Senior Compliance Analyst overseeing compliance and risk management for an AI platform at a government contracting firm. Leading FedRAMP authorization and maintaining regulatory adherence.
Responsibilities
Manage the Authorization Process: Oversee the entire FedRAMP authorization lifecycle, from initial assessment to final approval.
Documentation and Compliance: Prepare, review, and rigorously maintain critical security documentation, including the System Security Plan (SSP), control baselines, and the Plan of Action & Milestones (POA&M).
Security Controls Implementation: Conduct detailed gap analyses, actively map controls against frameworks like NIST 800-53, and collaborate with Product and Engineering to implement, validate, and document security controls.
Continuous Monitoring: Design and oversee the continuous monitoring process to ensure ongoing compliance with federal standards.
Risk and Audit Management: Perform comprehensive risk assessments and coordinate all security audits.
Liaison and Communication: Serve as a primary point of contact and compliance liaison with internal teams and government agencies/clients.
Requirements
5+ years of progressive experience in Compliance, IT Audit, GRC (Governance, Risk, and Compliance), or Regulatory Affairs within the Government Contracting (GovCon) or Technology/SaaS industry.
Demonstrated, hands-on experience managing the lifecycle and documentation for at least two of the following frameworks: FedRAMP, CMMC, or SOC 2.
Comprehensive understanding of core federal procurement regulations (FAR, DFARS) and extensive experience with NIST publications (e.g., 800-53, 800-171).
Exceptional analytical, organizational, and project management skills, specifically in managing complex, multi-year compliance projects.
U.S. citizenship with the ability to pass a Federal Background Check and Identity Verification.
Benefits
Competitive salary with performance based incentive plan and stock options in a rapidly growing, venture-backed company.
Comprehensive health plan, ensuring you and your loved ones are well taken care of.
Flexible work arrangements, including full remote work capabilities, to balance your professional and personal life.
Extensive professional development opportunities, providing a fast track for career advancement.
Working Student supporting regulatory and compliance efforts at Paymenttools' e - money institution. Collaborating on risk management and compliance projects in a hybrid role based in Cologne.
Senior Consultant Regulatory Affairs participating in pharmaceutical projects focused on market access and regulatory compliance. Joining Deloitte's sector regulation team based in Madrid.
Trade Compliance Officer managing stakeholder compliance with UK and US export laws. Contributing to trade policies and documentation for international imports and exports in a hybrid role.
Expert HSE Compliance role focused on environmental regulations and safety in energy production at EniBioch4in. Overseeing compliance, audits, and promoting HSE culture across facilities.
Junior Regulatory Reporting Operations Specialist analyzing vast trade reporting data and ensuring regulatory reporting quality at SEB. Collaborating with teams to resolve reporting issues for regulatory compliance.
Risk & Compliance Advisory Practice Lead at Netwealth providing risk and compliance advice across investment and product governance. Leading advisory teams while ensuring regulatory compliance and risk management standards.
Director Compliance role at Manulife managing the Complaints & Regulatory Investigations team. Overseeing investigations and ensuring compliance with regulatory standards.
Regulatory Affairs Director overseeing activities in the Regulatory Affairs Department at CareSource. Focused on compliance, contracting, and leading the team in a hybrid work environment.
IT Regulatory Supervisor managing regulatory inquiries and oversight for capital projects at Eversource. Focused on compliance with state laws and regulations in the energy sector.
Assistant Manager overseeing Compliance operations for Southeast Asia - based FinTech company. Engaging in regulatory alignment and policy implementation across several locations.