Apply on Employer Site

CoreWeave · 2 days ago

Federal Compliance, Security Technical Program Manager

San Francisco, CA

Full-time

Hybrid

Senior Level

$143K/yr - $210K/yr

6+ years exp

CoreWeave is The Essential Cloud for AI™, delivering a platform of technology and tools for innovators. The Federal Compliance, Security Technical Program Manager will lead governance and compliance programs to align CoreWeave’s offerings with U.S. government security standards, bridging the gap between compliance and engineering.

Artificial Intelligence (AI)Cloud ComputingCloud InfrastructureInformation TechnologyMachine Learning

No H1B

U.S. Citizen Only

Responsibilities

Leading the governance and compliance programs that align CoreWeave’s cloud infrastructure and product offerings to U.S. government security standards

Translating frameworks like FedRAMP, NIST RMF, and DoD SRG into actionable technical requirements

Managing FedRAMP Continuous Monitoring (ConMon) deliverables, vulnerability and patch SLAs, and Significant Change Requests

Authoring System Security Plans (SSP), managing POA&Ms, and coordinating assessments with 3PAOs and agency representatives

Qualification

FedRAMPNIST RMFSystem Security PlansMulti-cloud environmentsCISSPCISANIST SP 800-53Technical literacyKubernetesContainer securityOSCAL documentationDoD IL4/IL5 workloadsCISMCMMC RP

Required

6+ years of experience in cybersecurity, audit, or compliance, including 4+ years directly supporting federal security programs (FedRAMP High/Moderate, NIST RMF)

Proven experience authoring System Security Plans (SSP), managing POA&Ms, and coordinating assessments with 3PAOs and agency representatives

Deep understanding of NIST SP 800-53 Rev. 5, SP 800-37 (RMF), and SP 800-137 (ISCM), with the ability to apply controls within modern cloud architectures

Demonstrated experience managing FedRAMP Continuous Monitoring (ConMon) deliverables, vulnerability and patch SLAs, and Significant Change Requests

Hands-on experience working in multi-cloud environments (AWS GovCloud, Azure Government, or Google Public Sector)

Strong technical literacy with the ability to translate compliance requirements into engineering tasks, architecture documentation, and control validation

Certifications: CISSP or CISA (required)