Program Manager - FedRAMP
Salt Lake City, Utah
Filevine
Empower your law firm and improve efficiency with Filevine's AI-powered legal case management software. From intake, legal drafting, calendaring, & more.Our MissionFilevine is building the seamless intersection between legal and business by creating a world- class platform to help professionals scale.
Job Summary
We are seeking a highly skilled and experienced Program Director to lead our engineering efforts in achieving FedRAMP Moderate compliance for our SaaS platform. This critical role will involve guiding our company through the entire FedRAMP lifecycle—from readiness assessment to full certification—ensuring alignment with regulatory standards while managing cross-department dependencies.
The ideal candidate will have a strong background in project, product, or program management, extensive experience with SaaS platforms, and a proven track record of driving engineering work which would achieve FedRAMP-complaint controls in collaboration with large engineering organizations. The Program Director - FedRAMP will report to the Company’s Chief Product Officer but will work closely with leadership in the Information Security and Legal departments.
Responsibilities
- Program Leadership
- Develop and execute a comprehensive program roadmap to achieve FedRAMP Moderate compliance.
- Act as the primary point of contact for all FedRAMP-related activities, including audits, assessments, and stakeholder communications.
- Cross-Departmental Coordination
- Collaborate with engineering, IT, security, product, legal, and other departments to align resources and timelines.
- Identify and manage cross-functional dependencies, ensuring teams are equipped to meet compliance requirements.
- FedRAMP Expertise
- Guide the organization through the process of achieving FedRAMP Ready status and eventually full certification.
- Provide expertise on FedRAMP requirements, including security controls, documentation, and technical implementations.
- Engage with Third Party Assessment Organizations (3PAOs) and federal agency sponsors to facilitate the certification process.
- Risk Management and Compliance
- Conduct gap analyses to identify areas of non-compliance and develop strategies to address them.
- Implement a risk management framework that supports FedRAMP compliance and integrates with existing organizational processes.
- Program Management
- Establish and track project milestones, deliverables, and KPIs.
- Manage timelines, budgets, and resources to ensure program success.
- Provide regular updates and reports to senior leadership and key stakeholders.
- Documentation and Process Development
- Oversee the creation and maintenance of FedRAMP documentation, including System Security Plans (SSPs), policies, and procedures.
- Develop sustainable processes to ensure ongoing compliance post-certification.
- Change Management
- Lead organizational change initiatives required to embed FedRAMP requirements into the company’s culture and operational practices.
Qualifications
- Required:
- Education: Bachelor’s degree
- Experience:
- Minimum of 7 years of experience in program management, product management, compliance, or related fields, with a focus on SaaS or cloud-based platforms.
- Proven track record of leading a SaaS company through the FedRAMP certification process, including achieving FedRAMP Ready status.
- Experience in organizing engineering work in large engineering organizations, with a deep understanding of cross-departmental dependencies.
- Skills:
- Strong project management skills, including the ability to manage complex programs with multiple stakeholders.
- Familiarity in compliance frameworks (e.g., FedRAMP, NIST 800-53, SOC 2).
- Excellent communication and interpersonal skills, with the ability to influence and align diverse teams.
- Analytical mindset with the ability to assess risks and develop actionable solutions.
- Education and Certifications:
- Bachelor’s degree
- Relevant certifications such as PMP, CISSP, CISM, or CISA are a plus.
Privacy Policy NoticeFilevine will handle your personal information according to what’s outlined in our Privacy Policy.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Audits CISA CISM CISSP Cloud Compliance FedRAMP KPIs NIST NIST 800-53 Privacy Risk management RMF SaaS SOC SOC 2 System Security Plan
Perks/benefits: Career development Competitive pay Health care Insurance Medical leave Parental leave Team events
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.