SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 135,000 - 165,000 / annual
Knox operates the largest Federal & DoD managed cloud, building and securing cloud and AI environments that support the U.S. government's most critical missions in national security, public safety, and essential services. The company serves federal customers at the highest compliance and security standards.
This Senior Compliance Analyst role is a technical compliance leadership position responsible for driving continuous compliance across multiple federal and commercial frameworks. This is not a point-in-time audit support role; the position operates as a technical compliance lead validating controls, tracking remediation, enforcing SLAs, and providing risk visibility to leadership and customers.
Key responsibilities include:
- Own continuous compliance oversight for Knox and assigned customer environments across FedRAMP, FISMA, NIST 800-53, IL4, IL5, CMMC, SOC 2, StateRamp, and GovRAMP frameworks
- Track and enforce compliance obligations, remediation deadlines, POA&M milestones, and vulnerability remediation timelines
- Review and validate technical control implementation across AWS, Azure, and GCP environments (logging, monitoring, IAM, incident response, vulnerability management, endpoint security, network segmentation, change management)
- Partner with Security Operations, DevOps, Engineering, and customer teams to ensure controls are implemented and operating effectively
- Support FedRAMP authorization and ongoing assessment activities including SSP updates, evidence collection, ConMon support, 3PAO coordination, and audit preparation
- Evaluate findings and weaknesses using compliance requirements and operational risk assessment
- Maintain visibility into customer compliance posture and ensure customers meet shared-responsibility obligations
- Manage customer-facing compliance activities including ConMon submissions, POA&M reviews, Security Change Requests, and agency communication
- Prepare dashboards, metrics, and executive reporting on compliance posture, audit readiness, and remediation status
- Escalate material compliance gaps and SLA misses to Knox leadership with clear recommendations
- Help improve Knox's compliance processes, templates, playbooks, and automation capabilities
Success metrics include maintaining strong compliance posture with minimal overdue items, complete and accurate audit artifacts, early identification and closure of control gaps, clear customer understanding of responsibility boundaries, and accurate leadership visibility into compliance health.
REQUIREMENTS:
- 7+ years of experience in cybersecurity compliance, GRC, cloud security, or related security assurance roles
- Direct experience with FedRAMP and NIST SP 800-53 in cloud or SaaS environments
- Strong working knowledge of FISMA, SOC 2, StateRamp, GovRAMP, and at least one of: IL4, IL5, CMMC, NIST 800-171
- Experience supporting audits, assessments, or authorization activities in regulated cloud environments
- Strong understanding of cloud platforms (AWS, Azure, GCP) and how security controls are implemented
- Experience partnering with technical teams (DevOps, SOC, SRE, Engineering, IT Operations) to validate control implementation and drive remediation
- Ability to manage multiple customers, priorities, deadlines, and dependencies in fast-paced environment
- Strong written and verbal communication skills for explaining compliance requirements, technical findings, and risk decisions to technical and non-technical stakeholders
- U.S. citizenship required (dual citizenship not permitted); must provide documentation verifying sole U.S. citizenship status
PREFERRED QUALIFICATIONS:
- Experience with FedRAMP High and/or DoD IL4/IL5 environments
- Experience with continuous monitoring, POA&M governance, vulnerability remediation tracking, and customer audit readiness
- Familiarity with cloud/security tooling (CSPM, SIEM, EDR/XDR, ticketing/GRC platforms, evidence automation workflows)
- Experience with shared responsibility models in managed cloud or regulated SaaS environments
- Certifications: CISSP, CISA, CAP, Security+, CCSP, or cloud security certifications
- Experience in high-growth cloud company, managed services provider, or regulated SaaS provider
