This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Cybersecurity Program Manager based in Canada.

We are seeking an experienced cybersecurity leader to oversee security governance, compliance, audit readiness, and continuous monitoring across complex public sector cloud environments in Canada and the United States. You will coordinate critical programs supporting Government of Canada Protected B services, FedRAMP Moderate, and DoD IL4 environments hosted on AWS GovCloud. Working across cybersecurity, engineering, cloud operations, legal, product, and business teams, you will turn regulatory and authorization commitments into transparent operational plans and measurable outcomes. You will drive assessment readiness, vulnerability remediation, evidence management, and risk reporting while maintaining strong accountability across control owners. This role offers the opportunity to shape and strengthen a global cybersecurity program in highly regulated environments. You will also serve as a trusted point of coordination for executives, customers, external assessors, and government stakeholders.

Accountabilities:

- Own and manage the integrated cybersecurity program plan, including governance routines, milestones, dependencies, risks, and executive reporting for Protected B, FedRAMP Moderate, and DoD IL4 initiatives.

- Serve as a senior program liaison across cybersecurity, quality and risk management, cloud operations, engineering, product, legal, sales, customer success, external assessors, government sponsors, and authorizing organizations.

- Establish and maintain clear RACI assignments, control-owner responsibilities, backup coverage, decision logs,



risk acceptance records, and escalation processes.

- Translate regulatory, authorization, contractual, and customer requirements into actionable plans, assigned responsibilities, and measurable operational outcomes.

- Lead cybersecurity program management for existing Protected B services and coordinate the development, readiness, and operationalization of new Protected B solutions.

- Coordinate alignment with Government of Canada security expectations, including ITSG-33 risk management practices, applicable cloud security controls, assessment and authorization activities, and continuous monitoring.

- Support Canadian security responsibilities through government and customer communications, evidence coordination, control ownership, personnel and access requirements, security documentation, and assessment activities.

- Coordinate data-handling, access, data residency, subcontractor, incident management, and shared-responsibility requirements for Protected B services.

- Coordinate FedRAMP Moderate authorization maintenance, annual assessments, control implementation reviews, evidence collection, assessor interviews, continuous monitoring deliverables, POA&M; updates, significant-change activities, and customer assurance requests.

- Maintain oversight of FedRAMP authorization documentation, including the authorization boundary,



System Security Plan (SSP), control implementation statements, policies, procedures, inventories, diagrams, customer responsibility documentation, and supporting evidence.

- Ensure findings, risks, and compliance obligations have accountable owners, are tracked through resolution, and are escalated when authorization commitments are at risk.

- Lead program coordination for the DoD IL4 GovCloud environment, including DISA and mission-owner engagements, authorization maintenance, eMASS package coordination, annual third-party assessment organization (3PAO) assessments, continuous monitoring, and customer onboarding readiness.

- Coordinate responses to DISA requests, corrective action plans, authorization conditions or restrictions, follow-up questions, evidence requests, and remediation commitments, maintaining complete records of decisions, submissions, approvals, and deadlines.

- Oversee vulnerability governance across operating systems, containers, repositories, base images, applications, and infrastructure. Maintain assigned owners, remediation plans, recurring dashboards, POA&M; traceability, deviation and risk acceptance workflows, and supporting evidence.

- Ensure vulnerability reporting clearly communicates out-of-SLA issues, external or customer-facing exposure, authentication and authorization impacts, remediation progress, and residual risk.

- Coordinate GovCloud audit readiness, including control-owner assignments, SSP and IL4 addendum reviews, evidence handling, interview preparation, system demonstrations, CUI-aware screen sharing, assessor follow-ups, and final evidence submissions.

- Maintain integrated ris

📌 Senior Cybersecurity Program Manager (Canada)
🏢 Jobgether
📍 Canada