Manager, Compliance and Audit

SailPoint; United States; On-site; USD 102,000 - 172,000; Full time

Benefits offered by this job

Health Insurance

Disability Insurance

Life Insurance

401(k) Matching

Flexible vacation

8 holidays

Job summary

SailPoint is seeking a Manager, Compliance and Audit to lead the Strategy and Risk organization’s compliance program across SOC 2, ISO 27001, FedRAMP, and other frameworks. You will mentor a team of analysts and auditors, enforce regulatory readiness, and drive automation to scale processes.

You will partner with cross-functional teams to embed compliance in how SailPoint builds and sells products, reporting to senior leadership within the CISO-derived structure.

Qualifications

• Demonstrated leadership and people development skills.
• Broad knowledge of information security governance, risk management, and regulatory frameworks (NIST CSF, ISO 27001, FedRAMP).
• Excellent written and verbal communication, able to convey complex info to executives, auditors, customers, and non-technical stakeholders.
• Experience creating and maintaining a staffing strategy and regular metrics/reporting.
• Ability to make complex decisions with clear cost/benefit reasoning.

Responsibilities

• Own and maintain the company's compliance frameworks and end-to-end audit lifecycle (SOC 2 Type II, ISO 27001, FedRAMP, C5).
• Lead, mentor, and develop a team of compliance professionals; provide coaching for career growth.
• Set team priorities and manage concurrent audits, questionnaires, and compliance initiatives.
• Drive process improvements aligning with regulatory frameworks (e.g., NIST).
• Evaluate readiness for new compliance obligations to meet SailPoint's goals.
• Partner with cross-functional teams to embed compliance into business processes.
• Leverage automation and a unified controls framework to build efficient workflows.
• Serve as SME on compliance for internal stakeholders and liaise with external auditors and cert bodies.
• Deliver compliance updates to leadership and cross-functional stakeholders.

Skills

Leadership

GRC knowledge

Communication

Staffing strategy

Decision making

Job description

SailPoint is seeking a Manager, Compliance and Audit with demonstrated competence and thought leadership capability to contribute to the success of our Strategy and Risk organization. As a provider of both SaaS and enterprise software for some of the world's most prestigious organizations, SailPoint strives for best-in-class security.

The Manager of Compliance and Audit will lead our Compliance program, ensuring the organization meets the security and regulatory expectations of enterprise customers, regulators, and industry standards. This role owns the end-to-end management of multiple, concurrent compliance frameworks (SOC 2, ISO 27001, FedRAMP, C5, and others), drives process improvements and automation across the compliance function, and partners closely with cross-functional stakeholders to embed compliance into how we build and sell our product.

In this role, you will lead an existing team of analysts and auditors to drive maturity across our compliance and audit programs, not only aligning our program with industry best practices but also leading our readiness for additional compliance frameworks or laws. This is a challenging and impactful role, offering the opportunity to work with influential internal and external stakeholders while driving continuous improvement of our compliance program.

This role will join an existing, capable team of both emerging and established talent. They’ll have the opportunity to shape and drive SailPoint's compliance and audit activities. They’ll already be comfortable with the 4 I’s at SailPoint (individual, Impact, Innovation, and Integrity) even if they’re new to the concept. They will embrace new challenges and will be a positive contributor to an already positive work culture and environment.

This role will be a vital member of the CISO team and will be based in the United States.

Responsibilities:

• Own and maintain the company's compliance framework(s) and end-to-end audit lifecycle, including SOC 2 Type II, ISO 27001, FedRAMP, C5, and other relevant certifications
• Manage, mentor, and develop a team of compliance professionals, providing regular feedback, coaching, and support for career growth
• Set team priorities and distribute workload across concurrent audits, questionnaires, and compliance initiatives
• Drive process improvements in the current program in alignment with relevant regulatory frameworks and best practices (e.g., NIST)
• Facilitate and evaluate readiness for new and emerging compliance obligations to achieve SailPoint's compliance goals
• Partner with cross-functional teams to ensure compliance requirements are integrated into business processes
• Optimize existing processes and leverage automation/tooling, such as automated evidence collection and a unified controls framework, to build efficient processes and workflows
• Serve as a subject matter expert on compliance matters for internal stakeholders and become the primary liaison with external auditors as well as certification bodies
• Lead the delivery of compliance updates to leadership and cross-functional stakeholders

