Senior Cloud Compliance Lead - FedRAMP/NIST

Benchstrength; Arlington (VA); On-site; USD 135,000 - 165,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

Unlimited PTO

401k plan

Equity

Job summary

Knox in Arlington, VA is seeking a Senior Compliance Analyst to drive FedRAMP, FISMA, NIST 800-53, and related frameworks across cloud environments. You will partner with Security, DevOps, and customer teams to validate controls and manage remediation, POA&M, and audits.

This role demands leadership in continuous monitoring, risk assessment, and executive reporting, with a focus on secure, compliant cloud operations for federal and commercial clients. Citizenship required.

Qualifications

• 7+ years in cybersecurity compliance, GRC, cloud security, or related roles.
• Direct experience with FedRAMP and NIST SP 800-53 in cloud or SaaS environments.
• Strong knowledge of FISMA, SOC 2, StateRamp, GovRAMP, and IL4/IL5/CMMC/NIST 800-171.
• Experience supporting audits, assessments, or authorization activities in regulated cloud environments.

Responsibilities

• Own continuous compliance oversight across FedRAMP, FISMA, NIST 800-53, IL4, IL5, CMMC, SOC 2, StateRamp, GovRAMP and related frameworks.
• Track and enforce compliance obligations, remediation deadlines, POA&M milestones, and monitoring timelines.
• Review and validate control implementation across AWS, Azure, and GCP.
• Partner with Security Operations, Compliance, DevOps, Engineering, and customers to ensure controls are implemented and operating.

Skills

FedRAMP

NIST SP 800-53

Cloud security

SOC 2

Vulnerability management

Tools

CSPM

SIEM

GRC platforms

Job description

Knox in Arlington, VA is seeking a Senior Compliance Analyst to drive FedRAMP, FISMA, NIST 800-53, and related frameworks across cloud environments. You will partner with Security, DevOps, and customer teams to validate controls and manage remediation, POA&M, and audits.

This role demands leadership in continuous monitoring, risk assessment, and executive reporting, with a focus on secure, compliant cloud operations for federal and commercial clients. Citizenship required.