Engineering Manager I, Commercial Audit

What You’ll Do

• Lead the strategy, roadmap, and execution of Datadog’s commercial security compliance efforts, shifting from manual audit processes to automated, scalable platforms and methodologies.
• Build, mentor, and grow a high-performing team of engineers and analysts, fostering a culture of technical excellence, continuous learning, and cross-functional collaboration.
• Partner within Information Security to operationalize a common control framework that integrates seamlessly into Datadog’s architecture and processes.
• Drive the development of internal tooling to automate evidence collection and dashboarding, reducing operational friction across the organization.
• Define and track program metrics: control coverage, audit efficiency, and automation adoption.
• Collaborate with broader internal engineering teams to embed compliance-by-design into our infrastructure, CI/CD pipelines, and cloud-native service adoption.

Who You Are

• You build strong, trusted relationships across engineering, legal, product, and executive stakeholders. You remain calm under pressure, navigate disagreement with diplomacy, and consistently bring people to alignment without creating unnecessary friction.
• You are a steady, low-ego leader who earns trust through consistency, diplomacy, and sound judgment. You can navigate difficult conversations, resolve conflict constructively, and maintain strong working relationships across diverse teams.
• You have experience leading or managing teams in security engineering, GRC, or risk management with a focus on leveraging AI to build automation and tooling for transitioning to a GRC engineering approach.
• Strong technical background with the ability to review code (Python, Go), interpret architecture diagrams, and understand infrastructure (Kubernetes, AWS/GCP/Azure).
• Deep understanding of the modern compliance landscape (e.g., HIPAA, SOC2, PCI, ISO 27001, FedRAMP) and experience implementing them at scale in cloud-native environments.
• You are a clear communicator who can translate complex technical or regulatory requirements into "plain language" for engineers, leadership, and external auditors alike.
• You possess a systems-thinking mindset—you look for upstream root causes and downstream impacts rather than solving problems in isolation.
• Experience in a SaaS or cloud infrastructure company where security scale and complexity are first-order challenges.
• Experienced people leader with a focus on mentorship, team growth, and inclusion. You know how to build trust and alignment across diverse teams.
• You operate with both rigor and pragmatism. You know when to build a bespoke engineering solution and when to leverage existing platforms or processes.

Nice to Haves

• Prior experience working as an auditor (e.g., QSA) or directly facilitating audits, with the ability to negotiate scope and timelines effectively.