About this role
MongoDB is seeking a Regulatory Change Management Program manager to help anticipate regulatory developments within Technology, Cyber Security and AI spaces, assess their implications for the business, and ensure material obligations are identified and addressed before they create unexpected risk or exposure. This role reports to the Director of Operations within MongoDB’s Assurance, Risk & Compliance (ARC) team.
You will monitor the regulatory environment, assess applicability and compliance impact, and give the ARC team a clear view of emerging obligations, exposure, and readiness. In addition to working within ARC, you will work across Privacy, Legal, Product, Engineering, People, and other business teams, providing the insight, interpretation, and escalation that help accountable owners respond early and proportionately.
We are looking to speak to candidates who are based in Dublin for our hybrid working model.
What you will do
Regulatory horizon scanning and change management
• Monitor and triage developments in data protection, privacy, cybersecurity, digital resilience, artificial intelligence, online services, and other regulations relevant to MongoDB
• Maintain a forward-looking regulatory change inventory, including source, effective date, applicability, affected business areas, accountable stakeholders, and current assessment status
• Collaborate with legal to assess whether a regulatory development is relevant to MongoDB’s products, services, entities, customers, suppliers, workforce, or operating model
• Prepare concise impact assessments, obligation summaries, briefing notes, and escalation papers for senior stakeholders within ARC group and Global Security Organization
• Coordinate regulatory change assessments across subject-matter experts
• Track decisions, dependencies, risks, and overdue responses; identify where ownership or interpretation is unclear
• Surface emerging themes and potential blind spots
Data protection and Data classification
• Collaborate with the Security team, the Privacy and Legal teams with GDPR and related data-protection analysis across products, business processes, and third-party relationships
• Escalate potential compliance gaps, or unresolved interpretation questions
• Help maintain and evolve a practical data-classification framework aligned to regulatory, security and business requirements
• Advise teams from Compliance perspective on classification decisions for information used in internal systems, customer engagements, and third-party services
• Review Compliance related classification challenges and exceptions for consistency, proportionality, and traceability
Oversight, reporting, and assurance
• Develop dashboards and reporting that show exposure, readiness, ownership, overdue decisions, and material trends rather than activity for its own sake
• Support internal compliance requests, regulatory enquiries, and control assessments by coordinating evidence and explai