Remote Senior Federal Compliance Lead: FedRAMP & DoD

Showcify, Inc.; United States; A distancia; USD 95.000 - 187.000; Jornada completa

Descripción de la vacante

MongoDB is seeking a Senior Compliance Analyst (Public Sector) to own federal programs such as FedRAMP, CJIS, and ITAR. You will lead high-stakes audits, translate regulatory requirements into scalable controls, and collaborate with Product, Engineering, and Legal teams to maintain an audit-ready posture.

You will drive external audits with 3PAOs, manage continuous monitoring, and maintain core FedRAMP artifacts (SSP/ISCP/IRP).

Formación

• Bachelor’s degree in a technical field or equivalent practical experience.
• 7+ years in GRC, information security, or IT audit with US Public Sector focus.
• Experience leading technical audits or compliance programs.
• Strong understanding of cloud security principles and risk management.
• Proven ability to explain complex security to auditors and technical teams.

Responsabilidades

• Lead end-to-end external audits and certifications across FedRAMP, CJIS, ITAR.
• Own internal audit cadences and remediation tracking with clear accountability.
• Serve as lead contact for auditors and customers during security reviews.
• Map regulatory requirements to the central control framework and conduct gap analyses.
• Author and review customer-facing security documentation and audit evidence.
• Lead cross-functional workstreams and build dashboards for control performance.

Conocimientos

GRC knowledge

Audit leadership

Regulatory compliance

Communication with auditors

Cloud security concepts

Educación

Bachelor’s degree in Information Systems / Computer Science / Cybersecurity

Herramientas

Jira

Confluence

Descripción del empleo

MongoDB is seeking a Senior Compliance Analyst (Public Sector) to own federal programs such as FedRAMP, CJIS, and ITAR. You will lead high-stakes audits, translate regulatory requirements into scalable controls, and collaborate with Product, Engineering, and Legal teams to maintain an audit-ready posture.

You will drive external audits with 3PAOs, manage continuous monitoring, and maintain core FedRAMP artifacts (SSP/ISCP/IRP).