FedRAMP Compliance & Cloud Security Analyst

Fortra; United States; On-site; USD 90,000 - 125,000; Full time

Benefits offered by this job

Health, dental, vision

401(k) enrollment

Flexible PTO

Tuition reimbursement

ID Theft Protection

Job summary

Fortra is seeking a Compliance Analyst – FedRAMP to ensure cloud infrastructure and services meet federal security standards while aligning with SOC2, PCI, and ISO frameworks.

The role requires deep FedRAMP knowledge, NIST 800-53 baselines, and collaboration with Development, IT, Security, Support, and Audit teams in a fast-paced technology environment. The position offers a comprehensive benefits package and competitive compensation.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, Compliance, or related field
• 3 to 6 years of experience in compliance, information security, or risk management
• At least 2 years of direct experience supporting FedRAMP programs or equivalent government compliance frameworks
• Experience working in cloud-based environments (AWS/Azure) and familiarity with continuous monitoring tools (Splunk, Qualys, Nessus, etc.)
• Background in cybersecurity, AI, or SaaS industries strongly preferred
• In-depth understanding of NIST 800-53, FedRAMP Moderate/High baselines and control mapping
• Strong knowledge of SOC 2, PCI, and ISO 27001 standards
• Excellent documentation and writing skills — ability to produce and maintain formal compliance deliverables
• Strong analytical, organizational, and communication skills, with the ability to work across technical and non-technical teams
• Experience with FedRAMP (3PAO) Assessors

Responsibilities

• Support the implementation and maintenance of Fortra’s FedRAMP authorization program in alignment with agency and customer requirements.
• Develop and maintain FedRAMP System Security Plans (SSP), POA&Ms, and supporting documentation.
• Coordinate with internal Development, Engineering, IT, Security, Support, and Audit teams to ensure continuous compliance of systems within AWS, Azure, or other CSP environments.
• Liaise with 3PAOs (Third-Party Assessment Organizations) and government stakeholders during audits and assessments.
• Assist in continuous monitoring (CONMON) of security controls and remediation of POA&M items.
• Conduct risk assessments for cloud systems, vendors, and new integrations impacting the FedRAMP boundary.
• Coordinate vulnerability scans, incident response activities, and configuration management documentation in alignment with FedRAMP requirements.
• Other duties as assigned

Skills

Analytical skills

Documentation skills

Cross-functional collaboration

Communication skills

Writing skills

Education

Bachelor’s degree in Information Security, Computer Science, Compliance, or related field

Tools

Splunk

Qualys

Nessus

Job description

Fortra is seeking a Compliance Analyst – FedRAMP to ensure cloud infrastructure and services meet federal security standards while aligning with SOC2, PCI, and ISO frameworks.

The role requires deep FedRAMP knowledge, NIST 800-53 baselines, and collaboration with Development, IT, Security, Support, and Audit teams in a fast-paced technology environment. The position offers a comprehensive benefits package and competitive compensation.