Federal Compliance Lead
ΠΡΡΡ & Π‘ΠΎΠΏΡΠΎΠ²ΠΎΠ΄
ΠΠ»Ρ ΠΌΡΡΡΠ° Ρ ΡΡΠΎΠΉ Π²Π°ΠΊΠ°Π½ΡΠΈΠ΅ΠΉ Π½ΡΠΆΠ΅Π½ Plus
ΠΠΏΠΈΡΠ°Π½ΠΈΠ΅ Π²Π°ΠΊΠ°Π½ΡΠΈΠΈ
Location: Remote-friendly within the United States; office option available in Redwood City, California.
Salary: $130,000β$170,000 per year.
Company
Systems develops smart weather balloons and weather intelligence from proprietary atmospheric data to improve forecasting and support climate adaptation.
What you will do
- Build and own the federal compliance function from the ground up, reporting to the COO.
- Lead CMMC Level 2, FedRAMP, IL5, and IL6 certification and authorization efforts.
- Translate FedRAMP, DoD CC SRG, CMMC, and DFARS 7012 requirements into technical architecture, documentation, and operating processes.
- Define CUI boundaries and scope assessment environments.
- Write or substantially contribute to System Security Plans and coordinate implementation across engineering, operations, and business development.
- Implement and assess security controls for distributed cloud applications, including continuous monitoring and evidence collection.
Requirements
- 3+ years of experience with compliance audits such as FedRAMP, PCI, SOC 2, or HIPAA.
- Prior US Government compliance and audit experience with FedRAMP, FISMA, NIST 800-53, NIST 800-171, or US Government ATOs.
- Experience defining CUI boundaries and assessment environments.
- Experience with GRC platforms such as Drata, Vanta, or eMASS, and security tooling for evidence collection and continuous monitoring.
- Experience implementing security controls in AWS or Azure environments, including containers and other ephemeral technologies.
- Strong understanding of encryption, authentication, SIEM, vulnerability management, and tools such as Tenable Security Center or Burp; strong project management skills; willingness and ability to obtain a US security clearance.
Culture & Benefits
- Remote-friendly work environment with an office option in Redwood City.
- 401(k), health, dental, and vision insurance.
- Unlimited paid time off.
- Stock option plan.
- Office food and beverages.
ΠΡΠ΄ΡΡΠ΅ ΠΎΡΡΠΎΡΠΎΠΆΠ½Ρ: Π΅ΡΠ»ΠΈ ΡΠ°Π±ΠΎΡΠΎΠ΄Π°ΡΠ΅Π»Ρ ΠΏΡΠΎΡΠΈΡ Π²ΠΎΠΉΡΠΈ Π² ΠΈΡ ΡΠΈΡΡΠ΅ΠΌΡ, ΠΈΡΠΏΠΎΠ»ΡΠ·ΡΡ iCloud/Google, ΠΏΡΠΈΡΠ»Π°ΡΡ ΠΊΠΎΠ΄/ΠΏΠ°ΡΠΎΠ»Ρ, Π·Π°ΠΏΡΡΡΠΈΡΡ ΠΊΠΎΠ΄/ΠΠ, Π½Π΅ Π΄Π΅Π»Π°ΠΉΡΠ΅ ΡΡΠΎΠ³ΠΎ - ΡΡΠΎ ΠΌΠΎΡΠ΅Π½Π½ΠΈΠΊΠΈ. ΠΠ±ΡΠ·Π°ΡΠ΅Π»ΡΠ½ΠΎ ΠΆΠΌΠΈΡΠ΅ "ΠΠΎΠΆΠ°Π»ΠΎΠ²Π°ΡΡΡΡ" ΠΈΠ»ΠΈ ΠΏΠΈΡΠΈΡΠ΅ Π² ΠΏΠΎΠ΄Π΄Π΅ΡΠΆΠΊΡ. ΠΠΎΠ΄ΡΠΎΠ±Π½Π΅Π΅ Π² Π³Π°ΠΉΠ΄Π΅ β