Remote FedRAMP ISSO Lead — Compliance & Cloud Security

Cribl; City of Albany (NY); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Short-term disability

Life insurance

Paid holidays

Paid time off

Fertility benefit

401(k)

Equity

Job summary

Cribl is seeking a FedRAMP ISSO to own the security posture, compliance operations, and continuous monitoring for our FedRAMP Moderate cloud. This role leads the federal authorization program and collaborates with engineering, product, legal, and government customers to keep authorization healthy.

You will design automation for evidence collection, drive 3PAO assessments, and translate evolving federal guidance into actionable security direction for a remote-first team across time zones.

Qualifications

• 5+ years information security experience, with at least 3 years in a dedicated FedRAMP ISSO/ISSE role at a Cloud Service Provider
• Deep knowledge of NIST SP 800-53 Rev 5 and FedRAMP baseline
• Proven experience authoring and maintaining large-scale System Security Plans (SSP)
• Hands-on POA&M management experience from finding to closure
• Experience running a continuous monitoring program end-to-end (ConMon)
• Experience working with 3PAOs through full assessment cycles
• Ability to use automation/AI tools to improve compliance operations
• You should be fluent enough to build/direct the required workflows (not necessarily engineering)
• Familiarity with cloud environments (AWS GovCloud preferred, Azure/GCP valued)
• Strong written communication for federal auditors and agency teams
• Active security certification: CISSP, CAP/CGRC, or CISM

Responsibilities

• Own the FedRAMP program end-to-end: single accountable leader for FedRAMP Moderate authorization
• Maintain and defend the System Security Plan (SSP) reflecting architecture and controls
• Drive POA&M management from findings to closure
• Lead continuous monitoring: ConMon reporting, vulnerability review, CM reviews
• Identify opportunities to automate evidence collection and reporting cycles
• Run annual 3PAO assessments: documentation, logistics, evidence coordination
• Assess security impact of changes to ensure no unreviewed gaps
• Serve as primary federal point of contact with agency customers and AOs
• Collaborate with engineering/DevOps on security controls and remediation
• Explore automation, IaC integration, and AI-assisted workflows
• Coordinate incident response per FedRAMP requirements
• Monitor evolving guidance (NIST, FedRAMP, OMB, CISA, NIST AI RMF)
• Support time-zone coordination and occasional after-hours duties

Skills

FedRAMP expertise

NIST SP 800-53 Rev 5

SSP authoring

POA&M management

Continuous Monitoring

3PAO coordination

Automation / AI tooling

Cloud security

Written communication

Federal agency liaison

Education

CISSP/CAP/CISM certification

Bachelor's degree in CS or related field

Tools

OSCAl tooling

Automation scripts

Security scanning tools

Job description

Cribl is seeking a FedRAMP ISSO to own the security posture, compliance operations, and continuous monitoring for our FedRAMP Moderate cloud. This role leads the federal authorization program and collaborates with engineering, product, legal, and government customers to keep authorization healthy.

You will design automation for evidence collection, drive 3PAO assessments, and translate evolving federal guidance into actionable security direction for a remote-first team across time zones.