At TISTA, you’ll do meaningful, mission‑driven work that improves lives alongside teammates you trust and leaders who are transparent and supportive. We invest in your learning and internal mobility so you can build a career that keeps advancing. We’re proud to serve and hire Veterans, and we put people first in everything we do.
FedRAMP Compliance Team Member
Location
United States
Posted
72 days ago
Salary
$85.7K - $95.5K / year
Seniority
Mid Level
No structured requirement data.
Job Description
FedRAMP Compliance Team Member
TISTA Science and Technology Corporation
Overview The FedRAMP Compliance Team Member supports the full Federal Risk and Authorization Management Program (FedRAMP) lifecycle for Cloud Service Providers (CSPs) leveraging USDA Continuous Monitoring as a Service (CMaaS). This role is responsible for managing authorization activities, performing continuous monitoring, reviewing security documentation, and serving as a key liaison between USDA, CSPs, and agency customers to ensure ongoing compliance with FedRAMP and NIST requirements. At TISTA, you’ll do meaningful, mission‑driven work that improves lives alongside teammates you trust and leaders who are transparent and supportive. We invest in your learning and internal mobility so you can build a career that keeps advancing. We’re proud to serve and hire Veterans, and we put people first in everything we do. TISTA associates enjoy above Industry Healthcare Benefits, Remote Working Options, Paid Time Off, Training/Certification opportunities, Healthcare Savings Account & Flexible Savings Account, Paid Life Insurance, Short-term & Long-term Disability, 401K Match, Professional development reimbursement, Employee Assistance Program, Paid Holidays, Military Leave, and much more! Responsibilities - Manage the full FedRAMP Authorization to Operate (ATO) lifecycle, including Initial Authorizations, Renewal Authorizations, and ongoing Continuous Monitoring activities. - Review and assess System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action & Milestones (POA&Ms) submitted by Cloud Service Providers (CSPs). - Conduct Continuous Monitoring activities, including analysis of: - CSP POA&Ms - Vulnerability scan results - Significant Change Requests - Deviation Requests - Security incident reports to evaluate risk impact and compliance posture. - Apply working knowledge of NIST SP 800‑53 and FedRAMP Core Controls to assess security control implementation and effectiveness. - Implement and validate security controls aligned to FedRAMP Low, Moderate, and High baselines using CSP Control Implementation Summary (CIS) Customer Responsibility Matrices (CRMs). - Serve as a liaison between USDA, CSPs, and USDA customers, supporting CSPs throughout the full FedRAMP lifecycle under USDA Continuous Monitoring as a Service. - Track evolving FedRAMP requirements, NIST guidance, and policy updates, and integrate changes into internal processes, documentation, and control assessments. - Manage working relationships with agency customers and CSPs related to: - Compliance posture - Audit readiness - Security documentation requests - Risk acceptance decisions - Provide timely, customer‑focused support while demonstrating the ability to work independently and maintain dependable availability during core business hours. - Support audit activities, internal reviews, and reporting requirements as needed to maintain authorization status. Qualifications - Experience supporting FedRAMP Authorization and Continuous Monitoring activities in a federal environment. - Working knowledge of NIST SP 800‑53, FedRAMP security baselines, and FedRAMP authorization processes. - Experience reviewing security documentation (SSPs, SARs, POA&Ms, vulnerability scans). - Strong written and verbal communication skills, with the ability to communicate complex security concepts to technical and non‑technical stakeholders. - Ability to manage multiple priorities independently in a deadline‑driven environment. Preferred Qualifications - Experience supporting USDA, civilian agencies, or shared services programs. - Experience working directly with CSPs in IaaS, PaaS, or SaaS environments. - Familiarity with FedRAMP documentation templates and tooling. - Relevant certifications (e.g., CISSP, CISM, CAP, Security+, or equivalent). Education: - Bachelor’s degree or higher in computer science, Information Technology, Information Security, or similar fields. Clearance: - The ability to pass a Public Trust Background Investigation. - US citizens or permanent residents highly preferred. Location: - Remote, USA. Pay Range: - The pay for this position ranges from $85,730 to $95,500. - The actual salary offer will carefully consider a wide range of factors, including your skills, qualifications, experience, and location. - Also, certain positions are eligible for additional forms of compensation, such as bonuses. - TISTA associates are eligible to participate in our comprehensive benefits plan! More information can be found here: https://tistatech.com/working-at-tista/
Related Guides
Related Categories
Related Job Pages
More Compliance Jobs
• Perform KYC/KYB onboarding reviews for individuals and entities, including identity verification, beneficial ownership, and control person validation. • Collect, analyze, and validate documentation and data. • Conduct sanctions, watchlist, PEP, and adverse media screening. • Review application packages, corporate docs, licenses, and expected activity, and reconcile inconsistencies. • Perform EDD for higher risk customers • Identify and document risk mitigants, conditions, and monitoring requirements. • Prepare concise case summaries, risk assessments, and recommendations for approvals/declines. • Triage, investigate, and disposition alerts with clear, evidence-based narratives; escalate cases per playbook and risk thresholds-based narratives. • Prepare SAR writeups and supporting documentation. • Resolve sanctions screening hits (OFAC, UN, EU, HMT) and PEP/adverse media alerts; apply positive reduction techniques. • Prepare sponsor bank Investigation Reports and supporting evidence packages within required timelines. • Coordinate sanctions controls (geo/IP screening, blocks/holds/freezes) and OFAC reporting workflows. • Conduct periodic KYC refresh (CDD/EDD), merchant risk reviews, and trigger-based reviews (e.g., sponsor bank inquiries, chargeback spikes). • Monitor card-brand compliance thresholds and coordinate with Payments & Subra Compliance leadership on remediation. • Maintain thorough case audit trails within the case management system. • Escalate findings to Compliance leadership per procedures • Meet SLAs, quality standards, and regulatory timelines. • Support internal/external audits, sponsor bank exams, and regulatory reviews. • Identify operational gaps and propose improvements to workflows and controls. • Maintain internal policy updates, typologies, and regulatory guidance relevant to AML/KYC and other payments and messaging compliance operations.
