Government Compliance Sr. Manager

Job Description POSITION SUMMARY The Government Compliance Sr. Manager ensures that our cloud and data center infrastructure meets strict federal procurement, supply chain, facility security, and cybersecurity mandates. This critical role protects the company's federal revenue streams by managing risks and developing standard operating procedures associated with CMMC, ICD 705 physical security, DPAS prioritization, BAA/TAA supply chains, GIDEP reporting, and OCONUS deployments. RESPONSIBILITIES Facility Security & ICD 705 Compliance * Monitor, implement, and ensure strict compliance with ICD 705 (Intelligence Community Directive 705) standards for Sensitive Compartmented Information Facilities (SCIFs) and Special Access Program Facilities (SAPFs) within data centers. * Oversee the physical and technical security construction profiles, ensuring alignment with ICD 705 Technical Specifications (Tech Specs) from initial design through formal accreditation. * Maintain comprehensive documentation, including Fixed Facility Checklists (FFCs) and Construction Security Plans (CSPs), for submission to the Accrediting Official (AO). Cross-Functional Collaboration & Stakeholder Interface * Partner with Federal Sales and Business Development to review requests for proposals (RFPs) and ensure compliance feasibility before bid submission. * Embed compliance requirements into Procurement workflows to vet subcontractors and hardware vendors. * Advise Hardware Engineering on technical requirements for component qualification and design-in constraints. * Collaborate closely with Legal Counsel on contract review, regulatory risk assessments, and disclosure strategies. * Interface directly with Manufacturing teams to ensure production lines meet federal tracking and security baselines. Supply Chain Integrity & GIDEP Responsibility * Serve as the designated corporate representative and administrator for the Government-Industry Data Exchange Program (GIDEP). * Monitor incoming GIDEP failure experience data, suspect counterfeit alerts, and diminishing source notices. * Author and submit official GIDEP alerts if counterfeit components or systemic equipment failures are found. * Lead root-cause investigations and implement material quarantine protocols for identified parts. Cybersecurity & CMMC Governance * Lead data center operational alignment with CMMC 2.0 Level 2 and NIST SP 800-171 controls. * Partner with IT Security to safeguard Controlled Unclassified Information (CUI) across environments. * Manage systemic security gaps by documenting and tracking Plans of Action and Milestones (POAMs). DPAS Optimization & Supply Chain Priority * Optimize standard operating procedures for DPAS rated orders to achieve compliance. * Enforce mandatory flow-down requirements to hardware vendors, subcontractors, and construction partners. * Resolve resource allocation conflicts between commercial projects and rated defense infrastructure orders. Trade & Supply Chain Compliance (BAA/TAA) * Administer compliance verifications for the Buy American Act (BAA) and Trade Agreements Act (TAA). * Audit multi-tiered hardware supply cha