Senior Compliance Manager

About the role

The organization operates a leading fundraising platform and donor management system for nonprofit organizations. It addresses the challenge nonprofits face in effectively raising funds and managing supporter relationships. Since 2014, the platform has supported over 100,000 global organizations in raising more than $3 billion in donations. The company has a fully distributed, diverse team across multiple states and countries and has been recognized as one of the Best Places to Work in Washington, DC. It is rated highly on G2 for fundraising, donor management, and nonprofit payment software, reflecting trust from its user base.

The Senior Compliance Manager will lead and expand the organization’s global compliance and risk programs related to data protection, security, and regulatory standards. This role ensures adherence to frameworks such as GDPR, PCI DSS, SOC 2, ISO 27001, and HIPAA while creating scalable processes to support growth. The position collaborates with multiple internal teams and external auditors to manage audits, reduce risks, and prepare the company for enterprise-level requirements. The role is critical in balancing compliance obligations with enabling business development and product innovation.

Responsibilities

• Own and expand the global compliance program across regulatory, security, and privacy areas
• Lead external audits and certifications including SOC 2, PCI DSS, and ISO 27001
• Develop and maintain policies, controls, and governance frameworks aligned with business needs
• Support Sales and Customer teams in security reviews and enterprise deals
• Manage vendor risk and third-party compliance processes
• Identify, assess, and mitigate organizational compliance and security risks
• Apply a risk-based approach to compliance, balancing regulatory and business needs
• Oversee compliance incidents, requests, and inquiries with timely resolution and escalation
• Utilize tools like Vanta to track compliance, automate workflows, and enhance reporting
• Develop and deliver internal compliance training and awareness programs
• Advise General Counsel and leadership on compliance strategy, risk, and business trade-offs

Requirements

• 5 to 10+ years in compliance, risk, IT audit, or security governance roles
• Experience building and maintaining compliance programs, including audits and risk assessments
• Strong knowledge of GDPR, SOC 2, PCI DSS, ISO 27001 frameworks
• Experience managing audits and working with external auditors
• Ability to translate regulatory requirements into practical business processes
• Strong judgment in applying regulatory requirements pragmatically
• Experience with compliance automation tools, preferably Vanta
• Preferred:
  • Background in SaaS, fintech, payments, healthcare, or data-intensive environments
  • Technical and product understanding to collaborate with Product and Engineering teams
  • Experience supporting enterprise sales through security questionnaires and compliance requests
  • Expertise in one or more security/compliance frameworks
  • Knowledge of vendor risk management and subprocessor oversight
  • Experience with US, UK, and EU regulatory landscapes
  • Relevant certifications such as CISA, CISM, CISSP, or ISO Lead Auditor

Pay

Salary range is $130,000 to $160,000, based on experience and location

Benefits

• Fully remote work
• 21 days of paid time off including birthday, 8 holidays, 2 paid volunteer days, and 5+ sick days depending on state
• Employer-sponsored health insurance including medical, dental, vision, and life insurance
• 401(k) with employer match up to 4%
• Reimbursement for home office and professional development expenses up to $1,500
• Eligibility for employee equity plan (stock options)
• Wellness program offering fitness and mindfulness classes