Fedramp Compliance Technical Lead

Here at Everlaw we are seeking a highly skilled and experienced FedRAMP Compliance Technical Lead to guide our compliance initiatives within the public sector. This role requires deep expertise in regulatory standards, including FedRAMP, StateRAMP, CJIS, and other government frameworks. The ideal candidate will lead cross-functional teams to ensure alignment with public sector security requirements, audit readiness, and certification processes. You will be responsible for driving the development and implementation of security programs, ensuring adherence to government regulations, and acting as the subject matter expert for compliance-related technical issues.

At Everlaw, our mission is to promote justice by illuminating truth. Our company culture is open and vibrant and we’re committed to the professional growth of our team members, offering an annual learning and development stipend and regular check-ins with managers regarding career goals. If you’re looking for a place that values passion, integrity, thinking big, and a desire to learn, we’d love to hear from you! Think you’re missing some of the skills and are hesitant to apply? We do not believe in the ‘perfect’ candidate and encourage you to apply if you feel you can bring value to our team.

This is a full-time exempt position based in our Oakland, California office with a hybrid work schedule: in office M/W/Th with the option to work from home Tu/Fr.

Getting started

• We want you to feel like part of the team early on! Our onboarding process will integrate you into the company with informative sessions on our product, policies, processes, and team structure and goals.
• We’re excited for you to learn, grow, and contribute right away! We trust that you’ll bring experience and knowledge that will uplift and uplevel the team, but we don’t expect you to know everything on Day 1.

In your role, you'll...

• Lead, manage, and mature security compliance programs for public sector certifications (FedRAMP, StateRAMP, CJIS, etc.).
• Responsible for executing and managing  public sector security program operational activities, including CJIS program management activities such as managing and monitoring access, clearance processes, and related tasks.
• Serve as the primary expert for compliance requirements, coordinating with subject matter experts (SMEs).
• Translate control requirements into simpler terms, making them applicable to our environment to enhance understanding and implementation.
• Provide technical guidance and lead discussions with Engineering, IT, and other teams to articulate NIST requirements and facilitate necessary design and infrastructure modifications.
• Analyze boundary diagram, data flows, and interconnections, offering recommendations for compliance enhancements.
• Drive security improvements to help meet compliance requirements and internal efficiencies.
• Engage with customers as needed to showcase our compliance capabilities.
• Oversee and manage audit preparation, evidence collection, and ATO, certification renewal process.
• Collaborate with Security Engineering, PeopleOPS, IT, and PMO teams to ensure program activities are planned and executed and to meet compliance with government standards.
• Lead and manage the Continuous Monitoring (ConMon) initiative and suggest program improvements.
• Identify opportunities to automate manual processes and implement solutions to improve efficiency and reduce human error in compliance workflows.
• Support the S&T team as a collaborative team player, assisting with other ad hoc tasks as needed.

Project Management:

• Expert in managing multiple projects and establishing project timelines.
• Ability to manage project milestones and report progress, escalating issues in a timely manner.
• Strong leadership skills to coordinate cross-functional teams, address challenges promptly, and adapt plans as necessary to accommodate changing circumstances or new information.

About you

• Experience: Minimum of 3 years experience in security compliance roles focused on public sector clients; Proven track record in leading security audits and managing responses to compliance findings.
• Technical Expertise: Extensive knowledge of public sector security compliance frameworks, including but limited to FedRAMP, CJIS, NIST. Strong technical background in cloud security and compliance.
• Collaboration: Experience collaborating with cross-functional teams such as engineering and Legal in managing audits and ensuring compliance.
• Communication: Excellent written and verbal communication skills, with the ability to translate complex technical concepts to both technical and non-technical stakeholders.
• You are authorized to work in the United States. Please note that currently, Everlaw is not sponsoring employment visas.

Pluses

• Previous experience in public sector compliance roles.
• Certifications: CISSP, PMP or their equivalent
• Experience with GRC tools (e.g., AuditBoard).

Apply to join our team and help shape the future of secure public sector solutions!

Benefits

• The expected salary range for this role is between $180,000 - $210,000. The final offered salary will be dependent upon many factors including the candidate’s experience and skills. The base pay range is subject to change in the future.
• Equity program
• 401(k) retirement plan with company matching
• Health, dental, and vision
• Flexible Spending Accounts for health and dependent care expenses
• Paid parental leave and approximately 10 days (80 hours) per year of sick leave
• Seventeen paid vacation days plus 11 federal holidays
• Membership to Modern Health to help employees prioritize mental health and wellness
• Annual allocation for Learning & Development opportunities and applicable professional membership dues
• Company-sponsored life and disability insurance
• Find out more about our Benefits and Perks

Perks

• Work in Uptown Oakland, just steps from the BART line and dozens of restaurants and walking distance to Lake Merritt
• Flexible work-from-home days on Tuesdays and Fridays
• Monthly home internet reimbursement
• Select your preference of hardware (Mac or PC) and customize your desk setup
• Enjoy a wide variety of snacks and beverages in the office
• Bond over company-wide out-of-the-box events and fun activities with your team
• Time off for company-sponsored volunteer events and 4 paid hours per quarter to volunteer at a charitable organization of your choice
• Take advantage of learning and career development opportunities 
• Ranked #9 on Glassdoor's Best Places to Work 2023 for US small and medium companies
• One of Wealthfront’s 2021 Career Launching Companies, and ranked #2 on the “2022 Bay Area Best Places to Work” list by the San Francisco Business Times and the Silicon Valley Business Journal
• One of Fast Company’s World's Most Innovative Companies for 2022 and proud contributor of free ediscovery resources to benefit the greater good through “Everlaw for Good”
• #LI-EJ1
• #LI-Hybrid