The Compliance team at MongoDB manages the strategy, execution, and maintenance of our global security certifications and regulatory requirements. We ensure that our cloud database products meet the rigorous security standards required by our customers in the most highly regulated industries worldwide.

We act as the primary interface between external auditors and our internal Product, Engineering, and Legal teams. Our goal is to translate complex regulatory requirements into scalable operational processes, maintaining a compliant and audit-ready posture across our diverse portfolio.

The Program Manager / Senior Analyst is a mid-to-senior level individual contributor role responsible for leading high-stakes audits and specialized compliance workstreams. Unlike the Analyst level, this role takes full ownership of complex international frameworks—such as IRAP and ENS High—and manages the relationship with our Financial Services customers during audit deep-dives. You will lead internal audit cadences and perform gap analyses for new market expansions.

Responsibilities:

• Lead the end-to-end execution of specialized external audits (e.g., ENS High, IRAP, ISO 22301) and coordinate all phases from initial scoping to final certification
• Serve as the lead point of contact for Financial Services customer audits, facilitating meetings, responding to security questionnaires, and defending our control environment to external stakeholders
• Lead internal audit cadences and drive the POA&M tracking process, ensuring technical teams remediate findings within required SLAs
• Map new regulatory requirements to our central control framework, performing gap analyses to identify where existing controls can be leveraged for new certifications
• Conduct NIST CSF or similar maturity assessments to monitor the effectiveness of the Compliance Program and report findings to team leads
• Author and review customer-facing security documentation, ensuring it accurately reflects our technical controls and architectural guardrails
• Partner with Engineering and Product leads to implement compliance-by-design, ensuring future product roadmaps align with global regulatory shifts

Requirements:

• 7+ years in GRC, Information Security, or IT Audit, specifically within a high-growth SaaS/Cloud environment
• Deep understanding of cloud security principles (AWS/GCP/Azure) and a proven track record leading technical audits for ISO 27001, SOC 2, or ENS High
• Solid grasp of audit processes, terminology, and risk assessment standards. Certifications such as CISA, CRISC, CISSP, or ISO Lead Implementer are highly preferred
• Exceptional ability to lead meetings with external customers and auditors, translating technical complexities into business risk and compliance assurance
• Advanced proficiency in Jira for tracking control performance data and managing high-volume remediation workflows
• Practical experience performing gap analyses and maturity assessments at an enterprise level

Responsibilities & Expectations

• You are expected to be a subject matter expert who can operate with minimal supervision
• You don't just track tasks; you own the success of the program
• You are expected to navigate complex audit negotiations with external parties and drive internal technical teams toward compliance milestones without disrupting innovation

Scope & Complexity

• The scope is international and technically diverse. You will manage overlapping audit cycles across different global jurisdictions (e.g., Spain, Australia, US) and complex industry sectors
• You are responsible for identifying how a single technical control can satisfy multiple global regulatory requirements simultaneously

Authority & Impact

• You have the authority to lead audit engagements and represent MongoDB’s security posture to sophisticated Financial Services customers
• Your impact is direct: by securing and maintaining these certifications, you enable our sales organization to close enterprise-level deals in highly regulated markets

Expertise

• You will be recognized as an expert in implementing our Common Controls Framework
• You move beyond general compliance to become a specialist in how MongoDB’s architecture satisfies specific, high-bar standards like IRAP and ENS High. You are the go-to for mapping technical evidence to regulatory intent

Leadership

• Leadership in this role is demonstrated through influence and mentorship. While you may not have direct reports, you lead cross-functional project teams through intense audit cycles and mentor junior analysts on audit methodology, documentation standards, and professional communication

About MongoDB

MongoDB is built for change, empowering our customers and our people to innovate at the speed of the market. We have redefined the database for the AI era, enabling innovators to create, transform, and disrupt industries with software. MongoDB’s unified database platform, the most widely available, globally distributed database on the market, helps organizations modernize legacy workloads, embrace innovation, and unleash AI. Our cloud-native platform, MongoDB Atlas, is the only globally distributed, multi-cloud database and is available across AWS, Google Cloud, and Microsoft Azure.

