Sr Program Manager, Continuous Monitoring
HybridCary, North Carolina, United States
Job Summary
Manage the Continuous Monitoring program for SAS Managed Cloud Services, including recurring deliverables, artifact readiness, stakeholder coordination, and submission timelines. Track vulnerabilities, deviation requests, remediation plans, milestones, and success metrics to support timely risk visibility and resolution. Lead cross-functional alignment with Global Information Security, Governance, Risk, Compliance and Audit, Product Management, Cloud Operations, agency stakeholders, consultants, and assessment teams. Oversee the readiness, quality, and timely submission of Continuous Monitoring artifacts, evidence, and reporting packages required to support authorization and certification commitments. Lead recurring Continuous Monitoring operating cadences that drive agency alignment, internal decision-making, status visibility, issue follow-up, and risk escalation. Coordinate key activities within the annual 3PAO security assessment lifecycle, with a focus on remediation status and SLA aging. Shape and mature the Continuous Monitoring program roadmap, aligning regulatory requirements, customer commitments, operational priorities, reporting standards, and organizational growth objectives. Drive cross-functional action with technical teams to assess security control effectiveness, surface compliance gaps and lifecycle risks, and advance required remediation actions. Ensure all applicable security policies and processes are followed to support the organization's secure software development goals.
Required Qualifications
- Bachelor's degree in computer science, information systems, risk management, cybersecurity, business administration, or a related field
- Eight years of experience managing security, compliance, audit, governance, technology, or risk-related programs in a cloud or regulated technology environment
- Demonstrated experience with continuous monitoring, POA&M management, vulnerability management, security control assessment, and evidence management
- Experience working with cloud infrastructure, SaaS, managed services, cybersecurity, compliance, privacy, DevOps, or cloud operations teams
- Demonstrated ability to influence outcomes across cross-functional technical, compliance, and senior leadership stakeholders while managing milestones, risks, and decisions
- Strong execution discipline with the ability to manage multiple recurring deliverables, documentation cycles, reporting timelines, and assessment activities concurrently
- Ability to translate security and compliance requirements into actionable plans, operating cadences, and measurable outcomes
- Equivalent combination of related education, training and experience may be considered in place of the above qualifications
- U.S. citizenship
- Successful completion of a background check
Desired Qualifications
- Prior experience supporting FedRAMP Moderate or High environments, CSP continuous monitoring submissions, or agency authorization activities
- Practical experience applying federal compliance standards and frameworks, such as NIST 800-53, FedRAMP, FISMA, NIST SP 800-30, NIST SP 800-34, or NIST 800-171, in a cloud or regulated technology environment
- Experience using GRC platforms, vulnerability management tools, ticketing systems, evidence repositories, or compliance reporting workflows
- Understanding of public cloud architectures, SaaS/IaaS operating models, managed services, and lifecycle management in regulated environments
- Security, compliance, risk, audit, or program management certifications such as CISA, CISSP, Security+, CRISC, CISM, PMP, or other industry-recognized credentials
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.