Senior FedRAMP Security Compliance Lead

Elastic; United States; On-site; USD 110,000 - 160,000; Full time

Job summary

Search AI Company is seeking a Principal Security Compliance Analyst to lead its FedRAMP Moderate program and drive continuous monitoring. You will coordinate with Security, Engineering, IT, Product, and Legal to maintain SSPs, evidence, and POA&M, ensuring timely remediation.

With 5+ years in FedRAMP, NIST SP 800-53, and risk management, you will communicate with auditors and government stakeholders while guiding internal teams toward compliance excellence and leadership visibility.

Qualifications

• 5+ years of experience managing or supporting a FedRAMP Moderate program.
• Strong understanding of FedRAMP, NIST SP 800-53, and continuous monitoring requirements.
• Experience with SSPs, POA&M, control evidence, vulnerability management, and security assessments.
• Strong project-management and organizational skills.
• Ability to communicate effectively with technical teams, auditors, government stakeholders, and company leadership.

Responsibilities

• Manage the FedRAMP Moderate authorization and continuous monitoring program.
• Maintain the System Security Plan, policies, procedures, evidence, inventories, diagrams, and other required documentation.
• Coordinate assessments and reviews with our 3PAO, federal agency partners, consultants, and internal teams.
• Track security findings and POA&M items through remediation.
• Work with Security, Engineering, IT, Product, and Legal teams to implement and maintain required controls.
• Monitor program deadlines, risks, and compliance metrics and report progress to leadership.
• Review system and product changes for potential FedRAMP impact.
• Help control owners understand their responsibilities and prepare appropriate evidence.

Skills

FedRAMP Moderate

FedRAMP

NIST SP 800-53

Continuous monitoring

SSPs & POA&M

Vulnerability management

Security assessments

Project management

Communication with auditors

Job description

Search AI Company is seeking a Principal Security Compliance Analyst to lead its FedRAMP Moderate program and drive continuous monitoring. You will coordinate with Security, Engineering, IT, Product, and Legal to maintain SSPs, evidence, and POA&M, ensuring timely remediation.

With 5+ years in FedRAMP, NIST SP 800-53, and risk management, you will communicate with auditors and government stakeholders while guiding internal teams toward compliance excellence and leadership visibility.