Remote FedRAMP Security & Compliance Manager

Cotiviti; United States; Remote; USD 135,000 - 155,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Disability

Life Insurance

401(k)

Paid Family Leave

Holidays

PTO

Job summary

Cotiviti in the United States seeks an Information Systems Security Manager (ISSM) focused on FedRAMP with responsibility for security authorization and continuous compliance of cloud-based government systems. You will ensure confidentiality, integrity, availability, privacy, auditability, and accountability across the system lifecycle.

Collaborating with Operations, Engineering, Legal, and Security leadership, you will drive FedRAMP strategy, RMF/NIST alignment, SSP/SAP/SAR, POA&M, ConMon, and

Qualifications

• 8+ years of information security, risk, or compliance experience
• Experience leading FISMA Moderate/High authorizations and ongoing ATO maintenance
• Strong working knowledge of FedRAMP, NIST SP 800-53, and RMF
• Experience managing SSPs, POA&Ms, vulnerability remediation, audits, and ConMon
• Hands-on experience with AWS, Azure, and GCP; SaaS environments
• Ability to lead cross-functional initiatives across technical and non-technical teams
• Excellent written and verbal communication; translate regulatory requirements
• Security certifications such as CISSP, CISM, Security+ or cloud certs

Responsibilities

• Manage end-to-end FedRAMP authorization activities, including planning, execution, resourcing, and stakeholder coordination
• Develop, maintain, and quality of all FedRAMP security documentation (SSP, SAP, SAR, POA&M, ConMon)
• Oversee monthly POA&M management, vulnerability prioritization, remediation tracking, and risk acceptance coordination
• Lead independent security control assessments, vulnerability management, testing, and contingency plan testing
• Direct FedRAMP ConMon activities with timely submission of monthly/quarterly/annual deliverables
• Serve as primary point of contact for agencies, 3PAOs, and internal stakeholders on FedRAMP matters
• Oversee government security bulletins, advisories, and data calls; ensure timely responses
• Maintain accurate inventories for government environments; advise on secure cloud architecture across AWS/Azure/GCP
• Evaluate system changes for FedRAMP impact and ensure change/configuration/incident management adherence
• Coach teams on FedRAMP obligations, audit expectations, and best practices
• Identify process improvements to enhance compliance efficiency and audit readiness
• Develop status reports and metrics on authorization posture and risk exposure
• Complete duties per performance goals and special projects
• Work flexibly with or without reasonable accommodation

Skills

FedRAMP

NIST RMF

SSP/POAM management

Cloud security (AWS/Azure/GCP)

Cross-functional leadership

Regulatory communication

Audits & continuous monitoring

Security certifications (CISSP/CISM)

Job description

Cotiviti in the United States seeks an Information Systems Security Manager (ISSM) focused on FedRAMP with responsibility for security authorization and continuous compliance of cloud-based government systems. You will ensure confidentiality, integrity, availability, privacy, auditability, and accountability across the system lifecycle.

Collaborating with Operations, Engineering, Legal, and Security leadership, you will drive FedRAMP strategy, RMF/NIST alignment, SSP/SAP/SAR, POA&M, ConMon, and