---
title: 'Project Manager, Override at Fortreum'
canonical: 'https://feeny.ai/job/project-manager-override-fortreum-remote-mg4zrjae05fd'
type: 'job'
last_seen: '2026-11-06'
---

# Project Manager, Override at Fortreum

- **Company:** Fortreum
- **Location:** Remote
- **Compensation:** $80k–$124k
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-11-05
- **Last confirmed live:** 2026-11-06
- **Apply:** https://jobs.ashbyhq.com/fortreum/17389c84-29fd-4eb1-890b-b886d82590c5

## Job description

Fortreum is a trusted leader in cloud and cybersecurity services, ranked among the Top 5 FedRAMP Third Party Assessment Organizations (3PAO). With the addition of Kovr.AI, we have expanded our capabilities to include advanced cyber risk quantification and analytics, enabling organizations to better understand, measure, and communicate risk. Together, we deliver independent, third-party, vendor-agnostic regulatory assessment and advisory services, alongside advanced cybersecurity offensive and compliance technical solutions. Our comprehensive service portfolio spans regulatory compliance frameworks including FedRAMP, CMMC, FISMA, SOC, PCI, ISO, and HIPAA. Working with Fortune 500 companies and leading cloud service providers, we’ve built our reputation on service-delivery excellence and an unwavering commitment to client success. Our continued rapid growth creates exceptional opportunities for driven professionals to make their mark in the cybersecurity industry—guided by our core values: quality above all, a customer-driven mindset, autonomy, and personal accountability.

The Opportunity Supporting Fortreum’s Override team, you will work alongside skilled offensive security professionals who test the defenses of cloud service providers, federal contractors, and technology companies. In this fast-paced role, you will manage multiple penetration testing engagements at once, moving quickly between clients, testers, and deadlines while delivering a high-touch, white glove experience. You will keep scoping, scheduling, client coordination, and reporting on track so our testers can focus on the work they do best.

## Key Responsibilities

- Develop and maintain project plans for penetration testing engagements, including preparing pre-assessment documentation and templates such as Requests for Information (RFIs), kickoff presentations, Rules of Engagement (ROE), testing schedules, milestones, deliverables and assigned responsibilities.
- Prepare and obtain signatures on rules of engagement, authorization letters, and other required planning documentation before testing begins
- Schedule and lead client kickoff meetings, confirming scope, testing windows, points of contact, and communication and escalation procedures
- Coordinate testing logistics with clients, such as test accounts, network access, allow listing, and notification of their security operations teams
- Monitor and manage assessment scope to identify scope discrepancies and potential scope creep, coordinating with technical leads, clients, and the Program Manager to evaluate impacts, address changes, and ensure appropriate approvals are obtained.
- Manage communication of critical findings during testing according to agreed escalation procedures
- Provide responsive, white glove service to clients as primary point of contact, anticipating their needs and keeping them informed at every stage of the engagement
- Execute high velocity context switching by pivoting rapidly between engagements in different phases (scoping, active testing, reporting, retesting) without losing track of details or commitments
- Reprioritize work as testing windows, client availability, and findings change, keeping stakeholders informed of any impact
- Collaborate with other Project Managers to coordinate tester assignments across concurrent engagements, ensure balanced workloads, and work with the Program Manager to identify and resolve scheduling conflicts as needed.
- Track report development and quality review cycles to ensure reports are delivered on time
- Monitor progress to ensure delivery within allocated hours, and assist team leads in validating budgets within financial management tools
- Identify, track, and escalate risks, issues, and schedule concerns to leadership as needed
- Maintain accurate project data in project management tools (for example, Jira)
- Complete engagement closeout, ensuring all deliverables and documentation are finalized and client data is handled according to policy
- This is a client-facing role requiring strong communication and organizational skills. Limited travel may be required.

