Senior Manager, Regulatory Compliance

Manages the ongoing preparation, testing, and monitoring of compliance with information security standards and in alignment with government regulatory requirements with relation to the design, development, and deployment of cloud products and services.

Certain US customer or client-facing roles may be required to comply with applicable requirements, such as immunization and occupational health mandates.

Range and benefit information provided in this posting are specific to the stated locations only

US:
Hiring Range in USD from: $97,500 to $199,500 per annum. May be eligible for bonus and equity.

Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle's differing products, industries and lines of business. Candidates are typically placed into the range based on the preceding factors as well as internal peer equity.

Oracle US offers a comprehensive benefits package which includes the following:

• Medical, dental, and vision insurance, including expert medical opinion
• Short term disability and long term disability
• Life insurance and AD&D
• Supplemental life insurance (Employee/Spouse/Child)
• Health care and dependent care Flexible Spending Accounts
• Pre-tax commuter and parking benefits
• 401(k) Savings and Investment Plan with company match
• Paid time off:
  Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment.
  
  Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation.
• 11 paid holidays
• Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours.
• Paid parental leave
• Adoption assistance
• Employee Stock Purchase Plan
• Financial planning and group legal
• Voluntary benefits including auto, homeowner and pet insurance

The role will generally accept applications for at least three calendar days from the posting date or as long as the job remains posted.

The Senior Manager, Regulatory Compliance plays a critical role in Oracle’s enterprise-wide information security strategy. This leader partners with key stakeholders to lead the development and execution of processes to enable operational visibility and monitoring of compliance and security posture for Oracle cloud environments, manage critical security risks, ensure alignment with regulatory frameworks, and provide executive-level transparency.

Responsibilities include driving the requirements for the development of enterprise-level reporting to present metrics, risk profiles, and compliance status to senior executives and global audit teams to enable strategic recommendations and risk mitigation plans. Monitor remediation activities and measure compliance against SLAs and KPls. Keep abreast of evolving global regulatory requirements, security frameworks, and emerging vulnerability management trends to ensure Oracle's continued leadership in security compliance.

Will educate through training members on information security and industry regulatory standards applicable to their products and services.

• Bachelor's or Master's degree in Computer Science, Information Security, or related field; professional certifications such as CISSP, CISM, CISA preferred.
• 7+ years' experience in vulnerability management, compliance, or enterprise security operations, preferably in a large global organization.
• In-depth knowledge of vulnerability management tools and enterprise-scale configuration management processes (Qualys, Tenable, Rapid7, etc.).
• Experience with secure container orchestration and management.
• Knowledge and experience translating compliance requirements into security engineering solutions.
• Expertise in government regulatory obligation management and industry standards (NIST, FedRAMP, DoD, ISO, PCI DSS, SOX, GDPR, HIPAA).
• Demonstrated experience in cross-functional collaboration and executive reporting at scale.
• Strong analytical, strategic thinking, and project management capabilities.
• Excellent communication and interpersonal skills, with an ability to engage and influence stakeholders at all levels (including executive leadership).