Senior Federal Compliance Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead compliance evaluations and the development of Horizon3's IL4 and IL5 authorizations.

• Ensure adherence to the DoW Cloud Computing Security Requirements Guide (CC SRG).

• Maintain and enhance the compliance posture for FedRAMP High, NIST SP 800-53, and other pertinent federal frameworks.

• Act as a Governance, Risk, and Compliance (GRC) liaison to development and engineering teams.

• Convert DoW and federal compliance requirements into actionable technical specifications for cloud-native infrastructure.

• Oversee internal audits, risk assessments, and the continuous monitoring (ConMon) program.

• Serve as the main point of contact for external auditors, federal sponsors, and regulatory bodies.

• Address security questionnaires, due diligence requests, and vendor risk assessments.

• Develop and uphold GRC policies and procedures.

• Create and conduct compliance training for employees.

• Engage in incident response and investigations concerning compliance issues or federal data.

• Act as the focal point for Horizon3's Federal Compliance Program and as the subject matter expert on DoW security requirements for AWS-hosted environments.

⛳️ Requirements

• Strong understanding of cybersecurity frameworks and regulations, particularly DoW CC SRG (IL4/IL5), FedRAMP High/Moderate, and NIST SP 800-53.

• Excellent written and verbal communication abilities.

• Experience in drafting and maintaining FedRAMP System Security Plans, Policies, Procedures, and associated documentation.

• Strong analytical and problem-solving capabilities.

• Ability to work autonomously as well as collaboratively within a team.

• Strong organizational skills with a keen attention to detail.

• Capacity to prioritize and manage multiple projects and deadlines effectively.

• A minimum of 3-5+ years of experience in a GRC, Security Compliance, or related position.

• Experience in securing and managing compliance within AWS environments.

• Familiarity with GRC tools and platforms.

• Experience with AWS security and compliance tools, including Security Hub, GuardDuty, and Inspector.

• Knowledge of issue tracking and documentation tools such as Jira and Confluence.

• Experience with Amazon Web Services (AWS).

• Understanding of cloud-native components and distributed architectures.

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent practical experience along with relevant certifications such as CISSP or CISA.

• US Citizenship is required.

• Ability to obtain and maintain a government security clearance.

• Active DoW security clearance is preferred.

🏝️ Benefits

• All full-time positions are eligible for an equity package in the form of stock options.

• Health, vision, and dental insurance for you and your family.

• Flexible vacation policy.

• Generous parental leave.

• Opportunities for growth and career development.

• An inclusive culture.

• A collaborative and innovative work environment.

• Fully remote company.

• Job-related travel expenses, subject to manager approval.