Job details
About this role
Role overview A senior individual contributor opportunity for a compliance specialist to own and advance the federal compliance program for cloud-hosted offerings targeting U.S. Department of Defense environments. The position sits at the intersection of regulatory bodies, security operations, and engineering teams, with the mission of translating dense federal security requirements into practical controls and documentation.
Responsibilities - Drive the strategy and execution for Impact Level 4 and Impact Level 5 authorizations, aligning program design with the DoD Cloud Computing Security Requirements Guide - Maintain and mature the compliance posture across FedRAMP High, NIST SP 800-53, and related federal frameworks - Serve as a governance, risk, and compliance liaison to engineering, converting regulatory language into actionable technical specifications for cloud-native AWS infrastructure - Lead internal audits, risk assessments, and the continuous monitoring program, including coordination with third-party assessment organizations and federal sponsors - Respond to external due diligence, vendor risk, and security questionnaire requests from government and enterprise customers - Develop organizational policies and procedures, deliver compliance training, and participate in incident response for compliance-related matters
Requirements - Three to five or more years in governance, risk, compliance, or security compliance roles - Hands-on experience securing and managing compliance within AWS environments - Demonstrated knowledge of DoD CC SRG (IL4/IL5), FedRAMP High/Moderate, and NIST SP 800-53 - Experience authoring and maintaining System Security Plans, policies, procedures, and related authorization documentation - Strong written and verbal communication skills, with the ability to explain technical compliance risks to both engineers and non-technical stakeholders - Self-directed working style with strong analytical, organizational, and prioritization abilities
Nice to have - Familiarity with GRC tooling platforms and AWS-native security and compliance services
Benefits and work setup - Remote work environment - Health, vision, and dental insurance for employees and their families - Flexible vacation policy and generous parental leave - Equity package in the form of stock options for full-time roles