FedRAMP Information System Security Officer (ISSO)

Semperis; Austin (TX); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Semperis is seeking an Information System Security Officer (ISSO) to lead and execute FedRAMP operations. You will define certification boundaries, deploy security indicators, and deliver the automated evidence pipeline and Trust Center required for continuous assurance.

The role reports to the Head of Risk and Compliance and collaborates with Security Engineering, Product/Engineering, and Government Solutions to align Semperis with FedRAMP requirements and coordinate reviewers.

Responsibilities

• Lead and execute day-to-day FedRAMP operational work.
• Define and document the certification boundary for FedRAMP.
• Specify and deploy the mandatory KSIs and deliver the automated evidence pipeline.
• Support the FedRAMP Trust Center and Security Inbox with automated evidence 20x requirements.

Job description

At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee.

Location: Hybrid In-Office: Hoboken, NJ; Addison, TX; Phoenix, AZ; or Austin, TX

About the Role

We protect some of the world's largest, most complex hybrid identity environments, and that mission depends on earning and keeping our customers' trust. Our GRC team is the engine behind that trust, running the certification and audit programs that let security-conscious enterprises, regulated industries, and government customers confidently adopt our cloud products.

As the designated Information System Security Officer (ISSO), you will lead and execute day-to-day FedRAMP operational work at Semperis. Your role will define and document the certification boundary, specify and deploy the mandatory Key Security Indicators (KSIs), and deliver the automated evidence pipeline, FedRAMP Trust Center, and Security Inbox that FedRAMP 20x requires.

This is a hands-on, highly technical GRC role for someone who can guide how Semperis meets FedRAMP requirements and get into the details of continuous assurance automation. You will guide Semperis’s interpretation of each FedRAMP requirement and outline the implementation details directly to Semperis leadership, Security Assessors, and FedRAMP reviewers.

The role reports to the Head of Risk and Compliance, who serves as the FedRAMP Information System Security Manager (ISSM). You will work very closely with Security Engineering, Product/Engineering leadership, and Sales Government Solutions,