Role Overview
The Program Manager, Compliance is a strategic driver of Stord’s operational strength and commercial growth. This role is responsible for scaling enterprise compliance programs across OSHA, EPA, GMP, and adjacent regulatory regimes -- building the infrastructure that enables Stord to operate with confidence, win in the market, and deliver on the compliance commitments that today’s leading brands require from a fulfillment partner. A mature, well-run compliance program is not just a risk management function at Stord; it is a competitive differentiator that unlocks customer revenue, supports network expansion, and protects the business at scale.
Reporting to the Director of Health, Safety & Security, this is an enterprise-level, network-wide role that operates at the intersection of compliance, operations, and growth. The Program Manager partners closely with Sales, Customer Success, Operations, and Finance to ensure compliance capabilities are a strength Stord leads with -- enabling the business to pursue regulated customer segments, scale into new markets, and demonstrate the program maturity that top-tier brands demand. The work product of this role is what the entire organization is built around: scalable written programs, audit frameworks, certification standards, reporting infrastructure, and regulatory intelligence systems that grow stronger as Stord grows.
What This Role Owns
This role owns the enterprise compliance program architecture -- the standards, written programs, audit frameworks, and governance mechanisms that define what ‘compliant’ looks like at every Stord facility. The work product of this role is what the rest of the organization is held accountable to. Specifically:
Enterprise compliance program design, construction, and ownership across OSHA, EPA, GMP, GDP, DOT, and applicable state and local regulatory frameworks -- building programs from the ground up where gaps exist and elevating inconsistent standards to enterprise-grade.
Regulatory intelligence: continuously monitoring rulemaking, agency guidance, and enforcement trends; converting regulatory change into updated enterprise programs before gaps become violations.
Enterprise audit and inspection framework: designing the internal audit program architecture, defining scope and methodology, and building the tools and cadences that keep the network inspection-ready -- not conducting site audits, but building the system that governs them.
Enterprise compliance documentation infrastructure: designing and owning the system of record for all written programs, SOPs, training requirements, certifications, and regulatory correspondence -- the single source of truth for compliance across the network.
Customer and industry certification programs: GMP, GDP, CTPAT, TAPA, and other regulated operating standards required by Stord’s customer base.
Regulatory agency relationships: serving as the primary compliance point of contact for OSHA, EPA, and other agencies at the program level.
Enterprise compliance reporting, data, and dashboards: building the metrics infrastructure that gives the Head of HSS, senior leadership, and the broader business real-time visibility into compliance performance, risk posture, and program health across the network.
Enterprise compliance training architecture: defining what training is required, for whom, at what frequency, and in what format -- building the content and governance framework that regional and site teams deliver against.
Key Responsibilities
OSHA Compliance Program Management
Build and own Stord’s enterprise OSHA compliance program -- designing the written program architecture, establishing network-wide standards, and creating the governance mechanisms that ensure consistent compliance across every facility regardless of size, volume, or operational complexity.
Maintain and update OSHA-required written programs: Hazard Communication, Lockout/Tagout, Respiratory Protection, Emergency Action Plans, Powered Industrial Truck programs, and others as applicable.
Oversee OSHA recordkeeping standards across the network -- establishing recordkeeping protocols, auditing site-level logs for accuracy, and managing 300A summary posting requirements.
Serve as the primary internal resource for OSHA compliance questions, inspection preparation, and citation response -- coordinating with Legal and the Head of HSS on formal agency interactions.
Track OSHA rulemaking, enforcement priorities, and National Emphasis Programs relevant to warehouse and fulfillment operations; update programs proactively.
Develop and maintain OSHA compliance self-assessment tools for use by Regional Managers and Site Managers.
EPA and Environmental Compliance
Build and own Stord’s enterprise EPA compliance program -- designing the framework that covers applicable Clean Air Act, Clean Water Act, RCRA, EPCRA, and Tier II reporting obligations across the network and scales as the facility footprint grows.
Maintain environmental compliance calendars for all sites, ensuring permit renewals, required inspections, and mandatory reporting deadlines are met without exception.
