Sr. Technology Compliance Product Owner

Adobe; New York (NY); On-site; USD 157,900 - 228,575; Full time

Job summary

Adobe seeks an experienced Program Ownership & Leadership professional to steer complex governance, risk, and compliance programs across security, engineering, legal, and product teams. You will plan, execute, and report on initiatives, manage issues, and communicate with senior leadership.

You will develop expertise in SOC/NIST/ISO frameworks, mentor staff, and drive scalable controls and evidence collection.

Qualifications

• 5–8+ years in Governance, Risk & Compliance (GRC), Information Security, Audit, Risk Management, or related field.
• Understanding of SOC 1/2/3, ISO 27001, HIPAA, NIST, CSA STAR, FedRAMP, or similar frameworks.
• Experience driving multi‑functional programs involving Security, Engineering, Product, Legal, Privacy, HR, and external auditors.
• Strong executive communication and presentation skills, translating technical concepts into business-focused recommendations.
• Ability to work in ambiguous environments and pro-actively identify and mitigate risks.

Responsibilities

• Independently lead complex governance, risk and compliance programs from initiation through completion.
• Drive planning, execution, issue management, reporting, and partner communications.
• Own program outcomes with minimal strategic direction.
• Lead multi-functional working groups and coordinate activities across multiple organizations.
• Contribute to staff development and raise the overall quality of delivery across the organization.
• Coordinate audits, evidence collection, and remediation management.
• Develop expertise in applicable compliance frameworks and Adobe's Common Controls Framework.

Skills

GRC / InfoSec experience

Executive communication

Analytical & problem-solving

Risk identification & mitigation

Cross-functional leadership

Education

Certifications such as CISA/CRISC/CISSP or equivalent

Tools

Cloud platforms (AWS, Azure, GCP)

Job description

Program Ownership & Leadership

• Independently lead complex compliance and assurance programs from initiation through completion.
• Drive planning, execution, issue management, reporting, and partner communications.
• Own program outcomes with minimal strategic direction.
• Lead multi-functional working groups and coordinate activities across multiple organizations.
• Proactively identify risks, dependencies, and execution challenges and drive resolution plans.

Audit & Compliance Leadership

• Serve as the primary Tech GRC lead for internal readiness assessments, regulatory audits, certifications, and external assurance engagements.
• Coordinate audit planning, evidence collection, walkthroughs, testing activities, auditor interactions, and remediation management.
• Develop and maintain expertise in applicable compliance frameworks and Adobe's Common Controls Framework (CCF).
• Provide mentorship on control design, test strategies, and compliance requirements.

Partner Management

• Independently manage relationships with partners up to the senior manager and director level.
• Present recommendations, findings, risk assessments, and program status to management audiences.
• Influence decision-making through strong business insight, technical credibility, and data‑driven analysis.
• Build trusted partnerships across Security, Engineering, Legal, Privacy, Product, HR, and external auditors.

Domain Expertise

• Develop deep expertise in multiple compliance frameworks and associated technologies.
• Serve as a trusted advisor to product teams, security teams, and Tech GRC leadership.
• Support developing staff and help raise the overall quality of delivery across the organization.
• Contribute to internal documentation, standards, training materials, and knowledge‑sharing initiatives.

Process Improvement & Scale

• Drive operational improvements that improve efficiency, consistency, and audit readiness.
• Build repeatable processes, templates, dashboards, and governance mechanisms.
• Find opportunities for automation and collaborate with GRC Engineering to improve control monitoring and evidence collection.
• Contribute to critical initiatives that improve Tech GRC capabilities and maturity.

What you need to succeed

• 5‑8+ years of experience in Governance, Risk & Compliance (GRC), Information Security, Audit, Risk Management, or a related field.
• Solid understanding of industry frameworks and standards such as SOC 1/2/3, ISO 27001, ISO 9001, ISO 42001, HIPAA, CSA STAR, FedRAMP, NIST, or similar regulatory and compliance requirements.
• Experience driving multi‑functional programs involving Security, Engineering, Product, Legal, Privacy, HR, and external auditors.
• Strong executive communication and presentation skills, with the ability to translate technical and compliance concepts into clear business‑focused recommendations.
• Strong analytical, problem‑solving, and organizational skills with exceptional attention to detail.
• Ability to work effectively in ambiguous environments, exercise good judgment, and proactively identify and mitigate risks before they become critical issues.

Preferred Qualifications

• Experience leading large‑scale assurance programs such as internal preparedness evaluations, enterprise audit portfolios, certification readiness initiatives, or regulated product onboarding efforts.
• Familiarity with Adobe's Common Controls Framework (CCF) or similar enterprise control frameworks.
• Experience managing external assessor relationships and leading customer‑facing or regulator‑facing audits.
• Knowledge of cloud technologies (AWS, Azure, GCP), security technologies, and modern software development practices.
• Demonstrated success mentoring junior team members and raising quality standards across a team or program.
• Professional certifications such as CISA, CRISC, CISSP, CISM, ISO 27001 Lead Auditor, ISO 42001 Lead Implementer/Auditor, PCI ISA, or equivalent.

About Adobe

About Adobe

Adobe empowers everyone to create through innovative platforms and tools that unleash creativity, productivity and personalized customer experiences. Adobe’s industry‑leading offerings including Adobe Acrobat Studio, Adobe Express, Adobe Firefly, Creative Cloud, Adobe Experience Platform, Adobe Experience Manager, and GenStudio enable people and businesses to turn ideas into impact, powered by AI and driven by human ingenuity.

Our 30,000+ employees worldwide are creating the future and raising the bar as we drive the next decade of growth. We’re on a mission to hire the very best and believe in creating a company culture where all employees are empowered to make an impact. At Adobe, we believe that great ideas can come from anywhere in the organization. The next big idea could be yours.

Equal Employment Opportunity

Adobe is proud to be an Equal Employment Opportunity employer. We do not discriminate based on gender, race or color, ethnicity or national origin, age, disability, religion, sexual orientation, gender identity or expression, veteran status, or any other protected characteristic. Learn more.

Accessibility

Adobe aims to make our Careers website and recruiting process accessible to any and all users. If you have a disability or special need that requires accommodation to navigate our website or complete the application process, email [e-mail] or call [phone].

AI Use Guidelines for Interviews

Our interviews are designed to reflect your own skills and thinking. The use of AI or recording tools during live interviews is not permitted unless explicitly invited by the interviewer or approved in advance as part of a reasonable accommodation. If these tools are used inappropriately or in a way that misrepresents your work, your application may not move forward in the process.

At Adobe, we empower employees to innovate with AI – and we look for candidates eager to do the same. As part of the hiring experience, we provide clear guidance on where AI is encouraged during the process and where it’s restricted during live interviews. See how we think about AI in the hiring experience.

Expected Pay Range

The U.S. pay range for this position is $113,100 – $228,575 annually. Pay within this range varies by work location and may also depend on job‑related knowledge, skills, and experience. In California, the pay range for this position is $157,900 – $228,575. In New York, the pay range for this position is $157,900 – $228,575. In Washington, the pay range for this position is $148,600 – $215,200.

In addition, certain roles may be eligible for long‑term incentives in the form of a new hire equity award.

State‑Specific Notices

California: Adobe will consider qualified applicants with arrest or conviction records for employment in accordance with state and local laws and “fair chance” ordinances.

Colorado: If this role is open to hiring in Colorado, the application window will remain open until at least the date and time stated above in Pacific Time, in compliance with Colorado pay transparency regulations. If this role does not have Colorado listed as a hiring location, no specific application window applies, and the posting may close at any time based on hiring needs.

Massachusetts: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.