Principal Program Manager, Public Sector Compliance

Tines

2d•$245,000 - $260,000•Remote

About The Position

Tines is seeking a Principal Program Manager, Public Sector Compliance to lead the strategy, coordination, and execution of the company's federal and public sector compliance initiatives. This senior individual contributor role reports to the Director of GRC and is responsible for aligning regulatory priorities with business objectives. The role will own the program for Tines' readiness across U.S. federal, Department of Defense, and SLED environments, encompassing requirements such as FedRAMP, CMMC, IL5, NIST-based frameworks, FISMA, CJIS, GovRAMP, and other agency-specific obligations. This is a highly cross-functional role requiring strategic planning, stakeholder alignment, and execution coordination across Sales, Security, GRC, Engineering, Product, IT, and the public sector legal team. Success depends on balancing regulatory obligations, customer demand, technical feasibility, operational readiness, and commercial priorities to inform compliance decisions and sequencing. The role operates at the program level, defining the roadmap, building governance, driving alignment, managing risk, and ensuring scalable execution.

Requirements

Strong experience leading and coordinating complex public sector compliance and regulatory programs across multiple frameworks and stakeholders within cloud and SaaS environments.
Strong experience across FedRAMP, NIST 800-53, NIST 800-171, CMMC, DoD Impact Levels (IL4/IL5), FISMA, CJIS, and GovRAMP, including an understanding of how these requirements are operationalized.
Ability to connect regulatory and compliance requirements into real-world architecture, control implementation, documentation, and operational processes, including system boundary definition, inheritance models, and shared responsibility considerations.
Strong understanding of how public sector requirements intersect with technical architecture, security controls, legal commitments, customer expectations, and commercial constraints.
Working knowledge of the broader public sector regulatory and procurement landscape, including familiarity with DFARS, GSA schedules, agency procurement processes, and customer-specific flowdown requirements.
Understanding of how legal, regulatory, contractual, and security requirements move through public sector environments, with the ability to identify issues early and partner effectively with Legal and other stakeholders.
Demonstrated ability to operate strategically and drive scalable decisions across multiple regulatory frameworks, business priorities, and customer use cases.
Demonstrated ability to influence and align senior stakeholders across technical and non-technical teams in fast-moving, high-growth environments.
Proven ability to lead complex, cross-functional initiatives across Security, GRC, Engineering, Product, Legal, and Sales.
Exceptional program leadership skills and prioritization skills, including roadmap development, dependency management, risk identification, prioritization, and executive communication.
Applicants must be U.S. citizens and eligible to obtain and maintain a U.S. security clearance.
Work must be performed from within the United States in accordance with customer and contractual requirements.

Nice To Haves

Experience with international or regional compliance frameworks such as IRAP (Australia), UK OFFICIAL / NHS DSPT, or Protected B (Canada) environments.
Experience supporting regional compliance, data residency, sovereignty, or regional deployment requirements within cloud and SaaS environments.
Exposure to government cloud environments (e.g., AWS GovCloud, Azure Government, or similar).
Experience working with public sector procurement processes, including RFPs, security questionnaires, and customer due diligence workflows.
Familiarity with export controls, data handling restrictions, or government-specific data classification requirements.
Experience scaling compliance programs across multiple geographies or regulatory regimes.

Responsibilities

Own and drive Tines’ federal and public sector compliance program across U.S. federal, DoD, and SLED environments.
Define and execute the program roadmap, governance model, and operating cadence, including aligning stakeholders, and driving progress against key milestones.
Translate regulatory, security, contractual, and customer requirements into strategic program plans and coordinated cross-functional initiatives across Security, GRC, Engineering, Product, IT, Legal, Sales, and partner teams.
Partner with Security, Product, and Engineering teams to ensure compliance initiatives align with system architecture, deployment strategy, operational scalability, and customer requirements.
Drive prioritization and decision-making around public sector certifications, attestations, and regulatory initiatives, including evaluating business impact, customer demand, implementation complexity, and organizational readiness.
Serve as a strategic partner and a central coordination point across Legal, Sales, Security, and GRC, helping navigate complex compliance scenarios and ensuring alignment between technical implementation, contractual commitments, and go-to-market strategy.
Identify and actively manage program-level risks, gaps, dependencies, and tradeoffs, escalating with clear, actionable recommendations.
Bring working knowledge of the broader public sector ecosystem, including DFARS, GSA schedules, agency-specific requirements, and flow-down obligations, and help connect those requirements to compliance, product, and commercial decisions.
Monitor evolving federal and public sector regulatory, security, and procurement requirements, and translate new developments into actionable guidance for leadership and internal teams.
Partner closely with Tines’ public sector legal team, which provides subject matter expertise on legal interpretation, contractual commitments, procurement requirements, and regulatory positioning, while you ensure those considerations are incorporated into program execution.