Senior Governance, Risk, & Compliance Program Manager at Dropbox. Location Information: . Role Description. . As a . Senior Governance & Risk . Compliance Program Manager . on the . Governance, . Risk. ,. & Compliance team, you will play a crucial role. in. building . Compliance across our product set. .. . Protecting Dropbox and our users is . critical. to being worthy of trust. As a Compliance. . Program . Manager. at Dropbox, you will join a . growing . team to design, implement, and coordinate programs to promote user trust and manage risks to their data. You will work with teams across the organization. ,. . including . Engineering. , . Product. ,. . Design. ,. and . Sales. ,. . in order . to manage risks to Dropbox and users alike. You will work in depth with other parts of the business to ensure Dropbox meets our security. , privacy, and regulatory. commitments.. . If you are passionate about . protecting Dropbox and our users,. are looking for an opportunity to stretch and grow yourself in a dynamic team, and thrive in an environment . where you can constantly learn. , then this role is for you.. . Responsibilities. . . Promote and foster a culture of trust . within and outside of. Dropbox. .. . Partner with teams to execute on cross-team and/or multi-phase projects from design through implementation . against a wide variety of regulatory and compliance frameworks. , especially AI-specific standards/frameworks. . Identify . the right solutions to clarify and solve ambiguous, open-ended problems. across various compliance programs. . . Mature our overall compliance program. Improve and implement . controls for internal systems, processes, and policies. through bold and innovative approaches and leveraging automation and AI-enabled processes . . Facilitate . ongoing. AI Governance,. . R. isk and . C. ompliance initiatives and. monitor. control effectiveness. .. . Collaborate with internal teams and external auditors throughout compliance . assessments. .. . Play an active part in . responding and . mitigating. compliance. challenges across multiple time zones and jurisdictions.. . Drive automation efforts across the Compliance function via the . AI-enabled GRC automation. tool. s. . Identify opportunities impacting the Compliance function and establish the strategy and cross-functional alignment to achieve these objectives. . . Conduct gap assessments to identify areas of non-compliance or areas for improvement, and develop action plans to address these gaps.. . Provide guidance to management on the impact of new laws and regulations and recommend changes in business practices where necessary.. . . Requirements. . . 7. + years of experience building or maintaining programs to mitigate risks around security,. confidentiality, integrity, availability, and . privacy. . Independently leads cross-team and/or multi-phase projects from design through implementation. . Identifies the right solutions to clarify and solve ambiguous, open-ended problems. . Consistently utilize AI tools to enhance workflows, evaluate outputs with critical judgment, and help others adopt tools where appropriate.. . Experience facilitating or being the subject of . SOC, ISO, . HIPAA . and/or . PCI . audits at a fast-paced technology company, public accounting firm, or similar environment. . Experience partnering with Engineering, Product. ,. & Development teams to define compliance needs in a multi-product environment. . Strong f. amiliarity with a broad range of technical concepts relevant to cloud computing environments: logical access control, agile development process, secure coding principles, security architecture, information security, network security, and privacy. . Experience with implementing compliance programs for emerging new . products, including AI enabled products. . Strong . understanding of cloud-based technologies and their implications for governance, risk, and compliance. , with a focus on AI compliance needs. . Strong project management and organizational skills - . must . drive your own projects to completion. with high-level direction from a manager. , . while also fostering collaboration and bringing teams together to achieve common objectives.. . Great people skills and ability to work well in fast paced team environment with a wide range of technical and non-technical teams. . Excellent writing, communication, and organizational skills - strong attention to detail. . Passion to aim higher and develop new skills. . CISA, CISSP, CCSK, CIPP, or other professional certifications/associations . required . . . Preferred Qualifications. . . Experience in scaling compliance programs within high-growth technology environments. — Demonstrated ability to design, implement, and mature compliance frameworks in dynamic, fast-paced organizations where systems, processes, and regulatory expectations evolve rapidly.. . Moderate . technical fluency to partner effectively with engineering and product teams. — Ability to translate compliance requirements into actionable technical solutions, with working knowledge of cloud infrastructure, data privacy, security. /AI . controls.. . Executive communication and stakeholder management skills. — Proven ability to distill complex compliance and regulatory topics into clear, actionable insights for senior leaders, while fostering alignment across technical and non-technical stakeholders.. . . Compensation. Canada Pay Range. $120,300. —. $162,700 CAD
Senior Governance, Risk, & Compliance Program Manager at Dropbox