FedRAMP ISSO: GRC & Compliance Lead (Hybrid)

Semperis; Phoenix (AZ); Hybrid; USD 150,000 - 210,000; Full time

Job summary

Semperis is seeking an experienced Information System Security Officer (ISSO) to lead FedRAMP 20x operations and continuous compliance. You will define certification boundaries, specify KSIs, and deliver automated evidence pipelines, FedRAMP Trust Center, and Security Inbox with a focus on automation and continuous assurance.

You will collaborate with ISSM, product leadership, and security teams. In this role, you will guide FedRAMP interpretation, embed controls into SDLC, manage governance,

Qualifications

• 6+ years of experience in GRC, information security compliance, or IT audit.
• At least one of CRISC, CISM, CISA, CISSP.
• Direct implementation of NIST SP 800-53 controls within a FedRAMP authorization.
• Fluency across cloud platforms (Azure, AWS) and security domains.
• Ability to work independently and manage deliverables.

Responsibilities

• Mobilize the FedRAMP 20x program for in-scope products and outline the work plan.
• Propose staffing for required FedRAMP roles and publish a project charter.
• Deliver a charter and a formal plan tracked through governance gates.
• Design and operate the FedRAMP Trust Center, Security Inbox, and evidence pipeline.
• Embed FedRAMP controls into SDLC and cloud design, validating test criteria.

Skills

GRC experience

FedRAMP ISSO

Cloud security

NIST 800-53

Auditing

Education

CRISC certification

CISM

CISA

CISSP

Tools

Azure

AWS

IAM

SIEM

OSCAL

Job description

Semperis is seeking an experienced Information System Security Officer (ISSO) to lead FedRAMP 20x operations and continuous compliance. You will define certification boundaries, specify KSIs, and deliver automated evidence pipelines, FedRAMP Trust Center, and Security Inbox with a focus on automation and continuous assurance.

You will collaborate with ISSM, product leadership, and security teams. In this role, you will guide FedRAMP interpretation, embed controls into SDLC, manage governance,