Remote-First GovRAMP & StateRAMP Compliance Lead

RLDatix Career Center; Chicago (IL); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401K

Paid time off

Paid holidays

Job summary

RLDatix is hiring a US-based Risk and Compliance Lead to drive GovRAMP/StateRAMP authorization programs and ongoing compliance. You will own SSPs, map controls to NIST, and coordinate with the GovRAMP PMO, 3PAO, and state agencies.

You will work in a remote-first US-based team, collaborating across Engineering, Legal, SecOps, and HR to ensure continuous monitoring and timely remediation.

Qualifications

• 5+ years in security compliance or GRC roles within CSPs, SaaS vendors, or consulting firms.
• Proven success delivering GovRAMP/FedRAMP/StateRAMP authorizations (SSP to ATO and ConMon).
• Knowledge mapping SOC 2, HIPAA, ISO 27001 to NIST SP 800-53 Rev 5 and author SSPs in OSCAL or templates.
• Ability to work US business hours from a US location for real-time collaboration with GovRAMP PMO, 3PAO, and state officials.
• Interest in enabling US state/local healthcare agencies to adopt patient safety solutions.

Responsibilities

• Author and maintain SSPs for GovRAMP Core and Moderate baselines.
• Map SOC 2, HIPAA, ISO 27001 to NIST control families; identify gaps across teams.
• Own POA&M from Phase 2; track findings and remediation with monthly updates to CISO.
• Produce monthly ConMon deliverables including vulnerability reports and change notifications.
• Cross-train with NAM Risk & Compliance Officer to strengthen team resilience.

Skills

GovRAMP

FedRAMP

StateRAMP

SSP

ConMon

Job description

RLDatix is hiring a US-based Risk and Compliance Lead to drive GovRAMP/StateRAMP authorization programs and ongoing compliance. You will own SSPs, map controls to NIST, and coordinate with the GovRAMP PMO, 3PAO, and state agencies.

You will work in a remote-first US-based team, collaborating across Engineering, Legal, SecOps, and HR to ensure continuous monitoring and timely remediation.