Senior Federal Compliance Analyst
Core
Focal point for Horizon3's Federal Compliance Program, ensuring regulatory compliance for DoW Impact Level 4 and 5 offerings and bridging federal regulators, security teams, and engineering.
Role type
Senior GRC Analyst (Federal Compliance)
Builds
DoW IL4/IL5 authorizations, FedRAMP High compliance posture, and cloud-native infrastructure security specifications.
Domain
Cybersecurity / Federal Government Compliance / Cloud Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
DoW CC SRG (IL4/IL5) expertise, FedRAMP High knowledge, NIST SP 800-53 familiarity, AWS security compliance management, System Security Plan (SSP) authoring, external auditor liaison, policy development, incident response coordination
Preferred skills
Active DoW security clearance, GRC tooling proficiency, AWS Security Hub/GuardDuty/Inspector usage, issue tracking tools (Jira/Confluence)
Technologies
AWS, Jira, Confluence, Security Hub, GuardDuty, Inspector
Responsibilities
Lead IL4/IL5 compliance assessments and authorization build-out; Maintain FedRAMP High and NIST SP 800-53 frameworks; Act as GRC liaison to translate compliance requirements into technical specs; Oversee internal audits, risk assessments, and continuous monitoring; Serve as primary contact for external auditors (3PAOs) and federal sponsors; Respond to security questionnaires and vendor risk assessments; Develop GRC policies and deliver compliance training; Participate in incident response related to compliance issues.
Seniority
Senior, hands-on IC
