Job Description: Sr. FedRAMP Program Manager

　　Company Overview:

　　NICE CX is a software company creating comprehensive cloud contact center platform that empowers organizations to deliver exceptional customer experiences. This enables businesses to seamlessly manage customer interactions across various channels, including voice, chat, email, and social media, while optimizing workforce efficiency and ensuring a consistent and personalized customer journey.

　　We are seeking a highly skilled and experienced person to lead our FedRAMP program and ensure the successful implementation and maintenance of secure cloud environments.

　　Responsibilities:

　　As the Senior Technical Program Manager for our FedRAMP program, you will be responsible for:

　　FedRAMP Program Leadership:

　　- Lead and oversee the end-to-end management of the FedRAMP program, ensuring compliance with federal security standards.

　　- Develop and implement strategies to obtain and maintain FedRAMP authorization for our cloud services.

　　- Upload monthly requirements and updates to MAX.gov for FedRAMP reporting.

　　- Manage and process deviation requests to address variations from established FedRAMP controls.

　　- Oversee the management of the Plan of Action and Milestones (POA&M) process, ensuring timely identification and resolution of security vulnerabilities and weaknesses.

　　Audit and Compliance:

　　- Possess strong audit skills and experience in managing and overseeing audits in a FedRAMP environment.

　　- Conduct regular internal audits to ensure ongoing compliance with FedRAMP requirements.

　　- Collaborate with external auditors & 3PAOs to facilitate successful FedRAMP assessments.

　　- Demonstrate a solid understanding of NIST 800-53 controls and frameworks within the context of FedRAMP compliance.

　　Technical Expertise:

　　- Demonstrate a deep understanding of cloud technologies, security protocols, and best practices within a FedRAMP framework.

　　- Provide technical leadership and guidance to cross-functional teams involved in FedRAMP compliance efforts.

　　Risk Management:

　　- Identify and assess potential risks to the FedRAMP program and implement mitigation strategies.

　　- Monitor changes in the regulatory environment and update program processes accordingly.

　　Metrics and Reporting:

　　- Establish and maintain metrics to track the performance and health of the FedRAMP environment.

　　- Develop key performance indicators (KPIs) to measure the effectiveness and efficiency of security controls.

　　- Implement a robust reporting framework to communicate metrics to relevant stakeholders.

　　Stakeholder Management:

　　- Collaborate with internal and external stakeholders to ensure a comprehensive and effective FedRAMP program.

　　- Communicate program status, issues, and risks to executive leadership and stakeholders.

　　Documentation and Reporting:

　　- Develop and maintain comprehensive documentation related to FedRAMP compliance.

　　- Generate regular reports for executive leadership summarizing the status of the FedRAMP program.

　　Qualifications:

　　- Bachelor's degree in a relevant field; Master's degree preferred.

　　- Minimum of 3 years of experience in technical program management, with a focus on FedRAMP compliance.

　　- Strong audit skills and experience managing audits in a FedRAMP environment.

　　- Proven success in obtaining and maintaining FedRAMP authorization for cloud services.

　　- In-depth knowledge of federal security standards, NIST 800-53 controls, and frameworks.

　　- Desired but not required certifications: CISSP, CISM, CISA, GSL.

　　- Experience in building and tracking metrics for security and compliance environments.

　　- Excellent communication and interpersonal skills, with the ability to interact effectively with technical and non-technical stakeholders.

　　Equal Opportunity Employer - minorities/females/veterans/individuals with disabilities/sexual orientation/gender identity