FedRAMP Security Compliance Analyst

HelpSystems LLC; Eden Prairie (MN); Sur place; USD 90 000 - 125 000; Plein temps

Avantages offerts par ce poste

Health coverage

401(k) plan

HSA

FSA

Flexible PTO

Tuition reimbursement

ID Theft Protection

Résumé du poste

Fortra is seeking a seasoned information security professional to advance FedRAMP compliance across cloud environments and third-party assessments. You will coordinate with IT, security, and audit teams to maintain formal deliverables and continuous monitoring in AWS/Azure environments.

The role emphasizes risk assessment, documentation excellence, and cross-functional collaboration with 3PAOs and government stakeholders. A strong foundation in NIST 800-53, SOC 2, PCI, and ISO 27001 is essential.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Compliance or related field required.
• 3–6 years of experience in compliance, information security, or risk management.
• At least 2 years of direct experience supporting FedRAMP programs or equivalent.
• Experience in cloud environments (AWS/Azure) and with monitoring tools (Splunk, Qualys, Nessus).
• Background in cybersecurity, AI, or SaaS industries preferred.
• Strong understanding of NIST 800-53, FedRAMP Moderate/High baselines and control mapping.
• Knowledge of SOC 2, PCI, ISO 27001 standards.
• Excellent documentation and writing skills for formal deliverables.
• Strong analytical, organizational, and cross-team communication skills.
• Experience with FedRAMP (3PAO) Assessors.

Responsabilités

• Support the implementation and maintenance of FedRAMP authorization programs.
• Develop and maintain SSPs, POA&Ms, and supporting documentation.
• Coordinate with internal teams to ensure continuous compliance in AWS/Azure/other CSPs.
• Liaise with 3PAOs and government stakeholders during audits.
• Assist in continuous monitoring of security controls and remediation of POA&Ms.
• Conduct risk assessments for cloud systems, vendors, and new integrations.
• Coordinate vulnerability scans and incident response activity per FedRAMP.
• Manage configuration documentation in line with FedRAMP requirements.
• Other duties as assigned.

Connaissances

FedRAMP

Cloud security

NIST 800-53

SOC 2

ISO 27001

Documentation

Audit coordination

Formation

Bachelor's degree in Information Security

Outils

Splunk

Qualys

Nessus

Description du poste

Fortra is seeking a seasoned information security professional to advance FedRAMP compliance across cloud environments and third-party assessments. You will coordinate with IT, security, and audit teams to maintain formal deliverables and continuous monitoring in AWS/Azure environments.

The role emphasizes risk assessment, documentation excellence, and cross-functional collaboration with 3PAOs and government stakeholders. A strong foundation in NIST 800-53, SOC 2, PCI, and ISO 27001 is essential.