Principal, Public Sector Compliance Program Manager

Responsibilities

• Own and drive Tines’ federal and public sector compliance program across U.S. federal, DoD, and SLED environments.
• Define and execute the program roadmap, governance model, and operating cadence, including aligning stakeholders, and driving progress against key milestones.
• Translate regulatory, security, contractual, and customer requirements into strategic program plans and coordinated cross-functional initiatives across Security, GRC, Engineering, Product, IT, Legal, Sales, and partner teams.
• Partner with Security, Product, and Engineering teams to ensure compliance initiatives align with system architecture, deployment strategy, operational scalability, and customer requirements.
• Drive prioritization and decision-making around public sector certifications, attestations, and regulatory initiatives, including evaluating business impact, customer demand, implementation complexity, and organizational readiness.
• Serve as a strategic partner and a central coordination point across Legal, Sales, Security, and GRC, helping navigate complex compliance scenarios and ensuring alignment between technical implementation, contractual commitments, and go-to-market strategy.
• Identify and actively manage program-level risks, gaps, dependencies, and tradeoffs, escalating with clear, actionable recommendations.
• Bring working knowledge of the broader public sector ecosystem, including DFARS, GSA schedules, agency-specific requirements, and flow-down obligations, and help connect those requirements to compliance, product, and commercial decisions.
• Monitor evolving federal and public sector regulatory, security, and procurement requirements, and translate new developments into actionable guidance for leadership and internal teams.
• Partner closely with Tines’ public sector legal team, which provides subject matter expertise on legal interpretation, contractual commitments, procurement requirements, and regulatory positioning, while ensuring those considerations are incorporated into program execution.

Requirements

• Strong experience leading and coordinating complex public sector compliance and regulatory programs across multiple frameworks and stakeholders within cloud and SaaS environments.
• Strong experience across FedRAMP, NIST 800-53, NIST 800-171, CMMC, DoD Impact Levels (IL4/IL5), FISMA, CJIS, and GovRAMP, including an understanding of how these requirements are operationalized.
• Ability to connect regulatory and compliance requirements into real-world architecture, control implementation, documentation, and operational processes, including system boundary definition, inheritance models, and shared responsibility considerations.
• Strong understanding of how public sector requirements intersect with technical architecture, security controls, legal commitments, customer expectations, and commercial constraints.
• Working knowledge of the broader public sector regulatory and procurement landscape, including familiarity with DFARS, GSA schedules, agency procurement processes, and customer-specific flowdown requirements.
• Understanding of how legal, regulatory, contractual, and security requirements move through public sector environments, with the ability to identify issues early and partner effectively with Legal and other stakeholders.
• Demonstrated ability to operate strategically and drive scalable decisions across multiple regulatory frameworks, business priorities, and customer use cases.
• Demonstrated ability to influence and align senior stakeholders across technical and non-technical teams in fast-moving, high-growth environments.
• Proven ability to lead complex, cross-functional initiatives across Security, GRC, Engineering, Product, Legal, and Sales.
• Exceptional program leadership skills and prioritization skills, including roadmap development, dependency management, risk identification, prioritization, and executive communication.

Nice-to-Haves

• Experience with international or regional compliance frameworks such as IRAP (Australia), UK OFFICIAL / NHS DSPT, or Protected B (Canada) environments.
• Experience supporting regional compliance, data residency, sovereignty, or regional deployment requirements within cloud and SaaS environments.
• Exposure to government cloud environments (e.g., AWS GovCloud, Azure Government, or similar).
• Experience working with public sector procurement processes, including RFPs, security questionnaires, and customer due diligence workflows.
• Familiarity with export controls, data handling restrictions, or government-specific data classification requirements.
• Experience scaling compliance programs across multiple geographies or regulatory regimes.