FedRAMP ISSO Lead - Compliance, Automation & ConMon

Cribl; Trenton (NJ); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health, Dental, Vision

Equity

Job summary

Cribl seeks a FedRAMP ISSO to own and drive the security posture for our FedRAMP Moderate cloud environment. You will manage the SSP, continuous monitoring program, POA&M lifecycle, and agency relationships, ensuring compliance across the organization.

You will lead audits, coordinate with engineering and legal, and build automated evidence collection and reporting pipelines using AI-assisted workflows to accelerate validation and reporting to federal customers.

Qualifications

• 5+ years of information security experience, with at least 3 years in a dedicated FedRAMP ISSO or ISSE role at a Cloud Service Provider
• Deep, working knowledge of NIST SP 800-53 Rev 5 and the FedRAMP Ecosystem baseline
• Proven experience authoring and maintaining large-scale System Security Plans (SSP)
• Hands-on POA&M management experience: opening, tracking, aging, escalating, closure
• Experience running a continuous monitoring program end-to-end, including monthly ConMon reporting and annual 3PAO coordination

Responsibilities

• Own the FedRAMP program end-to-end: SSP, continuous monitoring, POA&M lifecycle, agency relationships
• Maintain and defend the System Security Plan with architecture, controls, and automation use
• Drive POA&M management from finding to closure with engineering coordination
• Lead continuous monitoring, ConMon reporting, vulnerability triage, and periodic reviews
• Coordinate with 3PAOs through full assessment cycles and evidence gathering
• Automate evidence collection and reporting using secure automation and AI workflows
• Collaborate with engineering, DevOps, product, and legal on compliance posture
• Provide clear communication to agency customers and FedRAMP PMO during audits

Skills

Information security

FedRAMP ISSO experience

NIST SP 800-53 Rev5 knowledge

SSP writing

Automation / AI tooling

Security certifications

Job description

Cribl seeks a FedRAMP ISSO to own and drive the security posture for our FedRAMP Moderate cloud environment. You will manage the SSP, continuous monitoring program, POA&M lifecycle, and agency relationships, ensuring compliance across the organization.

You will lead audits, coordinate with engineering and legal, and build automated evidence collection and reporting pipelines using AI-assisted workflows to accelerate validation and reporting to federal customers.