Senior Security Program Manager, Ramp

• 5+ years of experience in information security or compliance, with a focus on government and public sector regulatory frameworks (e.g., FedRAMP, GovRAMP, FISMA, NIST RMF)
• Knowledge of NIST SP 800-53 and experience mapping controls across frameworks
• Experience with cloud environments like AWS GovCloud or Azure Government, including implementation of compliant architectures
• Proven ability to manage large-scale compliance programs across diverse stakeholder groups
• Demonstrated success developing and maintaining regulatory documentation and audit evidence
• Experience leading engagements with internal teams, assessors, and government partners
• Strong written and verbal communication skills, including translating between technical and executive audiences
• Excellent organizational skills and the ability to manage multiple initiatives with competing priorities
• Self-starter with strong problem-solving abilities in ambiguous, fast-moving environments

Desirable

• We are seeking a skilled and detail-oriented Senior Security Program Manager, Public Sector to lead and enhance our organization’s adherence to U.S. government cybersecurity risk management frameworks, including but not limited to FedRAMP and GovRAMP
• In this role, you will play a key part in guiding compliance strategies for our public sector initiatives, working cross-functionally to ensure effective security practices and successful authorizations across jurisdictions
• Preference for candidates based in the DC Metro area, though this is not a requirement
• Lead all aspects of the compliance lifecycle across multiple public sector frameworks (e.g., FedRAMP, GovRAMP), including risk assessments, continuous monitoring, audits, and authorization management
• Drive complex cross-functional program management efforts involving teams across security, legal, engineering, infrastructure, and product functions
• Serve as a subject matter expert on risk management and regulatory compliance for federal, state, and local government environments
• Develop and maintain comprehensive security documentation aligned with applicable frameworks, including System Security Plans (SSPs), Security Assessment Reports (SARs), POA&Ms, and data flow diagrams
• Monitor compliance with control requirements (e.g., NIST 800-53, GovRAMP Baselines) and coordinate the implementation of technical and procedural safeguards
• Engage with third-party assessors (3PAOs or independent assessors), government sponsors, and internal teams to support assessments and audits
• Lead readiness assessments and support the prioritization of remediation activities across teams
• Manage timely tracking and closure of vulnerabilities and findings; ensure reporting and documentation obligations are met
• Provide risk-informed compliance recommendations that influence infrastructure and product development decisions
• Collaborate with legal and government affairs teams to ensure compliance with emerging federal and state regulatory requirements
• Stay informed on evolving threats, compliance trends, and guidance updates across FedRAMP, GovRAMP, NIST, and other frameworks