FEDRAMP Program Manager at Docebo

Artificial Intelligence. Actual Impact. At Docebo, we’re using AI to change how people learn at work—and we mean actually change it. We’re an AI-powered learning platform that helps organizations create, deliver, and manage training all in one place. But our real mission goes deeper: we help teams move faster, work smarter, and focus on the work that truly matters. Our platform is built with intelligent, time-saving tools that personalize learning, eliminate busywork, and turn training from a checkbox into a superpower. The result? Better experiences for learners and real results for businesses. We’re shaping the future of learning with a team that isn’t afraid to challenge the status quo. If you're excited by the idea of using AI to make work-life better for real people–you’ll feel right at home here. And it’s not just what we build, it’s how we show up. At Docebo, our values aren’t just posters on the wall—they guide how we work every day. We call it the Docebo Heart: trust by default, assume positive intent, and create space for different perspectives to thrive. So… what are you waiting for? Join 900+ Docebians around the world and help us reinvent the way people learn, because learning never stops. ABOUT THE OPPORTUNITY: The FEDRAMP Program Manager is responsible for leading Docebo’s FedRAMP authorization journey and maintaining ongoing compliance with the Federal Risk and Authorization Management Program (FedRAMP) framework. This role owns the end-to-end FedRAMP program lifecycle, from readiness assessment and gap remediation through ATO (Authority to Operate) and continuous monitoring, ensuring alignment across Product, Engineering, Security, Compliance, Legal, Infrastructure, and Go-to-Market teams. This is a highly cross-functional and execution-heavy role requiring deep regulatory knowledge, operational rigor, and strong executive stakeholder management. Responsibilities, including but not limited to: - Program Ownership & Strategy Own and orchestrate the end-to-end FedRAMP roadmap, defining key milestones, managing dependencies, and controlling the critical path. Lead readiness assessments, gap analyses, and remediation planning to ensure timely and audit-ready execution. Collaborate with executive leadership to shape the overall FedRAMP strategy, while taking full ownership of the business case, governance framework, and program operating model. - Authorization & Compliance Execution Lead end-to-end preparation for FedRAMP authorization (ATO), partnering closely with Third-Party Assessment Organizations (3PAOs) to ensure a smooth and successful evaluation process. Ensure the effective implementation of required security controls across Product, Infrastructure, and Security, and establish robust continuous monitoring processes to maintain audit readiness and ongoing compliance post-authorization - Cross-Functional Alignment Partner closely with Engineering and DevOps to drive infrastructure hardening initiatives, collaborate with Security on control implementation, and align with Product to embed secure development lifecycle practices. Engage Legal to address contractual, regulatory, and compliance implications. Support Sales and Go-to-Market teams to enable public sector opportunities and ensure compliance positioning is effectively translated into revenue impact. Serve as the single-threaded program leader, orchestrating alignment and execution across all stakeholders - Risk Management & Governance Proactively identify compliance gaps and operational risks that may impact FedRAMP authorization or ongoing adherence. Maintain and continuously update the risk register, defining clear mitigation and remediation plans with accountable owners. Provide regular executive-level reporting on program progress, risk exposure, and overall compliance posture. Ensure alignment and consistency with broader security and compliance frameworks (e.g., SOC 2, ISO 27001, NIST 800-53). - Continuous Monitoring & Operational Excellence Design and implement scalable, repeatable processes for evidence gathering, documentation management, and compliance reporting. Promote and enable automation of security and compliance controls wherever feasible to improve efficiency and reduce manual overhead. Track and report on key performance indicators, including: - Percentage of control implementation coverage - Time to remediate audit findings - POA&M backlog and aging trends - Adherence to continuous monitoring SLAs - Executive Point of Contact & Go-to-Market Enablement Act as the primary point of contact for all FedRAMP-related initiatives, communications, and escalations across the organization. Support Sales and Go-to-Market teams