Manage Spill Prevention, Control, and Countermeasure (SPCC) plans and storm water pollution prevention programs where applicable.
Coordinate with Facilities and Operations on environmental requirements triggered by site construction, expansion, or changes in chemical inventory.
Serve as the point of escalation for environmental incidents, regulatory notifications, and corrective actions related to EPA-regulated activities.
Monitor EPA regulatory changes and enforcement activity relevant to Stord’s operations; assess impact and update compliance programs accordingly.
GMP, GDP, and Regulated Operating Standards
Build and own Stord’s enterprise GMP and GDP compliance programs -- designing the standards, SOPs, and qualification frameworks that enable Stord to onboard and serve regulated customers at scale across health, wellness, supplement, and pharmaceutical-adjacent accounts.
Develop and maintain GMP/GDP-aligned SOPs, documentation standards, and control requirements applicable to regulated fulfillment operations.
Lead readiness activities for GMP and GDP customer audits and third-party certifications -- managing pre-audit assessments, coordinating site preparation, and tracking corrective action plans post-audit.
Partner with Sales, Customer Success, and Operations to assess GMP/GDP requirements for new customer onboarding and ensure facilities are qualified before regulated product is received.
Maintain working knowledge of FDA guidance, NSF, and other applicable standards that intersect with Stord’s customer base and product handling requirements.
Build and maintain a GMP/GDP compliance library: training materials, audit checklists, SOP templates, and certification documentation for use across the network.
Hazmat and Chemical Compliance
Build and own Stord’s enterprise Hazardous Materials compliance program -- designing the program for our fulfillment locations, OSHA Hazard Communication, EPA chemical reporting, and state-specific requirements across the full facility network.
Maintain the enterprise Hazmat program: classification standards, handling and storage requirements, labeling, SDS management systems, and spill response frameworks.
Establish and maintain Hazmat acceptance criteria and screening processes to ensure sites are equipped to handle regulated materials received from customers.
Coordinate Hazmat compliance requirements with Transportation, Operations, and Facilities during new site launches, customer onboarding, and facility modifications.
Manage DOT compliance requirements for sites involved in the outbound transportation of regulated materials, including proper shipping papers, packaging, and labeling standards.
Audit Program and Inspection Readiness
Architect the enterprise internal compliance audit program from the ground up -- establishing audit scope, methodology, scoring frameworks, and corrective action workflows that give the organization a consistent, repeatable mechanism for identifying and closing compliance gaps.
Conduct or coordinate compliance audits across the network, producing written findings, risk ratings, and actionable corrective action plans for site and regional leaders.
Manage the enterprise corrective action tracking system for compliance findings, ensuring closure within defined timelines and verifying effectiveness.
Prepare the network for external regulatory inspections and customer audits -- developing site-readiness checklists, conducting pre-audit walkthroughs, and providing on-site support during inspections where required.
Maintain an inspection and audit calendar for all sites, tracking regulatory visit history, findings, and corrective action status in a centralized compliance management system.
Produce regular compliance performance reporting for the Head of HSS and senior leadership, including audit scores, open findings, and trend analysis.
Regulatory Intelligence and Policy Development
Establish and operate a systematic regulatory intelligence function -- monitoring federal and state activity across OSHA, EPA, FDA, and DOT to identify proposed rules, final rules, and enforcement trends before they affect Stord’s operations.
Translate regulatory changes into policy updates, program revisions, and implementation plans; communicate impacts clearly to the Head of HSS, Regional Managers, and site teams.
Own Stord’s compliance policy library: drafting, reviewing, updating, and version-controlling all compliance-related policies and written programs.
Serve as subject matter authority for compliance questions from Regional Managers, Site Managers, Operations, Legal, and Customer Success.
Contribute compliance expertise to new site launch processes, automation deployments, and major operational changes to ensure regulatory requirements are built in from the start.
Reporting, Data & Dashboards
Build the enterprise compliance reporting infrastructure from the ground up -- designing the metrics framework, data architecture, and dashboard suite that give the Head of HSS and senior leadership a real-time, accurate view of compliance performance across the network.
