Manager, Compliance

Commvault•United States, NJ

7d•$93,500 - $185,150•Remote

About The Position

The Compliance Manager is a senior member of Commvault’s GRC team, reporting directly to the Director of GRC. The role oversees audit and certification maintenance for more than 12 commercial audits and supports planning and readiness for new audits. It leads audit program operations, partners with teams across the business to strengthen controls and drive remediation, and helps expand Commvault’s global compliance program as regulatory, customer, and business needs evolve. The position combines hands-on compliance expertise with strategic planning, translating complex requirements into practical solutions and supporting the trust organization. It includes maintaining audit programs, improving control maturity, building and refining automated controls and tests in Vanta, reporting program metrics, advising stakeholders, and monitoring evolving regulations and standards.

Requirements

At least 7 years of professional experience in GRC, information security, and/or audit.
Working knowledge of common security and compliance frameworks and standards, such as ISO 27001, ISO 27701, SOC 2 Type 2, NIST CSF, NIST 800-53, or similar frameworks.
Experience developing and maintaining policies, procedures, control documentation, and other compliance program materials.
Comfort using AI and automation, with practical technical skills to adapt tools and workflows to GRC needs, improve evidence collection and control monitoring, and reduce manual effort.
Ability to learn new technologies, validate outputs, and use sound judgment to protect sensitive information.
Strong analytical skills, attention to detail, and ability to synthesize complex information into clear conclusions and recommendations.
Ability to build effective cross-functional relationships, influence stakeholders, navigate competing priorities, and drive work to completion.
Experience overseeing global compliance requirements, privacy requirements, and/or regulated cloud environments.

Nice To Haves

Experience in a global technology or SaaS organization.
Experience with FedRAMP, CMMC, GovRAMP, or SOX.
Professional certifications such as CISA, CISM, CISSP, CRISC, or ISO 27001 Lead Auditor/Implementer.

Responsibilities

Lead the operation and maturity of Commvault’s global audit and certification programs, including audit maintenance, evidence collection, readiness, and remediation.
Identify control gaps and opportunities to strengthen control maturity, and partner with control owners to implement sustainable improvements.
Oversee the buildout, automation, and refinement of controls and tests in Vanta; coordinate with technical teams and control owners to align testing, validate results and evidence quality, and establish ownership and exception workflows.
Drive reliable continuous monitoring and reduce manual compliance effort.
Define and report compliance metrics covering control effectiveness, monitoring coverage, automation adoption, audit readiness, and remediation progress; use trends to prioritize improvements and communicate program health and maturity.
Partner with Information Security, Legal, Engineering, Product, and other business functions to embed compliance into operations, establish control accountability, and develop practical, scalable processes.
Work with Customer Trust and Risk teams to clarify and communicate audit requirements, escalate gaps and issues, and coordinate timely resolution.
Monitor regulatory, standards, and industry changes; assess their impact and translate relevant changes into prioritized program and control improvements.
Provide day-to-day compliance guidance to stakeholders, helping them navigate requirements and make risk-informed decisions while supporting priorities across the global compliance program.