MongoDB is seeking a Regulatory Change Management Program manager to help anticipate regulatory developments within Technology, Cyber Security and AI spaces, assess their implications for the business, and ensure material obligations are identified and addressed before they create unexpected risk or exposure. This role reports to the Director of Operations within MongoDB’s Assurance, Risk & Compliance (ARC) team.

You will monitor the regulatory environment, assess applicability and compliance impact, and give the ARC team a clear view of emerging obligations, exposure, and readiness. In addition to working within ARC, you will work across Privacy, Legal, Product, Engineering, People, and other business teams, providing the insight, interpretation, and escalation that help accountable owners respond early and proportionately.

We are looking to speak to candidates who are based in Dublin for our hybrid working model.

What you will do

Regulatory horizon scanning and change management

Monitor and triage developments in data protection, privacy, cybersecurity, digital resilience, artificial intelligence, online services, and other regulations relevant to MongoDB
Maintain a forward-looking regulatory change inventory, including source, effective date, applicability, affected business areas, accountable stakeholders, and current assessment status
Collaborate with legal to assess whether a regulatory development is relevant to MongoDB’s products, services, entities, customers, suppliers, workforce, or operating model
Prepare concise impact assessments, obligation summaries, briefing notes, and escalation papers for senior stakeholders within ARC group and Global Security Organization
Coordinate regulatory change assessments across subject-matter experts
Track decisions, dependencies, risks, and overdue responses; identify where ownership or interpretation is unclear
Surface emerging themes and potential blind spots

Data protection and Data classification

Collaborate with the Security team, the Privacy and Legal teams with GDPR and related data-protection analysis across products, business processes, and third-party relationships
Escalate potential compliance gaps, or unresolved interpretation questions
Help maintain and evolve a practical data-classification framework aligned to regulatory, security and business requirements
Advise teams from Compliance perspective on classification decisions for information used in internal systems, customer engagements, and third-party services
Review Compliance related classification challenges and exceptions for consistency, proportionality, and traceability

Oversight, reporting, and assurance

Develop dashboards and reporting that show exposure, readiness, ownership, overdue decisions, and material trends rather than activity for its own sake
Support internal compliance requests, regulatory enquiries, and control assessments by coordinating evidence and explaining the basis for conclusions
Contribute to policies, standards, playbooks, and training content where regulatory interpretation or risk context is required

What we are looking for

Five or more years of experience in regulatory change management in compliance, privacy, or a closely related discipline
Practical knowledge of data-protection principles, especially GDPR and UK GDPR, including lawful processing, accountability, data minimisation, transfers, retention, and individual rights
Exposure to DORA, NIS2, the EU AI Act, ePrivacy requirements, digital-services regulation, or comparable technology regulation
Experience working with in-house legal teams to interpret laws, regulations, regulatory guidance, or contractual requirements and translating them into obligations, applicability assessments, risks, and decisions
Experience supporting regulatory change management, horizon scanning, obligations management, or compliance impact assessments
Understanding of data classification, information governance, records management, or data-handling frameworks
Strong analytical and problem-solving skills, with the ability to distinguish material risk from noise and draw clear conclusions from incomplete information
Excellent written communication skills, including the ability to produce concise briefings, evidence-based recommendations, and documentation for technical and non-technical audiences
Strong stakeholder-management and collaboration skills, with the confidence to work across Legal, Privacy, Security, Engineering, Product, Procurement, People, and customer-facing teams
High attention to detail and strong organisational skills, including the ability to manage multiple priorities, deadlines, dependencies, and follow-ups
A proactive, questioning mindset: you look for what could be missed, what has changed, who is affected, and what evidence would change the conclusion
Ability to work independently, exercise sound judgement, and escalate appropriately when ownership, applicability, or risk is unclear

Nice to have

Experience in a technology, SaaS, cloud, platform, or other highly regulated environment
Familiarity with information-security and assurance frameworks such as ISO 27001, SOC 2, NIST CSF, or the Cloud Security Alliance controls
Experience working with regulatory inventories, GRC platforms, privacy-management tools, data catalogues, or workflow systems
A relevant qualification such as CIPP/E, CIPM, CIPT, IAPP FIP, CISA, CRISC, or an equivalent professional credential

What success looks like

Leaders receive early, decision-useful insight into regulatory developments that could affect MongoDB
Regulatory changes have a clear applicability assessment, accountable owner, documented rationale, and visible next step
Data-classification questions are answered consistently, with uncertainty and residual risk made explicit
The organisation can distinguish between a confirmed obligation, an interpretation requiring legal advice, an implementation task, and an unresolved risk
Audits, customer reviews, and regulatory conversations are supported by current evidence and a clear explanation of how conclusions were reached
Teams are less likely to be surprised by new obligations, missed dependencies, unclear ownership, or unsupported compliance claims

About MongoDB

MongoDB is built for change, empowering our customers and our people to innovate at the speed of the market. We have redefined the data platform for the AI era, enabling builders to create, transform, and disrupt industries with software. MongoDB’s unified data platform, the most widely available, globally distributed data platform on the market, helps organizations modernize legacy workloads, embrace innovation, and unleash AI. Our cloud-native platform, MongoDB Atlas, is the only globally distributed, multi-cloud data platform and is available across AWS, Google Cloud, and Microsoft Azure.

With offices worldwide and over 67,000 customers, including AI-native startups and approximately 75% of the Fortune 100, relying on MongoDB for their most important applications, we’re powering the next era of software.

Our compass at MongoDB is our Leadership Commitment, guiding how and why we make decisions, show up for each other, and win. It’s what makes us MongoDB.

To drive the personal growth and business impact of our employees, we’re committed to developing a supportive and enriching culture for everyone. From employee affinity groups, to fertility assistance and a generous parental leave policy, we value our employees’ wellbeing and want to support them along every step of their professional and personal journeys. Learn more about what it’s like to work at MongoDB, and help us make an impact on the world!

MongoDB is committed to providing any necessary accommodations for individuals with disabilities within our application and interview process. To request an accommodation due to a disability, please inform your recruiter.

MongoDB is an equal opportunities employer.

Req ID: 3273589204

Regulatory Compliance Program Manager

Benefits

Job Description