Baldwingroup

Senior Cloud Compliance Analyst

Posted 4 Days Ago

Be an Early Applicant

Bellevue, WA

Senior level

Digital Media

The Role

The Senior Cloud Compliance Analyst ensures compliance with Tanium's information and cloud security practices, focusing on FedRAMP requirements. Responsibilities include managing audit processes, leading FedRAMP Authorization efforts, and assessing vendor controls implementation.

Summary Generated by Built In

The Basics
The Senior Cloud Compliance Analyst will be the focal point for all FedRAMP internal and external parties, drive high-level process related to continuous improvement of FedRAMP requirements and anything else that bolsters or support the compliance aspects of Tanium’s FedRAMP program. 
 The ideal candidate must demonstrate in-depth knowledge and experience in cloud security controls implementation, compliance auditing, accreditation/certification (especially FedRAMP) and creation of risk management frameworks involved therein in order to define needs and goals, and guide continual improvement approaches. They should demonstrate command of or acute familiarity with the CSAs Cloud Controls Matrix, with NIST 800-53 / 800-171, with the ISO 27000 series and with FedRAMP pursuit. The Cloud Compliance Analyst will be accountable for ensuring that business operations are effectively and consistently in compliance with Tanium’s information and cloud security practices. 
What you'll do
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335551500":16711680,"335552541":1,"335559685":566,"335559991":283,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">FedRAMP Security Audit Management: 
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335551500":16711680,"335552541":1,"335559685":566,"335559991":283,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Manage the relationships and execution of all processes related to internal and external audit</li>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335551500":16711680,"335552541":1,"335559685":566,"335559991":283,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Act as a key initiative driver and SME in in Tanium’s pursuit of FedRAMP Authorization</li>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335551500":16711680,"335552541":1,"335559685":566,"335559991":283,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Assess and review new vendors for optimal controls implementation and compliance </li>
</ul>
</li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335551500":16711680,"335552541":1,"335559685":566,"335559991":283,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="2" data-aria-level="1">FedRAMP Information Risk Reporting: 
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335551500":16711680,"335552541":1,"335559685":566,"335559991":283,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="2" data-aria-level="1">Play the lead role in ongoing reporting requirements</li>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335551500":16711680,"335552541":1,"335559685":566,"335559991":283,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="2" data-aria-level="1">Communicate results of findings</li>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335551500":16711680,"335552541":1,"335559685":566,"335559991":283,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="2" data-aria-level="1">Make recommendations for improvement through concise, high quality reports </li>
</ul>
</li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335551500":16711680,"335552541":1,"335559685":566,"335559991":283,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="3" data-aria-level="1">FedRAMP Security Assurance Program Development: 
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335551500":16711680,"335552541":1,"335559685":566,"335559991":283,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="3" data-aria-level="1">Integrate the tracking of the FedRAMP Compliance Framework with the requirements of emerging Customer-Facing Cloud Infrastructure Frameworks at Tanium</li>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335551500":16711680,"335552541":1,"335559685":566,"335559991":283,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="3" data-aria-level="1">Write and revise Tanium’s System Security Plans (SSP), Plan of Actions & Milestones (POA&Ms), policies, standards, procedures, guidelines and other documentation based on Tanium’s business needs</li>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335551500":16711680,"335552541":1,"335559685":566,"335559991":283,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="3" data-aria-level="1">Seek opportunities for continuous improvement of risk assessment and compliance practices to drive efficiency </li>
</ul>
</li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335551500":16711680,"335552541":1,"335559685":566,"335559991":283,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="4" data-aria-level="1">Act as a consultant to the business. Develop and maintain expertise, acting as a Subject Matter Expert (SME) in the fields of risk and audit management. </li>
</ul>
  
