Principal Security Compliance Analyst - Public Sector - InfoSec

About this role

<div class="content-intro"><p>Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI.</p></div><h3><strong>What Is The Role :</strong></h3> <p style="text-align: justify;"><span data-offset-key="981j8-0-0"><span data-text="true">Join our team as a </span></span><strong><span data-offset-key="981j8-0-1"><span data-text="true">Principal Security Compliance Analyst</span></span></strong><span data-offset-key="981j8-0-2"><span data-text="true">, where you'll take the lead in managing our <strong>FedRAMP Moderate program</strong>. You'll be part of a fantastic team that values a strong security culture, allowing you to contribute meaningfully to our mission while collaborating with like-minded professionals. Your expertise will help us maintain and enhance our compliance efforts in a supportive and engaging environment.</span></span></p> <h3><strong>What You Will Be Doing :</strong></h3> <ul> <li class="public-DraftStyleDefault-unorderedListItem public-DraftStyleDefault-reset public-DraftStyleDefault-depth0 public-DraftStyleDefault-listLTR" data-block="true" data-editor="btuch" data-offset-key="fjuq7-0-0"> <div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" style="text-align: justify;" data-offset-key="fjuq7-0-0"><span data-offset-key="fjuq7-0-0"><span data-text="true">Manage the FedRAMP Moderate authorization and continuous monitoring program.</span></span></div> </li> <li class="public-DraftStyleDefault-unorderedListItem public-DraftStyleDefault-depth0 public-DraftStyleDefault-listLTR" style="text-align: justify;" data-block="true" data-editor="btuch" data-offset-key="n2cp-0-0"> <div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="n2cp-0-0"><span data-offset-key="n2cp-0-0"><span data-text="true">Maintain the System Security Plan, policies, procedures, evidence, inventories, diagrams, and other required documentation.</span></span></div> </li> <li class="public-DraftStyleDefault-unorderedListItem public-DraftStyleDefault-depth0 public-DraftStyleDefault-listLTR" style="text-align: justify;" data-block="true" data-editor="btuch" data-offset-key="899d2-0-0"> <div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="899d2-0-0"><span data-offset-key="899d2-0-0"><span data-text="true">Coordinate assessments and reviews with our 3PAO, federal agency partners, consultants, and internal teams.</span></span></div> </li> <li class="public-DraftStyleDefault-unorderedListItem public-DraftStyleDefault-depth0 public-DraftStyleDefault-listLTR" style="text-align: justify;" data-block="true" data-editor="btuch" data-offset-key="ce5cp-0-0"> <div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="ce5cp-0-0"><span data-offset-key="ce5cp-0-0"><span data-text="true">Track security findings and POA&amp;M items through remediation.</span></span></div> </li> <li class="public-DraftStyleDefault-unorderedListItem public-DraftStyleDefault-depth0 public-DraftStyleDefault-listLTR" style="text-align: justify;" data-block="true" data-editor="btuch" data-offset-key="7nbpp-0-0"> <div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="7nbpp-0-0"><span data-offset-key="7nbpp-0-0"><span data-text="true">Work with Security, Engineering, IT, Product, and Legal teams to implement and maintain required controls.</span></span></div> </li> <li class="public-DraftStyleDefault-unorderedListItem public-DraftStyleDefault-depth0 public-DraftStyleDefault-listLTR" style="text-align: justify;" data-block="true" data-editor="btuch" data-offset-key="kh2u-0-0"> <div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="kh2u-0-0"><span data-offset-key="kh2u-0-0"><span data-text="true">Monitor program deadlines, risks, and compliance metrics and report progress to leadership.</span></span></div> </li> <li class="public-DraftStyleDefault-unorderedListItem public-DraftStyleDefault-depth0 public-DraftStyleDefault-listLTR" style="text-align: justify;" data-block="true" data-editor="btuch" data-offset-key="b1k1a-0-0"> <div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="b1k1a-0-0"><span data-offset-key="b1k1a-0-0"><span data-text="true">Review system and product changes for potential FedRAMP impact.</span></span></div> </li> <li class="public-DraftStyleDefault-unorderedListItem public-DraftStyleDefault-depth0 public-DraftStyleDefault-listLTR" data-block="true" data-editor="btuch" data-offset-key="ek8m9-0-0"> <div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" style="text-align: justify;" data-offset-key="ek8m9-0-0"><span data-offset-key="ek8m9-0-0"><span data-text="true">Help control owners understand their responsibilities and prepare appropriate evidence.</span></span></div> </li> </ul> <h3><strong>What You Bring :</strong></h3> <ul> <li class="public-DraftStyleDefault-unorderedListItem public-DraftStyleDefault-reset public-DraftStyleDefault-depth0 public-DraftStyleDefault-listLTR" data-block="true" data-editor="btuch" data-offset-key="4eph-0-0"> <div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" style="text-align: justify;" data-offset-key="4eph-0-0"><span data-offset-key="4eph-0-0"><span data-text="true">5+ years of experience managing or supporting a FedRAMP Moderate program.</span></span></div> </li> <li class="public-DraftStyleDefault-unorderedListItem public-DraftStyleDefault-depth0 public-DraftStyleDefault-listLTR" style="text-align: justify;" data-block="true" data-editor="btuch" data-offset-key="o1qj-0-0"> <div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="o1qj-0-0"><span data-offset-key="o1qj-0-0"><span data-text="true">Strong understanding of FedRAMP, NIST SP 800-53, and continuous monitoring requirements.</span></span></div> </li> <li class="public-DraftStyleDefault-unorderedListItem public-DraftStyleDefault-depth0 public-DraftStyleDefault-listLTR" style="text-align: justify;" data-block="true" data-editor="btuch" data-offset-key="7ndsr-0-0"> <div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="7ndsr-0-0"><span data-offset-key="7ndsr-0-0"><span data-text="true">Experience with SSPs, POA&amp;Ms, control evidence, vulnerability management, and security assessments.</span></span></div> </li> <li class="public-DraftStyleDefault-unorderedListItem public-DraftStyleDefault-depth0 public-DraftStyleDefault-listLTR" style="text-align: justify;" data-block="true" data-editor="btuch" data-offset-key="8ptof-0-0"> <div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="8ptof-0-0"><span data-offset-key="8ptof-0-0"><span data-text="true">Strong project-management and organizational skills.</span></span></div> </li> <li class="public-DraftStyleDefault-unorderedListItem public-DraftStyleDefault-depth0 public-DraftStyleDefault-listLTR" data-block="true" data-editor="btuch" data-offset-key="b1vdu-0-0"> <div class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" style="text-align: justify;" data-offset-key="b1vdu-0-0"><span data-offset-key="b1vdu-0-0"><span data-text="true">Ability to communicate effectively with technical teams, auditors, government stakeholders, and company leadership.</span></span></div> </li> <li><span data-offset-key="dge9l-0-0"><span data-text="tru