Hybrid Government Compliance Program Manager | FedRAMP/NIST

RXinsider LTD.; Northern (KY); Hybrid; USD 70,000 - 90,000; Full time

Benefits offered by this job

Health, dental, & vision insurance

Profit sharing / 401(k)

Tuition reimbursement

Generous paid time off

Sick days

Personal time

Paid holidays

Job summary

MEDITECH is seeking a Government Compliance Program Manager to lead government compliance activities for our SaaS and cloud operations. You will author SSPs, SCTMs, and policy documents, map controls to NIST SP 800-53, and coordinate audits with 3PAOs and government bodies.

The role requires 3+ years in Information Security or GRC, familiarity with FedRAMP/ITSG-33, and strong written communication. Hybrid work arrangement and comprehensive benefits are offered.

Qualifications

• 3+ years in Information Security, IT Compliance, or GRC
• FedRAMP or ITSG-33 experience preferred
• Understanding of NIST SP 800-53 controls in cloud environments
• Experience writing or maintaining compliance artifacts (SSPs, POA&M)
• Strong written communication and cross-functional collaboration skills

Responsibilities

• Author, update, and maintain SSPs, SCTMs, and policy documents
• Map controls across NIST SP 800-53 to cloud workflows
• Track control coverage and evidence for IAM, encryption, monitoring
• Coordinate third-party assessments and government audits
• Manage POA&M register and remediation tracking
• Collect, organize, and validate audit evidence for assessments
• Support Continuous Monitoring with monthly reviews and vulnerability logs
• Assist in vendor risk evaluations and GDP/privacy reviews
• Monitor updates to federal standards and advise security leadership

Skills

GRC expertise

Regulatory writing

Project tracking

Tools

SIEM

Vulnerability management tools

Job description

MEDITECH is seeking a Government Compliance Program Manager to lead government compliance activities for our SaaS and cloud operations. You will author SSPs, SCTMs, and policy documents, map controls to NIST SP 800-53, and coordinate audits with 3PAOs and government bodies.

The role requires 3+ years in Information Security or GRC, familiarity with FedRAMP/ITSG-33, and strong written communication. Hybrid work arrangement and comprehensive benefits are offered.