Compliance Program Manager

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop, document, and take ownership of program management standards for R&D, encompassing work intake, prioritization, status reporting, escalation procedures, and change management.

• Create and sustain a single source of truth for program status by utilizing consistent tools and dashboards that are ready for leadership review.

• Foster alignment among R&D teams regarding shared priorities, dependencies, and responsibilities.

• Organize cross-functional working sessions and ensure action items are completed.

• Implement automation and AI-assisted workflows for monitoring, documentation, evidence gathering, and status reporting.

• Manage the program calendar, which includes audits, attestations, remediation deadlines, training renewals, and infrastructure and release milestones.

• Oversee compliance program initiatives for relevant CivicPlus products.

• Keep compliance and program documentation, policies, procedures, evidence, and records organized and ready for audits.

• Monitor findings, exceptions, risks, and remediation strategies; follow up with responsible parties and escalate issues as necessary.

• Assist with audits, third-party evaluations, customer security questionnaires, and requests for proposals (RFPs).

• Stay informed about changes in security and compliance requirements and assess their effects on CivicPlus products and processes.

• Convert regulatory and security standards into actionable technical and operational requirements.

• Supervise routine compliance checks, which include periodic access reviews and system configuration assessments.

• Create and refine repeatable internal processes.

• Act as the primary point of contact for internal program coordination.

⛳️ Requirements

• A minimum of 3 years of experience in program or project management supporting security, compliance, infrastructure, engineering, or technology operations teams, or equivalent education or training.

• Proven experience in establishing program management standards, processes, and tools in environments lacking these structures.

• Direct involvement with InfoSec and/or regulatory compliance frameworks such as CJIS, HIPAA, GovRAMP/FedRAMP, SOC 2, or PCI-DSS.

• Working familiarity with Criminal Justice Information Services (CJIS) requirements.

• Preference for exposure to GovRAMP and FedRAMP; familiarity with SOC 2, NIST, or similar frameworks is advantageous.

• Experience managing work across security and engineering domains such as DevOps, SRE, platform, or infrastructure teams.

• Capability to build and maintain trackers, dashboards, and reports in project management, ticketing, documentation, or compliance tracking tools.

• Preference for experience in applying automation or AI-assisted tools to enhance tracking, documentation, and reporting processes.

• Proficiency in influencing, aligning, and ensuring accountability across teams without direct authority.

• Strong organizational abilities and meticulous attention to detail.

• Capacity to manage multiple programs, deadlines, and stakeholders while keeping accurate, audit-ready records.

• Excellent written and verbal communication skills.

• Ability to communicate effectively between technical and non-technical audiences and clearly present updates to leadership.

• A bachelor's degree is preferred but not required; equivalent experience or training will be accepted.

• Preferred certifications include PMP, CAPM, CSM, or similar.

• Familiarity with software products, SaaS environments, or technology organizations is preferred.

• An AI-forward mindset with a proven ability to leverage AI tools to enhance productivity, decision-making, and work quality.

• Applicants must be authorized to work in the US.

• CivicPlus is currently unable to offer visa sponsorship for this position now or in the future.

🏝️ Benefits

• Comprehensive health insurance.

• Dental insurance.

• Vision insurance.

• Flexible Time Off.

• 401(k) plan.