Security Compliance Program Manager

📋 Description

• Develop, document, maintain FedRAMP policies, procedures, controls.
• Support FedRAMP compliance: SSP, evidence, reports.
• Manage ConMon program: vulnerability reporting, POA&M tracking, artifacts.
• Coordinate with internal teams to implement compliance policies.
• Collaborate with third party assessors for security assessments and audits.
• Conduct third party risk assessments; drive training and phishing campaigns.

🎯 Requirements

• 3-5 years information security with focus on compliance, FedRAMP, NIST 800-53, HIPAA, SOC 2, ISO 27001.
• CISSP, CISM, AWS Certified Security or similar certifications.
• Knowledge of tools such as CrowdStrike, Qualys, and AWS Security services.
• Experience with AWS Audit Manager, AWS Artifact, Drata, or Vanta.
• Experience automating evidence gathering for information security audits.
• Comfortable with Python and Bash scripting.

🎁 Benefits

• Compensation: base salary and annual bonus opportunity.
• Benefits: 401k plan and stock options. Health, dental, and vision coverage.
• Flexible location: Remote workdays and 3 days in office for Philly area.
• Generous PTO: about 4 weeks per year of leave.
• Parental Leave: 12 weeks for childbearing, 6 weeks for non childbearing.
• Onboarding and professional development opportunities.