Remote FedRAMP Risk & Compliance Lead

NinjaOne; California; Hybrid; USD 125,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) plan

Unlimited PTO

Hybrid remote

Growth opportunities

Job summary

NinjaOne is seeking a Senior Risk and Compliance Analyst (FedRAMP) to lead and sustain our FedRAMP program, including High and Moderate authorization, gap assessments, readiness activities, and continuous monitoring.

You will coordinate audits with 3PAOs and agencies, maintain SSP and related docs, and drive automation to streamline evidence collection and reporting, while advising engineering and sales on FedRAMP posture.

Qualifications

• Hands-on FedRAMP authorization experience.
• Strong knowledge of NIST 800-53 Rev 5 and RMF.
• Experience writing System Security Plans and procedures.
• Ability to translate technical input into audit-ready docs.
• Experience with 3PAOs and assessment scoping.
• Familiarity with cloud security across AWS/Azure/GCP.
• A track record of automation in compliance workflows.

Responsibilities

• Lead efforts to obtain and maintain FedRAMP High and Moderate authorization, including gap assessments, readiness activities, and remediation tracking
• Support compliance audits by performing IT control testing, collecting evidence, and maintaining the IT control artifact repository
• Coordinate internal and external audits with stakeholders to ensure timely activities
• Manage relationships with the 3PAO, sponsoring agency, and FedRAMP PMO
• Create and review FedRAMP core documentation (SSP, policies, and attachments) and related materials
• Execute FedRAMP Continuous Monitoring deliverables, including monthly POA&M submissions and remediation
• Own the POA&M program and manage Deviation & Change Requests
• Perform vulnerability and compliance scanning and audit security controls
• Coordinate with engineering to implement and demonstrate controls across requirements
• Provide SME guidance to teams and support customer inquiries on FedRAMP posture
• Monitor FedRAMP policy updates and adapt documentation ahead of dates
• Map control inheritance from cloud providers and manage third-party dependencies
• Improve compliance processes via automation and tooling
• Define scalable workflows for expanding scope
• Other duties as needed

Skills

FedRAMP authorization

NIST SP 800-53

RMF

3PAO coordination

Policy writing

Audit readiness

Cloud security

Automation tooling

GRC platforms

Vulnerability remediation

Stakeholder comms

Tools

Wiz

Tenable

Qualys

AWS Security Hub

OSCAL

Job description

NinjaOne is seeking a Senior Risk and Compliance Analyst (FedRAMP) to lead and sustain our FedRAMP program, including High and Moderate authorization, gap assessments, readiness activities, and continuous monitoring.

You will coordinate audits with 3PAOs and agencies, maintain SSP and related docs, and drive automation to streamline evidence collection and reporting, while advising engineering and sales on FedRAMP posture.