FedRAMP ISSO Lead for Cloud Authorization & Monitoring

Cribl; Washington (District of Columbia); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Short-term disability

Life insurance

Paid holidays & PTO

Fertility treatment benefit

401(k)

Equity

Job summary

Cribl is seeking a FedRAMP ISSO to own and drive the security posture for our FedRAMP Moderate cloud environment. You will define the compliance strategy, automate evidence collection, and coordinate with engineering, product, and agency customers to keep the authorization healthy.

You will manage SSPs, POA&Ms, and ConMon, while collaborating with DevOps and security teams. This role requires strong written communication and relevant certifications, with remote-first flexibility.

Qualifications

• 5+ years of information security experience, with at least 3 years in a dedicated FedRAMP ISSO or ISSE role at a Cloud Service Provider.
• Deep knowledge of NIST SP 800-53 Rev 5 and the FedRAMP Ecosystem baseline.
• Proven experience authoring and maintaining large-scale System Security Plans (SSP).
• Hands-on POA&M management experience: opening, tracking, aging, escalating, and driving findings to closure.
• Direct experience running a continuous monitoring program end-to-end, including monthly ConMon reporting.

Responsibilities

• Own the FedRAMP program end-to-end: single accountable leader for FedRAMP Moderate authorization and related artifacts.
• Maintain and defend the SSP: ensure accuracy of architecture, controls, and automation usage within the boundary.
• Drive POA&M management from finding to closure with engineering coordination.
• Lead continuous monitoring: ConMon reporting, vulnerability review, configuration management, incident reporting.
• Identify opportunities to automate evidence collection and streamline reporting cycles.
• Run annual 3PAO assessments: documentation, logistics, evidence collection, auditor inquiries.
• Assess security impact of system changes through change management.
• Serve as primary federal point of contact with agency customers, AOs, and the FedRAMP PMO.
• Collaborate with engineering and DevOps on control implementation and remediation.
• Coordinate security incident response with the security operations team.
• Translate evolving federal guidance into actionable team direction.
• Remote-first environment with possible duties outside standard hours.

Skills

FedRAMP ISSO

NIST SP 800-53 Rev 5

SSP familiarity

POA&M management

ConMon reporting

Automation / AI tooling

Cloud security

Job description

Cribl is seeking a FedRAMP ISSO to own and drive the security posture for our FedRAMP Moderate cloud environment. You will define the compliance strategy, automate evidence collection, and coordinate with engineering, product, and agency customers to keep the authorization healthy.

You will manage SSPs, POA&Ms, and ConMon, while collaborating with DevOps and security teams. This role requires strong written communication and relevant certifications, with remote-first flexibility.