46 applicants

Company

ChargePoint · 3 days ago

Senior Analyst - FedRAMP

United States

Full-time

Remote

Mid, Senior Level

$52K/yr - $143K/yr

4+ years exp

Maximize your interview chances

AutomotiveCharging Infrastructure

No H1B

Insider Connection @ChargePoint

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

ChargePoint is looking for an experienced Risk and Compliance Analyst to help us maintain and manage our FedRAMP program; support management of our system security plan (SSP) and relevant documentation such as policies, procedures, SSP attachments; oversee monthly ConMon activities, continuous compliance assessments, and process oversight.

The Analyst will support different initiatives part of our FedRAMP compliance and overall Risk Management program within the Information Security team. This position will mainly focus on monthly ConMon submissions and upkeep of the federal compliance program for ChargePoint.

The Analyst will also review vulnerability and compliance scans, analyse the results, provide detailed assessments and ensure remediations within SLA.

The Analyst will also be responsible to provide training and support to IT/ Engineering and other internal stakeholders on the best practices and procedures for federal compliance.

Be knowledgeable of the FedRAMP control families, and capable of making/ reviewing changes as needed to maintain our FedRAMP compliance

Have led FedRAMP advisory projects and/ or created complete FedRAMP packages

Ability to collaborate with cross-geographic and cross-functional teams like Engineering, IT, Sales, Support, H.R. etc. to gather artefacts and perform audits on an on-going basis

Expertise in the execution of various FedRAMP program components, including change reviews, controls assessment, advising stakeholders, remediation recommendations, deficiency evaluations and reporting

Manage relationships with the FedRAMP agency sponsor, 3PAO, and other required stakeholders

Understand the technical issues to raise them and facilitate collaborative resolutions

Communicate status, risks/issues and mitigation plans to a 360 audience, ranging from management to engineers

Comfortable using tools for the job - Jira, Confluence, SharePoint, CrowdStrike, Lucid Chart, Outlook, etc.

Demonstrate the ability to exercise judgment and display a high standard of ethics and professionalism

Demonstrate exceptional communication skills, both written and verbal, with the ability to understand complexities of the business and technology

Excellent oral and written communication and interpersonal skills with emphasis on building strong, longer-term relationships worldwide across different geographies and functions

Detail oriented, self-motivated with the ability to meet project deadlines and deliverables in a fast-paced environment

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

FedRAMP complianceNIST 800-53NIST SP 800-30NIST SP 800-34FISMANIST 800-171Plans of ActionMilestonesSSP documentationConMon PlanGRC platformsCISA certificationCSSP certificationAWS Cloud Security ArchitectJiraConfluenceSharePointCrowdStrikeLucid ChartOutlookCybersecurity risk assessmentsSecurity training initiativesExceptional communication skills

Required

Bachelor’s degree in business administration, information technology, engineering, or related field, or equivalent work experience

4+ years of experience in FedRAMP compliance

United States resident

Practical experience working with federal compliance standards, frameworks, and methodologies, such as NIST 800-53, NIST SP 800-30, NIST SP 800-34, FedRAMP, FISMA, or NIST 800-171

Oversee the development and implementation of Plans of Action and Milestones (POA&Ms)

Experience maintaining federal security documentation including SSP & attachments, ConMon Plan, policies, and procedures

Experience with GRC platforms, reporting tools and presenting compliance reports to senior stakeholders