FedRAMP Senior Compliance Analyst (New York)

FedRAMP Senior Compliance Analyst

WalkMe, an SAP company, pioneered the Digital Adoption Platform (DAP) to enable business leaders to fully harness technology in today's complex digital landscape. By leveraging WalkMe's featuresguidance, engagement, insights, and automationemployees boost efficiency, executives gain greater visibility into digital usage, and organizations maximize their digital assets, driving successful digital transformation.

Together, SAP and WalkMe form a powerful partnership that revolutionizes the digital transformation journey. This collaboration allows businesses to unlock the full potential of SAP's robust ERP solutions while seamlessly enhancing user experience and productivity with WalkMe's intuitive digital adoption platform.

WalkMe is seeking a FedRAMP Senior Compliance Analyst to lead and mature our public-sector FedRAMP program, currently in Ready status, with the goal of achieving full Authorization (ATO) and maintaining Continuous Monitoring. This role involves authoring policies, maintaining FedRAMP documentation, coordinating evidence across engineering teams, collaborating with FedRAMP advisors and auditors to ensure successful assessments and renewals, and serving as the FedRAMP compliance focal point for R&D where U.S. citizenship is required for hands-on system operations. This position is ideal for a self-starter with a can-do attitude, strong English communication skills (oral and written) and a technical background who excels at translating NIST controls into practical engineering outcomes.

As this role will support our Federal business, U.S. Citizenship is required. Hybrid role - 2 days a week in our SAP NYC office.

What You'll Own

• Own the FedRAMP RMF lifecycle, including defining / maintaining the authorization boundary, driving control implementation evidence, writing and reviewing the System Security Plan (SSP), and managing System Assessment Plan (SAP) / System Assessment Report (SAR), Plan of Action & Milestones (POA&M), and Continuous Monitoring submissions.
• Author and maintain security and compliance policies, standards, and procedures, aligning with NIST 800-53r5 and organizational standards.
• Drive vulnerability management, including vulnerability scanning, patching cadence enforcement, and tracking remediation.
• Liaise with external FedRAMP advisors / 3PAO and authorizing stakeholders, scheduling walkthroughs, coordinating requests, and resolving findings.
• Serve as the U.S. citizenship compliance focal point for technical operations in the FedRAMP production environment.
• Collaborate with Security (GRC / AppSec / IR), Cloud Engineering / SRE, and IT teams to operationalize NIST 800-53 Rev. 5 controls and ensure traceable evidence.
• Influence engineering best practices by embedding security and compliance requirements into CI / CD pipelines, IaC, and operational processes.
• Report program status, risks, and metrics to the GRC Lead / CISO, and prepare materials for audits, renewals, and leadership reviews.
• Strong English communication skills (oral and written), with the ability to author clear policies, technical documentation, and reports.
• Positive, can-do attitude with proven ability to take ownership and drive complex initiatives to completion.
• Standard U.S. time-zone collaboration is expected, with occasional meetings with external auditors / advisors.

What You Need to Succeed

What Sets Us Apart

Nice to have

Our job titles may span more than one career level. The base salary for this position is between $100,000-$130,000. The actual base pay is dependent upon many factors, such as : location, training, transferable skills, work experience, business needs and market demands. The base pay range is subject to change and may be modified in the future. This role may also be eligible for bonus and benefits as part of our competitive total rewards package.

At WalkMe, we approach Diversity, Equity and Inclusion (DEI) with the same level of collaboration, innovation and accountability that we bring to the rest of our business. We believe in the value of diversity and are committed to ensuring an equitable and inclusive workplace where every employee has an equal opportunity to achieve success.

WalkMe does not discriminate. If a candidate requires a reasonable accommodation to complete a job application, pre-employment testing, or a job interview or to otherwise participate in the hiring process, please contact your Talent Acquisition partner immediately.

TO ALL RECRUITMENT AGENCIES : WalkMe does not accept agency resumes. Please do not forward resumes to WalkMe employees or any other company location. WalkMe is not responsible for any fees related to unsolicited resumes and will not pay fees to any third-party agency or company that does not have a signed agreement with the Company for this specific role.