Senior Federal Compliance Analyst
Horizon3 AI· Security and IT
Remote$115k - $186k + equityFull-timePosted 1mo ago
About the role
Senior Federal Compliance Analyst to lead Horizon3’s Federal Compliance Program, focusing on IL4/IL5 offerings, regulatory alignment, and DoW security requirements for AWS-hosted environments. Acts as GRC liaison among federal regulators, security teams, and engineering to ensure regulatory compliance across applications, products, services, and personnel.
Responsibilities
- IL4/IL5 Strategy & Execution: Lead the compliance assessments and build-out of our IL4 and IL5 authorizations, ensuring Horizon3 meets the stringent requirements of the DoW Cloud Computing Security Requirements Guide (CC SRG).
- Framework Management: Maintain and evolve our compliance posture for FedRAMP High, NIST SP 800-53, and other relevant federal frameworks.
- Engineering Advisory: Act as a GRC liaison to our development and engineering teams, translating complex DoW and federal compliance requirements into actionable technical specifications for cloud-native infrastructure.
- Continuous Monitoring & Auditing: Oversee internal audits, risk assessments, and the continuous monitoring (ConMon) program.
- External Audits & Liaison: Serve as a primary point of contact for external auditors (3PAOs), federal sponsors, and regulatory bodies to ensure that the company meets all necessary compliance requirements.
- Vendor & Security Responses: Respond to external requests for Security Questionnaires, Due Diligence, and Vendor Risk Assessments regarding Horizon3’s federal security program.
- Policy Development & Training: Develop and maintain GRC policies and procedures. Create and deliver compliance training to employees to foster a security-first culture across the organization.
- Incident Response: Participate in incident response and investigations related to compliance issues or federal data.
Qualifications
- Strong knowledge of cybersecurity frameworks and regulations, specifically DoW CC SRG (IL4/IL5), FedRAMP High/Moderate, and NIST SP 800-53.
- Experience writing and maintaining FedRAMP System Security Plans, Policies, Procedures, and related Plans
- At least 3-5+ years of experience in a GRC, Security Compliance, or similar role.
- Experience securing and managing compliance within AWS environments.
- Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field or equivalent practical experience and relevant certifications (CISSP, CISA, etc.).
- US Citizenship and ability to obtain and maintain a government security clearance.
Skills
Required:GRC / Compliance ManagementFedRAMP / DoW CC SRGNIST SP 800-53FedRAMP documentationAWS Security & Compliance ToolsCommunication
Nice to have:GRC tooling / Jira / Confluence
Benefits
- Health, vision & dental insurance for you and your family
- Flexible vacation policy
- Generous parental leave
- Equity package in full-time roles
- Competitive salary and benefits package
Last updated Oct 8, 2026. Interested? Apply on the company site.
About Horizon3 AI
Only Pentesting Platform Proven in Production
Continuously assess, fix, and verify your security posture. Securing enterprises across many attack surfaces.
PentestingSecurity PostureThreat DetectionVulnerabilitiesRisk AssessmentOffensive Security
More open roles at Horizon3 AI
- Federal Senior Product Analytics Engineer4d agoRemote · Product
- Senior Marketing Analytics Manager4d agoRemote · Marketing
- Senior IT Analyst4d agoRemote · Security and IT
- Channel Account Manager, Singapore4d agoSingapore · Sales
- Channel Account Manager, Japan4d agoJapan · Sales