FedRAMP ISSO Lead — Cloud Security & Compliance

Cribl; Des Moines (IA); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental and Vision

Short-term disability

Life insurance

Paid holidays

Paid time off

Fertility treatment benefit

401(k)

Equity

Job summary

Cribl seeks a FedRAMP ISSO to own the federal authorization lifecycle from SSP through continuous monitoring. You will partner with engineering, product, legal, and agency customers to maintain a healthy authorization and confident customers.

You’ll apply deep NIST 800-53 and FedRAMP expertise, drive POA&M, and lead annual 3PAO assessments, ensuring automation and AI assist the process while staying within compliance boundaries.

Qualifications

• 5+ years of information security experience with FedRAMP ownership
• Deep knowledge of NIST SP 800-53 Rev 5 and FedRAMP baseline
• Proven experience authoring and maintaining large System Security Plans (SSP)
• Hands-on POA&M management and continuous monitoring experience

Responsibilities

• Own the FedRAMP program end-to-end including SSP and POA&M lifecycle
• Maintain and defend the System Security Plan and its controls
• Lead continuous monitoring, ConMon reporting and vulnerability triage
• Coordinate with auditors, 3PAOs, and agency customers
• Automate evidence collection and reporting using AI/tools
• Collaborate with engineering and DevOps on security controls and remediations
• Provide clear communication with federal officials and stakeholders

Skills

FedRAMP

Information security

Automation

Cloud security

Scripting

Education

CISSP

CAP/CGRC

CISM

Tools

OSCAl tooling

Automation scripting

Job description

Cribl seeks a FedRAMP ISSO to own the federal authorization lifecycle from SSP through continuous monitoring. You will partner with engineering, product, legal, and agency customers to maintain a healthy authorization and confident customers.

You’ll apply deep NIST 800-53 and FedRAMP expertise, drive POA&M, and lead annual 3PAO assessments, ensuring automation and AI assist the process while staying within compliance boundaries.