Senior Technical Compliance Analyst
Core
Lead end-to-end external audits and certifications for US public-sector security programs, translating regulatory requirements into practical technical controls for cloud environments.
Role type
Senior individual-contributor technical compliance analyst
Builds
Secure cloud services for US federal, state, and local government customers
Domain
US Public Sector / Cloud Security Compliance
Required skills
FedRAMP High, DoD IL5+, CJIS, ITAR, NIST SP 800-53, NIST SP 800-171, cloud security architecture, control mapping, gap analysis, remediation oversight, Jira, Confluence
Preferred skills
CISA, CRISC, CISSP, ISO Lead Implementer
Technologies
AWS, Google Cloud, Microsoft Azure, Jira, Confluence
Responsibilities
Lead end-to-end external audits and certifications, including scoping, audit planning, evidence collection, auditor coordination, findings management, and final outcomes. Direct federal assessment workstreams, coordinating with Third Party Assessment Organizations (3PAOs), agency sponsors, and the FedRAMP Program Management Office. Manage the federal continuous monitoring program, including vulnerability analysis and reporting, remediation tracking, and maintenance of the Plan of Action and Milestones (POA&M). Lead annual updates and technical reviews of key FedRAMP documentation, including the System Security Plan (SSP), Contingency Plan (ISCP), and Incident Response Plan (IRP). Serve as a primary point of contact for external auditors and enterprise customers during technical security reviews and audit discussions. Translate NIST and other regulatory requirements into actionable technical controls for Engineering and Operations teams. Advise on cloud security configurations, including FIPS 140-2, boundary protection, and access controls, to meet federal and DoD IL5+ requirements. Map regulatory requirements to the central control framework and conduct gap analyses for new frameworks, jurisdictions, and market expansions. Own internal audit schedules and remediation workflows, establishing accountability, milestones, dependencies, and resolution timelines. Assess compliance maturity and communicate material risks, gaps, trends, and program progress to business and technical leadership. Prepare and review customer-facing security documentation and audit evidence to ensure accuracy and alignment with technical architecture. Build and maintain executive dashboards and Jira workflows for control performance, audit findings, and remediation progress. Lead cross-functional compliance initiatives, identify delivery risks and dependencies, recommend process improvements, and mentor stakeholders on effective compliance practices.
Seniority
Senior, hands-on IC
