Senior FedRamp Program Manager

The FedRAMP Program Manager serves as the day-to-day owner of the company's responsibilities within a partner-managed FedRAMP environment. This individual translates FedRAMP, NIST SP 800-53, assessment, and external-partner requirements into clear internal actions; coordinates evidence and remediation activities across functional teams; manages deadlines and shared-responsibility dependencies; and independently evaluates whether company work, remediation responses, and evidence are sufficiently complete and responsive for submission to external FedRAMP partners, assessors, or other stakeholders. The role works with limited day-to-day supervision under the direction of the Director of Security and Compliance. This is an individual-contributor program execution and subject-matter-expert role; it does not perform engineering implementation or technical remediation.

Responsibilities

Own day-to-day execution of the company side of the FedRAMP program, including milestones, dependencies, risks, deadlines, and internal follow-through; Translate FedRAMP requirements, findings, partner requests, and service-level commitments into clear internal actions with defined owners, due dates, evidence expectations, and acceptance criteria; Maintain an authoritative view of program status and identify work that may threaten FedRAMP deadlines; Assess overall program readiness and identify systemic gaps in controls, evidence, ownership, processes, or dependencies; Operate independently within established direction and escalate material risks and disputed requirements; Leverage approved AI-enabled tools and automation while validating outputs; Coordinate implementation and ongoing operation of organizational and procedural controls retained by the company; Coordinate company inputs into partner-managed FedRAMP records; Collect and review evidence for completeness, accuracy, relevance, and traceability before submission; Act as the company-side quality gate for evidence and remediation responses; Track findings from assessments and continuous monitoring through closure; Establish internal remediation deadlines; Serve as the primary operational interface with the company's external FedRAMP infrastructure and compliance partner; Participate in partner-led continuous-monitoring meetings; Work with Software Engineering and Cloud Engineering to communicate technical compliance requirements without performing technical remediation directly; Coordinate with Security, IT, Support, Operations, Product, Legal, and leadership on controls and process changes; Maintain clarity over FedRAMP-in-scope users, systems, workflows, and shared-responsibility boundaries; Coordinate review of proposed changes that may affect FedRAMP scope or control responsibilities; Coordinate delivery of required compliant system artifacts; Identify gaps or ambiguity in responsibility between the company and external partners; Recommend program priorities and corrective actions; Provide FedRAMP subject-matter input to Product, Legal, and other stakeholders; Continuously improve FedRAMP processes, documentation, and evidence practices; Provide concise, decision-ready reporting to the Director of Security and Compliance; Escalate early when deadlines, requirements, or dependencies require intervention; Other duties as assigned

Requirements

7+ years of relevant professional experience in security, compliance, technical program management, risk management, cloud security, or related disciplines, including at least 3 years of direct FedRAMP program execution or ownership experience; Demonstrated ownership of a substantial portion of at least one FedRAMP authorization lifecycle; Experience operating a FedRAMP program after authorization, including continuous monitoring, recurring evidence collection, remediation deadlines, and assessment preparation; Strong working knowledge of NIST SP 800-53 and the FedRAMP Moderate baseline; Experience operating within cloud or compliance shared-responsibility models; Ability to translate FedRAMP requirements into clear, actionable expectations, owners, deadlines, evidence requirements, and acceptance criteria; Experience evaluating whether evidence and remediation responses adequately address control requirements or findings; Ability to drive remediation and compliance commitments across teams without direct management authority; Working technical knowledge of SaaS and cloud environments (identity and access management, CI/CD, vulnerability management, logging and monitoring, encryption, change management, cloud infrastructure); Ability to recognize when specialized technical validation is required and engage subject-matter experts; Ability to independently establish program structure, priorities, and deadlines and escalate appropriately; Experience leveraging AI-enabled tools and automation with judgment in validating outputs; Strong written and verbal communication skills; Must be a U.S. Person and reside in the United States

Nice to have

5+ years of direct FedRAMP program execution experience and/or experience owning multiple authorization lifecycles; Experience independently leading company-side execution through a FedRAMP authorization lifecycle; Experience operating in a fully self-managed FedRAMP environment, particularly for a SaaS or cloud software provider; Experience in a partner-managed FedRAMP implementation owning company-side execution, evidence quality, remediation tracking, and shared-responsibility coordination; Experience working directly with FedRAMP assessors, 3PAOs, agency or authorization stakeholders, managed hosting providers, or other external partners; Experience supporting FedRAMP scope, authorization-boundary, significant-change, or continuous-monitoring decisions in a SaaS or cloud environment; Experience coordinating remediation of security findings across software engineering, cloud or platform engineering, IT, and security teams

Benefits

Floating holidays; Quarterly, no-questions-asked wellness day; Support for multiple Employee Resource Groups (ERGs); Working environment that supports healthy work/life balance