Technical Program Manager, FedRAMP & SOC2

Company: Cradlepoint
Location: Boise
Posted on: August 5, 2022

Job Description:

Overview:
This is a remote opportunity -Cradlepoint was born in Boise and built for wireless. We are a team of authentic, hard-working, and innovative people driven by a shared vision to?Connect Beyond the limits of wired networks. We help customers - big and small, across industries and around the world - utilize LTE and 5G cellular technology to connect people, places, and things, anywhere.?We're at the forefront of the Wireless WAN and 5G - the next big waves in networking - and we remain as hungry and humble as the day we started. If you're hungry to be part of something big, come join us.

Responsibilities:
How Will You Contribute to the Company? -Cradlepoint is currently seeking a Technical Program Manager to join a dynamic, multi-national Company with a key role in Global Information Security. As the FedRAMP & SOC2 Program Manager, you will run and coordinate all aspects of our FedRAMP ATO certification and SOC2 certification. You will execute and lead all aspects of processes and coordinate input and participation for this process. You will own the annual FedRAMP audit process, educating resources about control responses and integration to their day-to-day processes. - -You will create monthly reports in collaboration with engineering, SecOPS, and GRC teams and present to our government sponsoring agency. You will support monthly tracking of ongoing remediation efforts identified in the POA (Plan of Action and Milestones). You will facilitate the ongoing evidence collection process for core controls and work across teams to implement process improvements. - -You will drive several internal team meetings with various stakeholders. Your responsibilities include the development of project plan(s) and metrics to monitor/track progress as well as efficient and effective communication to all levels of the organization. In this role, you will have the opportunity to collaborate with HW/SW engineering teams to ensure product compliance by developing and reporting on different metrics to ensure security compliance. - This position will directly report to our Director of Project Management. - -What Will You Do?Support & develop the plan to achieve initial FedRAMP authorization. Support & develop the plan to achieve SOC2 Compliance. Support the day-to-day project activities as they relate to maintaining FedRAMP authorization. Support the annual assessment and remediation project activities surrounding FedRAMP. Provide executive and technical reporting for activities related to achieving and maintaining FedRAMP authorization and SOC2 compliance. Utilize expertise in security compliance and FedRAMP requirements to support Cradlepoint staff while navigating the authorization and assessment processes. Facilitate vulnerability reporting specific to the in-boundary inventory and generate/maintain list of POAMs (Plan of Action & Milestones). Drive activities supporting continued FedRAMP attestations and SOC2 compliance Work with technology and business stakeholders to realize the implementation of key future state initiatives. Proactively identify information security deficiencies or opportunities for improvement to better enable business security. Participate in the planning or modification of cyber defense architectures and cyber engineering plans for programs and proposals. Provide regular, timely reporting on the information security topics as required Effectively communicate using written, oral, non-verbal, and active listening skillsAccountability - Accountable to Director of Project Management for the efficient and effective execution of position responsibilities. Accountable to Director of Project Management to meet all performance objectives. Accountable to peer employees to ensure professionalism throughout all communication and timely completion of job tasks.

Qualifications:
6+ years of experience relevant to Cyber Security. 5+ years of experience in general project management (for example, driving technical compliance projects, solution development projects, initiatives Proven experience in managing a FedRAMP program and participating in assessment activities FedRAMP Authorization (ATO) experience Skilled at leading through influence Demonstrated proficiency in working with product, UX, operations, and engineering teams to design, scope, and shepherd features from inception to deployment Demonstrated ability to effectively collaborate with cross-functional, cross-organization teams to negotiate and assemble project plans, secure commitments on deliverables, and ensure resolution of blocking issues Solid understanding of software development life cycle models as well as expert knowledge of modern program management methodologies Experience with iterative development and agile program management methodologies Experience with program/portfolio management toolsets (JIRA/Portfolio/Confluence) Understanding of Security Compliance and data security challenges Ability to interpret controls and educate control owners Technical compliance/engineering/DevOps security background or knowledge and experience leading or participating heavily in security audits Knowledge of cloud products/SaaS environment Knowledge of IT Security regulations and guidance such as the RMF, FISMA, NIST 800-53, NIST 800-53A, NIST 800-37, ISO27001 and FIPS 140-2/FIPS Familiar with US government cloud requirements Strong writing and presentation skills Ability to travel up to 25% of the timeBonus Points: -Cloud Security experience in support of AWS, GCP, and MS Azure cloud hosting environments Experience with GRC tools and enterprise solutions Knowledge of PCI DSS, GDPR, SOC, and FedRAMP regulations Security Certifications are a plus Previous experience as an ATONote: Did you know that women and other marginalized groups often hold back on applying to jobs if they don't meet 100% of all listed requirements? We don't want you to hold back! If you don't check every single box above but still feel like you could successfully do the work, we encourage you to apply! We'd love to connect and see how you could add to our team. -Why Cradlepoint?At Cradlepoint, we're one team - all in on inclusion. Celebrating the uniqueness of our individual team members across the globe helps us build diverse teams where we all can thrive. Our connected, community-focused culture enables each one of us to perform at our best and fully be ourselves. -Our Cradlepoint values drive everything we do:Stay humble and hungry: Be a curious learner, resilient, and competitive. Don't point a finger; lend a hand: We are one team! Communicate, provide support, and lift others.Make a difference: Prioritize, innovate, differentiate, and think big for customer success. Make a difference in work and in our communities.Keep it simple: Eliminate complexity. Reduce time to value.Enjoy the ride: Celebrate - appreciate - grow.Trust, Respect, and transparency: Be ethical, data-driven, respectful, and straight shooters who share openly. -We are creating the future of global connectivity & community. Come join us. You belong here. -Benefits & Perks:Competitive salary with a focus on a global market; Annual and Incremental Incentive plans; employee retirement plans (where available) Flexible Time Off with Global Holiday Schedules to promote work-life balanceWellness initiatives focused on the health and mental well-being of our team members and their families, including free membership to Headspace (a mindfulness and well-being app), an International Employee Assistance Program, and dedicated quarterly Well-being Days and No Internal Meeting Fridays.Ongoing training and development opportunitiesEligible to participate in customary health and other benefit plans and programs based on locationWork from home opportunities across our global locations with a culture rooted in inclusion and teamwork -#LI-TI1#LI-Remote -Cradlepoint's Diversity, Equity, Inclusion, and Belonging mission is to create an inclusive work environment where all employees' differences are celebrated, their thoughts matter, and everyone feels safe to bring their authentic selves to work. We're proud to be an equal opportunity employer and aim to attract, develop, and engage top talent from a diverse candidate pool. It is our policy and commitment to provide equal opportunity employment for all persons and not discriminate in employment decisions by placing the most qualified person in each job, without regard to any other classification protected by federal, state, or local law.

Keywords: Cradlepoint, Boise , Technical Program Manager, FedRAMP & SOC2, Executive , Boise, Idaho