Staff Governance, Risk & Compliance

Governance, Risk & Compliance, Staff

Remote – United States

The Opportunity:  

Anthology offers the largest EdTech ecosystem on a global scale, supporting over 150 million users in 80 countries. Our mission is to provide dynamic, data-informed experiences to the global education community so that learners and educators can achieve their goals.  

We believe in the power of a truly diverse and inclusive workforce. As we expand globally, we are committed to making diversity, inclusion, and belonging a foundational part of not only our hiring practices but who we are as a company. 

For more information about Anthology and our career opportunities, please visit www.anthology.com.

The primary function of this role will be to manage the maintenance and expansion of Anthology’s Federal and State compliance programs. In addition to helping build Anthology’s State/FedRAMP portfolios, you will also be actively involved in the emerging DISA compliance-related (e.g., RMF, CMMC, DISA IL-4, etc.) workstreams. This role requires someone with prior FedRAMP and/or U.S. Government compliance experience. This position may supervise employees depending on the needs of the business.

Primary responsibilities will include:

• Ensuring policies, practices, and procedures are understood and followed by direct reports, customers, and stakeholders
• Responsible for State and Federal regulatory compliance (TX-, Gov-, FedRAMP, IL-4, CMMC) – Government Compliance – in consultation with the CISO, as well as Finance, Sales, and Legal teams
• Providing subject matter expertise for FedRAMP and NIST 800-53 compliance standards and regulations
• Owning management and execution of the external audit calendar in consultation with business processes and agency/state sponsors
• Leading the completion of corrective and preventive actions for findings of Compliance audits and oversight of the Plan of Action and Milestones (POA&M) reporting process
• Ensuring that systems vulnerability and penetration tests are executed per the State/Federal/Agency standards and results are clearly communicated to appropriate operational teams. Working with operational teams to re-assess remediated systems
• Ensuring that continuous monitoring reporting is conducted, and the results made available to the applicable audience (FedRAMP, GovRAMP, DISA)
• Ensuring annual reviews and updates of System Security Plans are conducted and enforcing the document control management process
• Assisting in the identification of business process improvements and partnering with technology and business stakeholders to identify pragmatic approaches to compliance readiness and testing
• Collaborating cross-functionally with technology and business stakeholders to drive, track, and resolve all aspects of  Compliance readiness and audit execution
• Assisting with forecasting, planning, and risk assessment relevant to expanding Compliance program in alignment with the company’s technology and sales strategies
• Maintaining and applying current industry knowledge and best practices. Researching and recommending use of new technologies
• Project management including analysis of business requirements, creating, and updating project plans, and tracking projects to successful completion
• Mentoring and cross-training team members to achieve business objectives and foster a culture of accountability and ethical conduct
• Developing metrics and dashboards for reporting on Regulatory Compliance programs

The Candidate:

Required skills/qualifications:

• US Citizen
• Effective organization, follow-up, and time management skills
• 8+ years of demonstrated experience in governance, risk management, compliance, and internal audit within a technology-driven environment
• Strong documentation and communication skills
• A recent hands-on concentration of work with the FedRAMP Framework (audit and compliance experience)
• Strong background with NIST Risk Management Framework (SP 800-53) and a broad range of skills in the fields of NIST publications, FedRAMP requirements
• Experience with control assessments and coordination