Compliance Program Lead

Roles and Responsibilities

• Develop and maintain the technical roadmap and execution plan for cybersecurity and regulatory compliance initiatives.
• Translate regulatory requirements into actionable technical proposals covering SBOMs, vulnerability management, vulnerability disclosure, secure-by-design practices, and audit documentation.
• Drive program execution across engineering teams by assigning and tracking deliverables, identifying risks, and maintaining delivery schedules.
• Represent compliance initiatives in meetings with Product, Engineering, Security, Legal, Compliance, and other stakeholders.
• Partner with Product Managers to prioritize and sequence compliance work alongside broader product and platform roadmaps.
• Coordinate cross-functional teams and remove delivery blockers to keep engineering work progressing.
• Monitor program milestones, dependencies, risks, and issues and provide regular status updates to leadership.
• Ensure regulatory and compliance requirements are clearly understood and consistently implemented across teams.
• Leverage AI tools to accelerate research, requirements analysis, technical documentation, planning, and stakeholder communication.

Required Qualifications

• Bachelor's degree in any field or equivalent professional experience.
• Demonstrated experience using AI tools as part of research, planning, documentation, and problem-solving workflows.
• Experience in Technical Program Management, Technical Leadership, Product Management, or a similar hybrid technical role.
• Experience translating security, compliance, regulatory, or risk requirements into technical plans and deliverables.
• Knowledge of areas such as Software Bill of Materials (SBOM), vulnerability management/disclosure, secure-by-design practices, and audit documentation.
• Experience working closely with Product Managers and Engineering teams on cross-functional initiatives.
• Strong understanding of software architecture and technical concepts, with the ability to develop technical proposals that engineering teams can evaluate and implement.
• Strong stakeholder management, communication, organization, and project execution skills.
• Ability to operate effectively in ambiguous and rapidly evolving environments.

Preferred Qualifications

• Direct experience with Cyber Resilience Act (CRA) or similar cybersecurity regulations.
• Experience leading multi-team cybersecurity, compliance, or regulatory programs.
• Experience working with global cybersecurity standards and regulatory frameworks.
• Experience using AI-assisted tools for program management, technical analysis, and documentation.