Back to jobsOwn contract security governance and compliance strategy, including oversight of all contract security functionality, documentation, and deliverables, incident response frameworks, and coordination with the Contract PMO ISSO for vulnerability scans, POA&Ms, assessments, change management, and security requirements.
Lead security authorization and sustainment strategy, defining the approach for ATO maintenance, continuous monitoring program design, and control assessment coordination.
Engage as the primary point of contact with government stakeholders (FISMA, OMB, agency representatives) regarding compliance status, assessment findings, incident notifications, strategic security posture, and authorization package strategy.
Develop and execute security governance frameworks that integrate compliance controls, proactive risk reduction, and operational efficiency while supporting compliant, rapid deployments
Define key security metrics, KPIs, and compliance dashboards that demonstrate control effectiveness, risk posture, and incident response capability to government and internal leadership.
Provide strategic security guidance to cross-functional teams (Engineering, SRE, Cloud Operations, Sales, Customer Success, Marketing, Customer Support) on FedRAMP control requirements, implementation strategy, and compliance best practices.
Advise senior leadership on security resource allocation, organizational structure, and long-term strategic planning to sustain FedRAMP compliance and government contract security posture.
Lead incident response strategy and post-incident compliance activities, including government notification protocols, remediation oversight, and compliance documentation.
Subject matter expert on emerging cyber-security laws, policies, and regulations
