Compliance

• Support the implementation and maintenance of Jorie’s FedRAMP authorization program in alignment with agency and customer requirements.
• Develop and maintain FedRAMP System Security Plans (SSP), POA&Ms, and supporting documentation.
• Coordinate with internal IT and cloud engineering teams to ensure continuous compliance of systems within AWS, Azure, or other CSP environments.
• Liaise with 3PAOs (Third-Party Assessment Organizations) and government stakeholders during audits and assessments.
• Ensure consistent control alignment between FedRAMP Moderate/High baselines, HITRUST CSF, and NIST 800-53 frameworks.
• Maintain evidence documentation, control mapping, and compliance matrices for overlapping regulatory programs (HITRUST, SOC 2, HIPAA, PCI).
• Participate in ongoing HITRUST recertification processes, including control review, evidence validation, and policy updates.
• Collaborate with internal and external auditors (e.g., ISP) to ensure accurate reporting and compliance posture visibility.
• Assist in continuous monitoring of security controls and remediation of POA&M items.
• Conduct risk assessments for cloud systems, vendors, and new integrations impacting the FedRAMP boundary.
• Coordinate vulnerability scans, incident response activities, and configuration management documentation in alignment with FedRAMP and HITRUST requirements.
• Develop, update, and enforce policies related to data security, cloud compliance, and regulatory reporting.
• Provide compliance guidance and training to engineering, DevOps, and IT personnel involved in the FedRAMP environment.
• Support internal readiness reviews, gap assessments, and compliance roadmap initiatives.

Compliance Specialist – FedRAMP, HITRUST

Senior Director, Compliance & Ethics – PRISM, Multi-Specialty MSOs

Executive Director, Regulatory Affairs

Director, Regulatory Reporting

Privacy Analyst, Global Compliance

Senior Compliance Associate – Equities