Product Compliance Manager

Fortinet Federal•Reston, VA

About The Position

Objective In this role you will play a critical role in ensuring that Fortinet Federal’s security products meet all necessary compliance requirements for the US Federal government. You will act as the primary coordinator and advocate for compliance efforts, working closely with external contractors, internal teams, and government agencies to achieve certifications and maintain ongoing compliance. You will also serve as a key point of contact for compliance-related inquiries, providing communications and updates to internal stakeholders and external partners. Responsibilities Drive efforts to achieve compliance for company products with applicable US Federal government standards, including Security Requirements Guide (SRG), Cybersecurity Risk Management Construct (CSRMC), and Security Technical Implementation Guide (STIG). Serve as the primary point of contact for compliance-related inquiries from government agencies, customers, and partners, relaying information to legal or contractors as needed. Coordinate and oversee external contractors performing compliance testing, documentation, and certification efforts. Review and validate compliance documentation provided by contractors to ensure consistency, completeness, and adherence to regulatory requirements. Manage updates to applicable government systems, ensuring accurate and timely submission of compliance-related information. Work closely with legal teams to address compliance-related issues and provide updates to sales teams and partners. Source, evaluate, scope, and manage competitive bids for compliance contractors, while also working with pre-selected vendors. Create, maintain, and communicate a Federal Compliance Catalogue of information to Fortinet Federal internally and valued partners. Collaborate with Technical Project Manager(s) to provide regular updates on compliance progress, risks, schedule delays, and next steps. Travel Coordination: Travel as needed to the parent company’s office, Federal HQ, and major contractors to support compliance efforts and maintain relationships.

Requirements

Minimum of 5 years of direct experience with US Government and/or Department of the War ( DoW ) security compliance; including compliance testing, reporting, and certification processes.
Familiarity with US Federal government compliance standards, including SRG, CSRMC, STIG, and other applicable frameworks.
Understanding of compliance processes and publishing requirements.
Exceptional organizational skills, attention to detail, and the ability to manage multiple projects and deadlines simultaneously.
Strong written communication skills for creating and validating complex technical documentation.
Clear verbal communication skills for virtual and in-person presentations and stakeholder updates.
Ability to coordinate and manage external contractors and vendors effectively.
Must be able to obtain a US Federal government security clearance.
Willingness to travel up to 8 times per year within CONUS as needed.
Bachelor’s degree (BS/BA) in a relevant field such as Computer Science, Cybersecurity, Business Administration, or a related discipline.

Nice To Haves

Existing relationships with compliance contractors and vendors are a plus.

Responsibilities

Drive efforts to achieve compliance for company products with applicable US Federal government standards, including Security Requirements Guide (SRG), Cybersecurity Risk Management Construct (CSRMC), and Security Technical Implementation Guide (STIG.
Serve as the primary point of contact for compliance-related inquiries from government agencies, customers, and partners, relaying information to legal or contractors as needed.
Coordinate and oversee external contractors performing compliance testing, documentation, and certification efforts.
Review and validate compliance documentation provided by contractors to ensure consistency, completeness, and adherence to regulatory requirements.
Manage updates to applicable government systems, ensuring accurate and timely submission of compliance-related information.
Work closely with legal teams to address compliance-related issues and provide updates to sales teams and partners.
Source, evaluate, scope, and manage competitive bids for compliance contractors, while also working with pre-selected vendors.
Create, maintain, and communicate a Federal Compliance Catalogue of information to Fortinet Federal internally and valued partners.
Collaborate with Technical Project Manager(s) to provide regular updates on compliance progress, risks, schedule delays, and next steps.
Travel Coordination: Travel as needed to the parent company’s office, Federal HQ, and major contractors to support compliance efforts and maintain relationships.