Senior Technology Compliance Lead

Fastly helps people stay better connected with the things they love. Fastly’s edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and securing our customers’ applications as close to their end-users as possible — at the edge of the Internet. The platform is designed to take advantage of the modern internet, to be programmable, and to support agile software development.

Fastly’s customers include many of the world’s most prominent companies, including Git Hub, Yelp, Paramount, and Jet Blue.

We're building a more trustworthy Internet. Come join us.

* Job posting may close early due to the volume of applicants.

As a Senior Technology Compliance Lead, you will help scale Fastly’s technology compliance program to accommodate the growing and evolving needs of our customers. This is a unique opportunity to advance our focus on compliance as a competitive advantage that grows our business and increases customer confidence in our service offerings. You will own and lead from start to finish execution of Fastly’s most critical technical security audits, collaborating with people both inside and outside the organization, including department heads, engineers, auditors, and customers.

This position will report to the Director, Technology Compliance and will work closely with partners across the organization, including Customer Success, Security, Engineering, Legal, Sales, Program Management, and Human Resources.

• Manage the audit process from start to finish for multiple external and internal audits (e.g., PCI DSS, GDPR, FedRAMP, SOC2, ENS, etc), including customer audits, making continual improvement and scaling the audit function, including delivering and scaling the audit management strategy
• Maintain a deep understanding of our platform and its supporting infrastructure and processes, as well as how our compliance obligations apply to that environment
• Continuously confirm and refine Fastly’s internal control framework and related documentation (e.g., policies, procedures, narratives, training material), and drive ongoing controls development and improvement
• Drive and scale the continuous monitoring program
• Actively identify and communicate control gaps; help the company develop and confirm remediation efforts
• Support third party oversight processes, including security and compliance assessments of Fastly’s vendors and service providers
• Enhance internal reference and training material about our technology compliance program

• You have 8-10 years of security or compliance analysis, or assurance/advisory experience, including a focus on customer security communications and leading programs as an individual contributor
• You have a thorough understanding of technical environments, and the ability to communicate with subject matter experts about technical and operational security controls
• You have experience mapping and rationalizing controls to meet requirements across multiple information security/technology compliance standards, including gap analysis and remediation planning and management (e.g., PCI DSS, HIPAA, ISO 27001, SOC 1/ SOC 2, FedRAMP)
• You hold a BS degree in Management Information Systems, Computer Science, or a related field
• You have excellent written and verbal communication skills to communicate details of a security program to a wide spectrum of audiences, including customers and senior leadership
• You have strong analytical skills and attention to detail
• You have the ability to be self-directed and take initiative on projects and tasks, directing others and in identifying gaps related to security controls, with minimal day‑to‑day oversight/direction

• CISA, CISM, CISSP, or related certification
• Experience using governance, risk management, and compliance (GRC) tools