Remote-First FedRAMP & Compliance Program Manager

PlanetScale; United States; Remote; USD 175,000 - 200,000; Full time

Job summary

PlanetScale is seeking a Senior Program Manager to oversee the FedRAMP readiness and lifecycle, plus ongoing SOC 1/2, PCI DSS and other compliance efforts. You will coordinate across IT, Engineering, Legal, and People to manage privacy, data protection risks, and remediation efforts in a remote-first environment.

You will collaborate with external auditors and legal affairs, contribute to risk assessments, and leverage industry standards to reduce security exposure while earning trust with

Qualifications

• 5+ years experience auditing in the technology sector.
• Experience with SOC 2 and PCI DSS.
• Excellent interpersonal, verbal, and written communication skills with the ability to communicate compliance concepts to a broad range of stakeholders.
• Comfortable working in a remote-first, asynchronous environment across time zones.
• Experience with external auditors and legal affairs.
• Experience contributing to company-wide risk assessments.
• Knowledge of cloud providers (AWS, Azure, GCP).

Responsibilities

• Oversee FedRAMP readiness and ATO from start to finish.
• Act as primary compliance point of contact for audits (SOC 1/2, PCI, FedRAMP).
• Establish and report on KPIs and maturity metrics for audit programs.
• Collaborate across IT, Engineering, Legal, and People to address privacy and data protection risks.
• Assess security and compliance gaps and implement remediating controls.

Skills

FedRAMP

SOC 2/PCI

Audits

Remote-first

Auditors

Risk assessments

Cloud providers

Job description

PlanetScale is seeking a Senior Program Manager to oversee the FedRAMP readiness and lifecycle, plus ongoing SOC 1/2, PCI DSS and other compliance efforts. You will coordinate across IT, Engineering, Legal, and People to manage privacy, data protection risks, and remediation efforts in a remote-first environment.

You will collaborate with external auditors and legal affairs, contribute to risk assessments, and leverage industry standards to reduce security exposure while earning trust with