Senior FedRAMP Compliance Manager

Boston, MA
· Full-time
· Senior About The Position Coralogix is a modern, full-stack observability platform transforming how businesses process and understand their data. Our unique architecture powers in-stream analytics without reliance on expensive indexing or hot storage. We specialize in comprehensive monitoring of logs, metrics, trace, and security events with features such as APM, RUM, SIEM, Kubernetes monitoring, and more, all enhancing operational efficiency and reducing observability spend by up to 70%.Coralogix

is seeking a Senior Compliance Manager for our FedRAMP compliance program. You will ensure our SaaS meets federal security standards and advance us from FedRAMP Ready to Authorized, partnering with our agency sponsor as we enter audit. Responsibilities include governing established documentation (such as our SSP), coordinating evidence with platform engineering, and collaborating with advisors, auditors, and the 3

PAO to drive successful assessments and renewals. This is a full-time position, ideal for a seasoned compliance professional with deep knowledge of NIST SP 800-53 controls and FedRAMP requirements.

You will have 5+ years leading ATOs for cloud services, guiding engineering teams from planning through continuous monitoring and acting as our liaison to the FedRAMP Agency and PMO to resolve questions and ensure compliance.

What You’ll Do:

Lead FedRAMP Compliance Project:
Oversee the FedRAMP Moderate authorization audit, conducting internal compliance reviews and managing cross-functional efforts to meet project timelines and milestones.

Documentation Management:
Prepare, review, and update all required FedRAMP security documentation - including the System Security Plan (SSP), Plan of Action & Milestones (POA&M), Security Assessment Plan/Report (SAP/SAR), and related artifacts - ensuring they remain complete and compliant.

Controls Assessment:
Map and analyze current security controls against the FedRAMP Moderate baseline and NIST SP 800-53 framework to identify gaps and remediation needs. Provide guidance to remediate any gaps and implement required controls.

Implement & Monitor Controls:
Assist in implementing and monitoring security controls for the FedRAMP environment, and coordinate the continuous monitoring processes to maintain compliance. This includes working closely with Dev Ops and Sec Ops teams in overseeing vulnerability scanning, patch management cadence, and other Continuous Monitoring activities.

Cross-Functional Coordination:
Coordinate with internal teams (Dev Ops, IT, etc.) to ensure FedRAMP security requirements are integrated into system design, development, and operations. Educate and guide technical teams on FedRAMP controls and best practices for cloud architecture security.

Audit Liaison:
Serve as the primary liaison with external parties during the FedRAMP assessment. Interface with the Third-Party Assessment Organization (3

PAO), the sponsoring agency, and FedRAMP advisors/auditors, scheduling audit activities, providing evidence, and addressing any findings to ensure successful assessments.

POA&M Coordination:
Coordinate with Sec Ops the Plans of Action and Milestones (POA&Ms) resulting from security assessments, driving remediation efforts to closure within agreed timelines. Ensure timely resolution of any compliance and security gaps.

Reporting & Risk Communication:
Communicate identified risks and mitigation plans clearly, and prepare materials for FedRAMP project reviews, audits, and annual assessments as needed.

Continuous Improvement:
Stay up-to-date with changes in FedRAMP requirements, NIST guidelines, and emerging security threats. Continuously evaluate and recommend improvements to our security controls and processes to maintain…