Senior FedRAMP ISSO: Cloud Compliance & Security Lead

Cribl; Atlanta (GA); Remote; USD 128,000 - 200,000; Full time

Job summary

Cribl is seeking a FedRAMP ISSO to own and drive the security posture and continuous monitoring program for our FedRAMP Moderate cloud environment. You will lead the end-to-end compliance lifecycle, including SSP maintenance, POA&M tracking, and agency relationships.

You will partner with engineering, product, and legal teams to ensure compliant, scalable operations. Ideal candidates have 5+ years in information security with FedRAMP ownership, strong written communication, and relevant

Qualifications

• 5+ years of information security experience, with at least 3 years in a dedicated FedRAMP ISSO or ISSE role at a Cloud Service Provider.
• Deep knowledge of NIST SP 800-53 Rev 5 and the FedRAMP Ecosystem baseline.
• Proven experience authoring and maintaining large-scale System Security Plans (SSP).
• Hands-on POA&M management: opening, tracking, aging, escalating, and closure.
• Experience running a continuous monitoring program end-to-end, incl. monthly ConMon reporting and annual 3PAO coordination.
• Experience working with 3PAOs for evidence gathering and auditor facilitation.
• Ability to use automation/AI to improve compliance operations and reporting workflows.
• Fluency to build or direct security automation workflows (not necessarily engineering).
• Familiarity with cloud environments; AWS GovCloud preferred, Azure Gov or GCP valued.
• Strong written communication; documents reviewed by federal auditors.
• Active security certification: CISSP, CAP/CGRC, or CISM.

Responsibilities

• Own the FedRAMP program end-to-end as the single accountable leader for FedRAMP Moderate authorization.
• Maintain and defend the System Security Plan with accurate architecture and control implementations.
• Drive POA&M management from finding to closure with remediation timelines.
• Lead continuous monitoring including ConMon reporting and security assessments.
• Coordinate annual 3PAO assessments and auditor inquiries with clear materials.
• Collaborate with engineering and DevOps on security control implementation and remediation.
• Identify automation opportunities to streamline evidence collection and reporting.

Skills

FedRAMP ISSO

SSP authoring

POA&M management

ConMon reporting

3PAO coordination

Automation tooling

NIST SP 800-53 Rev5

Cloud security

Federal comms

Security certifications

Job description

Cribl is seeking a FedRAMP ISSO to own and drive the security posture and continuous monitoring program for our FedRAMP Moderate cloud environment. You will lead the end-to-end compliance lifecycle, including SSP maintenance, POA&M tracking, and agency relationships.

You will partner with engineering, product, and legal teams to ensure compliant, scalable operations. Ideal candidates have 5+ years in information security with FedRAMP ownership, strong written communication, and relevant