Fortreum is a trusted leader in cloud and cybersecurity services, ranked among the Top 5 FedRAMP Third Party Assessment Organizations (3PAO). With the addition of Kovr.AI, we have expanded our capabilities to include advanced cyber risk quantification and analytics, enabling organizations to better understand, measure, and communicate risk. Together, we deliver independent, third-party, vendor-agnostic regulatory assessment and advisory services, alongside advanced cybersecurity offensive and compliance technical solutions. Our comprehensive service portfolio spans regulatory compliance frameworks including FedRAMP, CMMC, FISMA, SOC, PCI, ISO, and HIPAA.

Working with Fortune 500 companies and leading cloud service providers, we’ve built our reputation on service-delivery excellence and an unwavering commitment to client success. Our continued rapid growth creates exceptional opportunities for driven professionals to make their mark in the cybersecurity industry—guided by our core values: quality above all, a customer-driven mindset, autonomy, and personal accountability.

The Opportunity

On our team, you will play a pivotal role in driving delivery and execution across Fortreum’s Kovr AI Platform—our AI-native compliance automation solution. As a Program Manager, you will bridge engineering, product, delivery, and business teams, owning end-to-end project plans that keep complex technical initiatives on track. You will translate product roadmaps into executable delivery schedules, manage risk and dependencies across cross-functional workstreams, and ensure our AI solutions are delivered on time and to the standard our federal and enterprise customers expect. This is a hands-on, PM opportunity to build the product management function from the ground up inside a fast-moving startup-within-a-company environment.

Key Responsibilities

Specifically, you would be responsible for:

Own end-to-end execution of technical project plans, translating product roadmaps into scheduled, resourced delivery milestones
Coordinate cross-functionally across Engineering, Sales, Delivery and the Program Management Office (PMO) to keep initiatives moving and unblock dependencies
Establish and run core project management processes (status reporting, sprint/iteration planning, risk registers) appropriate for a fast-scaling AI startup
Translate complex technical concepts—system architecture, APIs, AI/ML capabilities—for both technical and non-technical stakeholders
Track and report on project health, timelines, and delivery commitments across concurrent workstreams
Coordinate customer success and onboarding activities tied to product releases and deployments
Identify and mitigate delivery risks across cloud, AI/ML, and compliance-related workstreams
Drive continuous improvement of project management tooling, processes, and team rituals in coordination with the PMO
Support planning and execution to ensure products meet both technical excellence standards and market needs

Basic Qualifications

Bachelor's degree in Computer Science, Engineering, or related technical field
Strong technical background in AI/ML with the ability to engage deeply with engineering teams on architecture, APIs, and system design
A strong advocate for customer needs, with demonstrated experience in the creation of Product Feature Requests
Demonstrated experience managing technical projects or programs from planning through delivery
Demonstrated experience working with an account team to identify risks and escalation paths, and in identifying areas for growth and expansion
Excellent communication skills with the ability to translate technical concepts for non-technical audiences
Experience with SaaS products and developer-focused tools
Experience with agile development methodologies and project/product analytics tools such as Jira and Linear
Active Top Secret clearance
Local and able to go onsite in DC metro area to include MD/VA

Preferred Skills

Previous experience managing the deployment of a software product within air-gapped environments
Understanding of AI model deployment, scalability, and infrastructure challenges
Previous experience as a first or early technical program/project management hire at a startup
Familiarity with federal compliance frameworks (NIST 800-53/171, FedRAMP, CMMC) and related artifacts (SSPs, POA&Ms)

Posted Salary Range

$155,000 - $180,000 annual salary

What Fortreum Offers

We offer a competitive compensation package, where you will be rewarded based on your performance/outcomes and recognized for the value you bring to our business. Our benefits package includes medical insurance, dental insurance, vision insurance, 401K plan with a 4% match, company paid short-term disability, company paid long-term disability, company paid AD&D and life insurance, flex time off, annual bonuses, training stipends, certification reimbursements, access to over 30,000 free online training courses, personal cell phone allowance, new hire and annual home office stipend, spot awards and eleven paid holidays.

