FedRAMP ISSO Lead — Compliance & ConMon

Cribl; Harrisburg (Dauphin County); Remote; USD 128,000 - 200,000; Full time

Job summary

Cribl is hiring a FedRAMP ISSO to own the Moderate authorization and lead the security posture with a focus on automation and AI-assisted workflows.

You will partner with engineering, product, and legal, plus federal agency customers to keep the authorization healthy. This remote-first role requires 5+ years in information security with FedRAMP ownership and strong written communication.

Qualifications

• 5+ years of information security experience, with at least 3 years in a dedicated FedRAMP ISSO or ISSE role at a Cloud Service Provider.
• Deep, working knowledge of NIST SP 800-53 Rev 5 and the FedRAMP Ecosystem baseline.
• Proven experience authoring and maintaining large‑scale System Security Plans.
• Hands‑on POA&M management experience: opening, tracking, aging, escalating, and driving findings to closure.
• Direct experience running a continuous monitoring program end‑to‑end, including monthly ConMon reporting and coordination of annual 3PAO assessments.
• Experience working with 3PAOs through full assessment cycles, including evidence gathering and auditor facilitation.
• Demonstrated ability to use automation or AI tools to improve compliance operations.
• Fluent enough to build or direct these workflows.
• Familiarity with cloud environments; AWS GovCloud preferred; Azure/GCP valued.
• Strong written communication for federal auditors and agency security teams.

Responsibilities

• Own the FedRAMP program end‑to‑end: single accountable leader for FedRAMP Moderate authorization, including SSP, continuous monitoring, POA&M lifecycle, and agency relationships.
• Maintain and defend the System Security Plan: ensure SSP reflects architecture, controls, operational changes, and approved automation use.
• Drive POA&M management from finding to closure: track findings, coordinate remediation with engineering, build scalable tracking and reporting.
• Lead continuous monitoring: monthly and annual ConMon reporting, vulnerability scans, configuration reviews, and incident reporting per FedRAMP.
• Identify opportunities to automate evidence collection and streamline reporting cycles.

Skills

FedRAMP

ISSO/ISSE

NIST SP 800-53

POA&M

ConMon

3PAO coordination

Automation

Scripting

AI tools

Cloud security

Job description

Cribl is hiring a FedRAMP ISSO to own the Moderate authorization and lead the security posture with a focus on automation and AI-assisted workflows.

You will partner with engineering, product, and legal, plus federal agency customers to keep the authorization healthy. This remote-first role requires 5+ years in information security with FedRAMP ownership and strong written communication.