Senior Public Sector Compliance Manager

This is a fully remote position, open to applicants in United States.

📋 Description

• Create and oversee a detailed compliance strategy to uphold CMMC certification and reduce risks across both internal and external systems.

• Lead strategic projects for high-priority federal initiatives, ensuring systems and processes comply with DoD Impact Level 6 authorization standards.

• Act as a subject matter expert on FedRAMP High standards.

• Collaborate with the Federal Sales Team to synchronize business development efforts with federal regulatory standards and security compliance frameworks.

• Assist with the FedRAMP Moderate authorization and reauthorization procedures.

• Develop, review, and sustain system security documentation including SSP, POA&M, SAP, and SAR.

• Analyze and map security controls against FedRAMP Moderate/High baselines and NIST SP 800-53 controls.

• Support the implementation and monitoring of security controls for FedRAMP-authorized systems.

• Coordinate with engineering, operations, and DevSecOps teams to incorporate security requirements into system design and operations.

• Maintain documentation for continuous monitoring and assist with annual assessments, penetration tests, and vulnerability scans.

• Interface with 3PAOs, government clients, and internal stakeholders for audits and assessments.

• Monitor and manage POA&M items until closure.

• Oversee the administration, training, and development of the FedRAMP platform along with its monthly, quarterly, and annual obligations.

• Deliver compliance reports, metrics, and risk assessments to management.

• Keep track of changes in FedRAMP requirements, NIST guidance, FISMA, and CMMC frameworks.

⛳️ Requirements

• U.S. Citizenship (mandatory for employment in GovCloud environments).

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related discipline (or equivalent experience).

• 2–3 years of experience in information security compliance or risk management, ideally within a FedRAMP or FISMA-regulated setting.

• In-depth knowledge of NIST SP 800-53, FedRAMP Moderate/High baselines, and the FedRAMP authorization process.

• Experience with security documentation (SSP, POA&M, SAR, SAP, etc.) and governance tools.

• Familiarity with vulnerability scanning tools like Nessus and Qualys, along with the ability to interpret security findings.

• Eligibility for obtaining a security clearance is essential.

• Preferred: Experience working with or within a 3PAO or federal agency.

• Preferred: Implementation experience with FedRAMP or NIST security controls in AWS, Azure, or Google Cloud environments.

• Preferred security certifications: CISSP, CISA, CAP, CompTIA Security+ or equivalent.

• Strong analytical and problem-solving capabilities.

• Ability to work independently and juggle multiple priorities in a dynamic environment.

• Proficient written and verbal communication skills.

• Capability to collaborate across teams and convey technical issues to non-technical stakeholders.

• Self-driven with the ability to manage various priorities.

🏝️ Benefits

• Comprehensive health benefits, including medical, dental, and vision coverage.

• Competitive salary with performance-based bonuses.

• Opportunities for professional development and certifications.

• Flexible working arrangements, including remote options.

• Generous paid time off and holiday schedule.