Compliance Enablement Technical Program Manager

This is a fully remote position, open to applicants in Canada, +1 more country.

📋 Description

• Act as the primary technical subject-matter expert and main contact for the Trust and Assurance team.

• Analyze systems and controls, provide guidance on technical decisions, and pinpoint efficiencies in workflows and tools.

• Supervise control mapping, evidence gathering, monitoring processes, and GRC integrations with cloud services and internal systems.

• Convert technical controls into automated, ongoing checks.

• Broaden monitoring coverage and transition from manual reviews to continuous monitoring.

• Ensure that every control has a designated accountable owner.

• Assist with gap assessments and the implementation of new frameworks.

• Maintain controls in a state of continuous audit readiness.

• Collaborate with engineering teams to integrate compliance into workflows and processes.

• Oversee initiatives until completion.

• Relay compliance risks, control statuses, and program developments to both technical and non-technical stakeholders.

⛳️ Requirements

• Minimum of 4 years of experience in GRC, compliance, or a technical role related to supporting cybersecurity initiatives.

• Proven experience in leading programs and providing guidance or mentorship to others.

• Excellent program and project management capabilities.

• Familiarity with cybersecurity frameworks such as NIST 800-53, ISO 27001, SOC 2, and/or FedRAMP.

• Practical audit experience.

• Technical knowledge of AWS, Azure, or GCP, APIs, and data flows.

• Ability to lead technical discussions with engineers and subject-matter experts.

• Practical experience with a GRC or compliance-automation platform like LogicGate, ServiceNow, or Drata.

• Comfortable utilizing AI tools within compliance workflows.

• Exceptional written and verbal communication abilities.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent experience.

• Proficiency in writing code or scripts, such as Python (preferred).

• Experience with AI/ML-powered or agentic applications, API integrations, CI/CD pipelines, or production-grade services (preferred).

• Technical background in systems administration, software engineering, cloud security, or security engineering (preferred).

• Experience managing SOC 2 Type II, ISO 27001, FedRAMP, or NIST 800-53 audits from start to finish (preferred).

• Familiarity with OSCAL, Tenable, Splunk, Git, Terraform, Puppet, or Jenkins (preferred).

• Experience in SaaS, GovCloud, FinTech, or other highly regulated sectors (preferred).

• Professional certifications such as CISSP, CISM, CISA, CCSP, CCSK, or ISO 27001 Lead Auditor (preferred).

🏝️ Benefits

• Remote-first working approach.

• Employee-driven diversity and inclusion networks.

• Annual charity and fundraising activities.

• Volunteer days.

• Global initiatives for employee sustainability.

• International fitness and trivia contests.

• Global wellbeing days.

• Monthly wellbeing webinars and training sessions.

• Adjustments in the recruitment and selection process for applicants requiring support.