Cybersecurity Compliance Analyst
Core
Support FedRAMP Moderate compliance programs, continuous monitoring, and regulatory requirements for federal cloud systems.
Role type
Senior IC cybersecurity compliance analyst
Builds
Compliance documentation, evidence packages, and remediation plans for FedRAMP assessments
Domain
Federal government / Cybersecurity compliance
Required skills
FedRAMP Moderate compliance, continuous monitoring (ConMon), POA&M management, vulnerability management, security scanning, patching, audit support, evidence collection, regulatory compliance, assessor interaction
Preferred skills
Federal security requirements knowledge, hands-on FedRAMP program support, federal assessment organization experience
Technologies
Security AI LESS
Responsibilities
Support FedRAMP Moderate compliance activities and ongoing regulatory requirements; Maintain continuous monitoring activities and compliance schedules; Manage and track POA&Ms, including following up on remediation; Collect, review, and validate evidence for applicable FedRAMP requirements; Assist with security assessments, compliance reviews, and audit readiness; Review vulnerability findings and coordinate remediation tracking; Collaborate with technical, security, and compliance teams to ensure documentation and evidence are complete and consistent; Assist with third-party assessor interactions and information requests; Track compliance activities, findings, deadlines, and follow-up items; Help improve federal compliance processes, tools, and documentation; Work independently in a fast-paced setting while managing multiple compliance priorities