Hybrid FedRAMP ISSO & Compliance Lead

Semperis; Hoboken (NJ); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Hybrid work model

Global team

Job summary

Semperis is seeking an Information System Security Officer (ISSO) to lead FedRAMP 20x certification and ongoing compliance. You will define certification boundaries, deploy KSIs, and build evidence pipelines across CSPM, IAM, SIEM, CI/CD.

This is a hands-on, high-visibility role reporting to the Head of Risk and Compliance. You will collaborate with Security Engineering, Product/Engineering leadership, and Sales Government Solutions to embed controls into the SDLC and cloud design, ensuring

Qualifications

• 6+ years in GRC or IT audit, with FedRAMP ISSO experience
• Hands-on with FedRAMP Rev 5 and security controls
• Experience documenting certification boundaries and KSIs
• Ability to translate security findings to business risk for execs
• Strong writing, presentation, and collaboration with product/engineering teams
• Experience embedding compliance into SDLC and cloud design

Responsibilities

• Mobilize the FedRAMP 20x program for in-scope products and define governance
• Partner with ISSM to staff required FedRAMP roles
• Deliver a signed charter and published work plan with gates
• Design and build a machine-readable KSI evidence pipeline
• Embed FedRAMP controls into SDLC and cloud infrastructure design
• Deliver the FedRAMP marketplace listing and full 20x package
• Maintain post-certification program with ongoing reporting to FedRAMP

Skills

FedRAMP ISSO experience

GRC program management

Cloud security

Stakeholder management

Documentation & reporting

Education

CRISC

CISM

CISA

CISSP

Tools

GRC tooling

OSCAL

CSPM/IAM/SIEM tools

Vanta

Job description

Semperis is seeking an Information System Security Officer (ISSO) to lead FedRAMP 20x certification and ongoing compliance. You will define certification boundaries, deploy KSIs, and build evidence pipelines across CSPM, IAM, SIEM, CI/CD.

This is a hands-on, high-visibility role reporting to the Head of Risk and Compliance. You will collaborate with Security Engineering, Product/Engineering leadership, and Sales Government Solutions to embed controls into the SDLC and cloud design, ensuring