Senior Public Sector Compliance Manager

Job not on LinkedIn

🔥 1 hour ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🚔 Compliance

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Menlo Security Inc.

WebsiteLinkedInAll Job Openings

201 - 500 employees

🔒 Cybersecurity

🏢 Enterprise

💰 $100M Series E on 2020-11

Cybersecurity • Enterprise

Menlo Security Inc. is a cybersecurity company focused on providing advanced internet security solutions for enterprises. They specialize in securing browsers across hybrid enterprise environments to prevent phishing and malware attacks. Menlo Security offers a cloud-based browser security solution that transforms any browser into a secure enterprise browser, helping organizations protect against highly evasive adaptive threats, zero-hour phishing, and ransomware. Their zero-trust access architecture enables safe internet use and secure application access, supporting over 800 customers globally, including financial institutions and government agencies.

📋 Description

• Develop and govern a comprehensive compliance roadmap to maintain CMMC certification and mitigate risks across internal and external systems • Drive strategic initiatives for high-priority federal projects and ensure systems and processes meet DoD Impact Level 6 authorization requirements • Serve as subject matter expert for FedRAMP High standards • Liaise with the Federal Sales Team to align business development activities with federal regulatory standards and security compliance frameworks • Support FedRAMP Moderate authorization and reauthorization processes • Develop, review, and maintain system security documentation including SSP, POA&M, SAP, and SAR • Map and analyze security controls against FedRAMP Moderate/High baselines and NIST SP 800-53 controls • Assist with implementing and monitoring security controls for FedRAMP-authorized systems • Coordinate with engineering, operations, and DevSecOps teams to integrate security requirements into system design and operation • Maintain continuous monitoring documentation and support annual assessments, penetration tests, and vulnerability scans • Interface with 3PAOs, government customers, and internal stakeholders for audits and assessments • Track and manage POA&M items to closure • Manage administration, training, and development of the FedRAMP platform and associated monthly, quarterly, and annual requirements • Provide compliance reporting, metrics, and risk analysis to management • Monitor changes in FedRAMP requirements, NIST guidance, FISMA, and CMMC frameworks

🎯 Requirements

• U.S. Citizenship (required for working in GovCloud environments) • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience) • 2–3 years of experience in information security compliance or risk management, preferably in a FedRAMP or FISMA-regulated environment • Strong knowledge of NIST SP 800-53, FedRAMP Moderate/High baselines, and the FedRAMP authorization process • Experience with security documentation (SSP, POA&M, SAR, SAP, etc.) and governance tools • Familiarity with vulnerability scanning tools such as Nessus and Qualys and interpreting security findings • Eligibility to obtain security clearance is required • Preferred: experience working with or in a 3PAO or federal agency • Preferred: FedRAMP or NIST security control implementation experience in AWS, Azure, or Google Cloud environments • Preferred security certifications: CISSP, CISA, CAP, CompTIA Security+ or equivalent • Strong analytical and problem-solving skills • Ability to work independently and manage multiple priorities in a fast-paced environment • Effective written and verbal communication abilities • Ability to collaborate across teams and explain technical issues to non-technical stakeholders • Self-motivated with the ability to manage multiple priorities