Compliance Enablement Technical Program Manager

🔥 12 hours ago

🌐 Canada, United Kingdom – Remote

🇨🇦 Canada – Remote 🇬🇧 United Kingdom – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔧 Technical Program Manager

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sophos

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1985

💼 Consulting

🏥 Healthcare

🏭 Manufacturing

💰 Post-IPO Equity on 2021-08

Consulting • Healthcare • Manufacturing

Sophos is a leading cybersecurity company that specializes in protecting businesses against advanced cyber threats. The company offers a comprehensive suite of security solutions, including endpoint protection, managed detection and response (MDR), network security, and cloud security. With a prevention-first approach, Sophos aims to stop ransomware and other cyber threats before they cause harm. Sophos provides services such as threat research, security training, and operational support to ensure robust defense against cyberattacks. Their solutions cater to various industries including finance, healthcare, government, manufacturing, and retail. The Sophos Central platform delivers centralized security management, integrating seamlessly with existing IT infrastructure to enhance security posture.

📋 Description

• Serve as the technical subject-matter expert and primary point of contact for the Trust and Assurance team • Interpret systems and controls, guide technical decisions, and identify workflow and tooling efficiencies • Oversee control mapping, evidence collection, monitoring workflows, and GRC integrations with cloud platforms and internal systems • Translate technical controls into automated, continuous checks • Expand monitoring coverage and replace manual reviews with ongoing monitoring • Ensure every control has an accountable owner • Support gap assessments and rollout of new frameworks • Keep controls continuously audit-ready • Partner with engineering teams to embed compliance into workflows and processes • Manage initiatives through completion • Communicate compliance risk, control status, and program progress to technical and non-technical stakeholders

🎯 Requirements

• 4+ years in GRC, compliance, or a technical role supporting cybersecurity programs • Experience leading programs and guiding or mentoring others • Strong program and project management skills • Knowledge of cybersecurity frameworks including NIST 800-53, ISO 27001, SOC 2, and/or FedRAMP • Hands-on audit experience • Technical understanding of AWS, Azure, or GCP, APIs, and data flows • Ability to lead technical discussions with engineers and subject-matter experts • Hands-on experience with a GRC or compliance-automation platform such as LogicGate, ServiceNow, or Drata • Comfort using AI tools in compliance workflows • Strong written and verbal communication skills • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent experience • Ability to write code or scripts such as Python (desired) • Experience with AI/ML-powered or agentic applications, API integrations, CI/CD pipelines, or production-grade services (desired) • Technical background in systems administration, software engineering, cloud security, or security engineering (desired) • Experience leading SOC 2 Type II, ISO 27001, FedRAMP, or NIST 800-53 audits end-to-end (desired) • Familiarity with OSCAL, Tenable, Splunk, Git, Terraform, Puppet, or Jenkins (desired) • Experience in SaaS, GovCloud, FinTech, or other highly regulated environments (desired) • Professional certifications such as CISSP, CISM, CISA, CCSP, CCSK, or ISO 27001 Lead Auditor (desired)

🏖️ Benefits

• Remote-first working model • Employee-led diversity and inclusion networks • Annual charity and fundraising initiatives • Volunteer days • Global employee sustainability initiatives • Global fitness and trivia competitions • Global wellbeing days • Monthly wellbeing webinars and training • Recruitment and selection process adjustments for applicants who need support