Principal Security Compliance Analyst (FedRAMP) - Remote, U.S.

Entrust Corporation provides identity-centric security solutions. The Principal Security Compliance Analyst leads federal compliance, authorization, audit, and assurance programs for U.S. Government customers, driving certification readiness, continuous compliance, and risk management across cloud, hybrid, and on-premises environments.

Responsibilities:

• Lead and support end-to-end compliance efforts for our U.S. Federal customers, including readiness assessments, audits, continuous monitoring activities and deliverables to ensure sustained security posture and compliance with customer security requirements
• Serve as the compliance lead for federal customer authorization efforts, including Agency ATOs, FedRAMP initiatives, security assessments, and ongoing authorization maintenance
• Act as primary liaison with customer security organizations, government stakeholders, assessors, and auditors
• Drive authorization package development, review, submission, and maintenance activities
• Lead POA&M management activities and oversee remediation planning through closure
• Lead cross-functional delivery teams responsible for audit interviews, demonstrations, testing activities, evidence collection, and certification readiness
• Coordinate efforts across Engineering, Cloud Operations, Product Management, Security, Legal,  and third-party service providers
• Present compliance status, risks, milestones, and remediation plans to executive leadership and governance forums
• Drive escalation and resolution of compliance risks affecting customers, certifications, or business commitments
• Influence strategic decisions through risk-based recommendations and compliance expertise
• Drive adoption of continuous compliance and compliance automation initiatives
• Partner with technical teams to implement automated evidence collection, compliance monitoring, and machine-readable compliance artifacts
• Support modernization efforts aligned to emerging frameworks such as FedRAMP 20x
• Lead end-to-end audit planning, stakeholder coordination, interview preparation, evidence strategy, auditor interaction, issue management, and execution of remediation activities across multiple compliance frameworks
• Coordinate directly with regulatory bodies, government agencies, external assessors, and auditors regarding authorization, security, and compliance requirements
• Interpret evolving regulatory requirements and translate them into actionable organizational controls and compliance activities

Requirements:

• 8+ years of progressive experience leading security compliance, audit, governance, risk, and federal authorization programs
• Demonstrated experience leading Agency ATO, FedRAMP, or equivalent government authorization programs
• Demonstrated success leading enterprise-wide audit and certification initiatives
• Experience influencing executive leadership and senior stakeholders
• Experience managing highly complex compliance programs with cross-functional ownership
• Experience serving as primary customer-facing compliance lead
• Experience leading strategic compliance transformation initiatives
• Deep knowledge of continuous controls monitoring and continuous assurance models
• Experience implementing compliance automation, GRC tooling, or compliance-as-code capabilities
• Prior experience supporting federal agencies or highly regulated environments
• Experience supporting multiple compliance frameworks (SOC 2, FedRAMP, NIST 800-53/FISMA, ISO 27001/2)