Sun Life compliance director overseeing CIRO trade supervision and risk - based monitoring across mutual fund and securities businesses. Leading regulatory oversight, transformation, reporting, and a high - performing compliance team.
About the role
- Government compliance specialist advancing FedRAMP, TX-RAMP, and IRAP programs for BeyondTrust’s identity security SaaS. Automating evidence collection and managing cloud compliance documentation and remediation.
Responsibilities
- Lead technical compliance build activities for FedRAMP 20x readiness, including interpreting KSIs, defining evidence strategies, and coordinating machine-readable compliance outputs
- Own day-to-day management and execution of FedRAMP Moderate/Class C continuous monitoring, including deliverables, POA&M tracking, and deviation requests
- Author and maintain System Security Plans (SSPs), Security Decision Records (SDRs), and other compliance documentation in human- and machine-readable formats
- Manage findings and remediation tracking across government compliance programs
- Coordinate with engineering, security, and cloud operations teams to gather evidence, validate control implementation, and close compliance gaps
- Support GovRAMP, TX-RAMP, IRAP, and other government or public-sector compliance programs
- Manage relationships with Third Party Assessment Organizations (3PAOs) and agency stakeholders
- Track and report government program health
- Monitor FedRAMP policy changes and translate framework evolution into a compliance roadmap
- Automate evidence collection pipelines and indicator health tracking
- Support program management of government compliance workstreams alongside product, security, and engineering teams
Requirements
- Minimum 3 years in FedRAMP program management and technical compliance
- 4–7 years of experience in information security, compliance, or GRC
- Demonstrated ability to run a FedRAMP Moderate program, including SSP authorship, ConMon execution, POA&M management, and assessor coordination
- Deep working knowledge of NIST SP 800-53 controls and practical implementation in cloud environments
- Strong familiarity with FedRAMP 20x concepts, including Key Security Indicators (KSIs), machine-readable evidence frameworks, and continuous assessment models
- Ability to interpret and define KSIs in the context of BeyondTrust's compliance posture
- Ability to coordinate across engineering, infrastructure, legal, and operations teams to gather evidence and drive remediation to closure
- Experience building or supporting automated compliance evidence pipelines
- Experience with GRC tooling for findings management, evidence collection, and program tracking
- Ability to track and manage multiple concurrent workstreams, surface blockers, and maintain delivery cadences
- Strong written and verbal communication skills to translate technical compliance information to varying audiences
Benefits
- Flexibility, trust, and continual learning culture
- Employee support and inclusive workplace culture
- Diversity and inclusion initiatives
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Compliance Manager advising Affirm’s consumer card program on U.S. financial regulations. Reviewing card products, marketing, disputes, and remediation for compliant growth.
Compliance Manager owning risk - based advisory for Affirm Card at Affirm, which provides transparent pay - over - time financial products. Reviewing card compliance, remediation, and regulatory requirements.
Sun Life AVP leading strategic programs, innovation, insights and regulatory operations. Integrating governance, modernization, analytics and change across Canadian wealth and insurance businesses.
Senior Compliance Associate strengthening Coinbase Canada's AML, KYC, sanctions, and FINTRAC reporting program. Managing cases, risk assessments, regulatory filings, and compliance automation for cryptocurrency operations.
Regulatory labeling manager overseeing global IMP labeling for Telix’s precision radiopharmaceuticals. Supporting clinical trials and regulatory compliance for cancer and rare - disease treatments.
Quality and compliance specialist overseeing GMP, accreditation, QMS and pharmacovigilance for Shared Health Diagnostic Services in Manitoba. Ensuring regulatory compliance across provincial healthcare sites.
Compliance officer investigating energy - sector violations for British Columbia’s energy regulator. Conducting inspections, enforcement actions, emergency response, and administrative case preparation.
Senior Compliance Consultant strengthening Sun Life’s Canadian disability - management governance and risk controls. Leading audits, risk validation, business continuity, and compliance initiatives for Group Disability.
Regulatory intelligence leader monitoring global rules for Telix Pharmaceuticals, a precision radiopharmaceutical company. Translating regulatory developments into strategies, communications, and cross - functional actions.