At a Glance
- Tasks: Lead technical compliance for government programs and automate evidence collection.
- Company: Join BeyondTrust, a leader in identity security and cybersecurity innovation.
- Benefits: Flexible work culture, continuous learning, and recognition for your contributions.
- Other info: Diversity and inclusion are at our core; we thrive on different perspectives.
- Why this job: Make a real impact in cybersecurity while growing your skills in a supportive environment.
- Qualifications: 3+ years in FedRAMP program management and strong knowledge of NIST controls.
The predicted salary is between 50715 - 61985 $ per year.
Government Compliance Technical Specialist
Beyond Trust is a place where you can bring your purpose to life through the work that you do, creating a safer world through our cybersecurity Saa S portfolio.
Our culture of flexibility, trust, and continual learning means you will be recognized for your growth, and for the impact you make on our success.
You will be surrounded by people who challenge, support, and inspire you to be the best version of yourself.
The Role
The Government Compliance Technical Specialist is a full-time individual contributor on Beyond Trust's Trust & Assurance team, reporting to the Director of Trust & Assurance.
This role owns day-to-day technical execution of Beyond Trust's government compliance programs, including Fed RAMP Moderate, TX-RAMP, IRAP, and other emerging public-sector frameworks.
Responsibilities include continuous monitoring, writing and maintaining compliance documentation, POA&M management, and building automation to support compliance modernization, including Fed RAMP 20x.
The ability to interpret, define, and design automation for Key Security Indicators (KSIs) is required.
The ideal candidate has run a Fed RAMP program end-to-end and can operate with a high degree of autonomy in a fast-paced cybersecurity product environment.
They bring technical depth in NIST 800-53 controls, understand cloud compliance boundaries, and can demonstrate technical automation.
This role will also support the program management of government compliance workstreams alongside product, security, and engineering teams.
What You'll Do
- Lead technical compliance build activities for Fed RAMP 20x readiness, including interpreting Key Security Indicators (KSIs), defining evidence strategies, and coordinating machine-readable compliance outputs.
- Own day-to-day management and execution of Fed RAMP Moderate/Class C continuous monitoring, including deliverables, POA&M tracking, and deviation requests.
- Author and maintain System Security Plans (SSPs), Security Decision Records (SDRs), and other compliance documentation in human and machine readable formats.
- Manage findings and remediation tracking across all government compliance programs.
- Coordinate directly with engineering, security, and cloud operations teams to gather evidence, validate control implementation, and close compliance gaps.
- Support Gov RAMP, TX-RAMP, IRAP, and other government or public-sector compliance programs.
- Manage day-to-day relationships with Third Party Assessment Organizations (3PAOs) and agency stakeholders.
- Track and report government program health.
- Monitor Fed RAMP policy changes, framework evolution, and translate changes into compliance roadmap.
- Automate evidence collection pipelines and indicator health tracking.
- What You'll Bring
- 3 years minimum in Fed RAMP program management and technical compliance.
- 4β7 years of experience in information security, compliance, or GRC.
- Demonstrated ability to run a Fed RAMP Moderate program, including SSP authorship, Con Mon execution, POA&M management, and assessor coordination.
- Deep working knowledge of NIST SP 800-53 controls and their practical implementation in cloud environments.
- Strong familiarity with Fed RAMP 20x concepts, especially Key Security Indicators (KSIs), machine-readable evidence frameworks, and continuous assessment models.
- The ability to interpret and define KSIs in the context of Beyond Trust's compliance posture.
- Demonstrated ability to coordinate across engineering, infrastructure, legal, and operations teams to gather evidence and drive remediation to closure.
- Experience building or supporting automated compliance evidence pipelines.
- Experience with GRC tooling for findings management, evidence collection, and program tracking.
- Ability to track and manage multiple concurrent workstreams, surface blockers, and maintain delivery cadences.
- Strong written and verbal communication skills to translate technical compliance information to varying audiences.
- Nice To Have
- Strong familiarity with AI security
- Experience using AI to develop and deploy applications
- Experience with Gov RAMP, TX-RAMP, IRAP, or other public-sector compliance frameworks.
- Familiarity with Fed RAMP High or Do D IL4/IL5 authorization environments.
- CISSP or CISA certification.
- Background in cybersecurity product companies or multi-product Saa S environments.
- Bachelor's degree in information security, computer science, or a related field.
- Better Together
Diversity.
Inclusion.
They're more than just words for us.
They are the guiding values of how we build our teams, cultivate leaders, and create a culture where people feel connected.
We take care of our employees so they can take care of our customers.
Customers who come from all walks of life just like us.
We hire incredible people from diverse backgrounds because when we are different together, we are stronger together.
About Us
Beyond Trust is the global identity security leader protecting Paths to Privilege TM.
Our identity-centric approach goes beyond securing privileges and access, empowering organizations with the most effective solution to manage the entire identity attack surface and neutralize threats, whether from external attacks or insiders.
Beyond Trust is leading the charge in transforming identity security to prevent breaches and limit the blast radius of attacks, while creating a superior customer experience and operational efficiencies.
We are trusted by 20,000 customers, including 75 of the Fortune 100, and our global ecosystem of partners.
Country Match Government Compliance Technical Specialist Remote Canada | Remote United States Information Security in Ottawa employer: BeyondTrust, Inc.
BeyondTrust, Inc. is an exceptional employer that fosters a collaborative and innovative work culture in Canada, where employees are empowered to drive meaningful change in software security. With a strong focus on professional growth, team members have access to cutting-edge tools and resources, ensuring they stay at the forefront of technology while contributing to impactful projects. The company values work-life balance and offers competitive benefits, making it an ideal place for those looking to advance their careers in a supportive environment.