Source Job

US

  • Lead technical federal compliance programs including CMMC, FedRAMP, and NIST 800-171 for government contractors.
  • Manage a small team of Security Analysts, driving performance through coaching, accountability, and high-quality outcomes.
  • Build and maintain client security programs, conduct gap/risk assessments, and manage external audits like CMMC and FedRAMP.

Cybersecurity GRC CMMC FedRAMP Project Management

20 jobs similar to Federal Security Program Manager

Jobs ranked by similarity.

$134,870–$197,809/yr
US

  • Lead end-to-end compliance efforts for U.S. Federal customers, including readiness assessments, audits, and continuous monitoring.
  • Serve as the compliance lead for federal authorization efforts, including Agency ATOs, FedRAMP initiatives, and security assessments.
  • Drive adoption of continuous compliance automation and cross-functional program leadership across engineering, cloud, and security teams.

Entrust is an industry leader in identity-centric security solutions, serving over 150 countries with cutting-edge, scalable technologies. The company values curiosity, dedication, and innovation, fostering a culture built on diversity, inclusion, and respect.

US

  • Lead and mature the organization's governance, risk management, compliance, and audit programs.
  • Own cybersecurity compliance initiatives including CMMC Level 2, SOC audits, and SOX IT General Controls.
  • Partner with business, technology, and executive stakeholders to align security controls with regulatory and business requirements.

Loenbro is a trusted construction lifecycle partner serving thousands of customers across the U.S. with services including electrical, mechanical, structural, inspection, and fabrication. The company has a national presence with a local approach and fosters a culture of integrity, teamwork, and purpose.

US

  • Develop and maintain the information security internal audit program, aligning with FedRAMP and CMMC.
  • Own monthly continuous monitoring assessments and serve as a technical point of contact during audits.
  • Build automated evidence collection and policy-as-code checks across cloud and CI/CD systems.

Everbridge helps enterprises and government organizations prepare for, respond to and recover from critical events. This role is fully remote, and the company emphasizes collaboration, compliance, and technical excellence across its teams.

US

  • Identify and qualify federal government opportunities for cybersecurity products and managed services.
  • Develop relationships with CIOs, CISOs, and security leaders to shape requirements and build partnerships.
  • Build and manage a pipeline of B2B subcontracting opportunities through Federal System Integrators.

Quantum Sky engineers the advantage across cyber, networks, software, and quantum. They foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role.

$95,000–$100,000/yr
US

  • Conduct proactive technical security assessments, hunt for threats, and review indicators of compromise in response to security incidents.
  • Design and implement security controls aligned with NIST, FISMA boundary management, and Defense Industrial Base frameworks.
  • Develop and maintain security documentation for ATOs and audit reports while collaborating with cross-functional teams on compliance.

TP is a leading global provider of digital business services, partnering with prominent brands to optimize operations through advanced technology and sustainable practices. With a global workforce of 500,000 across 300 languages, we foster a culture of inclusion and diversity where ambition and high performance lead to long-term success.

US Unlimited PTO

  • Serve as the primary customer-facing lead for CMMC Level 1 and Level 2 engagements from scoping through assessment.
  • Author System Security Plans, policies, and evidence libraries; implement technical controls in customer tenants.
  • Assess finished environments against the CMMC Level 2 Assessment Guide and support customers during C3PAO assessments.

Defense Unicorns delivers mission value by streamlining software delivery so customers can focus on the most important challenges. Their team is composed of innovators, software engineers, and veterans with decades of experience in federal technology.

$150,000–$170,000/yr
US 4w PTO

  • Lead teams focused on company growth and client delivery using structured project management methodologies.
  • Communicate and execute against program and company objectives while managing stakeholder relationships.
  • Partner with technical and growth leaders to identify and drive organic growth opportunities.

Bellese Technologies is a mission-driven digital services company focused on civic healthcare, designing solutions that improve patient care and reduce costs. The company fosters a collaborative, remote-first culture with a focus on service design and innovation.

US

  • Own the day-to-day operation and continuous improvement of ISO 27001, SOC 2, and GDPR compliance programs.
  • Lead the pursuit of CMMC certification, agency-specific ATOs, and NIST SP 800-171 compliance.
  • Serve as the organization's DPO and oversee vendor risk, audits, and security awareness training.

Mechanical Orchard specializes in safely rewriting the most critical and complex business applications to make them adaptable and resilient. The company is an experienced Agile software consultancy that values cross-functional teams, collective ownership, and continuous improvement, and is bringing joy to beleaguered IT teams.

US

  • Develop and maintain IT contingency, business continuity, and disaster recovery plans in accordance with NIST SP 800-34.
  • Conduct risk assessments and business impact analyses to identify vulnerabilities and establish mitigation strategies.
  • Coordinate with IT operations and cybersecurity teams to integrate recovery strategies and support federal compliance requirements.

The company provides IT security and service recovery solutions for federal government environments. It offers a remote work culture focused on cybersecurity, compliance, and collaboration with cross-functional teams.

$144,000–$175,000/yr
US

  • Lead and mentor a growing GRC team, establishing priorities and developing compliance functions.
  • Oversee SOC 1, SOC 2, and HITRUST CSF compliance programs, audits, and control libraries.
  • Manage AI governance, privacy, third-party risk, and customer security assurance initiatives.

