Remote FedRAMP ISSO Lead - Compliance & ConMon

Cribl; Columbia (SC); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental

Vision

Short-term disability

Life insurance

Paid holidays

Paid time off

Fertility benefit

401(k)

Equity

Job summary

Cribl is seeking a FedRAMP ISSO to own and drive the security posture for our FedRAMP Moderate cloud environment. You will lead SSP maintenance, continuous monitoring, and POA&M lifecycle, partnering with engineering, legal, and agency customers to ensure a healthy authorization and confident customers.

You will define and execute automation-driven compliance workflows, coordinate 3PAO assessments, and guide the team through evolving NIST and FedRAMP guidance.

Qualifications

• 5+ years of information security experience, with at least 3 years in a dedicated FedRAMP ISSO or ISSE role at a Cloud Service Provider.
• Deep, working knowledge of NIST SP 800-53 Rev 5 and the FedRAMP Ecosystem baseline.
• Proven experience authoring and maintaining large-scale System Security Plans (SSP).
• Hands-on POA&M management experience: opening, tracking, aging, escalating, and closure.
• Direct experience running a continuous monitoring program end-to-end, including ConMon reporting.
• Experience with automation, scripting, or AI tools to improve compliance operations.

Responsibilities

• Own the FedRAMP program end-to-end as the single accountable leader for FedRAMP Moderate authorization.
• Maintain and defend the System Security Plan ensuring it reflects architecture and control implementations.
• Drive POA&M management from findings to closure with remediation timelines.
• Lead monthly ConMon reporting and annual 3PAO assessments.
• Identify opportunities to automate evidence collection and streamline reporting cycles.
• Coordinate security incident response and agency communications per FedRAMP requirements.
• Collaborate with engineering and DevOps on control implementation and remediation.
• Translate evolving federal guidance into actionable team direction.

Skills

FedRAMP ISSO experience

NIST SP 800-53 Rev 5 knowledge

SSP authoring

POA&M management

Continuous monitoring

Automation / AI tooling

Cloud security basics

Written communication

Job description

Cribl is seeking a FedRAMP ISSO to own and drive the security posture for our FedRAMP Moderate cloud environment. You will lead SSP maintenance, continuous monitoring, and POA&M lifecycle, partnering with engineering, legal, and agency customers to ensure a healthy authorization and confident customers.

You will define and execute automation-driven compliance workflows, coordinate 3PAO assessments, and guide the team through evolving NIST and FedRAMP guidance.