FedRAMP ISSO Lead — Cloud Compliance & Automation

Cribl; Topeka (KS); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health insurance

401(k)

Equity

Paid holidays

Paid time off

Fertility treatment benefit

Job summary

Cribl is seeking a FedRAMP ISSO to own and drive the security posture, continuous monitoring, and FedRAMP Moderate authorization. You will lead SSP maintenance, POA&M management, and agency engagement, collaborating with engineering, product, legal, and federal customers.

You’ll leverage AI and automation to streamline evidence collection, accelerate reporting, and reduce manual effort while ensuring compliance across cloud environments. This role is remote-first with global collaboration.

Qualifications

• 5+ years information security experience with 3+ years in a dedicated FedRAMP ISSO/ISSE role.
• Deep knowledge of NIST SP 800-53 Rev 5 and FedRAMP baseline.
• Experience authoring and maintaining large System Security Plans (SSP).
• Hands-on POA&M management from finding to closure.
• Experience running a continuous monitoring program end-to-end (ConMon).
• Familiarity with automation, scripting, and AI tools to improve compliance.
• Able to communicate clearly with auditors and agency security teams.

Responsibilities

• Own the FedRAMP program end-to-end as the single accountable leader.
• Maintain and defend the System Security Plan (SSP) and controls.
• Drive POA&M management and remediation timelines with engineering.
• Lead monthly ConMon reporting and annual 3PAO coordination.
• Automate evidence collection and streamline reporting cycles.
• Coordinate security incident response per FedRAMP requirements.
• Translate evolving federal guidance into actionable team tasks.

Skills

FedRAMP

SSP

POA&M

ConMon

3PAO

Automation

Scripting

AI tooling

Tools

Automation tooling

LLMs

Cloud platforms

Job description

Cribl is seeking a FedRAMP ISSO to own and drive the security posture, continuous monitoring, and FedRAMP Moderate authorization. You will lead SSP maintenance, POA&M management, and agency engagement, collaborating with engineering, product, legal, and federal customers.

You’ll leverage AI and automation to streamline evidence collection, accelerate reporting, and reduce manual effort while ensuring compliance across cloud environments. This role is remote-first with global collaboration.