SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 100,000 - 115,000 / annual
Knox Systems operates the largest Federal & DoD managed cloud, building and securing cloud and AI environments that support the U.S. government's most critical missions in national security, public safety, and essential services. The company serves federal customers requiring the highest standards for security, reliability, and compliance.
The Compliance Analyst - Cloud Security role is a technical compliance position responsible for driving ongoing compliance across multiple federal and commercial frameworks including FedRAMP, FISMA, NIST 800-53, IL4, IL5, CMMC, SOC 2, StateRamp, and GovRAMP. This is not a point-in-time audit support role; the analyst operates as a technical compliance lead validating controls in cloud environments, tracking remediation and POA&M performance, enforcing compliance SLAs, and supporting audits and assessments.
Key responsibilities include:
- Continuous compliance oversight for Knox and assigned customer environments across multiple federal and commercial frameworks
- Tracking and enforcing compliance obligations, remediation deadlines, POA&M milestones, and vulnerability remediation timelines
- Reviewing and validating technical control implementation across AWS, Azure, and GCP environments (logging, monitoring, IAM, incident response, vulnerability management, endpoint security, network segmentation, change management)
- Partnering with Sr. Compliance specialists, Security Operations, DevOps, Engineering, and customer teams to ensure controls are implemented and operating effectively
- Supporting FedRAMP authorization and ongoing assessment activities including SSP updates, evidence collection, ConMon support, 3PAO coordination, and audit preparation
- Evaluating findings and weaknesses using compliance requirements and operational risk assessment
- Maintaining visibility into customer compliance posture and shared-responsibility obligations
- Coordinating customer-facing compliance activities including ConMon submissions, POA&M reviews, and acting as primary liaison for agency communication
- Preparing dashboards, metrics, and executive reporting on compliance posture, audit readiness, and remediation status
- Escalating material compliance gaps and SLA misses to Knox leadership with risk context
- Assisting with documentation of compliance processes, templates, and playbooks leveraging compliance-as-code
Success metrics include maintaining strong compliance posture with minimal overdue items, ensuring audit artifacts are complete and ready, identifying control gaps early, clarifying customer/Knox responsibility boundaries, and providing leadership with accurate compliance visibility.
REQUIREMENTS:
- 3-5 years of experience in cybersecurity compliance, GRC, cloud security, or related security assurance roles
- Experience with FedRAMP and NIST SP 800-53 in cloud or SaaS environments
- Working knowledge of FISMA, SOC 2, StateRamp, GovRAMP, and at least one of: IL4, IL5, CMMC, NIST 800-171
- Experience supporting audits, assessments, or authorization activities in regulated cloud environments
- Understanding of cloud platforms (AWS, Azure, GCP) and how security controls are implemented
- Experience partnering with technical teams (DevOps, SOC, SRE, Engineering, IT Operations) to validate control implementation and drive remediation
- Ability to manage multiple customers, priorities, deadlines, and dependencies in a fast-paced environment
- Strong written and verbal communication skills to explain compliance requirements, technical findings, and risk decisions to technical and non-technical stakeholders
PREFERRED QUALIFICATIONS:
- Experience with FedRAMP High and/or DoD IL4/IL5 environments
- Experience with continuous monitoring, POA&M governance, vulnerability remediation tracking, and customer audit readiness
- Familiarity with cloud/security tooling (CSPM, SIEM, EDR/XDR, ticketing/GRC platforms, evidence automation workflows)
- Experience with shared responsibility models in managed cloud or regulated SaaS environments
- Certifications: CISSP, CISA, CAP, Security+, CCSP, or cloud security certifications
- Experience in high-growth cloud companies, managed services providers, or regulated SaaS providers
Note: This position requires U.S. citizenship (dual citizenship not permitted). Candidates must provide documentation verifying sole U.S. citizenship as part of background check. Offer contingent on successful pre-employment screenings including background check per government contract requirements.
