Accountabilities:

Own and manage the integrated cybersecurity program plan, including governance routines, milestones, dependencies, risks, and executive reporting for Protected B, FedRAMP Moderate, and DoD IL4 initiatives.

Serve as a senior program liaison across cybersecurity, quality and risk management, cloud operations, engineering, product, legal, sales, customer success, external assessors, government sponsors, and authorizing organizations.

Establish and maintain clear RACI assignments, control-owner responsibilities, backup coverage, decision logs, risk acceptance records, and escalation processes.

Translate regulatory, authorization, contractual, and customer requirements into actionable plans, assigned responsibilities, and measurable operational outcomes.

Lead cybersecurity program management for existing Protected B services and coordinate the development, readiness, and operationalization of new Protected B solutions.

Coordinate alignment with Government of Canada security expectations, including ITSG-33 risk management practices, applicable cloud security controls, assessment and authorization activities, and continuous monitoring.

Support Canadian security responsibilities through government and customer communications, evidence coordination, control ownership, personnel and access requirements, security documentation, and assessment activities.

Coordinate data-handling, access, data residency, subcontractor, incident management, and shared-responsibility requirements for Protected B services.

Coordinate FedRAMP Moderate authorization maintenance, annual assessments, control implementation reviews, evidence collection, assessor interviews, continuous monitoring deliverables, POA&M updates, significant-change activities, and customer assurance requests.

Maintain oversight of FedRAMP authorization documentation, including the authorization boundary, System Security Plan (SSP), control implementation statements, policies, procedures, inventories, diagrams, customer responsibility documentation, and supporting evidence.

Ensure findings, risks, and compliance obligations have accountable owners, are tracked through resolution, and are escalated when authorization commitments are at risk.

Lead program coordination for the DoD IL4 GovCloud environment, including DISA and mission-owner engagements, authorization maintenance, eMASS package coordination, annual third-party assessment organization (3PAO) assessments, continuous monitoring, and customer onboarding readiness.

Coordinate responses to DISA requests, corrective action plans, authorization conditions or restrictions, follow-up questions, evidence requests, and remediation commitments, maintaining complete records of decisions, submissions, approvals, and deadlines.

Oversee vulnerability governance across operating systems, containers, repositories, base images, applications, and infrastructure. Maintain assigned owners, remediation plans, recurring dashboards, POA&M traceability, deviation and risk acceptance workflows, and supporting evidence.

Ensure vulnerability reporting clearly communicates out-of-SLA issues, external or customer-facing exposure, authentication and authorization impacts, remediation progress, and residual risk.

Coordinate GovCloud audit readiness, including control-owner assignments, SSP and IL4 addendum reviews, evidence handling, interview preparation, system demonstrations, CUI-aware screen sharing, assessor follow-ups, and final evidence submissions.

Maintain integrated risk registers, corrective action trackers, audit plans, control-owner matrices, compliance dashboards, and executive reports.

Establish governance forums with clear decisions, accountable owners, deadlines, and escalation criteria across security, cloud operations, engineering, and business teams.

Drive root-cause analysis and sustainable corrective actions for missed assessments, delayed remediation, evidence gaps, unclear ownership, reduced operational capacity, and communication issues.

Deliver concise, fact-based communications to executives, customers, assessors, and government representatives while protecting Controlled Unclassified Information (CUI), Protected B information, security-sensitive data, and authorization documentation.

How Jobgether works

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1