Senior FedRAMP & DoD Compliance Auditor

Tanium; Emeryville (CA); Hybrid; USD 100,000 - 155,000; Full time

Job summary

Tanium is seeking a FedRAMP and compliance-focused professional to support cloud authorization packages, continuous monitoring, and control implementation across federal civilian and defense environments.

Working with Senior GRC staff, you will coordinate with security, engineering, and product teams to ensure Tanium’s cloud offerings meet FedRAMP High and DoD IL4/IL5 requirements, while maintaining NIST SP 800-53 controls and responding to assessor inquiries.

Qualifications

• 5+ years in information security, compliance, or risk management with federal program exposure.
• 5+ years FedRAMP experience (CSP compliance, 3PAO assessment support, or ISSO activities).
• Strong written and verbal communication across technical and non-technical audiences; experience producing audit findings, policies, and compliance reports.

Responsibilities

• Contribute to authorization package documentation (SSP, POA&Ms, SAPs) per FedRAMP High requirements.
• Coordinate with 3PAOs and federal agency sponsors for evidence collection and artifact prep.
• Implement and document NIST SP 800-53 controls across FedRAMP and DoD IL4/IL5 boundaries.
• Execute continuous monitoring: monthly vulnerability reviews, POA&M tracking, and DoD deliverables.

Skills

FedRAMP

NIST SP 800-53

DoD IL4/IL5

3PAO coordination

Continuous monitoring

Policy development

Cloud security

Security questionnaires

RMF/NIST RMF

Communication skills

Job description

Tanium is seeking a FedRAMP and compliance-focused professional to support cloud authorization packages, continuous monitoring, and control implementation across federal civilian and defense environments.

Working with Senior GRC staff, you will coordinate with security, engineering, and product teams to ensure Tanium’s cloud offerings meet FedRAMP High and DoD IL4/IL5 requirements, while maintaining NIST SP 800-53 controls and responding to assessor inquiries.