Risk and Compliance Manager, Atlassian

Atlassian

Location:

India, Bengaluru

Category:

IT - Administration

Contract Type:

Not provided

Salary:

Not provided

Save Job

Apply Position

Job Description:

The Program Manager position will report to the Head of Risk for the India team and join our growing team within Governance, Risk and Compliance. The team is responsible for governance, compliance, enterprise risk management and business resilience. The Compliance risk team coordinates and guides readiness efforts related to Atlassian cloud compliance (SOC 2, ISO 27001/27018, HIPAA, PCI and C5) and sits within the Trust organisation. You will collaborate with technical leads and subject matter experts to analyse processes, business models, and controls to discover and translate risks/gaps, and provide mitigating recommendations to the leadership team. You will drive continuous process improvement, and collaborate with business and technology teams, both internally and externally to implement new solutions.

Job Responsibility:

Perform design and operating effectiveness testing on controls to ensure compliance with SOC 2, ISO 27001/27018, C5, HIPAA and other compliance obligations
Collaborate with control owners to review the design and effectiveness of controls, ensuring they meet certification requirements
Identify any gaps in compliance and work with relevant teams to remediate findings before the external audit
Drive control automation & control monitoring efforts
Maintain comprehensive documentation of controls, testing procedures, and evidence to support compliance efforts
Work closely with internal stakeholders, including product and functional teams, to address architectural, infrastructure, or new services that impact compliance
Assist in preparing for external audits by ensuring all necessary documentation and evidence are in place and up to date
Assess and document the impact of control gaps in SOC reports of critical third party suppliers
Identify compensating controls and follow up with business owners
Perform design and operating effectiveness testing on predefined Privacy controls to ensure compliance with GDPR
Manage and coordinate external audit activity for SOC 2, ISO 27001/27018, HIPAA, PCI and C5 external audits - maintain a project plan, schedule necessary walkthroughs, and act as single point of contact for audit requests
Identify opportunities for process improvements and implement best practices to enhance the efficiency and effectiveness of the readiness testing process
Develop controls and mitigation plans, and lead aspects of their implementation
Work with senior management to improve their controls portfolio
Provide regular status updates ensuring everyone is aware of progress and road-blockers
Promote effective teamwork, collaboration, and commitment across the Product Compliance team and the broader organisation
Seek opportunities to improve processes and collaboration to increase team output and team health

Requirements:

Minimum 5 years of experience in IT audit, compliance, control monitoring or a related field
Experience with SOC 2, ISO 27001/27018, HIPAA, PCI, C5 and GDPR frameworks and requirements
Familiarity with compliance frameworks and standards such as NIST 800-53
Experience with the software development business for cloud service providers
Experience with Technology Risk Management, Compliance and Information Security
Experience with control and risk frameworks, performing compliance and risk assessments, creating controls and overseeing mitigation projects
Experience with translating compliance requirements to engineering and product teams
Experience with determining scope, timeline creation, complex project tracking, risk management, and process improvement
Familiarity with Jira and Confluence
Relevant certifications such as CISA, CISSP, or ISO 27001 Lead Auditor are highly desirable

What we offer:

health coverage
paid volunteer days
wellness resources

Additional Information:

Job Posted:

March 19, 2025

Employment Type:

Fulltime

Work Type:

Remote work

View All Jobs In This Company

Job Link Share:

Risk and Compliance Manager