Quality Management System

Job description

Quality Management System (QMS) Manager – Engineering OperationsAt SailPoint, we do things differently. We understand that a fun-loving work environment can be highly motivating and productive. When smart people work on intriguing problems, and they enjoy coming to work each day, they accomplish great things together. With that philosophy, we've assembled the best identity team in the world that is passionate about the power of identity. As the fastest-growing, independent identity governance (IGA) provider, SailPoint helps hundreds of global organizations securely and effectively deliver and manage user access to data and applications residing in the data center, on mobile devices, and in the cloud. The company's innovative product portfolio offers customers an integrated set of core services including identity governance, provisioning, and access management delivered on-premises or from the cloud (IAM-as-a-service). SailPoint is seeking a Quality Management System (QMS) Manager to join our Engineering Operations team. This is a customer-facing, highly visible role at the intersection of process governance, multi-framework compliance readiness, and continuous improvement. You will keep the QMS audit-ready, aligned to how teams actually deliver, and connected to engineering tooling that produces evidence. The goal is a living system embedded in real workflows, not documentation revived before each audit. The RoleThis is a highly visible, customer-facing role responsible for the successful execution and evolution of our SaaS quality management system. You will be:The central owner of QMS policies, procedures, and records, with clear versioning, ownership, and review cadence. • The primary interface between Engineering, Product, Operations, and Compliance for audit readiness and trust communications. • Embedded with Engineering leaders to align delivery workflows with control requirements and audit expectations. • Accountable for strengthening the link between engineering tooling and audit posture, reducing manual evidence effort over time. • SailPoint's named quality management representative for GxP-regulated and life-sciences customers who require an independent, auditable vendor quality function. Day to Day • Own QMS maintenance and governance by keeping policies, procedures, and records aligned to real delivery practices. • Coordinate evidence collection and control mapping across annual certification and attestation cycles. • Pull and validate evidence from systems of record including Jira, CI/CD, ticketing systems, and access logs. • Run internal audit cadence and track findings through closure. • Manage corrective and preventive actions (CAPA), including root-cause analysis for recurring issues. • Train teams on process changes and audit expectations, and report quality posture to leadership and customer-facing stakeholders. • Support EMEA life-sciences deals by producing vendor qualification artifacts and engaging directly on customer quality audits. To be successful in this role you must: • Bring strong process discipline balanced with pragmatism so systems improve without slowing teams down. • Communicate clearly across technical and leadership audiences and represent quality posture in high-visibility customer discussions. • Have hands-on fluency with engineering and observability tooling, including Jira, Confluence, CI/CD, and access systems. • Be highly organized and able to coordinate outputs and timelines across multiple partner teams. Responsibilities: • Maintain and govern the QMS, including policy, procedure, and record ownership with defined review cadence. • Drive readiness and audit coordination across SOC 2, ISO 27001/27017/27018/27701, CSA STAR Level 2, C5 Type 2, TISAX AL3, FedRAMP Moderate, IRAP, and GovRAMP. • Lead the ISO 9001 certification program scoped to software development and release management, closing the GxP vendor qualification gap for life-sciences customers. • Operate the evidence and control environment by validating evidence quality and improving traceability. • Run internal audit and CAPA programs end-to-end, ensuring findings are addressed and recurrence is reduced. • Drive continuous improvement by using metrics, nonconformance trends, and retrospectives to evolve the QMS. • Partner with GRC, Security, and customer-facing teams to support external trust and assurance requests. Requirements: • 10+ years of experience maintaining a QMS in a software or SaaS environment. • Hands-on evidence and audit coordination experience in one or more of SOC 2, ISO 27001 family standards, CSA STAR, C5, TISAX, FedRAMP, IRAP, or GovRAMP. • Working fluency with engineering and observability tooling (e.g., Jira, Confluence, CI/CD, access systems). • Strong process discipline balanced with pragmatism. • Clear cross-functional communicator comfortable with engineering, leadership, and customer-facing audiences. Desired Qualifications: • Direct experience supporting multiple frameworks including ISO 27001/27017/27018/27701, CSA STAR Level 2, C5 Type 2, TISAX AL3, FedRAMP Moderate, IRAP, and GovRAMP. • ISO 9001 certification program experience, ideally scoped to software development and release management in a SaaS environment. • Exposure to GxP, GAMP 5, or life-sciences vendor qualification requirements. • Exposure to evidence automation o