Description:

The Assurance, Risk, and Compliance (“ARC”) Initiatives team at MongoDB owns the strategy, governance, and delivery of our most critical cross-functional risk and compliance initiatives. We design and execute programs that support compliance audits, risk assessments, employee awareness and enablement, and the implementation of common control frameworks, along with consistent operating cadences that align key stakeholders, accelerate decision making, and drive the execution of initiatives that reinforce MongoDB’s assurance, risk management, and compliance objectives. We define and track key metrics and deliver clear and timely, executive reporting to provide transparency, measure progress, and ensure lasting operational resilience and governance.

We serve as the central coordination point for ARC-wide initiatives, connecting Product, Engineering, Security, and Legal teams around clear priorities, milestones, and outcomes. Our focus is on building scalable governance structures, defining decision-making frameworks, and establishing repeatable ways of working so that complex efforts can be executed consistently across the team.

The Policy Program Manager is a mid-to-senior level individual contributor role responsible for leading the development and operationalization of policies and procedures aligned to established control frameworks. You will drive end-to-end ownership of policy lifecycle management, from drafting and review through implementation and ongoing maintenance, while coordinating inputs across teams to ensure accuracy, consistency, and adoption. Additionally, you will lead documentation standardization efforts, facilitate stakeholder reviews, and perform gap analyses to continuously strengthen and mature our ARC policy framework.

Responsibilities:

• Lead the end-to-end execution of company-wide compliance programs, including the annual security policy and procedure review cycle
• Design and implement scalable frameworks for policy lifecycle management (creation, review, approval, publication, and retirement)
• Establish standards, templates, and governance processes to ensure consistency and clarity across all compliance documentation
• Maintain a centralized, audit-ready repository for policies, procedures, and supporting artifacts
• Act as the primary point of contact for cross-functional teams (HR, Legal, Engineering, Product)
• Drive alignment, gather inputs, and ensure timely completion of policy updates and compliance deliverables
• Ensure policies and procedures align with regulatory, security, and internal control requirements
• Support internal and external audits by maintaining complete, accurate, and accessible documentation
• Translate audit findings and regulatory changes into actionable policy program updates
• Maintain the integrity of project-specific Jira boards and Confluence pages. Ensure all project artifacts are organized, up-to-date, and ready for leadership review or external audit
• Develop and maintain dashboards to report on program health, completion rates, and obstacles. Present status updates and metrics to leadership
• Evaluate existing program workflows and implement improvements to increase efficiency, reduce manual effort, and improve the stakeholder experience

Requirements:

• 5-8 years of program management experience, ideally within an Information Security or high-growth technology environment
• Experience creating and managing policy and procedure programs or governance frameworks
• Deep understanding of security and compliance frameworks (e.g., SOC 2, ISO 27001, PCI DSS, HIPAA, NIST CSF)
• Strong proficiency in managing full-lifecycle projects, including scoping, planning, risk mitigation, and change control
• Advanced experience with Jira and Confluence, including the ability to build custom dashboards and manage complex documentation repositories
• Maintain and support a GRC/policy management platform to ensure consistent policy administration and system usability
• Excellent interpersonal skills with the ability to hold cross-functional stakeholders accountable to deadlines in a professional and effective manner
• Exceptional attention to detail and the ability to manage multiple overlapping priorities without losing sight of milestones
• A proactive, self-directed approach to work. You enjoy taking ownership of a program and building the structure necessary for its success

Responsibilities & Expectations

• You are expected to be the owner of your assigned programs. While you will work closely with technical SMEs, you are responsible for the logistical success of the workstream. Your success is measured by the timely completion of program goals, the clarity of your reporting, and your ability to anticipate and resolve project bottlenecks
• You don't just track tasks; you own the success of the program

Scope & Complexity

• The scope is horizontal and impacts multiple departments across MongoDB
• Managing complex programs that require coordination with various business units, ensuring that project delays in one area do not derail the overall compliance roadmap

Authority & Impact

• You have the authority to manage the timelines and execution steps of your assigned programs
• Your impact is reflected in the strength of policy program management and organizational readiness you drive; by overseeing and coordinating these workstreams, you ensure the Compliance team consistently meets foundational policy requirements and aligns with external audit expectations

