Remote Jobs RockRemote Jobs Rock

FedRAMP Documentation Support Specialist

πŸ“… Sep 2
FedrampFedramp SspsAgency AtosContinuous Monitoring
Apply Now

πŸ“œ Description

  • Prepare and manage FedRAMP System Security Plans (SSPs) and attachments, ensuring documentation is complete and accurate.
  • Coordinate across Agency ATOs to reduce duplicated work and meet assessment requirements.
  • Prepare control interview spreadsheets and document relevant controls, risks, and service offerings.
  • Coordinate evidence collection and delivery during 3PAO assessments.
  • Work with control owners to develop and implement corrective actions for assessment findings.
  • Provide assessment guidance and subject matter support to the Documentation team.

πŸ› οΈ Requirements

  • Prior FedRAMP experience.
  • Active Public Trust clearance (Tier 2 - MBI).
  • Bachelor's degree in Accounting, Finance, or a related field.
  • 1-2 years of experience in an audit or accounting role.
  • Strong background in technical writing.
  • Strong analytical and problem-solving skills.
  • Excellent communication and interpersonal skills.
  • Ability to work independently and as part of a team.
  • Proficiency in Microsoft Office Suite.
  • Experience with FedRAMP, IL4, FISMA, and/or SOC assessments.

✨ Benefits

  • Competitive pay.
  • Medical insurance.
  • Dental insurance.
  • Vision insurance.
  • Life insurance.
  • Disability insurance.
  • Voluntary critical illness, hospital, and accident benefits.
  • Health savings and flexible spending accounts.
Full job description

Great Hill Solutions, LLC is part of the Seneca Nation Group (SNG) portfolio of companies. SNG is Seneca Holdings' federal government contracting business that meets mission-critical needs of federal civilian, defense, and intelligence community customers. Our portfolio comprises multiple subsidiaries that participate in the Small Business Administration 8(a) program. To learn more about SNG, visit the website and follow us on LinkedIn.

Our team of talented individuals is what makes us successful. To support our team, we provide a balanced mix of benefits and programs.β€―Your total rewards package includes competitive pay, benefits, and perks, flexible work-life balance, professional development opportunities, and performance and recognition programs. We offer a comprehensive benefits package that includes medical, dental, vision, life, and disability, voluntary benefit programs (critical illness, hospital, and accident), health savings and flexible spending accounts, and retirement 401K plan. One of our fundamental principles is to offer competitive health and welfare benefits to our team members, providing coverage and care for you and your family. Full-time employees working at least 30 hours a week on a regular basis are eligible to participate in our benefits and paid leave programs. We pride ourselves on our collaborative work environment and culture, which embraces our mission of providing financial and non-financial benefits back to the members of the Seneca Nation.

Great Hill is seeking a junior- to mid-level FedRAMP Documentation Support Specialist to support a recent contract award with the USDA. The objective of this work is to maintain the Digital Information Services Center (DISC) FedRAMP Agency ATOs for existing cloud services.

In this role, you will be part of a team that provides specialized FedRAMP advisory services and documentation support to provide Continuous Monitoring services, Inventory Management services, Assessment support, including Evidence Management, to manage Plan of Action’s and Milestones (POA&M) that result from assessment findings each year, and to work with control owners to manage those POA&M’s through resolution.

Roles and Responsibilities include, but are not limited to:

  • Prepare and manage FedRAMP SSPs and Attachments, including ensuring that all required documentation is complete and accurate.
  • Coordinate between ATOs to reduce duplication of effort and ensure that all assessment requirements are met.
  • Prepare control interview spreadsheets for control owner meetings, including identifying and documenting all relevant controls.
  • Participate in meetings and document controls for each service offering, including identifying and documenting all relevant risks and controls.
  • Coordinate and manage evidence during the 3PAO assessment, including ensuring that all required evidence is collected and provided to the 3PAO.
  • Support remediation of any findings during the assessment, including working with the control owner to develop and implement corrective actions.
  • Serve as the subject matter resource for their service offering, providing guidance and support to the Documentation team on all aspects of the assessment.

Basic Qualifications:

  • Prior FedRAMP experience.
  • Active Public Trust clearance (Tier 2 - MBI).
  • Bachelor's degree in Accounting, Finance, or a related field.
  • 1-2 years of experience in an audit or accounting role.
  • Strong background in technical writing.
  • Strong analytical and problem-solving skills.
  • Excellent communication and interpersonal skills.
  • Ability to work independently and as part of a team.
  • Proficiency in Microsoft Office Suite.

Desired Skills:

  • Experience with FedRAMP, IL4, FISMA, and/or SOC assessments.
  • Certified Public Accountant (CPA) designation or Cybersecurity certification.
  • Familiarity with Jira and Confluence

Equal Opportunity Statement:
Seneca Holdings provides equal employment opportunities to all employees and applicants without regard to race, color, religion, sex/gender, sexual orientation, national origin, age, disability, marital status, genetic information and/or predisposing genetic characteristics, victim of domestic violence status, veteran status, or other protected class status. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leave of absence, compensation and training. The Company also prohibits retaliation against any employee who exercises his or her rights under applicable anti-discrimination laws. Notwithstanding the foregoing, the Company does give hiring preference to Seneca or Native individuals. Veterans with expertise in these areas are highly encouraged to apply.

Sigma Software

Junior Compliance Consultant

πŸ•’ 5 days ago
Sigma SoftwareπŸ‘₯ 1001 - 5000 employees🏒 Computer Software

As a Junior Compliance Consultant, you will support compliance activities within commercial projects, focusing on documentation, audits, and compliance standards like ISO 27001 and GDPR.

ISO 27001SOC2GDPRCompliance Documentation
Salmon-Group

Regulatory Affairs Officer

πŸ•’ 7 days ago
Salmon-Group🏒 Financial Services

Monitors banking regulations and assesses their impact on products and operations, while coordinating implementation, preparing regulatory filings and responses, and supporting regulator engagement.

Regulatory MonitoringBSP CircularsAMLC IssuancesMORB

Support SOC 1 and SOC 2 assessments across client engagements, contribute to other security compliance projects, and help develop documentation and remediation plans that strengthen clients’ security practices.

SOC 1SOC 2Information Security ComplianceIT Audits
Mintos

AML Analyst (EDDs)

πŸ•’ 17 days ago
MintosπŸ‘₯ 10,000+ employees🏒 Financial Services

Conduct enhanced due diligence on high-risk individual and corporate investors, analysing source of funds, ownership structures and jurisdictional risks to make evidence-based decisions and improve AML review processes.

Enhanced Due Diligence (edd)AML/CTF ComplianceLegal-entity KYCSource Of Funds Analysis
Devoteam

Nearshore Sector | GRC Analyst

πŸ•’ 4 days ago
Devoteam🏒 Mechanical Or Industrial Engineering

Support global cybersecurity governance by maintaining the ISMS, assessing security and third-party risks, embedding security-by-design in projects, and tracking compliance across business entities.

πŸ“ πŸ‡΅πŸ‡Ή Portugal - RemoteπŸ’Ό Full-TimeπŸ₯ JuniorπŸ›‘οΈ Compliance SpecialistπŸ“’ πŸ‡¬πŸ‡§ English RequiredπŸ“’ πŸ‡«πŸ‡· French Required
Cybersecurity Governance, Risk, And ComplianceISO/IEC 27001NIS2DORA

Trusted by Remote Workers