Federal Governance and Compliance Security Analyst

Diligent is the global leader in modern governance, providing SaaS solutions across governance, risk, compliance, audit and ESG. Empowering more than 1 million users and 700,000 board members and leaders with a holistic view of their organization s GRC practices so they can make better decisions, faster. No matter the challenge.At Diligent, you are an agent of positive change. You are joining a team of passionate, smart, creative people who not only want to help build thesoftware companyof the future, but who want to make the world a more sustainable, equitable and better place.Be a part of a global community on a mission to make a real impact.We are seeking a Federal Governance & Compliance Analyst to join our team. The candidate will be responsible for managing the POAM (Plan of Actions and Milestones) process, working with DoD and Federal Civilian agencies, analyzing vulnerability, application, web, and database scans for multiple environments, and providing support for compliance with the FedRAMP program. The candidate should have experience in building and maintaining network architecture diagrams, data flow diagrams, System Security Plans, Ports, Protocols, and Services Management (PPSM) documentation. The role requires knowledge of NIST Risk Management Framework (RMF), FedRAMP High, Moderate, and DoD CC-SRG (IL-4,5,6) baselines. Familiarity with StateRAMP and TX-RAMP is also a plus.

This is a full-time position in Diligent s Cybersecurity organization reporting to the Director of Governance and Compliance. The candidate will work with experienced professionals in the field of compliance and security. If you have a passion for security, compliance, and problem-solving, we encourage you to apply for this exciting opportunity.Key Responsibilities:Manage the POAM process, including creating, tracking, and reporting on POAM itemsWork with DoD and Federal Civilian agencies to address security concerns and ensure compliance with FedRAMP requirementsAnalyse vulnerability scans to identify security risks and recommend remediation actionsProvide support for compliance with FedRAMP program requirements, including conducting security assessments and preparing security documentationMaintain and update a System Security PlanCollect and maintain artifacts used and needed for FedRAMP/IL-5 annual assessmentCollaborate with third-party assessment organization (3PAO) for assessmentsStay up-to-date on changes to regulations and standards related to federal compliance and securityWork cross-functionally with engineering, product, advisory, legal, and sales teams to provide customer and stakeholder supportRequired Experience/Skills:Bachelor s degree in Computer Science, Information Security or related field or equivalent experience2+ years experience in federal compliance and governance, including experience with FedRAMP, NIST, FISMA and other relevant regulations and standardsKnowledge of how to maintain and update an SSP (System Security Plan)Foundational knowledge of DoD CC-SRGFamiliarity with AWS GovCloud environment and its related servicesExperience in using scanning solutions to gather and review container, database, web application and other vulnerability scans.Project management skills, including experience with Jira and Service Now ticketing systems or similarStrong analytical and problem-solving skillsExcellent verbal and written communication skillsAbility to work collaboratively in a team environmentMust be able to obtain and maintain a government background/suitability determination to work within an AWS GovCloud environment and with DoD and other federal agencies as requiredPreferred Experience/SkillsExperience within the Federal government as a compliance analyst, GRC analyst, Cloud Security Analyst, ISSO, IT Auditor or similar is preferredRelevant certifications in compliance, audit, cloud security, or related field (e.g. CISSP, CISM CISA, etc.)Experience with regulatory compliance and information security management frameworks (MITRE, NIST CSF, etc.)FLSA Status: ExemptU.S pay range$115,000



$130,000 USDWhat Diligent Offers YouCreativity is ingrained in our culture.

We are innovative collaborators by nature. We thrive in exploring how things can be differently both in our internal processes and to help our clientsWe care about our people.

Diligent offers a flexible work environment, global days of service, comprehensive health benefits, meeting free days, generous time off policy and wellness programs to name a fewWe have teams all over the world . We may be headquartered in New York City, but we have office hubs in Washington D.C., Vancouver, London, Galway, Budapest, Munich, Bengaluru, Singapore, and Sydney.Diversity is important to us.

