{"id":3887878,"url":"https://alion.io/job/mongodb-staff-technical-program-manager-it-audit-governance","title":"Staff Technical Program Manager, IT Audit & Governance","company":{"id":4211,"name":"MongoDB","domain":"mongodb.com","url":"https://alion.io/company/mongodb","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":79,"open_postings":88,"ghost_share":0,"stale_share":0.659,"repost_share":0,"time_to_fill_p50_days":69,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States","Palo Alto, United States","Austin, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":151000,"max":297000,"currency":"USD","period":"year","gross":null,"usd_annual":297000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Design Controls","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Power BI","optional":false},{"name":"Python","optional":false},{"name":"ServiceNow","optional":false},{"name":"SOC 2","optional":false},{"name":"SQL","optional":false},{"name":"Tableau","optional":false}],"status":"live","first_seen_at":"2026-11-06T19:34:55Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-08T09:03:01Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"We're looking for a senior, hands-on leader to own IT audit and governance across all of our applications, infrastructure, and systems. You'll be accountable for keeping IT audit-ready every day: SOX ITGCs and ITACs, plus the broader audit and governance obligations that touch the technology stack (SOC reports, ISO, security and regulatory audits).\nThis role is about accountability and execution. You'll work with cross-functional IT leaders across Infrastructure, Engineering, Security, Cloud, Enterprise Applications, and Business Systems to make sure controls are owned, operated, evidenced, and remediated on time. You'll also be the primary IT liaison to Internal Audit, Finance/SOX PMO, and external auditors. You operate independently, influence without authority, and can speak credibly with an engineer about a CI/CD pipeline and with the CAO about a deficiency.\nWe're looking to speak with candidates based in Palo Alto or New York City for our hybrid working model.\nWhat You'll Do\nOwn audit and governance across all IT\nOwn the audit and governance program across all IT applications, infrastructure, cloud platforms, and supporting systems\nMaintain a complete inventory of systems, owners, and applicable audit and compliance obligations (SOX, SOC 1/SOC 2, ISO 27001, and other regulatory or customer requirements)\nBuild and run an IT audit calendar that coordinates SOX, internal audit, external audit, and compliance activities to reduce duplicate asks and audit fatigue\nEstablish governance standards, policies, and control frameworks that apply consistently across IT\nDrive accountability and execution with IT leaders\nPartner with cross-functional IT leaders to assign clear control and remediation ownership, with defined deadlines and escalation paths\nRun regular governance forums and control health reviews with IT leadership, reporting status, risks, and overdue items\nHold teams accountable for timely control execution, evidence quality, and issue closure, escalating early when commitments slip\nTranslate audit and compliance requirements into practical work that engineering and infrastructure teams can adopt without slowing delivery\nOwn ITGC and ITAC compliance\nOwn the end-to-end SOX IT program: scoping inputs, control design, ownership, evidence, readiness testing, and issue management\nMaintain the ITGC framework (access management, change management, IT operations, SDLC) across all in-scope applications, databases, operating systems, and cloud infrastructure\nOwn ITAC strategy and coverage with Finance and business-system owners: automated controls, configurations, interfaces, calculations, and approval workflows\nOwn IPE/report validation, ITAC baselines, and segregation of duties (SoD) across ERP and key financial applications\nDesign, operate, and strengthen controls\nDesign controls that are engineered into IT workflows (ticketing, CI/CD, IAM, CMDB) rather than layered on manually\nRun readiness and self-assessment testing ahead of Internal Audit and external auditor testing\nRationalize overlapping controls across frameworks so one control and one piece of evidence can satisfy multiple requirements\nDrive automation and continuous control monitoring to reduce manual effort and audit burden\nManage SOC 1/SOC 2 report reviews, CUECs, and third-party/vendor control dependencies\nDrive remediation and issue management\nOwn the issue lifecycle across IT, from identification and root cause through remediation plan, validation, and closure\nPrepare management's response to audit findings and provide the IT perspective on deficiency severity with Finance, Legal, and Internal Audit\nReport control health and remediation status to IT leadership, the CAO, and the Audit Committee as needed\nBe the IT face to auditors and the business\nServe as primary IT contact for Internal Audit and external auditors on scope, walkthroughs, evidence requests, and reliance strategy\nCoordinate PBC requests, evidence standards, and timelines across IT teams\nTrain and enable control owners and IT leaders on audit requirements, evidence quality, and their responsibilities\nLead and elevate the program\nSet standards for control documentation, evidence, and issue management across IT\nMentor analysts and guide co-source or outsourced resources\nContribute to emerging governance areas such as AI/emerging technology\nWhat You'll Bring\nRequired\n8-12+ years of experience in IT audit, SOX compliance, IT governance, or technology risk (Big 4, internal audit, or in-house IT GRC)\nDeep, hands-on experience with SOX 404 ITGCs and ITACs in a public company\nWorking knowledge of COSO, COBIT, and PCAOB AS 2201, and how external auditors approach IT reliance and ITAC testing\nExperience across modern technology environments: cloud (AWS/Azure/GCP), SaaS, ERP (e.g., Oracle, NetSuite, SAP), infrastructure, and identity/access platforms\nFamiliarity with other frameworks and audits (SOC 1/SOC 2, ISO 27001, NIST) and how to harmonize them\nProven track record of owning