FedRAMP ISSO: Cloud Security & Compliance Lead

RELX INC; Dayton (OH); On-site; USD 115,000 - 192,000; Full time

Job summary

RELX INC is seeking an experienced Information System Security Officer (ISSO) to manage FedRAMP security compliance for a cloud environment. You will partner with Engineering, Cloud Operations, DevOps, and Compliance to maintain authorization, perform continuous monitoring, and drive security improvements.

The role requires leading assessments, audits, and documentation such as SSP, SAR, and POA&M, while ensuring audit readiness and effective incident response.

Qualifications

• 5+ years in information security, cybersecurity, or compliance.
• Experience supporting FedRAMP, FISMA, or federal compliance programs.
• Experience maintaining FedRAMP Moderate or High environments.
• Experience with cloud platforms such as AWS, Azure, or Google Cloud.
• Bachelor's degree in Cybersecurity, Information Systems, or related field.

Responsibilities

• Serve as the designated ISSO for FedRAMP-authorized systems.
• Maintain the organization''s Authority to Operate (ATO) and support ongoing compliance activities.
• Lead FedRAMP continuous monitoring activities with monthly, quarterly, and annual reporting.
• Coordinate annual assessments, audits, penetration testing, and security reviews with 3PAOs.
• Manage security communications with federal agencies and stakeholders.
• Monitor security events and remediation efforts; track KPIs and report status.

Skills

FedRAMP

NIST 800-53

RMF

FISMA

Cloud security

Education

Bachelor's degree in Cybersecurity

Tools

SIEM

Vulnerability scanners

EDR

IAM

Cloud-native security services

Job description

RELX INC is seeking an experienced Information System Security Officer (ISSO) to manage FedRAMP security compliance for a cloud environment. You will partner with Engineering, Cloud Operations, DevOps, and Compliance to maintain authorization, perform continuous monitoring, and drive security improvements.

The role requires leading assessments, audits, and documentation such as SSP, SAR, and POA&M, while ensuring audit readiness and effective incident response.