Remote FedRAMP ISSO: 20x Certification Lead

VulnU; Hoboken, Addison, Austin, Phoenix (NJ, TX, TX, AZ); Hybrid; USD 150,000 - 190,000; Full time

Job summary

Semperis is seeking a FedRAMP Information System Security Officer (ISSO) to lead and execute day-to-day FedRAMP operations. You will define the certification boundary, implement KSIs, and deliver automated evidence pipelines and the FedRAMP Trust Center.

This role reports to the Head of Risk and Compliance and collaborates with Security Engineering, Product/Engineering leadership, and Sales Government Solutions.

Qualifications

• 6+ years of experience in GRC, information security compliance, or IT audit with FedRAMP ISSO experience.
• Direct implementation of NIST SP 800-53 controls within a FedRAMP authorization.
• Fluency across cloud security domains (Azure, AWS) and platform security.
• Experience managing external auditors and certification bodies through full audit cycles.

Responsibilities

• Lead FedRAMP Certification & Governance for 20x program across in-scope products.
• Define certification boundary, KSIs, evidence pipeline, and Trust Center tooling.
• Partner with Product, Engineering, and Security leadership to embed controls in SDLC.
• Coordinate with ISSM, 3PAO, and auditors to ensure timely certification and continuous compliance.

Skills

GRC & InfoSec

FedRAMP

Audit management

Cloud security

Stakeholder management

ISSO experience

Education

CRISC / CISM / CISA / CISSP

Tools

Vanta

OSCAL

IAM / SIEM tooling

Job description

Semperis is seeking a FedRAMP Information System Security Officer (ISSO) to lead and execute day-to-day FedRAMP operations. You will define the certification boundary, implement KSIs, and deliver automated evidence pipelines and the FedRAMP Trust Center.

This role reports to the Head of Risk and Compliance and collaborates with Security Engineering, Product/Engineering leadership, and Sales Government Solutions.