Remote Compliance Manager: GRC & Audit Programs

Commvault

New York (NY)

Remote

USD 140,000 - 190,000

Full time

5 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

Professional development

Career growth

Inclusive culture

Global benefits package

Job summary

Commvault is seeking a Compliance Manager to join the GRC team. You will oversee audit and certification maintenance for 12+ commercial audits, lead program operations, and partner with teams to strengthen controls across the business.

In this role you will drive remediation, define actionable compliance metrics, and translate evolving regulations into practical program improvements. A senior, cross‑functional posture is essential to success in our global compliance program.

Qualifications

7+ years of professional experience in GRC, information security, and/or audit, preferably within a global technology or SaaS organization.
Experience developing and maintaining policies, procedures, control documentation, and other compliance program materials.
Comfort using AI and automation, and able to rely on practical technical skills to adapt tools and workflows to GRC needs, improve evidence collection and control monitoring, and reduce manual effort.
Strong analytical skills, attention to detail, and the ability to synthesize complex information into clear conclusions and recommendations.
Proven ability to build effective cross-functional relationships, influence stakeholders, navigate competing priorities, and drive work through completion.
Experience overseeing global compliance requirements, privacy requirements, and/or regulated cloud environments.
Relevant professional certifications such as CISA, CISM, CISSP, CRISC, or ISO 27001 Lead Auditor/Implementer are a plus.

Responsibilities

Lead the ongoing operation and maturity of Commvault's global audit and certification programs, owning audit maintenance, evidence collection, readiness, and remediation while driving a scalable, top-tier compliance program.
Identify gaps and opportunities to strengthen control maturity, and partner with control owners to implement sustainable improvements.
Oversee the buildout, automation, and ongoing refinement of controls and tests in Commvault's GRC tool Vanta, partnering with technical teams and control owners to align testing with compliance requirements, validate test results and evidence quality, and establish clear ownership and exception workflows. Drive reliable continuous monitoring and reduce manual effort to support a scalable, mature compliance program.
Define and report actionable compliance metrics covering control effectiveness, monitoring coverage, automation adoption, audit readiness, and remediation progress. Use trends to prioritize improvements and provide clear visibility into program health and maturity.
Partner across Information Security, Legal, Engineering, Product, and other business functions to embed compliance into day‑to‑day operations, establish clear control accountability, and build practical, sustainable processes that scale with the business.
Work closely with Customer Trust and Risk teams to clarify and communicate audit requirements, elevate gaps and issues to the appropriate stakeholders, and coordinate timely resolution.
Monitor evolving regulations, standards, and industry expectations, assess their impact on Commvault's compliance programs, and translate relevant changes into prioritized program and control improvements.
Serve as a trusted senior resource for day‑to‑day compliance guidance, helping stakeholders navigate requirements and make risk‑informed decisions while supporting broader priorities across Commvault's global compliance program.