FedRAMP Program Manager (On-Site)

Avenu Holdings Llc; Centreville (VA); On-site; USD 165,000 - 200,000; Full time

Job summary

Neumo seeks an experienced FedRAMP Program Manager to lead end-to-end pursuit of FedRAMP High authorization. You will own the program from readiness assessment through ATO and continuous monitoring, ensuring on-schedule, on-budget delivery and audit readiness.

You will directly manage agency sponsorship and 3PAO engagements. This cross-functional role requires collaboration with Engineering, IT, Product, Legal, Finance, and HR to translate control requirements into practical decisions and ensure

Qualifications

• Bachelor's degree in Information Security, Computer Science, Business, or related field.
• 7+ years in security compliance, GRC, or IT audit program management; 3+ years FedRAMP High.
• Experience taking a system through 3PAO assessment and agency authorization to ATO.

Responsibilities

• Own and drive the FedRAMP High authorization program plan including scope, schedule, budget, milestones, dependencies, and status reporting.
• Serve as primary liaison to federal agency, FedRAMP PMO, and 3PAO during readiness assessment and authorization.
• Coordinate SSP, POA&M, SAP/SAR, and control evidence with Engineering and IT.
• Close control gaps against NIST 800-53 High baseline with architecture and security controls.
• Coordinate with Legal on sponsorship agreements and third-party risk.
• Manage FedRAMP program budget with 3PAO costs and tooling.
• Staffing, security-awareness training, and cross-functional governance cadence.
• Lead transition from initial ATO to steady-state continuous monitoring.

Skills

FedRAMP

NIST SP 800-53

Program management

Cross-functional collaboration

Executive communication

Security compliance

Vendor management

Education

Bachelor's degree in Information Security

Tools

Xacta

Jira

MS Project

Smartsheet

Drata

Vanta

Ignyte

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full Time Technical Centreville, VA, US

Salary Range: $165,000.00 To $200,000.00 Annually

Job Summary:

Neumo is seeking an experienced FedRAMP Program Manager to lead the company's end-to-end pursuit of FedRAMP High authorization. This role owns the authorization program from readiness assessment through Authority to Operate (ATO) and into steady-state continuous monitoring, and is accountable for keeping the effort on schedule, on budget, and audit-ready. Because FedRAMP High remains available only through the traditional agency-sponsored authorization path this role will also manage the agency sponsor relationship and Third-Party Assessment Organization (3PAO) engagement directly.

This is a highly cross-functional role. Success requires close, sustained collaboration with Engineering, IT, Product, Legal, Finance, and HR to translate NIST 800-53 High-baseline control requirements into practical engineering and business decisions, and to hold each function accountable for its share of the authorization package. The FedRAMP Program Manager reports to the CISO and serves as the single point of accountability for getting Neumo through a successful, well-documented certification process.

Duties and Responsibilities:

• Own and drive the overall FedRAMP High authorization program plan, including scope, schedule, budget, milestones, dependencies, and executive-level status reporting.
• Serve as primary liaison to the sponsoring federal agency, the FedRAMP PMO, and the selected 3PAO throughout readiness assessment, security assessment, and authorization decision.
• Coordinate development and maintenance of the System Security Plan (SSP), Plan of Action and Milestones (POA&M), Security Assessment Plan/Report (SAP/SAR), and supporting control implementation evidence in partnership with Engineering and IT.
• Partner with Engineering and IT leadership to close control gaps against the NIST SP 800-53 High baseline, including boundary definition, FIPS-validated encryption, logging/monitoring, and incident response capabilities.
• Work with Product to align roadmap decisions, environment/architecture choices, and feature rollout timing with authorization requirements and change-control obligations.
• Coordinate with Legal on agency sponsorship agreements, contractual FedRAMP obligations, data handling/CUI requirements, and third-party/subcontractor risk.
• Partner with Finance to build and manage the FedRAMP program budget, including 3PAO assessment costs, tooling, staff augmentation, and multi-year continuous monitoring costs.
• Work with HR to define staffing needs, support role-based access and personnel security requirements, and build FedRAMP/security-awareness training for affected teams.
• Stand up and facilitate a recurring cross-functional governance cadence (steering committee, working sessions, risk reviews) to keep all stakeholders aligned and unblocked.
• Manage and track risks, issues, and open POA&M items to closure; elevate blockers to the CISO and executive sponsors with clear options and recommendations.
• Select and manage GRC/compliance tooling used to track controls, evidence, and continuous monitoring artifacts.
• Lead the transition from initial ATO into steady-state continuous monitoring, including annual assessments, significant change request (SCR) management, and ongoing 3PAO and agency relationship management.
• Prepare and deliver regular program updates to executive leadership
• Perform other duties as assigned.

