Senior Federal Compliance Analyst

Horizon3 is a fast-growing, remote cybersecurity company dedicated to the mission of enabling organizations to proactively find and fix and verify exploitable attack vectors before criminals exploit them. Our flagship product, the NodeZeroTM platform, delivers production-safe autonomous pentests and other key assess...

We are a fusion of former U.S. Special Operations cyber operators, startup engineers, and formerly frustrated cybersecurity practitioners. We're committed to helping solve our common security problems: ineffective security tools, false positives resulting in alert fatigue, blind spots, "checkbox” security culture, c...

We are seeking a Senior Federal Compliance Analyst to serve as the focal point for Horizon3’s Federal Compliance Program, focused on the security posture and compliance strategy, build-out, and continuous management of our DoW Impact Level 4 (IL4) and Impact Level 5 (IL5) offerings.

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities, and activities may change at any time with or without notice. 
In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.

The ideal candidate is a self-starter and has a "learn-it-all" type of mentality with a passion for security.
Strong knowledge of cybersecurity frameworks and regulations, specifically DoW CC SRG (IL4/IL5), FedRAMP High/Moderate, and NIST SP 800-53.
Excellent written and verbal communication skills, capable of explaining technical compliance risks to both technical engineers and non-technical stakeholders.
Experience writing and maintaining FedRAMP System Security Plans, Policies, Procedures, and related Plans
Strong analytical and problem-solving skills.
Ability to work independently and as part of a team.
Strong organizational skills and attention to detail.
Ability to prioritize and manage multiple projects and deadlines.
At least 3-5+ years of experience in a GRC, Security Compliance, or similar role.
Experience securing and managing compliance within AWS environments.
Tools:
Familiarity with GRC tooling and platforms.
Experience with AWS security and compliance tools (e.g., Security Hub, GuardDuty, Inspector, etc.)
Knowledge of issue tracking and documentation tools (e.g., Jira, Confluence).
Cloud Technologies:
Amazon Web Services (AWS)
Understanding of cloud-native components and distributed architectures.
Education:
Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field or equivalent practical experience and relevant certifications (CISSP, CISA, etc.)
Citizenship
Due to the nature of federal data and IL4/IL5 requirements, this position requires US Citizenship.
This position requires the ability to obtain and maintain a government security clearance
Active DoW security clearance.
We are a fully remote company, and this job may require up to 5% of travel to be successful. Job-related travel expenses are reviewed and must be approved by your manager.