Docebo is hiring a FEDRAMP Program Manager

Docebo is looking for a FEDRAMP Program Manager to lead our FedRAMP authorization journey and maintain ongoing compliance with the Federal Risk and Authorization Management Program framework. This role owns the end-to-end FedRAMP program lifecycle, from readiness assessment through to Authority to Operate and continuous monitoring, ensuring alignment across Product, Engineering, Security, Compliance, Legal, Infrastructure, and Go-to-Market teams.

What You'll Do

• Own and orchestrate the end-to-end FedRAMP roadmap, defining key milestones, managing dependencies, and controlling the critical path.
• Lead readiness assessments, gap analyses, and remediation planning to ensure timely and audit-ready execution.
• Lead end-to-end preparation for FedRAMP authorization, partnering closely with Third-Party Assessment Organizations.
• Ensure effective implementation of required security controls across Product, Infrastructure, and Security.
• Establish robust continuous monitoring processes to maintain audit readiness and ongoing compliance post-authorization.
• Partner with Engineering and DevOps to drive infrastructure hardening initiatives.
• Collaborate with Security on control implementation and align with Product to embed secure development lifecycle practices.
• Engage Legal to address contractual, regulatory, and compliance implications.
• Support Sales and Go-to-Market teams to enable public sector opportunities and ensure compliance positioning translates into revenue impact.
• Proactively identify compliance gaps and operational risks that may impact FedRAMP authorization.
• Maintain and continuously update the risk register, defining clear mitigation and remediation plans.
• Provide regular executive-level reporting on program progress, risk exposure, and overall compliance posture.
• Design and implement scalable, repeatable processes for evidence gathering, documentation management, and compliance reporting.
• Promote and enable automation of security and compliance controls to improve efficiency.
• Track and report on key performance indicators like control implementation coverage, time to remediate findings, POA&M backlog, and adherence to SLAs.
• Act as the primary point of contact for all FedRAMP-related initiatives, communications, and escalations.
• Support Sales and Go-to-Market teams throughout the public sector sales cycle, providing subject matter expertise.
• Articulate the differences between the FedRAMP-authorized environment and the commercial version of the product.
• Partner with Sales, Legal, and Security during RFPs, security reviews, and due diligence processes.

What We're Looking For

• Bachelor’s degree in Business, Computer Science, Engineering, Human-Computer Interaction, or a related field; or equivalent professional experience.
• 5+ years working as a Program Manager in an Agile SDLC environment.
• 3+ years experience working with a FedRAMP/GovRAMP ATO.
• Strong knowledge of NIST800-53, Risk Management Framework, and continuous monitoring requirements.
• AWS / Public Cloud infrastructure experience.
• Proven ability to manage complex, cross-functional programs.
• Detail oriented, strong leader, good communicator, and ability to overcome obstacles.
• Excellent executive communication skills.

Nice to Have

• PMP, CSM, or similar certification a plus.

Technical Stack

• AWS / Public Cloud

Team & Environment

This is a highly cross-functional role aligning Product, Engineering, Security, Compliance, Legal, Infrastructure, and Go-to-Market teams.

Benefits & Compensation

• Employee Share Purchase Plan at a 15% discount.
• Health benefits.
• Paid vacation days, two company-wide Docebo Days, floating holidays for cultural celebrations, and birthday off.
• Parental leave coverage.
• Access to Employee Resource Groups including PRIDE, DWA, BIDOC, and Green Ambassadors.
• Company-wide events.
• 4:30 PM Fridays for eligible employees.
• New-hire swag and access to internal swag store.

Work Mode

This is a remote-first global role open to candidates in North America, EMEA, and APAC.

Docebo is an Equal Employment Opportunity employer committed to diversity and inclusion. All qualified applicants receive consideration regardless of race, colour, religion, sex, national origin, citizenship status, age, disability, genetic information, or any other protected category.