Compliance Program Manager
Key Skills for This Role
Full Job Posting
What You’ll Do
Take primary responsibility for overseeing PlanetScale’s FedRAMP readiness and ATO process from start to finish
Act as the main compliance point of contact for all audits/assessments (i.e. SOC 1 & 2, PCI, FedRAMP) including audit plan preparation, review of documentation and evidence, evaluation of procedures, and external walkthroughs
Establish, track, and report on key performance indicators and maturity metrics related to audit and compliance programs
Work collaboratively across many internal teams (IT, Engineering, Legal, and People) to identify, manage, and implement solutions related to privacy, data protection risks, and compliance requirements to help meet our customer’s high expectations for data protection and privacy
Leverage knowledge of industry standards and best practices to assess the current state of security and compliance risks, identify areas of exposure, and continuously address the gaps by proposing and implementing remediating controls
What We’re Looking For
5+ years of experience contributing to and/or managing audits for a company in the technology sector, including demonstrable experience and subject matter expertise in FedRAMP.
Experience with SOC 2 and the PCI Data Security Standard, either as a contributor or control owner.
Excellent interpersonal, verbal, and written communication skills with the ability to communicate compliance and privacy related concepts to a broad range of technical and non-technical stakeholders
Comfort and experience in working in a remote-first organizational, oftentimes asynchronously across many teams and timezones
Demonstrated success and comfort working with external auditors, outside consultants, and legal affairs
Experience contributing to and/or managing companywide risk assessments
Experience and knowledge of cloud service providers and how to interact with them (AWS, Azure, GCP)
What else will help you be successful
Experience working with databases, developer tools, infrastructure, or other technical products
Certified Information Systems Security Professional (CISSP) preferred (CISA, or CISM)
Working knowledge of SQL, preferably with experience in MySQL and/or PostgreSQL
About You
- You are highly organized and able to operate in a startup environment, comfortable with ambiguous or changing situations. You thrive in an environment of cross-department collaboration and feel comfortable working without organizational silos or barriers. You have a passion to lead programs that directly impact and enable our organization to drive higher levels of success. You understand that security and compliance programs are revenue generators and directly influence our ability to sell to and maintain our most demanding customers.
- You are comfortable challenging the status quo while staying laser-focused on the task at hand: keeping PlanetScale secure and earning trust with our customers.
- 5+ years of experience contributing to and/or managing audits for a company in the technology sector, including demonstrable experience and subject matter expertise in FedRAMP.
- Experience with SOC 2 and the PCI Data Security Standard, either as a contributor or control owner.
- Excellent interpersonal, verbal, and written communication skills with the ability to communicate compliance and privacy related concepts to a broad range of technical and non-technical stakeholders
- Comfort and experience in working in a remote-first organizational, oftentimes asynchronously across many teams and timezones
- Demonstrated success and comfort working with external auditors, outside consultants, and legal affairs
- Experience contributing to and/or managing companywide risk assessments
- Experience and knowledge of cloud service providers and how to interact with them (AWS, Azure, GCP)
- What else will help you be successful
- Experience working with databases, developer tools, infrastructure, or other technical products
- Working knowledge of SQL, preferably with experience in MySQL and/or PostgreSQL
- Why PlanetScale
- We’re redefining how high-growth companies manage data at scale — and we work with some of the most exciting brands in gaming, consumer tech, and B2B SaaS. As a Customer Support Engineer, you’ll be on the front lines helping developers and businesses solve real production problems, while also shaping the product, documentation, and support systems that make PlanetScale better for every customer.
- PlanetScale is a profitable company with a philosophy centered around building small teams of p99 individuals and is recognized as one of the fastest growing companies in America.
- At PlanetScale we believe in supporting people to do their best work and thrive no matter the location. Our mission is to build a diverse, equitable, and inclusive company. We strive to build an inclusive environment where all people feel that they are equally respected and valued, whether they are a candidate or an employee. We welcome applicants of any educational background, gender identity and expression, sexual orientation, religion, ethnicity, age, citizenship, socioeconomic status, disability, pregnancy status, and veteran status.
- If you have a disability, please let us know if there’s any way we can make the interview process better for you; we’re happy to accommodate!
- Total Compensation and Pay Transparency
- An employee's total compensation consists of base salary + variable comp where appropriate + benefits + equity. A member of our Talent Acquisition team will be happy to answer any further questions when we engage with you to begin the interview process.
- Base salary range: $175,000 - $200,000 USD
Why PlanetScale
We’re redefining how high-growth companies manage data at scale — and we work with some of the most exciting brands in gaming, consumer tech, and B2B SaaS. As a Customer Support Engineer, you’ll be on the front lines helping developers and businesses solve real production problems, while also shaping the product, documentation, and support systems that make PlanetScale better for every customer.
