FedRAMP Security Ops Manager

Genesys empowers organizations of all sizes to improve loyalty and business outcomes by creating the best experiences for their customers and employees. Through Genesys Cloud, the AI-powered Experience Orchestration platform, organizations can accelerate growth by delivering empathetic, personalized experiences at scale to drive customer loyalty, workforce engagement, efficiency and operational improvements.

We employ more than 6,000 people across the globe who embrace empathy and cultivate collaboration to succeed. And, while we offer great benefits and perks like larger tech companies, our employees have the independence to make a larger impact on the company and take ownership of their work. Join the team and create the future of customer experience together.

We’re looking for a FedRAMP Security Operations Manager to lead the ongoing operational security, monitoring, and compliance of our FedRAMP-authorized environments. This role sits at the intersection of cybersecurity, compliance, and cloud operations ensuring our platform continuously meets federal security and privacy standards.

You’ll be the key operational owner for maintaining the security posture of our FedRAMP Moderate environment and supporting related frameworks (SOC 2, HIPAA, HITRUST, C5). You’ll work closely with our Security, Cloud Engineering, and GRC teams as well as external assessors and federal partners (Auditors, 3PAOs, and agency stakeholders).

This is a high-impact opportunity to shape the operational maturity of a global SaaS company serving regulated industries and the U.S. federal government.

Key Responsibilities:

• Lead daily security operations for the FedRAMP Moderate environment, ensuring continuous monitoring, incident response, and control enforcement.

• Manage and coordinate POA&M remediation, vulnerability management, and scan review cycles with platform engineering and security operations.

• Oversee continuous monitoring (ConMon) activities — monthly/quarterly deliverables, evidence collection, and reporting to the Authorizing Official (AO) and 3PAO.

• Serve as the primary liaison between internal teams and external partners (3PAO, Coalfire, agency stakeholders) for FedRAMP audits, assessments, and annual renewals.

• Maintain technical information within the System Security Plan (SSP), Policies and Procedures, and related documentation to reflect current system configurations and control implementations.

• Support incident response coordination and ensure after-action reviews, IR testing, and training align with FedRAMP and NIST 800-53 requirements.

• Monitor and report on key security metrics, including vulnerability status, control compliance, and risk posture.

• Ensure integration and alignment of FedRAMP controls with other frameworks (SOC 2, HIPAA, HITRUST, C5, and Protected B).

• Partner with GRC to track and report continuous compliance across multi-framework environments.

• Drive process improvement and automation within FedRAMP operations and evidence management.

Minimum Requirements:

• 5+ years of experience in cybersecurity, compliance operations, or cloud security roles.

• Strong understanding of FedRAMP, NIST 800-53, and continuous monitoring processes.

• Experience managing POA&M tracking, remediation planning, and working with 3PAOs or federal assessors.

• Proven ability to lead or participate in incident response and vulnerability management within cloud or SaaS environments.

• Experience with AWS cloud environments and security tooling (e.g., Tenable, CrowdStrike, Splunk, AWS Security Hub).

• Excellent written communication skills for security documentation, reports, and auditor communication.

• Strong organizational skills and ability to manage multiple concurrent compliance deliverables.

• Demonstrated ability to collaborate cross-functionally with engineering, DevOps, and legal/compliance teams.

• U.S. citizenship required due to federal data handling and authorization processes.

Desirable Skills:

• Experience supporting FedRAMP High, StateRAMP/GovRAMP environments.

• Familiarity with NIST 800-171, ISO 27001, and CMMC frameworks.

• Prior work with 3PAO assessors, or federal agency security teams.

• Knowledge of aut