FedRAMP ISSO Lead: Cloud Compliance & Automation

Cribl; Nashville (TN); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Short-term disability

Life insurance

Paid holidays

Paid time off

Fertility treatment benefit

401(k)

Equity

Job summary

Cribl is seeking a FedRAMP ISSO to own and drive our federal authorization program. You’ll lead the SSP, continuous monitoring, and agency relationships, while leveraging automation to streamline evidence collection and reporting.

You’ll collaborate with engineering, product, and legal teams to ensure compliant, secure cloud operations. Remote-first environment with time-zone collaboration across teams nationwide.

Qualifications

• 5+ years of information security experience with at least 3 years in a dedicated FedRAMP role.
• Deep knowledge of NIST SP 800-53 Rev 5 and the FedRAMP ecosystem baseline.
• Proven experience authoring and maintaining large-scale System Security Plans (SSPs).
• Hands-on POA&M management: open findings to closure.
• Experience running a continuous monitoring program end-to-end and coordinating 3PAOs.

Responsibilities

• Own the FedRAMP program end-to-end, including SSP, continuous monitoring, POA&M lifecycle, and agency relationships.
• Maintain and defend the SSP, ensuring architecture and controls reflect changes and approved automations.
• Lead POA&M management from findings to closure with scalable workflows and AI-assisted triage.
• Manage monthly ConMon reporting, vulnerability reviews, and configuration management per FedRAMP.
• Coordinate 3PAO assessments and evidence collection with auditors; ensure timely remediation.
• Assess security impact of system changes and communicate guidance to the team.
• Serve as the primary federal point of contact with agency customers and officials.
• Collaborate with engineering/DevOps on control implementation and remediation.
• Explore automation, scripting, and AI to improve compliance operations and evidence collection.
• Support incident response and ensure accurate, auditable reporting.

Skills

FedRAMP ISSO experience

NIST SP 800-53 Rev 5 knowledge

SSP authoring

POA&M management

Automation/AI for compliance

Job description

Cribl is seeking a FedRAMP ISSO to own and drive our federal authorization program. You’ll lead the SSP, continuous monitoring, and agency relationships, while leveraging automation to streamline evidence collection and reporting.

You’ll collaborate with engineering, product, and legal teams to ensure compliant, secure cloud operations. Remote-first environment with time-zone collaboration across teams nationwide.