Mimecast
Mimecast
Mimecast — ұйымдарға құпиялылыққа, орнықтылыққа және пайдаланушы тәжірибесіне негізделген қауіпсіздік қызметтері арқылы тұрақты цифрлық қатерлерге қарсы тұруға көмектесетін киберқауіпсіздік компаниясы. Оның 2 500-ден астам қызметкері Америка Құрама Штаттары, Ұлыбритания және Австралия сияқты халықаралық нарықтарда жұмыс істейді. Компания жаңа пайда болатын тәуекелдерді алдын ала болжауға, уақыт өте келе қорғанысты күшейтуге және қауіпсіздік саласындағы үздік нәтижелер мен үздіксіз жетілдіруге бағытталған мәдениетті сақтауға мән береді.

Principal FedRAMP Compliance Systems Advisor

Lead Mimecast’s FedRAMP authorization, technical controls, and third-party risk programs. Work across cybersecurity, engineering, legal, and product teams at a SaaS security company.

Сипаттама

  • Lead FedRAMP authorization from control design and documentation through evidence collection.
  • Facilitate required FedRAMP meetings with 3PAOs, agency sponsors, and client stakeholders.
  • Prepare, review, and maintain technical control documentation across certification programs.
  • Turn technical implementations into assessor-ready control narratives with Engineering, IT Security, Product, and Infrastructure experts.
  • Build and mature third-party risk management, including vendor tiering, due diligence, monitoring, and remediation tracking.
  • Manage control evidence and framework mappings for FedRAMP, ISO, SOC 2, and NIST.
  • Update GCO leadership on risks, milestones, and open items, escalating blockers as needed.
  • Track emerging federal and commercial assurance frameworks and evaluate their effect on Mimecast’s certification plans.
  • Represent Mimecast in required meetings with clients, assessors, and regulators.
  • Work with Engineering, Security, Legal, Product, and other subject matter experts to keep controls and evidence ready for audits.

Талаптар

  • Have led a FedRAMP Rev. 5 Moderate authorization, including required client and regulator meetings, technical control design, and preparation of the SSP, control implementation summaries, and POA&Ms.
  • Bring extensive experience drafting, reviewing, and maintaining technical control documentation with subject matter experts.
  • Be able to align Engineering, Security, Legal, and Product teams on shared documentation.
  • Present confidently to external assessors, regulators, and client security teams.
  • Maintain detailed, cross-referenced evidence libraries.
  • Work independently as regulatory guidance evolves, including FedRAMP 20x.
  • Have experience auditing controls for ISO 27001, SOC 2, and other security certification programs.
  • Manage external auditor relationships and resolve findings.
  • Have hands-on FedRAMP 20x preparation under the CR26 framework, ideally covering Classes A–C, automatic control monitoring, KSIs, and tools such as Paramify.
  • Be familiar with GRC and compliance tools such as Drata and Responsive.
  • Know NIST 800-53, CIS Controls, and CSA STAR / CCM.
  • Have experience in a private equity-backed or IPO-track environment.
  • Have exposure to enterprise risk frameworks such as bowtie methodology.
  • Bring project management experience running certification programs spanning multiple months and teams.
  • Write clearly and effectively about technical topics.
  • Successfully complete applicable background checks.

Артықшылықтар

  • Benefits are offered.
  • May be eligible for incentive plans.
  • Additional benefits are provided under company policy and applicable local regulations.
  • Mimecast is an Equal Opportunity and Affirmative Action Employer.
  • Interview adjustments or accommodations are available for disabilities or other reasons.

Ұқсас жұмыс орындары

CVS Health
ADEPT GROUP

Senior Packaging Compliance and Regulatory Manager

ADEPT GROUP

Lead packaging compliance and regulatory strategy for a confidential consumer products client, covering food-contact, sustainability, and regulatory matters. Manage documentation, risk assessments, and cross-functional support for commercialization.

Ашу
Johnson & Johnson

Senior Regulatory Affairs Manager, Biomaterials

Johnson & Johnson

Lead regulatory strategy for Johnson & Johnson Orthopaedics’ biomaterials, biologics, and combination product programs. Oversee submissions, due diligence, and regulatory support for external innovation partnerships.

Ашу
Johnson & Johnson

Senior Manager, Regulatory Affairs – Biomaterials | Johnson & Johnson

Johnson & Johnson

Lead regulatory strategy for biomaterials, biologics, and combination products at Johnson & Johnson Orthopaedics. Guide submissions, external innovation reviews, and global approvals from development through product lifecycle management.

Ашу
U.S. Bank

Senior Compliance Risk Manager, Corporate Payment Systems — U.S. Bank, Cincinnati Hybrid

U.S. Bank

U.S. Bank is seeking a senior compliance risk manager to oversee regulatory controls for corporate payment systems. The role supports Commercial Cards, Fleet Card Network, Freight Process and Payments, and Travel Bank.

Ашу