Program Manager, Public Sector Compliance

📋 Description

• Lead end-to-end federal assessments with 3PAOs, agency sponsors, and the FedRAMP PMO.
• Manage the ConMon program; analyze vulnerabilities; maintain POA&M.
• Lead annual update of FedRAMP artifacts (SSP, ISCP, IRP).
• Advise Engineering/Operations on cloud configurations meeting federal and DoD IL5+ mandates.
• Perform deep-dive gap analyses for new public sector requirements (CMMC, GovRAMP) and define remediation roadmap.
• Support federal sales as SME during security reviews and explain compliance posture to agency stakeholders.

🎯 Requirements

• 5+ years in GRC, Technical Writing, or IT Audit focusing on US Public Sector frameworks (FedRAMP, DoD SRG, CJIS).
• Deep understanding of NIST 800-53 and NIST 800-171 controls in cloud architectures (AWS, GCP, or Azure).
• Proven track record of managing federal audits from kickoff through to the issuance of an Authorization to Operate (ATO).
• Exceptional ability to explain complex security configurations to government auditors and internal technical teams.
• Advanced proficiency in Jira and Confluence to track control performance data and manage large-scale federal documentation projects.
• US Citizenship is required for this role.

🎁 Benefits

• Equity participation and employee stock purchase program
• Flexible paid time off and parental leave policies
• Fertility and adoption assistance
• 401(k) plan
• Mental health counseling and health benefits
• Trans-inclusive health insurance coverage