About the role
About ClickHouse Recognized on the 2025 Forbes Cloud 100 list, ClickHouse is one of the most innovative and fast-growing private cloud companies. With more than 3,000 customers and ARR that has grown over 250 percent year over year, ClickHouse leads the market in real-time analytics, data warehousing, observability, and AI workloads. The company’s sustained, accelerating momentum was recently validated by a $400M Series D financing round. Over the past three months, customers including Capital One, Lovable, Decagon, Polymarket, and Airwallex have adopted the platform or expanded existing deployments. These customers join an established base of AI innovators and global brands such as Meta, Cursor, Sony, and Tesla. We’re on a mission to transform how companies use data. Come be a part of our journey! This role sits at the intersection of product management, security engineering, compliance, legal, and cloud infrastructure. You will own the information security strategy for regulated cloud offerings, certifications, sovereign cloud deployments, and specialized regional offerings that enable customers to operate ClickHouse in highly restricted environments.
What You'll Do Define and execute the multi-year roadmap for achieving ClickHouse for Government certifications (FEDRAMP, DOD-IL, StateRAMP, CJIS, etc) Partner closely with Security, Engineering, Compliance, Legal, GTM and Operations teams to ensure ClickHouse Cloud meets the
requirements of frameworks including SOC 2, ISO 27001/27701, HIPAA, PCI DSS, and government-specific standards (FIPS, Common Criteria / Protection Profile, NIST SP800-171, CMMC, Sec 508/VPAT, DISA STIG). Translate complex regulatory and security
requirements into scalable product capabilities across identity and access management (IAM), encryption, key management, audit logging, access controls, and operational security. Drive product
requirements for FIPS-compliant cryptographic modules and government-specific deployment and licensing models. Establish long-term strategy for enterprise security capabilities that support regulated industries worldwide. Own the product strategy and roadmap for sovereign cloud offerings, including the European Sovereign Cloud (ESC), Kingdom of Saudi Arabia (KSA), and future sovereign cloud regions. Own and deliver long-term Five-Eyes Sovereign Cloud Deployments Define product capabilities that address data residency, personnel access controls, customer-managed encryption, and operational sovereignty
