Senior Federal Compliance Analyst

Horizon3

3d•Remote

About The Position

Horizon3 is seeking a Senior Federal Compliance Analyst to lead its Federal Compliance Program, focusing on the security posture and compliance strategy for its Department of War (DoW) Impact Level 4 (IL4) and Impact Level 5 (IL5) offerings. This role involves bridging the gap between federal regulatory bodies, security teams, and engineering, ensuring the regulatory compliance of applications, products, services, and personnel. The analyst will act as the subject matter expert on DoW security requirements for AWS-hosted environments.

Requirements

Strong knowledge of cybersecurity frameworks and regulations, specifically DoW CC SRG (IL4/IL5), FedRAMP High/Moderate, and NIST SP 800-53.
Excellent written and verbal communication skills.
Experience writing and maintaining FedRAMP System Security Plans, Policies, Procedures, and related Plans.
Strong analytical and problem-solving skills.
Ability to work independently and as part of a team.
Strong organizational skills and attention to detail.
Ability to prioritize and manage multiple projects and deadlines.
3-5+ years of experience in a GRC, Security Compliance, or similar role.
Experience securing and managing compliance within AWS environments.
Familiarity with GRC tooling and platforms.
Experience with AWS security and compliance tools (e.g., Security Hub, GuardDuty, Inspector, etc.).
Knowledge of issue tracking and documentation tools (e.g., Jira, Confluence).
Experience with Amazon Web Services (AWS).
Understanding of cloud-native components and distributed architectures.
Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field or equivalent practical experience and relevant certifications (CISSP, CISA, etc.).
US Citizenship required due to federal data and IL4/IL5 requirements.
Ability to obtain and maintain a government security clearance.

Nice To Haves

Active DoW security clearance.

Responsibilities

Lead compliance assessments and build-out of IL4 and IL5 authorizations, ensuring adherence to DoW Cloud Computing Security Requirements Guide (CC SRG).
Maintain and evolve compliance posture for FedRAMP High, NIST SP 800-53, and other relevant federal frameworks.
Serve as a GRC liaison to development and engineering teams, translating DoW and federal compliance requirements into actionable technical specifications for cloud-native infrastructure.
Oversee internal audits, risk assessments, and the continuous monitoring (ConMon) program.
Act as a primary point of contact for external auditors (3PAOs), federal sponsors, and regulatory bodies.
Respond to external requests for Security Questionnaires, Due Diligence, and Vendor Risk Assessments.
Develop and maintain GRC policies and procedures.
Create and deliver compliance training to employees.
Participate in incident response and investigations related to compliance issues or federal data.