Lead Compliance Manager

Snyk - Boston, MA

Full-time - Senior

Boston, MA

Miscellaneous Manufacturing

About the position

The Lead Compliance Manager at Snyk is responsible for overseeing the compliance program within the organization, ensuring adherence to various commercial compliance frameworks such as ISO27001, SOC2, and FedRamp. This role involves leading compliance operations, evaluating internal compliance, and developing strategies to address compliance gaps. The position requires strong communication skills and the ability to work cross-functionally to promote a culture of continuous improvement and compliance awareness throughout the company.

Responsibilities

• Leading compliance program enablement and operations in support of the Senior Director of Risk, Compliance & Trust.
• Evaluating internal compliance against required framework controls to identify known gaps in compliance.
• Communicating found gaps in controls to peers, key stakeholders, and leadership.
• Developing plans and overseeing projects for treatment of compliance gaps, working cross-functionally to hold stakeholders accountable.
• Developing and providing effective reporting mechanisms and visibility of project status to support ongoing analysis and decision-making.
• Promoting a culture of continuous improvement by providing training and guidance to employees on security and compliance aspects.
• Contributing to the development of other GRC team members through cross-training and ongoing communications.
• Acting as an internal advisor, subject matter expert, and compliance advocate aligning GRC activities with company-wide goals.

Requirements

• 8+ years of experience in Governance, Risk & Compliance (GRC) roles.
• 3+ years of experience in Lead or Senior GRC related roles.
• Proven track record of successful compliance program implementation and management.
• Good industry knowledge of compliance and security best practices and frameworks.
• Experience in technical and developer-focused organizations, particularly in the SaaS industry.
• Exceptional communication and interpersonal skills.
• Ability to formulate recommendations for Senior Leaders.
• Excellent analytical and problem-solving skills.
• Knowledge of cloud security and infrastructure.
• CISA or CISSP certification is advantageous.

Nice-to-haves

• Experience in continuous compliance environments.
• Familiarity with commercial compliance frameworks such as ISO27001, SOC2, and FedRamp.

Benefits

• Paid parental leave
• Health insurance
• Cell phone reimbursement
• Flexible schedule
• Life insurance