Senior FedRAMP Risk & Compliance Lead (Remote)

NinjaOne; United States; Hybrid; USD 125,000 - 160,000; Full time

Benefits offered by this job

Hybrid remote

Medical, dental, and vision insurance

401(k) plan

Unlimited PTO

Growth opportunities

Job summary

NinjaOne is seeking a Senior Risk and Compliance Analyst (FedRAMP) to own the program from readiness through continuous monitoring. You will serve as the FedRAMP expert, drive strategy, coordinate audits with 3PAOs, and partner with engineering to implement controls across cloud environments in support of federal and enterprise expansion.

This role requires hands-on FedRAMP authorization experience, deep knowledge of NIST RMF/NIST 800-53, strong documentation skills, and the ability to automate

Qualifications

• Hands-on FedRAMP authorization experience (Moderate/High) with continuous monitoring.
• Strong knowledge of NIST SP 800-53 Rev 5, RMF, FIPS 199/200, FISMA, and FedRAMP High baseline.
• Experience writing and maintaining SSPs, SOPs, and control narratives.
• Experience with 3PAOs, including scoping and remediation of findings.
• Experience with POA&M management and vulnerability remediation within SLAs.
• Ability to automate evidence collection and reporting.
• Ability to explain complex security concepts to technical and non-technical stakeholders.

Responsibilities

• Lead FedRAMP High/Moderate authorization efforts and continuous monitoring.
• Coordinate IT control testing, evidence collection, and artifact repository maintenance.
• Manage audits with internal and external stakeholders to ensure timely activities.
• Engage with 3PAO, sponsoring agency, and FedRAMP PMO; review SAP/SAR and responses.
• Develop and annually review SSPs, policies, procedures, and configuration docs.
• Execute Continuous Monitoring deliverables including POA&M submissions and vulnerability remediation.
• Own the POA&M program and handle Deviation/Significant Change Requests.
• Analyze scanning results and validate controls for cloud governance.
• Collaborate with engineering to implement security controls across teams.
• Provide SME guidance and support customer inquiries on FedRAMP posture.
• Monitor policy changes and adapt documentation and controls.
• Track control inheritance from CSPs and manage third-party dependencies.
• Improve processes with automation to reduce manual effort and improve evidence quality.
• Scale compliance workflows as scope grows.
• Other duties as needed

Skills

FedRAMP expertise

Cloud security

3PAO coordination

Audit & IT control testing

Automation in compliance

POA&M management

Vulnerability remediation

NIST SP 800-53 Rev 5

Tools

Wiz

Tenable

Qualys

AWS Security Hub

GRC tooling

Job description

NinjaOne is seeking a Senior Risk and Compliance Analyst (FedRAMP) to own the program from readiness through continuous monitoring. You will serve as the FedRAMP expert, drive strategy, coordinate audits with 3PAOs, and partner with engineering to implement controls across cloud environments in support of federal and enterprise expansion.

This role requires hands-on FedRAMP authorization experience, deep knowledge of NIST RMF/NIST 800-53, strong documentation skills, and the ability to automate