Loading...
ManagerFull-timeRustAIAPI
Salary Range
$16,320 - $22,080 /year
This salary is estimated based on similar roles. The actual salary may vary.
About the Role
We are looking for a Compliance Program Manager to join Kong’s team. This role is responsible for end-to-end ownership of compliance programs, acting as an internal auditor, and ensuring continuous audit readiness across Kong’s product portfolio.
Key Responsibilities
- →Act as an internal auditor, continuously assessing the effectiveness of security and compliance controls across Kong’s products.
- →Ensure ongoing audit readiness for compliance frameworks including ISO 27001 and SOC 2 Type II.
- →Provide clear guidance on compliance requirements and expectations.
- →Plan and execute internal control reviews and readiness assessments.
- →Identify control gaps and weaknesses across Kong’s products and supporting processes.
- →Collaborate closely with Customer Assurance SMEs to remediate identified compliance gaps.
- →Partner with Security, Engineering, SRE, Product, Legal, and IT teams to drive remediation efforts.
- →Track remediation activities and ensure timely closure of findings.
- →Maintain compliance dashboards, metrics, and reporting for leadership.
- →Own and manage external audits and assessments end-to-end.
- →Own the development, maintenance, and periodic review of security and compliance policies.
Requirements
- ✓8+ years of experience in Compliance, GRC, Security, or Risk Management roles.
- ✓Strong working knowledge of ISO 27001 and SOC 2 Type II.
- ✓Proven experience acting as an internal auditor or compliance program owner.
- ✓Hands-on experience managing external audits and assessments.
- ✓Experience supporting multiple products or business units in a SaaS or technology organization.
- ✓Understanding of control design, implementation, and testing.
- ✓Familiarity with risk assessment and continuous compliance models.
- ✓Ability to understand and assess controls in SaaS, cloud, and hybrid environments.
- ✓Experience working with Engineering and SRE teams on technical controls.
- ✓Strong documentation and evidence management skills.
- ✓Excellent written and verbal communication skills.
- ✓Bachelor’s degree in Information Security, Computer Science, Risk Management, or a related field, or equivalent experience.
- ✓Certifications such as CISSP, CISA, CRISC, ISO 27001 Lead Implementer or Lead Auditor are preferred, but not mandatory.
Free to sign up. Takes 30 seconds.
