Principal Product Manager, Security & Compliance

Stack

Responsibilities

• ▹Define and execute the multi-year roadmap to achieve FedRAMP Moderate, and eventually FedRAMP High, certification
• ▹Partner with engineering and compliance teams to support SOC 2, ISO 27001, HIPAA, PCI, and other frameworks
• ▹Translate complex federal security requirements into actionable product specs for IAM, encryption, audit logging, and personnel access
• ▹Serve as the primary product nominee for FIPS compliance modules and government-specific licensing models
• ▹Lead product strategy for the European Sovereign Cloud (ESC) and KSA regions, navigating legal, partnership (e.g. CNTXT), and infosec requirements
• ▹Define data residency and personnel control requirements (e.g. in-country, cleared personnel)
• ▹Collaborate with AWS, Microsoft Azure, and Google Cloud on specialized deployment packages (e.g. Assured Workloads) for restricted jurisdictions

Requirements

• ▹8+ years of product management experience, with at least 3 years deeply focused on cloud security, infrastructure, or enterprise SaaS compliance
• ▹Deep understanding of FedRAMP (Moderate/High) requirements and the certification process for multi-tenant cloud services
• ▹Strong grasp of cloud architectures (AWS, GCP, Microsoft Azure), including VPC peering, private endpoints, encryption (BYOK/KMS), and multi-tenant security
• ▹Familiarity with global data sovereignty trends and regulations such as GDPR
• ▹Exceptional ability to explain complex compliance and technical concepts to engineering teams and executives
• ▹Proven track record working cross-functionally across legal, security, operations, and sales to launch products in regulated markets

Nice to have

• ▹Prior experience securing a data platform, database product, or real-time analytics service
• ▹Experience commercializing open-source technologies for enterprise-grade deployments

Soft skills

About the company

ClickHouse is a leading provider of real-time analytics database technology, with a cloud platform serving the world's largest enterprise and public-sector customers.