Define the enterprise compliance KPI set selecting the leading and lagging indicators that most accurately represent program health, regulatory risk, and operational compliance posture -- and ensuring those metrics are collected consistently across all sites.
Design and own compliance dashboards that surface OSHA recordable rates, audit scores, corrective action aging, training completion rates, certification status, and regulatory inspection outcomes in a format that is actionable at the executive, regional, and site levels.
Build data collection standards and reporting protocols across the network -- establishing how compliance data is captured, validated, and submitted from sites and regions to ensure the enterprise view is reliable and comparable.
Develop regular compliance performance reporting cadences for the Head of HSS, Operations leadership, and the Safety and Security Steering Committee -- translating raw data into clear narratives, trend analysis, and risk-flagged summaries that drive decisions.
Identify systemic compliance risks and program gaps through data analysis -- surfacing patterns across sites, regions, and regulatory domains that individual site or regional reports would not reveal in isolation.
Partner with Operations, Finance, and Technology to integrate compliance data into broader business reporting platforms, ensuring compliance metrics are visible alongside operational and financial performance indicators.
Maintain a compliance metrics library and reporting archive that provides the organization with historical performance data, audit trails, and the documentation needed to demonstrate program maturity to regulators, customers, and insurers.
Training Governance and Compliance Capability Building
Build the enterprise compliance training architecture: designing the training matrix, specifying required topics, applicable employee populations, delivery methods, and completion frequencies across all regulatory domains -- the standard that governs what compliance training looks like at every Stord site.
Develop compliance training content and supporting materials for use by site and regional teams -- including written programs, quick reference guides, audit checklists, and SOP templates.
Govern training completion compliance across the network through record audits and gap reporting; escalate systemic deficiencies to Regional Managers with a remediation timeline.
Build and maintain a compliance resource library accessible to site and regional HSS teams, enabling consistent program delivery without requiring centralized instruction.
Required Qualifications
Experience
7+ years of experience in regulatory compliance, EHS program management, or a related discipline in a warehouse, fulfillment, manufacturing, or logistics environment.
Demonstrated expertise across multiple regulatory domains -- OSHA, EPA, and GMP/GDP -- with hands-on program ownership experience in each.
Experience managing compliance programs across a multi-site network, including audit program design and regulatory agency interaction.
Track record of translating complex regulatory requirements into practical, scalable operational programs.
Technical Knowledge
Deep working knowledge of OSHA General Industry standards, recordkeeping requirements, and enforcement processes.
Strong familiarity with EPA compliance obligations applicable to warehouse and fulfillment operations, including Tier II, SPCC, and RCRA.
Working knowledge of GMP and GDP standards as they apply to regulated fulfillment, distribution, and third-party logistics.
Experience with DOT Hazmat regulations (49 CFR) governing the handling, storage, and transportation of regulated materials.
Proficiency with compliance management systems, audit platforms, document control tools, and regulatory tracking resources.
Credentials (Preferred)
CSP, ASP, or equivalent safety certification preferred.
CHMM (Certified Hazardous Materials Manager) or equivalent preferred.
REHS, REM, or equivalent environmental compliance credential a plus.
GMP/GDP auditor certification or equivalent regulated industry compliance credential preferred.
OSHA 500 or OSHA 30-hour General Industry required; advanced OSHA coursework preferred.
Who You Are
A regulatory expert, not a generalist -- you have deep knowledge in at least two of the core compliance domains and the intellectual curiosity to go deep in the others.
A program architect -- you build compliance infrastructure that scales across dozens of sites without requiring your personal presence at each one. Your programs are self-sustaining by design.
Proactive and ahead of the curve -- you’re tracking rulemaking before it becomes a requirement and updating programs before an inspector identifies the gap.
A credible advisor -- Regional Managers and site teams bring you their hardest compliance questions because you give clear, practical answers grounded in the actual regulation.
Detail-oriented without losing the thread -- you can manage a 30-site audit calendar and still see the systemic risk patterns that individual findings represent.
A strong written communicator -- your policies are readable, your audit reports are actionable, and your regulatory summaries make complex requirements understandable to operators.
