Cybersecurity Compliance Analyst

RESPONSIBILITIES

• Support FedRAMP Moderate compliance activities and ongoing regulatory requirements
• Maintain and support continuous monitoring (ConMon) activities and compliance schedules
• Manage and track Plans of Action and Milestones (POA&Ms), including remediation follow-up
• Collect, review, and validate compliance evidence across applicable FedRAMP requirements
• Support security assessments, compliance reviews, and audit-readiness activities
• Review vulnerability findings and coordinate remediation tracking
• Support compliance requirements related to vulnerability scanning, patching, and remediation
• Partner with technical, security, and compliance teams to ensure required documentation and evidence are complete and consistent
• Assist with interactions and information requests from third-party assessors
• Track compliance activities, findings, deadlines, and required follow-up
• Support improvements to federal compliance processes, tools, and documentation
• Work independently in a fast-paced environment while managing multiple compliance priorities

REQUIREMENTS

• Approximately 7+ years of experience in cybersecurity, federal compliance, risk management, or a related area preferred
• Hands-on experience supporting FedRAMP compliance programs, preferably FedRAMP Moderate
• Strong knowledge of continuous monitoring (ConMon) requirements and processes
• Experience creating, managing, and remediating POA&Ms
• Experience with vulnerability management, security scanning, patching, and remediation tracking
• Background supporting security assessments, audits, evidence collection, and regulatory compliance activities
• Familiarity with federal security and compliance requirements
• Experience working directly with assessors or within a federal assessment organization is highly preferred
• Strong organizational, documentation, analytical, and problem-solving skills
• Ability to quickly understand existing compliance processes and independently manage assigned work
• Strong communication and cross-functional collaboration skills