Senior Compliance Analyst - FedRAMP
Core
Serve as the Information System Security Officer (ISSO) for CoLab's GovCloud environment, managing the full lifecycle of the FedRAMP Class D compliance program including certification packages, ongoing reporting, and significant change processes.
Role type
Senior IC compliance analyst (FedRAMP ISSO)
Builds
FedRAMP Class D certification and ongoing compliance posture for a GovCloud environment
Domain
Cloud security compliance (FedRAMP, NIST 800-53)
Required skills
FedRAMP lifecycle management, NIST SP 800-53 control mapping, GRC platform configuration, vulnerability reporting (VDR/VER), Significant Change Notification (SCN) process, audit coordination, policy development, security inventory management
Preferred skills
Prior ISSO experience, knowledge of NIST 800-171/CMMC, familiarity with FedRAMP 20x, experience with Nessus scanning tools
Technologies
Paramify, Nessus, FedRAMP 20x, NIST SP 800-53
Responsibilities
Serve as ISSO for the GovCloud system, maintain Certification Package and Security Decision Record, run vulnerability reporting under VDR/VER rules, own the Significant Change Notification (SCN) process, lead transition to new FedRAMP requirements, coordinate annual assessments and 3PAO walkthroughs, reconcile Integrated Inventory against scan coverage, review feature eligibility for compliance impact, monitor compliance deadlines
Seniority
Senior, hands-on IC
