Risk and Compliance Senior Manager

Atlassian•San Francisco, CA

1d•$126,990 - $199,750•Hybrid

About The Position

The Risk and Compliance Senior Manager at Atlassian will play a key role in driving the company's risk and compliance strategy across cloud and enterprise programs. This role requires deep expertise in compliance frameworks, risk management, and internal controls, combined with the ability to lead cross-functional initiatives and influence stakeholders at all levels. The Senior Manager will champion process excellence, lead audit activities, and ensure Atlassian's compliance posture remains strong and audit-ready across multiple certifications and regulatory obligations.

Requirements

7+ years of experience in Technology Risk Management, Compliance, or Information Security, preferably in a large-scale SaaS/cloud environment
Deep expertise in compliance frameworks: SOC 2, ISO 27K, HIPAA, IRAP, PCI or C5 are a strong bonus
Proven experience leading external audit activities, managing evidence collection, and driving remediation programs
Strong understanding of internal control design, testing, and documentation
Demonstrated ability to collaborate with and influence global, cross-functional teams with ambiguity and uncertainty
Excellent verbal and written communication skills — able to translate complex risk and compliance concepts for technical and non-technical audiences at all levels
Experience with scoping, project tracking, risk management, and process improvement in a high-velocity environment

Nice To Haves

Relevant certifications (CISA, CISM, CRISC, or CISSP) are beneficial
Experience with Jira and Confluence is a plus

Responsibilities

Lead compliance program delivery — own the annual compliance plan and drive robust internal control programs, integrating innovative strategies and anticipating future needs in practices, tools, and processes
Champion audit activities — lead and organize audit activities end-to-end, including evidence collection, stakeholder interviews, and remediation follow-up; ensure audit-ready artifacts are maintained across SOC 2, ISO 27001, HIPAA, and other applicable frameworks
Manage control deficiencies — drive comprehensive analysis of deficiencies identified through reviews, communicate complex findings, and ensure diligent follow-up for resolution
Collaborate strategically — align team objectives with broader organizational goals; foster commitment and motivation across teams and business partners to ensure business impact
Build business cases — identify business issues impacting multiple teams, initiate strategic projects or changes, and drive compelling business cases with recommended solutions to leadership
Influence and advise — serve as an indispensable trusted advisor for business partners and cross-functional peers; recognize strategic issues and initiate high-level discussions to help partners overcome broader challenges
Share knowledge and amplify impact — actively share expertise through mentoring, coaching, and contributing to team-wide knowledge management practices; deploy content across Atlassian using sophisticated knowledge access tools
Drive continuous improvement — lead improvements in processes, metrics, reporting, and analytics for the R&C function; seek opportunities to streamline audit facilitation and stakeholder collaboration