Manager, Information Security

Responsibilities

• Define and execute the multi-year roadmap for achieving ClickHouse for Government certifications (FEDRAMP, DOD-IL, StateRAMP, CJIS, etc).
• Partner closely with Security, Engineering, Compliance, Legal, GTM and Operations teams to ensure ClickHouse Cloud meets the requirements of frameworks including SOC 2, ISO 27001/27701, HIPAA, PCI DSS, and government-specific standards (FIPS, Common Criteria / Protection Profile, NIST SP800-171, CMMC, Sec 508/VPAT, DISA STIG).
• Translate complex regulatory and security requirements into scalable product capabilities across identity and access management (IAM), encryption, key management, audit logging, access controls, and operational security.
• Drive product requirements for FIPS-compliant cryptographic modules and government-specific deployment and licensing models.
• Establish long-term strategy for enterprise security capabilities that support regulated industries worldwide.
• Own the product strategy and roadmap for sovereign cloud offerings, including the European Sovereign Cloud (ESC), Kingdom of Saudi Arabia (KSA), and future sovereign cloud regions.
• Own and deliver long-term Five-Eyes Sovereign Cloud Deployments.
• Define product capabilities that address data residency, personnel access controls, customer-managed encryption, and operational sovereignty requirements.
• Work with cloud providers and strategic partners to enable deployments in restricted and regulated environments, including offerings such as Assured Workloads and sovereign cloud frameworks.
• Partner with legal, compliance, and regional stakeholders to navigate evolving global regulations and regional market requirements.

Requirements

• 8+ years of product management experience, including significant experience building cloud infrastructure, platform, security, or enterprise SaaS products.
• Deep understanding of FedRAMP certification requirements and the challenges of operating compliant multi-tenant cloud services.
• Strong technical understanding of modern cloud architectures across AWS, Azure, and GCP.
• Experience with security domains including IAM, network isolation, private connectivity, encryption, key management systems (KMS/BYOK), audit logging, and access controls.
• Familiarity with global data residency and sovereignty requirements, including GDPR and emerging regional regulatory frameworks.
• Demonstrated success leading complex cross-functional initiatives involving engineering, security, compliance, legal, and GTM teams.
• Strong written and verbal communication skills, with the ability to influence both technical and executive audiences.

Nice-to-Haves

• Experience with US Government Security and Risk Frameworks (FEDRAMP, DOD IL, RMF, etc).
• Experience with sovereign clouds, government cloud regions, and regulated industry offerings.
• Background in databases, data platforms, analytics, or infrastructure software.
• Experience commercializing open-source technologies for enterprise and government customers.
• Familiarity with FIPS 140-2/140-3 validation requirements and government procurement processes.
• Experience working directly with federal, defense, intelligence, or public-sector customers.
• Existing security clearance or ability to obtain one.