Lead Federal Auditor

Tanium

Lead Federal Auditor strengthening Tanium’s FedRAMP and DoD cloud compliance. Supporting authorization packages, controls, continuous monitoring, and federal assessments for Tanium’s endpoint management and security platform.

Posted 8/13/2026full-timeReston • California, North Carolina, Texas, Virginia, Washington • 🇺🇸 United StatesSenior💰 $100,000 - $155,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in FedRAMP compliance processes and federal risk management frameworks, with a strong focus on NIST SP 800-53 controls and cloud application security. Capable of developing and improving compliance documentation and policies while effectively communicating with technical and non-technical stakeholders.

Highest-signal resume keywords

FedRAMP ComplianceNIST SP 800-53 ControlsCloud/SaaS EnvironmentsAuthorization Artifacts DevelopmentFederal Risk Management Frameworks

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

FedRAMP High Baseline RequirementsNIST SP 800-53 Rev. 4/5Continuous MonitoringGap AnalysisVulnerability ScanningCompliance ReportingControl AssessmentArtifact PreparationEvidence CollectionRisk Management

Soft Skills

Strong Written CommunicationStrong Verbal Communication

Tools & Technologies

AWS GovCloudAzure Government3PAO Assessment Support

Certifications & Qualifications

CISSPCISACAPSecurity+

Industry Keywords

FISMAGovRAMPCMMCNIST CSFDoD IL4/IL5 RequirementsCompliance Status SummariesPOA&M TrackingFederal Cybersecurity Directives

Tech Stack

Tools & technologies

AWSAzureCloudCyber Security

About the role

Key responsibilities & impact

Contribute to authorization package documentation, including SSPs, POA&Ms, and SAPs, for FedRAMP High baseline requirements
Coordinate with 3PAOs and federal agency sponsors on scheduling, evidence collection, and artifact preparation for FedRAMP and DoD IL4/IL5 assessments
Respond to assessor inquiries
Implement and document NIST SP 800-53 controls, validate effectiveness, and gather evidence across FedRAMP Moderate, High, and DoD IL4/IL5 boundaries
Execute continuous monitoring, including monthly vulnerability scanning reviews, POA&M tracking, agency and DoD deliverables, and annual assessment support
Assess system architectures with cloud and infrastructure teams to identify compliance gaps
Conduct gap analyses and readiness assessments ahead of 3PAO assessments
Develop and improve FedRAMP policies, procedures, control implementation descriptions, and internal documentation standards
Review and respond to federal customer security questionnaires and due diligence requests
Prepare compliance status summaries, POA&M updates, and control assessment findings for senior leadership
Monitor FedRAMP PMO, NIST, and DoD SRG updates and federal cybersecurity directives
Participate in cross-functional projects integrating FedRAMP High and DoD IL4/IL5 requirements into product development

Requirements

What you’ll need

Solid hands-on experience with FedRAMP compliance processes and federal risk management frameworks
Exposure to FedRAMP High and DoD Impact Level IL4/IL5 environments
Working knowledge of NIST SP 800-53 Rev. 4/5 High baseline controls and practical cloud application
Familiarity with DoD Cloud Computing SRG and IL2/IL4/IL5 requirements
Experience contributing to authorization artifacts, including SSP, SAP, SAR, POA&M, and ConMon deliverables
Familiarity with FedRAMP, FISMA, NIST SP 800-53, NIST SP 800-37 (RMF), NIST SP 800-171, GovRAMP, CMMC, and NIST CSF
Experience with cloud/SaaS environments, particularly AWS GovCloud, Azure Government, or other IL-accredited platforms
5+ years in information security, compliance, or risk management, with federal program exposure
5+ years of hands-on FedRAMP experience, including CSP compliance, 3PAO assessment support, or federal agency ISSO activities
Strong written and verbal communication skills across technical and non-technical audiences
Experience producing audit findings, policies, and compliance reports
Certifications preferred: CISSP, CISA, CAP, Security+, or equivalent

Benefits

Comp & perks

Equity awards
Medical, dental and vision plan
Family planning benefits
Health savings account
Flexible spending account
Transportation savings account
401(k) retirement savings plan with company match
Life, accident and disability coverage
Business travel accident insurance
Employee assistance programs
Disability insurance
Other well-being benefits
5 days of volunteer time off (VTO)