An Affirmative Action and Equal Opportunity Employer

Fortreum is an Affirmative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability. If you’d like to view a copy of the company’s affirmative action plan or policy statement, please email [email protected]. If you have a disability and you believe you need a reasonable accommodation in order to search for a job opening or to submit an online application, please e-mail [email protected] or call 703-594-1460. This email and phone number is created exclusively to assist disabled job seekers whose disability prevents them from being able to apply online. Only messages left for this purpose will be returned. Messages left for other purposes, such as following up on an application or technical issues not related to a disability, will not receive a response.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.

About the company

Fortreum provides cybersecurity services for highly regulated industries, offering audit, advisory, and technical testing to help organizations meet security and regulatory requirements. It covers frameworks such as FedRAMP, DoD SRG, CMMC, SOC 2, ISO, PCI, and HIPAA for government agencies, commercial cloud providers, system integrators, and enterprises pursuing public-sector work. The XRAMP platform consolidates annual authorizations and audits into a single continuous assurance workflow with an assess-once, reuse-many approach to reduce effort and cost. In addition to advisory work, it performs penetration testing and red teaming to verify controls, and aims to simplify and accelerate certification in regulated markets through XRAMP.

Company Size

51-200

Company Stage

N/A

Total Funding

N/A

Headquarters

null

Founded

2020

Get referred to Fortreum

See people who can refer or advise you

Simplify's Take

What believers are saying

July 2026 Gryphon recapitalization funds hiring, product buildout, and acquisitions.
Fortreum won 2026 Cybersecurity Stars for XRAMP, signaling market recognition.
Kovr.AI deployments with U.S. Air Force and Space Force strengthen federal credibility.

What critics are saying

Fortreum depends on FedRAMP, CMMC, and DoD SRG rules; delays freeze deal flow.
AI-assisted assessments threaten Fortreum's assessor credibility if clients reject machine-generated findings.
Federal buyers can standardize compliance automation, commoditizing assessor fees within 24 months.

What makes Fortreum unique

James Leach and Michael Carter bring FedRAMP experience since program inception.
XRAMP unifies readiness, assessment, and continuous monitoring into one compliance workstream.
April 2026 Kovr.AI acquisition adds FedRAMP-authorized AI evidence mapping and Agent Artemis.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Health Insurance
Dental Insurance
Vision Insurance
401(k) Company Match
Disability Insurance
Life Insurance
Flexible Work Hours
Paid Holidays
Performance Bonus
Training Programs
Professional Development Budget
Professional Certification Support

Growth & Insights and Company News

Headcount

6 month growth

24%

1 year growth

24%

2 year growth

24%

Associated Press

Jun 25th, 2026

Fortreum launches AI-native CMMC assessment service to cut certification time from 12 months to 1-3 months

Fortreum has launched the CMMC Assessment Readiness Review, an AI-native service helping US Department of Defense contractors prepare for certification assessments. The service aims to reduce time-to-certification from over 12 months to one to three months by identifying compliance gaps before formal assessment. The company combines an AI-native compliance platform, an in-house C3PAO assessor, and a FedRAMP-authorised environment for handling sensitive data. At its core is Agent Artemis, Kovr.AI's patented agentic AI system that consolidates evidence collection across cloud environments and security tools. Unlike competitors that separate platform provision from assessment, Fortreum delivers both services in-house. The Assessment Readiness Review is available immediately for defence contractors preparing for CMMC Level 1 and Level 2 assessments.

Associated Press

Apr 13th, 2026

Fortreum acquires Kovr.AI to combine AI-powered compliance platform with independent cybersecurity assessments

Fortreum, a cybersecurity assessment firm backed by Gryphon Investors, has acquired Kovr.AI, a FedRAMP-authorised AI-native compliance platform. Financial terms were not disclosed. Kovr.AI serves organisations across highly regulated industries with its patented "build once, map anywhere" architecture, allowing evidence and controls to satisfy multiple compliance frameworks simultaneously, including FedRAMP, CMMC 2.0 and NIST CSF 2.0. The platform features Agent Artemis, an agentic AI operating within a Zero Data Retention environment. Kovr.AI already works with the US Air Force, Space Force and Accenture Federal Services. The acquisition combines Kovr's AI platform with Fortreum's independent assessment capabilities. Existing clients from both companies gain access to the combined offering immediately.

