FedRAMP ISSO: Lead Remote Cloud Compliance

Cribl; Hartford (CT); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health benefits

Dental

Vision

Short‑term disability

Life insurance

Paid holidays

Paid time off

Fertility treatment benefit

401(k)

Equity

Job summary

Cribl is seeking a FedRAMP ISSO to own and drive security posture and compliance for our FedRAMP Moderate cloud environment. You will lead SSP, ConMon, POA&M, and agency relationships, collaborating with engineering, product, and legal teams to keep authorization healthy and customers confident.

You will define automation-driven processes to streamline evidence collection and reporting, and work across time zones as a remote-first team.

Qualifications

• 5+ years of information security experience, with at least 3 years in a dedicated FedRAMP ISSO/ISSE role at a CSP.
• Deep knowledge of NIST SP 800-53 Rev 5 and the FedRAMP baseline.
• Proven experience authoring and maintaining large‑scale System Security Plans (SSP).
• Hands‑on POA&M management experience: opening, tracking, escalation, and closure.
• Direct experience running a continuous monitoring program with monthly ConMon reporting.
• Experience working with 3PAOs through full assessment cycles.
• Ability to use automation/AI tools to improve compliance operations.
• Strong written communication for auditors and agency security teams.
• Familiarity with cloud environments; AWS GovCloud preferred, Azure/GCP valued.
• Active security certification: CISSP, CAP/CGRC, or CISM.

Responsibilities

• Own the FedRAMP program end‑to‑end: SSP, continuous monitoring, POA&M lifecycle, agency relationships.
• Maintain the SSP to reflect architecture, controls, and approved automations.
• Drive POA&M from finding to closure with remediation timelines.
• Lead continuous monitoring: ConMon reporting, vulnerability triage, config reviews.
• Automate evidence collection and reporting cycles.
• Run annual 3PAO assessments: documentation, logistics, evidence gathering.
• Assess security impact of changes via change management processes.
• Serve as the primary federal POC with agencies and AOs.
• Collaborate with Eng/DevOps on controls and remediation.
• Translate evolving guidance (NIST, FedRAMP, OMB) into team actions.
• Remote‑first role with potential off‑hours work across time zones.

Skills

FedRAMP ISSO

NIST SP 800-53 Rev 5

SSP authoring

POA&M management

Continuous Monitoring

3PAO coordination

Automation / AI tooling

Cloud security

Tools

Automation scripting

Job description

Cribl is seeking a FedRAMP ISSO to own and drive security posture and compliance for our FedRAMP Moderate cloud environment. You will lead SSP, ConMon, POA&M, and agency relationships, collaborating with engineering, product, and legal teams to keep authorization healthy and customers confident.

You will define automation-driven processes to streamline evidence collection and reporting, and work across time zones as a remote-first team.