With offices worldwide and over 60,000 customers, including 75% of the Fortune 100 and AI-native startups, relying on MongoDB for their most important applications, we’re powering the next era of software.

Our compass at MongoDB is our Leadership Commitment, guiding how and why we make decisions, show up for each other, and win. It’s what makes us MongoDB. 

To drive the personal growth and business impact of our employees, we’re committed to developing a supportive and enriching culture for everyone. From employee affinity groups, to fertility assistance and a generous parental leave policy, we value our employees’ wellbeing and want to support them along every step of their professional and personal journeys. Learn more about what it’s like to work at MongoDB, and help us make an impact on the world!

MongoDB is committed to providing any necessary accommodations for individuals with disabilities within our application and interview process. To request an accommodation due to a disability, please inform your recruiter.

MongoDB, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type and makes all hiring decisions without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

REQ ID: 1273402295

Legend Biotech is seeking a Senior Manager, Internal Controls & Sustainability Reporting as part of the Finance team based in Bridgewater, NJ.

Role Overview

The Senior Manager, Internal Controls & Sustainability Reporting is responsible for executing the design, implementation, evaluation, and continuous improvement of the company’s internal control framework across financial reporting and select non‑financial reporting processes. This role plays a critical leadership position in ensuring compliance with SOX (404), managing enterprise-wide control assessments, partnering with business and IT leaders, and serving as a key liaison with Internal Audit and external auditors.
This role is critical to maintaining the integrity of the company’s reporting and supporting growth through strong governance and risk management. The Senior Manager, Internal Controls & Sustainability Reporting will also support the development and enhancement of sustainability reporting, and will have high visibility with finance leadership and the opportunity to meaningfully shape the internal control environment.
Prior experience with sustainability or ESG reporting is not required

Key Responsibilities

SOX & Internal Controls Leadership

• Drive the company’s SOX 404 compliance program end to end, including scoping, risk assessment, control design, testing strategy, remediation, and certification support.
• Evaluate the effectiveness of entity-level, process-level, and IT general controls (ITGCs).
• Support management’s assessment of internal controls over financial reporting (ICFR) and support quarterly and annual certifications.

Risk Assessment & Control Design

• Partner with process owners to identify financial reporting risks and design efficient, scalable controls.
• Assist in the standardization and optimization of controls, reducing redundancy while maintaining compliance.
• Assess the impact of new accounting standards, system implementations, acquisitions, and process changes on internal controls.

Audit & Stakeholder Management

• Coordinate walkthroughs, testing, issue resolution, and audit deliverables, proactively managing timelines and risks to prevent delays.
• Support the remediation of control deficiencies, including significant deficiencies and material weaknesses.
• Track control deficiencies, lead root cause analysis, and oversee remediation efforts through closure.

Process Improvement & Governance

• Support continuous improvement initiatives, including automation and use of governance, risk, and compliance (GRC) tools.
• Support broader GRC initiatives as needed.
• Assist with special projects for the Controller or CFO, including M&A integration and transformation initiatives.

Operational Audits

• Track and drive closure of operational audit deficiencies impacting the finance function, including follow‑up and remediation oversight.
• Collaborate with operational managers to design and implement effective controls to mitigate identified deficiencies.
• Modify policies, procedures, and internal control documentation to reflect corrected processes.
• If necessary, provide training to staff on updated processes and strengthen the overall control culture.

Sustainability Reporting (expected to be 25-50% of role)

• Support sustainability reporting processes aligned with global regulatory frameworks to promote accuracy, completeness, and assurance readiness.
• Assist with the development and maintenance of internal control frameworks over sustainability data.

Requirements

• Bachelor’s degree in Accounting, Finance, or related field.
• 7+ years of progressive experience in internal controls, SOX, public accounting, or a combination thereof. Big 4 or national public accounting firm experience a plus.
• Strong knowledge of COSO framework and exposure to IT general controls and automated control environments.
• Exposure to automation, data analytics, and/or AI‑enabled tools is a plus.
• ESG or Sustainability reporting experience preferred, not essential.
• CPA a plus.
• Knowledge of IFRS a plus.

