SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Lead Datadog's Commercial Audit engineering team, responsible for scaling the company's security and compliance posture through automation, tooling, and engineering excellence. You will manage a team of engineers and analysts transitioning to a GRC (Governance, Risk, and Compliance) engineering direction, treating compliance as a software problem leveraging AI, custom tooling, CI/CD pipelines, and cloud-native services.
Your core responsibilities include: developing and executing strategy for commercial audit initiatives, shifting from manual processes to automated, scalable platforms; building and mentoring a high-performing team of engineers and analysts; partnering with Information Security to operationalize a common control framework integrated into Datadog's architecture; driving development of internal tooling to automate evidence collection and dashboarding; defining and tracking program metrics around control coverage, audit efficiency, and automation adoption; and collaborating with engineering teams to embed compliance-by-design into infrastructure, CI/CD pipelines, and cloud-native services.
You will act as a bridge between technical engineering, legal, and compliance functions, enabling the organization to move fast while maintaining a secure and compliant environment. You champion a "compliance-as-code" culture, identifying opportunities to automate evidence collection, streamline control testing, and reduce manual toil.
Ideal candidates bring strong technical backgrounds with ability to review code (Python, Go), interpret architecture diagrams, and understand infrastructure (Kubernetes, AWS/GCP/Azure). Deep understanding of modern compliance landscape (HIPAA, SOC2, PCI, ISO 27001, FedRAMP) and experience implementing at scale in cloud-native environments is essential. You are a steady, low-ego leader who builds trusted relationships across engineering, legal, product, and executive stakeholders, remaining calm under pressure and navigating disagreement diplomatically. Experience leading teams in security engineering, GRC, or risk management is required. Prior audit experience (e.g., QSA) or direct audit facilitation is a nice-to-have.
