M

MongoDB

Builds document databases for software teams

Program Manager

Security Governance, Risk & CompliancePosted on Nov 3
Full-timeDublin, IrelandNo salary listed

About the Job

Requirements

  • At least 7 years of experience in GRC, Information Security, or IT Audit, specifically in a high-growth SaaS or cloud environment.
  • Deep understanding of cloud security principles, including AWS, GCP, or Azure, and a track record leading technical audits for ISO 27001, SOC 2, or PCI.
  • Solid understanding of audit processes, terminology, and risk assessment standards.
  • Ability to lead meetings with external customers and auditors, translating technical complexities into business risk and compliance assurance.
  • Advanced proficiency in Jira for tracking control performance data and managing high-volume remediation workflows.
  • Practical experience performing enterprise-level gap analyses and maturity assessments.

Responsibilities

  • Lead end-to-end specialized external audits, including PCI, SOC 2, ENS High, IRAP, and ISO 22301, coordinating all phases from initial scoping to final certification.
  • Serve as the lead point of contact for Financial Services customer audits, facilitating meetings, responding to security questionnaires, and presenting the control environment to external stakeholders.
  • Lead internal audit cadences and drive POA&M tracking to ensure technical teams remediate findings within required SLAs.
  • Map new regulatory requirements to the central control framework and perform gap analyses to identify existing controls that can be leveraged for new certifications.
  • Conduct NIST CSF or similar maturity assessments to monitor the Compliance Program's effectiveness and report findings to team leads.
  • Author and review customer-facing security documentation to ensure it accurately reflects technical controls and architectural guardrails.
  • Partner with Engineering and Product leads to implement compliance by design and align future product roadmaps with global regulatory shifts.
  • Manage overlapping audit cycles across global jurisdictions and industry sectors, identify how technical controls can satisfy multiple regulatory requirements, and represent MongoDB's security posture to Financial Services customers.
  • Implement the Common Controls Framework and map technical evidence to regulatory intent for frameworks including IRAP and PCI.

Desired Qualifications

  • Certifications such as CISA, CRISC, CISSP, or ISO Lead Implementer are highly preferred.

About the Company

MongoDB

Builds document databases for software teams

MongoDB builds databases for software teams that need to store and retrieve application data without fitting every record into fixed rows and columns. Its flagship Atlas service runs the database in the cloud and combines it with tools for search, real-time analytics and AI retrieval. Data is stored as flexible documents, letting developers change an application's structure while keeping related information together. Customers pay for cloud resources and usage, or buy Enterprise Advanced subscriptions to run the software themselves with monitoring, management tools and technical support. MongoDB was founded in 2007 and is headquartered in New York City.

Company size
5,001-10,000
Company stage
IPO
Headquarters
New York City, New York
Founded
2007

Recently Posted Jobs

Explore more opportunities at MongoDB

See more jobs