Compliance Analyst, Federal Cloud Security & Audits

Benchstrength; Arlington (VA); On-site; USD 100,000 - 115,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Life & Disability

Unlimited PTO

401k

Job summary

Knox is seeking a Compliance Analyst to ensure federal and commercial compliance across FedRAMP, FISMA, NIST 800-53, IL4, IL5, CMMC, SOC 2, StateRamp, GovRAMP, and related frameworks. You will coordinate with Security, DevOps, Operations, and customer teams to validate controls in cloud environments and track remediation performance.

This role requires operating as a technical compliance lead, managing POA&M, dashboards, and audit-readiness, with a focus on risk visibility for leadership and

Qualifications

• 3-5 years of cybersecurity compliance, GRC, cloud security, or related roles.
• Experience with FedRAMP and NIST SP 800-53 in cloud or SaaS environments.
• Understanding of FISMA, SOC 2, StateRamp, GovRAMP, and IL4/IL5/CMMC/NIST 800-171.

Responsibilities

• Assist with continuous compliance oversight across FedRAMP, FISMA, NIST 800-53, IL4, IL5, CMMC, SOC 2, StateRamp, GovRAMP, and related frameworks.
• Track and enforce compliance obligations, remediation deadlines, POA&M milestones, vulnerability timelines, and monitoring requirements.
• Review and validate technical control implementation across AWS, Azure, and GCP including logging, IAM, incident response, vulnerability management, and change management.
• Partner with Sr. Compliance specialists and Security, DevOps, Operations, and customer teams to ensure controls are implemented and operating effectively.
• Support FedRAMP authorization and ongoing assessment activities including SSP updates, evidence collection, ConMon, 3PAO coordination, audit prep, and customer artifact reviews.
• Evaluate findings using compliance and operational risk, considering exploitability and compensating controls.
• Maintain visibility into customer compliance posture and ensure shared-responsibility obligations and SLAs are met.
• Assist with customer-facing activities, including ConMon submissions, POA&M reviews, SCR/SCN with customers, and agency communication.
• Prepare dashboards, metrics, and executive reporting for overdue findings, remediation, and overall compliance posture.
• Escalate material compliance gaps, SLA misses, and recurring customer issues with recommendations and risk context.
• Document Knox's compliance processes, templates, playbooks, and automation capabilities to support scalable, audit-ready ops.

Skills

Cybersecurity compliance

GRC

Cloud security

Regulatory knowledge

Stakeholder communication

Tools

CSPM

SIEM

EDR/XDR

GRC platforms

Job description

Knox is seeking a Compliance Analyst to ensure federal and commercial compliance across FedRAMP, FISMA, NIST 800-53, IL4, IL5, CMMC, SOC 2, StateRamp, GovRAMP, and related frameworks. You will coordinate with Security, DevOps, Operations, and customer teams to validate controls in cloud environments and track remediation performance.

This role requires operating as a technical compliance lead, managing POA&M, dashboards, and audit-readiness, with a focus on risk visibility for leadership and