# Compliance Manager [IC3]

Hiring organization: [Sourcegraph](https://career.thegoodapps.co/organizations/sourcegraph)

Canonical page: https://career.thegoodapps.co/jobs/874c3fe8-c5c7-449f-8792-63fb1bd408c5

Listed on Sourcegraph's own careers site. Applications go to them directly.

- Seniority: Mid
- Location: Remote
- Remote: yes
- Salary: 102899 – 137718 USD per year

## Summary

This role leads governance, risk, and compliance programs at a software infrastructure company, owning certifications like SOC 2 and ISO 27001 from end to end. It suits someone with hands-on experience building compliance programs in fast-moving tech environments who can translate framework requirements into practical controls and work across technical and non-technical teams.

_Our summary, not Sourcegraph's wording._

## Skills named

Risk Management

## Required

- 5+ years in governance, risk, compliance, or information security compliance
- End-to-end ownership of SOC 2 and ISO 27001 programs
- Direct experience managing external audits and certification processes
- Understanding of risk management, control design, and ISMS governance
- Ability to adapt compliance controls to organizational environment
- Familiarity with cloud-based technology environments
- Strong project management and cross-functional coordination skills
- Clear communication to both technical and non-technical audiences
- Hands-on execution mindset

## Nice to have

- Experience with GDPR, HIPAA, HITRUST, FedRAMP, FISMA, or PCI DSS
- Experience with security questionnaires and customer assurance processes
- GRC platform or compliance automation tool experience
- CISA, CISSP, ISO 27001 Lead Implementer/Auditor, CRISC, or similar certifications
- Curiosity about AI and automation for compliance workflows

Apply on Sourcegraph's site: https://job-boards.greenhouse.io/sourcegraph91/jobs/6209697004