Remote ISSO — FedRAMP & Cloud Security Lead

Brightmine; Boca Raton (FL); Remote; USD 115,000 - 231,000; Full time

Job summary

LexisNexis Risk Solutions is seeking an experienced ISSO to lead security and compliance for FedRAMP-authorized cloud environments. You will collaborate with Engineering, Cloud Ops, DevOps, Product and Compliance to maintain authorization, continuous monitoring, and audits.

The role requires strong knowledge of FedRAMP, NIST RMF, and cloud security across AWS/Azure/GCP, plus experience in security controls, documentation, and incident response.

Qualifications

• Bachelor's degree in a related field (cybersecurity, information systems, CS or engineering) or equivalent work experience.
• 5+ years of information security or compliance experience.
• 3+ years supporting FedRAMP, FISMA, or federal compliance.
• Experience maintaining FedRAMP Moderate or High authorized environments.
• Experience with AWS, Azure, or Google Cloud.

Responsibilities

• FedRAMP Program Management: act as ISSO for FedRAMP-authorized systems and maintain ATO.
• Risk & Security Management: conduct risk assessments and monitor POA&Ms.
• Compliance & Documentation: manage SSP, SAR, POA&M and other records.
• Continuous Monitoring: oversee POA&M deliverables and security metrics.
• Security Operations & Incident Response: assist in investigations and remediation.
• Cross-Functional Collaboration: coordinate with engineering, DevOps and compliance teams.

Skills

FedRAMP knowledge

NIST 800-53

RMF

Cloud security

SIEM

IAM

Vulnerability management

Security operations

Education

Bachelor's degree in Cybersecurity or related field

Tools

SIEM

Vulnerability scanners

EDR

GRC tools

Job description

LexisNexis Risk Solutions is seeking an experienced ISSO to lead security and compliance for FedRAMP-authorized cloud environments. You will collaborate with Engineering, Cloud Ops, DevOps, Product and Compliance to maintain authorization, continuous monitoring, and audits.

The role requires strong knowledge of FedRAMP, NIST RMF, and cloud security across AWS/Azure/GCP, plus experience in security controls, documentation, and incident response.