Remote FedRAMP ISSO - Cloud Compliance Leader

Cribl; Boise (ID); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental coverage

Vision coverage

Short-term disability

Paid holidays

Paid time off

Fertility treatment benefit

401(k)

Equity

Job summary

Cribl is seeking a FedRAMP ISSO to own the security posture for our Moderate authorization. You’ll drive continuous monitoring, evidence collection automation, and auditor cooperation across engineering, product, and legal teams.

You will coordinate with 3PAOs and agency customers, manage SSP changes, and ensure compliance across evolving federal guidance. Remote-first role across time zones with competitive benefits.

Qualifications

• 5+ years of information security experience, with at least 3 years in a dedicated FedRAMP ISSO or ISSE role at a Cloud Service Provider.
• Deep knowledge of NIST SP 800-53 Rev 5 and the FedRAMP Ecosystem baseline.
• Proven experience authoring and maintaining large-scale System Security Plans (SSP).
• Hands-on POA&M management experience: opening, tracking, aging, escalating, and driving findings to closure.
• End-to-end continuous monitoring experience: monthly ConMon reporting and annual 3PAO coordination.
• Experience working with 3PAOs through full assessment cycles and evidence gathering.
• Ability to leverage automation/AI to streamline compliance operations and reporting.
• Fluency to build or direct security workflows even without being an engineer.
• Familiarity with AWS GovCloud, Azure Government, or GCP.
• Strong written communication for auditor-facing documentation.
• Active security certifications: CISSP, CAP/CGRC, or CISM.

Responsibilities

• Own the FedRAMP program end-to-end as the single accountable leader for Moderate authorization.
• Maintain and defend the System Security Plan (SSP) and its control implementations.
• Drive POA&M management from finding to closure with engineering collaboration.
• Lead continuous monitoring, ConMon reporting, and vulnerability triage.
• Identify automation opportunities to streamline evidence collection and reporting cycles.
• Run annual 3PAO assessments from start to finish and coordinate with auditors.
• Assess security impact of system changes via change management processes.
• Serve as the federal point of contact with agency customers, AOs, and the FedRAMP PMO.
• Collaborate with engineering/DevOps on security controls and remediation.
• Stay aligned with evolving federal guidance (NIST/OMB/CISA) and AI governance expectations.

Skills

FedRAMP ISSO

NIST SP 800-53

SSP authoring

POA&M management

ConMon reporting

Automation tools

Cloud security

Agency relationships

Tools

OSCAl

GRC platforms

Job description

Cribl is seeking a FedRAMP ISSO to own the security posture for our Moderate authorization. You’ll drive continuous monitoring, evidence collection automation, and auditor cooperation across engineering, product, and legal teams.

You will coordinate with 3PAOs and agency customers, manage SSP changes, and ensure compliance across evolving federal guidance. Remote-first role across time zones with competitive benefits.