Security Compliance Analyst - FedRAMP

HelpSystems LLC; Eden Prairie (MN); On-site; USD 90,000 - 125,000; Full time

Benefits offered by this job

Health coverage

401(k) plan

HSA

FSA

Flexible PTO

Tuition reimbursement

ID Theft Protection

Job summary

Fortra is seeking a seasoned information security professional to advance FedRAMP compliance across cloud environments and third-party assessments. You will coordinate with IT, security, and audit teams to maintain formal deliverables and continuous monitoring in AWS/Azure environments.

The role emphasizes risk assessment, documentation excellence, and cross-functional collaboration with 3PAOs and government stakeholders. A strong foundation in NIST 800-53, SOC 2, PCI, and ISO 27001 is essential.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Compliance or related field required.
• 3–6 years of experience in compliance, information security, or risk management.
• At least 2 years of direct experience supporting FedRAMP programs or equivalent.
• Experience in cloud environments (AWS/Azure) and with monitoring tools (Splunk, Qualys, Nessus).
• Background in cybersecurity, AI, or SaaS industries preferred.
• Strong understanding of NIST 800-53, FedRAMP Moderate/High baselines and control mapping.
• Knowledge of SOC 2, PCI, ISO 27001 standards.
• Excellent documentation and writing skills for formal deliverables.
• Strong analytical, organizational, and cross-team communication skills.
• Experience with FedRAMP (3PAO) Assessors.

Responsibilities

• Support the implementation and maintenance of FedRAMP authorization programs.
• Develop and maintain SSPs, POA&Ms, and supporting documentation.
• Coordinate with internal teams to ensure continuous compliance in AWS/Azure/other CSPs.
• Liaise with 3PAOs and government stakeholders during audits.
• Assist in continuous monitoring of security controls and remediation of POA&Ms.
• Conduct risk assessments for cloud systems, vendors, and new integrations.
• Coordinate vulnerability scans and incident response activity per FedRAMP.
• Manage configuration documentation in line with FedRAMP requirements.
• Other duties as assigned.

Skills

FedRAMP

Cloud security

NIST 800-53

SOC 2

ISO 27001

Documentation

Audit coordination

Education

Bachelor's degree in Information Security

Tools

Splunk

Qualys

Nessus

Job description

Whether you're an experienced professional or just getting started, your contributions matter at Fortra. If you're passionate about tackling meaningful challenges alongside talented team members committed to helping each other succeed, all while having lots of fun, we want to hear from you. We offer competitive benefits and salaries, personal and professional development opportunities, flexibility, and much more!

WHAT YOU'LL DO

• Support the implementation and maintenance of Fortra's FedRAMP authorization program in alignment with agency and customer requirements.
• Develop and maintain FedRAMP System Security Plans (SSP), POA&Ms, and supporting documentation.
• Coordinate with internal Development, Engineering, IT, Security, Support, and Audit teams to ensure continuous compliance of systems within AWS, Azure, or other CSP environments.
• Liaise with 3PAOs (Third-Party Assessment Organizations) and government stakeholders during audits and assessments.
• Assist in continuous monitoring (CONMON) of security controls and remediation of POA&M items.
• Conduct risk assessments for cloud systems, vendors, and new integrations impacting the FedRAMP boundary.
• Coordinate vulnerability scans, incident response activities, and configuration management documentation in alignment with FedRAMP requirements.
• Other duties as assigned.

QUALIFICATIONS

• Bachelor's degree in Information Security, Computer Science, Compliance, or related field required.
• 3 to 6 years of experience in compliance, information security, or risk management.
• At least 2 years of direct experience supporting FedRAMP programs or equivalent government compliance frameworks.
• Experience working in cloud-based environments (AWS/Azure) and familiarity with continuous monitoring tools (Splunk, Qualys, Nessus, etc.).
• Background in cybersecurity, AI, or SaaS industries strongly preferred.
• In-depth understanding of NIST 800-53, FedRAMP Moderate/High baselines and control mapping.
• Strong knowledge of SOC 2, PCI, and ISO 27001 standards.
• Excellent documentation and writing skills - ability to produce and maintain formal compliance deliverables.
• Strong analytical, organizational, and communication skills, with the ability to work across technical and non-technical teams.
• Experience with FedRAMP (3PAO) Assessors.

Compensation: 90,000 USD - 125,000 USD

At Fortra, we're breaking the attack chain. Ready to join us?

As a full-time, exempt employee at Fortra, you'll enjoy a comprehensive benefits package that includes:

• Health, dental, and vision coverage as of hire
• Immediate enrollment in 401(k), HSA, and FSA plans
• Flexible PTO policy
• Tuition and personal enrichment reimbursement
• Option to enroll in ID Theft Protection Program

At Fortra, work is only part of the story. Explore what Life at Fortra is all about, from perks that support holistic wellbeing to a culture that keeps you connected and empowered to make an impact beyond the job. Visit our website to learn more about why employees choose to work for Fortra. Remember to connect with us on LinkedIn.

As an EEO/Affirmative Action Employer, all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, veteran or disability status.