FedRAMP Moderate Compliance Lead

Elastic; United States; Hybrid; USD 140,000 - 200,000; Full time

Benefits offered by this job

Health coverage

Flexible location

Distributed workforce

Parental leave

Volunteer time

Donation match

Job summary

Elastic is seeking a Principal Security Compliance Analyst to lead the FedRAMP Moderate program and related continuous monitoring activities. You will manage the FedRAMP authorization lifecycle, maintain SSPs and evidence, and coordinate with 3PAOs, government partners, consultants, and internal teams to ensure ongoing compliance.

You will track findings, manage POA&Ms, and drive remediation while collaborating with Security, Engineering, IT, Product, and Legal teams.

Qualifications

• 5+ years of experience managing or supporting a FedRAMP Moderate program.
• Experience with SSPs, POA&M, control evidence, vulnerability management, and security assessments.
• Ability to communicate effectively with auditors, government stakeholders, and leadership.
• Strong understanding of FedRAMP, NIST SP 800-53, and continuous monitoring requirements.

Responsibilities

• Manage the FedRAMP Moderate authorization and continuous monitoring program.
• Maintain the System Security Plan, policies, procedures, evidence, inventories, diagrams, and other required documentation.
• Coordinate assessments and reviews with 3PAO, federal agency partners, consultants, and internal teams.
• Track security findings and POA&M items through remediation.
• Work with Security, Engineering, IT, Product, and Legal teams to implement and maintain required controls.
• Monitor program deadlines, risks, and compliance metrics and report progress to leadership.
• Review system and product changes for potential FedRAMP impact.
• Help control owners understand their responsibilities and prepare appropriate evidence.

Skills

FedRAMP

NIST SP 800-53

POA&M

SSP

Security assessments

Project management

Compliance monitoring

DoD IL4

Job description

Elastic is seeking a Principal Security Compliance Analyst to lead the FedRAMP Moderate program and related continuous monitoring activities. You will manage the FedRAMP authorization lifecycle, maintain SSPs and evidence, and coordinate with 3PAOs, government partners, consultants, and internal teams to ensure ongoing compliance.

You will track findings, manage POA&Ms, and drive remediation while collaborating with Security, Engineering, IT, Product, and Legal teams.