At Red Hat, we connect an innovative community of customers, partners, and contributors to deliver an open source stack of trusted, high-performing solutions. We offer cloud, Linux, middleware, storage, and virtualization technologies, together with award-winning global customer support, consulting, and implementation services. Red Hat is a rapidly growing company supporting more than 90% of Fortune 500 companies.

The Product Security Compliance team is looking for a highly motivated and experienced Senior Compliance Program Manager to join our team. The team is growing and we have a big vision. This role is a key driver in navigating complex, multi-layered compliance initiatives. This includes building relationships with the teams we work with most closely, writing, reviewing and improving process documents, and collecting appropriate evidence. Red Hat embraces a remote working culture and promotes work flexibility. This team, and many of the people you would work with, are remote and you would be welcome to work from home as well.

What you will do

Work with vendors, including assessors and other third party organizations.
Set a path forward for your assigned compliance goals, be it internal audit, SOC, PCI, ISO, DORA or CRA.
Develop and maintain detailed project plans to meet compliance objectives.
Drive the audit and certification process forward, in many instances, multiple audits are at different stages.
Use your knowledge to help us identify novel solutions to meeting specific controls and requirements.
Improve our current methodology, tracking, documentation, and reporting processes.
Partner with cross-functional teams, including IT, Legal, HR, and Finance, to ensure a cohesive approach to compliance and risk management across departments.
Work with InfoSec and Global engineering to share information and improve processes.
Stay informed on evolving regulations, security threats, and compliance technologies, making recommendations to improve compliance processes and security measures.

What you will bring

Program Management Expertise: Minimum of 3-5 years of hands-on experience managing complex, technical compliance programs and leading both internal and external certification audits.
Deep, practical familiarity with the types of technical evidence required for various audits.
Knowledge of cloud security practices and technologies is essential.
Excellent communication and leadership skills, with the ability to influence and work effectively with stakeholders across all levels.
Strong analytical skills for assessing compliance risks, identifying vulnerabilities, and implementing solutions.
Familiarity with security technologies and cybersecurity practices to include automation.
Professional certifications such as CISSP, CISM, CRISC, or CISA are preferred.

About Red Hat

Red Hat is the world’s leading provider of enterprise open source software solutions, using a community-powered approach to deliver high-performing Linux, cloud, container, and Kubernetes technologies. Spread across 40+ countries, our associates work flexibly across work environments, from in-office, to office-flex, to fully remote, depending on the requirements of their role. Red Hatters are encouraged to bring their best ideas, no matter their title or tenure. We're a leader in open source because of our open and inclusive environment. We hire creative, passionate people ready to contribute their ideas, help solve complex problems, and make an impact.

Inclusion at Red Hat
Red Hat’s culture is built on the open source principles of transparency, collaboration, and inclusion, where the best ideas can come from anywhere and anyone. When this is realized, it empowers people from different backgrounds, perspectives, and experiences to come together to share ideas, challenge the status quo, and drive innovation. Our aspiration is that everyone experiences this culture with equal opportunity and access, and that all voices are not only heard but also celebrated. We hope you will join our celebration, and we welcome and encourage applicants from all the beautiful dimensions that compose our global village.

Equal Opportunity Policy (EEO)
Red Hat is proud to be an equal opportunity workplace and an affirmative action employer. We review applications for employment without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, citizenship, age, veteran status, genetic information, physical or mental disability, medical condition, marital status, or any other basis prohibited by law.

Red Hat does not seek or accept unsolicited resumes or CVs from recruitment agencies. We are not responsible for, and will not pay, any fees, commissions, or any other payment related to unsolicited resumes or CVs except as required in a written contract between Red Hat and the recruitment agency or party requesting payment of a fee.

Red Hat supports individuals with disabilities and provides reasonable accommodations to job applicants. If you need assistance completing our online job application, email application-assistance@redhat.com. General inquiries, such as those regarding the status of a job application, will not receive a reply.

Senior Program Manager - The Product Security Compliance Team

Job Description