Sr. Technology Compliance Product Owner

Our Company
Changing the world through digital experiences is what Adobe’s all about. We give everyone—from emerging artists to global brands—everything they need to design and deliver exceptional digital experiences! We’re passionate about empowering people to create beautiful and powerful images, videos, and apps, and transform how companies interact with customers across every screen. 
We’re on a mission to hire the very best and are committed to creating exceptional employee experiences where everyone is respected and has access to equal opportunity. We realize that new ideas can come from everywhere in the organization, and we know the next big idea could be yours!

This is a Compliance Product Owner role for Adobe’s Technology GRC (TechGRC) group. This person will be a member of TechGRC Security Compliance team. The candidate will be responsible for the continuous auditing and monitoring requirements supporting the compliance function.

• Work under the supervision and guidance of the Tech GRC manager and drive technology compliance activities across Adobe.
• Perform Information Security related assessments to cover domains like User Access management, Network, OS & Application Security, Encryption, Backup Management, Disaster Recovery, Physical Security, Training & Awareness etc.
• Draft compliance reports to summarize the compliance objectives, key findings, and work with teams to remediate key findings
• Lead the liaising with external auditors and customers to help them gain comfort with regard to Adobe’s security compliance program.
• Identify internal controls issues, ensure they are well-defined and root causes are identified.
• Contribute to the expansion of Adobe’s Common Control Framework adoption throughout the organization, while actively refining and improving the framework to meet evolving needs and industry standards.
• Document audit procedures performed ensuring audit methodology is consistently followed and conclusions are appropriately reached.
• Partner with GRC Engineering to develop integrations, dashboards, and reports that deliver real-time awareness of risk, compliance, and control posture.
• Create dashboards, KPIs, and reporting frameworks that equip executives with actionable insights for informed decision-making.

• Bachelors / master’s Degree with a focus in Information Technology / Computer Science or related field or equivalent work experience
• Minimum 5-10 years of experience in related field
• Hand on experience with AWS & Azure environments
• Knowledge of Compliance frameworks (e.g. BSI C5, Spain ENS, CyberEssentials+, PCI DSS etc.)
• Expertise with AI compliance frameworks (ISO 42001, NIST AI RMF, CSA AICM etc.)
• Knowledge of Core IT processes / services such as SDLC, Identity/User Access management, Backup and DR processes will be useful
• Good interpersonal, verbal and written communication skills. It is essential that the candidate is a team-player and possesses strong organizational and planning skills
• Ability to communicate with both business and IT technical staff including IT and Business management.
• Ability to look ahead, anticipate questions, independently assess risk, and think critically and creatively

At Adobe, for sales roles starting salaries are expressed as total target compensation (TTC = base + commission), and short-term incentives are in the form of sales commission plans.  Non-sales roles starting salaries are expressed as base salary and short-term incentives are in the form of the Annual Incentive Plan (AIP).

In addition, certain roles may be eligible for long-term incentives in the form of a new hire equity award.

State-Specific Notices:

California:

Fair Chance Ordinances

Adobe will consider qualified applicants with arrest or conviction records for employment in accordance with state and local laws and “fair chance” ordinances.

Colorado:

Application Window Notice

If this role is open to hiring in Colorado (as listed on the job posting), the application window will remain open until at least the date and time stated above in Pacific Time, in compliance with Colorado pay transparency regulations. If this role does not have Colorado listed as a hiring location, no specific application window applies, and the posting may close at any time based on hiring needs.

Massachusetts:

Massachusetts Legal Notice

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Adobe is proud to be an Equal Employment Opportunity employer. We do not discriminate based on gender, race or color, ethnicity or national origin, age, disability, religion, sexual orientation, gender identity or expression, veteran status, or any other applicable characteristics protected by law. Learn more.

Adobe aims to make Adobe.com accessible to any and all users. If you have a disability or special need that requires accommodation to navigate our website or complete the application process, email [email protected] or call (408) 536-3015.