Government Compliance Technical Specialist

The Government Compliance Technical Specialist is a full-time individual contributor on BeyondTrust’s Trust & Assurance team, reporting to the Director of Trust & Assurance. This role owns day-to-day technical execution of BeyondTrust’s government compliance programs, including FedRAMP Moderate, TX-RAMP, IRAP, and other emerging public-sector frameworks.

Responsibilities include:

• Continuous monitoring, writing and maintaining compliance documentation, POA&M management, and building automation to support compliance modernization, including FedRAMP 20x.
• The ability to interpret, define, and design automation for Key Security Indicators (KSIs).
• Running a FedRAMP program end-to-end with a high degree of autonomy in a fast-paced cybersecurity product environment.
• Bringing technical depth in NIST 800-53 controls, understanding cloud compliance boundaries, and demonstrating technical automation.
• Supporting the program management of government compliance workstreams alongside product, security, and engineering teams.
• Leading technical compliance build activities for FedRAMP 20x readiness, including interpreting KSIs, defining evidence strategies, and coordinating machine-readable compliance outputs.
• Managing and executing FedRAMP Moderate/Class C continuous monitoring, including deliverables, POA&M tracking, and deviation requests.
• Authoring and maintaining System Security Plans (SSPs), Security Decision Records (SDRs), and other compliance documentation in human and machine-readable formats.
• Managing findings and remediation tracking across all government compliance programs.
• Coordinating directly with engineering, security, and cloud operations teams to gather evidence, validate control implementation, and close compliance gaps.
• Supporting GovRAMP, TX-RAMP, IRAP, and other government or public-sector compliance programs.
• Managing day-to-day relationships with Third Party Assessment Organizations (3PAOs) and agency stakeholders.
• Tracking and reporting government program health.
• Monitoring FedRAMP policy changes, framework evolution, and translating changes into compliance roadmap.
• Automating evidence collection pipelines and indicator health tracking.

Qualifications:

• Demonstrated ability to run a FedRAMP Moderate program, including SSP authorship, ConMon execution, POA&M management, and assessor coordination.
• Experience with GRC tooling for findings management, evidence collection, and program tracking.
• Experience building or supporting automated compliance evidence pipelines.
• Deep working knowledge of NIST SP 800-53 controls and their practical implementation in cloud environments.
• 4–7 years of experience in information security, compliance, or GRC.
• Ability to track and manage multiple concurrent workstreams, surface blockers, and maintain delivery cadences.
• Strong familiarity with FedRAMP 20x concepts, especially KSIs, machine-readable evidence frameworks, and continuous assessment models.
• Demonstrated ability to coordinate across engineering, infrastructure, legal, and operations teams to gather evidence and drive remediation to closure.
• 3 years minimum in FedRAMP program management and technical compliance.
• Strong written and verbal communication skills to translate technical compliance information to varying audiences.
• Strong familiarity with AI security.
• Experience using AI to develop and deploy applications.
• CISSP or CISA certification.
• Familiarity with FedRAMP High or DoD IL4/IL5 authorization environments.
• Background in cybersecurity product companies or multi-product SaaS environments.
• Bachelor’s degree in information security, computer science, or a related field.