Senior Compliance Analyst (FedRAMP, NIST & Cloud Security) - Reston, VA (Hybrid, 3 Days Onsite Per Week) - 6 Months Contract to Hire

Job Details:

Job Title:             Senior Compliance Analyst (FedRAMP, NIST & Cloud Security)

Location:             Reston, VA (Hybrid, 3 Days Onsite Per Week)

Duration:            6+ Months Contract to Hire

Description:

Seeking an experienced Senior Compliance Analyst with strong technical and regulatory expertise to manage continuous compliance across federal and commercial cloud environments.

• The consultant will support by maintaining compliance with FedRAMP, FISMA, NIST 800-53, IL4/IL5, CMMC, SOC 2, StateRAMP, and GovRAMP requirements.
• The ideal candidate combines hands-on cloud security compliance experience with strong technical control validation, remediation tracking, audit readiness, and customer-facing communication skills.
• This is an ongoing technical compliance and continuous monitoring role, not a traditional GRC policy analyst or point-in-time audit position.

Key Responsibilities

• Manage continuous compliance activities across FedRAMP, NIST 800-53, FISMA, SOC 2, CMMC, StateRAMP, and GovRAMP environments.
• Track POA&Ms, vulnerability remediation, compliance deadlines, and service-level requirements.
• Review and validate security controls across AWS, Azure, and Google Cloud Platform environments.
• Assess IAM, logging, monitoring, incident response, vulnerability management, network segmentation, and change management controls.
• Support FedRAMP authorization activities, SSP updates, evidence collection, 3PAO assessments, and Continuous Monitoring (ConMon).
• Coordinate customer-facing compliance activities, including ConMon submissions, POA&M reviews, and Security Change Requests/Notifications (SCR/SCN).
• Work with DevOps, Security Operations, Engineering, and customer teams to validate controls and drive remediation.
• Evaluate compliance findings based on risk, exploitability, exposure, and compensating controls.
• Develop dashboards and reports tracking compliance posture, overdue findings, remediation progress, and audit readiness.
• Escalate compliance gaps and missed deadlines with clear recommendations.
• Improve compliance processes, documentation, and automation using compliance-as-code and related tools.

Required Qualifications

• 7+ years of cybersecurity compliance, GRC, cloud security, or security assurance experience.
• Direct hands-on FedRAMP and NIST 800-53 experience in cloud or SaaS environments.
• Strong knowledge of FISMA, SOC 2, StateRAMP, and GovRAMP.
• Experience with at least one of the following: DoD IL4, IL5, CMMC, or NIST 800-171.
• Experience supporting FedRAMP authorization, assessments, or continuous monitoring activities.
• Experience managing POA&Ms, remediation deadlines, and compliance reporting.
• Strong understanding of cloud security controls across AWS, Azure, and/or Google Cloud Platform.
• Ability to validate technical controls and work directly with engineering and security teams.
• Experience coordinating audit evidence, assessments, and customer compliance requirements.
• Strong analytical, organizational, communication, and stakeholder management skills.
• Ability to independently manage multiple customers, deadlines, and compliance priorities.
• Ability to work onsite in Reston, VA, three days per week.

Preferred Qualifications

• Experience with FedRAMP High or DoD IL4/IL5 environments.
• Experience supporting federal agencies or government cloud service providers.
• Familiarity with compliance automation, continuous monitoring, or compliance-as-code.
• Experience with GRC platforms and automated evidence collection tools.
• Experience managing customer-facing FedRAMP compliance programs.
• Experience with Security Change Requests/Notifications and 3PAO coordination.
• CISA, CISSP, CISM, CRISC, or comparable security/compliance certifications.