Senior Federal Compliance Analyst

About the role

We are seeking a Senior Federal Compliance Analyst to serve as the focal point for Horizon3’s Federal Compliance Program, focused on the security posture and compliance strategy, build-out, and continuous management of our DoW Impact Level 4 (IL4) and Impact Level 5 (IL5) offerings. In this role, you will bridge the gap between federal regulatory bodies, security teams, and engineering. You will be responsible for ensuring the regulatory compliance of our applications, products, services, and personnel, acting as the subject matter expert on DoW security requirements for our AWS-hosted environments.

Responsibilities

• Lead the compliance assessments and build‑out of IL4 and IL5 authorizations, ensuring Horizon3 meets the DoW Cloud Computing Security Requirements Guide (CC SRG).
• Maintain and evolve compliance posture for FedRAMP High, NIST SP 800‑53, and other relevant federal frameworks.
• Act as a GRC liaison to development and engineering teams, translating complex DoW and federal compliance requirements into actionable technical specifications for cloud‑native infrastructure.
• Oversee internal audits, risk assessments, and the continuous monitoring (ConMon) program.
• Serve as primary point of contact for external auditors (3PAOs), federal sponsors, and regulatory bodies to ensure compliance requirements are met.
• Respond to external requests for Security Questionnaires, Due Diligence, and Vendor Risk Assessments regarding Horizon3’s federal security program.
• Develop and maintain GRC policies and procedures; create and deliver compliance training to foster a security‑first culture.
• Participate in incident response and investigations related to compliance issues or federal data.

Requirements

• U.S. Citizenship and ability to obtain and maintain a government security clearance.
• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field (or equivalent practical experience) with relevant certifications (e.g., CISSP, CISA).
• 3‑5+ years of experience in a GRC, Security Compliance, or similar role.
• Experience securing and managing compliance within AWS environments.

Qualifications

• Self‑starter with a “learn‑it‑all” mentality and passion for security.
• Strong knowledge of cybersecurity frameworks and