Principal GCO & FedRAMP Compliance Lead

Mimecast Limited; Massachusetts; Hybrid; USD 132,000 - 198,000; Full time

Job summary

Mimecast is seeking a Principal GCO High Compliance Systems Advisor to own the high-compliance certification program, including FedRAMP authorization, and to manage third-party risk. You will collaborate with Engineering, Security, Legal, Product, and other SMEs to ensure controls and evidence stay audit-ready, while representing Mimecast in sessions with clients, assessors, and regulators.

You will report to the SVP / Head of GCO, with hybrid work options in designated US offices.

Qualifications

• Experience leading FedRAMP Rev 5 Moderate authorization.
• Drafting and maintaining technical control documentation with SMEs.
• Ability to align Engineering, Security, Legal, and Product teams.

Responsibilities

• Own FedRAMP authorization activity end-to-end, including control design and evidence collection.
• Chair FedRAMP meetings with 3PAOs, sponsors, and clients.
• Draft and maintain technical control documentation and narratives.

Skills

FedRAMP Rev 5

Control design

Documentation

SSP/POA&M

Auditing & evidence

NIST 800-53

ISO 27001

SOC 2

Vendor risk/TPRM

Regulatory liaison

Tools

Drata

Responsive

GRC tools

Job description

Mimecast is seeking a Principal GCO High Compliance Systems Advisor to own the high-compliance certification program, including FedRAMP authorization, and to manage third-party risk. You will collaborate with Engineering, Security, Legal, Product, and other SMEs to ensure controls and evidence stay audit-ready, while representing Mimecast in sessions with clients, assessors, and regulators.

You will report to the SVP / Head of GCO, with hybrid work options in designated US offices.