Principal Product Manager, Security & Compliance
About The Position
We are seeking a high-impact Principal Product Manager to lead ClickHouse’s strategy for highly regulated sectors, specifically focusing on FedRAMP compliance and the global expansion of our Sovereign Cloud offerings. As ClickHouse Cloud scales to support the world’s largest enterprise and public-sector customers, you will be responsible for ensuring our platform meets the most stringent security, isolation, and data residency requirements. This role sits at the intersection of product strategy, security engineering, and compliance. You will own the roadmap for achieving FedRAMP certification and define the product architecture for deployment in restricted environments like the European Sovereign Cloud (ESC) and the Kingdom of Saudi Arabia (KSA).
Requirements
- 8+ years of product management experience, with at least 3 years deeply focused on cloud security, infrastructure, or enterprise SaaS compliance.
- Deep understanding of FedRAMP (Moderate/High) requirements and the process of achieving certification for a multi-tenant cloud service.
- Strong grasp of cloud architectures (AWS, GCP, Microsoft Azure), including VPC peering, private endpoints, encryption (BYOK/KMS), and multi-tenant security.
- Familiarity with global data sovereignty trends and regulations such as GDPR, and their impact on cloud region strategy.
- Exceptional ability to explain complex compliance and technical concepts to both engineering teams and executive stakeholders.
- Proven track record of working cross-functionally across legal, security, operations, and sales to launch products in regulated markets.
Nice To Haves
- Prior experience securing a data platform, database product, or real-time analytics service.
- Experience commercializing open-source technologies for enterprise-grade deployments.
Responsibilities
- Define and execute the multi-year roadmap to achieve FedRAMP Moderate certification and, eventually, FedRAMP High certification for ClickHouse product offerings.
- Partner with engineering and the compliance team to ensure product capabilities support SOC 2, ISO 27001, HIPAA, PCI and other frameworks.
- Translate complex federal security requirements into actionable product specifications for Identity and Access Management (IAM), encryption, and audit logging, personnel access.
- Serve as the primary product nominee for FIPS compliance modules and government-specific licensing models.
- Lead the product strategy for the European Sovereign Cloud (ESC) and KSA regions, navigating prerequisites including legal, partnership (e.g., CNTXT), and infosec requirements.
- Define data residency and personnel control requirements (e.g., in-country staff, cleared personnel) to support organizational data sovereignty.
- Collaborate with AWS, Microsoft Azure and Google Cloud on specialized deployment packages like Assured Workloads for restricted jurisdictions.
Benefits
- Employer contributions towards your healthcare.
- Stock options.
- Flexible time off in the US, generous entitlement in other countries.
- A $500 Home office setup if you’re a remote employee.
- Opportunities to engage with colleagues at company-wide offsites.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Principal
Education Level
No Education Listed
