Principal Security Compliance Analyst – FedRAMP

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead and facilitate comprehensive compliance initiatives for U.S. Federal clients, encompassing readiness assessments, audits, ongoing monitoring activities, and deliverables.

• Act as the compliance lead for Agency ATOs, FedRAMP projects, security evaluations, and the maintenance of ongoing authorizations.

• Serve as the main point of contact with customer security organizations, government stakeholders, assessors, and auditors.

• Oversee the development, review, submission, and maintenance of authorization packages.

• Manage the POA&M process and supervise remediation planning until closure.

• Direct cross-functional teams during audit interviews, demonstrations, testing, evidence gathering, and certification readiness.

• Collaborate with Engineering, Cloud Operations, Product Management, Security, Legal, and third-party service providers.

• Communicate compliance status, risks, milestones, and remediation strategies to executive leadership and governance forums.

• Facilitate the escalation and resolution of compliance risks impacting customers, certifications, or business commitments.

• Offer risk-based advice and compliance expertise to inform strategic decisions.

• Promote continuous compliance and initiatives for compliance automation.

• Partner with technical teams for automated evidence collection, compliance monitoring, and machine-readable compliance artifacts.

• Support modernization efforts in line with emerging frameworks such as FedRAMP 20x.

• Lead audit strategy, stakeholder coordination, interview preparation, evidence planning, auditor engagement, issue management, and remediation across various compliance frameworks.

• Liaise with regulatory bodies, government agencies, external assessors, and auditors.

• Interpret changing regulatory requirements and translate them into organizational controls and compliance actions.

⛳️ Requirements

• Over 8 years of progressive experience in leading security compliance, audits, governance, risk, and federal authorization programs.

• Proven experience in leading Agency ATO, FedRAMP, or similar government authorization programs.

• Demonstrated success in spearheading enterprise-wide audit and certification initiatives.

• Experience in influencing executive leadership and senior stakeholders.

• Proficient in managing highly complex compliance programs with cross-functional responsibilities.

• Experience serving as the primary customer-facing compliance lead.

• Experience in leading strategic compliance transformation initiatives.

• Extensive knowledge of continuous controls monitoring and continuous assurance models.

• Experience in implementing compliance automation, GRC tooling, or compliance-as-code capabilities.

• Previous experience supporting federal agencies or highly regulated environments.

• Familiarity with multiple compliance frameworks, including SOC 2, FedRAMP, NIST 800-53/FISMA, and ISO 27001/2.

• Must be based in the U.S.

• No relocation assistance provided.

🏝️ Benefits

• Discretionary annual incentive plan.

• Comprehensive medical, vision, and dental coverage.

• Generous 401(k) matching contribution.

• Life and disability insurance.

• Mental health coaching services.

• Virtual fitness programs.

• Paid personal time off.

• 12 paid holidays.

• Parental leave benefits.

• Education reimbursement opportunities.

• Initiatives focused on professional growth and learning.

• Flexible work arrangements.

• Initiatives promoting diversity, inclusion, and respect.