[Hiring] Senior Compliance Analyst @CoLab Software

Role Description

As a Senior Compliance Analyst specializing in FedRAMP, you will be the Information System Security Officer (ISSO) for CoLab’s GovCloud environment, which holds a FedRAMP Class D Certification. You will be responsible for the full lifecycle of our GovCloud compliance program, including:

• Certification Package
• Ongoing Certification reporting
• Significant change process
• Transition to updated FedRAMP requirements

This is a hands-on role that requires a high degree of organization. This role reports to the Director of Risk and Compliance, independent of the System Owner.

Qualifications

• 6+ years of hands-on experience developing, implementing and maintaining compliance programs, including 3+ years of direct FedRAMP experience (Moderate/High, now Class B/D).
• Prior experience as an Information Systems Security Officer (or in a similar role) for a FedRAMP or FISMA system is strongly preferred.
• Working knowledge of NIST SP 800-53, FedRAMP Certification Package documentation and the 3PAO assessment process.
• Familiarity with the FedRAMP Consolidated Rules for 2026 (VDR, VER, SCN) and FedRAMP 20x is a strong plus.
• Familiarity with complementary frameworks, especially those that apply to customers handling Controlled Unclassified Information (CUI): NIST SP 800-171 and CMMC.
• Experience with SOC 2 and ISO 27001 frameworks is also an asset.
• Knowledge of U.S. export controls (ITAR and EAR).
• Experience with GRC platforms such as Paramify or Vanta, and with vulnerability scanning tools such as Nessus.
• Ability to plan and complete work within tight deadlines.
• Ability to review and interpret technical documentation, regulatory reference materials and compliance frameworks.
• Strong communication and interpersonal skills, and the ability to collaborate with cross-functional teams.
• Must be a U.S. person (ITAR, 22 CFR 120.62) and based in the United States. This role deals with highly sensitive information and requires an enhanced background check.

Requirements

• Serve as Information System Security Officer for the GovCloud system.
• Act as the main compliance point of contact for CoLab’s agency sponsor, the FedRAMP PMO and CoLab’s 3PAO.
• Develop and maintain the Certification Package Overview and Security Decision Record (formerly the System Security Plan, SSP) and its attachments in CoLab's GRC platform (Paramify).
• Maintain NIST SP 800-53 control mappings to the FedRAMP Class D baseline, working with control owners to document each control’s implementation.
• Run vulnerability reporting under FedRAMP's Vulnerability Detection and Response (VDR) and Vulnerability Evaluation and Reporting (VER) rules.
• Own the Significant Change Notification (SCN) process.
• Lead CoLab's transition to new FedRAMP requirements.
• Lead the monthly Ongoing Certification meeting with agency sponsor and coordinate the annual assessment.
• Prepare and schedule Third Party Assessment Organization (3PAO) walkthroughs with control owners.
• Participate in FedRAMP assessments and audits.
• Own the Integrated Inventory (Appendix M).
• Review GovCloud feature eligibility requests with Product and Engineering for compliance impact.
• Coordinate responses to customer and agency security inquiries and questionnaires under tight timelines.
• Monitor compliance activities to ensure deadlines are met across FedRAMP and other frameworks.
• Create and maintain documentation that supports compliance requirements.
• Work with Security, Compliance, IT and Cloud to prioritize and complete operational tasks.

Benefits

• Extended health and benefits
• Unlimited paid vacation
• 401K matching