Remote GovCloud Compliance & Audit Analyst

ESR Healthcare; Boston (MA); Hybrid; USD 70,533,000 - 91,693,000; Full time

Job summary

ESR Healthcare in Boston, MA is seeking a GovCloud Compliance Analyst to support regulatory compliance and audit readiness for GovCloud environments. The role focuses on implementing and validating controls, managing evidence in Audit Board, and coordinating ATO/SA&A activities mapped to federal and state frameworks.

You will collaborate with engineering, platform, and risk teams to track milestones, prepare documentation for audits, and help visualize control health via dashboards.

Qualifications

• Minimum 3 years of compliance, IT risk, or audit in regulated cloud environments.
• Experience mapping controls to NIST SP 800-53 Rev 5, FedRAMP, StateRAMP.
• Practical experience with evidence management in GRC tools.

Responsibilities

• Own assigned control families and maintain control evidence in Audit Board; achieve and sustain 65% evidence attachment completeness for assigned controls.
• Execute control assessment activities and perform internal validations at defined cadence (quarterly or as required by framework).
• Map inherited and system-specific controls to canonical mappings and update control mapping artifacts within Audit Board.
• Partner with engineering, platform, and risk teams to track ATO/SA&A milestones; maintain ATO readiness dashboard; elevate blockers within 48 hours.
• Prepare documentation packets and evidence bundles for external audits and customer assessments; support 100% on-time audit deliverables.
• Identify compliance gaps, propose remediation plans, and track closure (high/critical findings within 30 days).
• Contribute to Power BI dashboards that visualize control health, evidence SLAs, and audit cycles; support monthly compliance reporting.
• Maintain procedures and update policies tied to assigned controls; document changes in the governance repository.

Skills

NIST 800-53 Rev5

FedRAMP/StateRAMP

GRC platforms

Audit Board

Technical writing

Stakeholder comms

Education

Bachelor's degree in information security / CS / RM

Tools

Power BI

Excel

ADO / IT ticketing

Job description

ESR Healthcare in Boston, MA is seeking a GovCloud Compliance Analyst to support regulatory compliance and audit readiness for GovCloud environments. The role focuses on implementing and validating controls, managing evidence in Audit Board, and coordinating ATO/SA&A activities mapped to federal and state frameworks.

You will collaborate with engineering, platform, and risk teams to track milestones, prepare documentation for audits, and help visualize control health via dashboards.