Government Compliance Technical Specialist, BeyondTrust

• 3 years minimum in FedRAMP program management and technical compliance
• 4–7 years of experience in information security, compliance, or GRC
• Demonstrated ability to run a FedRAMP Moderate program, including SSP authorship, ConMon execution, POA&M management, and assessor coordination
• Deep working knowledge of NIST SP 800-53 controls and their practical implementation in cloud environments
• Strong familiarity with FedRAMP 20x concepts, especially Key Security Indicators (KSIs), machine-readable evidence frameworks, and continuous assessment models
• The ability to interpret and define KSIs in the context of BeyondTrust's compliance posture
• Demonstrated ability to coordinate across engineering, infrastructure, legal, and operations teams to gather evidence and drive remediation to closure
• Experience building or supporting automated compliance evidence pipelines
• Experience with GRC tooling for findings management, evidence collection, and program tracking
• Ability to track and manage multiple concurrent workstreams, surface blockers, and maintain delivery cadences
• Strong written and verbal communication skills to translate technical compliance information to varying audiences

Desirable

• The Government Compliance Technical Specialist is a full-time individual contributor on BeyondTrust’s Trust & Assurance team, reporting to the Director of Trust & Assurance
• This role owns day-to-day technical execution of BeyondTrust's government compliance programs, including FedRAMP Moderate, TX-RAMP, IRAP, and other emerging public-sector frameworks
• Responsibilities include continuous monitoring, writing and maintaining compliance documentation, POA&M management, and building automation to support compliance modernization, including FedRAMP 20x
• The ability to interpret, define, and design automation for Key Security Indicators (KSIs) is required
• The ideal candidate has run a FedRAMP program end-to-end and can operate with a high degree of autonomy in a fast-paced cybersecurity product environment
• They bring technical depth in NIST 800-53 controls, understand cloud compliance boundaries, and can demonstrate technical automation
• This role will also support the program management of government compliance workstreams alongside product, security, and engineering teams
• Lead technical compliance build activities for FedRAMP 20x readiness, including interpreting Key Security Indicators (KSIs), defining evidence strategies, and coordinating machine-readable compliance outputs
• Own day-to-day management and execution of FedRAMP Moderate/Class C continuous monitoring, including deliverables, POA&M tracking, and deviation requests
• Author and maintain System Security Plans (SSPs), Security Decision Records (SDRs), and other compliance documentation in human and machine readable formats
• Manage findings and remediation tracking across all government compliance programs
• Coordinate directly with engineering, security, and cloud operations teams to gather evidence, validate control implementation, and close compliance gaps
• Support GovRAMP, TX-RAMP, IRAP, and other government or public-sector compliance programs
• Manage day-to-day relationships with Third Party Assessment Organizations (3PAOs) and agency stakeholders
• Track and report government program health
• Monitor FedRAMP policy changes, framework evolution, and translate changes into compliance roadmap
• Automate evidence collection pipelines and indicator health tracking