Senior Cloud Compliance Analyst

at  Tanium

THE BASICS

The Senior Cloud Compliance Analyst will be the focal point for all FedRAMP internal and external parties, drive high-level process related to continuous improvement of FedRAMP requirements and anything else that bolsters or support the compliance aspects of Tanium’s FedRAMP program.
The ideal candidate must demonstrate in-depth knowledge and experience in cloud security controls implementation, compliance auditing, accreditation/certification (especially FedRAMP) and creation of risk management frameworks involved therein in order to define needs and goals, and guide continual improvement approaches. They should demonstrate command of or acute familiarity with the CSAs Cloud Controls Matrix, with NIST 800-53 / 800-171, with the ISO 27000 series and with FedRAMP pursuit. The Cloud Compliance Analyst will be accountable for ensuring that business operations are effectively and consistently in compliance with Tanium’s information and cloud security practices.

• FedRAMP Security Audit Management:
• Manage the relationships and execution of all processes related to internal and external audit
• Act as a key initiative driver and SME in in Tanium’s pursuit of FedRAMP Authorization
• Assess and review new vendors for optimal controls implementation and compliance
• FedRAMP Information Risk Reporting:
• Play the lead role in ongoing reporting requirements
• Communicate results of findings
• Make recommendations for improvement through concise, high quality reports
• FedRAMP Security Assurance Program Development:
• Integrate the tracking of the FedRAMP Compliance Framework with the requirements of emerging Customer-Facing Cloud Infrastructure Frameworks at Tanium
• Write and revise Tanium’s System Security Plans (SSP), Plan of Actions & Milestones (POA&Ms), policies, standards, procedures, guidelines and other documentation based on Tanium’s business needs
• Seek opportunities for continuous improvement of risk assessment and compliance practices to drive efficiency
• Act as a consultant to the business. Develop and maintain expertise, acting as a Subject Matter Expert (SME) in the fields of risk and audit management.