Manager, Compliance and Audit

About the role

SailPoint is seeking a Manager, Compliance and Audit to lead its Compliance program within the Strategy and Risk organization. The manager owns the end-to-end management of multiple concurrent compliance frameworks (SOC 2, ISO 27001, FedRAMP, C5 and others), drives process improvements and automation, and partners with cross-functional stakeholders to embed compliance into how the product is built and sold. The role leads an existing team of analysts and auditors, sits within the CISO team and is based in the United States.

Key responsibilities

• Own and maintain the company's compliance framework and audit lifecycle, including SOC 2 Type II, ISO 27001, FedRAMP, C5 and other certifications
• Manage, mentor and develop a team of compliance professionals, giving regular feedback, coaching and career support
• Set team priorities and distribute workload across concurrent audits, questionnaires and compliance initiatives
• Drive process improvements aligned with regulatory frameworks and best practices such as NIST
• Evaluate readiness for new compliance obligations and partner with cross-functional teams to integrate compliance into business processes
• Optimize processes using automation and tooling such as automated evidence collection and a unified controls framework
• Act as subject matter expert for internal stakeholders and primary liaison with external auditors and certification bodies
• Lead the delivery of compliance updates to leadership and stakeholders

Required profile

• 7+ years of experience in compliance or GRC, including at least 3 years in leadership roles
• Meets FedRAMP access requirements
• Experience creating and maintaining a staffing strategy, assigning responsibilities and producing metrics and reporting
• Strong leadership, coaching and mentoring skills, and exceptional written and verbal communication

Required skills

• Knowledge of information security governance, risk management and frameworks such as NIST Cybersecurity Framework (CSF), ISO 27001 and FedRAMP
• Suggested certifications: CISSP, CISA, CISM, CRISC or similar

What we offer

• Estimated base salary for US-based employees of $101,900 - $171,690, with possible bonus plan, commission and equity participation
• Medical, dental and vision insurance, disability, life insurance and flexible spending accounts
• 401(k) with company matching, 8 paid holidays, sick leave and paid parental leave
• Employee assistance program and voluntary benefit options