Public Sector FedRAMP Compliance Lead

Referral Board; United States; On-site; USD 160,000 - 253,000; Full time

Benefits offered by this job

Stock program

401k matching

Flexible schedules

Generous vacation days

Job summary

Elastic, the Search AI Company, seeks a Principal Security Compliance Analyst to lead the FedRAMP Moderate program governance for Public Sector. You will own authorization and continuous monitoring, maintain SSPs, policies, evidence, inventories, and coordinate with 3PAO, federal partners, and internal teams.

Responsibilities include tracking findings and POA&Ms, working with Security, Engineering, IT, Product, and Legal to implement controls, monitor deadlines, and report progress to leadership

Qualifications

• 5+ years managing or supporting a FedRAMP Moderate program.
• Strong knowledge of FedRAMP, NIST SP 800-53, and continuous monitoring.
• Experience with SSPs, POA&Ms, control evidence, and assessments.

Responsibilities

• Manage the FedRAMP Moderate authorization and continuous monitoring program.
• Maintain the System Security Plan, policies, procedures, evidence, inventories, diagrams.
• Coordinate assessments with 3PAO, federal agencies, consultants, and internal teams.
• Track security findings and POA&M items through remediation.
• Collaborate with Security, Engineering, IT, Product, and Legal to implement controls.
• Monitor deadlines, risks, and compliance metrics; report to leadership.
• Review system/product changes for FedRAMP impact.

Skills

FedRAMP Moderate

NIST SP 800-53

POA&M management

SSP documentation

Auditor communication

Job description

Elastic, the Search AI Company, seeks a Principal Security Compliance Analyst to lead the FedRAMP Moderate program governance for Public Sector. You will own authorization and continuous monitoring, maintain SSPs, policies, evidence, inventories, and coordinate with 3PAO, federal partners, and internal teams.

Responsibilities include tracking findings and POA&Ms, working with Security, Engineering, IT, Product, and Legal to implement controls, monitor deadlines, and report progress to leadership