Gov't Compliance & Authorization Lead - FedRAMP High

amwell inc; United States; On-site; USD 126,180 - 154,220; Full time

Benefits offered by this job

Flexible Personal Time Off (Vacation)

401K match

Healthcare, dental and vision

Parental Leave

Employee Stock Purchase Program

Telehealth access

Job summary

Amwell seeks a Manager of Government Compliance & Authorization to lead FedRAMP High, DoD CMMC alignment, and MARS-E initiatives. You will shape the program, manage the authorization lifecycle, and direct a team of compliance professionals while coordinating with 3PAOs and federal stakeholders.

You will drive continuous monitoring, risk management, and training efforts, ensuring enterprise-wide understanding of federal requirements and successful engagements with government clients.

Qualifications

• Minimum 7+ years in information security, compliance, or risk management with at least 3 years in FedRAMP authorizations.
• Proven experience achieving FedRAMP High for a cloud service offering.
• Deep knowledge of NIST SP 800-53 Rev5 and federal security processes.
• Experience with continuous monitoring and active FedRAMP ATOs.
• 3+ years of people management experience.
• Strong cloud security understanding for AWS/Azure/GCP in FedRAMP.
• Familiarity with HIPAA/HITRUST.
• Excellent PM and cross-stakeholder coordination.
• Experience with 3PAOs and assessment methodologies.
• Strong written and verbal communication.
• Certifications such as CISSP, CISM, CAP or FedRAMP-specific preferred.
• Bachelor's degree required; Master's preferred.

Responsibilities

• Lead end-to-end FedRAMP High authorization; align with DoD CMMC Level 2/3 and MARS-E.
• Oversee FedRAMP continuous monitoring, monthly deliverables, vulnerability management, and incident reporting.
• Collaborate with engineering, security, and operations to map controls and reduce duplicate effort.
• Own risk management for services to federal agencies and High-impact baseline.
• Coordinate with 3PAOs for SA&A activities and annual assessments.
• Develop and maintain FedRAMP packages: SSP, POA&Ms, and continuous monitoring.
• Prime liaison with federal agency customers on FedRAMP questions and boundary matters.
• Monitor FedRAMP policy updates and implement changes to stay compliant.
• Build and lead a team of compliance analysts and security specialists.
• Create training to increase organizational FedRAMP awareness.
• Manage relationships with federal officials and cloud providers.

Skills

FedRAMP High expertise

Project management

NIST 800-53 Rev5

3PAO coordination

Cloud security

HIPAA HITRUST

Communication skills

Security clearance readiness

People management

Risk management

Education

Bachelor's degree in Information Security, CS, or related field

Master's degree preferred

Job description

Amwell seeks a Manager of Government Compliance & Authorization to lead FedRAMP High, DoD CMMC alignment, and MARS-E initiatives. You will shape the program, manage the authorization lifecycle, and direct a team of compliance professionals while coordinating with 3PAOs and federal stakeholders.

You will drive continuous monitoring, risk management, and training efforts, ensuring enterprise-wide understanding of federal requirements and successful engagements with government clients.