FEDRAMP Program Manager

Docebo

1d

About The Position

The FEDRAMP Program Manager is responsible for leading Docebo’s FedRAMP authorization journey and maintaining ongoing compliance with the Federal Risk and Authorization Management Program (FedRAMP) framework.
This role owns the end-to-end FedRAMP program lifecycle, from readiness assessment and gap remediation through ATO (Authority to Operate) and continuous monitoring, ensuring alignment across Product, Engineering, Security, Compliance, Legal, Infrastructure, and Go-to-Market teams.
This is a highly cross-functional and execution-heavy role requiring deep regulatory knowledge, operational rigor, and strong executive stakeholder management.

Requirements

• Bachelor’s degree in Business, Computer Science, Engineering, Human-Computer Interaction, or a related field; or equivalent professional experience.
• 5+ years working as a Program Manager in a Agile SDLC environment.
• 3+ years experience working with a FedRAMP/GovRAMP ATO.
• Strong knowledge of NIST800-53, Risk Management Framework (RMF), continuos monitoring requirements
• AWS / Public Cloud infrastructure experience
• Proven ability to manage complex, cross-functional programs
• Detail oriented, strong leader, good communicator, ability to overcome obstacles
• Excellent executive communication skills

Nice To Haves

• PMP, CSM, or similar certification a plus.

Responsibilities

• Own and orchestrate the end-to-end FedRAMP roadmap, defining key milestones, managing dependencies, and controlling the critical path.
• Lead readiness assessments, gap analyses, and remediation planning to ensure timely and audit-ready execution.
• Collaborate with executive leadership to shape the overall FedRAMP strategy, while taking full ownership of the business case, governance framework, and program operating model.
• Lead end-to-end preparation for FedRAMP authorization (ATO), partnering closely with Third-Party Assessment Organizations (3PAOs) to ensure a smooth and successful evaluation process.
• Ensure the effective implementation of required security controls across Product, Infrastructure, and Security, and establish robust continuous monitoring processes to maintain audit readiness and ongoing compliance post-authorization
• Partner closely with Engineering and DevOps to drive infrastructure hardening initiatives, collaborate with Security on control implementation, and align with Product to embed secure development lifecycle practices.
• Engage Legal to address contractual, regulatory, and compliance implications.
• Support Sales and Go-to-Market teams to enable public sector opportunities and ensure compliance positioning is effectively translated into revenue impact.
• Serve as the single-threaded program leader, orchestrating alignment and execution across all stakeholders
• Proactively identify compliance gaps and operational risks that may impact FedRAMP authorization or ongoing adherence.
• Maintain and continuously update the risk register, defining clear mitigation and remediation plans with accountable owners.
• Provide regular executive-level reporting on program progress, risk exposure, and overall compliance posture.
• Ensure alignment and consistency with broader security and compliance frameworks (e.g., SOC 2, ISO 27001, NIST 800-53).
• Design and implement scalable, repeatable processes for evidence gathering, documentation management, and compliance reporting.
• Promote and enable automation of security and compliance controls wherever feasible to improve efficiency and reduce manual overhead.
• Track and report on key performance indicators, including: Percentage of control implementation coverage Time to remediate audit findings POA&M backlog and aging trends Adherence to continuous monitoring SLAs
• Act as the primary point of contact for all FedRAMP-related initiatives, communications, and escalations across the organization.
• Support Sales and Go-to-Market teams throughout the public sector sales cycle, providing subject matter expertise to position the FedRAMP offering effectively.
• Clearly articulate the differences between the FedRAMP-authorized environment and the commercial version of the product, ensuring accurate expectation setting with prospects and customers.
• Partner with Sales, Legal, and Security during RFPs, security reviews, and due diligence processes to strengthen credibility and accelerate deal closure.

Benefits

• Own a piece of Docebo through our Employee Share Purchase Plan (ESPP) at a 15% discount, plus a competitive compensation package.
• You’ll get access to health benefits, so you can get the care you need when you need it.
• Rest and recharge with paid vacation days, two company-wide Docebo Days, floating holidays for cultural celebrations, and your birthday off!
• We provide coverage offering you time with your little one(s) so you can soak up all those precious moments. Fun fact: we had 30 Docebian babies join the family in 2025!
• Connect with global communities through our Employee Resource Groups (including PRIDE, DWA, BIDOC, and Green Ambassadors) and company-wide events that keep the fun rolling all year long.
• Kick off your weekends early with 4:30 PM Fridays (eligible employees only).
• Look fresh with your new-hire swag and enjoy access to our internal swag store to stay branded year-round.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager