Senior Cloud Compliance Lead (FedRAMP/NIST)

Knox Systems; Arlington (VA); On-site; USD 135,000 - 165,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Life & Disability Insurance

Unlimited PTO

401k

Job summary

Knox Systems seeks a Senior Compliance Analyst to lead technical compliance across federal and commercial environments. You will validate controls in cloud environments, manage POA&M and ConMon, coordinate with security and customer teams, and provide clear risk visibility to leadership and clients.

Responsibilities include preparing audit evidence, tracking remediation, and developing automation playbooks to scale compliance. U.S. citizenship required.

Qualifications

• FedRAMP and NIST SP 800-53 in cloud or SaaS environments.
• Audits, assessments, or authorization activity experience.
• Cloud platforms (AWS, Azure, GCP) security controls.
• Ability to coordinate with DevOps, SOC, SRE, and IT Ops for remediation.
• Strong written and verbal communication for stakeholders.

Responsibilities

• Oversee continuous compliance across multiple frameworks for Knox and customers.
• Track obligations, remediation deadlines, POA&M milestones, and monitoring.
• Review control implementation in AWS/Azure/GCP and ensure effectiveness.
• Collaborate with Security, Compliance, DevOps, and customer teams.
• Support FedRAMP authorization activities and audit prep.
• Maintain visibility into customer compliance posture and shared-responsibility.
• Lead dashboards, metrics, and executive reporting on compliance health.
• Drive remediation and escalate material gaps to leadership.

Skills

Cybersecurity compliance

GRC

Cloud security

FedRAMP knowledge

NIST SP 800-53 expertise

Regulatory liaison

Education

Bachelor's degree in a relevant field

Tools

CSPM

SIEM

EDR/XDR

GRC platforms

Job description

Knox Systems seeks a Senior Compliance Analyst to lead technical compliance across federal and commercial environments. You will validate controls in cloud environments, manage POA&M and ConMon, coordinate with security and customer teams, and provide clear risk visibility to leadership and clients.

Responsibilities include preparing audit evidence, tracking remediation, and developing automation playbooks to scale compliance. U.S. citizenship required.