Government Compliance Technical Specialist

This is a fully remote position, open to applicants in United States, +1 more country.

📋 Description

• Lead the technical compliance build activities for FedRAMP 20x readiness, which includes interpreting Key Security Indicators (KSIs), defining evidence strategies, and coordinating machine-readable compliance outputs.

• Oversee the daily management and execution of FedRAMP Moderate/Class C continuous monitoring, managing deliverables, POA&M tracking, and deviation requests.

• Create and maintain System Security Plans (SSPs), Security Decision Records (SDRs), and other compliance documentation in formats suitable for both human and machine readability.

• Manage the tracking of findings and remediation across various government compliance programs.

• Collaborate with engineering, security, and cloud operations teams to gather evidence, validate control implementation, and address compliance gaps.

• Provide support for GovRAMP, TX-RAMP, IRAP, and other governmental or public-sector compliance programs.

• Cultivate relationships with Third Party Assessment Organizations (3PAOs) and agency stakeholders.

• Monitor and report on the health of government programs.

• Stay updated on FedRAMP policy changes and adapt the compliance roadmap accordingly.

• Automate the processes for evidence collection pipelines and indicator health tracking.

• Assist in managing government compliance workstreams alongside product, security, and engineering teams.

⛳️ Requirements

• At least 3 years of experience in FedRAMP program management and technical compliance.

• 4–7 years of experience in information security, compliance, or Governance, Risk, and Compliance (GRC).

• Proven ability to manage a FedRAMP Moderate program, which includes SSP authorship, Continuous Monitoring (ConMon) execution, POA&M management, and coordination with assessors.

• In-depth knowledge of NIST SP 800-53 controls and their practical application in cloud environments.

• Strong understanding of FedRAMP 20x concepts, such as Key Security Indicators (KSIs), machine-readable evidence frameworks, and continuous assessment models.

• Ability to interpret and define KSIs in relation to BeyondTrust's compliance posture.

• Capable of coordinating across engineering, infrastructure, legal, and operations teams to gather evidence and ensure remediation is completed.

• Experience in building or supporting automated compliance evidence pipelines.

• Familiarity with GRC tools for managing findings, collecting evidence, and tracking programs.

• Competence in managing multiple concurrent workstreams, identifying blockers, and maintaining consistent delivery schedules.

• Excellent written and verbal communication skills to convey technical compliance information to diverse audiences.

🏝️ Benefits

• A culture that promotes flexibility, trust, and continuous learning.

• Supportive employee environment with an emphasis on inclusivity.

• Initiatives focused on diversity and inclusion.