S
$102,899 – $137,718
Listed on Sourcegraph’s own careers site. You apply with them directly — we never stand between you and the employer.
What this role is
This role leads governance, risk, and compliance programs at a software infrastructure company, owning certifications like SOC 2 and ISO 27001 from end to end. It suits someone with hands-on experience building compliance programs in fast-moving tech environments who can translate framework requirements into practical controls and work across technical and non-technical teams.
Our summary, not Sourcegraph’s wording. The full posting is on their site.
What they ask for
Required
- 5+ years in governance, risk, compliance, or information security compliance
- End-to-end ownership of SOC 2 and ISO 27001 programs
- Direct experience managing external audits and certification processes
- Understanding of risk management, control design, and ISMS governance
- Ability to adapt compliance controls to organizational environment
- Familiarity with cloud-based technology environments
- Strong project management and cross-functional coordination skills
- Clear communication to both technical and non-technical audiences
- Hands-on execution mindset
Nice to have
- Experience with GDPR, HIPAA, HITRUST, FedRAMP, FISMA, or PCI DSS
- Experience with security questionnaires and customer assurance processes
- GRC platform or compliance automation tool experience
- CISA, CISSP, ISO 27001 Lead Implementer/Auditor, CRISC, or similar certifications
- Curiosity about AI and automation for compliance workflows