Logo of Huzzle

Sr. Manager, Governance and Compliance

image

Proofpoint

2mo ago

  • Job
    Full-time
    Senior & Expert Level
  • Legal
    IT & Cybersecurity
  • Cork
    Remote
  • Quick Apply

AI generated summary

  • You need GRC experience in SaaS, a track record of leading compliance teams, knowledge of ISO 27001, SOC 2, NIST, GDPR, and strong skills in project management and communication. Certifications are a plus.
  • You will lead a compliance team, manage audits, develop policies, identify risks, collaborate with stakeholders, and deliver training to ensure regulatory compliance and enhance security posture.

Requirements

  • Proven experience in governance, risk, and compliance (GRC), preferably within a SaaS or cloud security environment.
  • Strong experience building, leading, and developing high-performing compliance teams.
  • Deep knowledge of ISO 27001, SOC 2 Type II, NIST, GDPR, and other security standards and frameworks.
  • Demonstrated success in leading compliance programs and managing security audits from planning to certification.
  • Experience implementing security policies, controls, and risk management frameworks in a complex enterprise environment.
  • Strong project management and leadership skills with the ability to drive cross-functional initiatives.
  • Excellent communication skills, with the ability to translate security and compliance requirements into actionable business processes.
  • Certifications such as CISSP, CISA, CISM, or ISO 27001 Lead Auditor/Implementer are highly desirable.

Responsibilities

  • Build & Lead a High-Performing Team – Recruit, mentor, and develop a team of compliance professionals, fostering a culture of excellence, collaboration, and continuous improvement.
  • Lead Compliance Initiatives – Drive and oversee the successful certification and continuous compliance with ISO 27001 and SOC 2 Type II, ensuring alignment with Proofpoint’s security and risk management strategies.
  • Manage Internal & External Audits – Coordinate and execute internal readiness assessments and manage third-party audits, ensuring adherence to security frameworks and industry best practices.
  • Develop Policies & Controls – Establish, refine, and enforce security governance policies, controls, and processes that support regulatory compliance and risk mitigation.
  • Risk Management & Remediation – Identify compliance risks, conduct gap analyses, and collaborate with cross-functional teams to implement remediation plans.
  • Stakeholder Collaboration – Act as the primary compliance liaison between engineering, security, legal, product management, and external auditors, ensuring clear communication and alignment of objectives.
  • Continuous Improvement – Monitor evolving security regulations, industry standards, and best practices, proactively adapting policies and controls to maintain compliance and improve security posture.
  • Training & Awareness – Develop and deliver security governance training to relevant stakeholders to promote a culture of compliance and risk awareness.

FAQs

What is the main responsibility of the Sr. Manager, Governance and Compliance?

The main responsibility is to lead and enhance Proofpoint’s security compliance programs, ensuring the product portfolio meets the standards of ISO 27001 and SOC 2 Type II certifications.

Who will the Sr. Manager report to?

The Sr. Manager will report to the Global Head of Governance and Compliance.

What teams will the Sr. Manager collaborate with?

The Sr. Manager will work cross-functionally with Product Management, Engineering, Legal, and a broad set of business stakeholders.

What certifications are required for this position?

Certifications such as CISSP, CISA, CISM, or ISO 27001 Lead Auditor/Implementer are highly desirable.

What experience is necessary for applicants?

Proven experience in governance, risk, and compliance (GRC), preferably in a SaaS or cloud security environment, is necessary.

What key standards should the candidate be familiar with?

Candidates should have deep knowledge of ISO 27001, SOC 2 Type II, NIST, GDPR, and other security standards and frameworks.

Is this position focused on team leadership?

Yes, the position involves building, leading, and developing a high-performing compliance team.

Will the Sr. Manager be responsible for managing audits?

Yes, the Sr. Manager will coordinate and execute internal readiness assessments and manage third-party audits.

What is the work environment like at Proofpoint?

Proofpoint promotes a collaborative culture with a talented team of security and compliance professionals who are passionate about protecting customers.

Is there room for career growth in this position?

Yes, there is an opportunity for career growth as you expand your expertise in security governance and compliance in a fast-evolving, high-growth industry.

Welcome to the new threat landscape — Proofpoint gives you protection & visibility for your greatest cybersecurity risk.

Technology
Industry
1001-5000
Employees
2002
Founded Year

Mission & Purpose

Proofpoint is a cybersecurity company specialising in protecting organisations from advanced threats and attacks through their comprehensive suite of email security, data loss prevention, and compliance solutions. Their ultimate mission is to safeguard businesses' critical information and digital assets, ensuring the confidentiality, integrity, and availability of data. With a focus on preventing cyber risks and enhancing email and data security, Proofpoint's purpose is to empower businesses to communicate and collaborate securely while mitigating the risks associated with modern digital communication and information sharing.