> Markdown version of [/jobs/ext/3080358-program-manager-it-governance-and-compliance](https://www.wearedevelopers.com/jobs/ext/3080358-program-manager-it-governance-and-compliance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Program Manager, IT Governance and Compliance - **Company:** True Anomaly - **Location:** Denver, CO, United States - **Experience:** Expert - **Salary:** $135,000.0 - $215,000.0 - **Contract:** Permanent contract - **Skills:** Agile Methodology, Confluence, JIRA, Microsoft Azure, Cyber Security, Information Systems, Information Technology Operations, Information Systems Security Architecture Professional, Project Management Software, Microsoft Project, Scrum Methodology, Cloud Platform System, Documentation System, Atlassian Tools, RSA Archer Platform - **Published:** September 25, 2026 - **Apply:** https://www.builtincolorado.com/job/senior-program-manager-it-governance-and-compliance/11356557?handler=ApplyRedirect ## About the Role We are seeking an experienced Senior Program Manager to lead and coordinate cross-functional GRC initiatives across our organization. The ideal candidate will have demonstrated success in managing certification programs such as DoD RMF IL5 and IL6, CMMC and other compliance frameworks, while overseeing program delivery through structured KPI tracking, cross-team milestone management, and dashboard-driven reporting. The candidate must be comfortable operating in fast-paced, regulated environments and be able to drive alignment across engineering, security, legal, compliance, and business operations teams. This is a critical role that ensures successful execution and continuous visibility of compliance initiatives for both internal leadership and external partners, including government and commercial stakeholders., * 7+ years of program or project management experience in technology or cybersecurity-related roles, with at least 5 years in GRC or compliance environments. * PMP (Project Management Professional) * Proven experience managing certification initiatives involving CMMC, DoD RMF IL5 and IL6. * Demonstrated ability to manage multi-disciplinary teams and complex project interdependencies across business and technical stakeholders. * Strong proficiency in program management and documentation tools: * Jira and Confluence (Atlassian suite) * MS Project or similar PM software * Excellent communication and stakeholder management skills, with a strong ability to simplify complexity and drive results across levels of the organization. Preferred Qualifications * Professional certifications such as: * Certified Information Systems Auditor (CISA) * Certified in Risk and Information Systems Control (CRISC) * Certified ScrumMaster (CSM) or Agile PM certification * Certified Information Systems Security Professional (CISSP) * Experience with cloud environments (e.g., Azure Government) and understanding of government cloud authorization processes. * Familiarity with Agile/Scrum and hybrid project delivery models. * GRC platforms (e.g., Diligent), * Ability to maintain or obtain TS//SCI clearance ## Description * Lead GRC-related program tracking from inception through delivery across multiple frameworks (e.g., DoD RMF IL5 and IL6, CMMC). * Build and maintain program dashboards and executive reports using tools such as Jira, Confluence, GRC platforms (e.g., Diligent), and MS Project to provide transparency across teams and to leadership. * Coordinate and manage timelines, resources, and deliverables across security operations, product compliance, IT operations, and external consultants. * Track program status against milestones, identify risks and dependencies, and drive timely mitigation plans and course correction as needed. * Define and monitor Key Performance Indicators (KPIs) for compliance programs and team performance, ensuring successful execution of tasks and ongoing audit readiness. * Serve as the primary point of contact for internal stakeholders, executive leadership, and external assessors or certification bodies. * Support compliance readiness activities including pre-assessment readiness, audit facilitation, evidence collection, and post-audit remediation planning. * Continuously improve project workflows, team coordination, and reporting processes for scalable and repeatable program management. ## Related Videos - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [42 x 2 Canvases Later: Two Years, Two Minds, Many Lessons](https://www.wearedevelopers.com/videos/1458-42-x-2-canvases-later-two-years-two-minds-many-lessons) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [A Founder's Journey : From Startup Chaos to Purposeful Growth](https://www.wearedevelopers.com/videos/1926-a-founder-s-journey-from-startup-chaos-to-purposeful-growth) - [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Now is the time for industrialized software development](https://www.wearedevelopers.com/magazine/601-now-is-the-time-for-industrialized-software-development) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)