## Basic Qualifications

- Bachelor’s degree or 4 years of equivalent experience
- 2 to 6+ years of experience managing multiple concurrent projects with internal teams and external clients, maintaining quality across parallel timelines
- 2+ years of experience in information security, SaaS, or professional services
- Experience supporting multiple penetration testing engagement types, such as network, web application, cloud, and social engineering testing
- Understanding of penetration testing concepts and engagement types, such as network, web application, cloud, and social engineering testing, and the ability to discuss scope and findings with clients and testers
- Ability to switch between tasks and engagements quickly while staying focused and accurate
- Ability to manage competing priorities with flexibility and sound judgment
- Excellent written and verbal communication skills, with a client-first approach to service
- Skills in budget management, estimation, capacity planning, facilitation, and presentation
- Proficiency with Microsoft 365 and project management tools (for example, Jira)
- Ability to work independently and thrive in a fast-paced team environment

## Preferred Skills

- Experience supporting FedRAMP penetration testing, readiness, authorization, or continuous monitoring efforts
- Familiarity with security documentation such as SSPs, POA&Ms, and control implementation narratives
- PMP, CAPM, or similar project management certification

Posted Salary Range $80,000 - $124,000 annual salary based on experience

What Fortreum Offers We offer a competitive compensation package, where you will be rewarded based on your performance/outcomes and recognized for the value you bring to our business. Our benefits package includes medical insurance, dental insurance, vision insurance, 401K plan with a 4% match, company paid short-term disability, company paid long-term disability, company paid AD&D and life insurance, flex time off, annual bonuses, training stipends, certification reimbursements, access to over 30,000 free online training courses, personal cell phone allowance, new hire and annual home office stipend, spot awards and eleven paid holidays.

An Affirmative Action and Equal Opportunity Employer Fortreum is an Affirmative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability. If you’d like to view a copy of the company’s affirmative action plan or policy statement, please email hr@fortreum.com. If you have a disability and you believe you need a reasonable accommodation in order to search for a job opening or to submit an online application, please e-mail hr@fortreum.com or call 703-594-1460. This email and phone number is created exclusively to assist disabled job seekers whose disability prevents them from being able to apply online. Only messages left for this purpose will be returned. Messages left for other purposes, such as following up on an application or technical issues not related to a disability, will not receive a response. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.

## About Fortreum

## Company Overview
- **One-liner**: Fortreum is a cybersecurity compliance firm that provides independent FedRAMP, CMMC, and SOC 2 assessment services, backed by an AI-native compliance automation platform.
- **Entity Type**: Private (backed by Gryphon Investors via a majority growth recapitalization in January 2026)
- **Headquarters**: Leesburg, Virginia, USA
- **Founded**: 2020
- **Founders**: Michael Carter (Managing Principal/Co-Founder) and James Leach (Managing Principal/Co-Founder)

## Core Business
- **Primary industry/industries**: Cybersecurity Compliance, FedRAMP 3PAO, CMMC C3PAO, ISO Certification, Offensive Security
- **Target customers**: Cloud Service Providers (CSPs), Defense Contractors, and enterprises that need to navigate FedRAMP, CMMC, SOC 2, ISO 27001, HIPAA, PCI DSS, and other regulated frameworks to sell to the U.S. federal government or maintain DoD contracts.
- **Mission or purpose statement**: To make compliance a business enabler, not a checkbox, by providing independent assessments, AI-driven automation, and a clear path through complex regulatory frameworks.

## Products & Services
- **KOVR (Platform)**: A patented AI-native compliance automation platform deployed in DoD production environments at Technology Readiness Level 9. It automates evidence collection, System Security Plan (SSP) generation, and Plan of Action & Milestones (POA&M) management across 15+ frameworks.
- **XRAMP (Platform)**: A platform that consolidates annual authorizations, attestations, and certifications into one continuous workstream, enabling an "assess-once, reuse-many" approach.
- **Assessment Services (Assess)**: Independent gap analysis, FedRAMP 3PAO assessments, CMMC C3PAO assessments, and SOC 2 audits.
- **Offensive Security Services (Test)**: Penetration testing, red team exercises, purple team operations, social engineering, and network/application testing.
- **Strategic Advisory (Remediate)**: Risk management, remediation guidance, and cybersecurity program development.
- **Authorization Services (Authorize)**: Guidance through FedRAMP, CMMC, DoD Cloud, and GovRAMP authorization processes.

## Market Standing
- **Valuation/Market Cap**: Not publicly disclosed (private company).
- **Key Metric**: Total Funding / Growth Investment — Majority growth recapitalization from Gryphon Investors in January 2026. The company also achieved **773% three-year revenue growth**, ranking **No. 523 on the 2025 Inc. 5000**.
- **Notable Investors/Partners**: Gryphon Investors (majority growth recapitalization, Jan 2026). Accreditations as a Top 5 FedRAMP 3PAO, Cyber-AB authorized C3PAO, and ANAB-accredited ISO certification body.
- **Growth Signals**: Ranked on the 2025 Inc. 5000 at #523 with 773% growth. Named a Virginia Business Best Places to Work for 2024, 2025, and 2026. Customer Satisfaction (CSAT) score of 90%+.

