FedRAMP Analyst

{
  "content_hash": "3acfd13ead9065a0cc9cedf22e4e9b4c54533a853ff3c85c288622b0c93f4de5",
  "source_hash": "6cfb8cb169c645c8c026375906548154a77b283ac0945911936eff9196071978",
  "last_changed_at": "2026-05-31T17:46:13.675Z",
  "active_status": "active"
}

{
  "language": "en",
  "location": {
    "raw": "Remote USA, Washington, Washington DC",
    "city": "Washington",
    "region": null,
    "country": "United States",
    "is_remote": true,
    "confidence": 0.95
  },
  "salary_max": 100000,
  "salary_min": 80000,
  "inferred_at": "2026-06-06T10:55:55.269Z",
  "launch_scope": {
    "reason": "english_us_canada",
    "included": true,
    "language": "en",
    "location": {
      "raw": "Remote USA, Washington, Washington DC",
      "city": "Washington",
      "region": null,
      "country": "United States",
      "is_remote": true,
      "confidence": 0.95
    },
    "countries": [
      "United States"
    ]
  },
  "remote_policy": "remote",
  "salary_period": "year",
  "workplace_type": "remote",
  "salary_currency": "USD"
}

{}

{
  "id": "510671",
  "job": {
    "id": "517230",
    "division": null,
    "department": {
      "id": "60992",
      "name": "Security & IT"
    },
    "requisition_id": "",
    "structure_custom_group_one": null
  },
  "url": "https://clearview.pinpointhq.com/en/postings/1c893f0e-8095-4d8b-83e1-a41767f2e962",
  "path": "/en/postings/1c893f0e-8095-4d8b-83e1-a41767f2e962",
  "title": "FedRAMP Analyst",
  "benefits": "<ul><li><!--block-->Medical, Dental, Vision, STD and LTD Plans</li><li><!--block-->FSA - Medical and Dependent Care</li><li><!--block-->EAP and wellness programs</li><li><!--block-->13 Paid Holidays</li><li><!--block-->Unlimited PTO</li><li><!--block-->Flexible work environment - 100% remote</li><li><!--block-->401(k) plan</li></ul>",
  "location": {
    "id": "56816",
    "city": "Washington",
    "name": "Remote USA",
    "province": "Washington DC",
    "postal_code": ""
  },
  "deadline_at": null,
  "description": "<div><!--block-->The FedRAMP Analyst is responsible for day-to-day execution of Clearview AI’s FedRAMP Continuous Monitoring (CONMON) program for Clearview’s federal-authorized platforms, including FedRAMP High. This role owns monthly CONMON deliverables (vulnerability tracking, POA&amp;M updates, inventory reporting, and monthly executive reporting inputs), supports annual 3PAO assessment preparation, and maintains audit-ready evidence repositories aligned to the approved ATO package (SSP and appendices).&nbsp;<br>The FedRAMP Analyst partners closely with Engineering, Security &amp; IT, Legal, People Operations, and external compliance partners to ensure authorized systems remain compliant, secure, and ready to support active U.S. Government customer usage. This role is scoped exclusively to FedRAMP; any future DoD IL program will be staffed as a separate position and is out of scope for this role.</div><div><!--block--><br></div>",
  "compensation": "$80,000 - $100,000 / year",
  "reporting_to": "",
  "workplace_type": "remote",
  "benefits_header": "Benefits",
  "employment_type": "full_time",
  "workplace_type_text": "Fully remote",
  "compensation_maximum": 100000,
  "compensation_minimum": 80000,
  "compensation_visible": true,
  "employment_type_text": "Full Time",
  "key_responsibilities": "<ul><li><!--block-->Execute the monthly FedRAMP CONMON calendar and ensure timely completion of all required artifacts and submissions.</li><li><!--block-->Own monthly vulnerability remediation tracking: intake scan outputs, open/track remediation tickets, validate closure evidence, and ensure SLA adherence (e.g., 30/90/180-day timelines).</li><li><!--block-->Maintain and update the Plan of Action and Milestones (POA&amp;M): create/update POA&amp;M items, document milestones, track due dates, coordinate risk statements with Legal, and route for approvals.</li><li><!--block-->Generate and maintain monthly inventory and configuration evidence (e.g., Integrated Inventory Workbook/IIW updates, authorized software evidence, baseline/config drift support).</li><li><!