Enterprise Compliance Manager

Job Requisition ID #

26WD95865

Position Overview

Autodesk is seeking a detail-oriented and experienced Compliance Manager to join our team and lead our Enterprise Compliance program. The successful candidate will be responsible for ensuring compliance with Sarbanes-Oxley (SOX) regulations and PCI requirements, focusing on IT general controls, as well as harmonizing controls across our rapidly expanding portfolio of compliance reporting. This role will involve onboarding new systems to the control environment, coordinating with stakeholders on technical requirements, monitoring IT controls to safeguard the integrity and security of our financial systems, and mentoring of individual contributors.

The Enterprise Compliance Manager role will balance program management, people leadership, and senior individual contributor activities. The role will play a key role in managing the flow of audit requests, scope of the external testing, and work closely with our Audit & Advisory Services Team to ensure compliance by design as new systems are added to scope. They will interface with senior leadership across Autodesk in addition to our external auditors to represent Autodesk's robust control environment and the critical security controls maintained.

Responsibilities

• Act as the people leader for the Enterprise Compliance Team. This includes performance management, mentorship, regular 1:1s, and leading with remote management and people first best practices
• Lead the Enterprise Compliance Practice as part of the larger Trust Compliance Program. This includes creating 1-3 year strategies, defining quarterly priorities, tracking and reporting on progress and blockers, and escalating to leadership where appropriate
• Collaborate with control owners across divisions to explain compliance requirements and provide guidance on how to meet these requirements effectively
• Propose and implement improvements to the Compliance program, including AI and automation capabilities, to increase the efficiency and effectiveness of evidence collection, test procedures, and control health
• Oversee regular security assessments, audits, and risk analysis to identify potential control deficiencies and ensure compliance with relevant security standards (SOX, PCI, etc.)
• Prepare and present detailed reports on compliance status, audit findings, remediation plans, and recommendations to senior management and stakeholders

• Minimum of 8 years of experience in security compliance, information security, audit, or related field, with a strong technical background
• In-depth knowledge of security compliance frameworks, standards, and regulations (e.g., SOX and PCI DSS)
• Experience in assessing security controls and explaining compliance requirements to technically minded control owners
• At least 1-2 years of experience in managing and mentoring staff and contractor workforce to support the mission and vision of the organization

• Strong analytical and problem-solving skills, with the ability to assess complex security issues and develop effective solutions
• Excellent communication and interpersonal skills, with the ability to clearly articulate technical concepts to both technical and non-technical stakeholders in a remote/hybrid-first environment. Experience with both synchronous meetings and asynchronous communications is desirable
• Demonstrated ability to lead and manage complex projects, including planning, execution, and delivery
• Experience with cloud security and compliance (e.g., AWS, Azure, Google Cloud) is highly desirable
• Strong project management skills, with the ability to manage multiple projects and priorities simultaneously
• Relevant certifications (e.g., CISSP, CISM, CISA) preferred