Keeper Security - Senior Compliance Program Manager, GRC
Requirements
• 6+ years of progressive experience in information security compliance, governance, risk, audit, program management or a related field • 3+ years of experience leading audits, assessments or compliance initiatives involving NIST 800-53, FedRAMP, SOC 2, ISO 27001 or similar frameworks • Strong working knowledge of NIST 800-53 Rev. 5, NIST RMF, FedRAMP, SOC 2, ISO 27001 and related compliance requirements • Experience managing complex cross-functional compliance programs from planning through completion • Experience supporting regulated or federal cloud environments, ideally including FedRAMP High, DoD IL4/IL5 or similar requirements • Experience with authorization documentation such as System Security Plans, POA&Ms, continuous monitoring artifacts or related evidence • Experience supporting or managing third-party risk management programs • Experience developing and governing information security policies, standards and procedures • Experience developing or delivering information security training for technical and non-technical audiences • Strong program management skills including planning, scheduling, risk and issue management, dependency tracking and stakeholder communication • Strong documentation governance skills, including managing reviews, approvals, versioning and controlled release • Strong ability to interpret technical and regulatory requirements and translate them into actionable operational guidance • Strong written and verbal communication skills with experience communicating with executives, auditors and technical stakeholders • Ability to work independently, manage multiple concurrent initiatives and influence cross-functional stakeholders without direct authority • Ability and willingness to use AI-assisted tools effectively to support compliance research, documentation, analysis and program execution • Bachelor’s degree in Information Security, Information Systems, Computer Science, Business Administration, Technical Communication or a related field, or equivalent practical experience • At least one relevant professional certification such as PMP, CISSP, CISA, CISM, CRISC, CGRC or ISO 27001 Lead Auditor • Direct experience supporting FedRAMP High or DoD IL5 authorization and continuous monitoring activities • Experience with NIST 800-53 AT controls and security awareness or role-based training programs • Experience with supply chain risk management and vendor security assessments • Familiarity with security contract requirements, data protection addenda and federal flow-down requirements • Experience with phishing simulation platforms, learning management systems or compliance automation platforms • Experience preparing customer-facing compliance or security responses • Familiarity with NIST SP 800-50, NIST SP 800-16 or related security training guidance • Additional security, audit, risk or project management certifications
Responsibilities
• Plan and manage compliance programs across audit cycles, continuous monitoring, POA&M remediation, policy initiatives and supporting documentation • Establish program scope, milestones, dependencies, ownership and reporting across Security, Engineering, DevOps, IT and GRC • Maintain integrated program plans, risks, assumptions, issues and dependencies and escalate blockers with clear recommendations • Coordinate evidence collection, remediation tracking and control-owner activities for compliance and audit initiatives • Maintain working knowledge of frameworks including NIST 800-53, FedRAMP High, DoD IL5, SOC 2, ISO 27001 and PCI DSS • Partner with GRC and ISSO stakeholders on audit readiness, control documentation, remediation and continuous monitoring activities • Monitor evolving regulatory and security requirements and assess potential business and operational impact • Support compliance responses for customers, contracts, security reviews and RFPs • Support and help mature Keeper’s third-party risk management program, including risk-tiered assessments of vendors and business partners • Review vendor security documentation, attestations and supply chain risk factors and provide risk-based recommendations • Partner with Procurement, Legal and business owners on security requirements, contract terms and remediation expectations • Maintain the third-party risk register and track remediation, risk acceptance and program metrics • Author, maintain and govern information security policies, standards, procedures and control narratives • Support System Security Plan documentation and other compliance-related technical documentation • Develop and maintain information security training for employees and role-specific audiences including developers, administrators, privileged users and incident responders • Manage training lifecycle activities including scheduling, learning management system administration, completion tracking, phishing simulation and audit evidence • Develop training materials, job aids, scenarios and assessments in partnership with subject matter experts • Measure and report training effectiveness using completion, assessment and behavioral metrics • Collaborate with Engineering and Product teams to validate technical information and maintain accurate, audit-ready documentation • Translate complex technical and regulatory information into clear documentation for auditors, leadership and internal stakeholders • Mentor team members and cross-functional partners on compliance processes and documentation practices • Use AI-assisted tools such as Claude, ChatGPT or similar platforms to improve regulatory research, documentation, analysis, training development and workflow efficiency
Benefits
• Medical, Dental & Vision (inclusive of domestic partnerships) • Employer Paid Life Insurance & Employee/Spouse/Child Supplemental life • Voluntary Short/Long Term Disability Insurance • 401K (Roth/Traditional) • A generous PTO plan that celebrates your commitment and seniority (including paid Bereavement/Jury Duty, etc) • Above market annual bonuses
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT