SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Keeper Security, a leading cybersecurity software company protecting thousands of organizations and millions of people globally, is hiring a Senior Compliance Program Manager to join the CISO organization. This role drives regulatory compliance, audit readiness, and security governance across Keeper's enterprise and federal environments.
You will manage complex compliance and governance initiatives across regulated environments including FedRAMP High and DoD IL5. Key responsibilities include coordinating audit cycles, continuous monitoring, POA&M remediation, third-party risk management, policy governance, and security training. You will work closely with control owners and security leadership to translate regulatory requirements into clear plans, operational processes, and accountable workstreams.
Specific responsibilities include: planning and managing compliance programs across audit cycles and documentation; establishing program scope, milestones, dependencies, and ownership across Security, Engineering, DevOps, IT, and GRC; maintaining integrated program plans and escalating blockers; coordinating evidence collection and remediation tracking; maintaining working knowledge of NIST 800-53, FedRAMP High, DoD IL5, SOC 2, ISO 27001, and PCI DSS; partnering with GRC and ISSO stakeholders on audit readiness; monitoring evolving regulatory requirements; supporting compliance responses for customers and RFPs; maturing Keeper's third-party risk management program; reviewing vendor security documentation and providing risk-based recommendations; authoring and governing information security policies and standards; developing and maintaining information security training for diverse audiences; collaborating with Engineering and Product teams on technical documentation; translating complex regulatory information for auditors and leadership; mentoring team members; and using AI-assisted tools to improve regulatory research, documentation, and workflow efficiency.
The role is 100% remote from select US locations, with hybrid schedule options available for candidates in Chicago, IL or El Dorado Hills, CA metro areas.
REQUIREMENTS:
- 6+ years of progressive experience in information security compliance, governance, risk, audit, program management, or related field
- 3+ years of experience leading audits, assessments, or compliance initiatives involving NIST 800-53, FedRAMP, SOC 2, ISO 27001, or similar frameworks
- Strong working knowledge of NIST 800-53 Rev. 5, NIST RMF, FedRAMP, SOC 2, ISO 27001, and related compliance requirements
- Experience managing complex cross-functional compliance programs from planning through completion
- Experience supporting regulated or federal cloud environments, ideally including FedRAMP High, DoD IL4/IL5, or similar requirements
- Experience with authorization documentation such as System Security Plans, POA&Ms, continuous monitoring artifacts, or related evidence
- Experience supporting or managing third-party risk management programs
- Experience developing and governing information security policies, standards, and procedures
- Experience developing or delivering information security training for technical and non-technical audiences
- Strong program management skills including planning, scheduling, risk and issue management, dependency tracking, and stakeholder communication
- Strong documentation governance skills, including managing reviews, approvals, versioning, and controlled release
- Strong ability to interpret technical and regulatory requirements and translate them into actionable operational guidance
- Strong written and verbal communication skills with experience communicating with executives, auditors, and technical stakeholders
- Ability to work independently, manage multiple concurrent initiatives, and influence cross-functional stakeholders without direct authority
- Ability and willingness to use AI-assisted tools effectively to support compliance research, documentation, analysis, and program execution
- Bachelor's degree in Information Security, Information Systems, Computer Science, Business Administration, Technical Communication, or related field, or equivalent practical experience
- At least one relevant professional certification such as PMP, CISSP, CISA, CISM, CRISC, CGRC, or ISO 27001 Lead Auditor
