Compliance Program Manager

CivicPlus, LLC

35d•$104,400 - $156,600

About The Position

As the Compliance Program Manager, you'll bring structure, clarity, and momentum to CivicPlus R&D. You'll define how work is requested, prioritized, tracked, and reported across teams; build the trackers, dashboards, documentation, and AI-assisted workflows that replace ad hoc spreadsheets; and coordinate compliance and engineering program activities across multiple departments. You'll also serve as the primary point of contact for external audits and lead internal readiness assessments, helping ensure our engineering and operational practices align with strict data protection standards. Success in this role means documented program standards adopted by R&D, a single reliable source of truth on program status and commitments, clear ownership and reduced friction between security and engineering, and on-time completion of compliance and engineering program milestones. At CivicPlus, we strive to bring our company vision to life through innovation and collaboration. Supported by approachable leadership and transparent communication, we're empowered to make an impact on local government and the residents they serve. Grow your career alongside great people, where authenticity is welcome, successes are celebrated, and potential is nurtured.

Requirements

3+ years of program or project management experience supporting security, compliance, infrastructure, engineering, or technology operations teams, or equivalent education or training
Demonstrated experience establishing program management standards, processes, and tooling in an environment where none previously existed
Direct experience with InfoSec and/or regulatory compliance frameworks such as CJIS, HIPAA, GovRAMP/FedRAMP, SOC 2, or PCI-DSS
Working knowledge of Criminal Justice Information Services (CJIS) requirements, including how CJIS obligations translate into technical, operational, and personnel controls
Familiarity with GovRAMP (formerly StateRAMP) and FedRAMP preferred; exposure to SOC 2, NIST, or comparable frameworks is a plus
Experience coordinating work across security and engineering functions such as DevOps, SRE, platform, or infrastructure teams
Proven ability to build and maintain trackers, dashboards, and reporting in project management, ticketing, documentation, or compliance-tracking tools
Experience applying automation or AI-assisted tools to streamline tracking, documentation, and reporting workflows preferred
Ability to influence, align, and drive accountability across teams without direct authority, including mediating competing priorities between functions
Strong organizational skills and attention to detail, with the ability to manage multiple programs, deadlines, and stakeholders while maintaining accurate, audit-ready records
Effective written and verbal communication skills, with the ability to translate between technical and non-technical audiences and present status clearly to leadership
Bachelor's degree preferred, not required; equivalent experience or training will be considered. PMP, CAPM, CSM, or similar certification preferred
Familiarity with software products, SaaS environments, or technology organizations preferred
AI-forward mindset with a demonstrated ability to leverage AI tools to improve productivity, decision-making, and work quality.
Demonstrated ability to effectively use AI tools to enhance productivity and outcomes.

Responsibilities

Establish, document, and own program management standards for R&D, including work intake, prioritization, status reporting, escalation paths, and change management
Build and maintain a single source of truth for program status, consolidating scattered spreadsheets and one-off trackers into consistent tooling and leadership-ready dashboards
Drive alignment across R&D teams on shared priorities, dependencies, and ownership, facilitating cross-functional working sessions and driving action items to closure
Introduce automation and AI-assisted workflows to reduce manual effort in tracking, documentation, evidence collection, and status reporting
Own the program calendar, including audits, attestations, remediation deadlines, training renewals, and infrastructure and release milestones, with regular status reporting to leadership
Coordinate compliance program activities for applicable CivicPlus products, tracking requirements, owners, deadlines, gaps, remediation activities, and ongoing obligations
Maintain compliance and program documentation, policies, procedures, evidence, and records in an organized, audit-ready manner
Track findings, exceptions, risks, and remediation plans, following up with owners and escalating blockers when appropriate
Support audits, third-party assessments, customer security questionnaires, and RFP responses by coordinating documentation and gathering evidence across teams
Monitor changes to applicable security and compliance requirements and work with stakeholders to evaluate and address their impact on CivicPlus products and processes
Partner with R&D teams to translate complex regulatory and security standards into clear, actionable technical and operational requirements
Oversee routine compliance checks for technical teams, including periodic access reviews and system configuration verification
Develop and continuously improve repeatable internal processes so program practices persist beyond any single initiative or team member
Serve as the central point of contact for internal program coordination, escalating technical, legal, security, or policy questions to the appropriate subject matter experts