SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 100,000 - 115,000 / annual
Knox Systems operates the largest Federal & DoD managed cloud, building and securing cloud and AI environments that support the U.S. government's most critical missions in national security, public safety, and essential services. The company serves as a critical infrastructure provider where security, reliability, and compliance are non-negotiable.
This Compliance Analyst role is a technical compliance position responsible for driving ongoing compliance across multiple federal and commercial frameworks including FedRAMP, FISMA, NIST 800-53, IL4, IL5, CMMC, SOC 2, StateRamp, and GovRAMP. This is not a point-in-time audit support role; the position operates as a technical compliance lead who validates controls, tracks remediation, enforces SLAs, and provides risk visibility to leadership and customers.
Key responsibilities include:
- Continuous compliance oversight for Knox and assigned customer environments across federal and commercial frameworks
- Tracking and enforcing compliance obligations, remediation deadlines, POA&M milestones, and vulnerability remediation timelines
- Reviewing and validating technical control implementation across AWS, Azure, and GCP environments (logging, monitoring, IAM, incident response, vulnerability management, endpoint security, network segmentation, change management)
- Partnering with Sr. Compliance specialists, Security Operations, DevOps, Engineering, and customer teams to ensure controls are implemented and operating effectively
- Supporting FedRAMP authorization and ongoing assessment activities including SSP updates, evidence collection, ConMon support, 3PAO coordination, and audit preparation
- Evaluating findings and weaknesses using compliance requirements and operational risk assessment
- Maintaining visibility into customer compliance posture and shared-responsibility obligations
- Coordinating customer-facing compliance activities including ConMon submissions, POA&M reviews, and acting as liaison for agency communication
- Preparing dashboards, metrics, and executive reporting on compliance posture, audit readiness, and remediation status
- Escalating material compliance gaps and SLA misses to Knox leadership with clear recommendations
- Documenting compliance processes, templates, playbooks, and leveraging compliance-as-code and KnoxAI for scalable operations
Success metrics include maintaining strong compliance posture with minimal overdue items, ensuring audit artifacts are complete and ready, identifying control gaps early, clarifying ownership boundaries with customers, and providing leadership with accurate compliance visibility.
REQUIREMENTS:
- 3-5 years of experience in cybersecurity compliance, GRC, cloud security, or related security assurance roles
- Experience with FedRAMP and NIST SP 800-53 in cloud or SaaS environments
- Working knowledge of FISMA, SOC 2, StateRamp, GovRAMP, and at least one of: IL4, IL5, CMMC, NIST 800-171
- Experience supporting audits, assessments, or authorization activities in regulated cloud environments
- Understanding of cloud platforms (AWS, Azure, GCP) and how security controls are implemented
- Experience partnering with technical teams (DevOps, SOC, SRE, Engineering, IT Operations) to validate controls and drive remediation
- Ability to manage multiple customers, priorities, deadlines, and dependencies in fast-paced environment
- Strong written and verbal communication skills for explaining compliance requirements and risk to technical and non-technical stakeholders
- Experience with shared responsibility models in managed cloud or regulated SaaS environments
- Preferred certifications: CISSP, CISA, CAP, Security+, CCSP, or cloud security certifications
- Preferred: Experience in high-growth cloud company, managed services provider, or regulated SaaS provider
- Preferred: Experience with FedRAMP High and/or DoD IL4/IL5 environments
- Preferred: Experience with continuous monitoring, POA&M governance, vulnerability remediation tracking, and customer audit readiness
- Preferred: Familiarity with CSPM, SIEM, EDR/XDR, ticketing/GRC platforms, and evidence automation workflows
Note: This position requires U.S. citizenship (dual citizenship not permitted). Candidates must provide documentation verifying sole U.S. citizenship as part of background check. Offer contingent on successful pre-employment screenings including background check per government contract requirements.
