Compliance Program Manager

CivicPlus; United States; On-site; USD 104,000 - 157,000; Full time

Job summary

CivicPlus is seeking a Compliance Program Manager to bring structure and momentum to R&D governance. You will define intake, prioritization, tracking, and reporting across teams; build trackers, dashboards, and AI-assisted workflows; coordinate compliance activities across departments; and serve as primary contact for audits.

Success means documented standards adopted by R&D, a single source of truth for status and commitments, and audit-ready records.

Qualifications

• 3+ years of program or project management experience supporting security, compliance, infrastructure, engineering, or technology operations teams.
• Demonstrated experience establishing program management standards, processes, and tooling.
• Direct experience with InfoSec and/or regulatory compliance frameworks such as CJIS, HIPAA, GovRAMP/FedRAMP, SOC 2, or PCI-DSS.

Responsibilities

• Establish, document, and own program management standards for R&D, including work intake, prioritization, status reporting, escalation paths, and change management
• Build and maintain a single source of truth for program status, consolidating scattered spreadsheets and one-off trackers into consistent tooling and leadership-ready dashboards
• Drive alignment across R&D teams on shared priorities, dependencies, and ownership, facilitating cross-functional working sessions and driving action items to closure
• Introduce automation and AI-assisted workflows to reduce manual effort in tracking, documentation, evidence collection, and status reporting
• Own the program calendar, including audits, attestations, remediation deadlines, training renewals, and infrastructure and release milestones, with regular status reporting to leadership
• Coordinate compliance program activities for applicable CivicPlus products, tracking requirements, owners, deadlines, gaps, remediation activities, and ongoing obligations
• Maintain compliance and program documentation, policies, procedures, evidence, and records in an organized, audit-ready manner
• Track findings, exceptions, risks, and remediation plans, following up with owners and escalating blockers when appropriate
• Support audits, third-party assessments, customer security questionnaires, and RFP responses by coordinating documentation and gathering evidence across teams
• Monitor changes to applicable security and compliance requirements and work with stakeholders to evaluate and address their impact on CivicPlus products and processes
• Partner with R&D teams to translate complex regulatory and security standards into clear, actionable technical and operational requirements
• Oversee routine compliance checks for technical teams, including periodic access reviews and system configuration verification
• Develop and continuously improve repeatable internal processes so program practices persist beyond any single initiative or team member
• Serve as the central point of contact for internal program coordination, escalating technical, legal, security, or policy questions to the appropriate subject matter experts

Skills

Program management

PM standards

Compliance frameworks

Cross-functional coordination

Dashboards

AI tooling

Influence without authority

Communication

Organization

Education

Bachelor's degree preferred

Job description

Your Impact

As the Compliance Program Manager, you'll bring structure, clarity, and momentum to CivicPlus R&D. You'll define how work is requested, prioritized, tracked, and reported across teams; build the trackers, dashboards, documentation, and AI-assisted workflows that replace ad hoc spreadsheets; and coordinate compliance and engineering program activities across multiple departments. You'll also serve as the primary point of contact for external audits and lead internal readiness assessments, helping ensure our engineering and operational practices align with strict data protection standards.

Description

As the Compliance Program Manager, you'll bring structure, clarity, and momentum to CivicPlus R&D. You'll define how work is requested, prioritized, tracked, and reported across teams; build the trackers, dashboards, documentation, and AI-assisted workflows that replace ad hoc spreadsheets; and coordinate compliance and engineering program activities across multiple departments. You'll also serve as the primary point of contact for external audits and lead internal readiness assessments, helping ensure our engineering and operational practices align with strict data protection standards.

Success in this role means documented program standards adopted by R&D, a single reliable source of truth on program status and commitments, clear ownership and reduced friction between security and engineering, and on-time completion of compliance and engineering program milestones.

About CivicPlus

At CivicPlus, we strive to bring our company vision to life through innovation and collaboration. Supported by approachable leadership and transparent communication, we're empowered to make an impact on local government and the residents they serve. Grow your career alongside great people, where authenticity is welcome, successes are celebrated, and potential is nurtured.

