FedRAMP ISSO | Hybrid Cloud Security & Compliance Lead

Semperis; Addison (TX); Hybrid; USD 140,000 - 180,000; Full time

Job summary

Semperis is seeking an experienced Information System Security Officer (ISSO) to lead FedRAMP operational work, define certification boundaries, and deliver automated evidence pipelines. You will collaborate with leadership, Security Assessors, and FedRAMP reviewers to ensure continuous compliance and proper governance.

With 6+ years in GRC and direct FedRAMP experience, you will drive cross‑functional teams, embed controls into SDLC, and manage certification packages while coordinating with

Qualifications

• 6+ years in GRC, information security compliance, or IT audit.
• FedRAMP ISSO experience on at least one Rev 5 authorization.
• Certifications: CRISC, CISM, CISA, CISSP or equivalent.
• Direct implementation of NIST SP 800-53 in a FedRAMP context.

Responsibilities

• Lead FedRAMP 20x program charter, governance and planning gates.
• Document CSO, data flows, and control mappings for certification.
• Build automated KSIs, Trust Center, and evidence pipelines.
• Embed FedRAMP controls into SDLC and cloud design.

Skills

FedRAMP ISSO

Cloud security

GRC tooling

Auditing

Education

GRC / IT audit basics

Tools

Azure

AWS

CSPM

SIEM

Job description

Semperis is seeking an experienced Information System Security Officer (ISSO) to lead FedRAMP operational work, define certification boundaries, and deliver automated evidence pipelines. You will collaborate with leadership, Security Assessors, and FedRAMP reviewers to ensure continuous compliance and proper governance.

With 6+ years in GRC and direct FedRAMP experience, you will drive cross‑functional teams, embed controls into SDLC, and manage certification packages while coordinating with