Salesforce Consultant
Effectual
AWSCloudSDLC
Federal Compliance Analyst
Abnormal Security
full-time
Posted on:
Origin: • 🇺🇸 United States
Visit company websiteSalary
💰 $127,500 - $150,000 per year
Job Level
Mid-LevelSenior
Tech Stack
AWSCloud
About the role
- Support Abnormal Gov team to maintain Abnormal’s FedRAMP-authorized platform and federal customer base
- Manage compliance operations under FedRAMP Moderate, including monthly, quarterly, and annual submissions
- Maintain POA&M records, coordinate remediation activities, and track vulnerability management workflows
- Draft and review customer-facing compliance documentation such as control narratives, and audit responses
- Partner with Product, Engineering, and Security teams to conduct security impact analyses (SIA) for system changes
- Support federal POVs and onboarding by providing compliance assurance and documentation to Sales and Customer Success teams
- Coordinate with external assessors, 3PAO, and government sponsors during audits and continuous monitoring engagements
- Identify opportunities to automate and streamline compliance evidence collection and reporting
Requirements
- 5+ years of experience in compliance, risk, or audit roles with a focus on U.S. federal requirements (FedRAMP, FISMA, CMMC, etc.)
- Hands-on experience managing POA&M and continuous monitoring deliverables
- Strong knowledge of NIST 800-53 security controls and their application in cloud environments
- Demonstrated ability to write and maintain compliance documentation for technical and non-technical audiences
- Proven cross-functional collaboration skills, especially with Product, Engineering, and Security teams
- Experience supporting third-party audits and government authorizations
- Excellent organizational skills and the ability to manage multiple deadlines
- Experience with automation tools for compliance tracking and evidence management (Nice to have)
- Prior work with a FedRAMP-accredited 3PAO or government agency (Nice to have)
- Familiarity with cloud security in AWS and SaaS environments (Nice to have)
- Exposure to CMMC Level 2 and DoD compliance frameworks (Nice to have)
