Senior Public Sector Compliance Manager

United StatesRemoteFull-timesenior

Legal & ComplianceCompliance Specialist

1 views0 saves0 applied

Apply Now

Quick Summary

Overview

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Public Sector Compliance Manager based in United States.

Technical Tools

Legal & ComplianceCompliance Specialist

This role is responsible for strengthening and maintaining compliance across federal cloud security and authorization requirements.
You will serve as a key subject matter expert on FedRAMP standards, NIST controls, and related federal security frameworks.
The position combines compliance governance, risk management, documentation, continuous monitoring, and audit coordination.
You will work closely with engineering, operations, DevSecOps, sales, and external assessment organizations.
The role offers the opportunity to influence security practices supporting high-impact public sector environments, including DoD workloads.
You will help manage authorization activities, identify and mitigate compliance risks, and keep security programs aligned with evolving requirements.
Success requires strong analytical judgment, attention to detail, independence, and the ability to communicate technical requirements across teams.

Develop and maintain a comprehensive compliance roadmap covering federal security requirements, authorization activities, and risk mitigation initiatives.
Support FedRAMP Moderate and High authorization and reauthorization processes, including the preparation, review, and maintenance of SSPs, POA&Ms, SAPs, SARs, and related documentation.
Serve as a subject matter expert on FedRAMP High, NIST SP 800-53, and associated federal compliance requirements.
Support strategic federal initiatives, including security and compliance requirements associated with DoD Impact Level 6 environments.
Map, assess, and monitor security controls against FedRAMP Moderate/High baselines and NIST SP 800-53 requirements.
Coordinate with engineering, operations, and DevSecOps teams to ensure security and compliance requirements are incorporated into system design and ongoing operations.
Manage continuous monitoring activities, including periodic assessments, penetration testing, vulnerability scanning, and associated documentation.
Track POA&M items through remediation and closure while monitoring outstanding risks and compliance gaps.
Coordinate with Third Party Assessment Organizations (3PAOs), government customers, and internal stakeholders during audits, assessments, and authorization activities.
Support federal sales and business development teams by providing guidance on regulatory requirements, security frameworks, and compliance considerations.
Administer and maintain the FedRAMP compliance platform and manage recurring monthly, quarterly, and annual authorization requirements.
Produce compliance metrics, reporting, and risk analysis for leadership and maintain awareness of changes to FedRAMP, NIST, FISMA, CMMC, and related frameworks.

Requirements

~2 min read

2–3 years of experience in information security compliance, governance, risk management, or a related field, preferably within a FedRAMP- or FISMA-regulated environment.
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related discipline, or equivalent professional experience.
U.S. citizenship and eligibility to obtain a security clearance are required for work involving applicable government cloud environments.
Strong working knowledge of NIST SP 800-53, FedRAMP Moderate/High baselines, and the federal authorization process.
Hands-on experience creating, maintaining, or reviewing security documentation such as SSPs, POA&Ms, SARs, and SAPs.
Familiarity with governance, risk, and compliance tools, as well as vulnerability scanning technologies such as Nessus or Qualys and the ability to interpret security findings.
Experience implementing or assessing security controls in cloud environments such as AWS, Azure, or Google Cloud is highly valuable.
Experience working with a 3PAO or federal agency is preferred.
Relevant certifications such as CISSP, CISA, CAP, CompTIA Security+, or equivalent credentials are advantageous.
Strong analytical and problem-solving abilities, with a structured approach to identifying risks, resolving compliance gaps, and managing multiple priorities.
Excellent written and verbal communication skills, including the ability to translate technical compliance requirements for non-technical stakeholders.
Ability to work independently while collaborating effectively across security, engineering, operations, sales, and other functions in a fast-paced environment.