Senior Public Sector Compliance Manager

Menlo Security Inc.

. Develop and govern a comprehensive compliance roadmap to maintain CMMC certification and mitigate risks across internal and external systems .

Posted 9/29/2026full-timeRemote • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in compliance management, particularly with FedRAMP and NIST SP 800-53 standards, while effectively collaborating with cross-functional teams to integrate security requirements. Proficient in developing security documentation and managing compliance reporting and risk analysis.

Highest-signal resume keywords

FedRAMP Authorization ProcessNIST SP 800-53 KnowledgeSecurity Documentation ManagementVulnerability Scanning ToolsCompliance Reporting

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information Security ComplianceRisk ManagementSecurity Documentation (SSP, POA&M, SAR, SAP)Security Control ImplementationAnalytical Skills

Soft Skills

Effective CommunicationProblem-SolvingCollaborationSelf-MotivationTime Management

Tools & Technologies

NessusQualysAWSAzureGoogle Cloud

Certifications & Qualifications

CISSPCISACAPCompTIA Security+

Industry Keywords

CMMC CertificationDoD Impact Level 63PAOFISMAContinuous Monitoring

Tech Stack

Tools & technologies

AWSAzureCloudCyber Security

About the role

Key responsibilities & impact

Develop and govern a comprehensive compliance roadmap to maintain CMMC certification and mitigate risks across internal and external systems
Drive strategic initiatives for high-priority federal projects and ensure systems and processes meet DoD Impact Level 6 authorization requirements
Serve as subject matter expert for FedRAMP High standards
Liaise with the Federal Sales Team to align business development activities with federal regulatory standards and security compliance frameworks
Support FedRAMP Moderate authorization and reauthorization processes
Develop, review, and maintain system security documentation including SSP, POA&M, SAP, and SAR
Map and analyze security controls against FedRAMP Moderate/High baselines and NIST SP 800-53 controls
Assist with implementing and monitoring security controls for FedRAMP-authorized systems
Coordinate with engineering, operations, and DevSecOps teams to integrate security requirements into system design and operation
Maintain continuous monitoring documentation and support annual assessments, penetration tests, and vulnerability scans
Interface with 3PAOs, government customers, and internal stakeholders for audits and assessments
Track and manage POA&M items to closure
Manage administration, training, and development of the FedRAMP platform and associated monthly, quarterly, and annual requirements
Provide compliance reporting, metrics, and risk analysis to management
Monitor changes in FedRAMP requirements, NIST guidance, FISMA, and CMMC frameworks

Requirements

What you’ll need

U.S. Citizenship (required for working in GovCloud environments)
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience)
2–3 years of experience in information security compliance or risk management, preferably in a FedRAMP or FISMA-regulated environment
Strong knowledge of NIST SP 800-53, FedRAMP Moderate/High baselines, and the FedRAMP authorization process
Experience with security documentation (SSP, POA&M, SAR, SAP, etc.) and governance tools
Familiarity with vulnerability scanning tools such as Nessus and Qualys and interpreting security findings
Eligibility to obtain security clearance is required
Preferred: experience working with or in a 3PAO or federal agency
Preferred: FedRAMP or NIST security control implementation experience in AWS, Azure, or Google Cloud environments
Preferred security certifications: CISSP, CISA, CAP, CompTIA Security+ or equivalent
Strong analytical and problem-solving skills
Ability to work independently and manage multiple priorities in a fast-paced environment
Effective written and verbal communication abilities
Ability to collaborate across teams and explain technical issues to non-technical stakeholders
Self-motivated with the ability to manage multiple priorities