Commercial Compliance Lead

The role

The Commercial Compliance Lead will build and run the commercial compliance program from the ground up. This person will ensure enterprise deals meet regulatory, security, and contractual requirements while partnering with sales, legal, engineering, and security teams.

What you will do

• Design, implement, and maintain the enterprise sales compliance program.
• Partner with Enterprise Account Executives and Deal Desk from opportunity qualification through deal closure.
• Review customer security questionnaires, RFPs, and RFQs for compliance obligations and contractual risk.
• Ensure compliance with HIPAA/HITECH, DORA, and ICT third-party risk management frameworks.
• Align the product roadmap with enterprise certifications and regulatory requirements.
• Administer the company-wide vendor risk management program.
• Track global AI governance directives and data privacy mandates.
• Automate day to day compliance work using compliance agents and workflows.

Required qualifications

• 6+ years of hands-on experience in regulatory compliance, third-party risk management (TPRM), or commercial sales operations at an enterprise SaaS, cloud platform, or high-growth B2B technology compan
• Deep working knowledge of HIPAA/HITECH, EU DORA, ICT supply chain governance, and commercial contracting practices, including Data Processing Agreements (DPAs), BAAs, and specialized regulatory schedu
• Proven track record operationalizing compliance frameworks for cloud software, including familiarity with SOC 2, ISO 27001 readiness, and modern compliance automation platforms.
• Ability to build a compliance program from scratch and operate in high-velocity, ambiguous environments.
• Ability to synthesize dense regulatory requirements into clear guidance for sales executives, software engineers, corporate counsel, and enterprise CISOs or compliance officers.

Nice to have

• Active industry governance and privacy certifications such as CIPP/US, CIPP/E, CRISC, CISA, or HCISPP

About the company

Factory builds the platform for self-improving software development to help enterprise engineering teams become autonomous software factories. The company is backed by investors including Khosla Ventures, Sequoia, Blackstone, Ali Ghodsi, and Frank Slootman.