Program Manager

Job Summary

The Program Manager role is a mid-to-senior level individual contributor position in the Compliance team at MongoDB, responsible for leading high-stakes audits and specialized compliance workstreams.

Responsibilities

• Lead the end-to-end execution of specialized external audits, such as PCI, SOC2, ENS High, IRAP, and ISO 22301, coordinating all phases from initial scoping to final certification.
• Serve as the lead point of contact for Financial Services customer audits, facilitating meetings, responding to security questionnaires, and defending the control environment to external stakeholders.
• Lead internal audit cadences and drive the POA&M tracking process, ensuring technical teams remediate findings within required SLAs.
• Map new regulatory requirements to the central control framework, performing gap analyses to identify where existing controls can be leveraged for new certifications.
• Conduct NIST CSF or similar maturity assessments to monitor the effectiveness of the Compliance Program and report findings to team leads.
• Author and review customer-facing security documentation, ensuring it accurately reflects technical controls and architectural guardrails.
• Partner with Engineering and Product leads to implement compliance-by-design, ensuring future product roadmaps align with global regulatory shifts.
• Operate as a subject matter expert with minimal supervision, owning the success of the program.
• Navigate complex audit negotiations with external parties and drive internal technical teams toward compliance milestones without disrupting innovation.
• Manage overlapping audit cycles across different global jurisdictions and complex industry sectors.
• Identify how a single technical control can satisfy multiple global regulatory requirements simultaneously.
• Lead audit engagements and represent MongoDB’s security posture to sophisticated Financial Services customers.

Requirements

• 7+ years in GRC, Information Security, or IT Audit, specifically within a high-growth SaaS/Cloud environment.
• Deep understanding of cloud security principles (AWS/GCP/Azure) and a proven track record leading technical audits for ISO 27001, SOC 2, or PCI.
• Solid grasp of audit processes, terminology, and risk assessment standards. Certifications such as CISA, CRISC, CISSP, or ISO Lead Implementer are highly preferred.
• Exceptional ability to lead meetings with external customers and auditors, translating technical complexities into business risk and compliance assurance.
• Advanced proficiency in Jira for tracking control performance data and managing high-volume remediation workflows.
• Practical experience performing gap analyses and maturity assessments at an enterprise level.

Benefits

MongoDB offers a supportive and enriching culture for everyone, including employee affinity groups, fertility assistance, and a generous parental leave policy.