Compliance Program Manager

About this role

Lead PlanetScale’s FedRAMP readiness and authorization-to-operate process, while managing its ongoing SOC 1, SOC 2, and PCI DSS compliance programs. Partner across internal teams and with external auditors to assess risks, improve controls, and support customer trust.

About the company

PlanetScale is a database-as-a-service platform that offers a cloud-native solution built on Vitess, designed to provide developers with scalable, reliable, and globally distributed databases. The company serves organizations needing robust data infrastructure solutions.

Stack

What you'll do

• Oversee FedRAMP readiness and the ATO process from start to finish
• Coordinate audits and assessments, including planning, evidence review, procedure evaluation, and auditor walkthroughs
• Establish and report compliance program KPIs and maturity metrics
• Work with internal teams to address privacy, data protection, and compliance risks
• Identify security and compliance gaps and implement remediating controls

What we're looking for

• 5+ years contributing to or managing technology-sector audits, including demonstrable FedRAMP expertise
• Experience with SOC 2 and PCI DSS as a contributor or control owner
• Strong written, verbal, and interpersonal communication skills
• Experience working remotely and asynchronously across teams and time zones
• Experience working with external auditors, consultants, and legal teams
• Experience contributing to or managing companywide risk assessments
• Knowledge of cloud service providers, such as AWS, Azure, or GCP

Nice to have

• Experience with databases, developer tools, infrastructure, or other technical products
• CISSP preferred; CISA or CISM also relevant
• Working knowledge of SQL, preferably MySQL or PostgreSQL