Senior Compliance Analyst overseeing compliance and risk management for an AI platform at a government contracting firm. Leading FedRAMP authorization and maintaining regulatory adherence.
Responsibilities
Manage the Authorization Process: Oversee the entire FedRAMP authorization lifecycle, from initial assessment to final approval.
Documentation and Compliance: Prepare, review, and rigorously maintain critical security documentation, including the System Security Plan (SSP), control baselines, and the Plan of Action & Milestones (POA&M).
Security Controls Implementation: Conduct detailed gap analyses, actively map controls against frameworks like NIST 800-53, and collaborate with Product and Engineering to implement, validate, and document security controls.
Continuous Monitoring: Design and oversee the continuous monitoring process to ensure ongoing compliance with federal standards.
Risk and Audit Management: Perform comprehensive risk assessments and coordinate all security audits.
Liaison and Communication: Serve as a primary point of contact and compliance liaison with internal teams and government agencies/clients.
Requirements
5+ years of progressive experience in Compliance, IT Audit, GRC (Governance, Risk, and Compliance), or Regulatory Affairs within the Government Contracting (GovCon) or Technology/SaaS industry.
Demonstrated, hands-on experience managing the lifecycle and documentation for at least two of the following frameworks: FedRAMP, CMMC, or SOC 2.
Comprehensive understanding of core federal procurement regulations (FAR, DFARS) and extensive experience with NIST publications (e.g., 800-53, 800-171).
Exceptional analytical, organizational, and project management skills, specifically in managing complex, multi-year compliance projects.
U.S. citizenship with the ability to pass a Federal Background Check and Identity Verification.
Benefits
Competitive salary with performance based incentive plan and stock options in a rapidly growing, venture-backed company.
Comprehensive health plan, ensuring you and your loved ones are well taken care of.
Flexible work arrangements, including full remote work capabilities, to balance your professional and personal life.
Extensive professional development opportunities, providing a fast track for career advancement.
Expert Analyst enhancing compliance program for PG&E's electric operations. Providing guidance, tools, and testing for risk and compliance initiatives.
Electric Compliance and Risk Consultant providing oversight of NERC Planning standards within Electric Engineering operations. Collaborating with various business units to ensure regulatory compliance and improve internal controls.
Expert Compliance & Risk Consultant collaborating with engineering and operations for NERC compliance oversight. Supporting mitigation plans and developing internal controls within utility regulatory framework.
Senior management role overseeing technology compliance and risk management initiatives across wealth technology in India. Collaborating with stakeholders, and ensuring robust controls and compliance measures are in place.
International Regulatory Affairs Senior Specialist advancing global market access by providing technical support to ensure compliance for medical devices. Focused on facilitating registrations, renewals, and quality approvals.
Staff Quality Engineer leading quality compliance and process improvements at PROCEPT BioRobotics. Ensuring regulatory compliance and enhancing quality metrics in surgical robotics.
Assistente de Compliance supporting integrity program activities like Due Diligence and investigations at compliance team. Ensuring adherence to internal policies and legal regulations.
Compliance Coordinator overseeing integrity program and corporate compliance at Renner. Leading audits, managing reports, and coordinating ethical culture initiatives.
Compliance Analyst ensuring adherence to internal policies and compliance regulations for Eldorado Institute. Engaging in integrity programs and handling internal investigations.