Federal Compliance Analyst

Abnormal AI is seeking a Federal Compliance Analyst to join the Abnormal Gov team, supporting our FedRAMP-authorized platform and federal customer base. This role will play a critical part in maintaining Abnormal's compliance posture, driving continuous monitoring activities, and supporting federal customer onboarding. The ideal candidate is detail-oriented, experienced in government compliance frameworks, and passionate about enabling secure, compliant adoption of cutting-edge cybersecurity solutions.

• Manage compliance operations under FedRAMP Moderate, including monthly, quarterly, and annual submissions.
• Maintain POA&M records, coordinate remediation activities, and track vulnerability management workflows.
• Draft and review customer-facing compliance documentation such as control narratives, and audit responses.
• Partner with Product, Engineering, and Security teams to conduct security impact analyses (SIA) for system changes.
• Support federal POVs and onboarding by providing compliance assurance and documentation to Sales and Customer Success teams.
• Coordinate with external assessors, 3PAO, and government sponsors during audits and continuous monitoring engagements.
• Identify opportunities to automate and streamline compliance evidence collection and reporting.

• 5+ years of experience in compliance, risk, or audit roles with a focus on U.S. federal requirements (FedRAMP, FISMA, CMMC, etc.).
• Hands-on experience managing POA&M and continuous monitoring deliverables.
• Strong knowledge of NIST 800-53 security controls and their application in cloud environments.
• Demonstrated ability to write and maintain compliance documentation for technical and non-technical audiences.
• Proven cross-functional collaboration skills, especially with Product, Engineering, and Security teams.
• Experience supporting third-party audits and government authorizations.
• Excellent organizational skills and the ability to manage multiple deadlines.

• Experience with automation tools for compliance tracking and evidence management.
• Prior work with a FedRAMP-accredited 3PAO or government agency.
• Familiarity with cloud security in AWS and SaaS environments.
• Exposure to CMMC Level 2 and DoD compliance frameworks.