#Li-LB1

#Li-Hybrid

Who We Are

Cross River builds the infrastructure behind the world’s most innovative financial products. Our technology and capital solutions power payments, cards, lending, and digital asset capabilities that move money safely, instantly, and inclusively — trusted by leading fintechs, enterprises, and disruptors across the globe.

Our mission is simple: to build the financial infrastructure that expands access and opportunity for all. Guided by a culture of collaboration, curiosity, and purpose, Cross River has been named one of American Banker’s Best Places to Work in Fintech year after year. Whether you’re designing code, solving regulatory puzzles, or developing strategy, you’ll join a team where innovation and integrity drive everything we do — and where your work helps shape the future of finance.

What We're Looking For

Cross River Bank is seeking an experienced AVP, Enterprise Applications Administrator to lead the administration, optimization, and evolution of our enterprise SaaS application ecosystem. In this role, you'll serve as the technical backbone for platforms that support Legal, Compliance, Risk, and Governance functions — ensuring our systems are secure, scalable, and aligned with business objectives. You'll partner across departments to translate complex business requirements into reliable, well-governed technical solutions.

Responsibilities

• Platform Administration: Architect, administer, and maintain enterprise SaaS platforms surrounding document management across the organization
• Access & Security Management: Manage user provisioning, roles, permissions, and access controls in alignment with security and compliance standards, including RBAC, IAM, SSO, and provisioning automation
• Workflow & Configuration Management: Configure and optimize workflows, templates, metadata schemas, dashboards, reporting, and automation within SaaS platforms to drive operational efficiency
• System Health & Performance Monitoring: Monitor system performance, health metrics, and usage analytics to ensure platform reliability and identify opportunities for improvement
• Vendor & Release Coordination: Coordinate vendor support engagements, system upgrades, patch management, and release management across all administered platforms
• Platform Implementation & Enhancement: Lead platform implementations, enhancements, and system configuration changes from requirements through deployment
• Integration & Data Management: Support SaaS integrations using APIs and middleware, including data migration and system integration projects across enterprise platforms
• Governance & Compliance Assurance: Ensure audit readiness, enforce data retention policies, and contribute to business continuity planning in alignment with data governance and compliance frameworks
• Stakeholder Engagement & Training: Facilitate stakeholder workshops, requirements gathering sessions, and user training programs to drive adoption and maximize platform value
• Documentation & Change Management: Maintain comprehensive documentation including scripts, procedures, and checklists; lead change management and process optimization initiatives

Qualifications:

Required:

• 5+ years of experience administering enterprise SaaS or DMS applications
• Hands-on experience with document management systems such as LogicGate (GRC / Risk Management), Icertis Contract Lifecycle Management (CLM), DocuSign, and Box.com platforms
• Experience managing user provisioning, roles, permissions, and access controls aligned with security and compliance standards
• Demonstrated ability to configure workflows, templates, metadata, dashboards, reporting, and automation within SaaS platforms
• Experience coordinating vendor support, system upgrades, and release management
• Experience leading platform implementations, enhancements, and system configuration changes
• Ability to translate business requirements into scalable technical solutions
• Familiarity with SaaS integrations using APIs and middleware, including data migration and system integration projects
• Strong knowledge of role-based access control (RBAC), data governance, and compliance frameworks
• Experience supporting Legal, Compliance, Risk, or Governance teams
• Familiarity with Identity & Access Management (IAM), SSO, and provisioning automation
• Ability to ensure audit readiness, data retention policies, and business continuity planning
• Experience facilitating stakeholder workshops, requirements gathering, and user training
• Strong skills in documentation, change management, and process optimization
• Excellent analytical, communication, and stakeholder management skills
• Strong troubleshooting skills, a methodical approach to problems, and a willingness to document what you do (scripts, procedures, checklists)

Preferred:

• Exposure to REST APIs or application integrations (e.g., supporting interfaces between DMS, finance, and other enterprise systems)
• Practical experience with application installations, updates, or upgrades — ideally including work on server-side applications, not just desktop clients
• Prior experience as an Applications Support Engineer, Application Analyst, or Enterprise Applications Support in a law firm, financial services, or other professional services environment

#LI-AC1 #LI-Hybrid

Salary Range: $180,000.00 - $210,000.00