Khurram Malik

About Khurram Malik

FedRAMP Authorizations• UKG Government Cloud - FR24••••••68 - In Progress (2026)• Asset Management Suite (AMS)- - Authorized (2025)• Citrix Cloud - FR18••••••92 - Authorized (2022)Executive Summary: Strategic cloud compliance and security leader with deep experience driving U.S. and global public sector authorization programs across FedRAMP, IRAP and NIST-based regulatory frameworks within enterprise SaaS and cloud platforms.Proven track record leading authorization readiness, continuous monitoring, and compliance modernization initiatives that enable secure market access while supporting product velocity and business growth. Experienced partnering across Engineering, Security, Legal, and GTM organizations to operationalize regulatory requirements into scalable, product-embedded practices.Recognized for advancing automation-driven compliance programs, strengthening regulator engagement, and aligning governance strategy with cloud portfolio expansion into regulated markets.Core Expertise• FedRAMP Authorization & Continuous Monitoring• SOC2 and IRAP authorization management• Public Sector Compliance Strategy (USG / DoD-aligned environments)• NIST 800-53 & Secure Software Development (SSDF)• Compliance Automation & OSCAL Alignment (emerging adoption)• Cloud Security Governance (Azure, GCP & SaaS Platforms)• Regulatory & 3PAO Engagement (Schellman, Coalfire, Fortreum, Prescient)• Cross-Functional Executive Leadership• Compliance Program Modernization (FedRAMP 20x alignment)

Experience

1. Fedramp Program Manager

   UKG

   Mar 2025 — Present · Weston, FL, US

   Key Responsibilities & Achievements- Lead the FedRAMP authorization programs, including readiness assessments, remediation, and continuous monitoring- Partner with executive leadership and external 3PAOs (Third-Party Assessment Organizations) to guide audit strategy, evidence collection, and system boundary documentation- Develop and implement governance frameworks that align with NIST 800-53, and SOC 2 requirements to maintain multi-framework compliance- Drive cross-functional remediation and risk management initiatives (e.g. FIPS) across cloud and security engineering to close compliance gaps efficiently- Manage relationships with authorizing officials, government stakeholders, and assessors, ensuring clear communication and transparency throughout the audit lifecycle- Establish metrics and dashboards for executive visibility into compliance health, leveraging data-driven insights to prioritize risk and resource allocation- Advocate for security-by-design and DevSecOps integration, ensuring compliance controls are embedded into product development and cloud operations.Core Impact- Enhanced UKG’s readiness and audit performance through a proactive compliance strategy- Strengthened alignment between compliance, engineering, and leadership to accelerate authorization timelines and sustain continuous compliance- Elevated organizational maturity in cloud security governance, documentation, and automation.

Education

• Quantic School of Business and Technology

  Executive MBA, Business Administration and Management, General

  2024

• University Of Central Punjab

  Master's degree, Computer Science

• University of the Punjab

  Bachelor's degree, Engineering