Engineering Manager I, Commercial Audit

The shape of it

In the posting’s own words

As the Engineering Manager for Commercial Audit, you will lead a high-performing team responsible for scaling Datadog’s security and compliance posture through automation, tooling, and engineering excellence. Our GRC (Governance, Risk, and Compliance) function is a critical partner to the broader Security and Engineering organizations, ensuring that Datadog not only meets rigorous global regulatory standards but does so in a way that is efficient, scalable, and integrated into our cloud-native infrastructure. You will manage a team of engineers and analysts who are transitioning to a GRC engineering direction to treat compliance as a software problem, leveraging AI, custom tooling, CI/CD pipelines, and cloud-native services to turn complex regulatory requirements into actionable, automated controls.

What it asks for · 10

• You build strong, trusted relationships across engineering, legal, product, and executive stakeholders. You remain calm under pressure, navigate disagreement with diplomacy, and consistently bring people to alignment without creating unnecessary friction.
• You are a steady, low-ego leader who earns trust through consistency, diplomacy, and sound judgment. You can navigate difficult conversations, resolve conflict constructively, and maintain strong working relationships across diverse teams.
• You have experience leading or managing teams in security engineering, GRC, or risk management with a focus on leveraging AI to build automation and tooling for transitioning to a GRC engineering approach.
• Strong technical background with the ability to review code (Python, Go), interpret architecture diagrams, and understand infrastructure (Kubernetes, AWS/GCP/Azure).
• Deep understanding of the modern compliance landscape (e.g., HIPAA, SOC2, PCI, ISO 27001, FedRAMP) and experience implementing them at scale in cloud-native environments.
• You are a clear communicator who can translate complex technical or regulatory requirements into "plain language" for engineers, leadership, and external auditors alike.
• You possess a systems-thinking mindset—you look for upstream root causes and downstream impacts rather than solving problems in isolation.
• Experience in a SaaS or cloud infrastructure company where security scale and complexity are first-order challenges.
• Experienced people leader with a focus on mentorship, team growth, and inclusion. You know how to build trust and alignment across diverse teams.
• You operate with both rigor and pragmatism. You know when to build a bespoke engineering solution and when to leverage existing platforms or processes.

Also a plus

• Prior experience working as an auditor (e.g., QSA) or directly facilitating audits, with the ability to negotiate scope and timelines effectively.

What the job covers

• Lead the strategy, roadmap, and execution of Datadog’s commercial security compliance efforts, shifting from manual audit processes to automated, scalable platforms and methodologies.
• Build, mentor, and grow a high-performing team of engineers and analysts, fostering a culture of technical excellence, continuous learning, and cross-functional collaboration.
• Partner within Information Security to operationalize a common control framework that integrates seamlessly into Datadog’s architecture and processes.
• Drive the development of internal tooling to automate evidence collection and dashboarding, reducing operational friction across the organization.
• Define and track program metrics: control coverage, audit efficiency, and automation adoption
• Collaborate with broader internal engineering teams to embed compliance-by-design into our infrastructure, CI/CD pipelines, and cloud-native service adoption.

Tools and skills named

Words the posting leans on

• engineering11×
• compliance7×
• audit6×
• build6×
• security6×
• tooling5×
• cloud-native4×
• control4×
• engineers4×
• experience4×
• grc4×
• infrastructure4×
• technical4×
• analysts3×
• automation3×
• culture3×

Counted from the posting after the mission statement and the legal notices are set aside. The ones near the top are the ones a screener is looking for.

More open at Datadog

• AI Research Engineer - Datadog AI Research (DAIR)Paris, France
• AI Research Scientist - Datadog AI Research (DAIR)New York, New York, USA
• AI Research Scientist - Datadog AI Research (DAIR)Paris, France
• Area Vice President, Sales EngineeringBoston, Massachusetts, USA; Denver, Colorado, USA; New York, New York, USA; San Francisco, California, USA
• Associate Field Marketing Manager (US East and Canada)New York, New York, USA
• Associate Growth Marketing ManagerNew York, New York, USA; San Francisco, California, USA