Senior FedRAMP ISSO: Cloud Compliance Leader

Cribl; Sacramento (CA); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Short-term disability

Life insurance

Paid holidays

Paid time off

401(k)

Equity

Fertility treatment benefit

Job summary

Cribl seeks a FedRAMP ISSO to own our federal authorization, including the System Security Plan (SSP), continuous monitoring program, and agency relationships. You will set compliance strategy and drive execution with engineering, product, and legal teams.

You will lead automation-driven evidence collection, AI-assisted workflows, and annual reporting to keep the authorization healthy while enabling growth in a modern cloud environment.

Qualifications

• 5+ years information security with at least 3 years in a dedicated FedRAMP ISSO/ISSE role at a Cloud Service Provider.
• Deep knowledge of NIST SP 800-53 Rev 5 and the FedRAMP Ecosystem baseline.
• Proven experience authoring and maintaining large-scale System Security Plans.
• Hands-on POA&M management: opening, tracking, aging, escalation, and closure.
• Experience running a continuous monitoring program end-to-end including monthly ConMon.
• Experience with 3PAOs through full assessment cycles and evidence gathering.
• Ability to use automation/AI tools to improve compliance operations.

Responsibilities

• Own the FedRAMP program end-to-end: SSP, continuous monitoring, POA&M lifecycle, and agency relationships.
• Maintain the System Security Plan and reflect changes including automated tooling usage.
• Drive POA&M management from finding to closure with remediation timelines.
• Lead continuous monitoring and ConMon reporting monthly and annually.
• Coordinate 3PAO assessments and evidence collection with stakeholders.
• Assess security impact of system changes via change management processes.
• Serve as primary federal point of contact with agency customers and authorities.
• Collaborate with engineering/DevOps on security controls and remediation.
• Identify opportunities to automate evidence collection and reporting.
• Coordinate security incident response per FedRAMP reporting requirements.

Skills

FedRAMP

ISSO

NIST SP 800-53

POA&M management

ConMon reporting

Automation tooling

Cloud security

Cross-functional collaboration

Job description

Cribl seeks a FedRAMP ISSO to own our federal authorization, including the System Security Plan (SSP), continuous monitoring program, and agency relationships. You will set compliance strategy and drive execution with engineering, product, and legal teams.

You will lead automation-driven evidence collection, AI-assisted workflows, and annual reporting to keep the authorization healthy while enabling growth in a modern cloud environment.