Senior FedRAMP Program Manager

Looking for an innovative, high-growth, multi-award-winning company in one of the hottest segments of the security market?  Look no further than Veracode!

Veracode is a global leader in Application Risk Management for the AI era. Powered by trillions of lines of code scans and a proprietary AI-generated remediation engine, the Veracode platform is trusted by organizations worldwide to build and maintain secure software from code creation to cloud deployment.

Learn more at www.veracode.com, on the Veracode blog, and on LinkedIn and Twitter.

We are seeking a skilled Senior FedRAMP Program Manager to join our team and play a role in ensuring our FedRAMP Moderate platform continues to meet or exceed all FedRAMP program requirements and enable Veracode to provide a market optimized Fed/GovRAMP system. The ideal candidate will have a well-rounded background Governance, Risk and Compliance (GRC), system documentation, program management and a history of working with Government agencies. As a Senior FedRAMP Program Manager, you will be responsible for helping monthly FedRAMP ConMon cycles are completed on time, FedRAMP audits are completed, engineering teams are informed of and deliver FedRAMP required deliverables and Go to market teams are enabled to offer Veracode’s FedRAMP Platform

Key Aspects of Role

• Work across engineering, product and go-to-market teams to provide FedRAMP program deliverables on a timely basis.

• Partner with Engineering teams on getting requirements put into backlogs and tracked in appropriate sprints.

• Partner with GRC and Security Operations teams on relevant security ,and audit requirements

• Partner with go-to-market teams on program adoption and benefit

• Partner with third party advisory and engineering services to support the FedRAMP environment and maintain Veracode’s ATO.

• Create and track Jira work items for FedRAMP ConMon requirements.

Required Skills/Experience:

• 5+ years working as a Program Manager in a Agile SDLC environment.

• 5+ years experience working with a FedRAMP/GovRAMP ATO.

• Strong Verbal and written Communication skills and experience with MS Office Tools (Excel, Word, PowerPoint), and Atlassian Tools (Jira, Confluence).

• Bachelor's degree in computer science, Information Science, Engineering, or related/relevant field or equivalent experience.

Desired Experience:

• AWS / Public Cloud infrastructure experience

• Understanding of cybersecurity and IT related GRC frameworks (NIST/SOC2/ISO27001).

• Detail oriented, strong leader, good communicator, ability to overcome obstacles

• Understanding of cloud/infrastructure/software vulnerability identification and management

• Knowledge and increased awareness of FedRAMP/GovRAMP requirements and be able to direct/lead organization with successfully achieving FedRAMP deliverables and annual audits.

Compensation Transparency

In accordance with U.S. pay transparency laws, Veracode provides compensation transparency for roles based in the United States. Click here to view our compensation ranges by grade. Please note, specific compensation may be influenced by various factors including candidates experience, education, and work location.

Job Grade: Senior

Employment opportunities are available to all applicants without regard to race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Fraudulent Recruitment Alert - Be Aware and Stay Informed

At Veracode, we prioritize a secure recruitment process. Unfortunately, fake recruitment and job offer scams are on the rise. They aim to deceive candidates through emails and calls to obtain sensitive information.

Here’s our recruitment promise to you:

• Comprehensive Interview Process: We never extend job offers without a comprehensive interview process involving our recruitment team and hiring managers.

• Offer Communications: Our job offers are not sent solely through email, and we will never ask you to pay for your own hardware.

• Email Verification: Recruiting emails from Veracode will always originate from an “@veracode.com" email address.

If you have any doubts about the authenticity of an email, letter, or telephone communication claiming to be from Veracode, please reach out to us at [email protected] before taking any further action.