Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowFirst seen 4 days ago

Senior FedRAMP Compliance Manager

coralogix/06.00464 open roles

Where
Boston, MA
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior FedRAMP Compliance Managercoralogix/06.004 · Boston, MA

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on coralogix/06.004's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. coralogix/06.004 postings stay open a median of 4 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.7%14 days
  5. 35.6%30 days
  6. 58.0%60 days
This job: first seen 4 days ago

coralogix/06.004 median: 4 days open

The posting

Coralogix is a modern, full-stack observability platform transforming how businesses process and understand their data. Our unique architecture powers in-stream analytics without reliance on expensive indexing or hot storage. We specialize in comprehensive monitoring of logs, metrics, trace, and security events with features such as APM, RUM, SIEM, Kubernetes monitoring, and more, all enhancing operational efficiency and reducing observability spend by up to 70%.

Coralogix is seeking a Senior Compliance Manager for our FedRAMP compliance program. You will ensure our SaaS meets federal security standards and advance us from FedRAMP Ready to Authorized, partnering with our agency sponsor as we enter audit. Responsibilities include governing established documentation (such as our SSP), coordinating evidence with platform engineering, and collaborating with advisors, auditors, and the 3PAO to drive successful assessments and renewals. This is a full-time position, ideal for a seasoned compliance professional with deep knowledge of NIST SP 800-53 controls and FedRAMP requirements.

You will have 5+ years leading ATOs for cloud services, guiding engineering teams from planning through continuous monitoring and acting as our liaison to the FedRAMP Agency and PMO to resolve questions and ensure compliance.

What You’ll Do:

  • Lead FedRAMP Compliance Project: Oversee the FedRAMP Moderate authorization audit, conducting internal compliance reviews and managing cross-functional efforts to meet project timelines and milestones.
  • Documentation Management: Prepare, review, and update all required FedRAMP security documentation - including the System Security Plan (SSP), Plan of Action & Milestones (POA&M), Security Assessment Plan/Report (SAP/SAR), and related artifacts - ensuring they remain complete and compliant.
  • Controls Assessment: Map and analyze current security controls against the FedRAMP Moderate baseline and NIST SP 800-53 framework to identify gaps and remediation needs. Provide guidance to remediate any gaps and implement required controls.
  • Implement & Monitor Controls: Assist in implementing and monitoring security controls for the FedRAMP environment, and coordinate the continuous monitoring processes to maintain compliance. This includes working closely with DevOps and SecOps teams in overseeing vulnerability scanning, patch management cadence, and other Continuous Monitoring activities.
  • Cross-Functional Coordination: Coordinate with internal teams (DevOps, IT, etc.) to ensure FedRAMP security requirements are integrated into system design, development, and operations. Educate and guide technical teams on FedRAMP controls and best practices for cloud architecture security.
  • Audit Liaison: Serve as the primary liaison with external parties during the FedRAMP assessment. Interface with the Third-Party Assessment Organization (3PAO), the sponsoring agency, and FedRAMP advisors/auditors, scheduling audit activities, providing evidence, and addressing any findings to ensure successful assessments.
  • POA&M Coordination: Coordinate with SecOps the Plans of Action and Milestones (POA&Ms) resulting from security assessments, driving remediation efforts to closure within agreed timelines. Ensure timely resolution of any compliance and security gaps.
  • Reporting & Risk Communication: Communicate identified risks and mitigation plans clearly, and prepare materials for FedRAMP project reviews, audits, and annual assessments as needed.
  • Continuous Improvement: Stay up-to-date with changes in FedRAMP requirements, NIST guidelines, and emerging security threats. Continuously evaluate and recommend improvements to our security controls and processes to maintain FedRAMP compliance and overall security posture.

Requirements

  • 5+ years of experience in security compliance or risk management (or equivalent experience), including direct FedRAMP compliance experience.
  • Strong considerations for a Bachelor’s degree in Information Security, Computer Science, or a related field
  • FedRAMP & NIST Expertise: In-depth knowledge of FedRAMP baseline requirements and the NIST SP 800-53 control framework. Familiarity with FedRAMP’s authorization process and federal information security standards (FISMA) is expected.
  • FedRAMP Audit Experience: Proven experience leading or playing a major role in a FedRAMP Authorization to Operate (ATO) process or FedRAMP security assessment, including preparation of agency audit packages. Hands-on involvement with FedRAMP audits.
  • Cloud Environment Familiarity: Experience working with cloud infrastructure and SaaS environments (especially government cloud platforms such as AWS GovCloud or Azure Government) and implementing security controls in cloud architectures. Knowledge of secure cloud configurations and technologies (e.g., virtualization, containerization, encryption, network security in cloud) is important.
  • Certifications: At least 1 professional certification such as CISSP, CISM, or CGRC, CompTIA Cloud+ (or other cloud/security certifications.
  • Communication & Collaboration: Excellent written and verbal communication skills, with an ability to collaborate effectively with cross-functional teams and convey compliance requirements to both technical and non-technical stakeholders. Experience governing policy documents and presenting security findings or status to leadership is valuable.
  • Analytical Skills: Strong analytical and problem-solving abilities, with keen attention to detail. Able to work independently, manage multiple priorities and deadlines in a fast-paced environment, and maintain a proactive, self-driven approach to meeting compliance objectives.

Cultural Fit

We’re seeking candidates who are hungry, humble, and smart. Coralogix fosters a culture of innovation and continuous learning, where team members are encouraged to challenge the status quo and contribute to our shared mission. If you thrive in dynamic environments and are eager to shape the future of observability solutions, we’d love to hear from you.

Compensation and rewards

  • This role offer a range of $170,000 to $210,000. Final compensation will be based on experience, skills, education, and work location.
  • Our total compensation package includes comprehensive and inclusive employee benefits for healthcare, dental, and mental health benefits, a 401(k) plan and match, paid sick time and paid time off.

Coralogix is an equal-opportunity employer and encourages applicants from all backgrounds to apply.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against coralogix/06.004's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on coralogix/06.004's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    coralogix/06.004's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.