Senior FedRAMP ISSO | Cloud Compliance Leader

Cribl; Richmond (VA); Remote; USD 128,000 - 200,000; Full time

Job summary

Cribl is seeking a FedRAMP ISSO to own and drive our security posture for the FedRAMP Moderate cloud environment. You will lead the SSP, POA&M, and continuous monitoring, collaborating with engineering, product, and legal teams to ensure a healthy authorization and confident customers.

You will work across time zones, guiding automation, AI-assisted workflows, and secure processes while maintaining high standards for federal documentation and auditor readiness.

Qualifications

• 5+ years of information security experience, with at least 3 years in a dedicated FedRAMP ISSO or ISSE role at a Cloud Service Provider
• Deep knowledge of NIST SP 800-53 Rev 5 and the FedRAMP Ecosystem baseline
• Proven experience authoring and maintaining large-scale System Security Plans (SSP)
• Hands-on POA&M management: opening, tracking, aging, escalating to closure
• Experience running a continuous monitoring program end-to-end
• Experience working with 3PAOs through full assessment cycles
• Ability to use automation/AI tools to improve compliance operations
• Fluency to guide workflows with engineering and DevOps
• Cloud environment familiarity; AWS GovCloud preferred, Azure/GCP valued
• Strong written communication for federal auditors
• Active security certifications: CISSP, CAP/CGRC, or CISM

Responsibilities

• Own the FedRAMP program end-to-end as the single accountable leader for Moderate authorization
• Maintain and defend the System Security Plan (SSP) reflecting architecture and controls
• Drive POA&M management from finding to closure with engineering coordination
• Lead continuous monitoring including ConMon reporting and vulnerability triage
• Identify opportunities to automate evidence collection and reporting cycles
• Run annual 3PAO assessments: prepare docs, manage logistics, respond to inquiries
• Assess security impact of system changes to prevent gaps
• Serve as primary federal point of contact with agency customers and AOs
• Collaborate with engineering/DevOps on control implementation and remediation
• Explore secure automation and infrastructure-as-code for compliance
• Coordinate security incident response with the security team
• Translate evolving federal guidance into actionable team directives
• Occasionally work outside standard hours due to time-zone diversity

Skills

FedRAMP experience

Information security

SSP knowledge

POA&M management

Continuous monitoring

3PAO coordination

Automation / AI in compliance

Written communication

Cloud security basics

Security certifications (CISSP, CAP/CG

Tools

OSCAl

Job description

Cribl is seeking a FedRAMP ISSO to own and drive our security posture for the FedRAMP Moderate cloud environment. You will lead the SSP, POA&M, and continuous monitoring, collaborating with engineering, product, and legal teams to ensure a healthy authorization and confident customers.

You will work across time zones, guiding automation, AI-assisted workflows, and secure processes while maintaining high standards for federal documentation and auditor readiness.