Senior FedRAMP ISSO - Cloud Compliance Leader

Cribl; Bismarck (ND); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Short-term disability

Life insurance

Paid holidays

Paid time off

Fertility benefit

401(k)

Equity

Job summary

Cribl is seeking a FedRAMP ISSO to own and operate the federal authorization lifecycle for our cloud environment. You will drive the SSP, continuous monitoring, POA&M, and agency relationships, working closely with engineering, product, legal, and federal customers to maintain a healthy authorization and scalable security posture.

You will lead 3PAO coordination, automate evidence collection, and ensure compliant reporting across waning and new features, while aligning with evolving federal

Qualifications

• 5+ years of information security experience, with FedRAMP ISSO/ISSE focus
• Strong knowledge of NIST SP 800-53 Rev 5 and FedRAMP baseline
• Hands-on POA&M management and continuous monitoring experience
• Experience coordinating with 3PAOs and auditors
• Ability to automate compliance workflows and evidence collection

Responsibilities

• Own FedRAMP program end-to-end, SSP, continuous monitoring, & agency relationships
• Maintain and defend the System Security Plan and control implementations
• Drive POA&M management from finding to closure with engineering coordination
• Lead monthly ConMon reporting and annual 3PAO assessments
• Collaborate with engineering/DevOps to implement secure automation and IaC
• Translate federal guidance (NIST, FedRAMP, AI governance) into actionable plans

Education

CISSP / CAP / CISM certifications

Job description

Cribl is seeking a FedRAMP ISSO to own and operate the federal authorization lifecycle for our cloud environment. You will drive the SSP, continuous monitoring, POA&M, and agency relationships, working closely with engineering, product, legal, and federal customers to maintain a healthy authorization and scalable security posture.

You will lead 3PAO coordination, automate evidence collection, and ensure compliant reporting across waning and new features, while aligning with evolving federal