← All roles

Senior Public Sector Compliance Manager

Menlo Security· G&A - Governance, Risk & Compliance - GRC - G301
Apply on company site
RemoteFull-timePosted 3w ago

About the role

Role focused on FedRAMP compliance management for Menlo Security, ensuring cloud services meet federal security standards, supporting DoD IL6, FedRAMP Moderate/High, and related audits.

Responsibilities

  • Develop and govern a comprehensive compliance roadmap to maintain CMMC certification, mitigating risks across all internal and external systems.
  • Drive strategic initiatives for high-priority federal projects, ensuring all systems and processes meet the rigorous requirements for DoD Impact Level 6 (IL6) authorization.
  • Serve as the Subject Matter Expert (SME) for FedRAMP High standards.
  • Act as a key liaison to the Federal Sales Team, serving as a subject matter expert (SME) to ensure all business development activities align with federal regulatory standards and security compliance frameworks.
  • Support the FedRAMP Moderate authorization and reauthorization processes, including development, review, and maintenance of system security documentation (SSP, POA&M, SAP, SAR, etc.).
  • Map and analyze security controls against FedRAMP Moderate/High baselines and NIST SP 800-53 controls.
  • Assist in implementing and monitoring security controls for FedRAMP-authorized systems.
  • Coordinate with internal teams (engineering, operations, DevSecOps) to ensure security requirements are integrated into system design and operation.
  • Maintain continuous monitoring documentation and support periodic assessments (e.g., annual assessments, penetration tests, vulnerability scans).
  • Interface with Third Party Assessment Organizations (3PAOs), government customers, and internal stakeholders to support audits and assessments.
  • Track and manage Plan of Action and Milestones (POA&M) items to closure.
  • Manage the Administration, Training and Development of the FedRAMP platform and all associated monthly, quarterly, annual requirements as per the FedRAMP authorization process.
  • Provide compliance reporting, metrics, and risk analysis to management.
  • Stay up to date with changes in FedRAMP requirements, NIST guidance, and related compliance frameworks (e.g., FISMA, CMMC).

Qualifications

  • U.S. Citizenship (required for working in GovCloud environments).
  • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience).
  • 5+ years of experience in information security compliance or risk management, preferably in a FedRAMP or FISMA-regulated environment.
  • Strong knowledge of NIST SP 800-53, FedRAMP Moderate/High baselines, and the FedRAMP authorization process.
  • Experience with security documentation (SSP, POA&M, SAR, SAP, etc.) and governance tools.
  • Familiarity with vulnerability scanning tools (e.g., Nessus, Qualys) and interpreting security findings.
  • Eligibility to obtain security clearance is required.

Skills

Required:FedRAMP High/ModerateNIST SP 800-53Security DocumentationSecurity clearance
Nice to have:3PAO coordination
Last updated Oct 8, 2026. Interested? Apply on the company site.

About Menlo Security

Make Every Browser an Enterprise Browser | Menlo Security

The Menlo Security Enterprise Browser solution stops phishing and malware attacks on any browser and any device across your hybrid enterprise.

Browser SecurityEnterprise BrowserPhishing PreventionRansomwareZero-Trust Network AccessWeb SecurityCloud Browser

More open roles at Menlo Security