FedRAMP ISSO Lead - Cloud Security & Compliance

Cribl; United States; Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental

Vision

Short-term disability

Life insurance

Paid holidays

Paid time off

Fertility treatment benefit

401(k)

Equity

Job summary

Cribl is seeking a FedRAMP ISSO to own the federal authorization lifecycle, drive continuous monitoring, and steward the SSP across the authorization boundary. You’ll coordinate with engineering, legal, and agency customers to keep our authorization healthy and audits smooth.

You will lead 3PAO activities, manage POA&Ms, and implement AI-assisted workflows to streamline evidence collection and reporting. Strong writing and cloud security experience are essential.

Qualifications

• 5+ years of information security experience, with at least 3 years in a dedicated FedRAMP ISSO or ISSE role at a Cloud Service Provider.
• Deep, working knowledge of NIST SP 800-53 Rev 5 and the FedRAMP Ecosystem baseline.
• Proven experience authoring and maintaining large-scale System Security Plans.
• Hands-on POA&M management: opening, tracking, aging, escalating, and driving findings to closure.
• Direct experience running a continuous monitoring program end-to-end, including monthly ConMon reporting.
• Experience with 3PAOs through full assessment cycles and evidence gathering.
• Ability to use automation/AI tools to improve compliance operations.

Responsibilities

• Own the FedRAMP program end-to-end: SSP, continuous monitoring, POA&M lifecycle, agency relationships.
• Maintain the System Security Plan reflecting architecture, controls, and AI/automation use within the boundary.
• Drive POA&M from finding to closure with engineering coordination and scalable workflows.
• Lead continuous monitoring: ConMon reporting, vulnerability triage, configuration reviews, incident reporting.
• Run annual 3PAO assessments: documentation, logistics, evidence collection, auditor responses.
• Assess security impact of system changes through change management and AI capabilities.
• Serve as primary federal point of contact with agency customers, AOs, and FedRAMP PMO.
• Collaborate with engineering/DevOps on control implementation and secure automation pipelines.
• Coordinate security incident response with the security operations team and FedRAMP reporting.
• Monitor federal guidance and translate into actionable team direction (NIST AI RMF, FedRAMP updates).
• Remote-first environment with occasional duties outside standard hours.

Skills

FedRAMP ISSO

NIST SP 800-53

SSP

POA&M

ConMon

3PAO

Automation/AI workflows

Cloud security

Written communication

Security certifications

Education

CISSP

CAP/CGRC

CISM

Tools

OSCAL

Automation tooling

Job description

Cribl is seeking a FedRAMP ISSO to own the federal authorization lifecycle, drive continuous monitoring, and steward the SSP across the authorization boundary. You’ll coordinate with engineering, legal, and agency customers to keep our authorization healthy and audits smooth.

You will lead 3PAO activities, manage POA&Ms, and implement AI-assisted workflows to streamline evidence collection and reporting. Strong writing and cloud security experience are essential.