Senior Governance Compliance Security Engineer

Yesterday

Apply Now

Receive Emails with Similar Jobs

Anthology Careers

WebsiteLinkedInAll Job Openings

recruiting • careers • matchmaking

2 - 10 employees

👥 HR Tech

🤝 B2B

☁️ SaaS

Description

• Anthology delivers education and technology solutions. • Empowering educators and institutions with meaningful innovation. • Helping maintain and expand Anthology's Federal Risk and Authorization Management Program (FedRAMP) and StateRAMP program. • Providing subject matter expertise for compliance standards. • Conducting gap assessments and compliance monitoring activities. • Ensuring audit timelines stay on target. • Conducting vendor and supply chain risk assessments. • Collaborating with stakeholders for compliance readiness and audit execution. • Participating in continuous improvement initiatives. • Providing coaching and mentorship to junior team members.

Requirements

• US Citizen • Effective organizational, follow-up, and time management skills • 5-8 years of hands-on experience in IT audit and/or compliance • A strong background with NIST Risk Management Framework (SP 800-53) and a broad range of skills in the fields of NIST publications, StateRAMP, or FedRAMP requirements • Experience with control assessments and coordination of audit activities • Familiarity with Information Security principles, knowledge of IT processes (e.g., Change Management, Incident Management, Risk Management, Network and System Administration) • Strong technical, analytical, interpersonal, and communication skills • Strong writing ability with a focus on communication of technical topics • Ability to work both independently and within a global team environment • Self-starter, quick-learner, and proactive problem-solving skills • Ability to develop and foster strong relationships with technology and business stakeholders • Experience with and comfortable with a remote working environment • Fluency in written and spoken English • StateRAMP or FedRAMP knowledge (Preferred) • Previous experience leading a Cloud Service Provider through a FedRAMP ATO process (Preferred) • Previous experience at a SaaS company in a similar role (Preferred) • Previous experience gaining an ATO or P-ATO for a cloud implementation (Preferred) • Exposure to ISO27001, PCI, HIPAA/HITRUST, SOC 2 (Preferred) • Industry standard certifications (CISSP, CISA, ISO 27001 Lead Implementer/Auditor) (Preferred) • Bachelor's Degree in Information Technology, Business, or related vocations (Preferred)