Sr Program Manager, Continuous Monitoring

Senior Program Manager, Continuous Monitoring - Hybrid, Cary, North Carolina

We’re a leader in data and AI. Through our software and services, we inspire customers around the world to transform data into intelligence - and questions into answers.

If you're looking for a dynamic, fulfilling career with flexibility and a world-class employee experience, you'll find it here. We're recognized around the world for our inclusive, meaningful culture and innovative technologies by organizations like Fast Company, Forbes, Newsweek and more.

The Managed Cloud Services organization within the Cloud and Information Services (CIS) division is seeking a Senior Program Manager focused on Continuous Monitoring to strengthen program execution, improve audit readiness, and support consistent compliance outcomes across SAS Managed Cloud Services.

In this role, you will partner with security, compliance, cloud operations, and agency stakeholders to manage recurring Continuous Monitoring activities, maintain required evidence and reporting, coordinate assessments, and reduce operational risk. This opportunity comes at a pivotal time, as the organization continues to grow rapidly and strengthen its enterprise operating model.

• Manage the Continuous Monitoring program for SAS Managed Cloud Services, including recurring deliverables, artifact readiness, stakeholder coordination, and submission timelines.
• Track vulnerabilities, deviation requests, remediation plans, milestones, and success metrics to support timely risk visibility and resolution.
• Lead cross-functional alignment with Global Information Security, Governance, Risk, Compliance and Audit, Product Management, Cloud Operations, agency stakeholders, consultants, and assessment teams.
• Oversee the readiness, quality, and timely submission of Continuous Monitoring artifacts, evidence, and reporting packages required to support authorization and certification commitments.
• Lead recurring Continuous Monitoring operating cadences that drive agency alignment, internal decision-making, status visibility, issue follow-up, and risk escalation.
• Coordinate key activities within the annual 3
  
  PAO security assessment lifecycle, with a focus on remediation status and SLA aging
• Shape and mature the Continuous Monitoring program roadmap, aligning regulatory requirements, customer commitments, operational priorities, reporting standards, and organizational growth objectives.
• Drive cross-functional action with technical teams to assess security control effectiveness, surface compliance gaps and lifecycle risks, and advance required remediation actions.
• Ensure all applicable security policies and processes are followed to support the organization's secure software development goals.
• Embrace curiosity, passion, authenticity and accountability. These are our values and influence everything we do.

• Bachelor’s degree in computer science, information systems, risk management, cybersecurity, business administration, or a related field.
• Eight years of experience managing security, compliance, audit, governance, technology, or risk-related programs in a cloud or regulated technology environment.
• Demonstrated experience with continuous monitoring, POA&M management, vulnerability management, security control assessment, and evidence management.
• Experience working with cloud infrastructure, SaaS, managed services, cybersecurity, compliance, privacy, Dev Ops, or cloud operations teams.
• Demonstrated ability to influence outcomes across cross-functional technical, compliance, and senior leadership stakeholders while managing milestones, risks, and decisions.
• Strong execution discipline with the ability to manage multiple recurring deliverables, documentation cycles, reporting timelines, and assessment activities concurrently.
• Ability to translate security and compliance requirements into actionable plans, operating cadences, and measurable outcomes.
• Equivalent combination of related education, training and experience may be considered in place of the above qualifications.

• Prior…