FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Senior Compliance Analyst – FedRAMP
CoLab Software. Serve as Information System Security Officer for the GovCloud system .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive experience in developing and maintaining compliance programs, particularly with FedRAMP and NIST SP 800-53. Proficient in managing security documentation, conducting assessments, and collaborating with cross-functional teams to ensure compliance with regulatory frameworks.
Highest-signal resume keywords
FedRAMP ExperienceNIST SP 800-53 KnowledgeInformation Systems Security OfficerCompliance Program DevelopmentVulnerability Scanning Tools
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Compliance Program DevelopmentFedRAMP Certification Package DocumentationNIST SP 800-53 Control MappingsSecurity Impact AnalysisVulnerability ReportingIntegrated Inventory ManagementTechnical Documentation ReviewRegulatory Compliance FrameworksChange ClassificationEvidence Collection
Soft Skills
Strong Communication SkillsInterpersonal SkillsCollaborationAbility to Meet DeadlinesCross-Functional Teamwork
Tools & Technologies
ParamifyNessusGRC PlatformsFedRAMP VDRFedRAMP VER
Certifications & Qualifications
Enhanced Background CheckU.S. Person (ITAR, 22 CFR 120.62)
Industry Keywords
FedRAMPFISMANIST SP 800-171CMMCSOC 2ISO 27001U.S. Export ControlsITAREARCompliance Documentation
Tech Stack
Tools & technologiesCloud
About the role
Key responsibilities & impact- Serve as Information System Security Officer for the GovCloud system
- Act as the main compliance point of contact for CoLab’s agency sponsor, the FedRAMP PMO and CoLab’s 3PAO
- Develop and maintain the Certification Package Overview and Security Decision Record and attachments in Paramify
- Maintain NIST SP 800-53 control mappings to the FedRAMP Class D baseline
- Run vulnerability reporting under FedRAMP VDR and VER rules
- Own the Significant Change Notification process, including change classification, Security Impact Analysis, CCB intake, SCN filing and history maintenance
- Lead transition to VDR/VER adoption, mandatory SCN rules and FedRAMP 20x
- Lead monthly Ongoing Certification meetings and coordinate the annual assessment
- Prepare and schedule 3PAO walkthroughs
- Participate in FedRAMP assessments and audits, including documentation, inquiries and evidence collection
- Own the Integrated Inventory and reconcile it against Nessus scan coverage
- Review GovCloud feature eligibility requests with Product and Engineering
- Coordinate responses to customer and agency security inquiries and questionnaires
- Monitor compliance activities and deadlines across FedRAMP and other frameworks
- Create and maintain compliance documentation
- Work with Security, Compliance, IT and Cloud on evidence collection, boundary updates and inventory updates
Requirements
What you’ll need- 6+ years of hands-on experience developing, implementing and maintaining compliance programs, including 3+ years of direct FedRAMP experience (Moderate/High, now Class B/D)
- Prior experience as an Information Systems Security Officer (or in a similar role) for a FedRAMP or FISMA system is strongly preferred
- Working knowledge of NIST SP 800-53, FedRAMP Certification Package documentation and the 3PAO assessment process
- Familiarity with the FedRAMP Consolidated Rules for 2026 (VDR, VER, SCN) and FedRAMP 20x is a strong plus
- Familiarity with NIST SP 800-171 and CMMC
- Experience with SOC 2 and ISO 27001 frameworks is an asset
- Knowledge of U.S. export controls (ITAR and EAR)
- Experience with GRC platforms such as Paramify or Vanta, and vulnerability scanning tools such as Nessus
- Ability to plan and complete work within tight deadlines
- Ability to review and interpret technical documentation, regulatory reference materials and compliance frameworks
- Strong communication and interpersonal skills, and ability to collaborate with cross-functional teams
- Must be a U.S. person (ITAR, 22 CFR 120.62) and based in the United States
- Enhanced background check required
Benefits
Comp & perks- Stock options package
- Extended health and benefits
- Unlimited paid vacation
- 401K matching
- Remote work from anywhere in the United States
- Occasional travel to Canadian headquarters