[Hiring] FMS FedRAMP Program Manager @SOLVENTUM

Role Description

The FedRAMP Program Manager is responsible for leading and managing the Federal Risk and Authorization Management Program (FedRAMP) security compliance program.

• Partnering with Security, Business, and R&D and Business Development teams to ensure that RHSP continues to meet and maintain all authorization requirements for use by federal agencies.
• Developing and managing FedRAMP project plans, schedules, and deliverables.
• Support monitoring and management of associated contracts aligned to FedRAMP authorization to include 3PAO.
• Monitoring the status of System Security Plans (SSPs), Security and Privacy Policies and Procedures, POA&Ms, SARs, and other required documentation. Partnering with the Security team as necessary to ensure all required updates are made accurately and on time.
• Monitoring and managing vulnerabilities in the system, along with related remediation plans and tickets, tracking POA&M items, and ensuring timely resolution of all findings.
• Leading and coordinating FedRAMP Continuous Monitoring efforts with the security team and other teams as needed (security, engineering, product, legal). Submitting ConMon artifacts and deliverables to FedRAMP and federal agencies.
• Preparing for and facilitating audits, assessments, and significant change in partnership with the security, business, and development teams. Ensuring documentation updates, SCR forms, Security and Privacy Impact Assessments, and Change Control Board reviews are completed accurately and on time.
• Interfacing with external audit teams to plan and coordinate audits, including evidence collection, document delivery, penetration testing, interviews, and any additional testing.
• Acting as the central liaison between Solventum teams and federal agencies (including the FedRAMP PMO). Facilitating conversations and resolving any issues to ensure continued authorization.
• Educating internal stakeholders on FedRAMP requirements and ensuring continued compliance with FedRAMP and federal agency authorization requirements.
• Maintaining up-to-date knowledge of FedRAMP and agency authorization requirements and processes. Following all updates to FedRAMP, NIST 800-53, FISMA, CMMC, among others and government security frameworks.
• Other assigned duties aligned to cybersecurity of our federal contracts and solutions.

Qualifications

• Bachelor’s Degree or higher AND 7 years of Program Management experience OR High School Diploma/GED AND 11 years of Program Management experience.
• Understanding FedRAMP, NIST 800-53, FISMA, CMMC and other government security frameworks.
• Must be able to pass a government background check for a position of T5 Public Trust.

Requirements

• Master’s degree in health informatics, cybersecurity, or the like from an accredited institution.
• Experience briefing executive level personnel.
• Experience within DoD and VA health care environments with direct responsibility for project or program management activities.
• Ability to multi-task and handle large and sometimes complex workload under time constraints.
• Travel: 20%.
• Relocation Assistance: is not authorized.
• Must be legally authorized to work in country of employment without sponsorship for employment visa status (e.g., H1B status).

Benefits

• Competitive pay and benefits.
• Medical, Dental & Vision.
• Health Savings Accounts.
• Health Care & Dependent Care Flexible Spending Accounts.
• Disability Benefits.
• Life Insurance.
• Voluntary Benefits.
• Paid Absences.
• Retirement Benefits.