Hybrid Gov't Compliance & Cloud Security Manager

MEDITECH International; Canton, Northern (MA, KY); Hybrid; USD 70,000 - 90,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

401(k) plan

Profit sharing

Tuition reimbursement

Generous PTO

Sick days

Personal time

Paid holidays

Job summary

MEDITECH is seeking a Government Compliance Program Manager to drive FedRAMP/ITSG-33 readiness and privacy program support in a hybrid role. You will author SSPs, map controls to NIST SP 800-53, and coordinate audits with third-party assessors and internal teams.

You will collect evidence, manage POA&M, and support continuous monitoring and GDP/privacy reviews across cloud environments.

Qualifications

• 3+ years in Information Security, IT Compliance, or GRC with FedRAMP/ITSG-33 experience.
• Knowledge of NIST SP 800-53 controls and cloud implementation.
• Experience documenting compliance artifacts (SSP, POA&M, IRP).
• Strong written regulatory communication and cross-functional collaboration.

Responsibilities

• Prepare government compliance packages (SSP, SCTM) and policy documents.
• Map controls across NIST 800-53 and CCCS Medium Cloud Profile.
• Coordinate audits with 3PAOs and government reviewers.
• Maintain POA&M and remediation tracking with Cloud/DevOps teams.
• Organize audit evidence and support Continuous Monitoring artifacts.

Skills

Information Security

GRC

FedRAMP ITSG-33

NIST SP 800-53

Documentation writing

Auditing

Cross-functional collaboration

Regulatory language proficiency

Education

CISA

CRISC

CISM

CAP/CGRC

Security+

Tools

SIEM

Vulnerability management

SSPs/POA&M tooling

3PAO coordination

Job description

MEDITECH is seeking a Government Compliance Program Manager to drive FedRAMP/ITSG-33 readiness and privacy program support in a hybrid role. You will author SSPs, map controls to NIST SP 800-53, and coordinate audits with third-party assessors and internal teams.

You will collect evidence, manage POA&M, and support continuous monitoring and GDP/privacy reviews across cloud environments.