• Managing various aspects of regulatory compliance activities for health plan business. • Evaluating new and existing state and federal laws and regulations, in consultation with other regulatory affairs consultants and leadership to advise internal customers and advance the health plan's interests. • Supporting the Regulatory Compliance, Risk Management, and Government Affairs Department in internal implementation processes related to the health plan's legal obligations and new business initiatives. • Analyzing legal obligations and complex regulatory reporting requirements.
Fisheries Economist
Ocean Associates IncorporatedOAI is a Virginia corporation established in 2003 that provides consulting and technical services to the U.S. government, non-governmental organizations, international organizations, and the private sector. Specializes in scientific program and project management, strategic planning, professional and technical services, and stakeholder engagement. Supports government contracts.
Role Description Ocean Associates Inc. (OAI) is seeking a Fisheries Economist to provide economic analysis support to the National Oceanic and Atmospheric Administration (NOAA), Office of Sustainable Fisheries (OSF) in Silver Spring, MD. - Provide economic analysis support. - Support the fishery management actions necessary to enable rapid fulfillment of the requirements of the Seafood Executive Order. - Support the economic analysis for fisheries management actions resulting from the Seafood EO, including: - Conducting Regulatory Impact Review analyses. - Developing fishery descriptions. - Conducting Regulatory Flexibility Analysis reviews (including Section 610 reviews). - Performing Small Business entity analyses. - Assessments including, but not limited to: - Cost-benefits of proposed management options. - Addressing fisheries bycatch and discard issues. - Capacity and protected species issues. - Habitat protection restrictions. - Social impact assessments in support of management actions necessary to implement the Seafood EO. - Provide fisheries management input to the Office of Science & Technology’s Trade Dashboard in support of the Seafood EO. - Evaluate the effects of allocation options between commercial and recreational sectors; within sectors. - Evaluate surveys and research of socioeconomic impacts of management actions and disasters on fishing communities, including: - General public. - Fishing businesses. - Crew. - Aquaculture operations. - Marine-related businesses. - Seafood-business employees. - Evaluate comparative analyses of fishing labor trends. - Technical editing of economic input to fishery management actions in support of the Seafood EO. - Evaluation of decision support tools, including: - Bio economic models. - Integrated ecosystem models. - Angler behavioral models. - Seafood markets and trade. - Aquaculture. - Fisheries economic impact models. - Provide support for socio-economic analyses for fisheries management actions for which NOAA is responsible. Qualifications - Bachelor’s degree and five (5) years’ experience, or Master’s degree and two (2) years’ experience, from an accredited college or university in environmental policy, fisheries management, or related field of study. - Experience conducting economic analyses for fishery management actions. - Direct experience working with NEPA, ESA, MMPA, and the MSA. - Ability to write progress reports on accomplishments, issues encountered, travel, and recommendations. - Experience conducting a comprehensive analysis of the economic costs, benefits, and impacts of proposed fishery management actions on small business entities. - Excellent verbal and written communication skills. - Preferred: Experience writing Socio-Economic Impact Assessments and detailed reports quantifying the effects of management options on fishing communities. - Basic computer skills (MS Office, etc.). - Ability to work effectively both individually and collaboratively in a team/group setting. - Ability to receive constructive feedback and implement appropriate action. Requirements - Anticipated start date: July 1st, 2026; contingent upon award of contract. - Location: Remote / Telework, supporting the office in Silver Spring, MD. - Limited travel is required to attend meetings, trainings, coordinate research, and attend workshops. - This is a full-time position with benefits. Salary, commensurate with experience, between $35.00 - $55.00 per hour. Benefits - Full-time position with benefits. - Salary commensurate with experience.
Head of Compliance
BlockdaemonStake, Scale, and Deploy Nodes: Institutional Grade Blockchain Infrastructure
• Lead the company's compliance vision and multi-year roadmap • Build a scalable, risk-based programme that evolves with the business and the regulatory environment • Ensure compliance is embedded as a strategic enabler — not just a control function • Shape the company's regulatory positioning in the US and globally • Engage with regulators as needed and monitor key regulatory developments • Lead compliance strategy across core products and protocols • Advise on regulatory treatment of digital assets under evolving frameworks • Own the enterprise compliance risk framework • Oversee AML/BSA, KYC/KYB, OFAC sanctions screening, transaction monitoring, and blockchain analytics programmes • Champion an organisation-wide culture of integrity by overseeing compliance policy lifecycle and training programmes.
