Compliance Manager [IC3]

免费注册后解锁"你的匹配分 vs 高分画像"与个人技能缺口。

Who we are Our mission is to bring clarity and control to the world's most complex codebases. AI is accelerating code creation, but the infrastructure to understand, oversee, and evolve that code hasn't kept pace. Sourcegraph gives engineering organizations full visibility across their systems, precise context for their agents, and the ability to execute coordinated code changes at scale. As agentic development becomes the dominant engineering paradigm, we provide the context layer teams need to take control of their codebase. With Code Search, Deep Search, MCP, and Agentic Batch Changes, we deliver on that mission today - giving engineering teams and their AI tools the cross-repo context to navigate massive codebases with confidence, and the ability to make changes across hundreds of repositories at once. Companies like Stripe, Reddit, and Leidos rely on Sourcegraph to ship faster and with higher quality. We're backed by a16z, Sequoia, and Redpoint, and proud to operate as a globally distributed team that values high agency, direct communication, and customer love. If you want to build the infrastructure that lets every engineering team - and every agent they deploy - operate on their codebase with confidence, join us. Hours location 🌎 While we hire almost anywhere in the world, we have a preference for someone to reside in the following locations for this role. However, if you feel qualified, we welcome you to apply regardless of location. No matter what, working hours must overlap with GMT-3 for at least 20 hours/week. Preferred locations: USA Why this job is exciting As our Compliance Manager, you will own and drive Sourcegraph ’s governance, risk, and compliance program, with a primary focus on compliance. This is a highly cross-functional role that works closely with Security, Engineering, IT, Legal, People, Sales, and other teams across the company. You will be responsible for maintaining and evolving our compliance program, including owning certifications such as SOC 2 and ISO 27001 and preparing Sourcegraph for additional frameworks as the business grows. This is not a role where you will simply coordinate work across a large compliance organization. We are looking for someone who has personally owned audit and certification programs end to end: designing and tailoring controls, collecting evidence, training internal teams, working directly with auditors, managing remediation, and driving follow-up work through completion. 📅 Within one month, you will… You will build strong working relationships across Security, Engineering, IT, Legal, People, Sales, and other key stakeholders. You will develop a clear understanding of Sourcegraph ’s existing governance, risk, and compliance program, including our ISMS, risk register, controls, certifications, audit processes, and current areas of focus. You will understand how our SOC 2 and ISO 27001 programs operate today, including key owners, evidence requirements, open risks, and upcoming milestones. You will begin participating directly in day-to-day compliance activities and identify opportunities to improve or simplify existing processes. 📅 Within three months, you will… You will have taken ownership of Sourcegraph ’s ongoing SOC 2 and ISO 27001 compliance programs. You will independently manage key audit activities, including control testing, evidence collection, stakeholder coordination, auditor requests, findings, and remediation. You will evaluate existing controls and tailor them to Sourcegraph ’s environment rather than relying on overly prescriptive or generic auditor recommendations. You will actively maintain Sourcegraph ’s risk register, ISMS processes, policies, and compliance documentation. You will help internal teams understand their compliance responsibilities and provide practical guidance that allows them to meet requirements without creating unnecessary process. You will support customer-facing compliance activities, including security questionnaires and comp

我们是谁 我们的使命是为世界上最复杂的代码库带来清晰度与掌控力。AI正在加速代码创建，但用于理解、监督和演进这些代码的基础设施却未能跟上步伐。Sourcegraph为工程组织提供跨系统的全面可见性、为其代理提供精确上下文，以及大规模执行协调代码变更的能力。随着代理式开发成为主导工程范式，我们提供团队掌控其代码库所需的上下文层。借助Code Search、Deep Search、MCP和Agentic Batch Changes，我们今天就在实现这一使命——为工程团队及其AI工具提供跨仓库上下文，使其能够自信地驾驭庞大代码库，并能够一次性跨数百个仓库进行变更。Stripe、Reddit和Leidos等公司依赖Sourcegraph实现更快、更高质量的交付。我们获得a16z、Sequoia和Redpoint的支持，并自豪地作为一个全球分布式团队运营，重视高自主性、直接沟通和对客户的热爱。如果你想构建让每个工程团队——以及他们部署的每个代理——都能自信地在其代码库上操作的基础设施，请加入我们。工作地点 🌎 虽然我们几乎在世界任何地方招聘，但对于这个职位，我们更倾向于候选人居住在以下地点。不过，如果你觉得自己符合条件，我们欢迎你申请，不论地点如何。无论如何，工作时间必须每周至少20小时与GMT-3重叠。优先地点：美国 为什么这份工作令人兴奋 作为我们的合规经理，你将拥有并推动Sourcegraph的治理、风险和合规项目，主要聚焦于合规。这是一个高度跨职能的角色，与安全、工程、IT、法务、人事、销售以及公司其他团队密切合作。你将负责维护和演进我们的合规项目，包括拥有SOC 2和ISO 27001等认证，并随着业务增长为Sourcegraph准备更多框架。这不是一个你只需在大型合规组织中协调工作的角色。我们寻找的是亲自端到端负责审计和认证项目的人：设计和定制控制措施、收集证据、培训内部团队、直接与审计师合作、管理整改，并推动后续工作直至完成。📅 在一个月内，你将…… 你将在安全、工程、IT、法务、人事、销售和其他关键利益相关者之间建立牢固的工作关系。你将清晰理解Sourcegraph现有的治理、风险和合规项目，包括我们的ISMS、风险登记册、控制措施、认证、审计流程和当前重点领域。你将了解我们的SOC 2和ISO 27001项目目前如何运作，包括关键负责人、证据要求、未解决风险和即将到来的里程碑。你将开始直接参与日常合规活动，并识别改进或简化现有流程的机会。📅 在三个月内，你将…… 你将接管Sourcegraph正在进行的SOC 2和ISO 27001合规项目。你将独立管理关键审计活动，包括控制测试、证据收集、利益相关者协调、审计师请求、发现问题和整改。你将评估现有控制措施，并根据Sourcegraph的环境进行定制，而不是依赖过于规定性或通用的审计师建议。你将积极维护Sourcegraph的风险登记册、ISMS流程、政策和合规文档。你将帮助内部团队理解其合规责任，并提供实用指导，使他们能够满足要求而不产生不必要的流程。你将支持面向客户的合规活动，包括安全问卷和合规

⚑ 岗位信息收录自公开招聘页（Himalayas），以雇主官网为准