What You’ll Do

Lead technical compliance build activities for FedRAMP 20x readiness, including interpreting Key Security Indicators (KSIs), defining evidence strategies, and coordinating machine-readable compliance outputs.
Own day-to-day management and execution of FedRAMP Moderate/Class C continuous monitoring, including deliverables, POA&M tracking, and deviation requests.
Author and maintain System Security Plans (SSPs), Security Decision Records (SDRs), and other compliance documentation in human and machine readable formats.
Manage findings and remediation tracking across all government compliance programs.
Coordinate directly with engineering, security, and cloud operations teams to gather evidence, validate control implementation, and close compliance gaps.
Support GovRAMP, TX-RAMP, IRAP, and other government or public-sector compliance programs.
Manage day-to-day relationships with Third Party Assessment Organizations (3PAOs) and agency stakeholders.
Track and report government program health.
Monitor FedRAMP policy changes, framework evolution, and translate changes into compliance roadmap.
Automate evidence collection pipelines and indicator health tracking.

What You’ll Bring

3 years minimum in FedRAMP program management and technical compliance.
4–7 years of experience in information security, compliance, or GRC.
Demonstrated ability to run a FedRAMP Moderate program, including SSP authorship, ConMon execution, POA&M management, and assessor coordination.
Deep working knowledge of NIST SP 800-53 controls and their practical implementation in cloud environments.
Strong familiarity with FedRAMP 20x concepts, especially Key Security Indicators (KSIs), machine-readable evidence frameworks, and continuous assessment models.
The ability to interpret and define KSIs in the context of BeyondTrust's compliance posture.
Demonstrated ability to coordinate across engineering, infrastructure, legal, and operations teams to gather evidence and drive remediation to closure.
Experience building or supporting automated compliance evidence pipelines.
Experience with GRC tooling for findings management, evidence collection, and program tracking.
Ability to track and manage multiple concurrent workstreams, surface blockers, and maintain delivery cadences.
Strong written and verbal communication skills to translate technical compliance information to varying audiences.

Strong familiarity with AI security
Experience using AI to develop and deploy applications
Experience with GovRAMP, TX-RAMP, IRAP, or other public-sector compliance frameworks.
Familiarity with FedRAMP High or DoD IL4/IL5 authorization environments.
CISSP or CISA certification.
Background in cybersecurity product companies or multi-product SaaS environments.
Bachelor's degree in information security, computer science, or a related field.

Ready to apply for this role?

Please mention “I found this job at Remocate!”