We’re looking for someone with
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335551500":16711680,"335552541":1,"335559685":566,"335559991":283,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="5" data-aria-level="1">Education
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335551500":16711680,"335552541":1,"335559685":566,"335559991":283,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="5" data-aria-level="1">Bachelor's Degree in Computer Science, Engineering, IT, InfoSec or other relevant degree or equivalent work experience </li>
</ul>
</li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335551500":16711680,"335552541":1,"335559685":566,"335559991":283,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="6" data-aria-level="1">Experience 
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335551500":16711680,"335552541":1,"335559685":566,"335559991":283,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="6" data-aria-level="1">5-7 years business/technical/information security/risk compliance experience</li>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335551500":16711680,"335552541":1,"335559685":566,"335559991":283,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="6" data-aria-level="1">Experience in information security risk analysis, auditing, compliance, policies, and overall governance and communication</li>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335551500":16711680,"335552541":1,"335559685":566,"335559991":283,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="6" data-aria-level="1">Knowledge of hybrid IT systems, networking, and cloud environments (AWS, Google, etc.)</li>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335551500":16711680,"335552541":1,"335559685":566,"335559991":283,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="6" data-aria-level="1">Demonstrated success implementing and Information Security control frameworks and standards such as ITIL, CIS Top 20, SOC 2, GDPR, NIST CSF / 800-53, FISMA, and FedRAMP</li>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335551500":16711680,"335552541":1,"335559685":566,"335559991":283,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="6" data-aria-level="1">Strong knowledge of audit and risk management methodologies, such as COBIT, NIST 800-37/800-30, FAIR</li>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335551500":16711680,"335552541":1,"335559685":566,"335559991":283,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="6" data-aria-level="1">Experience with GRC, IAM, and risk management tools and solution</li>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335551500":16711680,"335552541":1,"335559685":566,"335559991":283,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="6" data-aria-level="1">Experience with information security tools and solutions. </li>
</ul>
</li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335551500":16711680,"335552541":1,"335559685":566,"335559991":283,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="7" data-aria-level="1">Certifications 
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335551500":16711680,"335552541":1,"335559685":566,"335559991":283,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="7" data-aria-level="1">CISA, CRISC, GIAC, CISM, or CISSP certifications (preferred)</li>
</ul>
</li>
</ul>
About Tanium 
Tanium delivers the industry's only true real-time cloud-based endpoint management and security offering. Its converged endpoint management (XEM) platform is real-time, seamless, and autonomous, allowing security-conscious organizations to break down silos between IT and Security operations that results in reduced complexity, cost, and risk. Securing more than 32M endpoints around the world, Tanium's customers include Fortune 100 organizations, top US retailers, top US commercial banks, and branches of the U.S. Military. It also partners with the world's biggest technology companies, system integrators, and managed service providers to help customers realize the full potential of their IT investments. Tanium has been named to the Forbes Cloud 100 list for nine consecutive years and ranks on the Fortune 100 Best Companies to Work For. For more information on The Power of Certainty™, visit <a class="Hyperlink SCXW204325621 BCX0" href="http://www.tanium.com/" target="_blank">www.tanium.com</a> and follow us on <a class="Hyperlink SCXW204325621 BCX0" href="https://www.linkedin.com/company/tanium" target="_blank">LinkedIn</a> and <a class="Hyperlink SCXW204325621 BCX0" href="https://twitter.com/Tanium" target="_blank">X</a>. 
On a mission. Together. 
At Tanium, we are stewards of a culture that emphasizes the importance of collaboration, respect, and diversity. In our pursuit of revolutionizing the way some of the largest enterprises and governments in the world solve their most difficult IT challenges, we are strengthened by our unique perspectives and by our collective actions.   
We are an organization with stakeholders around the world and it’s imperative that the diversity of our customers and communities is reflected internally in our team members. We strive to create a diverse and inclusive environment where everyone feels they have opportunities to succeed and grow because we know that only together can we do great things. 
Each of our team members has 5 days set aside as volunteer time off (VTO) to contribute to the communities they live in and give back to the causes they care about most.   
What you’ll get
The annual base salary range for this full-time position is $110,000 to $325,000. This range is an estimate for what Tanium will pay a new hire. The actual annual base salary offered may be adjusted based on a variety of factors, including but not limited to, location, education, skills, training, and experience.
In addition to an annual base salary, team members will receive equity awards and a generous benefits package consisting of medical, dental and vision plan, family planning benefits, health savings account, flexible spending account, transportation savings account, 401(k) retirement savings plan with company match, life, accident and disability coverage, business travel accident insurance, employee assistance programs, disability insurance, and other well-being benefits.
 
For more information on how Tanium processes your personal data, please see our <a href="https://www.tanium.com/privacy-policy/" target="_blank" data-auth="NotApplicable" data-safelink="true" data-linkindex="0">Privacy Policy</a>.
#Hybrid