Senior Compliance Analyst

ECCO Select Logo
ECCO Select
United States, US
  • IT
  • PartTime

NOTE – this is part time will be a max of 16 hours per week

Senior Compliance Analyst

Position Summary

We are seeking an experienced Senior Compliance Analyst to lead compliance audit activities across our federal and commercial risk management programs. This role is responsible for ensuring our organization’s adherence to NIST 800-53-based Risk Management Frameworks (FedRAMP, FISMA, FedRAMP ) and NIST 800-171 (CMMC), while supervising a team of compliance professionals through audit cycles, assessments, and continuous monitoring activities. The ideal candidate combines deep technical compliance expertise with proven people-leadership skills and brings a strategic, risk-based mindset to regulatory adherence.

Key Responsibilities

  • Lead and manage end-to-end compliance audits, assessments, and continuous monitoring activities against NIST 800-53 controls in support of FedRAMP, FISMA, and FedRAMP authorization boundaries
  • Oversee CMMC/NIST 800-171 assessment readiness, gap analysis, System Security Plan (SSP) development, and Plan of Action and Milestones (POA&M) tracking
  • Supervise, mentor, and develop a team of compliance analysts/auditors, assigning workload, reviewing deliverables, and ensuring quality and consistency of audit evidence and reporting
  • Serve as primary liaison with Third Party Assessment Organizations (3PAOs), C3PAOs, external auditors, and federal sponsoring agencies during assessment cycles
  • Develop and maintain compliance documentation including SSPs, control narratives, risk assessments, and audit workpapers
  • Identify control gaps and compliance risks; partner with system owners and engineering teams to develop and track remediation plans
  • Support and expand compliance posture across complementary frameworks such as SOC 2 Type II and ISO 27001 as the program matures
  • Prepare executive-level reporting on compliance posture, audit findings, and risk trends for senior leadership
  • Stay current on evolving federal compliance requirements, regulatory changes, and industry best practices

Required Qualifications

  • 10–15 years of experience in compliance, regulatory adherence, or compliance auditing roles
  • Demonstrated hands-on experience with NIST 800-53-based RMF programs, including FedRAMP, FISMA, and/or FedRAMP
  • Demonstrated experience with NIST 800-171 and CMMC compliance requirements
  • 3–5 years of supervisory experience leading teams through compliance audits
  • At least two of the following certifications:
  • Certified Public Accountant (CPA)
  • Certified Information Systems Security Professional (CISSP)
  • Certified Information Systems Auditor (CISA)
  • Strong understanding of risk assessment methodologies, control frameworks, and audit lifecycle management
  • Excellent written and verbal communication skills, with the ability to translate technical compliance findings for non-technical stakeholders
  • Bachelor’s degree in Information Security, Information Systems, Accounting, or related field (or equivalent experience)

Preferred Qualifications

  • Experience with SOC 2 Type II audit processes and/or ISO 27001/27001:2022 certification efforts
  • Familiarity with GRC tooling (e.g., Xacta, RSA Archer, ServiceNow GRC, Drata, Vanta)
  • Experience working within federal agency environments or with federal contractors/cloud service providers
  • Working knowledge of FIPS 199/200, NIST 800-37, and NIST 800-30
Apply for job