Compliance Program Manager

Nominal•Washington, DC

About The Position

Nominal is looking for a Compliance Program Manager to lead the design and day-to-day operation of Nominal’s compliance program to enable responsible growth across commercial and defense work. This is a cross-functional role that partners closely with Legal, Security, Engineering, Business Development, and leadership on interpretation, escalation, and resolution of novel or high-risk regulatory issues. You’ll serve as a key owner of Nominal’s compliance posture — helping us navigate export control (ITAR/EAR requirements), cross-border data transfers, licensing and registration requirements, and jurisdictional questions across our technology and customer footprint. You’ll also help strengthen the internal controls, training, and operating rhythms that make compliance a durable, trusted part of how Nominal works. The position is well-suited for experienced operators who have worked closely with compliance, regulatory, or security programs and are ready to take on broader ownership of compliance systems and decision-making.

Requirements

5+ years of experience building, supporting, or managing compliance, regulatory, or risk programs in regulated environments, preferably within technology or product-driven organizations
Strong working knowledge of U.S. export controls (ITAR/EAR) and trade compliance expectations, including licensing processes
Ability to translate U.S. and international privacy, security, and export control requirements into practical processes, training, and workflows that support real-world product development and customer deployments
Excellent program management skills — able to drive multiple workstreams, meet deadlines, and operate with high ownership
Clear and confident communicator who can build trust across technical and non-technical teams
Detail-oriented, structured thinker who can operate well under ambiguity and in fast-moving environments

Nice To Haves

Prior experience supporting or acting as a Facility Security Officer (FSO), or willingness to learn and support the function in partnership with Legal and Security
Support process coordination across secure spaces, systems, and clearance-related requirements in partnership with our Security team
Oversee and support facility and personnel security requirements associated with Nominal’s U.S. government work, including coordination around clearances, secure facilities, and required government reporting
Partner with Security and Legal to design and scale practical processes for personnel security, clearance workflows, and facility compliance that enable the business to grow responsibly over time
Contribute to the design of scalable security and compliance processes that align personnel security, facility requirements, and export control obligations with Nominal’s broader compliance programs
Specific experience with European AI, data governance, and privacy regulatory frameworks (U.S. and/or EU)
CCEP, CIPP (U.S./E), or other relevant compliance certifications
Prior experience in defense tech, aerospace, or other dual-use environments

Responsibilities

Build, operationalize, and continuously improve Nominal’s compliance programs across core regulatory risk areas, with a focus on export controls, data governance, security, and privacy in a fast-moving product and customer environment
Navigate emerging and evolving regulatory regimes, including AI regulation, data access and portability requirements, and sector-specific rules affecting critical infrastructure, by helping Nominal assess applicability, design appropriate controls and audit trails, and engage credibly with customers on regulatory scope and obligations
Partner with Legal, Security, and business teams to support Nominal’s expanding international footprint, including compliance considerations related to cross-border data transfers, local regulatory expectations, and customer deployment models
Support compliance with export controls and cross-border data requirements, including navigating dual-use data scenarios where military, security, and civilian regulatory regimes may apply differently across jurisdictions
Coordinate audits, assessments, and compliance inquiries, supporting customer diligence, regulatory interactions, and internal readiness
Partner cross-functionally to enable execution, advising on compliance implications for new business opportunities, customer requirements, and international activities
Support customer and partner engagements related to compliance and regulatory posture, including explaining Nominal’s approach to regulatory applicability, auditability, and risk boundaries in complex or regulated customer environments
Monitor and help operationalize compliance with emerging AI-related regulations and standards, in partnership with Legal and Product teams, with a focus on practical implementation
Track emerging requirements, staying ahead of evolving regulations and standards relevant to dual-use software and advanced technology environments
Manage product classification and licensing workflows, including jurisdictional questions, commodity classification, and engagement with governing bodies as needed
Design and maintain Nominal’s broader corporate compliance framework, including anti-bribery and anti-corruption, insider trading, conflicts of interest, and code-of-conduct programs, in partnership with Legal and Finance
Lead internal reviews and investigations related to compliance issues, partnering with Legal, Security, and HR as appropriate to ensure consistent, fair, and timely outcomes
Support compliance with lobbying and government engagement requirements, including coordination around disclosures and recordkeeping as Nominal’s public-sector engagement grows
Create clarity through documentation and training, building internal awareness and repeatable processes that make compliance easy to follow and hard to break
In collaboration with our People team, help manage our LMS (Ethena) program providing training and guidance on compliance-related matters
Design and deliver role-appropriate compliance training and awareness programs, and embed compliance expectations into onboarding, business processes, and recurring operating rhythms