the world's most prestigious organizations, SailPoint strives for best‑in‑class security. The Manager of Compliance and Audit will lead our Compliance program, ensuring the organization meets the security and regulatory expectations of enterprise customers, regulators, and industry standards. This role owns the end‑to‑end management of multiple, concurrent compliance frameworks (SOC 2, ISO 27001, FedRAMP, C5, and others), drives process improvements and automation across the compliance function, and partners closely with cross‑functional stakeholders to embed compliance into how we build and sell our product. In this role, you will lead an existing team of analysts and auditors to drive maturity across our compliance and audit programs, not only aligning our program with industry best practices but also leading our readiness for additional compliance frameworks or laws. This is a challenging and impactful role, offering the opportunity to work with influential internal and external stakeholders while driving continuous improvement of our compliance program.

This role will join an existing, capable team of both emerging and established talent. They’ll have the opportunity to shape and drive SailPoint’s compliance and audit activities. They’ll already be comfortable with the 4 I’s at SailPoint (individual, Impact, Innovation, and Integrity) even if they’re new to the concept. They will embrace new challenges and will be a positive contributor to an already positive work culture and environment. This role will be a vital member of the CISO team and will be based in the United States.

Responsibilities:

• Own and maintain the company's compliance framework(s) and end‑to‑end audit lifecycle, including SOC 2 Type II, ISO 27001, FedRAMP, C5, and other relevant certifications
• Manage, mentor, and develop a team of compliance professionals, providing regular feedback, coaching, and support for career growth
• Set team priorities and distribute workload across concurrent audits, questionnaires, and compliance initiatives
• Drive process improvements in the current program in alignment with relevant regulatory frameworks and best practices (e.g., NIST)
• Facilitate and evaluate readiness for new and emerging compliance obligations to achieve SailPoint’s compliance goals
• Partner with cross‑functional teams to ensure compliance requirements are integrated into business processes
• Optimize existing processes and leverage automation/tooling, such as automated evidence collection and a unified controls framework, to build efficient processes and workflows
• Serve as a subject matter expert on compliance matters for internal stakeholders and become the primary liaison with external auditors as well as certification bodies
• Lead the delivery of compliance updates to leadership and cross‑functional stakeholders

Requirements:

• Meet FedRAMP access requirements
• 7+ years of work experience in compliance or GRC, including at least 3 years in leadership roles
• Suggested certifications: CISSP, CISA, CISM, CRISC, or other relevant certifications
• Strong leadership and people development skills, including coaching, mentoring, performance management, and fostering a culture of continuous improvement
• Comprehensive knowledge of information security governance, risk management, compliance, and industry frameworks, including NIST Cybersecurity Framework (CSF), ISO 27001, FedRAMP, and related best practices
• Exceptional written and verbal communication skills, including the ability to communicate complex information clearly and effectively to executive leadership, auditors, customers, and non‑technical stakeholders
• Analytical expertise, close attention to detail, critical thinking, logic, a solution orientation, and an ability to learn and adapt quickly
• Experience creating and maintaining a staffing strategy, efficient assignment of responsibilities, and regular metrics/reporting
• Complex decision‑making skills, with an ability to clearly convey the relative costs and benefits of potential actions and a recommendation

The pathway to success:

First 30 Days: Understand the Landscape

Within your first month, you will focus on integrating with the team and understanding the current state of our compliance programs. You will meet with key internal stakeholders across various departments to learn about existing processes, and connect with our external auditors to grasp the current audit landscape.

First 60 Days: Shape the Future

By the end of your second month, you will be expected to assess the program’s needs and begin formulating a strategic roadmap for the future of compliance at the company. Working with your team, you will identify opportunities for refinement and upscaling, laying the groundwork for a forward‑looking compliance program.

First 90 Days: Execute and Lead

In your third month, you will shift your focus to execution, beginning to implement the strategic roadmap you’ve developed. You will actively direct your team, manage their priorities, and provide crucial support for our go‑to‑market initiatives, ensuring compliance is a key enabler of our business growth.