Requirements:

• Meet FedRAMP access requirements
• 7+ years of work experience in compliance or GRC, including at least 3 years in leadership roles
• Suggested certifications: CISSP, CISA, CISM, CRISC, or other relevant certifications
• Strong leadership and people development skills, including coaching, mentoring, performance management, and fostering a culture of continuous improvement
• Comprehensive knowledge of information security governance, risk management, compliance, and industry frameworks, including NIST Cybersecurity Framework (CSF), ISO 27001, FedRAMP, and related best practices
• Exceptional written and verbal communication skills, including the ability to communicate complex information clearly and effectively to executive leadership, auditors, customers, and non-technical stakeholders
• Analytical expertise, close attention to detail, critical thinking, logic, a solution orientation, and an ability to learn and adapt quickly
• Experience creating and maintaining a staffing strategy, efficient assignment of responsibilities, and regular metrics/reporting
• Complex decision-making skills, with an ability to clearly convey the relative costs and benefits of potential actions and a recommendation

The pathway to success:

First 30 Days: Understand the Landscape

Within your first month, you will focus on integrating with the team and understanding the current state of our compliance programs. You will meet with key internal stakeholders across various departments to learn about existing processes, and connect with our external auditors to grasp the current audit landscape.

First 60 Days: Shape the Future

By the end of your second month, you will be expected to assess the program's needs and begin formulating a strategic roadmap for the future of compliance at the company. Working with your team, you will identify opportunities for refinement and upscaling, laying the groundwork for a forward-looking compliance program.

First 90 Days: Execute and Lead

In your third month, you will shift your focus to execution, beginning to implement the strategic roadmap you've developed. You will actively direct your team, manage their priorities, and provide crucial support for our go-to-market initiatives, ensuring compliance is a key enabler of our business growth.

Benefits and Compensation listed vary based on the location of your employment and the nature of your employment with SailPoint.

As a part of the total compensation package, this role may be eligible for the SailPoint Corporate Bonus Plan or a role-specific commission, along with potential eligibility for equity participation. SailPoint maintains broad salary ranges for its roles to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect SailPoint’s differing products, industries, and lines of business. Candidates are typically placed into the range based on the preceding factors as well as internal peer equity. We estimate the base salary, for US-based employees, will be in this range from (min-max, USD):

$101,900 - $171,690.00

Base salaries for employees based in other locations are competitive for the employee’s home location.

Benefits Overview

• 1. Health and wellness coverage: Medical, dental, and vision insurance
• 2. Disability coverage: Short-term and long-term disability
• 3. Life protection: Life insurance and Accidental Death & Dismemberment (AD&D)
• 4. Additional life coverage options: Supplemental life insurance for employees, spouses, and children
• 5. Flexible spending accounts for health care, and dependent care; limited purpose flexible spending account
• 6. Financial security: 401(k) Savings and Investment Plan with company matching
• 7. Time off benefits: Flexible vacation policy
• 8. Holidays: 8 paid holidays annually
• 9. Sick leave
• 10. Parental support: Paid parental leave
• 11. Employee Assistance Program (EAP) and Care Counselors
• 12. Voluntary benefits: Legal Assistance, Critical Illness, Accident, Hospital Indemnity and Pet Insurance options
• 13. Health Savings Account (HSA) with employer contribution

SailPoint is an equal opportunity employer and we welcome all qualified candidates to apply to join our team. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other category protected by applicable law.

Alternative methods of applying for employment are available to individuals unable to submit an application through this site because of a disability. Contact [e-mail] or mail to 11120 Four Points Dr, Suite 100, Austin, TX 78726, to discuss reasonable accommodations. NOTE: Any unsolicited resumes sent by candidates or agencies to this email will not be considered for current openings at SailPoint.