Security Compliance - Technical Program Manager - Weights & Biases

CoreWeave is the AI Hyperscaler™, delivering a cloud platform of cutting edge services powering the next wave of AI. Our technology provides enterprises and leading AI labs with the most performant, efficient and resilient solutions for accelerated computing. Since 2017, CoreWeave has operated a growing footprint of data centers covering every region of the US and across Europe. CoreWeave was ranked as one of the TIME100 most influential companies of 2024.

As the leader in the industry, we thrive in an environment where adaptability and resilience are key. Our culture offers career-defining opportunities for those who excel amid change and challenge. If you’re someone who thrives in a dynamic environment, enjoys solving complex problems, and is eager to make a significant impact, CoreWeave is the place for you. Join us, and be part of a team solving some of the most exciting challenges in the industry.  

CoreWeave powers the creation and delivery of the intelligence that drives innovation. 

What You’ll Do:

The Product Engineering organization is responsible for executing and delivering CoreWeave’s products, platforms, processes, and tools. As a security compliance lead, you will creatively shape compliance solutions that enhance both security, engineering and business agility. You will collaborate closely with innovative teams to turn compliance from a checklist into a strategic advantage. You will be part of an environment that values proactive thinking, creative problem-solving, and meaningful impact.

If you are passionate about cloud technologies, thrive in complex technical environments, and excel at orchestrating large-scale programs, we want to hear from you!

About the role:

• Partner closely with stakeholders to design, implement, and enhance security, operational, and privacy controls
• Conduct readiness assessments and guide control owners to seamlessly navigate external audits and internal obligations
• Actively manage compliance and regulatory lifecycles, ensure clarity and simplicity in tracking, evidence gathering, and reporting
• Collaborate with Product, Solution Architect, and Engineering teams to streamline compliance requirements, fostering innovation and efficiency
• Continuously assess control maturity, and uncover creative opportunities for automation and process improvements that benefit the entire organization
• Mentor junior TPMs and technical leads in audit best practices

Investing in our people is one of our top priorities, and we value candidates who can bring their diversified experiences to our teams. Here are some qualities we’ve found compatible with our team. We'd love to talk about whether this aligns with your experience and interests and what you’re excited to work on next.

Who You Are:

• At least 10 years of hands-on experience in Security Compliance, Audit, ideally within the cloud services industry
• A Bachelor’s degree in Information Security, Computer Science, or a related field or equivalent job experience
• Proven track record conducting comprehensive assessments of control frameworks, identifying strengths, gaps, and actionable improvements
• 3-5 years of experience leading large-scale compliance frameworks (SOC 2, ISO 27001, HITRUST, FedRAMP, Cyber Essentials Plus) in a fast-paced, technical environment
• Experience automating compliance evidence collection or reporting processes
• Strong ability to collaborate effectively with diverse remote teams across engineering, infrastructure, and security
• Excellent communication skills, transparent documentation practices, and meticulous record-keeping capabilities
• Familiarity with GRC platforms: Anecdotes, OneTrust, Archer, ServiceNow GRC, Vanta, Drata.
• Experience managing multiple audits and certification cycles.
• Manage planning and tracking through tools such as Jira, Confluence, Asana, or similar

Preferred Qualifications

• Creative experience leveraging compliance activities to drive business growth and innovation
• Proven success in simplifying complex regulatory obligations into clear, actionable strategies
• Experience with multiple cloud platforms (AWS, GCP, or Azure) and security tooling. Solid understanding of cloud security risks and controls 
• Certifications (e.g., CISA, CISM, CRISC)

If you're eager to elevate compliance into a creative, strategic force within a fast-paced, forward-thinking company, we'd love to hear from you!

Why Us?

We work hard, have fun, and move fast! We’re in an exciting stage of hyper-growth that you will not want to miss out on. We’re not afraid of a l