Compliance Program Manager

Superhuman

. Run the unified audit program as an integrated plan and calendar across audits and expansions .

Posted 11/5/2026full-timeSan Francisco • California • United StatesMid-LevelSenior💰 $133,000 - $182,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing complex audit programs, including planning, execution, and reporting across multiple frameworks. Proficient in risk tracking, stakeholder communication, and automation of audit processes in cloud environments.

Highest-signal resume keywords

Program ManagementExternal Security AuditsSOC 2 ComplianceISO 27001 KnowledgeAudit Process Improvement

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk TrackingGap AssessmentEvidence Collection AutomationAudit ReportingFramework Evaluation

Soft Skills

Clear CommunicationInfluencing StakeholdersManaging Competing PrioritiesProactive Problem Solving

Tools & Technologies

GRC PlatformAI Tools for AutomationCloud Environments

Certifications & Qualifications

SOC 2ISO 27001PCI-DSS

Industry Keywords

Audit Operating ModelThird-Party Risk ManagementAudit MilestonesControl OwnersVendor Lifecycle

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Run the unified audit program as an integrated plan and calendar across audits and expansions
Track milestones, dependencies, risks, and decisions, and provide regular status updates to GRC leadership and stakeholders
Plan and run quarterly audits from scoping through reports and findings closeout
Prepare control owners for fieldwork through evidence pre-checks and walkthrough dry runs
Scope audit boundaries with Product and Engineering and identify changes caused by launches or new platforms
Build and maintain the audit operating model and runbook
Drive automation for evidence collection, request tracking, and audit reporting
Partner with GRC Engineering on evidence generation and collection, including reuse across frameworks
Partner with GRC and Procurement on third-party risk management across the vendor lifecycle
Align audit windows across frameworks and firms to minimize duplicate evidence requests
Plan new audits and expansions, conduct framework and scope evaluations, and perform gap assessments with recommendations and effort estimates
Work with control owners and GRC Partners to deliver evidence and close findings
Coordinate extended remediation with GRC Partners
Manage day-to-day auditor relationships
Report audit status, findings, and program metrics to GRC leadership

Requirements

What you’ll need

5+ years of program management experience running multi-workstream programs with plans, milestones, dependencies, risk tracking, and leadership reporting
5+ years running external security audits, including SOC 2 and ISO 27001 at minimum, with experience across several frameworks concurrently
Working knowledge of SOC 2, the ISO 27000 family, ISO 42001, and PCI-DSS and their overlapping requirements
Experience leading a gap assessment for a new framework or scope change and presenting the result to leadership
Experience building or improving audit processes, including calendars, request tracking, runbooks, and roles and responsibilities
Technical fluency in how evidence is produced in cloud environments, assessing system-generated reports, and identifying automation opportunities using AI tools
Ability to communicate clearly, manage competing priorities, and proactively resolve blockers during time-sensitive audit cycles
Ability to influence cross-functional stakeholders, establish accountability, and drive deliverables without direct reporting authority
Preferred: experience managing complex external audits in an in-house GRC function, consulting environment, or audit firm
Preferred: familiarity with ISO 42001, PCI DSS, ISO 27701, ISO 27018, CSA STAR, IRAP, ISMAP, or C5
Preferred: experience automating evidence collection or audit reporting, or using LLMs to plan, track, and report program work
Preferred: experience with a GRC platform or lightweight internal tooling

Benefits

Comp & perks

Excellent health care, including medical, dental, vision, mental health, and fertility benefits
Disability and life insurance options
401(k) and RRSP matching
Paid parental leave
20 days of paid time off per year
12 days of paid holidays per year
Two floating holidays per year
Flexible sick time
Caregiving stipend
Pet care stipend
Wellness stipend
Home office stipend
Annual professional development budget
Professional development opportunities