Senior FedRAMP Risk & Compliance Analyst

NinjaOne; Georgia; Hybrid; USD 125,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) plan

Unlimited PTO

Job summary

NinjaOne seeks a Senior Risk and Compliance Analyst (FedRAMP) to lead and sustain our FedRAMP program, working across gap assessments, readiness, continuous monitoring, and evidence management. You will coordinate with 3PAOs, agencies, and the FedRAMP PMO while updating core documentation and control mappings across AWS/Azure/GCP environments.

You’ll guide AI-enabled compliance, automate evidence collection, and partner with engineering to implement robust security controls.

Qualifications

• Experience taking a cloud service through FedRAMP authorization and maintaining it through continuous monitoring.
• Knowledge of NIST SP 800-53 Rev 5, RMF, FIPS 199/200, FISMA, and the FedRAMP High baseline.
• Experience writing and managing IT security documentation—SSP, attachments, SOPs, policies, and control narratives.
• Experience coordinating with 3PAOs, assessment scoping, evidence walkthroughs, and remediation of assessor findings.
• Experience with POA&M management and vulnerability remediation against defined SLAs.
• Knowledge of cloud architectures (AWS, Azure, GCP) and shared responsibility models.
• Ability to configure, query, and report from scanning and GRC platforms.
• Experience applying AI/automation to compliance work and evidence collection.
• Automation design for recurring compliance activities and evidence collection.
• Track record of process improvements and reducing audit cycles.

Responsibilities

• Lead efforts to obtain and maintain FedRAMP High and Moderate authorization, including gap assessments and readiness activities.
• Support FedRAMP audits with IT control testing and evidence collection.
• Coordinate internal/external audits with stakeholders for timely activities.
• Manage relationships with 3PAO, sponsoring agency, and FedRAMP PMO.
• Maintain FedRAMP core documentation and supporting material.
• Execute Continuous Monitoring deliverables and POA&M submissions within SLAs.
• Own the POA&M program and track Deviation Requests.
• Perform vulnerability scanning and audit security controls.
• Collaborate with engineering to implement controls across requirements.
• Provide SME guidance and respond to customer inquiries on FedRAMP posture.
• Monitor FedRAMP policy changes and adapt documentation accordingly.
• Map control inheritance from cloud providers and manage third-party dependencies.
• Improve compliance processes and implement automation for evidence collection.
• Define scalable operational workflows as scope grows.
• Other duties as needed.

Skills

FedRAMP expertise

NIST SP 800-53 Rev 5

RMF

FIPS 199/200

FISMA

3PAO liaison

POA&M management

Vulnerability remediation

Cloud security

AWS/Azure/GCP

Security tooling

Automation in compliance

Documentation drafting

Audits coordination

Stakeholder communication

AI in compliance

Automation scripting

Education

CISSP

CISA

CCSP

CGRC/CAP

Tools

Wiz

Tenable

Qualys

AWS Security Hub

Job description

NinjaOne seeks a Senior Risk and Compliance Analyst (FedRAMP) to lead and sustain our FedRAMP program, working across gap assessments, readiness, continuous monitoring, and evidence management. You will coordinate with 3PAOs, agencies, and the FedRAMP PMO while updating core documentation and control mappings across AWS/Azure/GCP environments.

You’ll guide AI-enabled compliance, automate evidence collection, and partner with engineering to implement robust security controls.