Govt Compliance & Cloud Security Program Lead

MEDITECH; Canton (MA); On-site; USD 120,000 - 180,000; Full time

Job summary

MEDITECH in the United States is seeking a Government Compliance Program Manager to lead ITSG-33 and FedRAMP readiness for SaaS and cloud operations. You will bridge security teams and regulators, write security documentation, and drive remediation tracking.

Responsibilities include maintaining SSPs/SCTMs, mapping controls to NIST SP 800-53, coordinating audits with 3PAOs, and ensuring evidence collection for assessments. This role supports cloud services leadership.

Qualifications

• Experience applying government security standards and frameworks.
• Ability to translate regulatory requirements into engineering and operations processes.
• Proven track record coordinating audits and remediation activities.

Responsibilities

• Authoring, updating, and maintaining core government compliance packages, including SSPs and SCTMs.
• Mapping operational controls across NIST SP 800-53 and CCCS Medium Cloud Profile.
• Tracking control coverage and document evidence for identity management, access control, encryption standards, and monitoring routines.
• Coordinating day-to-day operations during third-party assessment (3PAOs) and government audits.
• Managing and updating the POA&M register—working with Cloud/DevOps and Engineering teams to ensure timely remediation of vulnerabilities and findings.
• Collecting, organizing, and validating audit evidence for smooth assessment lifecycles.

Skills

Regulatory compliance

IT governance

NIST SP 800-53

FedRAMP

Security documentation

Job description

MEDITECH in the United States is seeking a Government Compliance Program Manager to lead ITSG-33 and FedRAMP readiness for SaaS and cloud operations. You will bridge security teams and regulators, write security documentation, and drive remediation tracking.

Responsibilities include maintaining SSPs/SCTMs, mapping controls to NIST SP 800-53, coordinating audits with 3PAOs, and ensuring evidence collection for assessments. This role supports cloud services leadership.