Looking for an innovative, high-growth, multi-award-winning company in one of the hottest segments of the security market? Look no further than Veracode!
Veracode is a global leader in Application Risk Management for the AI era. Powered by trillions of lines of code scans and a proprietary AI-generated remediation engine, the Veracode platform is trusted by organizations worldwide to build and maintain secure software from code creation to cloud deployment.
Learn more at www.veracode.com, on the Veracode blog, and on LinkedIn and Twitter.
We are seeking a skilled Senior FedRAMP Program Manager to join our team and play a role in ensuring our FedRAMP Moderate platform continues to meet or exceed all FedRAMP program requirements and enable Veracode to provide a market optimized Fed/GovRAMP system. The ideal candidate will have a well-rounded background Governance, Risk and Compliance (GRC), system documentation, program management and a history of working with Government agencies. As a Senior FedRAMP Program Manager, you will be responsible for helping monthly FedRAMP ConMon cycles are completed on time, FedRAMP audits are completed, engineering teams are informed of and deliver FedRAMP required deliverables and Go to market teams are enabled to offer Veracode’s FedRAMP Platform
Key Aspects of Role
- Work across engineering, product and go-to-market teams to provide FedRAMP program deliverables on a timely basis.
- Partner with Engineering teams on getting requirements put into backlogs and tracked in appropriate sprints.
- Partner with GRC and Security Operations teams on relevant security ,and audit requirements
- Partner with go-to-market teams on program adoption and benefit
- Partner with third party advisory and engineering services to support the FedRAMP environment and maintain Veracode’s ATO.
- Create and track Jira work items for FedRAMP ConMon requirements.
Required Skills/Experience:
- 5+ years working as a Program Manager in a Agile SDLC environment.
- 5+ years experience working with a FedRAMP/GovRAMP ATO.
- Strong Verbal and written Communication skills and experience with MS Office Tools (Excel, Word, PowerPoint), and Atlassian Tools (Jira, Confluence).
- Bachelor's degree in computer science, Information Science, Engineering, or related/relevant field or equivalent experience.
Desired Experience:
- AWS / Public Cloud infrastructure experience
- Understanding of cybersecurity and IT related GRC frameworks (NIST/SOC2/ISO27001).
- Detail oriented, strong leader, good communicator, ability to overcome obstacles
- Understanding of cloud/infrastructure/software vulnerability identification and management
- Knowledge and increased awareness of FedRAMP/GovRAMP requirements and be able to direct/lead organization with successfully achieving FedRAMP deliverables and annual audits.
Compensation Transparency
In accordance with U.S. pay transparency laws, Veracode provides compensation transparency for roles based in the United States. Click here to view our compensation ranges by grade. Please note, specific compensation may be influenced by various factors including candidates experience, education, and work location.
Job Grade: Senior
Employment opportunities are available to all applicants without regard to race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
At Veracode, we prioritize a secure recruitment process. Unfortunately, fake recruitment and job offer scams are on the rise. They aim to deceive candidates through emails and calls to obtain sensitive information.
Here’s our recruitment promise to you:
- Comprehensive Interview Process: We never extend job offers without a comprehensive interview process involving our recruitment team and hiring managers.
- Offer Communications: Our job offers are not sent solely through email, and we will never ask you to pay for your own hardware.
- Email Verification: Recruiting emails from Veracode will always originate from an “@veracode.com" email address.
If you have any doubts about the authenticity of an email, letter, or telephone communication claiming to be from Veracode, please reach out to us at [email protected] before taking any further action.
Top Skills
What We Do
Veracode is intelligent software security. The Veracode Software Security Platform continuously finds flaws and vulnerabilities at every stage of the modern software development lifecycle. Using powerful AI trained on a carefully curated, trusted dataset from experience analyzing trillions of lines of code, Veracode customers fix flaws faster with high accuracy.
Trusted by security teams, developers, and business leaders from thousands of the world’s leading organizations, Veracode is the pioneer, continuing to redefine what intelligent software security means
