Sr. Security Program Manager, Commercial & Federal Compliance

Responsibilities

• Own end-to-end program management for compliance initiatives from planning to execution and audit readiness
• Lead FedRAMP authorization and continuous monitoring efforts, coordinating with external parties through the ATO lifecycle
• Translate federal compliance requirements into program plans in collaboration with cross-functional teams
• Manage international and commercial certification programs, adapting approaches as per market requirements
• Develop program roadmaps and risk registers; proactively address project risks and schedule issues
• Cookordination internal and external audits, ensuring evidence collection and stakeholder readiness
• Establish governance processes and policies to create scalable compliance mechanisms across business lines

Qualifications

• Bachelor's degree in Business, Information Security, Public Administration, or related field
• 6+ years of program or project management experience, with 3-5 years leading compliance, security, or risk programs
• Hands-on experience with FedRAMP authorization process and working with 3PAOs
• Experience managing ISO 27001, SOC 2, and HITRUST CSF certification cycles, with additional exposure to other certifications
• Knowledge of federal contracting requirements like CMMC and NIST 800-171
• Excellent written and verbal communication skills for presenting to executives and stakeholders

Benefits

• Remote working flexibility
• Opportunity to lead significant compliance initiatives for both federal and commercial sectors
• Collaboration with cross-functional teams and external regulatory bodies
• Engagement with evolving regulatory landscapes and international markets
• Pathway for professional development and potential for certification support