PlanetScale is a profitable company with a philosophy centered around building small teams of p99 individuals and is recognized as one of the fastest growing companies in America.
At PlanetScale we believe in supporting people to do their best work and thrive no matter the location. Our mission is to build a diverse, equitable, and inclusive company. We strive to build an inclusive environment where all people feel that they are equally respected and valued, whether they are a candidate or an employee. We welcome applicants of any educational background, gender identity and expression, sexual orientation, religion, ethnicity, age, citizenship, socioeconomic status, disability, pregnancy status, and veteran status.
If you have a disability, please let us know if there’s any way we can make the interview process better for you; we’re happy to accommodate!
Total Compensation and Pay Transparency
An employee's total compensation consists of base salary + variable comp where appropriate + benefits + equity. A member of our Talent Acquisition team will be happy to answer any further questions when we engage with you to begin the interview process.
Base salary range: $175,000 - $200,000 USD
Preferred Qualifications
- Certified Information Systems Security Professional (CISSP) preferred (CISA, or CISM)
Responsibilities
- Take primary responsibility for overseeing PlanetScale’s FedRAMP readiness and ATO process from start to finish
- Act as the main compliance point of contact for all audits/assessments (i.e. SOC 1 & 2, PCI, FedRAMP) including audit plan preparation, review of documentation and evidence, evaluation of procedures, and external walkthroughs
- Establish, track, and report on key performance indicators and maturity metrics related to audit and compliance programs
- Work collaboratively across many internal teams (IT, Engineering, Legal, and People) to identify, manage, and implement solutions related to privacy, data protection risks, and compliance requirements to help meet our customer’s high expectations for data protection and privacy
- Leverage knowledge of industry standards and best practices to assess the current state of security and compliance risks, identify areas of exposure, and continuously address the gaps by proposing and implementing remediating controls
- 5+ years of experience contributing to and/or managing audits for a company in the technology sector, including demonstrable experience and subject matter expertise in FedRAMP.
- Experience with SOC 2 and the PCI Data Security Standard, either as a contributor or control owner.
- Excellent interpersonal, verbal, and written communication skills with the ability to communicate compliance and privacy related concepts to a broad range of technical and non-technical stakeholders
- Comfort and experience in working in a remote-first organizational, oftentimes asynchronously across many teams and timezones
- Demonstrated success and comfort working with external auditors, outside consultants, and legal affairs
- Experience contributing to and/or managing companywide risk assessments
- Experience and knowledge of cloud service providers and how to interact with them (AWS, Azure, GCP)
- Experience working with databases, developer tools, infrastructure, or other technical products
- Certified Information Systems Security Professional (CISSP) preferred (CISA, or CISM)
- Working knowledge of SQL, preferably with experience in MySQL and/or PostgreSQL
- You are highly organized and able to operate in a startup environment, comfortable with ambiguous or changing situations. You thrive in an environment of cross-department collaboration and feel comfortable working without organizational silos or barriers. You have a passion to lead programs that directly impact and enable our organization to drive higher levels of success. You understand that security and compliance programs are revenue generators and directly influence our ability to sell to and maintain our most demanding customers.
- You are comfortable challenging the status quo while staying laser-focused on the task at hand: keeping PlanetScale secure and earning trust with our customers.
- We’re redefining how high-growth companies manage data at scale — and we work with some of the most exciting brands in gaming, consumer tech, and B2B SaaS. As a Customer Support Engineer, you’ll be on the front lines helping developers and businesses solve real production problems, while also shaping the product, documentation, and support systems that make PlanetScale better for every customer.
- PlanetScale is a profitable company with a philosophy centered around building small teams of p99 individuals and is recognized as one of the fastest growing companies in America.
- At PlanetScale we believe in supporting people to do their best work and thrive no matter the location. Our mission is to build a diverse, equitable, and inclusive company. We strive to build an inclusive environment where all people feel that they are equally respected and valued, whether they are a candidate or an employee. We welcome applicants of any educational background, gender identity and expression, sexual orientation, religion, ethnicity, age, citizenship, socioeconomic status, disability, pregnancy status, and veteran status.
- If you have a disability, please let us know if there’s any way we can make the interview process better for you; we’re happy to accommodate!
- An employee's total compensation consists of base salary + variable comp where appropriate + benefits + equity. A member of our Talent Acquisition team will be happy to answer any further questions when we engage with you to begin the interview process.
- Base salary range: $175,000 - $200,000 USD
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at PlanetScale
Software Engineer - Sharded Postgres (Neki)
San Francisco, USA
AI Developer Experience Engineer
, USA
Video Editor
, USA
Software Engineer - Sharded Postgres (Neki)
San Francisco, USA
Software Engineer - PlanetScale Vitess
, USA
Developer Educator
, USA
Head of Events
San Francisco, USA
Software Engineer - Internal Tools
San Francisco, USA