Principal Security Compliance Analyst - U.S. FedRAMP

Job Description

Position Overview:

Entrust is seeking a Principal Security Compliance Analyst to lead strategic federal compliance, authorization, and assurance programs supporting U.S. Government customers and enterprise certification objectives. This role serves as a trusted advisor to customers, auditors, regulators, executives, and internal stakeholders while driving certification readiness, continuous compliance, authorization activities, and risk management initiatives across cloud, hybrid, and on-premises environments. The position requires leadership of cross-functional teams, ownership of complex audit and authorization efforts, and the ability to influence security and compliance outcomes across the organization.

How You Will Make an Impact:

Lead and support end-to-end compliance efforts for our U.S. Federal customers, including readiness assessments, audits, continuous monitoring activities and deliverables to ensure sustained security posture and compliance with customer security requirements.

Federal Authorization & Customer Assurance Leadership

• Serve as the compliance lead for federal customer authorization efforts, including Agency ATOs, FedRAMP initiatives, security assessments, and ongoing authorization maintenance.
• Act as primary liaison with customer security organizations, government stakeholders, assessors, and auditors.
• Drive authorization package development, review, submission, and maintenance activities.
• Lead POA&M management activities and oversee remediation planning through closure.

Cross-Functional Program Leadership and Executive Engagement

• Lead cross-functional delivery teams responsible for audit interviews, demonstrations, testing activities, evidence collection, and certification readiness.
• Coordinate efforts across Engineering, Cloud Operations, Product Management, Security, Legal, and third-party service providers.
• Present compliance status, risks, milestones, and remediation plans to executive leadership and governance forums.
• Drive escalation and resolution of compliance risks affecting customers, certifications, or business commitments.
• Influence strategic decisions through risk-based recommendations and compliance expertise.

Continuous Compliance and Audit Program Leadership

• Drive adoption of continuous compliance and compliance automation initiatives.
• Partner with technical teams to implement automated evidence collection, compliance monitoring, and machine-readable compliance artifacts.
• Support modernization efforts aligned to emerging frameworks such as FedRAMP 20x.
• Lead end-to-end audit planning, stakeholder coordination, interview preparation, evidence strategy, auditor interaction, issue management, and execution of remediation activities across multiple compliance frameworks.
• Coordinate directly with regulatory bodies, government agencies, external assessors, and auditors regarding authorization, security, and compliance requirements.
• Interpret evolving regulatory requirements and translate them into actionable organizational controls and compliance activities.

Basic Qualifications:

• 8+ years of progressive experience leading security compliance, audit, governance, risk, and federal authorization programs.
• Demonstrated experience leading Agency ATO, FedRAMP, or equivalent government authorization programs.
• Demonstrated success leading enterprise-wide audit and certification initiatives.
• Experience influencing executive leadership and senior stakeholders.
• Experience managing highly complex compliance programs with cross-functional ownership.

Preferred Qualifications:

• Experience serving as primary customer-facing compliance lead.
• Experience leading strategic compliance transformation initiatives.
• Deep knowledge of continuous controls monitoring and continuous assurance models.
• Experience implementing compliance automation, GRC tooling, or compliance-as-code capabilities.
• Prior experience supporting federal agencies or highly regulated environments.
• Experience supporting multiple compliance frameworks (SOC 2, FedRAMP, NIST 800-53/FISMA, ISO 27001/2)

Where You Will Be: Open to U.S.-based candidates and will be fully remote.

About Entrust:

Our growing company relies on curious, dedicated and innovative colleagues to anticipate the future and provide solutions for a more connected, mobile and secure world. Entrust technologies and expertise help government agencies, enterprises and financial institutions in more than 150 countries, serve and safeguard citizens, employees and consumers. Each year, our solutions secure billions of transactions — and every day, our technologies issue and manage more than 10 million secure identities. How do we do all of this? Together.

At Entrust, we don’t just offer jobs – we offer career journeys. Here is what you can expect when you join our team: For more information, visit Follow us on, LinkedIn, Facebook, Instagram, and YouTube

Entrust Corporation is an EOE/AA/Veteran/People with Disabilities employer.

NO AGENCIES, NO RELOCATION