Senior FedRAMP Compliance Lead (GovCloud) - Remote

CoLab Software; United States; Remote; USD 130,000 - 170,000; Full time

Benefits offered by this job

Stock options

Extended health benefits

Unlimited vacation

401K matching

Job summary

CoLab Software seeks a Senior Compliance Analyst specializing in FedRAMP to serve as the ISSO for GovCloud. You will manage the Certification Package, ongoing certification, and changes, coordinating with the FedRAMP PMO and 3PAO. This hands-on role requires strong organization and cross‑functional collaboration.

You will lead NIST mappings, VDR/VER/SCN adoption, and transition to FedRAMP 20x, while preparing teams for annual assessments and audits. U.S.

Qualifications

• 6+ years of hands-on experience developing, implementing and maintaining compliance programs, including 3+ years of direct FedRAMP experience.
• Experience as an Information Systems Security Officer (ISSO) for a FedRAMP or FISMA system is preferred.
• Knowledge of NIST SP 800-53, FedRAMP packages, and 3PAO assessment processes; familiarity with VDR/VER/SCN and FedRAMP 20x is a plus.
• Knowledge of CUI frameworks (NIST SP 800-171, CMMC) and ISO 27001/SOC 2 assets.

Responsibilities

• Serve as Information System Security Officer for the GovCloud system.
• Act as the main compliance point of contact for the FedRAMP PMO and 3PAO.
• Develop and maintain the Certification Package Overview and SSP attachments in the GRC platform.
• Maintain NIST SP 800-53 mappings to FedRAMP baseline with control owners.
• Run vulnerability reporting under FedRAMP rules, including monthly summaries and JSON history.
• Own the Significant Change Notification process and track 12 months of SCN history.
• Lead transition to new FedRAMP requirements and prepare for audits.
• Coordinate third-party assessments and participate in FedRAMP assessments and audits.
• Own the Integrated Inventory and ensure Nessus coverage alignment.
• Review feature eligibility requests for compliance impact with Product/Engineering.
• Coordinate responses to security inquiries within tight timelines.
• Monitor deadlines across FedRAMP and other frameworks and document evidence.

Skills

FedRAMP experience

Information Security

Regulatory awareness

Audit coordination

Communication

Education

Bachelor's degree in IT / Security

Tools

Paramify

Nessus

GRC tools

Job description

CoLab Software seeks a Senior Compliance Analyst specializing in FedRAMP to serve as the ISSO for GovCloud. You will manage the Certification Package, ongoing certification, and changes, coordinating with the FedRAMP PMO and 3PAO. This hands-on role requires strong organization and cross‑functional collaboration.

You will lead NIST mappings, VDR/VER/SCN adoption, and transition to FedRAMP 20x, while preparing teams for annual assessments and audits. U.S.