Lead Governance & Compliance Analyst

About the role

Serve as a primary liaison with federal agencies, the FedRAMP PMO, third-party assessment organizations, consultants, and internal stakeholders to support ongoing authorization and compliance activities.
Lead FedRAMP Continuous Monitoring activities, including POA&M management, vulnerability reporting, monthly deliverables, and recurring agency reporting requirements.
Maintain and update the System Security Plan, risk documentation, assessment artifacts, and other required FedRAMP documentation to ensure ongoing audit readiness.
Manage vulnerability, risk, and incident response processes in alignment with FedRAMP, NIST RMF, and NIST SP 800-53 Rev. 5 requirements.
Partner with engineering, product, operations, and security teams to drive risk mitigation, compliance improvements, and secure delivery of federal-facing cloud solutions.

Responsibilities

• Serve as a primary liaison with federal agencies, the FedRAMP PMO, third-party assessment organizations, consultants, and internal stakeholders to support ongoing authorization and compliance activities.
• Lead FedRAMP Continuous Monitoring activities, including POA&M management, vulnerability reporting, monthly deliverables, and recurring agency reporting requirements.
• Maintain and update the System Security Plan, risk documentation, assessment artifacts, and other required FedRAMP documentation to ensure ongoing audit readiness.
• Manage vulnerability, risk, and incident response processes in alignment with FedRAMP, NIST RMF, and NIST SP 800-53 Rev. 5 requirements.
• Partner with engineering, product, operations, and security teams to drive risk mitigation, compliance improvements, and secure delivery of federal-facing cloud solutions.

Requirements

• 5+ years of experience in cloud security architecture, security engineering, governance, risk, compliance, or related roles supporting federal or highly regulated workloads.
• Demonstrated expertise with FedRAMP, NIST Risk Management Framework, and NIST SP 800-53 Rev. 5 security controls.
• Experience supporting FedRAMP Continuous Monitoring, including vulnerability management, POA&M tracking, evidence collection, reporting, and control monitoring.
• Experience conducting or supporting risk assessments, vulnerability scans, incident analysis, and remediation activities within a FedRAMP or regulated environment.
• Strong communication skills with the ability to engage effectively with federal agencies, auditors, third-party assessors, technical teams, and senior stakeholders.
• Ability to analyze security and compliance data, identify trends or risks, and produce clear reports for leadership, agencies, and audit partners.

Qualifications

• Bachelor's degree in cybersecurity, information security, computer science, or a related discipline, or equivalent professional experience.

Skills

• Experience with cloud environments such as AWS, Azure, or Google Cloud Platform.
• Experience supporting the FedRAMP Authorization to Operate process.
• Familiarity with state-level compliance programs such as StateRAMP, GovRAMP, or TX-RAMP.
• Relevant security or compliance certifications such as CISSP, CISM, CISA, CCSP, Security+, or similar credentials.

Benefits

In addition to a competitive base salary, the Lead Governance & Compliance Analyst role offers:

• A competitive 401(k) plan with company match.
• Flexible vacation, sick and safe paid time off.
• Paid holidays (including two company mental health days off).
• Parental leave, sabbatical leave.
• Market competitive health, dental, vision, disability, and life insurance programs.
• Access to Employee Assistance Program.
• Group Legal Identity Theft Protection benefit paid 100% by the employee.
• Access to 529 Plan.
• Commuter benefits.
• Adoption & Surrogacy Assistance.
• Tuition Reimbursement.
• Access to Employee Stock Purchase Plan.