Education and Experience

• Bachelor's degree in Information Security, Computer Science, Business, Public Administration, or related field; equivalent experience considered.
• 7+ years of experience in security compliance, GRC, or IT audit program management; 3+ years directly managing a FedRAMP High authorization effort.
• Demonstrated experience taking a system through 3PAO assessment and agency (or JAB) authorization to an ATO.
• Working knowledge of NIST SP 800-53, NIST SP 800-37 (Risk Management Framework), FedRAMP Rev5 requirements, and awareness of the evolving FedRAMP 20x program structure.
• Experience managing complex, cross-functional programs involving Engineering, IT, Legal, Finance, and HR stakeholders.
• PMP, CISSP, CISA, CAP, or similar certification preferred.
• Prior experience with agency sponsorship processes and federal customer engagement strongly preferred.
• Hands-on experience with AWS GovCloud and/or Microsoft Azure Government environments, including standing up or operating within FedRAMP-authorized boundaries, strongly preferred.

Knowledge, Skills and Abilities

• Deep working knowledge of NIST 800-53 High-baseline controls and the FedRAMP authorization lifecycle.
• Working knowledge of AWS GovCloud and Azure Government service offerings, boundary/architecture models, and their respective FedRAMP compliance implications.
• Strong program and project management skills, including schedule, budget, risk, and dependency management across multiple workstreams.
• Proficiency with GRC/compliance platforms (e.g., Xacta, Drata, Vanta, Ignyte, or similar) and project tools (e.g., Smartsheet, Jira, MS Project).
• Excellent written and verbal communication skills, with the ability to translate technical security requirements for non-technical executive and business audiences.
• Demonstrated ability to lead without formal authority, driving accountability across Engineering, IT, Product, Legal, Finance, and HR stakeholders.
• Strong executive presence; comfortable presenting program status, risks, and decisions to senior leadership.
• High attention to detail and documentation rigor appropriate for a formal federal audit and authorization process.
• Sound judgment in balancing security requirements against business and product timelines.
• Office setting with a moderate noise level.
• The employee will work at an individual workstation, using a telephone and computer.
• This position is based in Centerville, VA on a hybrid schedule (3 days onsite per week).
• Additional onsite presence and travel may be required around 3PAO assessments and agency site visits.

Physical Demands

• Must be able to remain seated for extended periods.
• Regular use of a computer and other office machinery, such as printers and copy machines.
• Occasional movement around the office.
• Frequent communication via telephone.

With the backing of four decades of public sector expertise and corporate capability, Neumo has successfully supported government services. Neumo was honored and recognized for four (4) consecutive years as a GovTech 100 Company representing the top 100 companies focused on making a difference in and selling to state and local government agencies across the United States.

Neumo is committed to helping communities thrive and brings a wealth of experience combined with innovation. Today, Neumo offers more administrative and financial support to government officials than any other organization. And with a responsive, client-focused approach, we foster partnerships that give our customers the certainty they need to accomplish more.

Neumo offers a competitive benefits and compensation package and are looking for team members who will thrive in our dynamic environment.

Neumo is an Equal Opportunity Employer. Selection for a position will be made without regard to race, religion, national origin, sex, political affiliation, marital status, non-disqualifying physical handicap, and age.