Principal Security Compliance Analyst (Public Sector, Information Security)

• Join our team as a Principal Security Compliance Analyst, where you’ll take the lead in managing our FedRAMP Moderate program. You’ll be part of a fantastic team that values a strong security culture, allowing you to contribute meaningfully to our mission while collaborating with like-minded professionals. Your expertise will help us maintain and enhance our compliance efforts in a supportive and engaging environment
• Manage the FedRAMP Moderate authorization and continuous monitoring program
• Maintain the System Security Plan, policies, procedures, evidence, inventories, diagrams, and other required documentation
• Coordinate assessments and reviews with our 3PAO, federal agency partners, consultants, and internal teams
• Track security findings and POA&M items through remediation
• Work with Security, Engineering, IT, Product, and Legal teams to implement and maintain required controls
• Monitor program deadlines, risks, and compliance metrics and report progress to leadership
• Review system and product changes for potential FedRAMP impact
• Help control owners understand their responsibilities and prepare appropriate evidence

Benefits

• Toast to your health: Fully paid health coverage for you and your family, in many locations.
• Craft your calendar: Flexible location and schedule for most roles.
• Create space for you: Distributed by design workforce, plus generous number of vacation days each year.
• Embrace parenthood: Minimum of 16 weeks of parental leave, plus generous family formation benefits.
• Give back your time: 40 hours each year to use toward volunteering with organizations and causes you’re passionate about.
• Amplify your impact: Double your charitable giving — we match donations up to $1500 USD (or local currency equivalent).- Ability to communicate effectively with technical teams, auditors, government stakeholders, and company leadership
• Strong understanding of FedRAMP, NIST SP 800-53, and continuous monitoring requirements
• Eligible to work in Department of Defense (DoD) Impact Level 4 or above cloud service environments
• 5+ years of experience managing or supporting a FedRAMP Moderate program
• Experience with SSPs, POA&Ms, control evidence, vulnerability management, and security assessments
• Strong project-management and organizational skills