CMMC/FedRAMP Program Manager

Jobtailor; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Job summary

Jobtailor in Washington, DC seeks an experienced program manager to drive enterprise-wide CMMC and FedRAMP compliance initiatives. You will coordinate IT, legal, sourcing, and leadership across programs to sustain risk tracking and timely authorizations.

The role requires 5+ years in government contracting, strong knowledge of NIST standards and GRC tools, and the ability to lead cross-functional teams toward continuous compliance excellence.

Qualifications

• Bachelor's degree in a relevant field such as business, computer science, or cybersecurity.
• 5+ years in program management or government contracting, orchestrating cross-functional initiatives across IT, legal, and executive stakeholders.
• Prior experience in a compliance or information security program environment, such as CMMC, FedRAMP, or NIST 800-series.
• Working knowledge of NIST SP 800-171, NIST SP 800-172, CMMC standards, NIST SP 800-53, and the FedRAMP authorization process.
• Strong project leadership and communication skills.
• Experience with Governance, Risk, and Compliance (GRC) tools.
• Candidates must be authorized to work in the United States without sponsorship.
• Will need to obtain Top Secret Clearance if not already held

Responsibilities

• Lead enterprise-wide implementation of CMMC and FedRAMP compliance programs.
• Coordinate IT, legal, sourcing, and executive leadership across both programs.
• Manage daily and weekly execution cadence, dependencies, and escalation of blockers.
• Prepare for external assessments through gap analyses and remediation planning.
• Liaise with C3PAOs and 3PAOs.
• Establish program scorecards, executive dashboards, and compliance risk tracking.
• Drive organizational training and stakeholder engagement.
• Drive adoption and maintenance of secure handling policies for CUI.
• Lead the FedRAMP authorization process, including SSP development and control implementation scheduling.
• Coordinate with 3PAOs, sponsoring agencies, and the FedRAMP PMO.
• Manage continuous monitoring obligations after authorization

Skills

Program Management

Compliance Risk Tracking

Gap Analysis

Remediation Planning

Control Implementation Scheduling

Project Leadership

Stakeholder Engagement

Education

Bachelor's degree in business, computer science, or cybersecurity

Tools

GRC Tools

Job description

• Lead enterprise-wide implementation of CMMC and FedRAMP compliance programs
• Coordinate IT, legal, sourcing, and executive leadership across both programs
• Manage daily and weekly execution cadence, dependencies, and escalation of blockers
• Prepare for external assessments through gap analyses and remediation planning
• Liaise with C3PAOs and 3PAOs
• Establish program scorecards, executive dashboards, and compliance risk tracking
• Drive organizational training and stakeholder engagement
• Drive adoption and maintenance of secure handling policies for Controlled Unclassified Information (CUI)
• Lead the FedRAMP authorization process, including SSP development and control implementation scheduling
• Coordinate with 3PAOs, sponsoring agencies, and the FedRAMP PMO
• Manage continuous monitoring obligations after authorization

Requirements

• Bachelor's degree in a relevant field such as business, computer science, or cybersecurity
• 5+ years in program management or government contracting, orchestrating cross-functional initiatives across IT, legal, and executive stakeholders
• Prior experience in a compliance or information security program environment, such as CMMC, FedRAMP, or NIST 800-series
• Working knowledge of NIST SP 800-171, NIST SP 800-172, CMMC standards, NIST SP 800-53, and the FedRAMP authorization process
• Strong project leadership and communication skills
• Experience with Governance, Risk, and Compliance (GRC) tools
• Candidates must be authorized to work in the United States without sponsorship
• Will need to obtain Top Secret Clearance if not already held

Core Competencies

Demonstrates expertise in leading compliance programs such as CMMC and FedRAMP, with a strong focus on project management, stakeholder engagement, and risk tracking. Proficient in NIST standards and governance frameworks, ensuring effective implementation and continuous monitoring.

Highest-signal resume keywords

• CMMC Compliance
• FedRAMP Authorization
• NIST SP 800-171
• Governance, Risk, and Compliance (GRC) Tools
• Project Leadership

Hard Skills

• Program Management
• Compliance Risk Tracking
• Gap Analysis
• Remediation Planning
• Control Implementation Scheduling

Soft Skills

• Strong Communication Skills
• Stakeholder Engagement

Certifications & Qualifications

• Top Secret Clearance

Industry Keywords

• Controlled Unclassified Information (CUI)
• NIST SP 800-53
• NIST SP 800-172
• Federal Contracting
• Cross-Functional Initiatives