Expertise

• You will develop deep expertise in compliance and audit operations
• You will become the go-to resource for designing, scaling, and executing policy and compliance programs within a cloud-first organization. This role is responsible for independently and collaboratively developing and managing policies and procedures, with a strong understanding of compliance frameworks and the ability to interpret and operationalize control requirements

Leadership

• Leadership in this role is demonstrated through influence and mentorship. While you may not have direct reports, you will guide cross-functional teams in developing and standardizing policies/supporting documentation, as well as provide mentorship on policy governance, standardized documentation practices, and compliance alignment

About MongoDB

MongoDB is built for change, empowering our customers and our people to innovate at the speed of the market. We have redefined the database for the AI era, enabling innovators to create, transform, and disrupt industries with software. MongoDB’s unified database platform, the most widely available, globally distributed database on the market, helps organizations modernize legacy workloads, embrace innovation, and unleash AI. Our cloud-native platform, MongoDB Atlas, is the only globally distributed, multi-cloud database and is available across AWS, Google Cloud, and Microsoft Azure.

With offices worldwide and over 60,000 customers, including 75% of the Fortune 100 and AI-native startups, relying on MongoDB for their most important applications, we’re powering the next era of software.

Our compass at MongoDB is our Leadership Commitment, guiding how and why we make decisions, show up for each other, and win. It’s what makes us MongoDB. 

To drive the personal growth and business impact of our employees, we’re committed to developing a supportive and enriching culture for everyone. From employee affinity groups, to fertility assistance and a generous parental leave policy, we value our employees’ wellbeing and want to support them along every step of their professional and personal journeys. Learn more about what it’s like to work at MongoDB, and help us make an impact on the world!

MongoDB is committed to providing any necessary accommodations for individuals with disabilities within our application and interview process. To request an accommodation due to a disability, please inform your recruiter.

MongoDB, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type and makes all hiring decisions without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

REQ ID: 1273402887

THE POSITION
Our roster has an opening with your name on it

We are hiring a Senior Director of AI Platforms & Ops to lead the development of FanDuel’s AI control plane and foundational infrastructure.

This role is responsible for building and operating the foundation that makes AI safe, scalable, and production-ready across the enterprise. You will lead teams responsible for everything from model access and orchestration to governance, monitoring, and cost control. You will partner closely with Forward Deployed AI teams, AI Software Engineering, Security, Legal, MarTech, Ops, and Data to ensure that AI systems can be deployed quickly without compromising reliability, compliance, or trust.

Success in this role means accelerating AI adoption across FanDuel while maintaining strong guardrails and operational excellence.

In addition to the specific responsibilities outlined above, employees may be required to perform other such duties as assigned by the Company. This ensures operational flexibility and allows the Company to meet evolving business needs.

THE GAME PLAN
Everyone on our team has a part to play

Scale the team and roadmap: Build and lead a high-performing team while defining the long-term vision for AI Platforms. Create platforms that allow teams to move fast while ensuring compliance, security, and reliability.

Build the AI control plane: Own the systems that govern how AI is accessed, orchestrated, and managed across FanDuel. Oversee the AI Gateway, MCP Registry, Agent + Skills Marketplaces, and Firewall, ensuring safe and scalable integration of models and tools

Own governance, compliance, trust & safety: Establish best-in-class tracing, monitoring, and debugging for AI systems in production. Build and operationalize GRC frameworks for AI usage, including risk reviews, auditability, and policy enforcement. Establish a scalable Trust, Safety, and Red Teaming swat team focused on how we believe and how we break AI tools, ensuring AI systems meet standards for responsible use, content safety, and user protection

Optimize cost and performance: Lead FinOps for AI, including usage tracking, cost controls, and efficiency optimization. Own enterprise license strategy and vendor relationships across model providers and tooling

Partner across the organization: Work closely with FDE and AI SWE teams to ensure platform capabilities align with real-world needs

THE STATS
What we're looking for in our next teammate

• Have 10+ years of experience in platform engineering, infrastructure, or large-scale systems, having led platform or infrastructure teams at scale, ideally in data or AI environments
• Have experience building or managing systems related to: AI gateways or service platforms, developer platforms, observability, monitoring, and/or FinOps
• Understand AI/ML systems, including LLMs and their operational challenges
• Have experience working with security, compliance, or regulated environments
• Are comfortable operating at both strategic and deeply technical levels
• Can balance speed, cost, and risk in a fast-moving environment
• Are an effective leader who can build teams and influence across functions

ABOUT FANDUEL

FanDuel Group is the premier mobile gaming company in the United States and Canada. FanDuel Group consists of a portfolio of leading brands across mobile wagering including: America’s #1 Sportsbook, FanDuel Sportsbook; its leading iGaming platform, FanDuel Casino; the industry’s unquestioned leader in horse racing and advance-deposit wagering, FanDuel Racing; and its daily fantasy sports product.  

