RAMP Program Manager, Abacus Insights

• 5+ years’ experience in program management, ideally supporting compliance, security, or regulatory initiatives
• Experience working with GovRAMP, StateRAMP, FedRAMP, or closely related frameworks (FedRAMP Moderate preferred)
• Strong understanding of NIST SP 800‑53 concepts (implementation knowledge required; deep policy writing not required)
• Demonstrated ability to manage cross‑functional global teams
• Experience coordinating audits, assessments, or external reviews
• Excellent written and verbal communication skills for US stakeholders
• Program planning and execution rigor
• Stakeholder management across time zones
• Clear escalation and decision framing
• Strong documentation and tracking discipline
• Delivery‑oriented mindset with attention to audit detail

Desirable

• We are seeking a Program Manager to lead the execution and delivery of our RAMP compliance programs, including GovRAMP, StateRAMP, and FedRAMP. This role is responsible for planning, coordinating, and driving all authorization and continuous monitoring activities across engineering, cloud operations, security, and IT teams
• This is not a policy‑authoring or analyst‑only role. Success in this position requires strong program management discipline, the ability to drive cross‑functional delivery, and hands‑on familiarity with RAMP authorization workflows
• This role ensures that our RAMP programs are delivered on time, with quality, and without last‑minute escalation. The Program Manager enables Security leadership to focus on strategy while ensuring execution stays disciplined and transparent
• Your day to day
• Program Planning & Execution
• Own the end‑to‑end program plan for GovRAMP, StateRAMP, and/or FedRAMP initiatives
• Develop and maintain detailed schedules, milestones, dependency tracking, and risk registers
• Drive accountability across Security, Engineering, Cloud Ops, Product, and IT
• RAMP Delivery Management
• Coordinate authorization activities across:
• Readiness assessments
• Gap remediation
• 3PAO / assessor engagement
• Authorization reviews
• Continuous monitoring operations
• Ensure adoption of NIST SP 800‑53 Rev. 5 control requirements as executable work items
• Evidence & Artifact Coordination
• Manage the production, review, and lifecycle of core authorization artifacts, including:
• System Security Plan (SSP)
• Control narratives
• System boundary and data‑flow diagrams
• Inventories and tracking artifacts
• Ensure evidence ownership, refresh cadence, and quality standards are consistently met
• Auditor / 3PAO & Stakeholder Coordination
• Serve as the program coordination point for assessors and 3PAOs
• Schedule and manage walkthroughs, evidence reviews, and interviews
• Partner with US‑based leadership during assessments, findings reviews, and status reporting
• POA&M & Issue Management
• Own the POA&M tracking and delivery process
• Work with engineering and operations teams to:
• Define remediation milestones
• Track progress
• Validate closure evidence
• Escalate risks early and propose mitigation plans
• Continuous Monitoring Operations
• Operationalize monthly and quarterly continuous monitoring cadence
• Track vulnerability management, patching, access reviews, logging, and required attestations
• Ensure ongoing compliance stability post‑authorization