Job Opening For Program Manager With Our Banking Client!!

Job Title: Program Manager Location: New York or Washington, DC (Onsite 4+ days per week) Duration: 6-12 months long-term Contract / CTH (if applicable)Pay range: $80-85/hr on W2Role Overview:We are seeking a seasoned Program Manager to lead the creation, authorization, and ongoing governance of a FedRAMP-compliant Azure Government tenant supporting government payment transaction services.This role owns the end-to-end FedRAMP program, including system boundary definition, documentation, ATO readiness, and continuous monitoring, ensuring sustained compliance at FedRAMP High.The ideal candidate combines strong compliance leadership, cloud security expertise, and platform enablement experience, with a proven track record in regulated federal environments.Key Responsibilities:Program Leadership & Governance

• Own and drive the multi-year FedRAMP roadmap for Azure Government tenant
• Define milestones, risks, dependencies, and decision gates
• Establish governance across engineering, cloud, security, compliance, legal, and operations
• Track KPIs such as POA&M closure, vulnerability SLAs, audit readiness, and ConMon completeness
• Drive change control, evidence management, and control attestation workflows
• Manage external partners and 3PAO assessments

FedRAMP Authorization (ATO) Readiness

• Lead creation and maintenance of:
  • SSP (System Security Plan)
  • POA&M
  • Policies, procedures, and FedRAMP documentation
• Define system boundary and data categorization aligned to FedRAMP High
• Perform gap analysis against NIST SP 800-53 controls
• Ensure traceability between controls, implementation, and evidence
• Coordinate implementation across all control families

Continuous Monitoring & Operations

• Establish and manage Continuous Monitoring (ConMon) program
• Oversee:
  • Vulnerability scanning
  • Patch management
  • Configuration monitoring
  • Incident handling
• Own POA&M lifecycle (triage → remediation → closure)
• Maintain dashboards for:
  • Risk posture
  • Control effectiveness
  • Operational health
• Ensure documentation reflects all system and control changes
• Coordinate with SOC for incident response and resolution

Audit & Stakeholder Management

• Act as primary POC for audits, 3PAO, and authorizing officials
• Lead audit readiness activities, walkthroughs, and evidence reviews
• Drive remediation and risk acceptance processes
• Enable teams with training to sustain FedRAMP compliance

Risk Management

• Maintain program-level risk register (controls, architecture, vendors, operations)
• Escalate issues with clear impact analysis
• Drive risk mitigation, compensating controls, or acceptance decisions

Must have:

• 7+ years in program management within regulated cloud environments
• 3+ years leading FedRAMP programs (ATO + Continuous Monitoring)
• Hands-on experience with:
  • SSP, POA&M, SAP/SAR
  • ATO achievement & maintenance
• Deep knowledge of:
  • NIST SP 800-53
  • FedRAMP Moderate/High
  • ConMon processes
  • 3PAO engagements
• Experience with Azure Government / GCC High environments
• Strong understanding of:
  • Identity & access management
  • Logging & monitoring
  • Encryption & policy enforcement
• Proven ability to lead cross-functional teams
• Strong communication & stakeholder management skills
• Bachelor’s degree in relevant field (or equivalent experience.

• Experience supporting government payment systems

• Hands-on with Azure security tools:
  • Defender for Cloud
  • Sentinel
  • Azure Policy / Blueprints
  • Key Vault, Private Link, Purview
• Experience working with federal agencies / ATO authorities
• Knowledge of IRS 1075 compliance
• Certifications:
  • PMP
  • CISSP / CISM / CCSP
  • Azure Security Engineer Associate