Mimecast
Mimecast
Mimecast ir kiberdrošības uzņēmums, kas palīdz organizācijām risināt pastāvīgus digitālos draudus, piedāvājot drošības pakalpojumus, kuru pamatā ir privātums, noturība un lietotāju pieredze. Uzņēmuma vairāk nekā 2500 darbinieku komanda strādā starptautiskos tirgos, tostarp Amerikas Savienotajās Valstīs, Apvienotajā Karalistē un Austrālijā. Uzņēmums uzsver jaunu risku paredzēšanu, aizsardzības nepārtrauktu stiprināšanu un tādas kultūras uzturēšanu, kuras centrā ir izcilība drošības jomā un nepārtraukti uzlabojumi.

Principal FedRAMP Compliance Systems Advisor

Lead Mimecast’s FedRAMP authorization, technical controls, and third-party risk programs. Work across cybersecurity, engineering, legal, and product teams at a SaaS security company.

Apraksts

  • Lead FedRAMP authorization from control design and documentation through evidence collection.
  • Facilitate required FedRAMP meetings with 3PAOs, agency sponsors, and client stakeholders.
  • Prepare, review, and maintain technical control documentation across certification programs.
  • Turn technical implementations into assessor-ready control narratives with Engineering, IT Security, Product, and Infrastructure experts.
  • Build and mature third-party risk management, including vendor tiering, due diligence, monitoring, and remediation tracking.
  • Manage control evidence and framework mappings for FedRAMP, ISO, SOC 2, and NIST.
  • Update GCO leadership on risks, milestones, and open items, escalating blockers as needed.
  • Track emerging federal and commercial assurance frameworks and evaluate their effect on Mimecast’s certification plans.
  • Represent Mimecast in required meetings with clients, assessors, and regulators.
  • Work with Engineering, Security, Legal, Product, and other subject matter experts to keep controls and evidence ready for audits.

Prasības

  • Have led a FedRAMP Rev. 5 Moderate authorization, including required client and regulator meetings, technical control design, and preparation of the SSP, control implementation summaries, and POA&Ms.
  • Bring extensive experience drafting, reviewing, and maintaining technical control documentation with subject matter experts.
  • Be able to align Engineering, Security, Legal, and Product teams on shared documentation.
  • Present confidently to external assessors, regulators, and client security teams.
  • Maintain detailed, cross-referenced evidence libraries.
  • Work independently as regulatory guidance evolves, including FedRAMP 20x.
  • Have experience auditing controls for ISO 27001, SOC 2, and other security certification programs.
  • Manage external auditor relationships and resolve findings.
  • Have hands-on FedRAMP 20x preparation under the CR26 framework, ideally covering Classes A–C, automatic control monitoring, KSIs, and tools such as Paramify.
  • Be familiar with GRC and compliance tools such as Drata and Responsive.
  • Know NIST 800-53, CIS Controls, and CSA STAR / CCM.
  • Have experience in a private equity-backed or IPO-track environment.
  • Have exposure to enterprise risk frameworks such as bowtie methodology.
  • Bring project management experience running certification programs spanning multiple months and teams.
  • Write clearly and effectively about technical topics.
  • Successfully complete applicable background checks.

Priekšrocības

  • Benefits are offered.
  • May be eligible for incentive plans.
  • Additional benefits are provided under company policy and applicable local regulations.
  • Mimecast is an Equal Opportunity and Affirmative Action Employer.
  • Interview adjustments or accommodations are available for disabilities or other reasons.

Saistītās vakances

CVS Health

CVS Health Business Compliance Manager, Requests for Information

CVS Health

Oversee regulatory information requests across CVS Health operations and jurisdictions. Lead analysts and coordinate compliant responses with Legal, Compliance, and Operations.

Atvērt
ADEPT GROUP

Senior Packaging Compliance and Regulatory Manager

ADEPT GROUP

Lead packaging compliance and regulatory strategy for a confidential consumer products client, covering food-contact, sustainability, and regulatory matters. Manage documentation, risk assessments, and cross-functional support for commercialization.

Atvērt
Johnson & Johnson

Senior Regulatory Affairs Manager, Biomaterials

Johnson & Johnson

Lead regulatory strategy for Johnson & Johnson Orthopaedics’ biomaterials, biologics, and combination product programs. Oversee submissions, due diligence, and regulatory support for external innovation partnerships.

Atvērt
Johnson & Johnson

Senior Manager, Regulatory Affairs – Biomaterials | Johnson & Johnson

Johnson & Johnson

Lead regulatory strategy for biomaterials, biologics, and combination products at Johnson & Johnson Orthopaedics. Guide submissions, external innovation reviews, and global approvals from development through product lifecycle management.

Atvērt
U.S. Bank

Vecākais atbilstības risku vadītājs, uzņēmumu maksājumu sistēmas — U.S. Bank, Sinsinati, hibrīddarbs

U.S. Bank

U.S. Bank meklē vecāko atbilstības risku vadītāju, kurš pārraudzīs uzņēmumu maksājumu sistēmu regulatīvās kontroles. Šis amats atbalsta Commercial Cards, Fleet Card Network, Freight Process and Payments un Travel Bank jomas.

Atvērt