Compliance

• Manage the Authorization Process: Oversee the entire FedRAMP authorization lifecycle, from initial assessment to final approval.
• Documentation and Compliance: Prepare, review, and rigorously maintain critical security documentation, including the System Security Plan (SSP), control baselines, and the Plan of Action & Milestones (POA&M).
• Security Controls Implementation: Conduct detailed gap analyses, actively map controls against frameworks like NIST 800-53, and collaborate with Product and Engineering to implement, validate, and document security controls.
• Continuous Monitoring: Design and oversee the continuous monitoring process to ensure ongoing compliance with federal standards.
• Risk and Audit Management: Perform comprehensive risk assessments and coordinate all security audits.
• Liaison and Communication: Serve as a primary point of contact and compliance liaison with internal teams and government agencies/clients.

Senior Compliance Analyst

Principal Consultant, Biologist/Regulatory Specialist – Power and Renewables

Director, Gas Distribution Regulation

Compliance Analyst I

Associate Compliance Program Coordinator