Senior Public Sector Compliance Manager
About the role
Accountabilities
Develop and maintain a comprehensive compliance roadmap covering federal security requirements, authorization activities, and risk mitigation initiatives.
Support FedRAMP Moderate and High authorization and reauthorization processes, including the preparation, review, and maintenance of SSPs, POA&Ms, SAPs, SARs, and related documentation.
Serve as a subject matter expert on FedRAMP High, NIST SP 800-53, and associated federal compliance requirements.
Support strategic federal initiatives, including security and compliance requirements associated with DoD Impact Level 6 environments.
Map, assess, and monitor security controls against FedRAMP Moderate/High baselines and NIST SP 800-53 requirements.
Coordinate with engineering, operations, and DevSecOps teams to ensure security and compliance requirements are incorporated into system design and ongoing operations.
Manage continuous monitoring activities, including periodic assessments, penetration testing, vulnerability scanning, and associated documentation.
Track POA&M items through remediation and closure while monitoring outstanding risks and compliance gaps.
Coordinate with Third Party Assessment Organizations (3PAOs), government customers, and internal stakeholders during audits, assessments, and authorization activities.
Support federal sales and business development teams by providing guidance on regulatory requirements, security frameworks, and compliance considerations.
Administer and maintain the FedRAMP compliance platform and manage recurring monthly, quarterly, and annual authorization requirements.
Produce compliance metrics, reporting, and risk analysis for leadership and maintain awareness of changes to FedRAMP, NIST, FISMA, CMMC, and related frameworks.
2–3 years of experience in information security compliance, governance, risk management, or a related field, preferably within a FedRAMP- or FISMA-regulated environment.
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related discipline, or equivalent professional experience.
U.S. citizenship and eligibility to obtain a security clearance are required for work involving applicable government cloud environments.
Strong working knowledge of NIST SP 800-53, FedRAMP Moderate/High baselines, and the federal authorization process.
Hands-on experience creating, maintaining, or reviewing security documentation such as SSPs, POA&Ms, SARs, and SAPs.
Familiarity with governance, risk, and compliance tools, as well as vulnerability scanning technologies such as Nessus or Qualys and the ability to interpret security findings.
Experience implementing or assessing security controls in cloud environments such as AWS, Azure, or Google Cloud is highly valuable.
Experience working with a 3PAO or federal agency is preferred.
Relevant certifications such as CISSP, CISA, CAP, CompTIA Security+, or equivalent credentials are advantageous.
Strong analytical and problem-solving abilities, with a structured approach to identifying risks, resolving compliance gaps, and managing multiple priorities.
Excellent written and verbal communication skills, including the ability to translate technical compliance requirements for non-technical stakeholders.
Ability to work independently while collaborating effectively across security, engineering, operations, sales, and other functions in a fast-paced environment.
Remote position within the United States.
Opportunity to contribute to federal security and compliance programs involving FedRAMP and other high-assurance environments.
Cross-functional exposure to cybersecurity, cloud infrastructure, engineering, DevSecOps, sales, and public sector initiatives.
Opportunity to work on compliance programs aligned with evolving federal security requirements.
Employment benefits and compensation are subject to the applicable terms and programs offered by the hiring organization.
Requirements
Benefits