Elastic - Principal Security Compliance Analyst
Requirements
• 5+ years of experience managing or supporting a FedRAMP Moderate program. • Strong understanding of FedRAMP, NIST SP 800-53, and continuous monitoring requirements. • Experience with SSPs, POA&Ms, control evidence, vulnerability management, and security assessments. • Strong project-management and organizational skills. • Ability to communicate effectively with technical teams, auditors, government stakeholders, and company leadership. • Eligible to work in Department of Defense (DoD) Impact Level 4 or above cloud service environments. • Additional Information - We Take Care of Our People: • As a distributed company, diversity drives our identity. Whether you’re looking to launch a new career or grow an existing one, Elastic is the type of company where you can balance great work with great life. Your age is only a number. It doesn’t matter if you’re just out of college or your children are; we need you for what you can do. • We strive to have parity of benefits across regions, and while regulations differ from place to place, we believe taking care of our people is the right thing to do. • Competitive pay based on the work you do here and not your previous salary • Health coverage for you and your family in many locations • Ability to craft your calendar with flexible locations and schedules for many roles • Generous number of vacation days each year • Increase your impact - We match up to $2000 (or local currency equivalent) for financial donations and service • Up to 40 hours each year to use toward volunteer projects you love • Embracing parenthood with a minimum of 16 weeks of parental leave
Responsibilities
• Manage the FedRAMP Moderate authorization and continuous monitoring program. • Maintain the System Security Plan, policies, procedures, evidence, inventories, diagrams, and other required documentation. • Coordinate assessments and reviews with our 3PAO, federal agency partners, consultants, and internal teams. • Track security findings and POA&M items through remediation. • Work with Security, Engineering, IT, Product, and Legal teams to implement and maintain required controls. • Monitor program deadlines, risks, and compliance metrics and report progress to leadership. • Review system and product changes for potential FedRAMP impact.
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT