Lead and support the full NIST RMF lifecycle for Onebrief deployments, on-prem or cloud-native, across multiple security boundaries
Maintain, and review authorization packages, including SSPs, SAPs, SARs, POA&Ms, STIGs, and supporting artifacts
Coordinate internal assessments and readiness checks ahead of external audits
Partner with Engineers, Product teams, and Security leadership to integrate compliance requirements into system design and operations
Provide guidance on secure architecture and control implementation
Track regulatory changes and advise leadership on compliance implications
Conduct periodic risk assessments and suggest appropriate risk treatment actions
Develop internal cybersecurity awareness and training presentations for employees
Conduct supply chain risk management assessments for current and future vendors

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field
Hands-on expertise with Risk Management Framework across multiple security domains
U.S. Citizen
8+ years in Cybersecurity Compliance and related roles
Experience with Enterprise Mission Assurance Support Service (eMASS) and leveraging automated evidence collection and testing capabilities
Familiarity with cloud security standards (e.g., FedRAMP, ISO 27001, NIST 800-171, DoD Cloud Computing Security Requirements Guide)
Strong background in policy development, control testing, and evidence gathering
Excellent communication skills for working with both technical and non-technical stakeholders.

Compliance Analyst

Key skills