Senior FedRAMP ISSO - Cloud Compliance Leader

Cribl; Salem (OR); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Paid holidays & PTO

401(k) and equity

Job summary

Cribl, a remote-first B2B SaaS data observability company, seeks a FedRAMP ISSO to own the federal authorization program end-to-end. You will lead the SSP, continuous monitoring, and POA&M lifecycle, coordinating with 3PAOs, engineering, and agency customers to ensure a compliant cloud environment.

The role blends security rigor with automation to accelerate compliance processes. You will work across time zones, interfacing with product, legal, and security teams to maintain an auditable,

Qualifications

• 5+ years in information security with FedRAMP ISSO/ISSE role
• Deep knowledge of NIST SP 800-53 Rev 5 and FedRAMP baseline
• Proven SSP authoring and maintenance experience
• Hands-on POA&M management from finding to closure
• Experience with continuous monitoring and 3PAO coordination
• Ability to automate evidence collection and reporting
• Familiarity with cloud security and GovCloud/Azure/GCP
• Strong written communication for federal auditors

Responsibilities

• Own FedRAMP program end-to-end, including SSP and POA&M lifecycle
• Maintain and defend SSP reflecting architecture and controls
• Drive POA&M from finding to closure with engineering coordination
• Lead monthly ConMon reporting and annual 3PAO assessments
• Identify opportunities to automate evidence collection and reporting
• Collaborate with engineering/DevOps on security controls and remediation
• Monitor evolving federal guidance and translate into actionable team tasks

Skills

FedRAMP ISSO experience

NIST SP 800-53 Rev 5

SSP ownership

POA&M management

Continuous monitoring

3PAO coordination

Automation & AI tooling

Cloud security (AWS GovCloud, Azure, G

Technical writing

Job description

Cribl, a remote-first B2B SaaS data observability company, seeks a FedRAMP ISSO to own the federal authorization program end-to-end. You will lead the SSP, continuous monitoring, and POA&M lifecycle, coordinating with 3PAOs, engineering, and agency customers to ensure a compliant cloud environment.

The role blends security rigor with automation to accelerate compliance processes. You will work across time zones, interfacing with product, legal, and security teams to maintain an auditable,