MongoDB

Program Manager

In short

Mid-to-senior individual contributor role on MongoDB's Compliance team, leading high-stakes external audits (ISO 27001, SOC2, PCI, IRAP, ENS High, ISO 22301) and managing Financial Services customer audit relationships. Requires 7+ years in GRC, Information Security, or IT Audit within a high-growth SaaS/Cloud environment, strong cloud security knowledge (AWS/GCP/Azure), and experience with gap analyses and maturity assessments; relevant certifications (CISA, CRISC, CISSP, ISO Lead Implementer) are highly preferred. Hybrid role based in Dublin, managing audits across multiple global jurisdictions (Spain, Australia, US).

About the Team
The Compliance team at MongoDB manages the strategy, execution, and maintenance of our global security certifications and regulatory requirements. We ensure that our cloud database products meet the rigorous security standards required by our customers in the most highly regulated industries worldwide. We act as the primary interface between external auditors and our internal Product, Engineering, and Legal teams. Our goal is to translate complex regulatory requirements into scalable operational processes, maintaining a compliant and audit-ready posture across our diverse portfolio.
The Program Manager is a mid-to-senior level individual contributor role responsible for leading high-stakes audits and specialized compliance workstreams. This role takes full ownership of complex international frameworks—such as IRAP and ENS High—and manages the relationship with our Financial Services customers during audit deep-dives. You will lead internal audit cadences and perform gap analyses for new market expansions. We are looking to speak to candidates who are based in Dublin for our hybrid working model.
Responsibilities
•Lead the end-to-end execution of specialized external audits (e.g., PCI, SOC2, ENS High, IRAP, ISO 22301) and coordinate all phases from initial scoping to final certification
•Serve as the lead point of contact for Financial Services customer audits, facilitating meetings, responding to security questionnaires, and defending our control environment to external stakeholders
•Lead internal audit cadences and drive the POA&M tracking process, ensuring technical teams remediate findings within required SLAs
•Map new regulatory requirements to our central control framework, performing gap analyses to identify where existing controls can be leveraged for new certifications
•Conduct NIST CSF or similar maturity assessments to monitor the effectiveness of the Compliance Program and report findings to team leads
•Author and review customer-facing security documentation, ensuring it accurately reflects our technical controls and architectural guardrails
•Partner with Engineering and Product leads to implement compliance-by-design, ensuring future product roadmaps align with global regulatory shifts
•Operate with minimal supervision as a subject matter expert; own the success of the program, not just task tracking
•Navigate complex audit negotiations with external parties and drive internal technical teams toward compliance milestones without disrupting innovation
•Manage overlapping audit cycles across different global jurisdictions (e.g., Spain, Australia, US) and complex industry sectors
•Identify how a single technical control can satisfy multiple global regulatory requirements simultaneously
•Lead audit engagements and represent MongoDB's security posture to sophisticated Financial Services customers
•Enable the sales organization to close enterprise-level deals in highly regulated markets by securing and maintaining certifications
•Act as an expert in implementing MongoDB's Common Controls Framework and in mapping technical evidence to regulatory intent for standards like IRAP and PCI
Requirements
•7+ years in GRC, Information Security, or IT Audit, specifically within a high-growth SaaS/Cloud environment
•Deep understanding of cloud security principles (AWS/GCP/Azure) and a proven track record leading technical audits for ISO 27001, SOC 2, or PCI
•Solid grasp of audit processes, terminology, and risk assessment standards. Certifications such as CISA, CRISC, CISSP, or ISO Lead Implementer are highly preferred
•Exceptional ability to lead meetings with external customers and auditors, translating technical complexities into business risk and compliance assurance
•Advanced proficiency in Jira for tracking control performance data and managing high-volume remediation workflows
•Practical experience performing gap analyses and maturity assessments at an enterprise level
About MongoDB
MongoDB is built for change, empowering our customers and our people to innovate at the speed of the market. We have redefined the data platform for the AI era, enabling builders to create, transform, and disrupt industries with software. MongoDB's unified data platform, the most widely available, globally distributed data platform on the market, helps organizations modernize legacy workloads, embrace innovation, and unleash AI. Our cloud-native platform, MongoDB Atlas, is the only globally distributed, multi-cloud data platform and is available across AWS, Google Cloud, and Microsoft Azure. With offices worldwide and over 67,000 customers, including AI-native startups and approximately 75% of the Fortune 100, relying on MongoDB for their most important applications.
MongoDB offers employee affinity groups, fertility assistance, and a generous parental leave policy.
Work Mode
Hybrid, based in Dublin.

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot