FedRAMP ISSO: Cloud Security & Compliance Leader

RELX International; Boca Raton (FL); On-site; USD 120,000 - 210,000; Full time

Job summary

LexisNexis Risk Solutions seeks an experienced Information System Security Officer (ISSO) to lead FedRAMP compliance for a cloud environment. You will partner with Engineering, Cloud Operations, DevOps, Product, and Compliance to maintain authorization, monitor controls, and drive security improvements.

The role requires hands-on FedRAMP, NIST 800-53, FISMA experience in cloud contexts (AWS/Azure/GCP) and the ability to coordinate audits, assessments, and continuous monitoring.

Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or related field.
• 5+ years of information security, cybersecurity, or compliance experience.
• 3+ years supporting FedRAMP, FISMA, or federal compliance programs.
• Experience maintaining FedRAMP Moderate or High authorized environments.
• Experience with AWS, Azure, or Google Cloud.

Responsibilities

• Serve as the designated ISSO for FedRAMP-authorized systems and maintain ATO.
• Lead continuous monitoring and annual assessments with 3PAOs.
• Coordinate security documentation updates and audit readiness.
• Manage security communications with federal agencies and sponsors.
• Collaborate with Eng/DevOps to embed security in SDLC and cloud migrations.

Skills

FedRAMP

NIST 800-53

RMF

Cloud security

Audits & assessments

3PAO coordination

Threat monitoring

Incident response

IAM

Vulnerability management

Education

Bachelor's degree in Cybersecurity

Tools

SIEM

EDR

Cloud-native security services

IAM

Job description

LexisNexis Risk Solutions seeks an experienced Information System Security Officer (ISSO) to lead FedRAMP compliance for a cloud environment. You will partner with Engineering, Cloud Operations, DevOps, Product, and Compliance to maintain authorization, monitor controls, and drive security improvements.

The role requires hands-on FedRAMP, NIST 800-53, FISMA experience in cloud contexts (AWS/Azure/GCP) and the ability to coordinate audits, assessments, and continuous monitoring.