Manager, Compliance and Audit

SailPoint is seeking a Manager, Compliance and Audit with demonstrated competence and thought leadership capability to contribute to the success of our Strategy and Risk organization. As a provider of both SaaS and enterprise software for some of the world's most prestigious organizations, SailPoint strives for best-in-class security. The Manager of Compliance and Audit will lead our Compliance program, ensuring the organization meets the security and regulatory expectations of enterprise customers, regulators, and industry standards.

This role owns the end-to-end management of multiple, concurrent compliance frameworks (SOC 2, ISO 27001, FedRAMP, C5, and others), drives process improvements and automation across the compliance function, and partners closely with cross-functional stakeholders to embed compliance into how we build and sell our product. In this role, you will lead an existing team of analysts and auditors to drive maturity across our compliance and audit programs, not only aligning our program with industry best practices but also leading our readiness for additional compliance frameworks or laws.

This is a challenging and impactful role, offering the opportunity to work with influential internal and external stakeholders while driving continuous improvement of our compliance program. This role will join an existing, capable team of both emerging and established talent. They’ll have the opportunity to shape and drive SailPoint's compliance and audit activities. They’ll already be comfortable with the 4 I’s at SailPoint (individual, Impact, Innovation, and Integrity) even if they’re new to the concept.

They will embrace new challenges and will be a positive contributor to an already positive work culture and environment. This role will be a vital member of the CISO team and will be based in the United States.

• Own and maintain the company's compliance framework(s) and end-to-end audit lifecycle, including SOC 2 Type II, ISO 27001, FedRAMP, C5, and other relevant certifications
• Manage, mentor, and develop a team of compliance professionals, providing regular feedback, coaching, and support for career growth
• Set team priorities and distribute workload across concurrent audits, questionnaires, and compliance initiatives
• Drive process improvements in the current program in alignment with relevant regulatory frameworks and best practices (e.g., NIST)
• Facilitate and evaluate readiness for new and emerging compliance obligations to achieve SailPoint's compliance goals
• Partner with cross-functional teams to ensure compliance requirements are integrated into business processes
• Optimize existing processes and leverage automation/tooling, such as automated evidence collection and a unified controls framework, to build efficient processes and workflows
• Serve as a subject matter expert on compliance matters for internal stakeholders and become the primary liaison with external auditors as well as certification bodies
• Lead the delivery of compliance updates to leadership and cross-functional stakeholders

• Meet FedRAMP access requirements
• 7+ years of work experience in compliance or GRC, including at least 3 years in leadership roles
• Suggested certifications: CISSP, CISA, CISM, CRISC, or other relevant certifications
• Strong leadership and people development skills, including coaching, mentoring, performance management, and fostering a culture of continuous improvement
• Comprehensive knowledge of information security governance, risk management, compliance, and industry frameworks, including NIST Cybersecurity Framework (CSF), ISO 27001, FedRAMP, and related best practices
• Exceptional written and verbal communication skills, including the ability to communicate complex…