Principal, Public Sector Compliance

THE OPPORTUNITY

We’re hiring a Principal, Public Sector Compliance to own our public sector authorization portfolio — FedRAMP Class C (Rev5), GovRAMP Moderate, and CMMC Level 1 and Level
2. This is a named-ownership role: you’ll maintain and advance our FedRAMP certification through continuous monitoring and annual assessments, lead the organization through mandatory  regulatory transitions, and shape a federal product roadmap that lets Cohesity compete with peer cloud service providers. You’ll sit at the intersection of compliance, engineering, and product, with full operating autonomy and significant cross‑functional influence.

• Own authorization integrity. Maintain Cohesity’s FedRAMP Class C, GovRAMP Moderate, and CMMC L1/L2 certifications. Lead continuous monitoring (Con Mon) efforts and maintenance of required documentation.
• Govern the authorized boundary. Manage the significant change process, including review and sign off on changes, and ensuring engineering and infrastructure teams understand what triggers a formal notification requirement.
• Lead regulatory transitions. Drive adoption of FedRAMP’s Consolidated Rules, including new VDR/VER rulesets, and develop a defensible Rev5-to-20x conversion recommendation. Stay informed about evolving framework requirements and translate operational implications to leadership.
• Own assessment cycles. Serve as the primary interface for third‑party assessors across annual FedRAMP and GovRAMP assessments and the triennial CMMC Level 2 assessment — readiness, facilitation, evidence gathering, and finding remediation.
• Translate compliance into engineering guidance. Convert control requirements into acceptance criteria that engineering and cloud operations teams can act on, and challenge implementations that fall short.
• Shape the federal offering. Partner with Product Management and Federal Sales to deliver a compliant offering that supports business growth and drives competitive advantage.
• Build the AI‑enabled compliance program. Own machine‑readable, AI‑consumable artifact schemas, set the evidentiary standard automated work must meet, and help move the program from human‑heavy to agent‑leveraged operations.

• 8–10 years of hands‑on FedRAMP program experience, including named ownership of a Cloud Service Provider authorization through multiple full 3
  
  PAO assessment cycles at Moderate and High impact levels. Direct accountability for the SSP, Collaborative Con Mon, POA&M, significant change management, and 3
  
  PAO
• Operational depth in continuous monitoring, including POA&M management, vulnerability management,Con Mon deliverable production, and federal agency sponsor relationship management.

You’ll take on named ownership of a growing public sector compliance program at a pivotal moment — helping
Cohesity expand its federal authorization footprint, compete for new agency business, and build the AI‑enabled
compliance practices that will define how the next generation of cloud service providers operate.

#LI-RB1

Disclosure Pursuant to Applicable State Equal Pay Transparency Laws - This position has a starting pay range as listed below. Actual salary depends upon many factors, including a candidate’s skills, qualifications and experience, location, and salary expectations, and therefore a starting salary at the low end, high end, or even above the stated range may be offered. This position may also be eligible for bonus compensation, commission (if in a sales function), and/or equity grants.

Additionally, full-time employees are eligible to participate in our comprehensive benefits framework, including health and wellness benefits, vacation, paid holidays and refresh days, 401(k) retirement plan, life and disability…