Lead Information Security Compliance Manager

About New Relic: New Relic is a leader in observability, empowering engineers with real-time insights to build better software, faster. We are deeply committed to fostering an environment of innovation and collaboration, where our technology and people thrive. Our mission is to be the observability platform of choice & the system of intelligence for customers.

Your opportunity

As the Lead Information Security Compliance Manager at New Relic, you will play a critical role in ensuring our innovative products meet global compliance standards and customer expectations. You will be a key partner to our product, engineering, legal, and security teams, providing guidance and oversight on a wide range of compliance and regulatory matters. This is an exciting opportunity to build and scale a product compliance program in a fast-paced, high-growth SaaS environment at the forefront of the observability and AI-powered analytics space.

This role requires a deep understanding of the evolving regulatory landscape, a strong technical foundation, and proven experience in partnering with engineering teams to embed compliance into the software development lifecycle.

What you’ll do

• Serve as the central point of contact for product compliance, working closely with Product Management, Engineering, Legal, Security, and Sales to integrate compliance requirements into the entire product lifecycle, from design to launch and beyond.
• Shape product capabilities to proactively balance compliance requirements with speed-to-market.
• Review product features and internal architecture to assess against compliance requirements.
• Identify and evaluate risks, including oversight and monitoring of our risk program in relation to product features.
• Stay abreast of global regulatory trends and translate them into actionable insights and requirements for product teams.
• Identify automation opportunities to enhance the review process in partnership with security and legal teams, incorporating minimum requirements that all capabilities must meet.

Your Qualifications

Must-Have:

Bachelor's degree in Computer Science, Information Security, or related field.Minimum of 8 years of experience as an Information Security Compliance Manager, Security and Compliance Manager, audit experienceStrong knowledge of and experience in security risk management and with frameworks including related regulatory compliance requirements (e.g., SOC 2, ISO 27001, HIPAA, PCI DSS, and NIST).Knowledge of or experience working with, Cloud technologies/environments, AWS, Azure, GCP, or other related cloud experience.Proven ability to translate complex regulatory and control language into practical policies, procedures, product requirements, and actionable guidelines for both technical and business teams.Creative and critical-thinking skills to build the development of automation and implementation of procedures that minimize operational overhead and help stakeholders meet the spirit of security controls.

• Experience with compliance in the context of AI/ML-powered products.

Bonus points if you have

List “nice-to-have” criteria, such as attributes/behavioral values, strongly desired qualifications, and working conditions.

• Knowledge of US government compliance standards, such as FedRAMP.
• Knowledge of/experience working in heavily regulated software or software-as-a-service industry.
• Familiarity with the observability and application performance monitoring (APM) market.
• Familiarity with New Relic products and capabilities.
• Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), or other relevant certifications.