# Security Compliance Program Manager

**Company:** [Kaizen Labs](https://hotfix.jobs/companies/kaizen-labs)
**Location:** New York, NY, Washington, DC
**Role:** Technical Program Management
**Salary:** $130k – $175k/yr
**Skills:** FedRAMP, nist 800-171, nist 800-53, cmmc, sprs, piee, rmf, oscal, dod cloud computing srg, dfars, far, fcl, niss, emass, xacta
**Posted:** 2026-08-10

> Own Kaizen’s federal security compliance program across FedRAMP, DoD Impact Levels, CMMC, contractual obligations, personnel security, and facility clearance readiness. The role requires hands-on federal portal experience, NIST assessment expertise, assessor engagement, and eligibility for a Tier 3 investigation.

## Job Description

## Responsibilities
- Build and run Kaizen's federal security compliance function in partnership with engineering, security, and executive leadership.
- Own FedRAMP operations, including control implementation status, inherited-versus-owned controls, POA&M currency, continuous monitoring, Key Security Indicators, machine-readable packages, marketplace status, evidence flow to the independent assessor, and significant-change processes.
- Manage DoD Impact Level reciprocity analysis, hosting-platform authorization coverage, and control-responsibility matrices.
- Run the CMMC/NIST 800-171 self-assessment, maintain the corporate CUI system security plan, calculate and maintain the SPRS score, manage annual senior-official affirmations, and drive POA&M remediation.
- Manage federal contract and agency paperwork, including DD Form 254, DD Form 2345, JCP registration, PIEE, SPRS, SAM.gov, agency security questionnaires, and DFARS flowdowns.
- Track contractual SLAs, including incident notification, periodic reviews, and annual affirmations.
- Maintain an obligation register covering FAR and DFARS flowdowns, employee notices, training, prohibited technology, EEO and labor reporting, OCI, and business ethics.
- Review federal contracts and subcontracts before signature and identify compliance obligations.
- Build and maintain control-to-evidence mappings.
- Own personnel security operations, including US-person verification, background screening, onboarding and offboarding access controls, and quarterly access reviews.
- Lead facility clearance readiness, including FSO vendor selection, key personnel clearance sequencing, SF 328 disclosures, and NISS submission.

## Requirements
- Direct experience submitting through federal portals, specifically SPRS and PIEE.
- Experience completing a NIST 800-171 self-assessment or RMF package end to end.
- Experience calculating and explaining a SPRS score, including the 110-control basis, weighting, and POA&M effects.
- Hands-on experience with NIST 800-53 Rev. 5 in a real SSP.
- Current knowledge of FedRAMP in 2026, including the 20x framework, Certification Classes, Key Security Indicators, machine-readable packages, and continuous validation.
- Understanding of where NIST 800-53 Rev. 5 remains applicable, including the High baseline process and the June 2027 end of new Rev. 5 certifications.
- Ability to reason about shared authorization boundaries, inherited and shared controls, application-specific controls, and significant-change requests.
- Working knowledge of the DoD Cloud Computing SRG and Impact Levels on FedRAMP baselines.
- Experience working with a 3PAO or independent assessor.
- Ability to interpret FAR and DFARS flowdowns and maintain an obligation register.
- Background in federal or defense contracting with ownership of a compliance function.
- Experience as the sole compliance professional in an organization.
- US person eligible for a Tier 3 background investigation.
- Based in Washington, DC or New York City with regular in-office presence.

## Nice-to-haves
- FedRAMP authorization experience on the provider or assessor side.
- Experience writing OSCAL or establishing a trust center using live control indicators.
- Military background in security, intelligence, or information security.
- CMMC CCP or RP certification.
- Experience with eMASS, Xacta, or Paramify.

## Compensation
- Annual salary: $130,000-$175,000.

## Similar roles

- [Service Delivery Manager](https://hotfix.jobs/jobs/92c819b1-31bd-40cd-be39-53dc3c052fd0) - Astronomer - New York, NY - $130k – $140k/yr
- [Project Manager, Implementations](https://hotfix.jobs/jobs/dbaac434-c298-4220-b3c4-1909401eb7c8) - Prelim - Remote - $130k – $140k/yr
- [Project Manager, Data Team](https://hotfix.jobs/jobs/c625f700-4f02-475d-9292-3a7be3266c85) - Mercor - San Francisco, CA - $130k – $180k/yr
- [Technical Quality Program Manager](https://hotfix.jobs/jobs/c0b6514e-26c4-41e9-a2e0-985a4b967f27) - Notion - San Francisco, CA - $128k – $141k/yr
- [Program Manager, Product](https://hotfix.jobs/jobs/f1314afb-38eb-45ef-abf5-75d0ea26b76a) - Databricks - Bellevue, WA - $132k – $182k/yr

**Apply:** https://hotfix.jobs/jobs/74a93348-4b78-4ac9-9744-fc8b71fdb817
**Canonical:** https://hotfix.jobs/jobs/74a93348-4b78-4ac9-9744-fc8b71fdb817