Senior Cybersecurity Program Manager
Core
Oversee security governance, compliance, audit readiness, and continuous monitoring for complex public sector cloud environments in Canada and the US.
Role type
Senior Cybersecurity Program Manager
Builds
Operational plans and measurable outcomes for Government of Canada Protected B, FedRAMP Moderate, and DoD IL4 environments
Domain
Public sector cloud security (Canada/US)
Required skills
Cybersecurity program management, FedRAMP Moderate, DoD IL4 authorization, Government of Canada Protected B, NIST SP 800-53/53A, vulnerability remediation, risk management, audit coordination, stakeholder management, executive reporting
Preferred skills
Cloud security provider experience, SaaS in regulated environments, DISA processes, ITSG-33, CUI handling
Technologies
AWS GovCloud, eMASS, STIGs, SSP, SAP, SAR, POA&M
Responsibilities
Own and manage the integrated cybersecurity program plan; Serve as a senior program liaison across cybersecurity, quality, risk, cloud ops, engineering, legal, sales, and government stakeholders; Establish and maintain RACI assignments, control-owner responsibilities, and escalation processes; Translate regulatory and contractual requirements into actionable plans; Lead cybersecurity program management for existing and new Protected B services; Coordinate alignment with Government of Canada security expectations; Support Canadian security responsibilities through communications and evidence coordination; Coordinate FedRAMP Moderate authorization maintenance and annual assessments; Maintain oversight of FedRAMP authorization documentation; Ensure findings and risks have accountable owners and are tracked through resolution; Lead program coordination for the DoD IL4 GovCloud environment; Coordinate responses to DISA requests and corrective action plans; Oversee vulnerability governance across infrastructure and applications; Ensure vulnerability reporting communicates exposure and remediation progress; Coordinate GovCloud audit readiness; Maintain integrated risk registers and compliance dashboards; Establish governance forums with clear decisions and deadlines; Drive root-cause analysis for missed assessments and delayed remediation; Deliver concise, fact-based communications to executives and government representatives
Seniority
Senior, hands-on IC
