Government Compliance Technical Specialist

Jobtailor; Deutschland; Remote; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

Jobtailor is seeking a seasoned FedRAMP program manager to lead compliance efforts across government-related frameworks. You will own SSPs, ConMon, and POA&M processes while coordinating across engineering and security teams to drive remediation and evidence gathering.

You will work with multiple government programs (GovRAMP, TX-RAMP, IRAP) and oversee 3PAO interactions, ensuring timely program health reports and responsive policy adaptation.

Qualifikationen

• Minimum 3 years in FedRAMP program management and technical compliance.
• 4–7 years in information security, compliance, or GRC.
• Experience with SSP authorship, ConMon, POA&M, and assessor coordination.
• Deep knowledge of NIST SP 800-53 and cloud implementations.
• Experience with KSIs, machine-readable evidence frameworks, and continuous assessment.

Aufgaben

• Lead technical compliance build activities for FedRAMP readiness and KSIs interpretation.
• Own day-to-day management and execution of FedRAMP Moderate program including ConMon and POA&M.
• Author and maintain SSPs, SDRs, and other compliance docs in human- and machine-readable formats.
• Manage findings and remediation tracking across government programs.
• Coordinate with engineering, security, and cloud teams to gather evidence and close gaps.
• Support GovRAMP, TX-RAMP, IRAP, and other government programs.
• Manage relationships with 3PAOs and agency stakeholders.
• Track and report government program health and policy changes.
• Automate evidence collection pipelines and indicator health tracking.
• Support program management of government workstreams with product, security, and engineering teams.

Kenntnisse

FedRAMP Program Management

NIST SP 800-53 Controls

KSIs Interpretation

Automated Evidence Pipelines

GRC Tooling

SSP Authorship

ConMon Execution

POA&M Management

Cloud Environment Implementation

Remediation Tracking

Compliance Roadmap Development

Strong Communication

Tools

GRC Tooling

Compliance Evidence Frameworks

Jobbeschreibung

• Lead technical compliance build activities for FedRAMP 20x readiness, including interpreting KSIs, defining evidence strategies, and coordinating machine-readable compliance outputs
• Own day-to-day management and execution of FedRAMP Moderate/Class C continuous monitoring, including deliverables, POA&M tracking, and deviation requests
• Author and maintain System Security Plans (SSPs), Security Decision Records (SDRs), and other compliance documentation in human- and machine-readable formats
• Manage findings and remediation tracking across government compliance programs
• Coordinate with engineering, security, and cloud operations teams to gather evidence, validate control implementation, and close compliance gaps
• Support GovRAMP, TX-RAMP, IRAP, and other government or public-sector compliance programs
• Manage relationships with Third Party Assessment Organizations (3PAOs) and agency stakeholders
• Track and report government program health
• Monitor FedRAMP policy changes and translate framework evolution into a compliance roadmap
• Automate evidence collection pipelines and indicator health tracking
• Support program management of government compliance workstreams alongside product, security, and engineering teams

Requirements

• Minimum 3 years in FedRAMP program management and technical compliance
• 4–7 years of experience in information security, compliance, or GRC
• Demonstrated ability to run a FedRAMP Moderate program, including SSP authorship, ConMon execution, POA&M management, and assessor coordination
• Deep working knowledge of NIST SP 800-53 controls and practical implementation in cloud environments
• Strong familiarity with FedRAMP 20x concepts, including Key Security Indicators (KSIs), machine-readable evidence frameworks, and continuous assessment models
• Ability to interpret and define KSIs in the context of BeyondTrust's compliance posture
• Ability to coordinate across engineering, infrastructure, legal, and operations teams to gather evidence and drive remediation to closure
• Experience building or supporting automated compliance evidence pipelines
• Experience with GRC tooling for findings management, evidence collection, and program tracking
• Ability to track and manage multiple concurrent workstreams, surface blockers, and maintain delivery cadences
• Strong written and verbal communication skills to translate technical compliance information to varying audiences

Core Competencies

Demonstrates expertise in FedRAMP program management and technical compliance, with a strong focus on NIST SP 800-53 controls and automated compliance evidence pipelines. Capable of coordinating across multiple teams to ensure effective compliance tracking and remediation.

Highest-signal resume keywords

• FedRAMP Program Management
• NIST SP 800-53 Controls
• Automated Compliance Evidence Pipelines
• GRC Tooling Experience
• Strong Written And Verbal Communication

ATS Optimization Keywords

Hard Skills

• Technical Compliance
• System Security Plans (SSPs) Authorship
• Continuous Monitoring (ConMon) Execution
• POA&M Management
• Key Security Indicators (KSIs) Interpretation
• Evidence Strategy Definition
• Compliance Documentation
• Remediation Tracking
• Cloud Environment Implementation
• Compliance Roadmap Development

Soft Skills

• Strong Communication Skills
• Team Coordination
• Problem-Solving

Industry Keywords

• FedRAMP
• GovRAMP
• TX-RAMP
• IRAP
• Third Party Assessment Organizations (3PAOs)
• Government Compliance Programs

Tools & Technologies

• GRC Tooling
• Compliance Evidence Frameworks