Senior Risk Program Manager, CircleCI
$143-178k
2-3 days a week in office
Continuous integration and deployment services
Posted today
Continuous integration and deployment services
201-500 employees
Posted today
$143-178k
2-3 days a week in office
201-500 employees
Company mission
To manage change so software teams can innovate faster. They want to empower technology-driven organizations to do their best work – and make engineering teams more productive and innovative by managing change.
Role
Who you are
- A diligent, analytical program manager with 8+ years of experience in Security/GRC, managing technical risk across multiple audit areas in a cloud/SaaS environment
- Experienced in implementing and maintaining comprehensive risk registers and control portfolios
- Skilled at assessing and mitigating findings across diverse audits with sound judgment
- Knowledgeable about FedRAMP, NIST 800-53, NIST 800-37, SOX, and other relevant industry standards
- An effective communicator, able to convey messages clearly to diverse audiences including compliance professionals, engineers, and developers
- Detail-oriented with a focus on documenting methods, workflows, and processes to drive efficiency
- Someone who understands GRC's role within broader security and risk management contexts
- Familiar with project management and GRC software tools
- Industry certifications (CRISC, CISM, PMP, CISSP, or similar) are beneficial
What the job involves
- Drive technical risk excellence across CircleCI as a key member of our Governance, Risk, and Compliance (GRC) team
- You'll collaborate with teams throughout the organization to transform diverse risk initiatives into cohesive, sustainable programs that support our business growth, compliance requirements, and security objectives
- By combining your risk expertise with program management skills, you'll help shape the future of GRC strategy while solving complex challenges critical to our continued success
- Our GRC team serves as the second line of defense, working closely with Security, IT, Engineering, Finance, and other departments to ensure comprehensive risk management across CircleCI
- We create and maintain processes that identify, assess, and mitigate risk, all while maintaining compliance with industry standards and regulations. The team plays a vital role in supporting CircleCI's commitment to delivering a secure, reliable platform for our customers
- What You'll Do
- Design and maintain a comprehensive risk register spanning company operations
- Develop and oversee a control portfolio in partnership with Security, IT, and Finance teams to contextualize and support risk treatment
- Identify, track, prioritize, and work with owning teams to mitigate audit findings across multiple disciplines
- Enhance vendor risk management and prevent shadow IT
- Collaborate across teams to address documentation gaps, report findings, and escalate issues appropriately
- Enhance GRC tooling capabilities through improvements to existing systems and evaluation of new solutions
- Participate in daily GRC triage and support activities
- Provide support to maintain our SOC 2 and FedRAMP accreditations, in addition to SOX ITGC and customer-driven reviews
- Stay current with US and international risk management practices to scale CircleCI's GRC efforts
Our take
Engineering has seen the rise of agile, containerisation and DevOps over the last few years. As a result, the idea of continuous integration and continuous delivery (CI/CD) has grown to be an important part of the engineering space. CircleCI is one company that taps into this field, offering a lightweight and open service.
There are now a lot more companies that have a culture of continuous delivery. CircleCI specifically helps automate all the steps that occur between the time developers make changes to the code and when the application gets in front of the customer. The company has a strong tailwind from this macro trend and their product is loved by engineers, putting them in a strong place to build a strong business.
Services in the sector have grown constricted and cost-heavy, but in 2022, CircleCI debuted a free tier service for engineering teams in a move away from this. By offering flexibility across an increased number of major platforms, including Docker, Windows, and MacOS, the company works towards its ultimate aim to empower technology-driven organisations.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 8 rounds)
May 2021
$100m
SERIES F
Apr 2020
$100m
SERIES E
Total funding: $315m
Company benefits
- Whether it’s a peaceful home or a house full of kids, roommates, or pets, your office can be where you need it. CircleCI has been a remote-first company since the beginning. We’ll ensure you stay well-connected with your teammates every day through tools like Zoom, Slack, Confluence, Google Suite, and GitHub. We also provide a home office stipend to help you do your best work
- Regardless of location, we prioritize the health and wellness of our employees and their families. In addition to unlimited PTO, we offer generous parental leave and benefits that can cover employees and dependents up to 100%. We also offer quarterly wellness days, a free Calm subscription, wellness reimbursement, and Cleo for new parents
- At CircleCI, employees have ample opportunity to learn new skills, including project-based learning and presentations from our colleagues. Udemy is available for on-demand learning and we offer an annual stipend for personal development outside of CircleCI. Your continued professional development is important to us because it’s important to you
- Unlimited paid time off policy
- Work from home opportunities
Company HQ
The East Cut, San Francisco, CA
Leadership
Jim Rose
(CEO)Joined CircleCI as COO. Serial entrepreneur, founding Distiller (acquired by CircleCI) and Copious.
Paul Biggar
(Founder)Currently Founder and CEO of Darklang. Previously Principal Engineer at Lookout, Senior Compiler Engineer at Mozilla Corporation and Founder at NewsLabs Inc.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 6 more jobs at CircleCI