Growing, maintaining and promoting a diverse team is a top priority for us. We foster and encourage diversity through our Employee Resource Groups and provide access to resources and education to support the education of our team, facilitate dialogue, and foster understanding.Diligent created the modern governance movement. Our world-changing idea is to empower leaders with the technology, insights and connections they need to drive greater impact and accountability to lead with purpose. Our employees are passionate, smart, and creative people who not only want to help build the software company of the future, but who want to make the world a more sustainable, equitable and better place.Headquartered in New York, Diligent has offices in Washington D.C., Baltimore, London, Galway, Budapest, Vancouver, Bengaluru, Munich, and Sydney.We are a drug free workplace. Diligent is proud to be an equal opportunity employer. We do not discriminate based on race, color, religious creed, sex, national origin, ancestry, citizenship status, pregnancy, childbirth, physical disability, mental disability, age, military status, protected veteran status, marital status, registered domestic partner or civil union status, gender (including sex stereotyping and gender identity or expression), medical condition (including, but not limited to, cancer related or HIV/AIDS related), genetic information, or sexual orientation in accordance with applicable federal, state and local laws. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Diligent's EEO Policy

and Know Your Rights . We are committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, you may contact us at ...@diligent.com .To all recruitment agencies:

Diligent does not accept unsolicited agency resumes. Please do not forward resumes to our jobs alias, Diligent employees or any other organization location. Diligent is not responsible for any fees related to unsolicited resumes.Have you previously worked for Diligent or a subsidiary?

*--Do you have a relative that works at Diligent?

*--Do you or have you previously worked for a competitor of Diligent?

*--U.S. Standard Demographic Questions We invite applicants to share their demographic background. If you choose to complete this survey, your responses may be used to identify areas of improvement in our hiring process. How would you describe your gender identity? (mark all that apply)ManNon-binaryWomanI prefer to self-describeI don't wish to answerHow would you describe your racial/ethnic background? (mark all that apply)Black or of African descentEast AsianHispanic, Latinx or of Spanish OriginIndigenous, American Indian or Alaska NativeMiddle Eastern or North AfricanNative Hawaiian or Pacific IslanderSouth AsianSoutheast AsianWhite or EuropeanI prefer to self-describeI don't wish to answerHow would you describe your sexual orientation? (mark all that apply)AsexualBisexual and/or pansexualGayHeterosexualLesbianQueerI prefer to self-describeI don't wish to answerDo you identify as transgender? (Select one)YesNoI prefer to self-describeI don't wish to answerDo you have a disability or chronic condition (physical, visual, auditory, cognitive, mental, emotional, or other) that substantially limits one or more of your major life activities, including mobility, communication (seeing, hearing, speaking), and learning? (Select one)YesNoI prefer to self-describeI don't wish to answerAre you a veteran or active member of the United States Armed Forces? (Select one)Yes, I am a veteran or active memberNo, I am not a veteran or active memberI prefer to self-describeI don't wish to answer

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.As set forth in Diligent Corporation s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.Voluntary Self-Identification of Disability

Form CC-305Page 1 of 1OMB Control Number 1250-0005Expires 04/30/2026Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.As set forth in Diligent Corporation s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.Gender

Please select

Gender

Are you Hispanic/Latino?

Please select

Are you Hispanic/Latino?

Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.Veteran Status

Please select

Veteran Status

Voluntary Self-Identification of Disability

Form CC-305

Page 1 of 1

OMB Control Number 1250-0005

Expires 04/30/2026Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp .How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your major life activities. If you have or have ever had such a condition, you are a person with a disability.

Disabilities include, but are not limited to:Alcohol or other substance use disorder (not currently using drugs illegally)Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDSBlind or low visionCancer (past or present)Cardiovascular or heart diseaseCeliac diseaseCerebral palsyDeaf or serious difficulty hearingDiabetesDisfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disordersEpilepsy or other seizure disorderGastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndromeIntellectual or developmental disabilityMental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSDMissing limbs or partially missing limbsMobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supportsNervous system condition, for example, migraine headaches, Parkinson s disease, multiple sclerosis (MS)Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilitiesPartial or complete paralysis (any cause)Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysemaShort stature (dwarfism)Traumatic brain injuryDisability Status

Please select

Disability Status

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

#J-18808-Ljbffr