Senior FedRAMP Program Manager

Overview

Looking for an innovative, high-growth, multi-award-winning company in one of the hottest segments of the security market? Look no further than Veracode!

Veracode is a global leader in Application Risk Management for the AI era. Powered by trillions of lines of code scans and a proprietary AI-generated remediation engine, the Veracode platform is trusted by organizations worldwide to build and maintain secure software from code creation to cloud deployment.

Learn more at , on the Veracode blog, and on Linked In and Twitter.

We are seeking a skilled Senior FedRAMP Program Manager to join our team and play a role in ensuring our FedRAMP Moderate platform continues to meet or exceed all FedRAMP program requirements and enable Veracode to provide a market-optimized Fed/GovRAMP system. The ideal candidate will have a well-rounded background in Governance, Risk and Compliance (GRC), system documentation, program management and a history of working with Government agencies.

As a Senior FedRAMP Program Manager
, you will be responsible for helping monthly FedRAMP Con Mon cycles are completed on time, FedRAMP audits are completed, engineering teams are informed of and deliver FedRAMP required deliverables and Go to market teams are enabled to offer Veracode’s FedRAMP Platform.

• Work across engineering, product and go-to-market teams to provide FedRAMP program deliverables on a timely basis.
• Partner with Engineering teams on getting requirements put into backlogs and tracked in appropriate sprints.
• Partner with GRC and Security Operations teams on relevant security and audit requirements.
• Partner with go-to-market teams on program adoption and benefit.
• Partner with third party advisory and engineering services to support the FedRAMP environment and maintain Veracode’s ATO.
• Create and track Jira work items for FedRAMP Con Mon requirements.

• 5+ years working as a Program Manager in an Agile SDLC environment.
• 5+ years experience working with a FedRAMP/GovRAMP ATO.
• Strong verbal and written communication skills and experience with MS Office Tools (Excel, Word, PowerPoint), and Atlassian Tools (Jira, Confluence).
• Bachelor's degree in computer science, Information Science, Engineering, or related/relevant field or equivalent experience.

• AWS / Public Cloud infrastructure experience
• Understanding of cybersecurity and IT related GRC frameworks (NIST/SOC2/ISO
  27001).
• Detail oriented, strong leader, good communicator, ability to overcome obstacles
• Understanding of cloud/infrastructure/software vulnerability identification and management
• Knowledge and increased awareness of FedRAMP/GovRAMP requirements and ability to direct/lead the organization with successfully achieving FedRAMP deliverables and annual audits.

In accordance with U.S. pay transparency laws, Veracode provides compensation transparency for roles based in the United States.  to view our compensation ranges by grade. Please note, specific compensation may be influenced by various factors including candidate's experience, education, and work location.

Job Grade:
Senior

Employment opportunities are available to all applicants without regard to race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Fraudulent Recruitment Alert - Be Aware and Stay Informed

At Veracode, we prioritize a secure recruitment process. Unfortunately, fake recruitment and job offer scams are on the rise. They aim to deceive candidates through emails and calls to obtain sensitive information.

Here’s our recruitment promise to you:

• Comprehensive Interview Process:
  We never extend job offers without a comprehensive interview process involving our recruitment team and hiring managers.
• Offer Communications:
  Our job offers are not sent solely through email, and we will never ask you to pay for your own hardware.
• Email Verification:
  Recruiting emails from Veracode will always originate from an  email address.

If you have any doubts about the authenticity of an email, letter, or telephone communication claiming to be from Veracode, please reach out to us at  before taking any further action.