Benefits and Compensation listed vary based on the location of your employment and the nature of your employment with SailPoint. As a part of the total compensation package, this role may be eligible for the SailPoint Corporate Bonus Plan or a role‑specific commission, along with potential eligibility for equity participation. SailPoint maintains broad salary ranges for its roles to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect SailPoint’s differing products, industries, and lines of business. Candidates are typically placed into the range based on the preceding factors as well as internal peer equity. We estimate the base salary, for US‑based employees, will be in this range from (min-max, USD): $101,900 - $171,690.00

Benefits Overview

• 1. Health and wellness coverage: Medical, dental, and vision insurance
• 2. Disability coverage: Short‑term and long‑term disability
• 3. Life protection: Life insurance and Accidental Death & Dismemberment (AD&D)
• 4. Additional life coverage options: Supplemental life insurance for employees, spouses, and children
• 5. Flexible spending accounts for health care, and dependent care; limited purpose flexible spending account
• 6. Financial security: 401(k) Savings and Investment Plan with company matching
• 7. Time off benefits: Flexible vacation policy
• 8. Holidays: 8 paid holidays annually
• 9. Sick leave
• 10. Parental support: Paid parental leave
• 11. Employee Assistance Program (EAP) and Care Counselors
• 12. Voluntary benefits: Legal Assistance, Critical Illness, Accident, Hospital Indemnity and Pet Insurance options
• 13. Health Savings Account (HSA) with employer contribution

SailPoint is an equal opportunity employer and we welcome all qualified candidates to apply to join our team. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other category protected by applicable law.

The employment policy of SailPoint is to provide equal opportunity to all persons, and it is SailPoint’s policy to take affirmative action to employ and advance in employment protected veterans and individuals with disabilities. It is SailPoint’s policy to recruit, hire, train and promote qualified individuals in all job titles, and ensure that all other personnel actions are administered without regard to race, color, religion, national origin, sex, military and/or veteran status, disability, or other legally protected status, and we will ensure that all employment decisions are based only on valid job requirements. SailPoint does not discriminate on the basis of national origin or citizenship status as provided under the Immigration Reform and Control Act of 1986. Employees and applicants shall not be subjected to harassment, intimidation, threats, coercion, or discrimination because they have engaged in or may engage in any of the following activities: Filing a complaint; Assisting or participating in an investigation, compliance evaluation, hearing, or any other activity related to the administration of the affirmative action provisions of Section 503, VEVRAA, or any other Federal, State or local law requiring equal opportunity for individuals with disabilities or protected veterans; Opposing any act or practice made unlawful by Section 503, VEVRAA, or their implementing regulations in this part, or any other Federal, State or local law requiring equal opportunity for individuals with disabilities or protected veterans; or Exercising any other right protected by section 503, VEVRAA or their implementing regulations.

SailPoint will also provide reasonable accommodation to known physical or mental limitations of an otherwise qualified employee or applicant for employment, unless the accommodation would impose undue hardship on the operation of our business. SailPoint’s affirmative action program contains an audit and reporting system which enables us to measure the effectiveness of our program, indicate any need for remedial action, determine the degree to which our objectives have been attained, determine whether protected veterans and individuals with disabilities had had the opportunity to participate in company-sponsored activities, measure our compliance with the program’s specific obligations, and document actions taken to comply with these obligations.

SailPoint is a leading provider of identity security for the modern enterprise. Enterprise security starts and ends with identities and their access, yet the ability to manage and secure identities today has moved well beyond human capacity. Using a foundation of artificial intelligence and machine learning, the SailPoint Identity Security Platform delivers the right level of access to the right identities and resources at the right time—matching the scale, velocity, and environmental needs of today’s cloud-oriented enterprise. Our intelligent, autonomous, and integrated solutions put identity security at the core of digital business operations, enabling even the most complex organizations across the globe to build a security foundation capable of defending against today’s most pressing threats.