Staff Security Risk and Compliance Program Manager, Confluent
$213.2-250.5k
Offers Equity
Data streaming platform
Open for applications
Data streaming platform
1001+ employees
Open for applications
$213.2-250.5k
Offers Equity
1001+ employees
Company mission
Founded by the team that built Apache Kafka, their mission is to make managing Kafka easy.
Role
Who you are
- This is a senior-level position that requires strong leadership, deep expertise in compliance frameworks, and a data-driven approach to risk management
- Experience: 8+ years of experience in GRC, with a significant portion of that time focused specifically on compliance and regulatory matters
- Technical Skills:
- Strong understanding of compliance frameworks such as NIST, ISO 27001, SOC, PCI DSS, HITRUST, CSA Star, etc
- Experience with public sector compliance and international compliance frameworks (i.e. FedRAMP, CMMC, IRAP, Cyber Essential, C5, etc) is a strong plus
- Strong knowledge of and experience in all facets of integrated security governance, risk, and compliance management
- Strong security engineering fundamentals background in infrastructure security controls in GCP, AWS, Azure, and/or web application security
- Tooling and automation: Experience with implementing, operationalizing and maintaining GRC platforms
- Program Management Skills:
- Strong project management and organizational skills
- Experience in running long-term, complex security programs that deliver iterative improvements and risk reduction
- Communication and Collaboration skills: Excellent written and verbal communication skills. The ability to influence and lead without direct authority. Detail-oriented with a strong analytical mindset
- Certifications: Current Security CISSP, CRISC, CISM or equivalent certification completed or currently in progress is a plus
What the job involves
- As a Staff Security Risk and Compliance Program Manager in the Trust & Security organization you will play a critical role in fulfilling the vision to secure Confluent’s platform and cloud offerings through a combination of technical expertise, policy governance, security risk management, certification compliance and excellent program management skills
- In this role, you'll be responsible for overseeing and maturing our compliance programs, ensuring we meet all relevant regulatory and legal obligations. You'll work closely with various departments to embed a culture of compliance throughout the organization and help us navigate a complex regulatory landscape
- You will also develop metrics and reporting for senior leadership and executives
- Program Ownership: Develop, implement, and maintain Confluent's compliance program, policies, and procedures. Act as the primary owner of compliance initiatives, ensuring they are well-defined and executed on time
- Regulatory Liaison: Stay up-to-date with relevant security regulations, standards and industry best practices. Translate these requirements into actionable controls and processes. Act as a key point of contact for external auditors
- Compliance Readiness: Conduct compliance readiness assessments when there is a need to adopt a new framework. Identify compliance gaps and develop mitigation strategies along with technical and non-technical control & process owners
- Compliance Maturity: Implement and operationalize a common control framework, assess control effectiveness regularly and identify areas for improvement
- Policy & Training: Create and manage company-wide policies related to trust & security. Develop and deliver training and awareness programs to educate employees on their compliance responsibilities
- Audit & Reporting: Plan and execute internal and external compliance audits. Manage audits and oversee the collection of evidence. Prepare and present regular reports to senior leadership on the status of the compliance program, identified risks, and remediation efforts
- Cross-Functional Collaboration: Partner with Legal, Engineering, Product, IT, and other business functions to ensure compliance requirements are built into new products, systems, and processes from the start
- Continuous Improvement: Drive a culture of continuous improvement, regularly reviewing and enhancing the compliance program to address evolving risks and regulatory changes
Our take
Confluent is a commercial company built on top of the open-source Apache Kafka project. Confluent and Kafka have developed a streaming data technology that processes massive amounts of information in real-time.
The streaming database technology was developed at LinkedIn as a way of moving massive amounts of messages. The company decided to open-source that tech in 2011, and Confluent launched as the commercial arm in 2014.
While the base open-source component remains available for free download, it doesn’t include the additional tooling the company has built to make it easier for enterprises to use Kafka. Confluent's value add is in those additional tools, including a cloud version of the product and a marketplace for sharing extensions to the platform.
Confluent expanded strategic partnerships with Microsoft and acquired Immerok, and in 2023 expanded its cloud platform. 2024 saw further product expansions with the launch of the Confluent Migration Accelerator, all exemplifying how the company is living up to its name by rocket-boosting the benefits of Apache Kafka integration for companies.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 5 rounds)
Apr 2020
$250m
SERIES E
Jan 2019
$125m
SERIES D
Total funding: $455.9m
Company HQ
Mountain View, California
Leadership
Jay Kreps
(Co-Founder & CEO)Previously a Principal Engineer at LinkedIn.
Neha Narkhede
(Co-Founder & Board Member)Previously a Lead Engineer at LinkedIn and Oracle. They are an Investor/advisor for Gem, Block Party, Material Security, Abacus AI, Cortex Data, Yugabyte, Metaphor Data, Natalist, Common Room, and more.
Jun Rao
(Co-Founder)Previously a Senior Engineer at LinkedIn. Has a PhD in Computer Science from Columbia University.
Share this job
View 39 more jobs at Confluent