Manager, Compliance at Commvault

Job description

Recruitment Fraud Alert We’ve learned that scammers are impersonating Commvault team members—including HR and leadership—via email or text. These bad actors may conduct fake interviews and ask for personal information, such as your social security number. What to know: Commvault does not conduct interviews by email or text. We will never ask you to submit sensitive documents (including banking information, SSN, etc) before your first day. Commvault recruiters may contact prospective candidates through LinkedIn and other professional networking platforms regarding career opportunities. If you are unsure whether a recruiting communication is legitimate, review the profile to ensure they have a badge verifying them as a Commvault employee. If you suspect a recruiting scam, please contact us at wwrecruitingteam@commvault.com About Commvault Commvault (NASDAQ: CVLT) delivers continuous recovery for the AI era. We help organizations stay ready for constant disruption by returning critical data, applications, identities, and AI systems to a clean, trusted state. Our purpose-built recovery solutions span cloud-native and hybrid environments, leveraging AI to enable resilience at enterprise scale. The Opportunity Help shape the future of trust and compliance at Commvault. As a Compliance Manager you will serve as a senior member of the GRC team, reporting directly to the Director of GRC and oversee audit and certification maintenance for 12+ commercial audits, as well as planning and readiness for new audits. You will lead audit program operations, partner with teams across the business to strengthen controls and drive remediation, and help expand Commvault’s global compliance program as regulatory, customer, and business needs evolve. This is an opportunity to combine hands-on expertise with strategic planning, turn complex requirements into practical solutions, and make a meaningful impact on the trust organization. What You'll Do... • Lead the ongoing operation and maturity of Commvault’s global audit and certification programs, owning audit maintenance, evidence collection, readiness, and remediation while driving a scalable, top-tier compliance program. • Identify gaps and opportunities to strengthen control maturity, and partner with control owners to implement sustainable improvements. • Oversee the buildout, automation, and ongoing refinement of controls and tests in Commvault’s GRC tool Vanta, partnering with technical teams and control owners to align testing with compliance requirements, validate test results and evidence quality, and establish clear ownership and exception workflows. Drive reliable continuous monitoring and reduce manual effort to support a scalable, mature compliance program. • Define and report actionable compliance metrics covering control effectiveness, monitoring coverage, automation adoption, audit readiness, and remediation progress. Use trends to prioritize improvements and provide clear visibility into program health and maturity. • Partner across Information Security, Legal, Engineering, Product, and other business functions to embed compliance into day-to-day operations, establish clear control accountability, and build practical, sustainable processes that scale with the business. • Work closely with Customer Trust and Risk teams to clarify and communicate audit requirements, escalate gaps and issues to the appropriate stakeholders, and coordinate timely resolution. • Monitor evolving regulations, standards, and industry expectations, assess their impact on Commvault’s compliance programs, and translate relevant changes into prioritized program and control improvements. • Serve as a trusted senior resource for day-to-day compliance guidance, helping stakeholders navigate requirements and make risk-informed decisions while supporting broader priorities across Commvault’s global compliance program. Who You Are... • 7+ years of professional experience in GRC, information security, and/or audit, pre