Compliance Analyst - Cloud Security

The role

The Compliance Analyst will drive ongoing compliance across various federal and commercial frameworks. This person will validate technical controls in cloud environments and track remediation performance.

What you will do

• Assist with continuous compliance oversight across multiple frameworks.
• Track and enforce compliance obligations, remediation deadlines, and POA&M milestones.
• Review and validate technical control implementation across AWS, Azure, and GCP.
• Partner with technical teams to ensure required controls are implemented and operating effectively.
• Support FedRAMP authorization and ongoing assessment activities.
• Evaluate findings and weaknesses using compliance requirements and operational risk.
• Maintain visibility into customer compliance posture and shared-responsibility obligations.
• Assist with customer-facing compliance activities and agency communication.
• Prepare dashboards, metrics, and executive reporting for compliance health.
• Escalate material compliance gaps and SLA misses to leadership.

Required qualifications

• 3-5 years of experience in cybersecurity compliance, GRC, cloud security, or related security assurance roles.
• Experience with FedRAMP and NIST SP 800-53 in cloud or SaaS environments.
• Working knowledge of FISMA, SOC 2, StateRamp, GovRAMP, and at least one of the following: IL4, IL5, CMMC, NIST 800-171.
• Experience supporting audits, assessments, or authorization activities in regulated cloud environments.
• Understanding of cloud platforms such as AWS, Azure, and/or GCP and how security controls are implemented within them.
• Experience partnering with technical teams such as DevOps, SOC, SRE, Engineering, or IT Operations to validate control implementation and drive remediation.
• Ability to assist with and manage multiple customers, priorities, deadlines, and dependencies in a fast-paced environment.
• Strong written and verbal communication skills.

Nice to have

• Experience with FedRAMP High and/or DoD IL4 / IL5 environments.
• Experience or familiarity with modern FedRAMP initiatives (e.g., FedRAMP 20x, OSCAL machine-readable artifacts, or policy-as-code automation).
• Experience working with continuous monitoring, POA&M governance, vulnerability remediation tracking, and customer audit readiness.
• Familiarity with cloud/security tooling such as CSPM, SIEM, EDR/XDR, ticketing/GRC platforms, and evidence automation workflows.
• Experience with shared responsibility models in managed cloud or regulated SaaS environments.
• Certifications such as CISSP, CISA, CAP, Security+, CCSP, or cloud security certifications.
• Experience in a high-growth cloud company, managed services provider, or regulated SaaS provider.

Benefits

• Medical
• Dental
• Vision
• Life & Disability
• unlimited PTO
• employee funded 401k plan

Before you apply

• Requires U.S. citizenship.
• Dual citizenship is not permitted.
• Must be able to provide documentation verifying sole U.S. citizenship status.
• Offer is contingent upon successful completion of pre-employment screenings, including a background check.

About the company

Knox runs the largest Federal & DoW managed cloud, building and operating secure cloud and AI environments that support the U.S. government’s most critical missions.