Senior Technical Compliance Analyst
M
MongoDBCloud security compliance
This role will be based remotely in United States.Full-TimeSenior
Salary95,000 - 187,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- 7+ years of experience in GRC, Information Security, or IT Audit, preferably in a SaaS or cloud environment, with a heavy focus on US Public Sector frameworks (FedRAMP, DoD SRG, CJIS)
- Required Skills
- Jira
Requirements
- Bachelor’s degree in a technical field such as Information Systems, Computer Science, or Cybersecurity, or equivalent practical experience.
- 7+ years of experience in GRC, Information Security, or IT Audit, preferably in a SaaS or cloud environment.
- Experience focused on US public-sector frameworks, including FedRAMP, DoD SRG, or CJIS.
- Demonstrated experience leading technical audits or compliance programs.
- Strong understanding of cloud security principles, risk management, and controls in cloud-native environments.
- Deep understanding of NIST 800-53 and NIST 800-171 controls and their implementation in cloud architectures.
- Experience managing federal audits from kickoff through issuance of an Authorization to Operate (ATO).
- Advanced proficiency in Jira and Confluence for control performance data and federal documentation projects.
- Practical experience with control mapping, gap analyses, remediation oversight, and program or control-maturity assessments.
- Must be a US Citizen.
- CISA, CRISC, CISSP, or ISO Lead Implementer certification is preferred.
Responsibilities
- Lead end-to-end federal assessments, coordinating with 3PAOs, agency sponsors, and the FedRAMP PMO.
- Manage the federal continuous monitoring program, including vulnerability analysis and reporting and POA&M maintenance.
- Lead annual updates and technical reviews of FedRAMP artifacts, including the SSP, ISCP, and IRP.
- Advise Engineering and Operations teams on cloud configurations that meet FIPS 140-2, boundary protection, access control, and federal requirements.
- Lead external audits and certifications by coordinating scoping, audit plans, evidence, auditor engagement, findings, and outcomes.
- Own internal audit cadences and remediation tracking, establishing accountability for findings, milestones, dependencies, and resolution timelines.
- Map regulatory requirements to the central control framework and conduct gap analyses for new frameworks, jurisdictions, and market expansions.
- Build and maintain dashboards and Jira workflows for control performance, audit findings, and remediation progress.
View Full Description & ApplyYou'll be redirected to the employer's site