Business Wire

Apr 13th, 2026

Fortreum acquires Kovr.AI to deliver AI done right in cybersecurity compliance - setting a new standard for audit quality, compliance readiness, and client trust.

Fortreum acquires Kovr.AI to deliver AI done right in cybersecurity compliance - setting a new standard for audit quality, compliance readiness, and client trust. Acquisition Combines Fortreum's Practitioner Expertise with Kovr's FedRAMP-Authorized Agentic AI Platform - Serving the Full Compliance Lifecycle Across FedRAMP, CMMC 2.0, DOD SRG, NIST CSF 2.0, and GovRAMP LANSDOWNE, Va.-(BUSINESS WIRE)-Fortreum, a leading cybersecurity assessment and advisory firm backed by Gryphon Investors, a leading middle-market private investment firm, and trusted by blue-chip federal and commercial clients, today announced the acquisition of Kovr.AI, a FedRAMP-authorized, AI-native compliance platform purpose-built for organizations in highly regulated industries. Kovr.AI has recently announced strategic partnerships with agencies, companies, and investors in the U.S. defense and national security community, an indication that the world's most security-conscious enterprises trust its technology platform. Enterprise organizations are sending a clear message: they want AI-native innovation in compliance, without compromising security, integrity, or trust. Kovr.AI and Fortreum answer that call - combining the most advanced AI compliance platform in the market with the independent assessor trusted by blue-chip enterprises across federal and commercial sectors. Together, Fortreum and Kovr.AI serve organizations across the full compliance lifecycle - from readiness and evidence preparation through formal assessment and ongoing monitoring across FedRAMP, CMMC 2.0, DOD SRG, NIST CSF 2.0, and GovRAMP. Kovr's patented "build once, map anywhere" architecture means evidence and controls developed within the platform automatically satisfy equivalent requirements across multiple frameworks simultaneously, enabling organizations to advance through each standard in a single, coordinated effort. Fortreum's practitioner-led assessments then deliver the independent attestation that makes that posture credible and defensible to regulators, customers, and boards. Fortreum's role as the trusted independent assessor remains unchanged, and Kovr's platform is built to work alongside the MSPs, readiness consultants, and compliance tools organizations already rely on. Existing Kovr.AI customers gain direct access to Fortreum's CMMC C3PAO and FedRAMP assessment expertise; existing Fortreum clients gain Kovr's AI-powered compliance platform. For channel partners that bring clients to Fortreum, this combination creates a faster, more capable assessment experience that reflects the strength of the preparation work that preceded it. This is AI done right. At the intelligence layer of Kovr's platform is Agent Artemis - an agentic AI that gives practitioners a unified interface to the full scope of compliance data: cloud environments, security toolchains, evidence repositories, and documentation. All of this operates within a FedRAMP-authorized, Zero Data Retention environment. A built-in governance framework ensures every AI-generated input is auditable and subject to human validation before any finding reaches the client. Kovr.AI holds FedRAMP Moderate Authorization and has earned recognition from the national security community - validated by a strategic investment from a leading national security-focused investor and already deployed with the U.S. Air Force, Space Force, and organizations including Accenture Federal Services. This track record is a testament to Kovr's performance at the highest levels of federal rigor, and gives Fortreum's clients in the defense industrial base immediate access to a platform already trusted where the stakes are highest. Fortreum's assessments are always practitioner-led and practitioner-validated - every finding reviewed, signed off, and stood behind by a qualified member of the Fortreum team. As an independent assessor, Fortreum's commitment is to the integrity of its findings. The combined Fortreum + Kovr.AI solution is available now. Existing clients of both organizations are encouraged to contact their account team to explore the combined capabilities. New clients can schedule a consultation or request a demo at www.fortreum.com. "This acquisition is about doing AI right - making our assessments better, not just faster. Our clients choose Fortreum because our findings represent genuine, independent judgment. With Agent Artemis and a platform already validated by the national security community and deployed across leading federal