Senior FedRAMP Compliance Manager

Coralogix; Boston (MA); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Global opportunities

Hybrid work model

Autonomy and ownership

Kid-friendly & pet-friendly

Job summary

Coralogix is seeking a Senior Compliance Manager to lead FedRAMP compliance initiatives for our US-based SaaS platform. You will own documentation, coordinate audits, and partner with engineers, auditors, and the agency sponsor to move from Ready to Authorized.

The role requires 5+ years of FedRAMP/ATO experience, deep knowledge of NIST SP 800-53 controls, and strong communication skills to guide cross-functional teams through assessment cycles and remediation efforts.

Qualifications

• Extensive FedRAMP and NIST SP 800-53 understanding required.
• Experience leading ATO processes for cloud services.
• Ability to coordinate evidence across multiple teams and auditors.
• Strong documentation and reporting skills for SSP, POA&M, SAP/SAR.

Responsibilities

• Govern FedRAMP documentation and ongoing assessments.
• Coordinate evidence with platform engineering and 3PAO.
• Lead the FedRAMP Moderate authorization project and milestones.
• Manage POA&M coordination and remediation timelines.
• Interface with sponsoring agency and FedRAMP advisors.

Skills

FedRAMP knowledge

ATO leadership

Security governance

Policy documentation

Audit coordination

Education

Bachelor's degree in Information Security

Job description

• Coralogix is seeking a Senior Compliance Manager for our FedRAMP compliance program
• You will ensure our SaaS meets federal security standards and advance us from FedRAMP Ready to Authorized, partnering with our agency sponsor as we enter audit
• Responsibilities include governing established documentation (such as our SSP), coordinating evidence with platform engineering, and collaborating with advisors, auditors, and the 3PAO to drive successful assessments and renewals
• This is a full-time position, ideal for a seasoned compliance professional with deep knowledge of NIST SP 800-53 controls and FedRAMP requirements
• You will have 5+ years leading ATOs for cloud services, guiding engineering teams from planning through continuous monitoring and acting as our liaison to the FedRAMP Agency and PMO to resolve questions and ensure compliance
• Lead FedRAMP Compliance Project: Oversee the FedRAMP Moderate authorization audit, conducting internal compliance reviews and managing cross-functional efforts to meet project timelines and milestones
• Documentation Management: Prepare, review, and update all required FedRAMP security documentation - including the System Security Plan (SSP), Plan of Action & Milestones (POA&M), Security Assessment Plan/Report (SAP/SAR), and related artifacts - ensuring they remain complete and compliant
• Controls Assessment: Map and analyze current security controls against the FedRAMP Moderate baseline and NIST SP 800-53 framework to identify gaps and remediation needs. Provide guidance to remediate any gaps and implement required controls
• Implement & Monitor Controls: Assist in implementing and monitoring security controls for the FedRAMP environment, and coordinate the continuous monitoring processes to maintain compliance. This includes working closely with DevOps and SecOps teams in overseeing vulnerability scanning, patch management cadence, and other Continuous Monitoring activities
• Cross-Functional Coordination: Coordinate with internal teams (DevOps, IT, etc.) to ensure FedRAMP security requirements are integrated into system design, development, and operations. Educate and guide technical teams on FedRAMP controls and best practices for cloud architecture security
• Audit Liaison: Serve as the primary liaison with external parties during the FedRAMP assessment. Interface with the Third-Party Assessment Organization (3PAO), the sponsoring agency, and FedRAMP advisors/auditors, scheduling audit activities, providing evidence, and addressing any findings to ensure successful assessments
• POA&M Coordination: Coordinate with SecOps the Plans of Action and Milestones (POA&Ms) resulting from security assessments, driving remediation efforts to closure within agreed timelines. Ensure timely resolution of any compliance and security gaps
• Reporting & Risk Communication: Communicate identified risks and mitigation plans clearly, and prepare materials for FedRAMP project reviews, audits, and annual assessments as needed
• Continuous Improvement: Stay up-to-date with changes in FedRAMP requirements, NIST guidelines, and emerging security threats. Continuously evaluate and recommend improvements to our security controls and processes to maintain FedRAMP compliance and overall security posture

Benefits

• Grow with us: Over 50% of our leadership roles are filled through internal promotions. We believe in growing our people as we grow the company.
• Global opportunities: With team members in 28 countries, Coralogix offers a truly global work experience and diverse career paths across functions and geographies.
• Top talent, real impact: Join some of the best minds in observability. Our teams are passionate, expert, and deeply connected to the business impact of their work.
• Autonomy and ownership: We empower our people to make decisions, take initiative, and shape how things get done. We’re here for our employees, every step of the way.
• Kid-friendly & pet-friendly: We’re a company where parents, dog lovers (and yes, both!) can thrive. Our flexible, hybrid model and inclusive culture help people bring their whole selves to work.
• Diversity & belonging: A truly international workplace with a culture that celebrates differences and creates a strong sense of belonging for everyone.
• Business-driven impact: Every role at Coralogix is connected to our core business goals. No matter your position, you’ll see how your work directly contributes to the company’s success.
• Proven growth, unicorn status: Be part of a fast-growing company that has scaled year over year for the past 5 years & is proudly recognized as a unicorn in the tech industry

FedRAMP Audit Experience: Proven experience leading or playing a major role in a FedRAMP Authorization to Operate (ATO) process or FedRAMP security assessment, including preparation of agency audit packages. Hands-on involvement with FedRAMP auditsAnalytical Skills: Strong analytical and problem-solving abilities, with keen attention to detail. Able to work independently, manage multiple priorities and deadlines in a fast-paced environment, and maintain a proactive, self-driven approach to meeting compliance objectivesCommunication & Collaboration: Excellent written and verbal communication skills, with an ability to collaborate effectively with cross-functional teams and convey compliance requirements to both technical and non-technical stakeholders. Experience governing policy documents and presenting security findings or status to leadership is valuable5+ years of experience in security compliance or risk management (or equivalent experience), including direct FedRAMP compliance experienceCloud Environment Familiarity: Experience working with cloud infrastructure and SaaS environments (especially government cloud platforms such as AWS GovCloud or Azure Government) and implementing security controls in cloud architectures. Knowledge of secure cloud configurations and technologies (e.g., virtualization, containerization, encryption, network security in cloud) is importantCertifications: At least 1 professional certification such as CISSP, CISM, or CGRC, CompTIA Cloud+ (or other cloud/security certificationsStrong considerations for a Bachelor’s degree in Information Security, Computer Science, or a related fieldFedRAMP & NIST Expertise: In-depth knowledge of FedRAMP baseline requirements and the NIST SP 800-53 control framework. Familiarity with FedRAMP’s authorization process and federal information security standards (FISMA) is expected