FedRAMP Compliance Lead, GovCloud Security

CoLab; Boston (MA); Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Stock options

Extended health benefits

Unlimited paid vacation

401K matching

Job summary

CoLab is seeking a Senior Compliance Analyst specialized in FedRAMP to serve as the Information System Security Officer for the GovCloud environment. You will own the full lifecycle of the FedRAMP program, including the Certification Package, ongoing reporting, and changes under evolving FedRAMP requirements.

You will lead audits, coordinate with the FedRAMP PMO and 3PAO, and ensure timely evidence and documentation across frameworks. This role requires U.S.

Qualifications

• 6+ years of hands-on experience developing, implementing and maintaining compliance programs, including 3+ years of direct FedRAMP experience (Moderate/High, now Class B/D).
• Prior experience as an Information Systems Security Officer (or in a similar role) for a FedRAMP or FISMA system is strongly preferred.
• Working knowledge of NIST SP 800-53, FedRAMP Certification Package documentation and the 3PAO assessment process.
• Familiarity with frameworks like NIST SP 800-171 and CMMC; SOC 2 and ISO 27001 are assets.
• Strong communication and collaboration skills with auditors, customers, and executives.

Responsibilities

• Serve as Information System Security Officer for the GovCloud system.
• Act as the main compliance point of contact for FedRAMP PMO and 3PAO.
• Develop and maintain the Certification Package Overview and SSP attachments in the GRC platform (Paramify).
• Maintain NIST SP 800-53 control mappings to the FedRAMP Class D baseline with control owners.
• Run vulnerability reporting under FedRAMP rules and provide monthly summaries and JSON history.
• Own the Significant Change Notification (SCN) process with proper history.
• Lead CoLab's transition to new FedRAMP requirements and timelines.
• Lead monthly Ongoing Certification meetings and coordinate annual assessments.
• Prepare and schedule 3PAO walkthroughs; participate in assessments.

Skills

FedRAMP

NIST SP 800-53

3PAO process

GRC platforms

Nessus

ITAR/EAR

US person

Tools

Paramify

Vanta

Job description

CoLab is seeking a Senior Compliance Analyst specialized in FedRAMP to serve as the Information System Security Officer for the GovCloud environment. You will own the full lifecycle of the FedRAMP program, including the Certification Package, ongoing reporting, and changes under evolving FedRAMP requirements.

You will lead audits, coordinate with the FedRAMP PMO and 3PAO, and ensure timely evidence and documentation across frameworks. This role requires U.S.