Federal Compliance & Authorization Lead (FedRAMP)

Amwell; United States; On-site; USD 126,180 - 154,220; Full time

Benefits offered by this job

401K match

Health insurance

Paid parental leave

Job summary

Amwell is seeking a Manager of Government Compliance & Authorization to lead FedRAMP High programs, align with DoD CMMC and MARS-E, and mature the federal compliance program.

You’ll build internal systems, manage the authorization process, coordinate with 3PAOs, and mentor a team of analysts and security specialists to ensure compliant, scalable cloud services for state and federal engagements.

Qualifications

• 7+ years in information security, compliance, or risk management with 3+ years FedRAMP authorizations
• Proven track record achieving FedRAMP High authorization for a cloud service offering
• Deep knowledge of NIST SP 800-53 Rev 5, FISMA, FedRAMP baselines, and federal security processes
• Experience managing continuous monitoring and active FedRAMP ATOs
• 3+ years of people management in compliance or security teams
• Experience with cloud security in FedRAMP environments and healthcare compliance (HIPAA/HITRUST)

Responsibilities

• Lead end-to-end FedRAMP High authorization and align with DoD CMMC Level 2/3
• Manage FedRAMP continuous monitoring, monthly deliverables, vulnerability mgmt, and incident reporting
• Collaborate with engineering/security/ops to map controls to CMMC and MARS-E requirements
• Own risk management for services provided to federal agencies and High-impact baseline
• Coordinate with 3PAOs for SA&A activities and annual assessments
• Develop and maintain FedRAMP packages (SSP, POA&M, Continuous Monitoring)
• Serve as primary contact for federal agency customers on FedRAMP questions
• Monitor FedRAMP policy updates and implement changes
• Build and lead a team of compliance analysts and security specialists
• Create training programs on FedRAMP requirements
• Manage relationships with federal authorizing officials and cloud providers

Skills

FedRAMP High experience

NIST SP 800-53 Rev 5

Project management

Stakeholder communication

Security operations

Education

Bachelors in Information Security/CS

Master's degree preferred

Tools

AWS

Azure

GCP

3PAO coordination tools

Job description

Amwell is seeking a Manager of Government Compliance & Authorization to lead FedRAMP High programs, align with DoD CMMC and MARS-E, and mature the federal compliance program.

You’ll build internal systems, manage the authorization process, coordinate with 3PAOs, and mentor a team of analysts and security specialists to ensure compliant, scalable cloud services for state and federal engagements.