Security Compliance Analyst
Fortra • Washington DC, District of Columbia • Full Time • $125,000–$125,000 / year
Posted on Fri, Aug 28, 2026
Whether you’re an experienced professional or just getting started, your contributions matter at Fortra. If you’re passionate about tackling meaningful challenges alongside talented team members committed to helping each other succeed, all while having lots of fun, we want to hear from you. We offer competitive benefits and salaries, personal and professional development opportunities, flexibility, and much more!
As a Compliance Analyst – FedRAMP, you will play a key role in ensuring Fortra’s cloud infrastructure and services meet stringent federal security and compliance standards while maintaining alignment with existing SOC2, PCI, and ISO frameworks. This position requires deep understanding of FedRAMP authorization processes, cloud security compliance, and the integration of NIST controls. The ideal candidate is proactive, detail-oriented, and comfortable working cross-functionally with Development, Engineering, IT, Security, Support, and Audit teams in a fast-paced technology environment.

WHAT YOU'LL DO
- Support the implementation and maintenance of Fortra’s FedRAMP authorization program in alignment with agency and customer requirements.
- Develop and maintain FedRAMP System Security Plans (SSP), POA&Ms, and supporting documentation.
- Coordinate with internal Development, Engineering, IT, Security, Support, and Audit teams to ensure continuous compliance of systems within AWS, Azure, or other CSP environments.
- Liaise with 3PAOs (Third-Party Assessment Organizations) and government stakeholders during audits and assessments.
- Assist in continuous monitoring (CONMON) of security controls and remediation of POA&M items.
- Conduct risk assessments for cloud systems, vendors, and new integrations impacting the FedRAMP boundary.
- Coordinate vulnerability scans, incident response activities, and configuration management documentation in alignment with FedRAMP requirements.
- Other duties as assigned
QUALIFICATIONS
- Bachelor’s degree in Information Security, Computer Science, Compliance, or related field required.
- 3 to 6 years of experience in compliance, information security, or risk management.
- At least 2 years of direct experience supporting FedRAMP programs or equivalent government compliance frameworks.
- Experience working in cloud-based environments (AWS/Azure) and familiarity with continuous monitoring tools (Splunk, Qualys, Nessus, etc.).
- Background in cybersecurity, AI, or SaaS industries strongly preferred.
- In-depth understanding of NIST 800-53, FedRAMP Moderate/High baselines and control mapping.
- Strong knowledge of SOC 2, PCI, and ISO 27001 standards.
- Excellent documentation and writing skills — ability to produce and maintain formal compliance deliverables.
- Strong analytical, organizational, and communication skills, with the ability to work across technical and non-technical teams.
- Experience with FedRAMP (3PAO) Assessors
Compensation: 90,000 USD - 125,000 USD
At Fortra, we’re breaking the attack chain. Ready to join us?
At Fortra, our compensation philosophy prioritizes fair market value and internal equity, aligning with your experience and specialized skill set.
As a full-time, exempt employee at Fortra, you’ll enjoy a comprehensive benefits package that includes:
Health, dental, and vision coverage as of hire
Immediate enrollment in 401(k), HSA, and FSA plans
Flexible PTO policy
Tuition and personal enrichment reimbursement
Option to enroll in ID Theft Protection Program
At Fortra, work is only part of the story. Explore what Life at Fortra is all about, from perks that support holistic wellbeing to a culture that keeps you connected and empowered to make an impact beyond the job.
Visit our website to learn more about why employees choose to work for Fortra. Remember to connect with us on LinkedIn.
As an EEO/Affirmative Action Employer, all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, veteran or disability status.
More live compliance_analyst roles
- BSA Compliance Analyst at Poppy Bank — Santa Rosa, California, United States
- Records Compliance Analyst at UMass Global (Remote)
- QC Compliance Analyst at Simtra BioPharma Solutions — Bloomington, IN, United States
- Sr. HR Compliance Analyst at Inspire Brands — Atlanta, Georgia, United States
- Senior Compliance Analyst at Centene Management Company (Remote)
- Import & Export Compliance Analyst at STERIS — Indianapolis, Indiana, United States
- Senior Technical Compliance Analyst at DraftKings — Boston, Massachusetts, United States
- Governance, Risk & Compliance Analyst I at Geographic Solutions — Palm Harbor, Florida, United States
- Senior Associate Inbound Compliance Analyst (KYC) at Carta — Hamilton, New Jersey, United States
- Senior Trade Compliance Analyst at JBT Marel (Remote)
- Compliance Analyst at Pala Interactive — Toronto, Ontario, Canada
- IT Compliance Analyst at Canopy Growth (Remote)
- Audit & Compliance Analyst at Candescent — Atlanta, Georgia, United States
- Senior Technical Compliance Analyst at DK Crown Holdings — Boston, MA, United States
- Compliance Analyst 401K at Insperity — Kingwood, Texas, United States
- Compliance Analyst at Oppenheimer & Co. — New York, New York, United States
- Senior Compliance Analyst at New York State Housing Finance Agency — New York, New York, US
- Senior Compliance Analyst at AdventHealth — Not Specified
- Electric System Compliance Analyst at JEA — Jacksonville, Florida, United States
- Loan Operations – Funding & Flood Compliance Analyst at Texas Capital Bank — Richardson, Texas, United States
- Senior Internal Controls & Compliance Analyst at Aliaxis (Remote)
- Commodity Tax and Compliance Analyst at Royal Bank of Canada — Burlington, ON, Canada
- Compliance Analyst at Continental Casualty Company — Chicago, US
- Senior Internal Controls & Compliance Analyst at IPEX — Canada
- Compliance Analyst - Branch Exams at Cetera Financial Group (Remote)
- Trade Compliance Analyst at Caterpillar — Irving, Texas, United States
- Sr. Financial Compliance Analyst (Remote) at Stanford Health Care (Remote)
- Senior Financial Compliance Analyst at Stanford Health Care (Remote)
- Sr. Financial Compliance Analyst at Stanford Health Care (Remote)
- GRM, AML Compliance Analyst Intern at Royal Bank of Canada (Remote)
- GRM, AML Compliance Analyst Intern (4 months) at Royal Bank of Canada — Toronto, Canada
- Compliance Analyst I at Cedar House Life Change Center — Bloomington, California, United States
- Compliance Analyst at Cedar House Life Change Center — Bloomington, CA, United States
- Regulatory Affairs Compliance Analyst at SAN JOAQUIN COUNTY HEALTH COMMISSION — French Camp, California, United States
- Compliance Analyst Regulatory Affairs at SAN JOAQUIN COUNTY HEALTH COMMISSION — French Camp, California, United States
- Senior Compliance Analyst at Captrust — Raleigh, North Carolina, United States
- Cost Control & Compliance Analyst - Capital Projects at ITAC — Kings Mountain, North Carolina, US
- Compliance Analyst at Copart — Dallas, TX, US
- Grants / Compliance Analyst at Witt O'Brien's (Remote)
- Compliance Analyst, Servicing and Regulatory at Guild Mortgage (Remote)
- Principal Pricing Compliance Analyst at Textron — Slidell, Louisiana, United States