Engineering Manager I, Commercial Audit

What you'll do

• Lead the strategy, roadmap, and execution of commercial security compliance programs and audits like SOC2, PCI, and HIPAA.
• Manage a team of engineers and analysts to transition GRC functions into automated "compliance-as-code" workflows.
• Develop internal tools and CI/CD integrations to automate evidence collection and reduce manual operational toil.
• Partner with Information Security to operationalize a common control framework within the company's cloud-native architecture.
• Define and track key program metrics including control coverage, audit efficiency, and automation adoption rates.
• Embed compliance-by-design into infrastructure and engineering processes through collaboration with internal technical teams.
• Translate complex regulatory requirements into plain language for engineers, leadership, and external auditors.

What we're looking for

• Experience leading or managing teams in security engineering, GRC, or risk management.
• Experience using AI to build automation and tooling for a GRC engineering approach.
• Strong technical background including the ability to review code in Python and Go.
• Ability to interpret architecture diagrams and understand infrastructure like Kubernetes and AWS/GCP/Azure.
• Deep understanding of modern compliance frameworks such as HIPAA, SOC2, PCI, ISO 27001, and FedRAMP.
• Experience implementing compliance at scale within cloud-native environments and SaaS companies.
• Proven experience as a people leader focused on mentorship, team growth, and inclusion.
• Export control regulations, candidates should be eligible for any.