FedRAMP Senior Compliance Analyst

Walk Me, an SAP company, pioneered the Digital Adoption Platform (DAP) to enable business leaders to fully harness technology in today's complex digital landscape. By leveraging Walk Me's features—guidance, engagement, insights, and automation—employees boost efficiency, executives gain greater visibility into digital usage, and organizations maximize their digital assets, driving successful digital transformation.

Together, SAP and Walk Me form a powerful partnership that revolutionizes the digital transformation journey. This collaboration allows businesses to unlock the full potential of SAP's robust ERP solutions while seamlessly enhancing user experience and productivity with Walk Me's intuitive digital adoption platform.

Walk Me is seeking a FedRAMP Senior Compliance Analyst to lead and mature our public-sector FedRAMP program, currently in Ready status, with the goal of achieving full Authorization (ATO) and maintaining Continuous Monitoring. This role involves authoring policies, maintaining FedRAMP documentation, coordinating evidence across engineering teams, collaborating with FedRAMP advisors and auditors to ensure successful assessments and renewals, and serving as the FedRAMP compliance focal point for R&D where U.S. citizenship is required for hands‑on system operations.

This position is ideal for a self‑starter with a can‑do attitude, strong English communication skills (oral and written) and a technical background who excels at translating NIST controls into practical engineering outcomes.

As this role will support our Federal business, US Citizenship is required.

Hybrid role - 2 days a week in our SAP NYC office

• Own the FedRAMP RMF lifecycle, including defining/maintaining the authorization boundary, driving control implementation evidence, writing and reviewing the System Security Plan (SSP), and managing System Assessment Plan (SAP)/System Assessment Report (SAR), Plan of Action & Milestones (POA&M), and Continuous Monitoring submissions.
• Author and maintain security and compliance policies, standards, and procedures, aligning with NIST 800-53r5 and organizational standards.
• Drive vulnerability management, including vulnerability scanning, patching cadence enforcement, and tracking remediation.
• Liaise with external FedRAMP advisors/3
  
  PAO and authorizing stakeholders, scheduling walkthroughs, coordinating requests, and resolving findings.
• Serve as the U.S. citizenship compliance focal point for technical operations in the FedRAMP production environment.
• Collaborate with Security (GRC/App Sec/IR), Cloud Engineering/SRE, and IT teams to operationalize NIST 800-53 Rev. 5 controls and ensure traceable evidence.
• Influence engineering best practices by embedding security and compliance requirements into CI/CD pipelines, IaC, and operational processes.
• Report program status, risks, and metrics to the GRC Lead/CISO, and prepare materials for audits, renewals, and leadership reviews.
• Strong English communication skills (oral and written), with the ability to author clear policies, technical documentation, and reports.
• Positive, can‑do attitude with proven ability to take ownership and drive complex initiatives to completion.
• Standard U.S. time‑zone collaboration is expected, with occasional meetings with external auditors/advisors.

• Minimum 7 years of compliance experience in FedRAMP
• Prior experience leading a FedRAMP Authorization to Operate (ATO) or renewal, including preparing for agency or JAB authorization
• Prior, hands‑on FedRAMP experience in documentation, RMF, POA&M management, Continuous Monitoring, and FIPS‑validated cryptography (FIPS 140-3)
• Strong working knowledge of NIST 800-53r5 and RMF (NIST 800-37), with the ability to map technical controls to evidence
• Demonstrated ability to author policies, review SSPs and collaborate effectively with 3
  
  PAOs/advisors and engineering teams
• Excellent documentation, communication, and stakeholder management skills
• U.S. citizenship (required due to federal program requirements)
• Positive, can‑do attitude with a collaborative approach, and proven ability to take ownership and drive complex initiatives to completion.