
Senior Public Sector Compliance Manager
Remote · 2-3 years experience · Full-time · Remote · Posted Sep 28, 2026
At a glance
- Experience
- 2-3 years experience
- Employment
- Full-time
- Workplace
- Remote
- Location
- Remote
About the role
- The Senior Public Sector Compliance Manager will support the organization's adherence to FedRAMP requirements and federal security standards.
- This role is responsible for maintaining compliance for cloud services, supporting authorization processes, and managing continuous monitoring and audits.
Responsibilities
- Develop and govern a comprehensive compliance roadmap to maintain CMMC certification.
- Drive strategic initiatives for high-priority federal projects to meet DoD Impact Level 6 (IL6) authorization requirements.
- Serve as the Subject Matter Expert (SME) for FedRAMP High standards.
- Act as a liaison to the Federal Sales Team to ensure business development activities align with regulatory standards.
- Support FedRAMP Moderate authorization and reauthorization processes, including documentation like SSP, POA&M, SAP, and SAR.
- Map and analyze security controls against FedRAMP Moderate/High baselines and NIST SP 800-53 controls.
- Coordinate with engineering, operations, and DevSecOps to integrate security requirements into system design.
- Interface with Third Party Assessment Organizations (3PAOs), government customers, and internal stakeholders for audits.
- Track and manage Plan of Action and Milestones (POA&M) items to closure.
- Manage the administration, training, and development of the FedRAMP platform and associated reporting requirements.
Requirements
- U.S. Citizenship.
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience).
- 2–3 years of experience in information security compliance or risk management, preferably in a FedRAMP or FISMA-regulated environment.
- Strong knowledge of NIST SP 800-53, FedRAMP Moderate/High baselines, and the FedRAMP authorization process.
- Experience with security documentation (SSP, POA&M, SAR, SAP, etc.) and governance tools.
- Familiarity with vulnerability scanning tools (e.g., Nessus, Qualys) and interpreting security findings.
- Eligibility to obtain security clearance.
Preferred qualifications
- Experience working with or in a 3PAO or federal agency.
- FedRAMP or NIST security control implementation experience in AWS, Azure, or Google Cloud environments.
- Certified Information Systems Security Professional (CISSP)
- Certified Information Security Auditor (CISA)
- Certified Authorization Professional (CAP)
- CompTIA Security+ or equivalent
Workplace
- Distributed role within the United States.
Skills
- FedRAMP
- NIST SP 800-53
- CMMC
- FISMA
- Nessus
- Qualys
- AWS
- Azure
- Google Cloud