Senior FedRAMP ISSO — Cloud Compliance Leader

Cribl; Madison (WI); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Short-term disability

Life insurance

Paid holidays

Paid time off

Fertility benefit

401(k) plan

Equity

Job summary

Cribl is seeking a FedRAMP ISSO to own and drive the security posture for our FedRAMP Moderate cloud authorization. You will lead the SSP, continuous monitoring, and agency relationships, shaping how compliance operates with AI-assisted workflows.

You will work across engineering, product, legal, and federal customers to keep authorization healthy. Requires extensive FedRAMP experience, strong writing, and cloud security know-how.

Qualifications

• 5+ years of information security experience with 3+ years in FedRAMP ISSO/ISSE at a cloud service provider.
• Deep knowledge of NIST SP 800-53 Rev 5 and FedRAMP baseline.
• Proven experience authoring and maintaining large SSPs with clear control mapping.
• Hands-on POA&M management from finding to closure and remediation tracking.
• Experience running a continuous monitoring program and coordinating 3PAO assessments.
• Ability to use automation, scripting, or AI to improve compliance ops.
• Fluency to guide workflows with engineers; strong written communication for auditors.
• Familiarity with AWS GovCloud, Azure Gov, or GCP in a regulated context.
• Active security certification: CISSP, CAP/CGRC, or CISM.

Responsibilities

• Own the FedRAMP program end-to-end as the accountable leader for Moderate authorization.
• Maintain and defend the System Security Plan (SSP) and its automated IA components.
• Drive POA&M management from findings to closure with scalable tracking.
• Lead monthly ConMon reporting and annual 3PAO coordination and reporting.
• Automate evidence collection and streamline reporting cycles using secure automation.
• Coordinate security incident response with the security operations team.
• Assess security impact of system changes through governance and change management.
• Serve as primary federal point of contact with agency customers and AOs.
• Collaborate with engineering/DevOps on security control implementation and scans.
• Translate evolving federal guidance into actionable team direction.

Skills

FedRAMP ISSO

NIST SP 800-53 Rev 5

SSP authoring

POA&M management

Automation & AI in compliance

3PAO coordination

Continuous monitoring

Security writing

Cloud security basics

Security certifications (CISSP/CAP/CGR

Job description

Cribl is seeking a FedRAMP ISSO to own and drive the security posture for our FedRAMP Moderate cloud authorization. You will lead the SSP, continuous monitoring, and agency relationships, shaping how compliance operates with AI-assisted workflows.

You will work across engineering, product, legal, and federal customers to keep authorization healthy. Requires extensive FedRAMP experience, strong writing, and cloud security know-how.