FedRAMP ISSO – AI-Driven Security & Compliance Lead

Cribl; Annapolis (MD); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental coverage

Vision coverage

Short-term disability

Life insurance

Paid holidays

Paid time off

Fertility benefit

401(k)

Equity

Job summary

Cribl seeks a senior FedRAMP ISSO to own and drive the security posture for its Moderate authorization. You’ll own the SSP, continuous monitoring, and POA&M lifecycle, coordinating with engineers, legal, and agency customers to keep the authorization healthy.

You’ll leverage automation and AI to streamline evidence collection and reporting. You’ll partner with cross-functional teams to ensure compliant change management, vulnerability triage, and annual 3PAO activities, while maintaining

Qualifications

• 5+ years of information security experience, with at least 3 years in a dedicated FedRAMP ISSO/ISSE role at a CSP.
• Deep knowledge of NIST SP 800-53 Rev 5 and the FedRAMP Ecosystem baseline.
• Proven experience authoring and maintaining large-scale System Security Plans (SSP).
• Hands-on POA&M management: open, track, escalate, and close findings.
• Experience running a continuous monitoring program end-to-end and coordinating 3PAO assessments.
• Ability to use automation, scripting, or AI tools to improve compliance ops.
• Fluency to build or direct security workflows, not necessarily as an engineer.
• Familiarity with cloud environments; AWS GovCloud preferred; Azure/GCP valued.
• Strong written communication suitable for federal auditors.

Responsibilities

• Own the FedRAMP program end-to-end as the accountable leader for FedRAMP Moderate authorization.
• Maintain and defend the System Security Plan (SSP) including automation/AI use within the boundary.
• Drive POA&M management from finding to closure with engineering coordination.
• Lead monthly ConMon reporting and annual 3PAO coordination.
• Identify opportunities to automate evidence collection and reporting cycles.
• Coordinate security incident response per FedRAMP requirements.
• Collaborate with engineering/DevOps on security control implementation and remediation.
• Translate evolving federal guidance into actionable team direction.

Skills

FedRAMP ISSSO

Information security

NIST SP 800-53

POA&M management

Continuous monitoring

Automation tools

3PAO coordination

Cloud security

Audit communication

Job description

Cribl seeks a senior FedRAMP ISSO to own and drive the security posture for its Moderate authorization. You’ll own the SSP, continuous monitoring, and POA&M lifecycle, coordinating with engineers, legal, and agency customers to keep the authorization healthy.

You’ll leverage automation and AI to streamline evidence collection and reporting. You’ll partner with cross-functional teams to ensure compliant change management, vulnerability triage, and annual 3PAO activities, while maintaining