Senior Risk and Compliance Analyst (FedRAMP)

Location: Remote within the United States for candidates residing in approved states; hybrid options are available through offices in Austin, Texas, and Tampa, Florida. Candidates residing within Chicago city limits are not eligible.

Base salary: $125,000–$160,000 per year for roles based in California, Colorado, Maryland, New Jersey, Washington, or New York.

Company

hirify.global provides a unified IT operations platform for endpoint management, patching, backup, and remote access, serving nearly 40,000 customers across more than 140 countries.

What you will do

• Lead FedRAMP High and Moderate authorization activities, including gap assessments, readiness work, remediation tracking, and continuous monitoring.
• Perform IT control testing, collect evidence, maintain audit repositories, and coordinate internal and external assessments.
• Manage relationships with 3PAOs, sponsoring agencies, and the FedRAMP PMO, including assessment scoping and assessor finding remediation.
• Create and maintain SSPs, policies, procedures, plans, control narratives, POA&Ms, deviation requests, and significant change requests.
• Analyze vulnerability and compliance scanning results, coordinate remediation within 30/90/180-day SLAs, and maintain control inheritance from cloud providers.
• Improve and automate evidence collection, control monitoring, scan triage, reporting, and scalable compliance workflows.

Requirements

• Hands-on experience taking a cloud service through FedRAMP Moderate or High authorization and maintaining it through continuous monitoring.
• Working knowledge of NIST SP 800-53 Rev. 5, NIST SP 800-37, FIPS 199/200, FISMA, and the FedRAMP High baseline.
• Experience with security documentation, control implementation narratives, POA&M management, deviation requests, vulnerability remediation, and 3PAO assessments.
• Strong cloud architecture and security knowledge across AWS, Azure, or GCP, including shared responsibility and control inheritance.
• Experience with Wiz, Tenable, Qualys, AWS Security Hub, or similar tooling, plus GRC dashboards, queries, evidence exports, and compliance reporting.
• Must be a U.S. citizen or lawful permanent resident; visa sponsorship is not available.

Nice to have

• Experience with StateRAMP, CMMC, DoD Impact Levels IL4/IL5, ISO 27001, or SOC 2.
• CISSP, CISA, CCSP, or CGRC/CAP certification.
• Experience with Python, SQL, KQL, Rego, OSCAL, technical diagrams, or customer-facing security questionnaires.

Culture & Benefits

• Collaborative, kind, and curious work environment.
• Full-time hybrid-remote flexibility.
• Medical, dental, vision, and life insurance coverage.
• 401(k) plan and unlimited paid time off.
• Opportunities for professional growth and advancement.