Senior Compliance Analyst - FedRAMP

Required

• 6+ years of hands-on experience developing, implementing and maintaining compliance programs, including 3+ years of direct FedRAMP experience (Moderate/High, now Class B/D).
• Prior experience as an Information Systems Security Officer (or in a similar role) for a FedRAMP or FISMA system is strongly preferred.
• Working knowledge of NIST SP 800-53, FedRAMP Certification Package documentation and the 3PAO assessment process. Familiarity with the FedRAMP Consolidated Rules for 2026 (VDR, VER, SCN) and FedRAMP 20x is a strong plus.
• Familiarity with complementary frameworks, especially those that apply to customers handling Controlled Unclassified Information (CUI): NIST SP 800-171 and CMMC. Experience with SOC 2 and ISO 27001 frameworks is also an asset.
• Knowledge of U.S. export controls (ITAR and EAR).
• Experience with GRC platforms such as Paramify or Vanta, and with vulnerability scanning tools such as Nessus.
• Ability to plan and complete work within tight deadlines.
• Ability to review and interpret technical documentation, regulatory reference materials and compliance frameworks.
• Strong communication and interpersonal skills, and the ability to collaborate with cross-functional teams.
• Must be a U.S. person (ITAR, 22 CFR 120.62) and based in the United States. This role deals with highly sensitive information and requires an enhanced background check.