Principal FedRAMP Compliance Advisor

Job Summary

Owning the high-compliance certification program, the full-time Principal GCO High Compliance Systems Advisor will lead FedRAMP authorization activities, manage technical control documentation, and oversee third-party risk management while working in a hybrid model from Minneapolis, Columbus, or Lexington.

Key responsibilities

• Own end-to-end FedRAMP authorization activities, including control design, documentation, and evidence collection
• Chair mandatory FedRAMP meetings and collaborate with various teams to ensure audit readiness
• Design and mature the third-party risk management program, including vendor risk tiering and ongoing monitoring

Required qualifications

• Experience leading FedRAMP Rev 5 Moderate impact-level authorization and related documentation
• Extensive background in drafting and maintaining technical control documentation with subject matter experts
• Familiarity with GRC and compliance tools, such as Drata and Responsive
• Knowledge of NIST 800-53, CIS Controls, and their mapping to FedRAMP and ISO control sets
• Project management experience in running multi-month, cross-functional certification programs