Senior Compliance Analyst - FedRAMP

The role

You will serve as the Information System Security Officer for the GovCloud environment. You will manage the full lifecycle of the FedRAMP compliance program, including certification packages, reporting, and transitions to updated requirements.

What you will do

• Serve as Information System Security Officer for the GovCloud system
• Act as the main compliance point of contact for agency sponsor, FedRAMP PMO, and 3PAO
• Develop and maintain the Certification Package Overview and Security Decision Record in Paramify
• Maintain NIST SP 800-53 control mappings to the FedRAMP Class D baseline
• Run vulnerability reporting under FedRAMP VDR and VER rules
• Own the Significant Change Notification process
• Lead transition to new FedRAMP requirements including VDR/VER adoption and FedRAMP 20x
• Lead monthly Ongoing Certification meetings and coordinate annual assessments
• Prepare and schedule 3PAO walkthroughs with control owners
• Participate in FedRAMP assessments and audits

Required qualifications

• 6+ years of hands-on experience developing, implementing and maintaining compliance programs
• 3+ years of direct FedRAMP experience (Moderate/High, now Class B/D)
• Working knowledge of NIST SP 800-53, FedRAMP Certification Package documentation and the 3PAO assessment process
• Knowledge of U.S. export controls (ITAR and EAR)
• Experience with GRC platforms such as Paramify or Vanta
• Experience with vulnerability scanning tools such as Nessus
• Ability to plan and complete work within tight deadlines
• Ability to review and interpret technical documentation, regulatory reference materials and compliance frameworks
• Strong communication and interpersonal skills
• Must be a U.S. person (ITAR, 22 CFR 120.62)
• Based in the United States

Nice to have

• Prior experience as an Information Systems Security Officer (or in a similar role) for a FedRAMP or FISMA system
• Familiarity with the FedRAMP Consolidated Rules for 2026 (VDR, VER, SCN) and FedRAMP 20x
• Familiarity with NIST SP 800-171 and CMMC
• Experience with SOC 2 and ISO 27001 frameworks

Benefits

• Stock options package
• Extended health and benefits
• Unlimited paid vacation
• 401K matching

Before you apply

• Must be a U.S. person (ITAR, 22 CFR 120.62)
• Requires an enhanced background check

About the company

CoLab helps mechanical engineering teams bring products to market using AI. The company is based in St. John’s, Newfoundland.