Compliance Enablement Technical Program Manager, Sophos

• 4+ years in GRC, compliance, or a technical role supporting cybersecurity programs, including leading programs and guiding or mentoring others
• Strong program and project management skills, with a track record of delivering across multiple teams
• Solid knowledge of cybersecurity frameworks (NIST 800-53, ISO 27001, SOC 2, and/or FedRAMP) and hands-on audit experience
• Enough technical depth to be the team's technical point of contact: comfortable reasoning about cloud infrastructure (AWS, Azure, or GCP), APIs, and data flows, and interpreting technical work with AI assistance, even if you do not write code
• Proven ability to lead technical discussions with engineers and subject-matter experts and ask the right questions to understand how controls and systems work
• Hands-on experience with a GRC or compliance-automation platform (e.g., LogicGate, ServiceNow, Drata), and comfort using AI tools in compliance workflows
• Strong written and verbal communication, with the ability to translate between compliance and engineering for both technical and leadership audiences
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent experience
• At Sophos, we believe in the power of diverse perspectives to fuel innovation. Research shows that candidates sometimes hesitate to apply if they don't check every box in a job description. We challenge that notion. Your unique experiences and skills might be exactly what we need to enhance our team. Don't let a checklist hold you back – we encourage you to apply

Desirable

• We are seeking a Technical Program Manager to serve as the technical subject-matter expert (SME) for the Trust and Assurance team
• This role will be responsible for leading the technical side of the compliance automation function of the team
• A core part of the role is analyzing controls within the GRC platform to ensure they are accurate, meet framework requirements, and pull the necessary evidence to prove effectiveness
• You will also partner with engineering teams to embed compliance into their workflows from the start
• Strong compliance framework knowledge, solid program-management skills, and experience with AI technology are essential
• Serve as the team's technical authority
• Act as the technical SME and primary point of contact for the Trust and Assurance team: interpret how systems and controls work, guide technical decisions, and identify opportunities to make workflows and tooling more efficient
• Manage compliance stack
• Oversee control mapping, evidence collection, and monitoring workflows, and manage the integrations that connect the GRC platform to cloud platforms and internal systems
• Establish control monitoring
• Translate technical controls into automated, continuous checks, expanding monitoring coverage across the compliance stack and replacing manual reviews with ongoing monitoring
• Reduce audit burden
• Ensure every control has an accountable owner, support gap assessments and the rollout of new frameworks, and keep controls in a continuously audit-ready state
• Embed compliance into engineering
• Partner with engineering teams to build compliance requirements into their workflows and processes from the start, so compliance is designed in rather than added later
• Drive delivery and keep stakeholders aligned
• Manage initiatives through to completion, and communicate compliance risk, control status, and program progress to technical and non-technical audiences through clear, actionable summaries