Principal Product Manager, Compliance & Security

This role sits at the intersection of product management, security engineering, compliance, legal, and cloud infrastructure. You will own the information security strategy for regulated cloud offerings, certifications, sovereign cloud deployments, and specialized regional offerings that enable customers to operate ClickHouse in highly restricted environments.

WHAT YOU'LL DO

• Define and execute the multi-year roadmap for achieving ClickHouse for Government certifications (FEDRAMP, DOD-IL, StateRAMP, CJIS, etc)
• Partner closely with Security, Engineering, Compliance, Legal, GTM and Operations teams to ensure ClickHouse Cloud meets the requirements of frameworks including SOC 2, ISO 27001/27701, HIPAA, PCI DSS, and government-specific standards (FIPS, Common Criteria / Protection Profile, NIST SP800-171, CMMC, Sec 508/VPAT, DISA STIG).
• Translate complex regulatory and security requirements into scalable product capabilities across identity and access management (IAM), encryption, key management, audit logging, access controls, and operational security.
• Drive product requirements for FIPS-compliant cryptographic modules and government-specific deployment and licensing models.
• Establish long-term strategy for enterprise security capabilities that support regulated industries worldwide.
• Own the product strategy and roadmap for sovereign cloud offerings, including the European Sovereign Cloud (ESC), Kingdom of Saudi Arabia (KSA), and future sovereign cloud regions.
• Own and deliver long-term Five-Eyes Sovereign Cloud Deployments
• Define product capabilities that address data residency, personnel access controls, customer-managed encryption, and operational sovereignty requirements.
• Work with cloud providers and strategic partners to enable deployments in restricted and regulated environments, including offerings such as Assured Workloads and sovereign cloud frameworks.
• Partner with legal, compliance, and regional stakeholders to navigate evolving global regulations and regional market requirements.

WHAT YOU BRING

• 8+ years of product management experience, including significant experience building cloud infrastructure, platform, security, or enterprise SaaS products.
• Deep understanding of FedRAMP certification requirements and the challenges of operating compliant multi-tenant cloud services.
• Strong technical understanding of modern cloud architectures across AWS, Azure, and GCP.
• Experience with security domains including IAM, network isolation, private connectivity, encryption, key management systems (KMS/BYOK), audit logging, and access controls.
• Familiarity with global data residency and sovereignty requirements, including GDPR and emerging regional regulatory frameworks.
• Demonstrated success leading complex cross-functional initiatives involving engineering, security, compliance, legal, and GTM teams.
• Strong written and verbal communication skills, with the ability to influence both technical and executive audiences.

PREFERRED

• Experience with US Government Security and Risk Frameworks (FEDRAMP, DOD IL, RMF, etc) .
• Experience with sovereign clouds, government cloud regions, and regulated industry offerings.
• Background in databases, data platforms, analytics, or infrastructure software.
• Experience commercializing open-source technologies for enterprise and government customers.
• Familiarity with FIPS 140-2/140-3 validation requirements and government procurement processes.

BONUS

• Experience working directly with federal, defense, intelligence, or public-sector customers.
• Existing security clearance or ability to obtain one.

PERKS

• Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 25 countries.
• Healthcare - Employer contributions towards your healthcare.
• Equity in the company - Every new team member who joins our company receives stock options.
• Time off - Flexible time off in the US, generous entitlement in other countries.
• A USD$500 Home office setup if you’re a remote employee.
• Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites.

CULTURE - WE ALL SHAPE IT

As part of a rapidly scaling start-up, you will be instrumental in shaping our culture.

Are you interested in finding out more about our culture?

EQUAL OPPORTUNITY & PRIVACY

ClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.