Sr. Manager, Compliance, Governance & Assurance

Senior Manager, Compliance, Governance & Assurance – The Information Security team is seeking an experienced leader who will maintain and expand the company’s certification portfolio, ensure compliance with regulatory, contractual and customer requirements, establish a mature policy governance framework, and build an internal assurance function that provides proactive oversight of control design, effectiveness and compliance obligations. Responsibilities Lead and mature the enterprise compliance program, ensuring ongoing alignment with regulatory, contractual, customer, and industry requirements. Own the organization’s compliance and certification portfolio, including SOC 2, ISO 27001, HIPAA, HITRUST, and other applicable frameworks, driving audit readiness and successful certification outcomes. Develop and maintain compliance and governance roadmap aligned with organizational priorities, risk management objectives, and business growth. Establish and oversee governance processes, metrics, and reporting that provide leadership visibility into compliance posture, risks, and program effectiveness. Monitor evolving regulatory and industry requirements and translate them into actionable governance, policy, and control improvements. Establish and mature the enterprise policy governance lifecycle, including policy development, review, approval, communication, exception management, and periodic maintenance. Build and operationalize a risk-based internal assurance function to evaluate compliance with policies, standards, regulatory obligations, and control requirements. Define and execute assurance methodologies, testing programs, and monitoring activities to assess control effectiveness and identify opportunities for continuous improvement. Develop a small, stable set of compliance and assurance health indicators that can be reported regularly to leadership. Define reusable compliance and governance capabilities, including policy management processes, assurance testing frameworks, control assessment methodologies, and audit readiness programs. Partner with Internal Audit, Security, Privacy, Legal, Risk Management, and business leaders to coordinate audits, assessments, certifications, and customer due diligence activities. Lead remediation governance, ensuring findings, recommendations, and observations are appropriately prioritized, tracked, and resolved in a timely manner. Serve as a trusted advisor to leadership on compliance, governance, and assurance matters. Build strong relationships with external auditors, assessors, regulators, customers, and other key stakeholders. Leverage automation and Artificial Intelligence capabilities to improve compliance monitoring, evidence management, assurance activities, and operational efficiency. Manage a team focused on policy and strategy implementation. Foster a culture of continuous learning, psychological safety, and security advocacy across the broader organization. Required Qualifications Minimum of 8 years of progressive experience in compliance, governance, risk management, audit, assurance, or related disciplines. Bachelor’s degree or higher in Business, Information Systems, Cybersecurity, Risk Management, Accounting, Finance, Public Policy, or a related field. Minimum of 4 years of people leadership experience with direct responsibility for supervising, coaching, and developing team members. Proven experience managing compliance programs and certification frameworks including SOC 2, ISO 27001, HIPAA, HITRUST, and similar industry standards. Demonstrated experience leading audits, assessments, remediation programs, and control maturity initiatives. Experience building or significantly maturing compliance, governance, assurance, or policy management programs. Strong understanding of governance, risk, compliance, internal control, and audit frameworks. Exceptional communication and stakeholder management skills, including experience influencing senior leadership and partnering effectively across Security, Privacy, Legal, Risk Management, Internal Audit, and business functions. Demonstrated ability to influence cross‑functional teams and drive organizational change in complex environments. Preferred Qualifications Master’s degree in Business Administration, Information Systems, Cybersecurity, Risk Management, or a related discipline. Professional certifications such as CISA, CRISC, CISSP, CIPP, CHC, CCEP, HITRUST CCSFP, ISO 27001 Lead Auditor, ISO 27001 Lead Implementer, or equivalent. Experience operating within highly regulated industries, including healthcare, financial services, or technology organizations. Experience implementing governance, risk, and compliance platforms and compliance automation capabilities. Experience supporting privacy programs and privacy-related compliance requirements, including HIPAA, GDPR, and state privacy regulations. Hybrid Work Arrangement Employees must work from the office two days per week. Employees living more than 50 miles from an office location will work with their manager to determine in‑office time based on business needs. Equal Employment Opportunity All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, protected veteran status, disability status, and any other classification protected by Federal, State, and local laws. External hires must pass a background check and drug screen. Qualified applicants with arrest records and or conviction records will be considered for employment in a manner consistent with Federal, State, and local laws including the San Francisco Fair Chance Ordinance. #J-18808-Ljbffr Stellarus