We are seeking a motivated and detail-oriented individual to join our team as a FedRAMP Compliance Analyst. The successful candidate will be responsible for supporting the FedRAMP Compliance at Equifax and ensuring that cloud environments meet the required security standards.

You will serve as a point of contact for FedRAMP compliance. You will be responsible for working with internal security, technology, legal, and business stakeholders as well as with third party auditors to communicate compliance mandates and maintain compliance against published standards. You will support the compliance program to reduce compliance load and streamline program activities.

What you’ll do

• Provide support for Equifax’s delivery of federal compliance frameworks.

• Partner cross-functionally across Equifax to support the implementation of technical, management, and operational controls, with a focus on controls required to deliver and operate FedRAMP environments.

• Partner with other Compliance team members to prepare and update federal security artifacts.

• Collaborate with internal teams to collect and review evidence, track status and provide guidance on what good practices look like.

• Maintain a current understanding of relevant compliance standards and regulations.

• Support onsite assessments and coordinate with internal and external stakeholders.

• Develop and maintain KPIs, KRIs, and dashboards for reporting on assigned compliance programs weekly, monthly, quarterly, and annually.

• Facilitate and verify evidence and artifacts (monthly, quarterly, annually, etc.) per FedRAMP continuous monitoring requirements.

What experience you need

• Bachelor’s degree in Computer Science, Information Systems, or a related field or equivalent experience.

• 2 years of experience in IT Compliance, Information Security, or a related field.

• 1 years of experience in security/IT audit roles and/or 1 years experience in IT Operations.

• Knowledge of FedRAMP requirements.

• Exposure to Cloud security best practices.

• Familiarity with SOC 1 & 2, ISO 27001, PCI, FISMA, NIST CSF and other security frameworks.

What could set you apart

• 1 years of experience working for federal government agencies in security roles.

• Excellent communications skills and experience with customer focused delivery.

• Ability to translate technical and security requirements into common language.

• Willingness to learn new processes and standards as they evolve and adapt current approaches to maintain a high level of execution.

• Outstanding teammate but can work independently when required.

• Big four audit firm experience or mid tier IT/security audit firm experience.

• Ability to deeply understand security controls and help improve its implementation.

• Demonstrated ability to work independently as a self-starter in a fast-paced environment.

• In depth technical knowledge of Cloud systems or IT operations.

• Google Cloud Experience.

#LI-Hybrid

#LI-KD1