Velsera

Program Manager

• Support definition and tracking of priorities within assigned program(s) in collaboration with Program Managers, clients, and internal stakeholders
• Help drive progress by tracking action items, identifying risks or blockers, and supporting clear communication across cross-functional teams
• Assist with proposal development, including coordinating inputs, timelines, and budget components
• Support communication with internal and external stakeholders, including meeting coordination, status updates, documentation, and follow-ups
• Help ensure fulfillment of program obligations by coordinating with teams across Velsera
• Learn and document user needs and workflows, and help clients and users get the most value from Seven Bridges products and features

Associate Program Manager

Compliance

• - Bring ‘Security by design’ principles to product development activities
• - Managing the GRC program, defining the roadmap for maturity across governance, risk management, and compliance initiatives.
• - Lead, manage, and mature the organization's Information Security Management System including risk treatment, internal audits, and readiness for external certification audits
• - Serve as the SME for high-stakes compliance frameworks, specifically FedRAMP, and maintaining advanced leadership over HIPAA and the ISO 27001 family (including 27017/27018 for cloud security).
• - Lead the development and revision of enterprise-level security policies, standards, and control frameworks to align with regulatory requirements and business objectives.
• - Manage GRC with focus on lean, efficient implementation by leveraging automation of activities
• - Lead FedRAMP authorization (e.g., Readiness, Assessment, and Continuous Monitoring), including coordinating with the 3PAO (Third-Party Assessment Organization) and government agencies.
• - Provide solution oriented technical guidance to Cloud Engineering, Security Operations, DevOps, and Product teams on architecting, implementing, and documenting controls required for FedRAMP, HIPAA, and ISO 27001 within cloud environments (AWS, Azure, or GCP).
• - Oversee and conduct complex, high-impact risk assessments (e.g., BIA, PIA, Data Flow Mapping) and residual risk management across the enterprise, escalating critical risks to senior leadership.
• - Manage and respond to high-level customer and partner due diligence requests and contract reviews related to security and compliance.
• - Act as the primary InfoSec GRC liaison and subject matter expert, effectively collaborating with internal stakeholders including Legal, Internal Audit, Product Management, and Tech Leadership.
• - Translate highly technical security and compliance requirements providing clear, actionable, risk-informed recommendations.
• - Lead cross-functional remediation efforts, bringing a solution mindset to help technical teams design practical and compliant control implementations instead of simply identifying gaps.
• - Mentor and provide guidance to junior GRC team members, helping to build internal capabilities.

Associate Program Manager

Principal InfoSec GRC Specialist