throughout the public sector sales cycle, providing subject matter expertise to position the FedRAMP offering effectively. Clearly articulate the differences between the FedRAMP-authorized environment and the commercial version of the product, ensuring accurate expectation setting with prospects and customers. Partner with Sales, Legal, and Security during RFPs, security reviews, and due diligence processes to strengthen credibility and accelerate deal closure. Requirements: - Bachelor’s degree in Business, Computer Science, Engineering, Human-Computer Interaction, or a related field; or equivalent professional experience. - 5+ years working as a Program Manager in a Agile SDLC environment. - 3+ years experience working with a FedRAMP/GovRAMP ATO. - Strong knowledge of NIST800-53, Risk Management Framework (RMF), continuos monitoring requirements - AWS / Public Cloud infrastructure experience - Proven ability to manage complex, cross-functional programs - Detail oriented, strong leader, good communicator, ability to overcome obstacles - Excellent executive communication skills - PMP, CSM, or similar certification a plus. OUR TOTAL REWARDS PHILOSOPHY 🎉 Recognizing and rewarding the outcomes and behaviours that shape the future of learning. Our Total Rewards Philosophy centers around three core areas to reward and care for our People: - Rewarding Impact: We lead with competitive pay to reward the impact, skills and traits that fuel our success. - Fostering Holistic Wellbeing: We care deeply about and invest in the whole person with programs that support our people’s physical, mental, and financial well-being. - Empowering Our Talent Culture: We build a culture of trust and empowerment by designing our rewards and benefits with transparency, equity, and flexibility, enabling our people to do their best work and stay for the long haul. OUR PROMISE TO YOU 😍 - Financial Wellness: Own a piece of Docebo through our Employee Share Purchase Plan (ESPP) at a 15% discount, plus a competitive compensation package. - Your Well-Being, Covered: You’ll get access to health benefits, so you can get the care you need when you need it. - Rest, Relax, Repeat: Rest and recharge with paid vacation days, two company-wide Docebo Days, floating holidays for cultural celebrations, and your birthday off! - Family First: We provide coverage offering you time with your little one(s) so you can soak up all those precious moments. Fun fact: we had 30 Docebian babies join the family in 2025! - Connections That Count: Connect with global communities through our Employee Resource Groups (including PRIDE, DWA, BIDOC, and Green Ambassadors) and company-wide events that keep the fun rolling all year long. - Fri-Yay: Kick off your weekends early with 4:30 PM Fridays (eligible employees only). - Swag Central: Look fresh with your new-hire swag and enjoy access to our internal swag store to stay branded year-round. ABOUT DOCEBO 💙 At Docebo, we create seamless, AI-powered learning experiences for over 3,000 customers worldwide. We have successfully achieved two IPOs (TSX: DCBO & NASDAQ: DCBO [Upgrade to PRO to see link] been recognized as a top SaaS e-learning solution, and are growing exponentially in the process. We're a global company, with office across North America, EMEA, APAC, and beyond. Our team is guided by six core values—Innovation, Simplicity, Accountability, Togetherness, Curiosity, and Impact—that shape everything we do. If this resonates with you, now is the perfect time to join one of the fastest-growing learning technology companies in the world. Apply today! Docebo is an Equal Employment Opportunity employer [Upgrade to PRO to see link] We are committed to diversity and inclusion in our workforce. All qualified applicants and employees will receive consideration for employment regardless of their race, colour, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, citizenship status, age, disability, genetic information, or any other category protected under applicable law. As a federal contractor, Docebo is committed to the principles of affirmative action and equal employment opportunity for protected veterans and individuals with disabilities. Docebo does not discriminate because of protected veteran status or on the basis of disability, and Docebo takes affirmative action to employ and advance in employment qualified protected veterans and individuals with disabilities. Any individuals requiring a reasonable accommodation or would like to voluntarily disclose a disability or protected veteran status to assist with their employment application should send an e-mail to [Upgrade to PRO to see contact]. The email should also include the position you’re interested in.