organizations, we are bringing a level of rigor and capability that simply did not exist before in this market - paired with the human expertise that makes every finding credible. That is a combination that sets a new standard." - James Leach, CEO & Co-Founder, Fortreum "Kovr was built to serve organizations across the entire compliance journey - from building their security posture through the formal assessment that validates it. Joining Fortreum means our customers now have direct access to the most trusted independent assessor in the market, and Fortreum's clients gain the most capable AI compliance platform available. Together, we will deliver more thorough, more defensible assessments - and demonstrate what AI-enabled compliance, done with integrity, actually looks like." - Andrew Black, CEO & Co-Founder, Kovr.AI About Fortreum Fortreum is a trusted cybersecurity assessment and advisory firm delivering rigorous, high-quality outcomes for blue-chip clients across federal, defense, and commercial sectors. Backed by Gryphon Investors, Fortreum is a recognized C3PAO for CMMC and an authorized assessor for FedRAMP. Its experienced practitioners bring depth of evaluation, independence of judgment, and accountability to every engagement. For more information, visit www.fortreum.com. About Kovr.AI Kovr.AI is an AI-native cyber compliance platform built on NIST 800-53, NIST 800-171, and OSCAL standards. Its patented "build once, map anywhere" architecture enables evidence and controls to satisfy requirements across FedRAMP, CMMC 2.0, GovRAMP, DOD SRG, NIST CSF 2.0, and more - simultaneously. At its intelligence layer is Agent Artemis, an agentic AI that provides practitioners with a unified interface to their full compliance environment within a FedRAMP-authorized, Zero Data Retention environment. Deployed with the U.S. Air Force, U.S. Space Force, and organizations including Accenture Federal Services. Learn more at www.kovr.ai. About Gryphon Investors Gryphon Investors is a leading middle-market private investment firm focused on growing competitively-advantaged companies in the Business Services, Consumer, Healthcare, Industrial Growth, Software, and Technology Solutions & Services sectors. With more than $10 billion of assets under management, Gryphon prioritizes investments in which it can form strong partnerships with founders, owners, and management teams to accelerate the building of leading, high-quality companies and generate enduring value through its integrated deal and operations business model. Gryphon's highly-differentiated model integrates since 1999 its well-proven Operations Resources Group, which is led by full-time, Gryphon senior operating executives with general management, artificial intelligence, human capital acquisition and development, acquisition due diligence and integration planning, treasury, finance, and accounting expertise. Gryphon's three core investment strategies include its Flagship, Heritage, and Junior Capital strategies, each with dedicated funds of capital. The Flagship and Heritage strategies target equity investments of $50 million to $500 million per portfolio company. The Junior Capital strategy targets investments of $10 million to $25 million in junior securities of credit facilities, arranged by leading middle-market lenders, in both Gryphon-controlled companies, as well as in other private equity-backed companies operating in Gryphon's targeted investment sectors. Contacts. Media Contact Liz Ryder Director, Marketing - Fortreum [email protected] Fortreum. Release Versions Media Contact Liz Ryder Director, Marketing - Fortreum [email protected]

Gulf & Main Magazine

Jan 7th, 2026

Gryphon Investors takes majority stake in cybersecurity firm Fortreum

Gryphon Investors has completed a majority growth recapitalisation of Fortreum, a cybersecurity services firm specialising in audit, advisory and technical testing for regulated industries. Financial terms were not disclosed. Founded in 2020 and based in Lansdowne, Virginia, Fortreum helps enterprises meet complex cybersecurity requirements across federal and commercial compliance frameworks including FedRAMP, CMMC, ISO and PCI. The company is known for XRAMP, its continuous validation platform that streamlines regulatory auditing. Co-founders James Leach and Michael Carter will retain significant equity stakes. The investment will support expansion of Fortreum's offerings and accelerate development of its tech-enabled solutions, including AI-powered capabilities. This marks Gryphon's fifth platform investment in technology solutions and services, following partnerships with 3Cloud, Caylent, NewRocket and phData.

PR Newswire