Compliance Program Manager
PlanetScale · Remote - US
About this role
**Compliance Program Manager** PlanetScale is growing rapidly and reinventing the database space—delivering the fastest and most reliable Postgres and Vitess/MySQL databases for businesses of all sizes. We’re looking for a **Program Manager** to oversee the **FedRAMP certification process**, and to manage and evolve our ongoing compliance commitments, including **SOC 1, SOC 2, and PCI DSS**. Our security and compliance team works to reduce risk across our systems and build trust in our product offerings, features, and cloud services—supporting both internal teams and external customers/partners. --- ## What You’ll Do - Take primary responsibility for overseeing PlanetScale’s **FedRAMP readiness and ATO process** from start to finish - Serve as the main compliance point of contact for audits/assessments (**SOC 1 & 2, PCI, FedRAMP**), including audit plan preparation, documentation/evidence review, procedure evaluation, and external walkthroughs - Establish, track, and report **KPIs and maturity metrics** for audit and compliance programs - Collaborate across teams (**IT, Engineering, Legal, People**) to identify, manage, and implement solutions related to **privacy, data protection risks, and compliance requirements** - Use industry standards and best practices to assess security/compliance risks, identify exposure areas, and continuously remediate gaps by proposing and implementing controls ## What We’re Looking For - **5+ years** of experience contributing to and/or managing audits in the technology sector, including demonstrable **FedRAMP** subject matter expertise - Experience with **SOC 2** and **PCI DSS**, either as a contributor or control owner - Strong interpersonal and communication skills; ability to explain compliance/privacy concepts to technical and non-technical stakeholders - Comfort working in a **remote-first**, asynchronous environment across teams and time zones - Demonstrated success working with **external auditors, outside consultants, and legal affairs** - Experience contributing to and/or managing **companywide risk assessments** - Knowledge of cloud service providers and how to work with them (**AWS, Azure, GCP**) ### What else will help you be successful - Experience working with **databases, developer tools, infrastructure, or other technical products** - **CISSP** preferred (CISA or CISM also helpful) - Working knowledge of **SQL**, preferably with **MySQL and/or PostgreSQL** ## About You You’re highly organized and comfortable operating in a startup environment with ambiguity. You enjoy cross-department collaboration, can work without silos, and are passionate about leading programs that directly enable organizational success. You understand that security and compliance programs are **revenue generators** and directly impact PlanetScale’s ability to sell to and retain demanding customers. You’re also comfortable challenging the status quo while staying focused on the goal: keeping PlanetScale secure and earning customer trust. ## Why PlanetScale We’re redefining how high-growth companies manage data at scale and work with exciting brands across gaming, consumer tech, and B2B SaaS. PlanetScale is profitable, builds small teams, and is recognized as one of the fastest growing companies in America. We support people to do their best work and thrive regardless of location, and we’re committed to building a **diverse, equitable, and inclusive** environment. If you have a disability, please let us know
Listing freshness
CronJobs last confirmed this listing 3h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.