Compliance Program Manager
- Compensation
- Not disclosed
- Location
- United States
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- Not specified
- Category
- Project management
- Posted
Skills
Nice to have
- 3+ years of program or project management experience supporting security, compliance, infrastructure, engineering, or technology operations teams, or equivalent education or training
- Demonstrated experience establishing program management standards, processes, and tooling in an environment where none previously existed
- Direct experience with InfoSec and/or regulatory compliance frameworks such as CJIS, HIPAA, GovRAMP/FedRAMP, SOC 2, or PCI-DSS
- Working knowledge of Criminal Justice Information Services (CJIS) requirements, including how CJIS obligations translate into technical, operational, and personnel controls
- Familiarity with GovRAMP (formerly StateRAMP) and FedRAMP preferred; exposure to SOC 2, NIST, or comparable frameworks is a plus
- Experience coordinating work across security and engineering functions such as DevOps, SRE, platform, or infrastructure teams
- Proven ability to build and maintain trackers, dashboards, and reporting in project management, ticketing, documentation, or compliance-tracking tools
- Experience applying automation or AI-assisted tools to streamline tracking, documentation, and reporting workflows preferred
- Ability to influence, align, and drive accountability across teams without direct authority, including mediating competing priorities between functions
- Strong organizational skills and attention to detail, with the ability to manage multiple programs, deadlines, and stakeholders while maintaining accurate, audit-ready records
- Effective written and verbal communication skills, with the ability to translate between technical and non-technical audiences and present status clearly to leadership
- Bachelor's degree preferred, not required; equivalent experience or training will be considered. PMP, CAPM, CSM, or similar certification preferred
- Familiarity with software products, SaaS environments, or technology organizations preferred
- AI-forward mindset with a demonstrated ability to leverage AI tools to improve productivity, decision-making, and work quality.
- Demonstrated ability to effectively use AI tools to enhance productivity and outcomes.
Full description
Your Impact
As the Compliance Program Manager, you'll bring structure, clarity, and momentum to CivicPlus R&D. You'll define how work is requested, prioritized, tracked, and reported across teams; build the trackers, dashboards, documentation, and AI-assisted workflows that replace ad hoc spreadsheets; and coordinate compliance and engineering program activities across multiple departments. You'll also serve as the primary point of contact for external audits and lead internal readiness assessments, helping ensure our engineering and operational practices align with strict data protection standards.
Success in this role means documented program standards adopted by R&D, a single reliable source of truth on program status and commitments, clear ownership and reduced friction between security and engineering, and on-time completion of compliance and engineering program milestones.
About CivicPlus
At CivicPlus, we strive to bring our company vision to life through innovation and collaboration. Supported by approachable leadership and transparent communication, we're empowered to make an impact on local government and the residents they serve. Grow your career alongside great people, where authenticity is welcome, successes are celebrated, and potential is nurtured.
What You'll Do
As a Compliance Program Manager, you will:
- Establish, document, and own program management standards for R&D, including work intake, prioritization, status reporting, escalation paths, and change management
- Build and maintain a single source of truth for program status, consolidating scattered spreadsheets and one-off trackers into consistent tooling and leadership-ready dashboards
- Drive alignment across R&D teams on shared priorities, dependencies, and ownership, facilitating cross-functional working sessions and driving action items to closure
- Introduce automation and AI-assisted workflows to reduce manual effort in tracking, documentation, evidence collection, and status reporting
- Own the program calendar, including audits, attestations, remediation deadlines, training renewals, and infrastructure and release milestones, with regular status reporting to leadership
- Coordinate compliance program activities for applicable CivicPlus products, tracking requirements, owners, deadlines, gaps, remediation activities, and ongoing obligations
- Maintain compliance and program documentation, policies, procedures, evidence, and records in an organized, audit-ready manner
- Track findings, exceptions, risks, and remediation plans, following up with owners and escalating blockers when appropriate
- Support audits, third-party assessments, customer security questionnaires, and RFP responses by coordinating documentation and gathering evidence across teams