Senior Federal IT Auditor

Role overview A senior individual contributor role on the Governance, Risk, and Compliance team focused on federal cloud authorization. The position supports FedRAMP and DoD compliance activities, partnering with engineering, security, and product teams to keep cloud offerings authorized across civilian and defense environments.

Responsibilities - Contribute to authorization package documentation, including System Security Plans, POA&Ms, and Security Assessment Plans, with attention to FedRAMP High baseline requirements. - Coordinate with third-party assessment organizations and federal agency sponsors on scheduling, evidence collection, and artifact preparation for FedRAMP and DoD IL4/IL5 assessments. - Implement and document NIST SP 800-53 controls, validating effectiveness and gathering evidence across FedRAMP Moderate, High, and DoD IL4/IL5 boundaries. - Execute continuous monitoring activities such as monthly vulnerability scanning reviews, POA&M tracking, and deliverables for sponsoring agencies and DoD stakeholders. - Assess system architectures with cloud and infrastructure teams to identify compliance gaps, and conduct readiness assessments ahead of 3PAO engagements. - Review federal customer security questionnaires and due diligence requests, and prepare compliance summaries and findings for senior leadership.

Requirements - 5+ years of experience in information security, compliance, or risk management with federal program exposure. - 5+ years of hands-on FedRAMP experience, including CSP compliance, 3PAO assessment support, or federal agency ISSO activities; DoD IL4/IL5 experience preferred. - Working knowledge of NIST SP 800-53 (Rev 4/5) High baseline controls and their practical application in cloud environments. - Familiarity with adjacent frameworks such as FISMA, NIST SP 800-37 (RMF), NIST SP 800-171, GovRAMP, CMMC, and the NIST CSF. - Experience with cloud or SaaS environments, particularly AWS GovCloud, Azure Government, or other IL-accredited platforms. - Strong written and verbal communication skills, with experience producing audit findings, policies, and compliance reports; preferred certifications include CISSP, CISA, CAP, or Security+.

Nice to have - Familiarity with the DoD Cloud Computing SRG and IL2/IL4/IL5 requirements and how they map to FedRAMP. - Experience contributing to authorization artifacts including SAR and ConMon deliverables.

Benefits and work setup - Annual base salary range of $131,000–$201,000, plus equity awards and a benefits package that includes medical, dental, and vision coverage, family planning benefits, health and flexible spending accounts, 401(k) with company match, life and disability coverage, and an employee assistance program. - Five days of paid volunteer time off per year.