Senior Federal Compliance Lead – Cloud Security

Benchstrength; Arlington (VA); Sur place; USD 135 000 - 165 000; Plein temps

Avantages offerts par ce poste

Medical

Dental

Vision

Life & Disability

Unlimited PTO

401k

Résumé du poste

Knox seeks a Senior Compliance Analyst to lead technical compliance across FedRAMP, NIST 800-53, IL4/IL5, and related frameworks in cloud environments (AWS/Azure/GCP). You will drive audits, POA&M, and evidence collection while coordinating with Security, DevOps, and customer teams to ensure timely remediation.

You will validate controls, manage continuous monitoring, and help shape compliance metrics, dashboards, and executive reporting for stakeholders and regulators.

Qualifications

• 7+ years of cybersecurity compliance, GRC, cloud security, or related roles.
• Direct experience with FedRAMP and NIST SP 800-53 in cloud or SaaS.
• Audits, assessments, or authorization activities in regulated cloud environments.

Responsabilités

• Own continuous compliance oversight across FedRAMP, FISMA, NIST 800-53, IL4, IL5, CMMC, SOC 2, StateRamp, GovRAMP and related frameworks.
• Track obligations, remediation deadlines, POA&M milestones, and remediation timelines.
• Review and validate control implementation across AWS, Azure, GCP including IAM, logging, monitoring, incident response.
• Partner with Security, Compliance, DevOps, Engineering and customers to ensure controls operate effectively.
• Support FedRAMP authorization and ongoing assessments, including SSP updates and audit prep.
• Maintain visibility into customer compliance posture and shared-responsibility obligations.

Connaissances

FedRAMP/NIST SP 800-53

Cloud security (AWS/Azure/GCP)

GRC/compliance management

Audits and assessments

Cross-functional collaboration

Federal government compliance

Communication skills

Outils

CSPM

SIEM

EDR/XDR

GRC platforms

Description du poste

Knox seeks a Senior Compliance Analyst to lead technical compliance across FedRAMP, NIST 800-53, IL4/IL5, and related frameworks in cloud environments (AWS/Azure/GCP). You will drive audits, POA&M, and evidence collection while coordinating with Security, DevOps, and customer teams to ensure timely remediation.

You will validate controls, manage continuous monitoring, and help shape compliance metrics, dashboards, and executive reporting for stakeholders and regulators.