programs end-to-end and driving accountability and execution across multiple teams and senior leaders without direct authority\nExcellent communication and executive presence, including negotiating with auditors and briefing senior leadership\nBachelor's degree in Information Systems, Accounting, Computer Science, or a related field\nPreferred\nCISA, CISSP, CIA, CPA, or equivalent certification\nExperience with GRC and audit tools (e.g., AuditBoard, ServiceNow GRC, Workiva, Archer)\nData analytics skills (SQL, Python, Power BI/Tableau) for full-population testing and control monitoring\nExperience in high-growth, SaaS, or technology company environments\nFamiliarity with DevOps/CI-CD, infrastructure-as-code, and change management in agile environments\nWhat Success Looks Like\nFirst 90 days: Map the IT landscape, systems, control owners, and audit obligations. Build relationships with IT leaders, Finance, Internal Audit, and external auditors. Identify the top gaps, ownership issues, and quick wins.\n6 months: Stand up a governance cadence with IT leaders, with clear ownership and on-time execution. Complete a full readiness cycle with controls evidenced on time and no surprises from auditors.\n12 months: Reduce control count and manual effort through rationalization and automation, close prior-year findings, and establish a scalable, IT-owned audit and governance program with a consolidated audit calendar and framework\nAbout MongoDB\nMongoDB is built for change, empowering our customers and our people to innovate at the speed of the market. We have redefined the data platform for the AI era, enabling builders to create, transform, and disrupt industries with software. MongoDB’s unified data platform, the most widely available, globally distributed data platform on the market, helps organizations modernize legacy workloads, embrace innovation, and unleash AI. Our cloud-native platform, MongoDB Atlas, is the only globally distributed, multi-cloud data platform and is available across AWS, Google Cloud, and Microsoft Azure.\nWith offices worldwide and over 67,000 customers, including AI-native startups and approximately 75% of the Fortune 100, relying on MongoDB for their most important applications, we’re powering the next era of software.\nOur compass at MongoDB is our Leadership Commitment, guiding how and why we make decisions, show up for each other, and win. It’s what makes us MongoDB. \nTo drive the personal growth and business impact of our employees, we’re committed to developing a supportive and enriching culture for everyone. From employee affinity groups, to fertility assistance and a generous parental leave policy, we value our employees’ wellbeing and want to support them along every step of their professional and personal journeys. Learn more about what it’s like to work at MongoDB, and help us make an impact on the world!\nMongoDB is committed to providing any necessary accommodations for individuals with disabilities within our application and interview process. To request an accommodation due to a disability, please inform your recruiter.\nMongoDB, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type and makes all hiring decisions without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.\nReq ID: 4273607532\nMongoDB’s base salary range for this role is posted below. Compensation at the time of offer is unique to each candidate and based on a variety of factors such as skill set, experience, qualifications, and work location. Salary is one part of MongoDB’s total compensation and benefits package. Other benefits for eligible employees may include: equity, participation in the employee stock purchase program, flexible paid time off, 20 weeks fully-paid gender-neutral parental leave, fertility and adoption assistance, 401(k) plan, mental health counseling, access to transgender-inclusive health insurance coverage, and health benefits offerings. Please note, the base salary range listed below and the benefits in this paragraph are only applicable to U.S.-based candidates.\nMongoDB’s base salary range for this role in the U.S. is:\n$151,000—$297,000 USD","description_format":"text","description_chars":9389,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Health insurance","Hybrid work","Insurance coverage","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Databases & DBMS","Vector Search & RAG"],"lifecycle":[{"event":"open","at":"2026-11-06T20:14:54Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 130 · green card filings: 43","filings_12m":130,"filings_prev_12m":139,"green_card_filings_12m":43,"median_offered_wage_usd":163743,"route":null,"cap_exempt":false,"checked_at":"2026-11-07T07:57:00+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":3}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":1,"expected_fill_days":69,"reasons":["conf:0","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-08T05:47:12Z"},"pay":{"stated_usd_annual":297000,"is_top_pay":true},"html_url":"https://alion.io/job/mongodb-staff-technical-program-manager-it-audit-governance","json_url":"https://alion.io/job/mongodb-staff-technical-program-manager-it-audit-governance.json","meta":{"generated_at":"2026-11-08T09:57:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21536,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4211},"rest":"https://alion.io/mcp/rest/get_company?id=4211"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmongodb-staff-technical-program-manager-it-audit-governance"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmongodb-staff-technical-program-manager-it-audit-governance"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmongodb-staff-technical-program-manager-it-audit-governance"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mongodb-staff-technical-program-manager-it-audit-governance\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmongodb-staff-technical-program-manager-it-audit-governance"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3887878}},{"tool":"search_jobs","arguments":{"company":"mongodb.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3887878},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}