FMS FedRAMP Program Manager

Solventum•Columbia, DC

15h•Remote

About The Position

At Solventum, we enable better, smarter, safer healthcare to improve lives. As a new company with a long legacy of creating breakthrough solutions for our customers’ toughest challenges, we pioneer game-changing innovations at the intersection of health, material and data science that change patients' lives for the better while enabling healthcare professionals to perform at their best. Because people, and their wellbeing, are at the heart of every scientific advancement we pursue. We partner closely with the brightest minds in healthcare to ensure that every solution we create melds the latest technology with compassion and empathy. Because at Solventum, we never stop solving for you. The Impact You’ll Make in this Role The FedRAMP Program Manager is responsible for leading and managing the Federal Risk and Authorization Management Program (FedRAMP) security compliance program.

Requirements

Bachelor’s Degree or higher AND 7 years of Program Management experience OR High School Diploma/GED AND 11 years of Program Management experience
Understanding FedRAMP, NIST 800-53, FISMA, CMMC and other government security frameworks
Must be able to pass a government background check for a position of T5 Public Trust

Nice To Haves

Master’s degree in health informatics, cybersecurity, or the like from an accredited institution
Experience briefing executive level personnel
Experience within DoD and VA health care environments with direct responsibility for project or program management activities
Ability to multi-task and handle large and sometimes complex workload under time constraints

Responsibilities

Partnering with Security, Business, and R&D and Business Development teams to ensure that RHSP continues to meet and maintain all authorization requirements for use by federal agencies.
Developing and managing FedRAMP project plans, schedules, and deliverables.
Support monitoring and management of associated contracts aligned to FedRAMP authorization to include 3PAO
Monitoring the status of System Security Plans (SSPs), Security and Privacy Policies and Procedures, POA&Ms, SARs, and other required documentation. Partnering with the Security team as necessary to ensure all required updates are made accurately and on time.
Monitoring and managing vulnerabilities in the system, along with related remediation plans and tickets, tracking POA&M items, and ensuring timely resolution of all findings.
Leading and coordinating FedRAMP Continuous Monitoring efforts with the security team and other teams as needed (security, engineering, product, legal). Submitting ConMon artifacts and deliverables to FedRAMP and federal agencies.
Preparing for and facilitating audits, assessments, and significant change in partnership with the security, business, and development teams. Ensuring documentation updates, SCR forms, Security and Privacy Impact Assessments, and Change Control Board reviews are completed accurately and on time.
Interfacing with external audit teams to plan and coordinate audits, including evidence collection, document delivery, penetration testing, interviews, and any additional testing.
Acting as the central liaison between Solventum teams and federal agencies (including the FedRAMP PMO). Facilitating conversations and resolving any issues to ensure continued authorization.
Educating internal stakeholders on FedRAMP requirements and ensuring continued compliance with FedRAMP and federal agency authorization requirements.
Maintaining up-to-date knowledge of FedRAMP and agency authorization requirements and processes. Following all updates to FedRAMP, NIST 800-53, FISMA, CMMC, among others and government security frameworks.
Other assigned duties aligned to cybersecurity of our federal contracts and solutions
Corporate policies, procedures and security standards are complied with while performing assigned duties.