Principal Security Compliance Analyst - Public Sector - InfoSec

📋 Description

• Manage the FedRAMP Moderate authorization and continuous monitoring program.
• Maintain the System Security Plan, policies, procedures, evidence, inventories, diagrams, and other
• Coordinate assessments and reviews with our 3PAO, federal agency partners, consultants, and
• Track security findings and POA&Ms through remediation.
• Work with Security, Engineering, IT, Product, and Legal teams to implement and maintain required
• Monitor program deadlines, risks, and compliance metrics and report progress to leadership.

🎯 Requirements

• 5+ years of experience managing or supporting a FedRAMP Moderate program.
• Strong understanding of FedRAMP, NIST SP 800-53, and continuous monitoring requirements.
• Experience with SSPs, POA&Ms, control evidence, vulnerability management, and security
• Strong project-management and organizational skills.
• Ability to communicate effectively with technical teams, auditors, government stakeholders, and
• Eligible to work in Department of Defense (DoD) Impact Level 4 or above cloud service environments.

🎁 Benefits

• Competitive pay based on the work you do here and not your previous salary
• Health coverage for you and your family in many locations
• Ability to craft your calendar with flexible locations and schedules for many roles
• Generous number of vacation days each year
• Increase your impact - We match up to $2000 (or local currency equivalent) for financial donations
• Up to 40 hours each year to use toward volunteer projects you love