Hybrid FedRAMP ISSO — GRC & Certification Lead

Semperis; Dallas (TX); Hybrid; USD 160,000 - 210,000; Full time

Job summary

Semperis is seeking an experienced Information System Security Officer (ISSO) to lead FedRAMP 20x operations. You will define boundaries, implement KSIs, and develop an automated evidence pipeline across FedRAMP processes.

You will partner with Product, Engineering, Security, and Leadership to embed compliance into the SDLC, ensuring timely certification and ongoing governance across multiple FedRAMP programs.

Qualifications

• 6+ years of experience in GRC, information security compliance, or IT audit, including hands-on FedRAMP ISSO experience through at least one full Rev 5 authorization.
• Certifications such as CRISC, CISM, CISA, CISSP or equivalent.
• Direct implementation of NIST SP 800-53 controls within a FedRAMP authorization.
• Fluency across cloud environments (Azure, AWS) and platform security domains (IAM, encryption, vulnerability management, SIEM).
• Ability to work independently, own deliverables, and influence cross-functional teams.

Responsibilities

• Lead FedRAMP 20x program governance, milestone tracking, and stakeholder RACI alignment.
• Define FedRAMP boundary, KSIs, and evidence pipeline; collaborate with ISSM, security leadership, and product teams.
• Embed FedRAMP controls into SDLC and cloud design; validate designs and establish testable compliance criteria.
• Deliver FedRAMP Marketplace listing and 20x certification package; manage post‑certification maintenance and reporting.

Skills

GRC experience

FedRAMP ISSO

Cloud security

Stakeholder coordination

Tools

CSPM

IAM

SIEM

CI/CD

OSCAL

SOC 2

Job description

Semperis is seeking an experienced Information System Security Officer (ISSO) to lead FedRAMP 20x operations. You will define boundaries, implement KSIs, and develop an automated evidence pipeline across FedRAMP processes.

You will partner with Product, Engineering, Security, and Leadership to embed compliance into the SDLC, ensuring timely certification and ongoing governance across multiple FedRAMP programs.