The opportunity
MongoDB’s Compliance team leads the strategy, execution, and maintenance of the company’s global security certifications and regulatory requirements. The team translates complex obligations into scalable operational processes and maintains an audit-ready posture across a broad portfolio of frameworks and markets.
What you'll do
Lead end-to-end external audits and certifications, coordinating scoping,: audit plans, evidence, auditor engagement, findings, and final outcomes
Own internal audit cadences and remediation tracking; establish clear: accountability for findings, milestones, dependencies, and resolution timelines, and drive timely follow-through with technical teams
Serve as a lead point of contact for auditors and enterprise customers during: security reviews and audit deep-dives; explain MongoDB’s control environment with clarity and confidence
Map regulatory requirements to the central control framework and conduct gap: analyses for new frameworks, jurisdictions, and market expansions
Assess compliance-program maturity and report material risks, gaps, trends,: and delivery status to team and business leaders
Author and review customer-facing security documentation and audit evidence,: ensuring it accurately reflects MongoDB’s controls and architectural guardrails
What they're looking for
- Bachelor’s degree in a technical field (such as Information Systems, Computer: Science, or Cybersecurity), or equivalent practical experience
- + years of experience in GRC, Information Security, or IT Audit, preferably: in a SaaS or cloud environment, with a heavy focus on US Public Sector frameworks (FedRAMP, DoD SRG, CJIS)
- Demonstrated experience leading technical audits or compliance programs
- Strong understanding of cloud security principles, risk management, and how: controls operate in a cloud-native environment across AWS, Google Cloud, or Azure
- Deep understanding of NIST 800-53 and NIST 800-171 controls and how they are: implemented within cloud architectures (AWS, GCP, or Azure)
- Proven track record of managing federal audits from kickoff through to the: issuance of an Authorization to Operate (ATO)
- Exceptional ability to explain complex security configurations to government: auditors and internal technical teams
- Advanced proficiency in Jira and Confluence to track control performance data: and manage large-scale federal documentation projects
