Technical Program Manager (FedRAMP)

Role Overview

Join Nexthink as a FedRAMP Technical Program Manager to oversee and execute the company’s FedRAMP and U.S. public sector compliance programs. You’ll lead cross-functional regulatory processes, coordinate evidence and control activities, and align teams and external stakeholders around federal compliance priorities.

Responsibilities

• Supervise daily execution of FedRAMP and U.S. public sector compliance programs.
• Coordinate FedRAMP processes across Security, Engineering, Product, Cloud Operations, Support, Legal, and Customer Success.
• Manage relationships with third-party assessors, consultants, cloud service providers, and other external advisors.
• Drive complex, cross-functional initiatives that rely on influence, coordination, high-quality documentation, and persistent follow-through.
• Translate complex federal requirements into clear plans with owners, timelines, and operating rhythms.
• Build trust via accountability and early escalation of risks.

Requirements

• Experience managing audits, assessments, or compliance programs using frameworks such as FedRAMP, NIST 800-53, DoD SRG, FISMA, ISO 27001, SOC 2, or similar control regimes.
• Strong understanding of cloud/security concepts including cloud architecture, security boundaries, shared responsibility, data flows, logging, access control, incident response, and change management.
• Working knowledge of U.S. federal authorization and operations, including interactions between agencies, sponsors, assessors, consultants, and cloud service providers (authorization and post-authorization).
• Knowledge of FedRAMP processes including:
  • Authorization readiness
  • Control implementation
  • Evidence management
  • Continuous monitoring
  • POA&M management
  • Assessment coordination
• 7+ years of experience in technical program management, security compliance, cloud governance, federal delivery, or related work in regulated SaaS/cloud/public sector environments.
• Ability to communicate clearly with auditors, consultants, customers, and internal teams—especially during timeline/priority conflicts.

Nice to Haves

• Exposure to DoD Impact Level environments, especially IL5/IL6, Azure Government/GCC High, AWS GovCloud, or similar sovereign/government clouds.
• Experience with public sector customers, systems integrators/resellers, government procurement channels, or federal security stakeholders.