10 FedRAMP authorization experts
FedRAMP shows up in the job title itself for six of these ten, from IBM's FedRAMP Program Director to compliance leads at IBM cloud for government, ASM Research and Everlaw; the other four held GRC, ISSO, cloud compliance program and CISO roles tied to FedRAMP work. They suit a SaaS team sizing a Moderate or High authorization, or one already authorized and trying to keep continuous monitoring and audits on schedule.
Professionals to explore
Brad Williams
LinkedInExperience: Federal Operations Manager · Oracle
Brad Williams was FEDRamp Incident Manager at Oracle (2020-2021) and has been Federal Operations Manager there since January 2021, a role Brad sums up as managing "a dynamic team with technical leadership that solves complex problems" in infrastructure. Brad's self-description as a FedRAMP Operations Leader covering SaaS, IL4 compliance, and incident, change and release management makes Brad the pick for incident and change handling inside an authorized environment. Earlier, Brad was Cloud Solution Engineer at Oracle (2016-2020).
Is this you? Claim your profile and get paid for calls.
Christopher Wright
LinkedInExperience: Former FedRAMP Compliance Lead · ASM Research
FedRAMP Compliance Lead at ASM Research (2019-2020) and Cybersecurity Supervisor there (2014-2019) are two of Christopher Wright's roles; another is Security and Compliance Lead at Accenture Federal Services (2021-2023), managing all security and compliance activities for the AIP multi-cloud project, which supports over 6 federal agencies. Christopher has been Security Assurance Consultant at Fortreum since 2024 and fits questions on multi-agency, multi-cloud compliance.
Is this you? Claim your profile and get paid for calls.
Emily Cummins
LinkedInExperience: Chief Information Security Officer · NextStage - GovCon Growth Platform
Emily Cummins has been Chief Information Security Officer at NextStage - GovCon Growth Platform since November 2025, where Emily stabilized and advanced FedRAMP Moderate Equivalency readiness within four effective working weeks. Anitian titles were Director of Security & Compliance Services (2019-2023) and Director of Compliance (2023-2025), and Emily was also Principal Security Consultant at Kratos Defense and Security Solutions (2014-2019). A fit for questions on compressing a Moderate readiness timeline.
Is this you? Claim your profile and get paid for calls.
Eric Terwilliger
LinkedInExperience: Former Information System Security Officer (Public Sector Compliance Analyst) · Cisco
Eric Terwilliger describes being a Security Compliance Analyst specializing in FedRAMP/NIST 800-53 controls and process. Titles include Global Cloud Compliance Engineer at Cisco (2018-2022), Information System Security Officer (Public Sector Compliance Analyst) at Cisco (2022-2023) and Sr Program Mgr., Federal Programs at Zscaler (2023-2025), which suit control-level questions on mapping NIST 800-53 to a cloud environment.
Is this you? Claim your profile and get paid for calls.
Joseph Ely
LinkedInExperience: Former Senior Cloud Security and Compliance Program Manager · RingCentral
Joseph Ely's RingCentral role, Senior Cloud Security and Compliance Program Manager (2023-2025), meant leading the Continuous Monitoring Team for FedRAMP and StateRAMP efforts, reporting to CISA on project status and risks, and assessing controls for FedRAMP moderate certification. Joseph was also Director of FedRamp Certifications and Business Development at TTC, Inc. (2019-2023) and has been Director of GRC at Inkit since 2025. A strong fit for post-authorization continuous monitoring.
Is this you? Claim your profile and get paid for calls.
Melanie Huffman
LinkedInExperience: Director, Governance, Risk, and Compliance (GRC) · Devo
Director, Governance, Risk, and Compliance (GRC) at Devo from 2025 to 2026, a role in which Melanie Huffman describes leading FedRAMP authorization efforts and ongoing SOC 2 and PCI DSS compliance for a cloud-native security platform. Other Devo titles include Manager, Federal and Security Services (2021-2022), Director, Federal and Public Sector Services (2022-2023) and Director, Federal Product Management and Operations (2023-2025). Good for weighing FedRAMP alongside SOC 2 and PCI DSS on one team.
Is this you? Claim your profile and get paid for calls.
Rashad Munawar
LinkedInExperience: Former Director, FedRAMP Security Compliance & Operations · BlackBerry
At BlackBerry, Rashad Munawar was Senior Manager, FedRAMP Compliance and Audit (2016-2022) and then Director, FedRAMP Security Compliance & Operations (2022-2026), a role tagged with FedRAMP, security operations, IL4/5, CMMC and StateRAMP. Since July 2026 Rashad has held the role Security Risk& Compliance Leader Federal ISSO Apptio at IBM. The audit and operations titles suit questions on running FedRAMP alongside IL4/5 and StateRAMP.
Is this you? Claim your profile and get paid for calls.
Scott Collins
LinkedInExperience: FedRAMP Compliance Technical Lead · Everlaw
Since June 2025 Scott Collins has been FedRAMP Compliance Technical Lead at Everlaw, leading, managing and maturing security compliance programs for public sector certifications. Other roles include Head of Risk & Compliance at Crux (2023-2025), Director, Information Security GRC at Root Inc. (2021-2022) and President & Principal Consultant at SRC Consulting Group LLC since 2013, useful for questions on maturing a compliance program toward public sector certification.
Is this you? Claim your profile and get paid for calls.
Thomas S.
LinkedInExperience: FedRAMP Program Director · IBM
Thomas S. has been FedRAMP Program Director at IBM since July 2025 and Strategic Cybersecurity Advisor at SHzoom since June 2025. Roles listed also include Senior Vice President of Technology at SHzoom (2024-2025), Sr. Director, Information Security at Appian (2021-2023) and Director Of SaaS Architecture at VMware (2015-2021). The SaaS architecture and security titles fit questions on what a SaaS product's architecture has to change for authorization.
Is this you? Claim your profile and get paid for calls.
Todd Yenche
LinkedInExperience: FedRAMP Compliance Lead · IBM cloud for government
Todd Yenche has been FedRAMP Compliance Lead for IBM cloud for government since 2018, and held Security and Compliance team lead roles at IBM Watson Customer Engagement (2015-2018) and IBM Analytics (2006-2015). In the current role Todd maintained the System Security Plan and supporting documentation against FedRAMP and NIST SP 800-53 requirements and led FedRAMP High audit coordination, a fit for questions on SSP upkeep and High-baseline audits.
Is this you? Claim your profile and get paid for calls.
Choose the right perspective
For a first Moderate or High push, start with the people whose work covers authorization or audits: Todd Yenche on High audit coordination and the System Security Plan, Melanie Huffman on authorization efforts at Devo, Emily Cummins on a fast Moderate Equivalency push. For life after authorization, Joseph Ely's continuous monitoring team at RingCentral and Brad Williams's incident and change management at Oracle are the closer match.
Questions to take into the conversation
- 01How many people, and from which teams, did your FedRAMP Moderate effort need before the assessment, and which of them stayed on for continuous monitoring?
- 02Which NIST SP 800-53 controls forced real engineering changes to the product, as opposed to documentation in the System Security Plan?
- 03If you also had to cover StateRAMP, IL4/5 or SOC 2, which evidence and controls could you reuse and which had to be built separately?
About this directory
This is a professional research starting point based on business profile data retrieved on . Titles and companies reflect that source snapshot; roles marked former had ended by then. Check the linked profiles for current details. Inclusion does not imply Instant Expert membership or availability.