FedRAMP Systems Analyst

*This position can be remote within the US*

 

What we’re looking for…

The FedRAMP Systems Analyst is responsible for the success of the FedRAMP Authorization program at ScienceLogic. The FedRAMP Systems Analyst will be responsible for ensuring execution of the initiatives within the FedRAMP roadmap and will work closely with Product Management, Engineering and SaaS Operations Leads to accomplish the required objectives.

 

What you’ll be doing…

• Be the single point of contact for all things FedRAMP at ScienceLogic, owning the FedRAMP Authorization program
• Own the relationships and act as the interface with the 3PAO, sponsoring agency, contract ATO solution vendor, as well as the FedRAMP PMO
• Lead the planning, scheduling, and preliminary analysis for all development requirements, as well as internal and external audits
• Properly identify, remediate, communicate, or escalate technical and program risks
• Aid the stakeholders in managing technical and program changes
• Gather and report both program and technical metrics
• Partner with Product Management, Engineering and Operations managers on program contributors’ accountability, and priorities
• Stakeholder management outside of product teams including Security, IT, Operations, Customer Support, Business Applications, Legal, Sales, HR, and Finance
• Ability to assess, customize, and use current program and compliance technologies
• Define, execute, and manage the FedRAMP Baseline (BL) and Impact Level (IL) development roadmap, including identifying, communicating, and escalating program risks
• Partner with Engineering, IT, and other teams to develop a sustainable and scalable FedRAMP environment and program
• Coordinate and facilitate the relationships with the 3PAO, sponsoring agency/JAB, and FedRAMP PMO
• Manage security assessments, creation of the Plan of Action & Milestones (POA&M), and ongoing Continuous Monitoring (ConMon) requirements
• Collaborate with process owners and subject matter experts to influence prioritization of projects and solutions to reduce risk and improve compliance
• Establish, maintain, and influence program stakeholder relationships, expectations, and communications
• Review new product features and designs and provide guidance on requirements and standards including NIST 800-53, NIST 800-171, DoD ILs, and FedRAMP BL requirements

 

Qualities you possess…

• FedRAMP experience, including successful completion of products through FedRAMP certification
• Soft skills including the ability to gain the trust of stakeholders and senior management and negotiate priorities with outside teams
• Working knowledge of the software development life cycle (SDLC) for SaaS applications
• Strong analytical and problem-solving skills
• Inspired by bringing cross-functional teams together to accomplish program objectives
• US Citizenship
• Bachelor’s degree preferred
• PMP certification preferred
• Strategic program management for 5+ years at a software company, expert knowledge and experience with project and program management methodology
• 3 or more years of experience in some facet with the FedRAMP Authorization program; experience must demonstrate working knowledge in all phases of preparing and reviewing complete ATO packages for FedRAMP authorization
• Experience with FedRAMP, NIST 800-53, FISMA, DoD ILs, DISA Security Requirements Guide, etc.
• Experience with iterative development and agile program management methodologies particularly Scrum or SAFe
• Experience with Program/Portfolio management toolsets (JIRA/Confluence)
• Experience ensuring all stakeholders have continual access to information, and a shared understanding of priorities, projects, releases, upcoming features, and quality
• Experience with continuous monitoring, third-party assessments, and audit management
• Experience with vulnerability management and helping prioritize security related work
• A solid “driver” who thrives in fast-paced environments and approaches problems with an innovative, can-do attitude
• Excellent interpersonal, verbal, and written communication skills with the ability to communicate compliance related concepts to a broad range of technical and non-technical staff
• Excellent organizational and program management skills
• Experience leading massive, cross-functional programs with the ability to influence priorities and deliver on commitments
• Experience with program / project management tools and dashboards
• CISA, CISSP, CCSP, CCSK or other related certifications preferred

 

Benefits & Perks

• A remote-fir