Principal Security Compliance Analyst - Public Sector - InfoSec

1 month ago
Full-time
Lead
Cybersecurity
Elastic

Elastic

Elastic is a leading platform for search-powered solutions, providing real-time insights and making data usable for developers and enterprises worldwide.

Internet Software & Services
1K-5K
Founded 2010

Description

  • Manage the FedRAMP Moderate authorization and continuous monitoring program.
  • Maintain the System Security Plan, policies, procedures, evidence, inventories, diagrams, and related documentation.
  • Coordinate assessments and reviews with the 3PAO, federal agency partners, consultants, and internal teams.
  • Track security findings and POA&M items through remediation.
  • Partner with Security, Engineering, IT, Product, and Legal teams to implement and maintain required controls.
  • Monitor program deadlines, risks, and compliance metrics, and report progress to leadership.
  • Review system and product changes for potential FedRAMP impact.
  • Help control owners understand their responsibilities and prepare appropriate evidence.

Requirements

  • 5+ years of experience managing or supporting a FedRAMP Moderate program.
  • Strong understanding of FedRAMP, NIST SP 800-53, and continuous monitoring requirements.
  • Experience with SSPs, POA&Ms, control evidence, vulnerability management, and security assessments.
  • Strong project-management and organizational skills.
  • Ability to communicate effectively with technical teams, auditors, government stakeholders, and company leadership.
  • Eligibility to work in DoD Impact Level 4 or above cloud service environments.

Benefits

  • Base salary of $159,800–$252,800 USD; select locations may offer $191,900–$303,500 USD.
  • Eligibility to participate in Elastic’s stock program.
  • Company-matched 401(k) with dollar-for-dollar matching up to 6% of eligible earnings.
  • Health coverage for employees and families in many locations.
  • Flexible locations and schedules for many roles.
  • Generous vacation allowance.
  • Minimum 16 weeks of parental leave.
  • Up to $2,000 in matched charitable donations and up to 40 hours of annual volunteer time.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior GRC Analyst

Tines 51-250 Construction & Engineering

Tines is seeking a remote U.S.-based Senior GRC Analyst to operate its SOC 2, ISO, and FedRAMP compliance programs while supporting vendor risk management and customer security assurance during a growth phase.

AWS Azure GCP Penetration Testing
6 hours, 38 minutes ago

Compliance Analyst

Turing 251-1K Internet Software & Services

Turing is hiring a remote Compliance Analyst to protect its global technical-talent network by managing KYC, identity verification, AML screening, and fraud-quality controls across more than 100 countries.

7 hours, 8 minutes ago

Part D Senior Investigator

Attain Talent 1-10 staffing & recruiting

Attain Talent is seeking a Part D Senior Investigator to support federal healthcare program integrity through investigations, compliance oversight, risk assessment, and evidence-based recommendations involving pharmacies, dispensers, and manufacturers.

1 day, 7 hours ago

Compliance & Sustainability Intelligence Manager (Emerging Programs)

rePurpose Global 51-250 Professional Services

rePurpose Global is hiring a Compliance & Sustainability Intelligence Manager to research evolving packaging EPR regulations, guide consumer brands through compliance, and shape the company’s regulatory intelligence and platform strategy.

2 days, 7 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers