FedRAMP Security Ops Manager

Genesys empowers organizations of all sizes to improve loyalty and business outcomes by creating the best experiences for their customers and employees. Through Genesys Cloud, the AI-powered Experience Orchestration platform, organizations can accelerate growth by delivering empathetic, personalized experiences at scale to drive customer loyalty, workforce engagement, efficiency and operational improvements.

We employ more than 6,000 people across the globe who embrace empathy and cultivate collaboration to succeed. And, while we offer great benefits and perks like larger tech companies, our employees have the independence to make a larger impact on the company and take ownership of their work. Join the team and create the future of customer experience together.

We're looking for a FedRAMP Security Operations Manager to lead the ongoing operational security, monitoring, and compliance of our FedRAMP-authorized environments. This role sits at the intersection of cybersecurity, compliance, and cloud operations ensuring our platform continuously meets federal security and privacy standards.

You'll be the key operational owner for maintaining the security posture of our FedRAMP Moderate environment and supporting related frameworks (SOC 2, HIPAA, HITRUST, C5). You'll work closely with our Security, Cloud Engineering, and GRC teams as well as external assessors and federal partners (Auditors, 3PAOs, and agency stakeholders).

This is a high-impact opportunity to shape the operational maturity of a global SaaS company serving regulated industries and the U.S. federal government.

• Lead daily security operations for the FedRAMP Moderate environment, ensuring continuous monitoring, incident response, and control enforcement.

• Manage and coordinate POA&M remediation, vulnerability management, and scan review cycles with platform engineering and security operations.

• Oversee continuous monitoring (ConMon) activities - monthly/quarterly deliverables, evidence collection, and reporting to the Authorizing Official (AO) and 3PAO.

• Serve as the primary liaison between internal teams and external partners (3PAO, Coalfire, agency stakeholders) for FedRAMP audits, assessments, and annual renewals.

• Maintain technical information within the System Security Plan (SSP), Policies and Procedures, and related documentation to reflect current system configurations and control implementations.

• Support incident response coordination and ensure after-action reviews, IR testing, and training align with FedRAMP and NIST 800-53 requirements.

• Monitor and report on key security metrics, including vulnerability status, control compliance, and risk posture.

• Ensure integration and alignment of FedRAMP controls with other frameworks (SOC 2, HIPAA, HITRUST, C5, and Protected B).

• Partner with GRC to track and report continuous compliance across multi-framework environments.

• Drive process improvement and automation within FedRAMP operations and evidence management.

• 5+ years of experience in cybersecurity, compliance operations, or cloud security roles.

• Strong understanding of FedRAMP, NIST 800-53, and continuous monitoring processes.

• Experience managing POA&M tracking, remediation planning, and working with 3PAOs or federal assessors.

• Proven ability to lead or participate in incident response and vulnerability management within cloud or SaaS environments.

• Experience with AWS cloud environments and security tooling (e.g., Tenable, CrowdStrike, Splunk, AWS Security Hub).

• Excellent written communication skills for security documentation, reports, and auditor communication.

• Strong organizational skills and ability to manage multiple concurrent compliance deliverables.

• Demonstrated ability to collaborate cross-functionally with engineering, DevOps, and legal/compliance teams.

• U.S. citizenship required due to federal data handling and authorization processes.

• Experience supporting FedRAMP High, StateRAMP/GovRAMP environments.

• Familiarity with NIST 800-171, ISO 27001, and CMMC frameworks.

• Prior work with 3PAO assessors, or federal agency security teams.

• Knowledge of automation for evidence collection and compliance tracking.

• Certifications such as CISSP, CAP, CISM, or CCSP.

• Understanding of government cloud security policies and TIC 3.0 architecture.

Compensation:

This role has a market-competitive salary with an anticipated base compensation range listed below. Actual salaries will vary depending on a candidate's experience, qualifications, skills, and location. This role might also be eligible for a commission or performance-based bonus opportunities.

Benefits:

• Medical, Dental, and Vision Insurance.

• Telehealth coverage

• Flexible work schedules and work from home opportunities

• Development and career growth opportunities

• Open Time Off in addition to 10 paid holidays

• 401(k) matching program

• Adoption Assistance

• Fertility treatments

Click here to view a summary overview of our Benefits.

If a Genesys employee referred you, please use the link they sent you to apply.

About Genesys:

Genesys empowers more than 8,000 organizations worldwide to create the best customer and employee experiences. With agentic AI at its core, Genesys Cloud is the AI-Powered Experience Orchestration platform that connects people, systems, data and AI across the enterprise. As a result, organizations can drive customer loyalty, growth and retention while increasing operational efficiency and teamwork across human and AI workforces. To learn more, visitwww.genesys.com.

Reasonable Accommodations:

If you require a reasonable accommodation to complete any part of the application process, or are limited in your ability to access or use this online application and need an alternative method for applying, you or someone you know may contact us at reasonable.accommodations@genesys.com.

You can expect a response within 24-48 hours. To help us provide the best support, click the email link above to open a pre-filled message and complete the requested information before sending. If you have any questions, please include them in your email.

This email is intended to support job seekers requesting accommodations. Messages unrelated to accommodation-such as application follow-ups or resume submissions-may not receive a response.

Genesys is an equal opportunity employer committed to fairness in the workplace. We evaluate qualified applicants without regard to race, color, age, religion, sex, sexual orientation, gender identity or expression,marital status, domestic partner status,national origin, genetics, disability,military andveteran status, and other protected characteristics.

Please note that recruiters will never ask for sensitive personal or financial information during the application phase.