Remote FedRAMP ISSO Lead: Compliance & ConMon

Cribl; Frankfort (KY); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Short-term disability

Life insurance

Paid holidays

Paid time off

Fertility treatment benefit

401(k)

Equity

Job summary

Cribl is seeking a FedRAMP ISSO to own the security posture for our FedRAMP Moderate cloud environment, partnering with engineering, product, legal, and federal customers to keep our authorization healthy. You’ll drive the SSP, POA&M lifecycle, and continuous monitoring, leverage automation and AI to streamline evidence collection and reporting, and lead annual 3PAO assessments across the security program.

As a remote-first team across time zones, you’ll translate evolving federal guidance into

Qualifications

• 5+ years of information security experience with FedRAMP ownership
• 3+ years in a dedicated FedRAMP ISSO/ISSE role
• Deep knowledge of NIST SP 800-53 Rev 5 and FedRAMP baseline
• Proven experience authoring and maintaining large SSPs
• Hands-on POA&M management from finding to closure
• Experience running a continuous monitoring program end-to-end
• Experience with 3PAO processes and auditor facilitation
• Automation, scripting, or AI tooling to improve compliance ops
• Fluent communication, capable of influencing federal stakeholders
• Cloud environment familiarity; AWS GovCloud preferred

Responsibilities

• Own the FedRAMP program end-to-end: single accountable leader for Moderate authorization
• Maintain and defend the System Security Plan with accurate controls
• Drive POA&M management from finding to closure with remediation timelines
• Lead continuous monitoring: ConMon reporting and vulnerability review
• Automate evidence collection and streamline reporting workflows
• Run annual 3PAO assessments: prepare docs and coordinate logistics
• Assess security impact of system changes for new features
• Serve as primary federal point of contact with agencies and AOs
• Collaborate with engineering and DevOps on control implementation
• Translate evolving federal guidance into actionable team direction

Skills

FedRAMP ISSO/ISSE experience

NIST SP 800-53 Rev 5 knowledge

SSP authoring/maintenance

POA&M management

Automation / AI tooling

Cloud security fundamentals

Strong written communication

Tools

Automation tooling

Scripting

Job description

Cribl is seeking a FedRAMP ISSO to own the security posture for our FedRAMP Moderate cloud environment, partnering with engineering, product, legal, and federal customers to keep our authorization healthy. You’ll drive the SSP, POA&M lifecycle, and continuous monitoring, leverage automation and AI to streamline evidence collection and reporting, and lead annual 3PAO assessments across the security program.

As a remote-first team across time zones, you’ll translate evolving federal guidance into