FedRAMP ISSO Lead for Cloud Compliance & Automation

Cribl; Montgomery (AL); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Short-term disability

Life insurance

Paid holidays

Paid time off

Fertility treatment benefit

401(k)

Equity

Job summary

Cribl seeks a FedRAMP ISSO to own and drive our Moderate authorization, ensuring a robust, auditable security posture. You will lead SSP creation, continuous monitoring, and agency relationships while collaborating with engineering, product, and legal teams.

You will optimize evidence collection with AI-assisted workflows, oversee 3PAO assessments, and ensure timely remediation of findings in a dynamic, remote‑first environment.

Qualifications

• 5+ years information security experience with at least 3 years in FedRAMP ISSO/ISSE at a Cloud Service Provider
• Deep knowledge of NIST SP 800-53 Rev 5 and FedRAMP baseline
• Proven ability to author and maintain large System Security Plans (SSP)
• Hands‑on POA&M management experience and closure
• Experience running continuous monitoring (ConMon) end‑to‑end
• Familiarity with automation/AI tools to improve compliance operations

Responsibilities

• Own the FedRAMP program end‑to‑end: SSP, continuous monitoring, POA&M lifecycle, agency relationships.
• Maintain and defend the SSP reflecting system architecture and control implementations.
• Drive POA&M management from finding to closure with engineering coordination.
• Lead monthly ConMon reporting and annual 3PAO assessments.
• Identify opportunities to automate evidence collection and streamline reporting cycles.
• Coordinate security incident response with security operations and auditors.

Skills

FedRAMP ISSO/ISSE

NIST SP 800-53 Rev 5

SSP management

POA&M management

3PAO coordination

Automation/AI in compliance

Job description

Cribl seeks a FedRAMP ISSO to own and drive our Moderate authorization, ensuring a robust, auditable security posture. You will lead SSP creation, continuous monitoring, and agency relationships while collaborating with engineering, product, and legal teams.

You will optimize evidence collection with AI-assisted workflows, oversee 3PAO assessments, and ensure timely remediation of findings in a dynamic, remote‑first environment.