Senior FedRamp Program Manager

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior FedRamp Program Manager based in United States. This role serves as the day-to-day owner of the company-side FedRAMP program within a partner-managed compliance environment. You will translate FedRAMP and NIST SP 800-53 requirements into clear actions, owners, deadlines, and evidence expectations. The position combines program execution, compliance expertise, evidence quality, remediation coordination, and cross-functional leadership. You will work closely with engineering, cloud, security, IT, legal, product, operations, and external compliance partners. As an individual contributor and subject-matter expert, you will independently assess program readiness and identify risks before they become compliance blockers. The role requires strong judgment, organization, communication, and the ability to drive commitments without direct management authority. Success means maintaining an organized, assessment-ready, sustainable FedRAMP program with reliable evidence and timely remediation. Accountabilities: - Own day-to-day execution of the company-side FedRAMP program, managing milestones, dependencies, risks, deadlines, and internal follow-through. - Translate FedRAMP requirements, findings, partner requests, and service-level commitments into actionable plans with defined owners, due dates, evidence expectations, and acceptance criteria. - Maintain an authoritative view of program status and proactively identify risks that could affect assessments, remediation, continuous monitoring, or authorization deadlines. - Assess overall program readiness and identify systemic gaps in controls, evidence, ownership, processes, and dependencies.

- Independently determine priorities and next actions, resolve routine program issues, and escalate material risks, disputed requirements, missed commitments, and matters requiring specialized intervention. - Coordinate organizational and procedural controls, evidence collection, remediation activities, control narratives, and other company inputs required for partner-managed FedRAMP records. - Review evidence for completeness, accuracy, relevance, currency, traceability, and consistency with applicable requirements before external submission. - Act as the company-side quality gate for evidence and remediation responses, requiring corrections when submissions are incomplete or inadequate. - Track findings from assessments, continuous monitoring, and authorized testing through assignment, remediation, evidence submission, and closure. - Establish internal remediation deadlines based on external commitments, risk, dependencies, and program requirements. - Serve as the primary operational interface with external FedRAMP infrastructure and compliance partners and coordinate actions arising from continuous-monitoring activities. - Partner with Software Engineering and Cloud Engineering to communicate technical compliance requirements, remediation expectations, deadlines, and evidence needs without performing technical remediation directly. - Coordinate with Security, IT, Support, Operations, Product, Legal, and leadership on organizational controls, process changes, contractual considerations, and FedRAMP obligations. - Drive commitments across teams without direct reporting authority through clear requirements, accountability, follow-through, and escalation. - Maintain visibility into FedRAMP scope, systems, workflows, integrations, control inheritance, and shared-responsibility boundaries. - Coordinate reviews of product, infrastructure, operational, and process changes that may affect FedRAMP scope or control responsibilities. - Continuously improve compliance processes, documentation, evidence practices, ownership models, and operating routines.