Description

Key Responsibilities

• Manage updates to the SSP and ensure alignment with the deployed environment
• Serve as a point of contact for FedRAMP -related questions and support interpretation of requirements for Engineering and business teams.
• Support execution of program deliverables by organizing working sessions, tracking progress, and helping move items to completion
• Coordinate with 3PAO’s on audits, including evidence collection and walkthrough support
• Support continuous monitoring (ConMon) activities, including POA&M tracking and updates
• Support reporting to agency stakeholders and ensure deliverables are submitted on time
• Partner with Engineering, GRC, PMO, and Legal teams to maintain alignment and resolve blockers
• Contribute to the development and maintenance of FedRAMP artifacts
• Support assessments and remediation activities across moderate and high baselines
• Assis with additional GRC initiatives as needed

Basic Qualifications

• Experience supporting or executing FedRAMP programs, including SSP development/updates POA&M management, and continuous monitoring (ConMon)
• Working knowledge of NIST 800-53 and how controls apply to systems and processes
• Experience supporting audits or working with third-party assessors (3PAOs), including evidence collection and walkthrough support
• Ability to work across cross-functional teams and drive work to completion
• Experience identifying gaps and contributing to remediation efforts
• Familiarity with system architecture concepts and how changes impact compliance
• Experience working in cloud environments (AWS, IBM Cloud or similar)
• Bachelor’s degree in information security, Information Technology, Computer Engineering or related field, or equivalent practical experience.

Preferred Qualifications

• Experience in SaaS or regulated environments (FedRAMP, GovCloud, or similar)
• Relevant certifications such as CISSP, CRISC, or equivalent
• Experiences working with FedRAMP artifacts (SSP, POA&M, ConMon) or NIST-based compliance programs
• Advance degree in Information Security, Information Technology, or related fields

Key Skills

Education

Any Gradute