Senior Manager of Compliance

TrendAI™, the global AI security leader and enterprise business unit of Trend Micro, empowers organizations with full AI visibility and consolidated security that inspires confidence, drives innovation, and eliminates risk. At TrendAI™, we’re always seeking exceptional talent; people who want to collaborate with the best and push boundaries together. Here, your work goes beyond building a career. You will help protect what matters and play a vital role in shaping a safer, more trustworthy AI-powered future. AI Fearlessly. About the Role: The Senior Manager of Compliance leads the compliance function for a unified GRC team within the Global CISO Office. You will own the company’s certification and attestation programs, manage external audits, and lead a team that delivers compliance across multiple frameworks. This is a people-leadership role with a hands-on component: you will set the operating model and build strong relationships with auditors and business stakeholders. Responsibilities: Compliance program leadership - Own the compliance program across certifications and attestations, such as ISO/IEC 27001, SOC 2, and PCI DSS. - Establish and maintain a consolidated certificate inventory, and review certification investments and priorities regularly. - Define and maintain the compliance calendar, covering audit cycles, evidence collection, and renewal timelines. - Work across business and leadership to intake new compliance requirements, understand the level of effort to meet them, and lead readiness work with control owners, including gap analysis and remediation planning. - Drive the adoption of AI-enabled compliance workflows, such as control mapping and review triage, with clear human oversight for approvals and exceptions. - Understand the unified controls framework concept, so that all new compliance frameworks map to existing controls. - Oversee the Trust Center, responses to customer and partner security reviews, and external-facing compliance content, ensuring accuracy and consistency with approved policies. - Track regulatory developments and assess their impact on the compliance program. Work closely with Legal on reporting requirements, such as the Cyber Resilience Act (CRA). - Keep compliance cost-effective, with each control and audit tied to a clear business need. External audit management - Lead the selection, scoping, and management of external auditors and assessors, including vendor evaluation, audit budget, and contract coordination. - Oversee audit activities, including fieldwork scheduling. Track findings and control gaps to closure through issues management, with team members handling day-to-day auditor requests. Team leadership and cross-functional collaboration - Lead, coach, and develop a global compliance team, including performance management and hiring. - Set clear ownership and a sustainable operating rhythm for each workstream, with regular check-ins. - Work with engineering, product, IT, legal, procurement, and business teams to embed compliance and resolve dependencies. - Partner with Global CISO Office leadership to prioritize resources, communicate status and risks, and represent compliance in executive and steering committee discussions. Qualifications: Required - 8+ years of experience in information security compliance, audit, or GRC, including at least 3 years in a people-management role leading global teams. - Hands-on experience managing multiple certification and attestation programs, such as ISO/IEC 27001, SOC 2, or PCI DSS, including external audits from planning through closure. - Experience selecting, managing, budgeting for, and contracting with external audit firms or other compliance vendors. - Experience in a technology, cloud, or security software company, working with engineering teams on compliance for products, cloud infrastructure, and cloud security controls. - Practical experience using AI tools and automation to improve compliance or security workflows, with an understanding of when human judgment and approval are required. - Excellent written and verbal communication skills, including presenting to senior leaders and managing competing priorities across functions. - Self-starter with a track record of driving initiatives forward with limited direction and ownership of outcomes. Preferred - Experience building a compliance function from the ground up, or consolidating multiple compliance programs into one. - Experience with cost-effective compliance programs, including evidence automation, control reuse, and GRC platforms. - Understanding of modern software delivery, such as CI/CD pipelines, version control, and cloud environments. - Experience with government or regulated-sector authorization programs, such as FedRAMP. - Relevant professional certifications, such as CISA, CISSP, CRISC, or ISO/IEC 27001 Lead Auditor, are a plus. At Trend Micro, we embrace change, empower people, and encourage innovation in a connected world. Our diversity and multicultural workforce are key contributing factors to our success across the globe. Trend Micro provides equal employment opportunity for all applicants and employees. Trend Micro does not unlawfully discriminate on the basis of race, color, religion, sex, pregnancy and childbirth or related medical conditions, national origin, ancestry, age, physical or mental disability, medical condition, family care leave status, veteran status, marital status, sexual orientation, or gender identity.