Compliance Program Manager

PlanetScale

2h • $175,000 - $200,000 • Remote

About The Position

PlanetScale is seeking a Program Manager to oversee the FedRAMP certification process and manage and evolve existing compliance commitments, including SOC 1, SOC 2, and PCI DSS. The role is part of the security and compliance team, which leads the corporate information security program to reduce risk across systems and build trust in PlanetScale’s products, features, and cloud services. The program supports internal employees as well as external customers and partners.

The manager will lead PlanetScale’s FedRAMP readiness and authorization-to-operate process, coordinate compliance audits and assessments, track program performance and maturity, and work across teams to address privacy, data protection, and compliance requirements. They will use industry standards and best practices to assess risks, identify gaps, and propose and implement remediating controls.

The successful candidate is organized, adaptable in a startup environment, effective in cross-functional collaboration, and comfortable working remotely and asynchronously across teams and time zones. They will help advance security and compliance programs that support customer trust and the company’s ability to serve demanding customers.

Requirements

• At least 5 years of experience contributing to and/or managing audits for a technology-sector company, including demonstrable FedRAMP experience and subject matter expertise.
• Experience with SOC 2 and the PCI Data Security Standard as a contributor or control owner.
• Excellent interpersonal, verbal, and written communication skills, including the ability to explain compliance and privacy concepts to technical and non-technical stakeholders.
• Comfort and experience working in a remote-first organization, often asynchronously across teams and time zones.
• Demonstrated success and comfort working with external auditors, outside consultants, and legal affairs.
• Experience contributing to and/or managing companywide risk assessments.
• Experience and knowledge of cloud service providers and how to interact with them, such as AWS, Azure, or GCP.
• Highly organized and able to operate in a startup environment with ambiguous or changing situations.
• Comfortable with cross-department collaboration and working without organizational silos or barriers.
• Able to lead programs that directly impact and enable organizational success.
• Comfortable challenging the status quo while staying focused on security and earning customer trust.

Nice To Haves

• Experience working with databases, developer tools, infrastructure, or other technical products.
• CISSP preferred; CISA or CISM also noted.
• Working knowledge of SQL, preferably with MySQL and/or PostgreSQL.

Responsibilities

• Oversee PlanetScale’s FedRAMP readiness and authorization-to-operate process from start to finish.
• Serve as the main compliance contact for SOC 1, SOC 2, PCI, and FedRAMP audits and assessments, including preparing audit plans, reviewing documentation and evidence, evaluating procedures, and conducting external walkthroughs.
• Establish, track, and report key performance indicators and maturity metrics for audit and compliance programs.
• Collaborate with IT, Engineering, Legal, and People teams to identify, manage, and implement solutions for privacy, data protection risks, and compliance requirements.
• Apply industry standards and best practices to assess security and compliance risks, identify exposure, and address gaps by proposing and implementing remediating controls.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed