Compliance Program Manager

**AssemblyAI is a remote-first AI company building powerful deep learning models for developers, startups, and enterprises to transcribe and understand their audio data.**

**Our ASR models already outperform companies like Google, AWS, and Microsoft** - which is why hundreds of companies and thousands of developers are using our APIs to transcribe and understand millions of videos, podcasts, phone calls, and zoom meetings every day. Our APIs power innovative products like conversational intelligence platforms, zoom meeting summarizers, content moderation, and automatic closed captioning.

AssemblyAI's Speech-to-Text APIs are already trusted by Fortune 500s, startups, and thousands of developers around the world, with **well-known customers including Spotify, Algolia, Dow Jones, Happy Scribe, BBC, The Wall Street Journal, and NBCUniversal. **As part of a huge and emerging market, AssemblyAI is well on its way to becoming the leader in speech recognition and NLP.

**We're growing at breakneck speed, and recently announced our Series B round. We've raised $63M in total funding, **and are backed by leading investors including Insight Partners, Accel, Y Combinator, Patrick and John Collision (Founders of Stripe), Nat Friedman (Former CEO of GitHub), and Daniel Gross (Entrepreneur & Investor in companies including GitHub, Uber & SpaceX)

Our ambition is to build an iconic AI company, making advanced deep learning technology accessible to everyday developers through a simple API, good docs, and a great developer experience.

**Join our world-class, remote team and help us build an iconic deep learning company**

**The Role**:
We're looking for a Compliance Program Manager who will have complete ownership and accountability of AssemblyAI's compliance programs from start to finish. You will drive consensus among stakeholders, draft policies, write requirements, and work with teams across the company to roll out changes that fulfill our compliance controls. We leverage Vanta compliance reporting software to help augment your toolset and automate as much as possible.

Some of your responsibilities will include:

- Improvement of existing and development of new compliance programs (SOC2 Type 2, PCI DSS, GDPR, etc.)
- Leveraging existing Vanta infrastructure for security compliance implementation and reporting by:

- Creating policies and procedures that address outstanding controls
- Developing and tracking compliance metrics to ensure we remain on-track
- Responsible for reporting progress and following up on action items with stakeholders or individuals across the company
- You will collaborate with stakeholders to align compliance controls with standard operating procedures, monitoring, and reporting
- Provide detailed metrics, evidence of controls, or recommended updates as needed to satisfy vendor audits, customer audits, and certifications
- Help meet our audit and contractual requirements by working with cross-functional teams and identifying long-term control owners within the organization
- Responsible for writing requirements to ensure the data at AssemblyAI meets all laws and regulations of compliance programs we pursue
- Continually working to enhance the security of data at AssemblyAI, regardless of form

**Requirements**:

- Bachelor's degree in related field or equivalent experience
- 5+ years proven knowledge of program management lifecycle, and skilled at project management tools
- 3+ years of Security Compliance program monitoring and reporting
- 2+ years of participating in SOC2 Type 2 compliance control enforcement and audit processes
- In-depth knowledge of GDPR security compliance standards
- Experience with metrics-based projects and utilizing metrics to gauge risk and success
- Experience supporting company-wide security compliance programs designed to anticipate, assess, and minimize control gaps and audit findings
- High level of comfort in communicating effectively across internal and external organizations
- Experience working with Vanta

**Preferred**:

- PMP Certification
- Familiarity with PCI DSS compliance requirements
- Familiarity with HIPAA compliance requirements

**Skills**:

- You have an ownership mindset
- You write detailed documentation around policies and processes
- Good communication skills with proven success in collaboration and teamwork
- Demonstrated understanding of and experience with security-related technologies, systems, and tools
- Comfort influencing change and driving the completion of the programs you are responsible for
- Ability to lead a project independently, raise issues, and take corrective action as needed

**Our Team**:
**Our team is made up of problem solvers, innovators and top AI researchers with over 20+ years of experience in Machine Learning, NLP, and Speech Recognition from companies like DeepMind, Google Brain, Meta, Apple and Amazon. **They conduct cutting edge deep learning research and develop novel algorithms & techniques to continually p