Senior Technical Project Manager (Compliance & Certifications)

About the Role

We are seeking a highly organized and detail-oriented Senior Technical Project Manager (Compliance & Certifications) to coordinate, manage, and drive our technical compliance, security, and industry certification initiatives. In this role, you will be the operational engine behind our compliance roadmap—managing the rigid timelines of external audits while aligning execution across internal software development, IT/TechOps, and business operations cycles.

As a key member of our execution team, you will ensure that all compliance projects are structured, tracked, and reported in strict accordance with our corporate PMO Standards.

You will directly own and manage the planning, tracking, and execution of our annual Media Rating Council (MRC) accreditation and SOC2 (Type 1 and Type 2) audits. This role provides the critical project management, compliance oversight, governance, and auditability necessary to keep all teams aligned and audit-ready.

Key Responsibilities

1. PMO Reporting & Project Standards

• PMO Standards Alignment: Manage and structure all compliance, security, and certification project plans, trackers, and document repositories in accordance with established PMO methodologies and guidelines.

• Standardized Status Reporting: Provide routine, structured progress reports, KPI dashboards, and project health updates (covering milestones, risks, and blockers) as defined by PMO reporting frameworks.

• Risk & Issue Escalation: Actively track dependencies and risks, executing formal escalation paths per PMO standards when compliance milestones are in jeopardy.

• Platform Management: Maintain up-to-date program trackers, schedules, and resource planning artifacts within central PMO tools (such as Asana or Jira) to ensure a single source of truth.

2. Hybrid Project Management & Governance

• Milestone & Critical Path Tracking: Establish clear, phase-gate project plans for upcoming audits, mapping out the critical path for audit readiness, dry-runs, evidence lock-down, and formal evaluation windows.

• Requirements Translation: Translate complex, rigid compliance controls (e.g., security protocols, data-filtering standards) into clear, actionable technical specifications, user stories, and development tasks.

• Engineering Alignment: Partner with Security, TechOps, Data, and Engineering teams to slot compliance-related tasks and vulnerability remediations into active development cycles (sprints or Kanban) without disrupting the core product roadmap.

• Cross-Functional Compliance Oversight: Oversee key operational controls managed by technical partner teams to ensure continuous audit readiness.

3. Audit Coordination & Evidence Gathering

• Audit Liaison: Serve as the primary operational contact and liaison for external auditors and assessors (e.g., MRC, EY, SOC2 auditors), ensuring meetings, requests, and inquiries are managed efficiently.

• Evidence Management: Project manage the continuous gathering, formatting, and submission of technical evidence (configurations, access logs, architectural diagrams) required for SOC2 and MRC evaluations.

• Remediation Tracking: Monitor and drive the resolution of any compliance gaps, audit findings, or vulnerability remediation tasks identified during pre-audits or continuous monitoring.

4. Media Rating Council (MRC) Certification Support

• Audit Lifecycle Management: Project manage the end-to-end timeline for annual MRC audits, pre-assessment phases, and ongoing compliance reviews.

• Adtech & Measurement Standards: Coordinate engineering and product tasks related to data pipelines, measurement methodologies, and filtration logic to ensure strict alignment with MRC and industry measurement standards.

• Disclosure & Change Governance: Coordinate the preparation, maintenance, and regular updating of methodology disclosures, and establish a "Journal of Change" process to manage and communicate changes to accredited elements with MRC and auditor representatives.

• Business Operations Alignment: Project manage compliance workflows across business operations required by MRC standards, including Business Partner Qualification (BPQ/client vetting), client onboarding/support disclosures, and discrepancy/data reissuance tracking.

5. SOC2 Type 1 & Type 2 Support

• Audit Execution: Organize the schedule, operational execution, and readiness milestones for annual SOC2 Type 1 and Type 2 audits.

• Controls Integration: Partner with engineering and IT teams to ensure system monitoring, access control reviews, and infrastructure configurations are consistently maintained and documented according to SOC2 Trust Services Criteria.

• Automation Management: Help manage and monitor compliance automation tooling (e.g., Vanta, Drata) to ensure continuous control verification and evidence tracking.

Required Qualifications & Experience

• Experience: 5 years of experience as a Technical Project Manager, Program Manager, or Delivery Manager in a SaaS, Adtech, or software engineering environment.

• PMO Alignment: Proven experience managing projects and reporting project health, timelines, and status updates in alignment with structured PMO frameworks.

• Hybrid PM Expertise: Demonstrated ability to manage fixed-deadline, structured compliance timelines (milestone/waterfall approach) while integrating execution into Agile-operating engineering teams.

• Compliance & Governance: Practical experience managing projects, timelines, evidence gathering, or compliance oversight related to SOC2 audits or Media Rating Council (MRC) accreditation.

• Project Tracking Platforms: Advanced proficiency in structured project planning and execution tracking within platforms like Asana or Jira.

• Technical Literacy: Comfort working alongside engineering and IT teams; ability to understand cloud infrastructure concepts (AWS/GCP), database schemas, and identity/access management frameworks.

Preferred Qualifications

• Adtech Background: Deep understanding of ad-serving technology, measurement methodologies, and industry measurement standards.

• Certifications: PMP (Project Management Professional), CAPM, PMI-ACP, or introductory security/compliance credentials.

• Compliance Tooling: Experience using compliance automation platforms (e.g., Drata, Vanta, Secureframe) to track control verification and evidence gathering.

US Benefits & Perks

• Flexible Time Off Policy – Take the time you need

• Enhanced parental leave (16 weeks for birth parent, 8 weeks for non-birth parent at full pay) 

• Regular company events and activities

• Robust Company Sponsored Health & Welfare Benefits

• 401k Plan – 4% employee match

• Enhanced Wellness Program including access to EAP, Wellness Coaching & Wellness Fridays program