FedRAMP Risk & Compliance Lead — Remote

NinjaOne; Austin, Tampa (TX, FL); Hybrid; USD 125,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) plan

PTO

Job summary

NinjaOne is seeking a Senior Risk and Compliance Analyst (FedRAMP) to lead and grow our FedRAMP program in a hybrid US setting. You will own authorization efforts, collaborate with 3PAOs and stakeholders, and drive continuous monitoring and documentation across cloud environments.

You will work with cross-functional teams to implement control mappings, automate evidence collection, and ensure audit readiness for FedRAMP High and Moderate baselines.

Qualifications

• Hands-on FedRAMP authorization for Moderate or High.
• Knowledge of NIST SP 800-53 Rev 5 and RMF.
• Experience writing IT security documentation (SSP, policies).
• Interviews SMEs and translates technical input into audit-ready docs.
• Experience with 3PAOs, assessment scoping, evidence walkthroughs, remediation.
• POA&M management and vulnerability remediation.
• Cloud security concepts across AWS/Azure/GCP.

Responsibilities

• Lead FedRAMP High/Moderate authorization efforts.
• Support FedRAMP audits with IT control testing and evidence.
• Coordinate audits with stakeholders for timeliness.
• Manage 3PAO, agency, and PMO relationships.
• Create and review FedRAMP core docs and procedures.
• Execute Continuous Monitoring deliverables and POA&M.
• Own POA&M program and deviation requests.
• Perform vulnerability scans and assess controls.
• Collaborate with engineering to implement controls.
• Educate teams on FedRAMP High requirements.
• Monitor policy changes and adapt docs.
• Map control inheritance from CSPs and manage dependencies.
• Improve processes and automate evidence gathering.
• Define scalable workflows for growing scope.

Skills

FedRAMP

RMF/NIST 800-37

NIST 800-53 Rev5

3PAO coordination

POA&M management

Vulnerability remediation

Cloud security

Audit support

Documentation

Automation in compliance

Job description

NinjaOne is seeking a Senior Risk and Compliance Analyst (FedRAMP) to lead and grow our FedRAMP program in a hybrid US setting. You will own authorization efforts, collaborate with 3PAOs and stakeholders, and drive continuous monitoring and documentation across cloud environments.

You will work with cross-functional teams to implement control mappings, automate evidence collection, and ensure audit readiness for FedRAMP High and Moderate baselines.