[Hiring] Senior Technical Compliance Analyst @MongoDB

Role Description

MongoDB’s Compliance team leads the strategy, execution, and maintenance of the company’s global security certifications and regulatory requirements. The Senior Compliance Analyst is a senior individual-contributor role that leads high-stakes audits and specialized compliance workstreams.

Senior Technical Compliance Analyst (Public Sector) is a senior-level individual contributor role responsible for the lifecycle management of our most sensitive US government authorizations.

• Acts as a lead for high-stakes workstreams involving FedRAMP High, DoD IL5+, CJIS, and ITAR.
• Takes full ownership of complex federal assessments and leads the continuous monitoring strategy for our Atlas for Government product.
• Interprets NIST 800-53 controls and translates them into technical requirements for our engineering teams.
• Requirement: Must be a US Citizen.

This role will be based remotely in the United States.

Key Responsibilities

• Lead end-to-end external audits and certifications, coordinating scoping, audit plans, evidence, auditor engagement, findings, and final outcomes.
• Own internal audit cadences and remediation tracking; establish clear accountability for findings, milestones, dependencies, and resolution timelines.
• Serve as a lead point of contact for auditors and enterprise customers during security reviews and audit deep-dives.
• Map regulatory requirements to the central control framework and conduct gap analyses for new frameworks, jurisdictions, and market expansions.
• Assess compliance-program maturity and report material risks, gaps, trends, and delivery status to team and business leaders.
• Author and review customer-facing security documentation and audit evidence.
• Lead cross-functional workstreams that advance the ARC roadmap.
• Build and maintain executive and operational dashboards and Jira workflows for control performance, audit findings, and remediation progress.
• Lead the end-to-end execution of federal assessments, coordinating with Third Party Assessment Organizations (3PAOs), agency sponsors, and the FedRAMP PMO.
• Manage the federal continuous monitoring (ConMon) program.
• Lead the annual update and technical review of core FedRAMP artifacts.
• Act as a technical advisor to Engineering and Operations teams.

Expectations

• Operate independently in ambiguous, complex situations and exercise sound judgment with minimal supervision.
• Take accountability for program outcomes and proactively surface risks, trade-offs, and decisions that require escalation.
• Influence technical and business stakeholders across teams and levels.
• Communicate regulatory intent and technical control requirements in concise, actionable language.

Scope and Complexity

• Manage overlapping audit cycles and compliance work across international jurisdictions.
• Work ranges from complex evidence and control assessments to interpreting emerging requirements.
• Navigate the complexity of mapping shared controls across multiple specialized frameworks.

Authority and Impact

• Lead federal assessment project streams and represent MongoDB in technical reviews.
• Enable MongoDB to secure and maintain the authorizations required to serve the Department of Defense and civilian agencies.

Expertise and Leadership

• Develop deep subject-matter expertise in assigned frameworks.
• Serve as a trusted resource for mapping technical evidence to regulatory intent.
• Lead complex projects such as internal audits and framework renewals.
• Mentor colleagues and partner teams on effective compliance practices.

Qualifications

• Bachelor’s degree in a technical field (such as Information Systems, Computer Science, or Cybersecurity), or equivalent practical experience.
• 7+ years of experience in GRC, Information Security, or IT Audit, preferably in a SaaS or cloud environment.
• Demonstrated experience leading technical audits or compliance programs.
• Strong understanding of cloud security principles, risk management, and how controls operate in a cloud-native environment.
• Deep understanding of NIST 800-53 and NIST 800-171 controls.
• Proven track record of managing federal audits from kickoff through to the issuance of an Authorization to Operate (ATO).
• Exceptional ability to explain complex security configurations to government auditors and internal technical teams.
• Advanced proficiency in Jira and Confluence.
• Practical experience performing control mapping, gap analyses, remediation oversight, and program or control-maturity assessments.
• Excellent written and verbal communication skills.
• Certifications such as CISA, CRISC, CISSP, or ISO Lead Implementer are preferred.

Benefits

• Equity and participation in the employee stock purchase program.
• Flexible paid time off.
• 20 weeks fully-paid gender-neutral parental leave.
• Fertility and adoption assistance.
• 401(k) plan.
• Mental health counseling.
• Access to transgender-inclusive health insurance coverage.
• Health benefits offerings.