Sr. Security Program Manager, Commercial & Federal Compliance

About this role

<div class="content-intro"><p>At Anaplan, we are a team of innovators focused on optimizing business decision-making through our leading AI-infused scenario planning and analysis platform so our customers can outpace their competition and the market.</p> <p>What unites Anaplanners across teams and geographies is our collective commitment to our customers’ success and to our Winning Culture.</p> <p style="padding-left: 40px;">Our customers rank among the who’s who in the Fortune 50. Coca-Cola, LinkedIn, Adobe, LVMH and Bayer are just a few of the 2,400+ global companies who rely on our best-in-class platform.</p> <p style="padding-left: 40px;">Our Winning Culture is the engine that drives our teams of innovators. We champion diversity of thought and ideas, we behave like leaders regardless of title, we are committed to achieving ambitious goals, and we love celebrating<em> </em>our wins – big and small.</p> <p>Supported by operating principles of being strategy-led, <a href="https://www.anaplan.com/careers/">values</a>-based and disciplined in execution, you’ll be inspired, connected, developed and rewarded here. Everything that makes you unique is welcome; join us and let’s build what’s next - together!</p></div><p><span data-contrast="auto">We are seeking an experienced <em><strong>Senior Program Manager</strong></em> to lead and coordinate compliance initiatives spanning both commercial and federal business lines. This role serves as the connective tissue between legal, security, contracts, engineering, and operational teams — driving programs that ensure the company meets its obligations under federal frameworks such as FedRAMP and CMMC, as well as commercial and international market certifications such as ISO 27001, SOC 2, HITRUST, and other regional/industry-specific standards (e.g., ISO 27701, Cyber Essentials, TISAX). The ideal candidate is a skilled program leader who can translate complex, multi-jurisdictional regulatory requirements into actionable roadmaps, manage cross-functional execution, and communicate risk and progress clearly to senior leadership.</span><span data-ccp-props="{"335559739":150}"> </span></p> <p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 1">Your Impact</span></span></strong><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335551550":1,"335551620":1,"335559685":0,"335559737":0,"335559738":300,"335559739":150,"335559740":259}"> </span></p> <ul> <li><span data-contrast="auto">Own end-to-end program management for compliance initiatives across commercial and federal contracts, from planning through execution and audit readiness.</span><span data-ccp-props="{"134233118":false,"335559739":0}"> </span></li> <li><span data-contrast="auto">Lead FedRAMP authorization and continuous monitoring efforts (Moderate/High baselines), coordinating with 3PAOs, agency sponsors, and internal engineering/security teams through the full ATO lifecycle.</span><span data-ccp-props="{"134233118":false,"335559739":0}"> </span></li> <li><span data-contrast="auto">Partner with Legal, Security, IT, and Business Development to interpret federal compliance requirements (FedRAMP, CMMC, NIST 800-171/800-53) and translate them into program plans.</span><span data-ccp-props="{"134233118":false,"335559739":0}"> </span></li> <li><span data-contrast="auto">Lead international and commercial certification programs including ISO 27001, ISO 27701, SOC 2 Type I/II, HITRUST CSF, and other regional market-access certifications (e.g., TISAX, ENS, Cyber Essentials), tailoring approach to each market's requirements.</span><span data-ccp-props="{"134233118":false,"335559739":0}"> </span></li> <li><span data-contrast="auto">Develop and maintain program roadmaps, schedules, and program risk registers; proactively identify and mitigate project risks and schedule slippage across concurrent certification tracks.</span><span data-ccp-props="{"134233118":false,"335559739":0}"> </span></li> <li><span data-contrast="auto">Serve as the primary point of coordination for internal and external audits, assessments, and certifications, ensuring evidence collection, stakeholder readiness, and timely remediation of findings (POA&Ms, corrective action plans).</span><span data-ccp-props="{"134233118":false,"335559739":0}"> </span></li> <li><span data-contrast="auto">Support the establishment and refinement of governance processes, policies, and standard operating procedures to support sustainable, scalable compliance across federal, commercial, and international lines of business.</span><span…