Security Compliance Manager at Databricks in San Francisco, CA

• Lead, implement, maintain, and improve Databricks compliance initiatives and audits (e.g. SOC 2, ISO 27001, ISO 27018, PCI-DSS, HIPAA, etc.).
• Collect and manage evidence for audits.
• Work with other teams such as Engineering, IT, and HR to ensure compliance across the organization.
• Consult on the compliance requirements for new security controls.
• Consult on the implementation of security requirements in contracts.
• Help manage security training.
• Help perform vendor security assessments.

Competencies

• Bachelor degree in computer science or related field.
• 5+ years of security compliance or audit related experience.
• Extensive security control auditing or implementation experience.
• SOC 2, ISO 27001, ISO 27018, PCI-DSS, or HITRUST auditing or implementation experience.
• Exposure to AWS, Azure, and/or GCP.
• Understanding of security risk management and security best practices.
• Understanding of security policies.
• Ability to work across teams.
• Excellent written and verbal communication skills.
• CISSP certification.
• CISA certification is a plus.
• Understanding of NIST CSF a plus.
• NIST 800-171 experience is a plus.