In addition, FanDuel Group operates FanDuel TV, its broadly distributed linear cable television network and FanDuel TV+, its leading direct-to-consumer OTT platform. FanDuel Group has a presence across all 50 states, Canada, and Puerto Rico.

The company is based in New York with US offices in Los Angeles, Atlanta, and Jersey City, as well as global offices in Canada and Scotland. The company’s affiliates have offices worldwide, including in Ireland, Portugal, Romania, and Australia.

FanDuel Group is a subsidiary of Flutter Entertainment, the world's largest sports betting and gaming operator with a portfolio of globally recognized brands and traded on the New York Stock Exchange (NYSE: FLUT).

PLAYER BENEFITS
We treat our team right

We offer amazing benefits above and beyond the basics. We have an array of health plans to choose from (some as low as $0 per paycheck) that include programs for fertility and family planning, mental health support, and fitness benefits. We offer generous paid time off (PTO & sick leave), annual bonus and long-term incentive opportunities (based on performance), 401k with up to a 5% match, commuter benefits , pet insurance, and more - check out all our benefits here: FanDuel Total Rewards. *Benefits differ across location, role, and level.

FanDuel is an equal opportunities employer and we believe, as one of our principles states, “We are One Team!”. As such, we are committed to equal employment opportunity regardless of race, color, ethnicity, ancestry, religion, creed, sex, national origin, sexual orientation, age, citizenship status, marital status, disability, gender identity, gender expression, veteran status, or any other characteristic protected by state, local or federal law. We believe FanDuel is strongest and best able to compete if all employees feel valued, respected, and included.

The applicable salary range for this position is $247,000 - $309,000 USD, which is dependent on a variety of factors including relevant experience, location, business needs and market demand. This role may offer the following benefits: medical, vision, and dental insurance; life insurance; disability insurance; a 401(k) matching program; among other employee benefits. This role may also be eligible for short-term or long-term incentive compensation, including, but not limited to, cash bonuses and stock program participation. This role includes paid personal time off and 14 paid company holidays. FanDuel offers paid sick time in accordance with all applicable state and federal laws.

FanDuel is committed to providing reasonable accommodations for qualified individuals with disabilities. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please email Benefits@fanduel.com.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

#LI-Hybrid

Strength in Trust

Our goal at OneTrust is to bring the power of trust to companies all over the world. Using cutting-edge technology and a real-world approach to compliance, privacy, security, ethics, and third-party risk, we’ve created a no-nonsense platform to help supercharge the global push for trust.

The Challenge

Your Mission

• Establish Trusted Advisor status with senior business and technology leaders.
• Develop and present strategic application and architectural design documents leveraging OneTrust best practices.
• Lead strategic workshops and develop high-level solution recommendations based on business objectives and feasibility trade-offs.
• Deliver thought leadership through presentations, webinars, and learning events to highlight customer use cases and reference architectures.
• Provide strategic subject matter expertise through advisory sessions, pre-sales support, and field assistance.
• Collaborate with external teams to align roadmaps and technical architectures with strategic business goals.
• Translate and implement strategic needs into functional OneTrust technology-driven solutions.
• Proactively identify and analyze strategic issues/obstacles and recommend appropriate courses of action.
• Successfully present to both implementation teams and C-level executives, earning their trust.
• Advocate for customers by providing strategic insights to the Product organization on future release needs and challenges.
• Refine and improve internal processes and methodologies based on strategic customer feedback and evolving industry standards.
• Manage multiple strategic engagements simultaneously, ensuring timely and successful delivery.
• Engage with customers to build long-term strategic relationships and ensure ongoing success.
• Mentor junior team members to enhance their strategic skills and knowledge.
• Establish structured feedback loops with customers to continuously improve OneTrust products and services.

