FedRAMP ISSO Lead – Automation & Compliance

Cribl; Helena (MT); Remote; USD 128,000 - 200,000; Full time

Job summary

Cribl seeks a FedRAMP ISSO to own and drive the security posture for our FedRAMP Moderate cloud environment. You will lead compliance operations and automate evidence collection, partnering with engineering, product, legal, and agency customers to keep authorization healthy and customers confident.

You will manage the SSP, POA&M lifecycle, and agency relationships, coordinate 3PAO assessments, and drive continuous monitoring with AI-assisted workflows.

Qualifications

• 5+ years of information security experience, with at least 3 years in a dedicated FedRAMP ISSO or ISSE role at a Cloud Service Provider.
• Deep knowledge of NIST SP 800-53 Rev 5 and the FedRAMP Ecosystem baseline.
• Proven experience authoring and maintaining large-scale System Security Plans (SSP).
• Hands-on POA&M management: opening, tracking, aging, escalating, closure.
• Experience running a continuous monitoring program end-to-end (ConMon) and coordinating annual 3PAO assessments.
• Ability to use automation, scripting, or AI tools to improve compliance operations.
• Excellent written communication for federal auditors and agency teams.

Responsibilities

• Own the FedRAMP program end-to-end as the single accountable leader for Moderate authorization.
• Maintain and defend the System Security Plan ensuring accurate architecture and control implementations.
• Drive POA&M management from finding to closure with engineering coordination.
• Lead continuous monitoring, ConMon reporting, vulnerability review, and incident reporting per FedRAMP.
• Automate evidence collection and streamline reporting cycles with AI-assisted workflows.
• Coordinate annual 3PAO assessments from start to finish and manage documentation and auditor inquiries.
• Collaborate with engineering and DevOps on security controls and remediation.

Skills

FedRAMP knowledge

NIST SP 800-53 Rev 5

SSP development

POA&M management

3PAO coordination

Automation/AI for compliance

Cloud security

Strong written communication

Security certifications (CISSP/CAP/CIS

Education

CISSP, CAP/CGRC, or CISM

Tools

OSCAl

GRC platforms

Job description

Cribl seeks a FedRAMP ISSO to own and drive the security posture for our FedRAMP Moderate cloud environment. You will lead compliance operations and automate evidence collection, partnering with engineering, product, legal, and agency customers to keep authorization healthy and customers confident.

You will manage the SSP, POA&M lifecycle, and agency relationships, coordinate 3PAO assessments, and drive continuous monitoring with AI-assisted workflows.