Senior Program Manager, Continuous Monitoring & Compliance

SAS; Cary (NC); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health benefits

401k plan

Tuition assistance

Vacation & holidays

Parental leave

Childcare benefits

Job summary

SAS is seeking a Senior Program Manager for Continuous Monitoring in Cary, NC, with a hybrid work model. You will drive the Continuous Monitoring program, coordinate cross-functional teams, manage artifacts, evidence, and reporting to support authorization and certification efforts.

You will partner with Global Information Security, Governance, Risk, Compliance and Audit, Cloud Operations and agency stakeholders to improve audit readiness, reduce risk, and align with regulatory requirements

Qualifications

• Bachelor's degree in computer science, information systems, risk management, cybersecurity, business administration, or a related field.
• Eight years of experience managing security, compliance, audit, governance, technology, or risk-related programs in a cloud or regulated technology environment.
• Experience with continuous monitoring, POA&M management, vulnerability management, security control assessment, and evidence management.

Responsibilities

• Manage the Continuous Monitoring program for SAS Managed Cloud Services, including recurring deliverables, artifact readiness, stakeholder coordination, and submission timelines.
• Track vulnerabilities, deviation requests, remediation plans, milestones, and success metrics to support timely risk visibility and resolution.
• Lead cross-functional alignment with Global Information Security, Governance, Risk, Compliance and Audit, Product Management, Cloud Operations, agency stakeholders, consultants, and assessment teams.
• Oversee the readiness, quality, and timely submission of Continuous Monitoring artifacts, evidence, and reporting packages required to support authorization and certification commitments.
• Lead recurring Continuous Monitoring operating cadences that drive agency alignment, internal decision-making, status visibility, issue follow-up, and risk escalation.
• Coordinate key activities within the annual 3PAO security assessment lifecycle, with a focus on remediation status and SLA aging.

Skills

Program management

Security governance

Cross-functional leadership

Continuous Monitoring

Policy compliance

Education

Bachelor's degree in a related field (see description)

Tools

GRC platforms

Vulnerability management tools

Ticketing systems

Job description

SAS is seeking a Senior Program Manager for Continuous Monitoring in Cary, NC, with a hybrid work model. You will drive the Continuous Monitoring program, coordinate cross-functional teams, manage artifacts, evidence, and reporting to support authorization and certification efforts.

You will partner with Global Information Security, Governance, Risk, Compliance and Audit, Cloud Operations and agency stakeholders to improve audit readiness, reduce risk, and align with regulatory requirements