You Are/Have

• Demonstrated ability in management, mentorship, and organizational behavior.
• Strategic thinker with the ability to quickly learn and apply new concepts, business models, regulations, and technologies.
• Deep aptitude for communicating complex business and technical concepts using visualization and modeling aids.
• Proven record of accomplishment of establishing trusted advisor relationships with senior stakeholders.
• Demonstrated expertise in customer-facing privacy and security consulting, implementation, and advisory roles.
• Impressive written and verbal communication skills, including proficient presentation abilities.
• Ability to work autonomously, prioritize, multitask, and perform appropriately under deadlines.

Your Experience Includes 

• BA/BS in a related subject is required
• 3-5 years of experience in a Privacy role
• Demonstrated success working with enterprise customers on technical products
• Proven ability to engage across corporate functions (Professional Services, Engineering, Sales and Product Management)
• Functional experience in troubleshooting software and web services
• Experience in using software for reporting and task management such as Salesforce preferred

Extra Awesome 

• Relevant certifications (CIPP/E, CIPP/US, CIPM, CIPT, FIP, GRCP, GRCA, AIGP, LPEC, etc.)
• Knowledge of privacy, ethics, security, data governance, risk management, compliance, or sustainability concepts or industry trends
• Intermediate/ Expert working knowledge of the following:
  • APIs (REST and SOAP)
  • File access, sharing, and/or management workflows (S3 and SFTP)
  • Various web application authorization types (Basic, Bearer, OAuth 2, API Key, Custom, Open ID Connect, etc.)
  • Related programming/scripting languages and libraries (JavaScript, Python, PowerShell, SQL, C#, Ruby, PHP, FreeMarker, etc.)
• Extensive experience implementing and troubleshooting integrations
• Excel at learning emerging technologies and creating technical solutions

WHAT WE DO

Our Security, Risk and Compliance consultants work with clients at all levels of the organization, from the C-suite to the shop floor, helping them to deliver on their most strategic initiatives. We’re known for making realistic, data-driven decisions that deliver value in tangible ways to our clients. Our clients ask for us on projects that require a superior combination of technical and business capabilities, people and management skills, and a collaborative mindset. We excel in understanding complex programs and strategic initiatives and breaking them into actionable pieces.

We are actively looking for professionals in the following areas:

• Compliance
• Information Security
• Risk Management
• Data Privacy

The ideal candidate’s experience may include but is not limited to the following:

• Management or participation in Cybersecurity, Information Security, Risk, Compliance and/or Data Privacy Programs or Projects
  • Sample projects/programs could include but are not limited to:
    • Compliance framework mapping and implementation,
    • Regulatory mapping and implementation
    • Audit, risk or regulatory remediation management,
    • Readiness for new laws and regulations,
    • Risk, Compliance or Information Security risk reporting and monitoring
    • Creation of roadmaps to mature or advance Risk, Compliance or Information Security Strategies/Programs/Controls
    • Design and enablement of cyber controls functions and processes
    • Change management related to regulatory adoption or compliance changes
    • Audit or certification readiness
  • Familiarity or direct experience with GRC/Cybersecurity solutions, tools and technologies
  • Control design or maturation for high-demand technical areas such as ERP, Identity and Access Management, Business Continuity and Resiliency, Cloud
  • Knowledge of and/or application of industry specific regulations, laws, and standards such as the EU-GDPR, CCPA/CPRA, HIPAA, PCI
  • Knowledge of and/or application of compliance and security frameworks and standards such as COSO, NIST, ISO
  • Management of regulatory, internal or external audits, or experience as an auditor
  • Projects or roles requiring coordination across lines of defense working with technical, business, compliance, risk and audit teams to deliver solutions
  • Work or projects with military or federal government agencies in Risk, Compliance or Information Security/Cyber Security sectors
  • Certifications: CIPP, CRCM, CRM, ARM, CISSP, CISM

QUALIFICATIONS

Required-

• Alignment to our core values: Excellence, Participation, Integrity, and Collaboration
• Hungry, Humble, Smart
• Demonstrated business and technology acumen
• Strong written and verbal communication skills
• Understanding and experience solving real business problems
• Proven track record of delivering results
• Experience working with and/or leading a team
• Ability to work across industries, roles, functions & technologies
• Authorization for permanent employment in the United States (this position is not eligible for immigration sponsorship)

Preferred-

• Bachelor’s degree
• 8+ years professional experience
• Experience across our service offerings