Senior FedRAMP ISSO: Cloud Security & Compliance Lead

Cribl; Lincoln (NE); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health, dental, vision

401(k) & equity

Paid holidays & PTO

Job summary

Cribl is seeking a FedRAMP ISSO to own and drive the security posture for our FedRAMP Moderate cloud environment. You will lead all compliance operations, automate evidence collection, and accelerate reporting, collaborating with engineering, product, and federal customers to maintain a healthy authorization.

You will manage the SSP, POA&M lifecycle, and 3PAO assessments, while ensuring alignment with NIST SP 800-53 Rev 5 and evolving guidance.

Qualifications

• Minimum 5+ years in information security with 3+ years in a dedicated FedRAMP ISSO/ISSE at a Cloud Service Provider.
• Proven ability to author and maintain large System Security Plans (SSP).
• Hands-on POA&M management across findings, remediation, and closure.
• Experience running continuous monitoring with monthly/annual reporting and 3PAO coordination.
• Proficiency with automation/AI tools to streamline evidence collection and reporting.

Responsibilities

• Own the FedRAMP program end-to-end, including SSP and continuous monitoring.
• Maintain the SSP, reflect changes, and justify automation usage to auditors.
• Lead POA&M management from finding to closure with timelines and analytics.
• Coordinate annual 3PAO assessments and auditor inquiries.
• Collaborate with engineering, product, and legal to ensure ongoing authorization health.

Skills

FedRAMP ISSO experience

NIST SP 800-53 Rev 5

POA&M management

Continuous monitoring

Automation/AI in compliance

Strong written communication

Education

CISSP

CAP/CGRC

CISM

Job description

Cribl is seeking a FedRAMP ISSO to own and drive the security posture for our FedRAMP Moderate cloud environment. You will lead all compliance operations, automate evidence collection, and accelerate reporting, collaborating with engineering, product, and federal customers to maintain a healthy authorization.

You will manage the SSP, POA&M lifecycle, and 3PAO assessments, while ensuring alignment with NIST SP 800-53 Rev 5 and evolving guidance.