This partner company operates in healthcare technology, focusing on data protection and compliance. It is a high-growth remote-first organization with a small but growing GRC team, emphasizing practical controls and embedded security.

US

  • Lead the project management framework for enterprise security and GRC initiatives.
  • Oversee project portfolios, programs, and full lifecycle delivery across business units.
  • Establish governance standards, reporting dashboards, and executive visibility.

This partner company is a multinational consulting firm delivering enterprise security, governance, risk, and compliance initiatives. It fosters a collaborative, innovative culture focused on accountability, continuous learning, and sustainable outcomes.

US

  • Manage certification activities for Common Criteria, FIPS, and DoDIN across networking product lines.
  • Coordinate with accredited labs and guide engineering teams on compliance gaps and remediation.
  • Develop technical documentation and maintain FIPS-compliant cryptographic modules.

The company is a technology engineering team focused on advancing secure networking solutions through government certification and compliance processes. It fosters a collaborative, inclusive, remote-first culture that values diverse perspectives and innovation.

US 4w PTO

  • Lead and manage nationwide Business Impact Analysis, Disaster Recovery Planning, and contingency planning programs.
  • Apply NIST SP 800-34, SP 800-37, SP 800-53, IR 8286D, and IR 8179 to develop recovery strategies and governance documentation.
  • Direct tabletop exercises, quality assurance reviews, and cross-functional teams to ensure continuity and compliance.

Attain Talent is a recruiting and staffing firm that connects skilled professionals with organizations. The company focuses on supporting candidates and clients throughout the hiring process, emphasizing fair and equitable compensation practices.

US Unlimited PTO

  • Manage professional services projects through the full engagement lifecycle from sales handoff to closeout.
  • Ensure regular communication with stakeholders and manage project issues and risks to resolution.
  • Maintain customer relationships and support revenue recognition, invoicing, and methodology documentation.

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations minimize risk and make better decisions. Founded in 2011, the company has grown to over 1,300 employees and fosters a collaborative, mentorship-driven culture built on core values.

$130,000–$150,000/yr
US

  • Own and mature security, privacy, and compliance programs across HIPAA, SOC 2, and HITRUST.
  • Lead HITRUST certification end to end, including scoping, evidence collection, and assessor coordination.
  • Partner with Engineering, Product, SRE, and IT to integrate security into architecture, SDLC, and cloud infrastructure.

IntusCare is an end-to-end ecosystem built specifically to help PACE programs deliver exceptional care, strengthen financial performance, and stay compliant. It is a growing healthcare SaaS organization that empowers teams to improve outcomes for dual-eligible seniors.

$120,000–$140,000/yr
US Unlimited PTO

  • Lead the implementation and certification of Accela's ISO/IEC 27001:2022 program.
  • Manage risk assessments, controls, audits, and compliance documentation across cross-functional teams.
  • Drive compliance automation and evidence management using platforms like Drata.

Accela provides a cloud-based government software platform that helps agencies improve efficiency and transparency. For nearly 20 years, it has been an industry leader serving communities of all sizes, with a culture committed to diversity, equity, and inclusion.

$87,500–$95,000/yr
US

  • Conduct security assessments for FedRAMP, PCI, ISO, CMMC, and NIST frameworks.
  • Collaborate with delivery team members to drive customer satisfaction and meet project deliverables.
  • Perform technical tests, document results, and maintain work papers.

Fortreum is a trusted leader in cloud and cybersecurity services, specializing in FedRAMP and other regulatory compliance assessments. The company is rapidly growing and values quality, customer focus, autonomy, and personal accountability.

US

  • Manage all aspects of federal contract negotiation, review, and execution, including non-disclosure agreements, teaming agreements, and modifications.
  • Build and manage relationships with Government Contracting Officers and cross-functional teams to ensure compliance and successful contract administration.
  • Maintain contract budgets and hours in Unanet, support audits, and stay current on FAR/DFARS regulations and industry best practices.

Kenjya-Trusant Group is a Service-Disabled Veteran-Owned Small Business that implements, supports, and protects the nation's advanced technology systems for DoD, DHS, and the Intelligence Community. They foster a diverse and inclusive workplace with competitive compensation and flexible benefits.

$100,000–$150,000/yr
US

  • Manage daily program activities, schedules, milestones, and deliverables to ensure customer commitments are met.
  • Coordinate with federal customers, internal teams, and external partners to support successful program execution.
  • Track program performance, prepare reports, lead meetings, and drive process improvements.

Quantum Sky engineers the advantage across cyber, networks, software, and quantum for government and defense missions. They foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role.

$170,000–$195,000/yr
US Unlimited PTO

  • Lead and scale a commercial customer success organization supporting secure software deployment.
  • Own the end-to-end customer journey, from onboarding and implementation to security authorization and renewals.
  • Partner with Sales, Engineering, Security, and Finance to drive retention, expansion, and customer outcomes.

The company provides secure software deployment solutions for government and regulated environments. It is a growing technology organization focused on mission-critical customer success and national security.