Senior Federal Compliance Manager

Job description

At [Secureframe](https://secureframe.com/), we are not just a company; we are at the forefront of revolutionizing cybersecurity compliance. Recognized as one of the industry's most innovative and trusted providers, Secureframe has consistently received accolades for our advanced technology solutions and commitment to excellence. With a robust portfolio of products that safeguard thousands of businesses worldwide, we have been featured in major publications such as **[Forbes’ next billion dollar startups](https://www.forbes.com/sites/amyfeldman/2022/08/16/next-billion-dollar-startups-2022/)**, TechCrunch, and The Wall Street Journal for our transformative impact on the way companies achieve and maintain compliance standards. As we continue to grow, our mission remains clear: to provide seamless, secure solutions that enable businesses to focus on what they do best. Joining Secureframe means becoming part of a team dedicated to professional excellence and continuous learning in an environment that values creativity and forward-thinking. Secureframe is backed by top VCs including Kleiner Perkins, Accomplice, Gradient Ventures (Google’s AI Fund), BoxGroup, Village Global, and many more. As a Senior Federal Compliance Manager test. Secureframe highly values having employees working in-office to foster a collaborative work environment and company culture. For office-based employees (employees who live within a defined radius of a Secureframe office), Secureframe considers working in the office, approximately 30% of the time under current policy, to be an essential function of the employee's role. ### Benefits - Medical, dental, and vision benefits for you and your dependent(s) - Flexible PTO - 401(k) - Paid family leave - Ground floor opportunity as an early member of the team ### ‍What you’ll do - Lead scoping, architecting, and isolating environments to ensure future product development is inherently meeting NIST requirements - Lead internal FedRAMP assessments, including NIST 800-53 and FedRAMP 20x - Enhance the Secureframe product to improve support for FedRAMP 20x requirements and continuous automation - Collaborate with engineering and product teams, using your FedRAMP expertise to build the future of AI-driven software that helps solve common federal industry issues related to security and compliance ### Who we're looking for - 3+ years of leading assessments for federal cybersecurity frameworks, with deep expertise in FedRAMP — Bonus if you have experience with CMMC, StateRAMP, FISMA, or IL4/IL5 environments - Demonstrated ability to interpret and apply NIST-based control requirements in real-world environments - Proven experience scoping, leading, performing testing, and reporting on FedRAMP assessments (Moderate and/or High baselines) - Strong understanding of the current FedRAMP authorization landscape, including the Agency ATO pathway and awareness of FedRAMP 20x modernization efforts - You consider yourself a subject matter expert and have spoken, presented, or are comfortable doing so in relation to your FedRAMP and federal compliance expertise - A self-starter who is driven, sees problems and manifests solutions, and takes action on things they believe can be improved