Principal Product Manager, Security & Compliance

ClickHouse, recognized on the 2025 Forbes Cloud 100 list, is a rapidly growing private cloud company specializing in real-time analytics and data warehousing. They are seeking a Principal Product Manager to lead the strategy for highly regulated sectors, focusing on FedRAMP compliance and the expansion of their Sovereign Cloud offerings.

Responsibilities:

• Define and execute the multi-year roadmap to achieve FedRAMP Moderate certification and, eventually, FedRAMP High certification for ClickHouse product offerings
• Partner with engineering and the compliance team to ensure product capabilities support SOC 2, ISO 27001, HIPAA, PCI and other frameworks
• Translate complex federal security requirements into actionable product specifications for Identity and Access Management (IAM), encryption, and audit logging, personnel access
• Serve as the primary product nominee for FIPS compliance modules and government-specific licensing models
• Lead the product strategy for the European Sovereign Cloud (ESC) and KSA regions, navigating prerequisites including legal, partnership (e.g., CNTXT), and infosec requirements
• Define data residency and personnel control requirements (e.g., in-country staff, cleared personnel) to support organizational data sovereignty
• Collaborate with AWS, Microsoft Azure and Google Cloud on specialized deployment packages like Assured Workloads for restricted jurisdictions

Requirements:

• 8+ years of product management experience, with at least 3 years deeply focused on cloud security, infrastructure, or enterprise SaaS compliance
• Deep understanding of FedRAMP (Moderate/High) requirements and the process of achieving certification for a multi-tenant cloud service
• Strong grasp of cloud architectures (AWS, GCP, Microsoft Azure), including VPC peering, private endpoints, encryption (BYOK/KMS), and multi-tenant security
• Familiarity with global data sovereignty trends and regulations such as GDPR, and their impact on cloud region strategy
• Exceptional ability to explain complex compliance and technical concepts to both engineering teams and executive stakeholders
• Proven track record of working cross-functionally across legal, security, operations, and sales to launch products in regulated markets
• Prior experience securing a data platform, database product, or real-time analytics service
• Experience commercializing open-source technologies for enterprise-grade deployments