FedRAMP Compliance Lead — Continuous Monitoring Expert

Decisive Point; San Francisco (CA); Hybrid; USD 158,000 - 180,000; Full time

Benefits offered by this job

Mental health benefits

Career coaching

Family-building benefits

In-office culinary options

Job summary

Asana is seeking a Security Risk and Compliance Lead in San Francisco to mature our FedRAMP Continuous Monitoring and certification program, while supporting SOC 2 and ISO 27001. This role blends GRC with compliance engineering in a high-growth SaaS environment.

You will partner with Security Engineering, Legal, Privacy, and R&D to ensure obligations are met and controls are effective. The office-centric hybrid schedule features in-office days on Mon, Tue, and Thu, with optional Weds and Friday

Qualifications

• 5+ years of experience in Governance, Risk, and Compliance (GRC) or related field.
• Hands-on experience with FedRAMP—ConMon, evidence collection, or working within FedRAMP Moderate/High boundary.

Responsibilities

• Own FedRAMP ConMon monthly submission and ensure accuracy and timeliness.
• Coordinate evidence requests and liaise with auditors across audits.
• Drive remediation and maintain controls maturity across SOC 2, ISO 27001.

Skills

FedRAMP

GRC

Audit coordination

Tools

GRC platform

Evidence collection tooling

Job description

Asana is seeking a Security Risk and Compliance Lead in San Francisco to mature our FedRAMP Continuous Monitoring and certification program, while supporting SOC 2 and ISO 27001. This role blends GRC with compliance engineering in a high-growth SaaS environment.

You will partner with Security Engineering, Legal, Privacy, and R&D to ensure obligations are met and controls are effective. The office-centric hybrid schedule features in-office days on Mon, Tue, and Thu, with optional Weds and Friday