FedRAMP ISSO: Cloud Security & Compliance Lead

RELX INC; Lincoln (NE); Remote; USD 115,000 - 192,000; Full time

Benefits offered by this job

Annual incentive bonus

Job summary

RELX is seeking an experienced Information System Security Officer (ISSO) to lead the security and compliance posture of our FedRAMP-authorized cloud environment. The role partners with Engineering, Cloud Operations, DevOps, Product, and Compliance to maintain authorization, monitoring, and continuous improvement.

Ideal candidates will have hands-on FedRAMP experience in Azure, AWS, or GCP, strong NIST 800-53 knowledge, and a track record of successful audits in regulated settings.

Qualifications

• 5+ years information security, cybersecurity, or compliance experience.
• Experience supporting FedRAMP, FISMA, or federal compliance programs.
• Experience maintaining FedRAMP Moderate or High environments.
• Experience with cloud platforms (AWS, Azure, Google Cloud).

Responsibilities

• Serve as ISSO for FedRAMP-authorized systems.
• Maintain Authority to Operate (ATO) and support ongoing compliance activities.
• Lead FedRAMP continuous monitoring, reporting, and audits.
• Coordinate assessments, 3PAOs, and security reviews.
• Manage security communications with federal agencies and stakeholders.
• Risk assessments and vulnerability analyses.
• Review POA&M and remediation actions.
• Ensure NISt 800-53 controls are implemented.
• Support architecture reviews and cloud deployments.

Skills

InfoSec experience

FedRAMP knowledge

NIST RMF

Vulnerability analysis

Security monitoring

Education

Bachelor's degree in Cybersecurity, IS, CS or related

Tools

SIEM

Vulnerability scanners

EDR

IAM

Cloud security tools

Job description

RELX is seeking an experienced Information System Security Officer (ISSO) to lead the security and compliance posture of our FedRAMP-authorized cloud environment. The role partners with Engineering, Cloud Operations, DevOps, Product, and Compliance to maintain authorization, monitoring, and continuous improvement.

Ideal candidates will have hands-on FedRAMP experience in Azure, AWS, or GCP, strong NIST 800-53 knowledge, and a track record of successful audits in regulated settings.