Security Governance & Compliance Manager (Remote)

Senior Security Governance & Compliance Manager

This position is fully remote and can be performed from any location within the United States. This role requires reliable internet connection and the ability to work independently in a remote environment.

This position requires the candidate to be a U.S. citizen, as the work involves tasks that the U.S. government has designated can only be performed by U.S. citizens on U.S. soil.

Meet the Team

Splunk is here to build a safer and more resilient digital world, and the world's leading enterprises use our unified security and observability platform to keep their digital systems secure and reliable. Join Splunk's Tech Compliance team, where we manage security and compliance programs that are integral to the trust customers place in Splunk. We build consultative partnerships with product owners, engineering, and security teams to drive risk mitigation and controls management across a broad range of frameworks and environments, while actively building toward a more automated and scalable way of operating compliance programs in a fast-changing landscape.

Your Impact

As a Senior Security Governance & Compliance Manager at Splunk, you will own and drive programs, partnering closely with product, engineering, and security teams. You will serve as a domain expert for security compliance and help the team build toward more scalable and automated compliance operations.

• Plan and execute audit programs from scoping through certification delivery
• Translate complex compliance requirements into clear, actionable implementation guidance for engineering and product teams
• Conduct gap analysis to assess audit readiness and ensure new products and features meet compliance requirements, and track remediation progress to closure
• Support continuous monitoring (ConMon) obligations to maintain compliance posture
• Build and use automation and AI tooling to scale compliance programs, including automating evidence collection, compliance testing, and reporting
• Monitor regulatory changes and assess impact

Minimum Qualifications

• Bachelor's + 7 or more years of experience in technical compliance, security, or risk roles with direct responsibility for audit or certification delivery (i.e. FedRAMP, DISA SRG, NIST 800-53, CMMC, DFARS, IRAP, ISMAP, or similar)
• Experience owning technical audit certification programs from scoping through delivery, including control mapping, evidence collection, remediation, and auditor engagement
• Experience building automation to streamline evidence collection, testing, and compliance reporting including using AI tools.
• Experience with implementing and assessing security across cloud-hosted environments and common IT and engineering technologies

Preferred Qualifications

• Demonstrated program management skills with a track record of coordinating cross-functional workstreams and driving programs to completion under competing priorities
• Strong written and verbal communication skills with the ability to articulate complex compliance topics to auditors, engineers, and senior leadership
• Experience managing US Public Sector programs and familiarity with FedRAMP 20x modernization requirements
• Familiarity with AI governance concepts and emerging frameworks such as ISO 42001 and NIST AI RMF
• Relevant industry certifications such as CISA, CISSP, CISM, or CRISC