Senior Public Sector Compliance Manager

Jobgether SRL; United States; Remote; USD 110,000 - 170,000; Full time

Benefits offered by this job

Remote work within United States

Exposure to federal security programs

Cross-functional collaboration

Job summary

Jobgether SRL seeks a security compliance specialist to strengthen federal cloud compliance programs, including FedRAMP and NIST controls. You will coordinate audits, documentation, and continuous monitoring across DoD and government environments.

The role requires hands-on experience with SSPs/POA&Ms/SARs/SAPs, strong analytical skills, and the ability to communicate technical requirements to diverse teams. A U.S. security clearance is preferred/required for some roles.

Qualifications

• 2–3 years of experience in information security compliance, governance, risk management
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related discipline, or equivalent experience
• U.S. citizenship and eligibility to obtain a security clearance for government cloud environments
• Strong knowledge of NIST SP 800-53, FedRAMP Moderate/High baselines, and federal authorization processes
• Experience creating or reviewing SSPs, POA&Ms, SARs, SAPs and related documentation
• Experience with cloud security controls in AWS, Azure, or Google Cloud
• Relevant certifications (e.g., CISSP, CISA, CAP, Security+) advantageous
• Ability to translate complex compliance requirements for non-technical stakeholders
• Independent yet collaborative across security, engineering, operations, sales
• Familiarity with vulnerability scanning tools and findings interpretation

Responsibilities

• Develop and maintain a compliance roadmap for federal requirements and risk mitigation
• Support FedRAMP Moderate/High authorization and reauthorization including SSPs, POA&Ms, SAPs, SARs
• Serve as SME on FedRAMP High, NIST SP 800-53, and related federal requirements
• Support DoD Impact Level 6 security and compliance initiatives
• Map and monitor security controls against FedRAMP baselines and NIST controls
• Coordinate with engineering, DevSecOps, and operations to embed compliance into design and operations
• Oversee continuous monitoring, assessments, vulnerability scanning, and remediation tracking
• Coordinate with 3PAOs, government customers, and internal stakeholders during audits and assessments
• Guide federal sales on regulatory requirements and security frameworks
• Administer FedRAMP compliance platform and manage recurring authorization activities
• Produce metrics and risk analysis; track changes to FedRAMP, NIST, FISMA, and related frameworks

Skills

FedRAMP

NIST SP 800-53

Compliance governance

Documentation

Security monitoring

Education

Bachelor’s degree in Cybersecurity or related field

Tools

Nessus

Qualys

Job description

This role is responsible for strengthening and maintaining compliance across federal cloud security and authorization requirements.
You will serve as a key subject matter expert on FedRAMP standards, NIST controls, and related federal security frameworks.
The position combines compliance governance, risk management, documentation, continuous monitoring, and audit coordination.
You will work closely with engineering, operations, DevSecOps, sales, and external assessment organizations.
The role offers the opportunity to influence security practices supporting high-impact public sector environments, including DoD workloads.
You will help manage authorization activities, identify and mitigate compliance risks, and keep security programs aligned with evolving requirements.
Success requires strong analytical judgment, attention to detail, independence, and the ability to communicate technical requirements across teams.

• Develop and maintain a comprehensive compliance roadmap covering federal security requirements, authorization activities, and risk mitigation initiatives.

• Support FedRAMP Moderate and High authorization and reauthorization processes, including the preparation, review, and maintenance of SSPs, POA&Ms, SAPs, SARs, and related documentation.

• Serve as a subject matter expert on FedRAMP High, NIST SP 800-53, and associated federal compliance requirements.

• Support strategic federal initiatives, including security and compliance requirements associated with DoD Impact Level 6 environments.

• Map, assess, and monitor security controls against FedRAMP Moderate/High baselines and NIST SP 800-53 requirements.

• Coordinate with engineering, operations, and DevSecOps teams to ensure security and compliance requirements are incorporated into system design and ongoing operations.

• Manage continuous monitoring activities, including periodic assessments, penetration testing, vulnerability scanning, and associated documentation.

• Track POA&M items through remediation and closure while monitoring outstanding risks and compliance gaps.

• Coordinate with Third Party Assessment Organizations (3PAOs), government customers, and internal stakeholders during audits, assessments, and authorization activities.

• Support federal sales and business development teams by providing guidance on regulatory requirements, security frameworks, and compliance considerations.

• Administer and maintain the FedRAMP compliance platform and manage recurring monthly, quarterly, and annual authorization requirements.

• Produce compliance metrics, reporting, and risk analysis for leadership and maintain awareness of changes to FedRAMP, NIST, FISMA, CMMC, and related frameworks.

Requirements

• 2–3 years of experience in information security compliance, governance, risk management, or a related field, preferably within a FedRAMP- or FISMA-regulated environment.

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related discipline, or equivalent professional experience.

• U.S. citizenship and eligibility to obtain a security clearance are required for work involving applicable government cloud environments.

• Strong working knowledge of NIST SP 800-53, FedRAMP Moderate/High baselines, and the federal authorization process.

• Hands-on experience creating, maintaining, or reviewing security documentation such as SSPs, POA&Ms, SARs, and SAPs.

• Familiarity with governance, risk, and compliance tools, as well as vulnerability scanning technologies such as Nessus or Qualys and the ability to interpret security findings.

• Experience implementing or assessing security controls in cloud environments such as AWS, Azure, or Google Cloud is highly valuable.

• Experience working with a 3PAO or federal agency is preferred.

• Relevant certifications such as CISSP, CISA, CAP, CompTIA Security+, or equivalent credentials are advantageous.

• Strong analytical and problem-solving abilities, with a structured approach to identifying risks, resolving compliance gaps, and managing multiple priorities.

• Excellent written and verbal communication skills, including the ability to translate technical compliance requirements for non-technical stakeholders.

• Ability to work independently while collaborating effectively across security, engineering, operations, sales, and other functions in a fast-paced environment.

Benefits

• Remote position within the United States.

• Opportunity to contribute to federal security and compliance programs involving FedRAMP and other high-assurance environments.

• Cross-functional exposure to cybersecurity, cloud infrastructure, engineering, DevSecOps, sales, and public sector initiatives.

• Opportunity to work on compliance programs aligned with evolving federal security requirements.

• Employment benefits and compensation are subject to the applicable terms and programs offered by the hiring organization.