Senior Compliance Manager – Red Hat Product Security Compliance Team
Senior Compliance Manager to lead complex, multi-framework audit programs for our flagship cloud platforms. Act as primary lead for large-scale external audits and drive our strategic shift toward compliance automation. Ideal for a seasoned compliance professional who is technically curious, capable of navigating cross‑functional friction, and eager to architect a continuous audit‑ready ecosystem.
What you will do:
Lead the end‑to‑end execution of large‑scale consolidated audits (ISO 27001/17/18, SOC 2/3, PCI‑DSS, HIPAA, etc.). Manage external auditor relationships and hold accountability for successful, zero‑finding audit outcomes.
Partner with Product Security Engineering to operationalize AI‑driven compliance. Lead the implementation of AI‑agents, gap analysis tools, and automated evidence mapping to transform manual processes into high‑fidelity automated workflows.
Redesign our compliance “source of truth,” adopt Git‑based workflows, Markdown/YAML documentation, and centralized dashboarding to keep data audit‑ready and observable at all times.
Act as the primary compliance liaison between Product Security, SRE, Legal, and HR. Resolve complex blockers, negotiate evidence requirements, and facilitate technical tabletop exercises for BC/DR and IR.
Mentor Associate and Junior Program Managers on audit best practices, interview preparation, and stakeholder communication to raise the bar for the entire team’s output.
Influence the long‑term compliance roadmap by identifying bottlenecks, planning for new regulatory requirements (e.g., EU AI Act, QC1/QC2), and supporting the global expansion of our hybrid cloud offerings.
What you will bring:
5+ years of experience in GRC, Information Security, or IT Program Management, with a proven history of leading large‑scale external audits in cloud‑native or SaaS environments.
Subject matter expertise in current industry frameworks such as PCI‑DSS, ISO, SOC, HIPAA, etc.
Technical proficiency with Git, Markdown, and YAML, as compliance documentation lives in version control.
Strategic AI literacy – demonstrated ability to leverage AI/LLM tools (e.g., Gemini, Cursor, NotebookLM) to automate compliance tasks.
Project management and conflict resolution skills that navigate high‑pressure audit cycles and conflicting priorities across engineering and security teams.
Leadership presence to represent Red Hat compliance interests confidently before external auditors and internal executive stakeholders.
Benefits:
Comprehensive medical, dental, and vision coverage
Flexible Spending Account – healthcare and dependent care
Health Savings Account – high deductible medical plan
Retirement 401(k) with employer match
Paid time off and holidays
Paid parental leave plans for all new parents
Leave benefits including disability, paid family medical leave, and paid military leave
Additional benefits such as employee stock purchase plan, family planning reimbursement, tuition reimbursement, transportation expense account, employee assistance program, and more!
The salary range for this position is $118,600.00 – $195,680.00. Actual offer will be based on your qualifications.
Red Hat determines compensation based on factors such as job location, experience, applicable skills and training, external market value, and internal pay equity. Annual salary is one component of Red Hat’s compensation package. This position may also be eligible for bonus, commission, and/or equity.
Equal Opportunity Policy (EEO)
Red Hat is proud to be an equal opportunity workplace and an affirmative action employer. We review applications for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, citizenship, age, veteran status, genetic information, physical or mental disability, medical condition, marital status, or any other basis prohibited by law.
Red Hat supports individuals with disabilities and provides reasonable accommodations. If you need assistance completing our online job application, email . General inquiries regarding the status of a job application will not receive a reply.
#J-18808-Ljbffr