Senior GRC & Audit Program Lead

Commvault; United States; On-site; USD 94,000 - 185,000; Full time

Benefits offered by this job

Professional development

Career growth

Inclusive culture

Global benefits package

Job summary

Commvault seeks a seasoned Compliance Manager to lead our global audit and certification programs and drive remediation across 12+ commercial audits. You will partner with Security, Legal, Engineering, and Product to embed compliance into everyday operations, leveraging AI and automation to strengthen controls, monitor evidence, and ensure audit readiness.

This role reports to the Director of GRC. You will oversee testing in Vanta, manage metrics, and help expand our compliant cloud environment

Qualifications

• 7+ years of experience in GRC, information security, and/or audit in a global tech/SaaS environment.
• Working knowledge of ISO 27001, SOC 2 Type 2, NIST CSF, NIST 800-53 or similar frameworks.
• Experience developing and maintaining policies, procedures, and control documentation.
• Comfort using AI and automation to improve evidence collection and monitoring.
• Strong analytical skills and attention to detail, with ability to synthesize complex information.
• Proven ability to drive cross-functional collaboration and cross-border compliance.
• Experience overseeing global compliance, privacy, or regulated cloud environments.
• Certifications such as CISA, CISM, CISSP, CRISC, or ISO27001 Lead Auditor/Implementer are a plus.

Responsibilities

• Lead ongoing operation and maturity of global audit and certification programs, including maintenance, evidence collection, readiness, and remediation.
• Identify gaps to strengthen control maturity and partner with control owners to implement improvements.
• Oversee buildout and refinement of controls and tests in the GRC tool (Vanta) with technical teams.
• Define and report actionable compliance metrics covering control effectiveness and remediation progress.
• Collaborate with Information Security, Legal, Engineering, Product, and other teams to embed compliance in day-to-day operations.
• Clarify audit requirements with Customer Trust and Risk teams and coordinate timely resolution.
• Monitor evolving regulations and translate changes into prioritized program improvements.
• Serve as a trusted senior resource for day-to-day compliance guidance.

Skills

GRC

InfoSec

Audit

ISO 27001

SOC 2

NIST CSF

Tools

Vanta

Job description

Commvault seeks a seasoned Compliance Manager to lead our global audit and certification programs and drive remediation across 12+ commercial audits. You will partner with Security, Legal, Engineering, and Product to embed compliance into everyday operations, leveraging AI and automation to strengthen controls, monitor evidence, and ensure audit readiness.

This role reports to the Director of GRC. You will oversee testing in Vanta, manage metrics, and help expand our compliant cloud environment