FedRAMP Security Officer - Cloud & Compliance Lead

RELX INC; Salem (OR); Remote; USD 115,000 - 192,000; Full time

Job summary

LexisNexis Risk Solutions seeks an experienced Information System Security Officer (ISSO) to lead security and FedRAMP compliance for our cloud environment. This role partners with Engineering, Cloud Operations, DevOps, Product, and Compliance to maintain authorization and drive ongoing improvements.

You will manage continuous monitoring, audits, and security reviews, ensuring adherence to NIST 800-53, FISMA, and organizational standards in a highly regulated setting.

Qualifications

• Bachelor's degree in a relevant field or equivalent work experience.
• 5+ years of information security, cybersecurity, or compliance experience.
• 3+ years supporting FedRAMP, FISMA, or federal compliance programs.
• Experience maintaining FedRAMP Moderate or High authorized environments.
• Experience with cloud platforms such as AWS, Azure, or Google Cloud.

Responsibilities

• Act as the designated ISSO for FedRAMP-authorized systems.
• Maintain the organization's Authority to Operate (ATO) and support ongoing compliance activities.
• Lead FedRAMP continuous monitoring reporting (monthly, quarterly, annual).
• Coordinate annual assessments, independent audits, penetration testing, and security reviews with 3PAOs.
• Manage security communications with federal agencies, sponsoring organizations, and stakeholders.
• Conduct security risk assessments and vulnerability analyses.
• Review POA&M items and remediation progress.
• Ensure proper implementation of NIST 800-53 controls.
• Facilitate security reviews for architecture changes and cloud deployments.
• Maintain documentation (SSP, SAR, POA&M, etc.) and ensure audit readiness.

Education

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or related field

Job description

LexisNexis Risk Solutions seeks an experienced Information System Security Officer (ISSO) to lead security and FedRAMP compliance for our cloud environment. This role partners with Engineering, Cloud Operations, DevOps, Product, and Compliance to maintain authorization and drive ongoing improvements.

You will manage continuous monitoring, audits, and security reviews, ensuring adherence to NIST 800-53, FISMA, and organizational standards in a highly regulated setting.