Senior Security Regulatory Compliance Manager

At Twilio, we're shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to hundreds of thousands of businesses and empower millions of developers worldwide to craft personalized customer experiences.

As we continue to revolutionize how the world interacts, we're acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands.

We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions!

Join the team as Twilio's next Senior Security Regulatory Compliance Manager - Security Regulatory Compliance. In this role, you will play a pivotal part in Twilio's trust mission, reporting directly into the Strategy & Operations organization with a dotted-line functional reporting relationship to Security Compliance Regulatory Affairs leadership.

In this position, you will be responsible for safeguarding Twilio's reputation by navigating the complex intersection of global regulation, product innovation, and security posture. You will serve as the interface between the security organization, legal, privacy, and the business to help drive awareness of security regulatory compliance requirements.

This is a high-visibility individual contributor role that ensures our global communications platform remains trusted, compliant, and performing at its peak, supporting through the security lens.

Responsibilities:

• Strategic Alignment: Partner with Security Compliance Regulatory Affairs to execute a unified security regulatory strategy that balances long-term global trends with Twilio's immediate operational needs.

• Regulatory Intelligence & Prioritization: Monitor, identify, and prioritize new and evolving cybersecurity regulations (including telecom-specific mandates); translate complex requirements into actionable business impacts.

• Operational Excellence: Manage weekly compliance-focused operating rhythm, triaging regulatory developments and escalating critical security risks to senior leadership.

• Scope & Response Optimization: In partnership with cyber legal counsel, define the 'scope of applicability' for new regulations to ensure Twilio's responses and decisions are precise, efficient, and aligned with how we actually build products.

• GTM Partnership: Collaborate with Go-To-Market teams to leverage Twilio's security compliance posture as a differentiator, identifying opportunities to drive revenue through trust.

• Cross-Functional Facilitation: Project manage non-security stakeholders to ensure the timely collection of evidence, support, and information required for successful regulatory filings and audits, working closely with the Security Compliance Regulatory Affairs team to facilitate and align on response.

Qualifications:

• 7+ years of experience in strategy and operations, program management, cybersecurity and/or telecommunications security, regulatory compliance, or equivalent.

• Proven ability to program manage complex cross-functional projects and lead operational meetings with diverse stakeholders.

• Experience in developing, managing, reporting on, and engaging with external assessors on audits, regulatory engagements, or similar complex assessments across teams.

• Strong analytical skills with the ability to use data to drive strategy and report to executive leadership.

• Exceptional written and verbal communication skills, with experience presenting to senior leaders.

• Well-honed critical thinking skills and the ability to problem-solve individually or in a group setting while understanding key financial drivers of the business.

Desired:

• Demonstrated experience in telecommunications and cybersecurity law and policy, including knowledge of global regulations such as NIS2 and the UK Telecom Security Act, as well as standards such as GSMA or those issued by ETSI.

• CTNS (Certified Telecommunications Network Specialist) or CTSME (Certified Telecommunications Subject Matter Expert).

• CISA, CISM, CRISC, or other security-specific certifications with hands-on experience.

• Experience with security policy development and advocacy, such as supporting consultations and responses to notices of proposed rulemaking.

• Proficiency with SQL, Looker, and Airtable.

• Experience working within a global, high-growth technology environment.

• Experience with large-scale enterprise networks and global telecommunications infrastructure.

• Understanding of protocols like BGP, OSPF, MPLS, and SIP.

• Familiarity with product development lifecycles and how to integrate compliance into technical roadmaps.