Principal Security Compliance Analyst (Public Sector, Information Security)

Responsibilities

• Join our team as a Principal Security Compliance Analyst, where you'll lead our FedRAMP Moderate program and contribute to our mission in a supportive and engaging environment. You'll manage the authorization and continuous monitoring program, maintain required documentation, coordinate assessments, track security findings, and work with various teams to implement and maintain controls. Enjoy benefits such as fully paid health coverage, flexible location and schedule, generous vacation days, parental leave, volunteer time, and charitable donation matching.
• Gestionar el programa de autorización y monitoreo continuo de FedRAMP Moderate.
• Mantener el Plan de Seguridad del Sistema, políticas, procedimientos, evidencia, inventarios, diagramas y otra documentación requerida.
• Coordinar evaluaciones y revisiones con nuestro 3PAO, socios de agencias federales, consultores y equipos internos.
• Ability to communicate effectively with technical teams, auditors, government stakeholders, and company leadership

Requirements

• Strong understanding of FedRAMP, NIST SP 800-53, and continuous monitoring requirements
• Eligible to work in Department of Defense (DoD) Impact Level 4 or above cloud service environments
• 5+ years of experience managing or supporting a FedRAMP Moderate program
• Experience with SSPs, POA&Ms, control evidence, vulnerability management, and security assessments
• Strong project-management and organizational skills

Pay

USD 159,800 - 303,500