Principal Security Compliance Analyst - Public Sector - InfoSec
Core
Lead the management of the FedRAMP Moderate authorization and continuous monitoring program for a cloud security platform.
Role type
Principal Security Compliance Analyst (Public Sector)
Builds
FedRAMP Moderate compliance posture and security controls for Elastic's cloud-based search and security solutions.
Domain
Public Sector / Cloud Security Compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
FedRAMP Moderate program management, NIST SP 800-53 compliance, System Security Plan (SSP) maintenance, POA&M tracking, 3PAO coordination, vulnerability management, security assessment coordination, project management, risk monitoring, compliance metrics reporting, change impact analysis for FedRAMP.
Preferred skills
Experience with DoD Impact Level 4+ cloud environments.
Technologies
FedRAMP, NIST SP 800-53, SSP, POA&M, 3PAO tools.
Responsibilities
Manage the FedRAMP Moderate authorization and continuous monitoring program; Maintain the System Security Plan, policies, procedures, evidence, inventories, and diagrams; Coordinate assessments and reviews with 3PAOs, federal agency partners, and internal teams; Track security findings and POA&M items through remediation; Work with cross-functional teams to implement and maintain required controls; Monitor program deadlines, risks, and compliance metrics; Review system and product changes for potential FedRAMP impact.
Seniority
Principal, hands-on IC with strategic oversight.
