Senior Federal Compliance Analyst – Cloud & Security

Benchstrength; Arlington (VA); On-site; USD 135,000 - 165,000; Full time

Job summary

Knox is seeking a Senior Compliance Analyst with strong regulatory and technical expertise to drive continuous compliance across FedRAMP, FISMA, NIST 800-53, IL4/IL5, CMMC, SOC 2, StateRamp, GovRAMP and related frameworks. You will partner with Security, DevOps, Operations, and customer teams to validate controls and enforce remediation.

This is a technical compliance lead role focused on ongoing assessments, POA&M performance, and customer artifact reviews. U.S.

Qualifications

• 7+ years in cybersecurity compliance, GRC, cloud security, or related roles.
• Direct experience with FedRAMP, NIST SP 800-53 in cloud or SaaS environments.
• Experience supporting audits, assessments, or authorization activities in regulated cloud environments.
• Strong understanding of cloud platforms (AWS/Azure/GCP) and control implementations.
• Ability to coordinate with DevOps, SOC, SRE, Engineering, and IT Ops for remediation.
• Excellent written and verbal communication for technical and non-technical stakeholders.

Responsibilities

• Own continuous compliance oversight across FedRAMP, FISMA, NIST 800-53, IL4/IL5, CMMC, SOC 2, StateRamp, GovRAMP and related frameworks.
• Track and enforce compliance obligations, remediation deadlines, POA&M milestones and monitoring timelines.
• Review and validate control implementation across AWS, Azure, and GCP environments.
• Partner with Security Operations, Compliance, DevOps, Engineering and customers to ensure controls are implemented and operating effectively.
• Support FedRAMP authorization and ongoing assessment activities, including SSP updates and audit readiness.
• Evaluate findings and risk using compliance requirements and operational context; identify compensating controls.
• Maintain visibility into customer compliance posture and shared-responsibility obligations.
• Manage customer-facing compliance activities: ConMon submissions, POA&M reviews, SCR/SCN coordination and agency communication.
• Prepare dashboards, metrics, and executive reporting for overdue findings and remediation status.
• Escalate material gaps, SLA misses, and recurring issues with clear recommendations.

Skills

Cybersecurity compliance

GRC

Cloud security

Security assurance

Audits

Regulatory knowledge

Communication

Tools

CSPM

SIEM

EDR/XDR

GRC platforms

Job description

Knox is seeking a Senior Compliance Analyst with strong regulatory and technical expertise to drive continuous compliance across FedRAMP, FISMA, NIST 800-53, IL4/IL5, CMMC, SOC 2, StateRamp, GovRAMP and related frameworks. You will partner with Security, DevOps, Operations, and customer teams to validate controls and enforce remediation.

This is a technical compliance lead role focused on ongoing assessments, POA&M performance, and customer artifact reviews. U.S.