Manager, Government Compliance & Authorization
Core
Lead strategy and implementation of federal and state authorization programs, primarily focusing on achieving and sustaining FedRAMP High authorization while aligning with CMMC and CMS MARS-E requirements.
Role type
Manager, Government Compliance & Authorization
Builds
Federal and state authorization programs for a healthcare technology platform
Domain
Healthcare technology + Federal security compliance
Required skills
FedRAMP High expertise, CMMC Level 2/3 knowledge, CMS MARS-E 2.2 familiarity, NIST SP 800-53 Rev 5 controls, FISMA processes, continuous monitoring management, 3PAO coordination, risk management, team leadership, project management
Preferred skills
CISSP, CISM, CAP, FedRAMP-specific certifications, cloud infrastructure security (AWS/Azure/GCP), healthcare compliance (HIPAA/HITRUST)
Technologies
FedRAMP, CMMC, NIST SP 800-53 Rev 5, NIST SP 800-171, MARS-E, AWS, Azure, GCP
Responsibilities
Lead end-to-end FedRAMP High authorization process, manage continuous monitoring and incident reporting, collaborate on cross-framework compliance strategies, own risk management for federal services, coordinate security assessments with 3PAOs, develop authorization packages (SSP, POA&M), serve as primary liaison for federal agencies, build and lead compliance teams, create training programs, manage relationships with authorizing officials
Seniority
Manager, hands-on IC with team leadership