--block-->Prepare monthly CONMON reporting packages, including Monthly Security Status Reports, CONMON Executive Summary inputs, deviation requests, and other stakeholder reports required by the Sponsoring Agency, FedRAMP PMO, or Authorizing Official.</li><li><!--block-->Prepare deviation and exception requests: gather technical justification, compensating control documentation, scope/impact statements, and route through required approvals.</li><li><!--block-->Support continuous monitoring governance activities: access review evidence, log/monitoring review evidence, and coordination of corrective actions with Engineering and Security &amp; IT.</li><li><!--block-->Maintain the CONMON and ATO artifact repository in Google Drive (or designated system): version control, naming conventions, evidence indexing, and audit-ready structure.</li><li><!--block-->Support annual security testing activities (e.g., penetration tests, red-team exercises if applicable, IR/ISCP tabletop exercises) by tracking schedules, collecting artifacts, and documenting remediation status.</li><li><!--block-->Support annual 3PAO assessment coordination: evidence collection, interview scheduling, assessor Q&amp;A tracking, and findings remediation tracking in partnership with the VP, Federal Operations.</li><li><!--block-->Support significant change workflows: help determine compliance impact, document change narratives, update SSP appendices as required, and maintain change evidence for CONMON.</li><li><!--block-->Track training compliance for federal systems (Rules of Behavior acknowledgements, required awareness training completion) in coordination with People Ops and Security &amp; IT.</li><li><!--block-->Serve as a primary day-to-day point of contact for internal stakeholders for FedRAMP evidence requests and compliance status updates; escalate risks and blockers to the VP, Federal Operations.</li></ul>",
  "compensation_currency": "USD",
  "compensation_frequency": "year",
  "skills_knowledge_expertise": "<ul><li><!--block-->3+ years of experience in cybersecurity compliance, GRC, or operating regulated cloud environments (FedRAMP, DoD IL, CJIS, HIPAA, PCI, ISO 27001/42001, or similar).</li><li><!--block-->Demonstrated experience executing continuous monitoring or recurring compliance reporting programs (monthly cadence preferred).</li><li><!--block-->Working knowledge of NIST 800-53 and FedRAMP concepts (POA&amp;M management, SSP/ATO artifact structure, assessment evidence expectations).</li><li><!--block-->Experience coordinating vulnerability remediation tracking and translating technical findings into compliance artifacts (tickets, evidence, milestones, risk language).</li><li><!--block-->Strong project management and organizational skills; ability to manage multiple deadlines and stakeholder inputs.</li><li><!--block-->Excellent communication skills for producing audit-ready narratives, status reports, and executive summaries.</li><li><!--block-->Comfort working with technical teams (Engineering, Security) to obtain evidence and validate remediation outcomes.</li><li><!--block-->Experience using common tooling for evidence and workflow tracking (Google Drive, Jira/Linear, spreadsheets, ticketing systems).</li><li><!--block-->Ability to manage confidential and sensitive cybersecurity information.</li><li><!--block-->Candidates must be able to meet government security clearance requirements as required for this role.</li></ul><div><!--block--><strong>Preferred Qualifications:</strong></div><ul><li><!--block-->Direct experience supporting a FedRAMP Moderate/High authorization, annual 3PAO assessment, or agency ATO process.</li><li><!--block-->Experience with SecondFront/Game Warden or other FedRAMP-adjacent platforms and inherited-control models.</li><li><!--block-->Familiarity with vulnerability scanning, SIEM/log review concepts, and secure SDLC evidence (SAST/DAST, threat modeling).</li><li><!--block-->Experience with evidence automation or compliance engineering approaches (repeatable evidence packets, templates, control mapping).</li><li><!--block-->Relevant certifications (e.g., Security+, SSCP, CISSP Associate, CAP, CISA, PMP).</li></ul>",
  "key_responsibilities_header": "Key Responsibilities",
  "skills_knowledge_expertise_header": "Skills, Knowledge and Expertise"
}