FedRAMP Senior Risk & Compliance Lead (Remote)

NinjaOne; Florida; Hybrid; USD 125,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

401(k)

Unlimited PTO

Job summary

NinjaOne seeks a Senior Risk and Compliance Analyst (FedRAMP) to own and scale our FedRAMP program, leading readiness, gap assessments, and continuous monitoring across cloud environments. You will collaborate with 3PAOs, sponsors, and FedRAMP PMO to achieve High/Moderate authorization and maintain compliance as we expand into Enterprise markets.

You will translate security controls into audit-ready documentation, drive automation for evidence collection, and guide internal teams on FedRAMP High

Qualifications

• Hands-on FedRAMP authorization experience (Moderate/High) and continuous monitoring.
• Experience writing and managing IT security documentation (SSP, attachments, policies).
• Experience with 3PAOs, including assessment scoping, evidence walkthroughs, and remediation.

Responsibilities

• Lead FedRAMP High/Moderate authorization efforts, gap assessments, readiness activities, and remediation tracking.
• Coordinate audits with internal/external stakeholders to ensure timely activities.
• Manage 3PAO relationships, SAP/SAR reviews, and assessor findings responses.
• Develop and maintain FedRAMP core documentation and supporting materials.
• Drive automation to streamline evidence collection, control monitoring, and reporting.

Skills

FedRAMP expertise

NIST SP 800-53

3PAO liaison

Audit coordination

Automation in compliance

Education

CISSP

CISA

CCSP

Tools

Wiz

Tenable

Qualys

AWS Security Hub

Job description

NinjaOne seeks a Senior Risk and Compliance Analyst (FedRAMP) to own and scale our FedRAMP program, leading readiness, gap assessments, and continuous monitoring across cloud environments. You will collaborate with 3PAOs, sponsors, and FedRAMP PMO to achieve High/Moderate authorization and maintain compliance as we expand into Enterprise markets.

You will translate security controls into audit-ready documentation, drive automation for evidence collection, and guide internal teams on FedRAMP High