FedRAMP Compliance Lead | Senior Risk Analyst

NinjaOne; North Carolina; Hybrid; USD 125,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) plan

Unlimited PTO

Growth opportunities

Job summary

NinjaOne is seeking a Senior Risk and Compliance Analyst (FedRAMP) to own and grow the FedRAMP program. You will drive authorization efforts, maintain security documentation, and coordinate with 3PAOs, agencies, and the FedRAMP PMO to ensure compliance across High and Moderate baselines.

You will partner with engineering and security teams to implement controls, monitor SLAs, and respond to assessor findings while expanding into Enterprise markets.

Qualifications

• Hands-on experience taking a cloud service through FedRAMP authorization (Moderate or High) and maintaining it via continuous monitoring.
• Working knowledge of NIST SP 800-53 Rev 5, NIST SP 800-37 RMF, FIPS 199/200, FISMA, and FedRAMP High baseline.
• Experience writing, editing, and managing IT security documentation – SSPs, policies, procedures, and control narratives.
• Experience with 3PAOs, assessment scoping, evidence walkthroughs, and remediation of assessor findings.

Responsibilities

• Lead efforts to obtain and maintain FedRAMP High and Moderate authorization, including gap assessments and remediation tracking.
• Support FedRAMP audits by testing IT controls and maintaining evidence repositories.
• Coordinate audits with internal and external stakeholders to ensure timely activities.
• Manage relationships with 3PAO, sponsoring agency, and FedRAMP PMO.

Skills

FedRAMP

Cloud security

Audits & compliance

3PAO coordination

NIST SP 800-53 Rev5

RMF

Tools

Wiz

Tenable

Qualys

AWS/Azure/GCP

Job description

NinjaOne is seeking a Senior Risk and Compliance Analyst (FedRAMP) to own and grow the FedRAMP program. You will drive authorization efforts, maintain security documentation, and coordinate with 3PAOs, agencies, and the FedRAMP PMO to ensure compliance across High and Moderate baselines.

You will partner with engineering and security teams to implement controls, monitor SLAs, and respond to assessor findings while expanding into Enterprise markets.