About the Position

Compliance Manager [IC3]

Remote

About the Company

Our mission is to bring clarity and control to the world's most complex codebases. AI is accelerating code creation, but the infrastructure to understand, oversee, and evolve that code hasn't kept pace. Sourcegraph gives engineering organizations full visibility across their systems, precise context for their agents, and the ability to execute coordinated code changes at scale. As agentic development becomes the dominant engineering paradigm, we provide the context layer teams need to take control of their codebase.

With Code Search, Deep Search, MCP, and Agentic Batch Changes, we deliver on that mission today - giving engineering teams and their AI tools the cross-repo context to navigate massive codebases with confidence, and the ability to make changes across hundreds of repositories at once.

Companies like Stripe, Reddit, and Leidos rely on Sourcegraph to ship faster and with higher quality. We're backed by a16z, Sequoia, and Redpoint, and proud to operate as a globally distributed team that values high agency, direct communication, and customer love.

If you want to build the infrastructure that lets every engineering team - and every agent they deploy - operate on their codebase with confidence, join us.

Hours & Location

🌎 While we hire almost anywhere in the world, we have a preference for someone to reside in the following locations for this role. However, if you feel qualified, we welcome you to apply regardless of location. No matter what, working hours must overlap with GMT-3 for at least 20 hours/week.

Preferred locations:

Why this Job is Exciting

As our Compliance Manager, you will own and drive Sourcegraph’s governance, risk, and compliance program, with a primary focus on compliance. This is a highly cross-functional role that works closely with Security, Engineering, IT, Legal, People, Sales, and other teams across the company.

You will be responsible for maintaining and evolving our compliance program, including owning certifications such as SOC 2 and ISO 27001 and preparing Sourcegraph for additional frameworks as the business grows. This is not a role where you will simply coordinate work across a large compliance organization. We are looking for someone who has personally owned audit and certification programs end to end: designing and tailoring controls, collecting evidence, training internal teams, working directly with auditors, managing remediation, and driving follow-up work through completion.

Responsibilities

Build strong working relationships across Security, Engineering, IT, Legal, People, Sales, and other key stakeholders.
Develop a clear understanding of Sourcegraph’s existing governance, risk, and compliance program, including our ISMS, risk register, controls, certifications, audit processes, and current areas of focus.
Understand how our SOC 2 and ISO 27001 programs operate today, including key owners, evidence requirements, open risks, and upcoming milestones.
Begin participating directly in day-to-day compliance activities and identify opportunities to improve or simplify existing processes.

Requirements

5+ years of experience in governance, risk, compliance, information security compliance, or a related role.
Demonstrated end-to-end ownership of SOC 2 and ISO 27001 programs, ideally within a SaaS, technology startup, or similarly fast-moving environment.
Experience personally managing external audits and certification processes, including audit preparation, evidence collection, control testing, stakeholder training, auditor interaction, remediation, and follow-up.
Strong understanding of risk management, control design, ISMS governance, and compliance program operations.
Experience adapting compliance controls to an organization's actual environment rather than applying generic or overly prescriptive requirements.
Familiarity with cloud-based technology environments and the security and compliance considerations associated with a distributed or remote workforce.
Strong project management and organizational skills with the ability to drive cross-functional initiatives from inception through completion.
Excellent written and verbal communication skills and the ability to explain compliance requirements clearly to both technical and non-technical audiences.
A hands-on mindset and willingness to personally execute the work required to keep the compliance program operating effectively.
Curiosity about AI, automation, and emerging technology, with an interest in using new tools to improve compliance workflows.

Nice to Have

Experience with additional security, privacy, or compliance frameworks such as GDPR, HIPAA, HITRUST, FedRAMP, FISMA, PCI DSS, or related standards.
Experience supporting security questionnaires, customer assurance processes, or sales-related compliance activities.
Experience with GRC platforms, compliance automation tools, or building internal automation for evidence collection and control monitoring.
Relevant certifications such as CISA, CISSP, ISO 27001 Lead Implementer or Lead Auditor, CRISC, or similar credentials.

We Offer

Competitive salary ranging from $102,899 USD to $137,718 USD based on location zone.
Meaningful equity.
Generous perks & benefits.
Opportunity to work in a globally distributed team that values high agency, direct communication, and customer love.

Interview Process

Below is the interview process you can expect for this role (you can read more about the types of interviews in our Handbook). It may look like a lot of steps, but rest assured that we move quickly and the steps are designed to help you get the information needed to determine if we’re the right fit for you… Interviewing is a two-way street, after all!

We expect the interview process to take 5 hours in total.

👋 Introduction Stage - we have initial conversations to get to know you better…

[30m] Recruiter Screen
[30m] Hiring Manager Screen

🧑‍💻 Team Interview Stage - we then delve into your experience in more depth and introduce you to members of the team, including cross-functional partners…

[Async] Working assignment
[60m] Assignment Walkthrough + Review
[60m] Resume Deep Dive
[60m] Technical Interview

🎉 Final Interview Stage - we move you to our final round, where you gain a better understanding of our business and values holistically…

[30m] Values
[30m] Leadership
We check references and conduct your background check

Please note - you are welcome to request additional conversations with anyone you would like to meet, but didn’t get to meet during the interview process.

Learn More About Us

You can learn more about what it is like to work at Sourcegraph by reading our handbook.

We are an ambitious team who are collectively working hard to build the most influential company in the world. You can read more about our culture, competitive compensation and benefits here.

Sourcegraph is an equal opportunity workplace; we welcome people from all backgrounds.

Sourcegraph participates in E-Verify for U.S. Employees.

Apply for This Job

Interested in building your career at Sourcegraph? Get future opportunities sent straight to your email.

Compliance Manager [IC3]

Job description