Principal GCO High Compliance Systems Advisor
Core
Own end-to-end FedRAMP authorization activity, lead technical control design and documentation, and manage third-party risk management (TPRM) for a multi-jurisdictional SaaS security business.
Role type
Principal GCO High Compliance Systems Advisor
Builds
FedRAMP Moderate authorization, control documentation (SSP, POA&Ms), and TPRM programs
Domain
Cybersecurity compliance and regulatory governance
Required skills
FedRAMP Rev 5 Moderate authorization leadership, technical control design, third-party risk management (TPRM), regulatory framework mapping (FedRAMP, ISO, SOC 2, NIST), technical writing, cross-functional stakeholder management, project management for certification programs
Preferred skills
Experience in PE-backed or IPO-track environments, bowtie methodology for risk explanation, familiarity with GRC tools (Drata, Responsive), hands-on preparation for FedRAMP 20x under CR26 framework
Technologies
FedRAMP, ISO 27001, SOC 2, NIST 800-53, CIS Controls, CSA STAR, Paramify, Drata, Responsive
Responsibilities
Own end-to-end FedRAMP authorization activity including control design, documentation, and evidence collection; Chair mandatory FedRAMP meetings with 3PAOs, agency sponsors, and client stakeholders; Draft, review, and maintain technical control documentation across the certification portfolio; Work with Engineering, IT Security, Product, and Infrastructure subject matter experts to translate technical implementations into assessor-ready control narratives; Maintain the control evidence library and mappings across frameworks; Report program risks, milestones, and open items to GCO leadership; Monitor emerging federal and commercial assurance regimes
Seniority
Principal, strategy & mentorship
