Compliance Manager

This is a fully remote position, open to applicants in New Jersey.

📋 Description

• Act as a senior member of the GRC team, directly reporting to the Director of GRC.

• Manage the audit and certification maintenance for over 12 commercial audits.

• Strategize and prepare for upcoming audits.

• Lead global operations for the audit and certification program, including maintenance, evidence collection, readiness, and remediation.

• Identify control deficiencies and collaborate with control owners to implement sustainable enhancements.

• Supervise the development, automation, and improvement of controls and tests within Vanta.

• Collaborate with technical teams and control owners to ensure testing aligns with compliance requirements, validate test results and evidence quality, and establish ownership and exception workflows.

• Promote continuous monitoring and minimize manual efforts.

• Define and report compliance metrics that encompass control effectiveness, monitoring coverage, automation adoption, audit readiness, and remediation progress.

• Work alongside Information Security, Legal, Engineering, Product, Customer Trust, Risk, and other business functions.

• Clarify and communicate audit requirements, escalate gaps and issues, and coordinate timely resolutions.

• Stay updated on evolving regulations, standards, and industry expectations, translating changes into prioritized program and control improvements.

• Provide senior-level day-to-day compliance guidance and support risk-informed decision-making across Commvault’s global compliance program.

⛳️ Requirements

• Over 7 years of professional experience in GRC, information security, and/or audit, ideally within a global technology or SaaS organization.

• Familiarity with common security and compliance frameworks and standards, such as ISO 27001, ISO 27701, SOC 2 Type 2, NIST CSF, NIST 800-53, or similar frameworks.

• Experience in developing and maintaining policies, procedures, control documentation, and other compliance program materials.

• Proficient in utilizing AI and automation, along with practical technical skills to adapt tools and workflows to GRC requirements, enhance evidence collection and control monitoring, and reduce manual efforts.

• Capability to learn new technologies, validate outputs, and exercise sound judgment to safeguard sensitive information.

• Strong analytical abilities and meticulous attention to detail.

• Skill in synthesizing complex information into clear conclusions and actionable recommendations.

• Demonstrated ability to foster effective cross-functional relationships, influence stakeholders, navigate competing priorities, and drive projects to completion.

• Experience in overseeing global compliance requirements, privacy requirements, and/or regulated cloud environments.

• Experience with FedRAMP, CMMC, GovRAMP, or SOX is preferred.

• Relevant professional certifications such as CISA, CISM, CISSP, CRISC, or ISO 27001 Lead Auditor/Implementer are advantageous.

🏝️ Benefits

• Ongoing professional development and product training.

• Clear opportunities for career growth and advancement.

• An inclusive company culture.

• A comprehensive global benefits package.