## Competitive Advantages
- **Top-Tier Accreditation**: One of only a Top 5 FedRAMP 3PAOs, a status that provides a significant barrier to entry and trust with government clients.
- **Patented AI-Native Platform**: The KOVR platform is patented and deployed at Technology Readiness Level 9 in DoD environments, a rare and powerful differentiator that automates the most tedious parts of compliance.
- **Integrity-First Culture**: The company was founded on the principle of not upselling advisory hours. They provide independent assessments without the conflict of interest that plagues many consulting firms.
- **Dual Expertise**: Combines deep assessment expertise (25+ years of combined experience) with a cutting-edge technology platform, offering a "one-stop-shop" for compliance.

## Strategic Focus
- **Scaling the Platform**: With Gryphon's investment, Fortreum is likely focused on scaling its KOVR and XRAMP platforms to capture a larger share of the compliance automation market.
- **Expanding Service Areas**: The 773% growth rate indicates aggressive expansion into new frameworks and service offerings.
- **Talent Acquisition**: The company is actively hiring to keep pace with rapid growth, expanding its team of assessors, engineers, and sales professionals.

## Why Work Here
- **High-Growth Environment**: Employees join a company that grew 773% in three years, offering career trajectories not available at slower-growing firms.
- **Meaningful Work**: The work is "not checkbox compliance." Employees work on real authorizations that determine whether a cloud provider can sell to the federal government or a defense contractor keeps DoD contracts.
- **Culture & Recognition**: Named a Virginia Business Best Places to Work for three consecutive years (2024-2026), highlighting a strong, people-focused culture.
- **Autonomy & Accountability**: The company emphasizes independence and trust, allowing team members to navigate their roles and make real decisions without bureaucracy.
- **Remote & Flexible Work**: Fortreum operates a hybrid remote culture, offering flexibility while maintaining a people-focused organization.
- **Comprehensive Benefits**: Includes medical, dental, and vision insurance, short-term and long-term disability, parental leave, flexible time off plus 11 paid holidays, and a mentorship program with defined career goals and training access.

## Sources
1. [fortreum.com](https://fortreum.com/) - Official Company Website
2. [fortreum.com](https://fortreum.com/about/) - About Us Page
3. [fortreum.com](https://fortreum.com/careers/) - Careers Page
4. [fortreum.com](https://fortreum.com/leadership/) - Leadership Team Page
5. [fortreum.com](https://fortreum.com/company/) - Company Overview Page

## Other roles at Fortreum

- [Federal Enterprise Account Executive](https://feeny.ai/job/federal-enterprise-account-executive-fortreum-reston-betcdm3wvz2y) — Reston, VA
- [Solutions Engineer](https://feeny.ai/job/solutions-engineer-fortreum-reston-tecm000qr3j1) — Reston, VA
- [Assessment Analyst](https://feeny.ai/job/assessment-analyst-fortreum-remote-grta470kh7mt)
- [Technical Recruiter](https://feeny.ai/job/technical-recruiter-fortreum-remote-6efq62yq75sr)
- [DevSecOps Engineer - Leesburg](https://feeny.ai/job/devsecops-engineer-leesburg-fortreum-leesburg-ts0pybxg8256) — Leesburg, VA
- [DevSecOps Engineer - Reston](https://feeny.ai/job/devsecops-engineer-reston-fortreum-reston-dav4w06bycm1) — Reston, VA
- [Product Program Manager](https://feeny.ai/job/product-program-manager-fortreum-reston-7kdj7ds4y1jp) — Reston, VA
- [FedRAMP 20X Advisory Senior Consultant](https://feeny.ai/job/fedramp-20x-advisory-senior-consultant-fortreum-remote-1amg4vq1b2qe)
- [Cleared Penetration Tester - Seattle](https://feeny.ai/job/cleared-penetration-tester-seattle-fortreum-seattle-r3ehbkpkx9kz) — Seattle, WA
- [Cleared Senior Forward Deployed Engineer](https://feeny.ai/job/cleared-senior-forward-deployed-engineer-fortreum-fort-meade-eqpnmcs1c4aa) — Fort Meade, MD