What You'll Do

• Establish, document, and own program management standards for R&D, including work intake, prioritization, status reporting, escalation paths, and change management
• Build and maintain a single source of truth for program status, consolidating scattered spreadsheets and one-off trackers into consistent tooling and leadership-ready dashboards
• Drive alignment across R&D teams on shared priorities, dependencies, and ownership, facilitating cross-functional working sessions and driving action items to closure
• Introduce automation and AI-assisted workflows to reduce manual effort in tracking, documentation, evidence collection, and status reporting
• Own the program calendar, including audits, attestations, remediation deadlines, training renewals, and infrastructure and release milestones, with regular status reporting to leadership
• Coordinate compliance program activities for applicable CivicPlus products, tracking requirements, owners, deadlines, gaps, remediation activities, and ongoing obligations
• Maintain compliance and program documentation, policies, procedures, evidence, and records in an organized, audit-ready manner
• Track findings, exceptions, risks, and remediation plans, following up with owners and escalating blockers when appropriate
• Support audits, third-party assessments, customer security questionnaires, and RFP responses by coordinating documentation and gathering evidence across teams
• Monitor changes to applicable security and compliance requirements and work with stakeholders to evaluate and address their impact on CivicPlus products and processes
• Partner with R&D teams to translate complex regulatory and security standards into clear, actionable technical and operational requirements
• Oversee routine compliance checks for technical teams, including periodic access reviews and system configuration verification
• Develop and continuously improve repeatable internal processes so program practices persist beyond any single initiative or team member
• Serve as the central point of contact for internal program coordination, escalating technical, legal, security, or policy questions to the appropriate subject matter experts

What We're Looking For

We know that excellent candidates come from diverse backgrounds. Even if you don't meet 100% of the listed requirements, we encourage you to apply!

Preferred Qualifications

• 3+ years of program or project management experience supporting security, compliance, infrastructure, engineering, or technology operations teams, or equivalent education or training
• Demonstrated experience establishing program management standards, processes, and tooling in an environment where none previously existed
• Direct experience with InfoSec and/or regulatory compliance frameworks such as CJIS, HIPAA, GovRAMP/FedRAMP, SOC 2, or PCI-DSS
• Working knowledge of Criminal Justice Information Services (CJIS) requirements, including how CJIS obligations translate into technical, operational, and personnel controls
• Familiarity with GovRAMP (formerly StateRAMP) and FedRAMP preferred; exposure to SOC 2, NIST, or comparable frameworks is a plus
• Experience coordinating work across security and engineering functions such as DevOps, SRE, platform, or infrastructure teams
• Proven ability to build and maintain trackers, dashboards, and reporting in project management, ticketing, documentation, or compliance-tracking tools
• Experience applying automation or AI-assisted tools to streamline tracking, documentation, and reporting workflows preferred
• Ability to influence, align, and drive accountability across teams without direct authority, including mediating competing priorities between functions
• Strong organizational skills and attention to detail, with the ability to manage multiple programs, deadlines, and stakeholders while maintaining accurate, audit-ready records
• Effective written and verbal communication skills, with the ability to translate between technical and non-technical audiences and present status clearly to leadership
• Bachelor's degree preferred, not required; equivalent experience or training will be considered. PMP, CAPM, CSM, or similar certification preferred
• Familiarity with software products, SaaS environments, or technology organizations preferred
• AI-forward mindset with a demonstrated ability to leverage AI tools to improve productivity, decision-making, and work quality.
• Demonstrated ability to effectively use AI tools to enhance productivity and outcomes.

Compensation And Benefits

• Estimated Salary Grade Range: $104,400 - $156,600
• The actual salary offer will carefully consider a wide range of factors, including your skills, qualifications, experience and is based on a 40-hour work week.
• Benefits: Comprehensive health insurance, dental insurance, vision insurance, Flexible Time Off, 401(k) plan, and more.

Our Hiring Process

• Introductory call with Talent Acquisition
• Interview with the Hiring Manager
• Panel Interview with CivicPlus team members, including an interview project activity
• Offer

Note: The process may vary slightly depending on the role.

Additional Information

• CivicPlus is currently unable to provide visa sponsorship for this position now or in the future. Applicants must be authorized to work in the US.
• This position will remain open until 10/23/2026 at 5:00 PM ET. We encourage you to apply as soon as possible, as applications will be reviewed on a rolling basis, and the posting may close earlier at the discretion of the Talent Acquisition team.
• At CivicPlus, we embrace AI and automation as tools that help people work smarter, move faster, and focus on higher-value work that strengthens communities. We encourage thoughtful, responsible use of technology to improve efficiency, support innovation, and enhance the employee and customer experience—while keeping human judgment, collaboration, and accountability at the center of what we do.

Equal Opportunity Commitment

CivicPlus is proud to be an Equal Employment Opportunity employer. We celebrate and support diversity for the benefit of our employees, products, clients, and communities. Reasonable accommodations are available during the interview process.