Regulatory Compliance Program Manager

Join MongoDB as a Regulatory Compliance Program Manager. In this role, you will monitor the regulatory environment, assess compliance impact, and provide insights to various business teams. You will collaborate with legal, privacy, security, and engineering teams to ensure compliance with data protection and cybersecurity regulations. You will also develop dashboards and reporting to track exposure, readiness, and material trends. The ideal candidate will have at least five years of experience in regulatory change management and a strong understanding of data protection principles.

Exposure to DORA, NIS2, the EU AI Act, ePrivacy requirements, digital-services regulation, or comparable technology regulation

Responsibilities

• Monitor and triage developments in data protection, privacy, cybersecurity, digital resilience, artificial intelligence, online services, and other regulations relevant to MongoDB.
• Collaborate with legal to assess whether a regulatory development is relevant to MongoDB’s products, services, entities, customers, suppliers, workforce, or operating model.
• Develop dashboards and reporting that show exposure, readiness, ownership, overdue decisions, and material trends rather than activity for its own sake.
• Practical knowledge of data-protection principles, especially GDPR and UK GDPR, including lawful processing, accountability, data minimisation, transfers, retention, and individual rights
• Experience supporting regulatory change management, horizon scanning, obligations management, or compliance impact assessments
• Excellent written communication skills, including the ability to produce concise briefings, evidence-based recommendations, and documentation for technical and non-technical audiences
• Ability to work independently, exercise sound judgement, and escalate appropriately when ownership, applicability, or risk is unclear

Requirements

• Five or more years of experience in regulatory change management in compliance, privacy, or a closely related discipline
• A proactive, questioning mindset: you look for what could be missed, what has changed, who is affected, and what evidence would change the conclusion
• Understanding of data classification, information governance, records management, or data-handling frameworks
• Strong stakeholder-management and collaboration skills, with the confidence to work across Legal, Privacy, Security, Engineering, Product, Procurement, People, and customer-facing teams
• Strong analytical and problem-solving skills, with the ability to distinguish material risk from noise and draw clear conclusions from incomplete information
• High attention to detail and strong organisational skills, including the ability to manage multiple priorities, deadlines, dependencies, and follow-ups
• Experience working with in-house legal teams to interpret laws, regulations, regulatory guidance, or contractual requirements and translating them into obligations, applicability assessments, risks, and decisions

Preferred

• Experience in a technology, SaaS, cloud, platform, or other highly regulated environment
• Familiarity with information-security and assurance frameworks such as ISO 27001, SOC 2, NIST CSF, or the Cloud Security Alliance controls
• Experience working with regulatory inventories, GRC platforms, privacy-management tools, data catalogues, or workflow systems
• A relevant qualification such as CIPP/E, CIPM, CIPT, IAPP FIP, CISA, CRISC, or an equivalent professional credential