Security Compliance - Technical Program Manager - Weights & Biases

Security Compliance - Technical Program Manager – Weights & Biases CoreWeave, the AI hyperscaler, has acquired Weights & Biases to create the most powerful end‑to‑end platform for AI development, deployment, and iteration. Since 2017 CoreWeave has built a global footprint of data centers across the US and Europe and is a TIME 100 company of 2024. By combining CoreWeave’s cloud infrastructure with the best‑in‑class tools of Weights & Biases, we are setting a new standard for how AI is built, trained, and scaled. We are looking for bold thinkers and agile builders who are excited to shape the future of AI. If you are passionate about solving complex problems at the intersection of software, hardware, and AI, we want to hear from you. What You’ll Do Partner closely with stakeholders to design, implement, and enhance security, operational, and privacy controls. Conduct readiness assessments and guide control owners through external audits and internal obligations. Actively manage compliance and regulatory lifecycles, ensuring clarity and simplicity in tracking, evidence gathering, and reporting. Collaborate with product, solution architecture, and engineering teams to streamline compliance requirements and foster innovation and efficiency. Continuously assess control maturity and uncover creative opportunities for automation and process improvements that benefit the organization. Mentor junior technical program managers and technical leads on audit best practices. Requirements At least 10 years of hands‑on experience in security compliance and audit, ideally within the cloud services industry. Bachelor’s degree in information security, computer science, or a related field, or equivalent experience. Proven track record conducting comprehensive assessments of control frameworks and identifying strengths, gaps, and actionable improvements. 3–5 years of experience leading large‑scale compliance frameworks (SOC 2, ISO 27001, HITRUST, FedRAMP, Cyber Essentials Plus) in a fast‑paced, technical environment. Experience automating compliance evidence collection or reporting processes. Strong collaboration skills with diverse remote teams across engineering, infrastructure, and security. Excellent communication, transparent documentation practices, and meticulous record‑keeping. Familiarity with GRC platforms such as OneTrust, Archer, ServiceNow GRC, Vanta, Drata, and others. Experience managing multiple audits and certification cycles and planning and tracking through tools such as Jira, Confluence, and Asana. Preferred Qualifications Creative experience leveraging compliance activities to drive business growth and innovation. Proven success simplifying complex regulatory obligations into clear, actionable strategies. Experience with multiple cloud platforms (AWS, GCP, Azure) and security tooling; solid understanding of cloud security risks and controls. Certifications such as CISA, CISM, or CRISC. Why Us Be Curious at Your Core Act Like an Owner Empower Employees Deliver Best‑in‑Class Client Experiences Achieve More Together Compensation & Benefit Base salary range: $122,000 – $237,000. The starting salary will be determined based on job‑related knowledge, skills, experience, and market location. In addition to base salary, the total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program. Medical, dental, and vision insurance – 100% paid by CoreWeave. Company‑paid life insurance and voluntary supplemental life insurance. Short‑ and long‑term disability insurance. Flexible Spending Account, Health Savings Account, and tuition reimbursement. Participation in Employee Stock Purchase Program (ESPP). Mental wellness benefits through Spring Health. Family‑forming support by Carrot. Paid parental leave. Flexible, full‑service childcare support with Kinside. 401(k) with a generous employer match. Flexible PTO and catered lunch in the office and data‑center locations. A casual work environment with a focus on innovative disruption. Other Information Export control compliance: This position requires access to export‑controlled information. Applicants must be a U.S. person as defined by U.S. law or otherwise eligible to access the information without required export authorization. EEO Statement CoreWeave is an equal opportunity employer. All qualified applicants and candidates will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. CoreWeave provides reasonable accommodations for qualified applicants with disabilities. If you need an accommodation, please contact View email address on click.appcast.io. #J-18808-Ljbffr Weights & Biases