Job Description

About Donorbox
Donorbox is a leading fundraising platform and donor management system for nonprofit organizations. Our mission is to accelerate positive impact worldwide by helping nonprofits become highly effective at raising funds and managing their supporter base. Since 2014, we have powered more than 100,000 global organizations to raise over $3B in donations. 🚀
Our fast-growing company is profitable and bootstrapped with a healthy run rate. We have a fully distributed and diverse 150-person team based in 16+ states and 23+ countries. In 2026, Donorbox was named by Built In as one of the Best Places to Work in Washington, DC.
🏅 Donorbox is rated the #1 software for fundraising, donor management, and nonprofit payment on G2 based on hundreds of verified customer reviews — a reflection of the care our team puts into building products that nonprofits trust.
The Role
As the Senior Compliance Manager, you will own and scale Donorbox's global compliance and risk programs across data protection, security, and regulatory frameworks. You will ensure adherence to key standards (e.g. GDPR, PCI DSS, SOC2, ISO 27001, HIPAA) while building scalable processes that support business growth. 
You will partner closely with Legal, Security, Product, Sales, and external auditors to manage audits, reduce risk exposure, and enable enterprise readiness. This role requires strong judgment and a pragmatic, risk-based approach, ensuring compliance while enabling business growth and product innovation.
Responsibilities
Own and scale the company's global compliance program across regulatory, security, and privacy frameworks
Lead external audits and certifications (SOC 2, PCI DSS, ISO 27001), including preparation, execution, and remediation
Develop and maintain policies, controls, and governance frameworks aligned with business needs
Partner with Sales and Customer teams to support security reviews and enPlease mention the word **BLISS** and tag RODguMTk4Ljk5LjE0Mw== when applying to show you read the job post completely (#RODguMTk4Ljk5LjE0Mw==). This is a beta feature to avoid spam applicants. Companies can search these words to find applicants that read this and see they're human.