Senior Compliance Program Manager, GRC

Keeper Security, Inc.

. Manage complex compliance and governance initiatives across Keeper’s enterprise and regulated environments, including FedRAMP High and DoD IL5 .

Posted 10/13/2026full-timeRemote • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing compliance and governance initiatives within regulated environments, including FedRAMP and DoD IL5. Proficient in developing information security policies, conducting audits, and utilizing AI-assisted tools for compliance documentation and training.

Highest-signal resume keywords

NIST 800-53 ComplianceFedRAMP High ExperienceThird-Party Risk ManagementProgram Management SkillsInformation Security Training Development

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Compliance Program ManagementAudit ReadinessRisk AssessmentPolicy DevelopmentDocumentation GovernanceContinuous MonitoringSystem Security PlansRegulatory Requirements InterpretationDependency TrackingStakeholder Communication

Soft Skills

Strong Written CommunicationStrong Verbal CommunicationInfluencing Without AuthorityMentoringCollaboration

Tools & Technologies

AI-Assisted ToolsLearning Management SystemsPhishing Simulation Tools

Certifications & Qualifications

PMPCISSPCISACISMCRISCCGRCISO 27001 Lead Auditor

Industry Keywords

ComplianceGovernanceInformation SecurityRisk ManagementAuditRegulated EnvironmentsCloud SecuritySecurity StandardsControl DocumentationVendor Risk Management

Tech Stack

Tools & technologies

CloudPMP

About the role

Key responsibilities & impact

Manage complex compliance and governance initiatives across Keeper’s enterprise and regulated environments, including FedRAMP High and DoD IL5
Plan and manage compliance programs across audit cycles, continuous monitoring, POA&M remediation, policy initiatives and supporting documentation
Establish program scope, milestones, dependencies, ownership and reporting across Security, Engineering, DevOps, IT and GRC
Maintain integrated program plans, risks, assumptions, issues and dependencies and escalate blockers with clear recommendations
Coordinate evidence collection, remediation tracking and control-owner activities for compliance and audit initiatives
Partner with GRC and ISSO stakeholders on audit readiness, control documentation, remediation and continuous monitoring activities
Monitor evolving regulatory and security requirements and assess potential business and operational impact
Support compliance responses for customers, contracts, security reviews and RFPs
Support and help mature Keeper’s third-party risk management program, including risk-tiered assessments of vendors and business partners
Review vendor security documentation, attestations and supply chain risk factors and provide risk-based recommendations
Partner with Procurement, Legal and business owners on security requirements, contract terms and remediation expectations
Maintain the third-party risk register and track remediation, risk acceptance and program metrics
Author, maintain and govern information security policies, standards, procedures and control narratives
Support System Security Plan documentation and other compliance-related technical documentation
Develop and maintain information security training for employees and role-specific audiences
Manage training lifecycle activities including scheduling, learning management system administration, completion tracking, phishing simulation and audit evidence
Develop training materials, job aids, scenarios and assessments in partnership with subject matter experts
Measure and report training effectiveness using completion, assessment and behavioral metrics
Collaborate with Engineering and Product teams to validate technical information and maintain accurate, audit-ready documentation
Translate complex technical and regulatory information into clear documentation for auditors, leadership and internal stakeholders
Mentor team members and cross-functional partners on compliance processes and documentation practices
Use AI-assisted tools such as Claude, ChatGPT or similar platforms to improve regulatory research, documentation, analysis, training development and workflow efficiency

Requirements

What you’ll need

6+ years of progressive experience in information security compliance, governance, risk, audit, program management or a related field
3+ years of experience leading audits, assessments or compliance initiatives involving NIST 800-53, FedRAMP, SOC 2, ISO 27001 or similar frameworks
Strong working knowledge of NIST 800-53 Rev. 5, NIST RMF, FedRAMP, SOC 2, ISO 27001 and related compliance requirements
Experience managing complex cross-functional compliance programs from planning through completion
Experience supporting regulated or federal cloud environments, ideally including FedRAMP High, DoD IL4/IL5 or similar requirements
Experience with authorization documentation such as System Security Plans, POA&Ms, continuous monitoring artifacts or related evidence
Experience supporting or managing third-party risk management programs
Experience developing and governing information security policies, standards and procedures
Experience developing or delivering information security training for technical and non-technical audiences
Strong program management skills including planning, scheduling, risk and issue management, dependency tracking and stakeholder communication
Strong documentation governance skills, including managing reviews, approvals, versioning and controlled release
Strong ability to interpret technical and regulatory requirements and translate them into actionable operational guidance
Strong written and verbal communication skills with experience communicating with executives, auditors and technical stakeholders
Ability to work independently, manage multiple concurrent initiatives and influence cross-functional stakeholders without direct authority
Ability and willingness to use AI-assisted tools effectively to support compliance research, documentation, analysis and program execution
Bachelor’s degree in Information Security, Information Systems, Computer Science, Business Administration, Technical Communication or a related field, or equivalent practical experience
At least one relevant professional certification such as PMP, CISSP, CISA, CISM, CRISC, CGRC or ISO 27001 Lead Auditor

Benefits

Comp & perks

Medical, Dental & Vision (inclusive of domestic partnerships)
Employer Paid Life Insurance & Employee/Spouse/Child Supplemental life
Voluntary Short/Long Term Disability Insurance
401K (Roth/Traditional)
A generous PTO plan that celebrates your commitment and seniority (including paid Bereavement/Jury Duty, etc)
Above market annual bonuses