Security Compliance Analyst - FedRAMP

Summary

Fortra is a technology company seeking a Compliance Analyst – FedRAMP to support its cloud security and federal compliance programs. The role focuses on maintaining FedRAMP authorization documentation, monitoring and remediating security controls, conducting cloud risk assessments, and coordinating with internal teams, third-party assessors, and government stakeholders.

Responsibilities

• Support the implementation and maintenance of Fortra’s FedRAMP authorization program in alignment with agency and customer requirements
• Develop and maintain FedRAMP System Security Plans (SSP), POA&Ms, and supporting documentation
• Coordinate with internal Development, Engineering, IT, Security, Support, and Audit teams to ensure continuous compliance of systems within AWS, Azure, or other CSP environments
• Liaise with 3PAOs (Third-Party Assessment Organizations) and government stakeholders during audits and assessments
• Assist in continuous monitoring (CONMON) of security controls and remediation of POA&M items
• Conduct risk assessments for cloud systems, vendors, and new integrations impacting the FedRAMP boundary
• Coordinate vulnerability scans, incident response activities, and configuration management documentation in alignment with FedRAMP requirements
• Other duties as assigned

Skills

• Bachelor's degree in Information Security, Computer Science, Compliance, or related field required
• 3 to 6 years of experience in compliance, information security, or risk management
• At least 2 years of direct experience supporting FedRAMP programs or equivalent government compliance frameworks
• Experience working in cloud-based environments (AWS/Azure) and familiarity with continuous monitoring tools (Splunk, Qualys, Nessus, etc.)
• In-depth understanding of NIST 800-53, FedRAMP Moderate/High baselines and control mapping
• Strong knowledge of SOC 2, PCI, and ISO 27001 standards
• Excellent documentation and writing skills — ability to produce and maintain formal compliance deliverables
• Strong analytical, organizational, and communication skills, with the ability to work across technical and non-technical teams
• Experience with FedRAMP (3PAO) Assessors
• Background in cybersecurity, AI, or SaaS industries strongly preferred

Qualifications

Must Haves

• Bachelor's degree in Information Security, Computer Science, Compliance, or related field required
• 3 to 6 years of experience in compliance, information security, or risk management
• At least 2 years of direct experience supporting FedRAMP programs or equivalent government compliance frameworks
• Experience working in cloud-based environments (AWS/Azure) and familiarity with continuous monitoring tools (Splunk, Qualys, Nessus, etc.)
• In-depth understanding of NIST 800-53, FedRAMP Moderate/High baselines and control mapping
• Strong knowledge of SOC 2, PCI, and ISO 27001 standards
• Excellent documentation and writing skills — ability to produce and maintain formal compliance deliverables
• Strong analytical, organizational, and communication skills, with the ability to work across technical and non-technical teams
• Experience with FedRAMP (3PAO) Assessors

Nice to Haves

• Background in cybersecurity, AI, or SaaS industries strongly preferred

Benefits

• Health, dental, and vision coverage as of hire
• Immediate enrollment in 401(k), HSA, and FSA plans
• Flexible PTO policy
• Tuition and personal enrichment reimbursement
• Option to enroll in ID Theft Protection Program
• Fully remote work arrangement