The Government Compliance Technical Specialist is a full-time individual contributor on Beyond Trust’s Trust & Assurance team, reporting to the Director of Trust & AssuranceThis role owns day-to-day technical execution of Beyond Trust’s government compliance programs, including Fed RAMP Moderate, TX-RAMP, IRAP, and other emerging public-sector frameworksResponsibilities include continuous monitoring, writing and maintaining compliance documentation, POA&M management, and building automation to support compliance modernization, including Fed RAMP 20xThe ability to interpret, define, and design automation for Key Security Indicators (KSIs) is requiredThe ideal candidate has run a Fed RAMP program end-to-end and can operate with a high degree of autonomy in a fast-paced cybersecurity product environmentThey bring technical depth in NIST 800-53 controls, understand cloud compliance boundaries, and can demonstrate technical automationThis role will also support the program management of government compliance workstreams alongside product, security, and engineering teamsLead technical compliance build activities for Fed RAMP 20x readiness, including interpreting Key Security Indicators (KSIs), defining evidence strategies, and coordinating machine-readable compliance outputsOwn day-to-day management and execution of Fed RAMP Moderate/Class C continuous monitoring, including deliverables, POA&M tracking, and deviation requestsAuthor and maintain System Security Plans (SSPs), Security Decision Records (SDRs), and other compliance documentation in human and machine readable formatsManage findings and remediation tracking across all government compliance programsCoordinate directly with engineering, security, and cloud operations teams to gather evidence, validate control implementation, and close compliance gapsSupport Gov RAMP, TX-RAMP, IRAP,



and other government or public-sector compliance programsManage day-to-day relationships with Third Party Assessment Organizations (3 PAOs) and agency stakeholdersTrack and report government program healthMonitor Fed RAMP policy changes, framework evolution, and translate changes into compliance roadmapAutomate evidence collection pipelines and indicator health trackingDemonstrated ability to run a Fed RAMP Moderate program, including SSP authorship, Con Mon execution, POA&M management, and assessor coordination Experience with GRC tooling for findings management, evidence collection, and program tracking Experience building or supporting automated compliance evidence pipelines Deep working knowledge of NIST SP 800-53 controls and their practical implementation in cloud environments4–7 years of experience in information security, compliance, or GRCAbility to track and manage multiple concurrent workstreams, surface blockers, and maintain delivery cadences Strong familiarity with Fed RAMP 20x concepts, especially Key Security Indicators (KSIs), machine-readable evidence frameworks, and continuous assessment models Demonstrated ability to coordinate across engineering, infrastructure, legal, and operations teams to gather evidence and drive remediation to closure3 years minimum in Fed RAMP program management and technical compliance Solid written and verbal communication skills to translate technical compliance information to varying audiences The ability to interpret and define KSIs in the context of Beyond Trust’s compliance posture Strong familiarity with AI security Experience with Gov RAMP, TX-RAMP, IRAP, or other public-sector compliance frameworks Experience using AI to develop and deploy applications CISSP or CISA certification Familiarity with Fed RAMP High or Do D IL4/IL5 authorization environments Background in cybersecurity product companies or multi-product Saa S environments Bachelor’s degree in information security, computer science, or a related field#J-18808-Ljbffr

📌 Government Compliance Technical Specialist (Quebec City)
🏢 BeyondTrust
📍 Quebec City