Senior Program Manager - Federal Programs

Supports FedRAMP, DoD Impact Levels, and StateRAMP compliance programs in accordance with the NIST, DOD SRG and other applicable guidance or requirements:Assists with the overall execution of compliance programs aimed at achieving and maintaining industry accreditations and certifications such as FedRAMP,  DoD IL5 and StateRamp.Demonstrates domain expertise in FedRAMP (Federal Risk Authorization Management Program), NIST SP 800-53 Rev 5, NIST SP 800-37, DoD CC SRG, NIST RMF (Risk Management Framework), supporting Systems Security Assessment and Authorization (SA&A) for Federal Agencies, NIST FIPS 199 & Data Classification.Provides support to the compliance audit and assessment efforts to include with external third-party auditors with evidence collection and upload, auditor interview support, and auditor walk-throughs of policies, procedures, and related compliance and security documentation through various intranet portals and sites.Assists with performing and managing security impact analyses (SIAs) and mapping technical implementation of changes to impacted NIST security controls.  Performs cross-functional interviews with Operations and SecOps teams to determine if system security controls are implemented correctly, operating as intended, and producing the desired outcome. Demonstrates a strong working knowledge of FedRAMP management, operational and technical security control and supplemental guidance. Has a strong track record and experience writing security control implementation details in the System Security Plan package.Demonstrates the capability to coordinate with the Zscaler Third Party Assessment Organization (3PAO) in support of security control assessments.Also support Zscaler's Compliance programs in both Public and Private sectors aligned with FedRAMP, SOC 2, CSA STAR and ISMS aligned with ISO27001, ISO 27017, ISO27701 and ISO 27018 certifications.