Principal GCO High Compliance Systems Advisor

Mimecast

. Own end-to-end FedRAMP authorization activity, including control design, SSP, POA&Ms, control narratives, and evidence collection .

Posted 10/16/2026full-timeUnited StatesLead💰 $132,000 - $198,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in FedRAMP authorization processes, including control design and technical documentation, while effectively collaborating with cross-functional teams to ensure compliance with regulatory standards. Proficient in managing third-party risk programs and maintaining audit-ready evidence libraries across multiple frameworks.

Highest-signal resume keywords

FedRAMP AuthorizationTechnical Control DocumentationThird-Party Risk ManagementISO 27001 AuditingNIST 800-53 Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Control DesignSSP PreparationPOA&M DevelopmentTechnical WritingControl Implementation Summaries

Soft Skills

Confidence PresentingCollaborationIndependent Work

Tools & Technologies

DrataResponsiveParamify

Industry Keywords

FedRAMPISOSOC 2NISTGRCComplianceEnterprise Risk FrameworksBowtie Methodology

About the role

Key responsibilities & impact

Own end-to-end FedRAMP authorization activity, including control design, SSP, POA&Ms, control narratives, and evidence collection
Chair mandatory FedRAMP meetings with 3PAOs, agency sponsors, and client stakeholders
Draft, review, and maintain technical control documentation across the certification portfolio
Translate technical implementations into assessor-ready control narratives with Engineering, IT Security, Product, and Infrastructure subject matter experts
Design, implement, and mature the third-party risk management program, including vendor risk tiering, due diligence, ongoing monitoring, and remediation tracking
Maintain the control evidence library and mappings across FedRAMP, ISO, SOC 2, and NIST frameworks
Report program risks, milestones, and open items to GCO leadership and escalate blockers
Monitor emerging federal and commercial assurance regimes and assess their implications for Mimecast's certification roadmap
Represent Mimecast in mandatory sessions with clients, assessors, and regulators
Partner with Engineering, Security, Legal, Product, and departmental subject matter experts to keep controls and evidence audit-ready

Requirements

What you’ll need

Experience leading a FedRAMP Rev 5 Moderate impact-level authorization, including chairing mandatory client and regulator meetings, designing technical controls, and preparing SSP, control implementation summaries, and POA&Ms
Extensive experience drafting, reviewing, and maintaining technical control documentation with subject matter experts
Ability to align Engineering, Security, Legal, and Product teams around shared documentation
Confidence presenting to external assessors, regulators, and client security teams
Ability to maintain detailed, cross-referenced evidence libraries
Ability to work independently with evolving regulatory guidance, including FedRAMP 20x
Experience auditing controls for ISO 27001, SOC 2, and other security certification schemes
Experience managing external auditor relationships and closing findings
Hands-on preparation for FedRAMP 20x under the CR26 framework, ideally spanning Classes A-C, including automatic control monitoring, KSIs, and technologies such as Paramify
Familiarity with GRC and compliance tools such as Drata and Responsive
Working knowledge of NIST 800-53, CIS Controls, and CSA STAR / CCM
Experience in a PE-backed or IPO-track environment
Exposure to enterprise risk frameworks such as bowtie methodology
Project management experience running multi-month, cross-functional certification programs
Strong technical writing skills
Successful completion of applicable background checks

Benefits

Comp & perks

Benefits
Potential eligibility for incentive plans
Additional benefits in accordance with company policy and local regulations
Equal Opportunity and Affirmative Action Employer
Interview adjustments or accommodations for disabilities or other reasons