FedRAMP ISSO Lead - Compliance & Security

Cribl; Olympia (WA); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health, dental, vision

Disability & life insurance

Paid holidays & PTO

Fertility treatment benefit

401(k) & equity

Remote-first culture

Job summary

Cribl seeks a FedRAMP ISSO to own the security posture for our FedRAMP Moderate cloud. You will lead the SSP, continuous monitoring, and agency relationships, driving automation and AI-assisted workflows to streamline evidence collection and reporting.

You’ll collaborate with engineering, product, and legal teams to keep the authorization healthy and customers confident, while adapting to evolving federal guidance and security requirements.

Qualifications

• 5+ years of information security experience, with 3+ years in a dedicated FedRAMP ISSO/ISSE role at a CSP.
• Deep knowledge of NIST SP 800-53 Rev 5 and the FedRAMP ecosystem baseline.
• Proven experience authoring and maintaining large-scale System Security Plans.
• Hands-on POA&M management experience: opening, tracking, aging, escalating, and closure.
• Experience running a continuous monitoring program end-to-end, including ConMon reporting.
• Experience with 3PAOs through full assessment cycles and evidence gathering.
• Ability to use automation/AI tools to improve compliance operations.
• Fluent written communication for federal auditors and stakeholders.

Responsibilities

• Own the FedRAMP program end-to-end as the single accountable leader.
• Maintain and defend the System Security Plan (SSP) and control mappings.
• Drive POA&M management from finding to closure with engineering coordination.
• Lead continuous monitoring and ConMon reporting monthly and annually.
• Identify opportunities to automate evidence collection and reporting.
• Coordinate and run annual 3PAO assessments end-to-end.
• Assess security impact of changes and ensure no unreviewed gaps.
• Serve as primary federal point of contact with agency customers.
• Collaborate with engineering/DevOps on security controls and remediation.
• Improve validation and compliance ops via secure automation and IaC.
• Coordinate security incident response with the OPS team.
• Translate evolving federal guidance into actionable team direction.

Skills

FedRAMP

NIST SP 800-53 Rev5

POA&M management

3PAO coordination

Automation

Cloud security

Strong communication

Education

Bachelor's degree in Information Security

Tools

OSCAL

Automation tooling

Job description

Cribl seeks a FedRAMP ISSO to own the security posture for our FedRAMP Moderate cloud. You will lead the SSP, continuous monitoring, and agency relationships, driving automation and AI-assisted workflows to streamline evidence collection and reporting.

You’ll collaborate with engineering, product, and legal teams to keep the authorization healthy and customers confident, while adapting to evolving federal guidance and security requirements.